feat(iwooos): 新增主機服務事故回讀 gate
All checks were successful
Code Review / ai-code-review (push) Successful in 18s
CD Pipeline / tests (push) Successful in 1m41s
CD Pipeline / build-and-deploy (push) Successful in 5m21s
CD Pipeline / post-deploy-checks (push) Successful in 2m49s

This commit is contained in:
Your Name
2026-06-15 20:01:14 +08:00
parent c641d1b2a0
commit abda0ef617
16 changed files with 3572 additions and 55 deletions

View File

@@ -17920,7 +17920,7 @@
},
"coverage": {
"label": "平均成熟度",
"detail": "owner response acceptance 與前台 source guard 推進後平均控管成熟度為 70%。"
"detail": "host service 事故回讀 gate 納入後,平均控管成熟度為 71%。"
},
"runtimeGate": {
"label": "執行期",
@@ -17934,7 +17934,7 @@
},
"dockerSystemd": {
"title": "Docker / systemd 主機服務",
"body": "只讀清冊、負責人回覆驗收主機服務變更證據驗收已納入 9 個範圍;目前只讀成熟度 62%26 個審查檢查項、10 條結果分流、39 類禁止動作Docker daemon、compose、systemd、失敗單元、port binding、路由恢復與操作通知驗收仍全部為 0。"
"body": "只讀清冊、負責人回覆驗收主機服務變更證據驗收與事故後回讀計畫已納入 9 個範圍;目前只讀成熟度 64%28 個審查檢查項、10 條結果分流、41 類禁止動作Docker daemon、compose、systemd、失敗單元、port binding、public/admin route、AI provider、監控告警、跨專案同步、防再發與 no-false-green 驗收仍全部為 0。"
},
"aiProvider": {
"title": "AI 供應商 / 模型路由",

View File

@@ -17920,7 +17920,7 @@
},
"coverage": {
"label": "平均成熟度",
"detail": "owner response acceptance 與前台 source guard 推進後平均控管成熟度為 70%。"
"detail": "host service 事故回讀 gate 納入後,平均控管成熟度為 71%。"
},
"runtimeGate": {
"label": "執行期",
@@ -17934,7 +17934,7 @@
},
"dockerSystemd": {
"title": "Docker / systemd 主機服務",
"body": "只讀清冊、負責人回覆驗收主機服務變更證據驗收已納入 9 個範圍;目前只讀成熟度 62%26 個審查檢查項、10 條結果分流、39 類禁止動作Docker daemon、compose、systemd、失敗單元、port binding、路由恢復與操作通知驗收仍全部為 0。"
"body": "只讀清冊、負責人回覆驗收主機服務變更證據驗收與事故後回讀計畫已納入 9 個範圍;目前只讀成熟度 64%28 個審查檢查項、10 條結果分流、41 類禁止動作Docker daemon、compose、systemd、失敗單元、port binding、public/admin route、AI provider、監控告警、跨專案同步、防再發與 no-false-green 驗收仍全部為 0。"
},
"aiProvider": {
"title": "AI 供應商 / 模型路由",

View File

@@ -2087,12 +2087,12 @@ const highValueConfigOwnerPacketSummary = [
const highValueConfigControlCoverageSummary = [
{ key: 'categories', value: '14', icon: ListChecks, tone: 'steady' },
{ key: 'c0', value: '8', icon: AlertTriangle, tone: 'warn' },
{ key: 'coverage', value: '70%', icon: ShieldCheck, tone: 'warn' },
{ key: 'coverage', value: '71%', icon: ShieldCheck, tone: 'warn' },
{ key: 'runtimeGate', value: '0', icon: Lock, tone: 'locked' },
] as const
const highValueConfigControlCoverageItems: HighValueConfigControlCoverageItem[] = [
{ key: 'dockerSystemd', rank: 'P1-1', value: '62%', icon: Server, tone: 'warn' },
{ key: 'dockerSystemd', rank: 'P1-1', value: '64%', icon: Server, tone: 'warn' },
{ key: 'sshNetwork', rank: 'P1-2', value: '64%', icon: Network, tone: 'warn' },
{ key: 'aiProvider', rank: 'P1-3', value: '64%', icon: Cloud, tone: 'warn' },
{ key: 'k8sGitops', rank: 'P1-4', value: '64%', icon: Workflow, tone: 'warn' },
@@ -2104,8 +2104,8 @@ const highValueConfigControlCoverageBoundaries = [
'high_value_config_control_coverage_category_count=14',
'high_value_config_control_coverage_c0_category_count=8',
'high_value_config_control_coverage_c1_category_count=4',
'high_value_config_control_coverage_average_percent=70',
'high_value_config_control_coverage_needs_live_evidence_count=10',
'high_value_config_control_coverage_average_percent=71',
'high_value_config_control_coverage_needs_live_evidence_count=9',
'high_value_config_control_coverage_owner_response_required_count=14',
'high_value_config_control_coverage_owner_response_received_count=0',
'high_value_config_control_coverage_owner_response_accepted_count=0',
@@ -2231,6 +2231,28 @@ const highValueConfigControlCoverageBoundaries = [
'host_service_change_evidence_acceptance_public_route_recovery_accepted_count=0',
'host_service_change_evidence_acceptance_operator_notification_accepted_count=0',
'host_service_change_evidence_acceptance_runtime_gate_count=0',
'host_service_post_incident_readback_plan_candidate_count=9',
'host_service_post_incident_readback_plan_write_capable_candidate_count=3',
'host_service_post_incident_readback_plan_live_evidence_required_candidate_count=8',
'host_service_post_incident_readback_plan_required_readback_field_count=28',
'host_service_post_incident_readback_plan_reviewer_check_count=28',
'host_service_post_incident_readback_plan_outcome_lane_count=10',
'host_service_post_incident_readback_plan_blocked_action_count=41',
'host_service_post_incident_readback_plan_post_incident_readback_received_count=0',
'host_service_post_incident_readback_plan_post_incident_readback_accepted_count=0',
'host_service_post_incident_readback_plan_docker_daemon_state_accepted_count=0',
'host_service_post_incident_readback_plan_compose_stack_state_accepted_count=0',
'host_service_post_incident_readback_plan_systemd_unit_state_accepted_count=0',
'host_service_post_incident_readback_plan_failed_unit_review_accepted_count=0',
'host_service_post_incident_readback_plan_port_binding_state_accepted_count=0',
'host_service_post_incident_readback_plan_public_route_recovery_accepted_count=0',
'host_service_post_incident_readback_plan_admin_route_recovery_accepted_count=0',
'host_service_post_incident_readback_plan_agent_provider_health_accepted_count=0',
'host_service_post_incident_readback_plan_monitoring_alert_accepted_count=0',
'host_service_post_incident_readback_plan_operator_notification_accepted_count=0',
'host_service_post_incident_readback_plan_cross_project_sync_accepted_count=0',
'host_service_post_incident_readback_plan_no_false_green_accepted_count=0',
'host_service_post_incident_readback_plan_runtime_gate_count=0',
'ssh_network_access_inventory_surface_count=16',
'ssh_network_access_inventory_write_capable_surface_count=6',
'ssh_network_access_inventory_runtime_gate_count=0',