From acce5eff287317e4b7eb1f2472f791b90dc916d3 Mon Sep 17 00:00:00 2001 From: Your Name Date: Mon, 15 Jun 2026 12:54:24 +0800 Subject: [PATCH] =?UTF-8?q?docs(security):=20=E6=96=B0=E5=A2=9E=20monitori?= =?UTF-8?q?ng=20owner=20response=20acceptance=20[skip=20ci]?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- docs/LOGBOOK.md | 31 + .../HIGH-VALUE-CONFIG-CONTROL-COVERAGE.md | 2 + .../IWOOOS-CONFIG-CONTROL-INVENTORY.md | 3 + .../MONITORING-OWNER-REQUEST-DRAFT.md | 6 + .../MONITORING-OWNER-RESPONSE-ACCEPTANCE.md | 122 + .../SECURITY-SUPPLY-CHAIN-PROGRESS.md | 10 +- ...alue-config-control-coverage.snapshot.json | 18 +- ...ng-owner-response-acceptance.snapshot.json | 11154 ++++++++++++++++ ...-04-15-MASTER-ai-autonomous-flywheel-v2.md | 14 + ...026-06-04-iwooos-security-governance-p0.md | 2 +- .../high-value-config-control-coverage.py | 13 +- .../security/iwooos-config-control-guard.py | 22 +- .../monitoring-owner-response-acceptance.py | 385 + .../security-mirror-progress-guard.py | 221 +- 14 files changed, 11985 insertions(+), 18 deletions(-) create mode 100644 docs/security/MONITORING-OWNER-RESPONSE-ACCEPTANCE.md create mode 100644 docs/security/monitoring-owner-response-acceptance.snapshot.json create mode 100644 scripts/security/monitoring-owner-response-acceptance.py diff --git a/docs/LOGBOOK.md b/docs/LOGBOOK.md index b6cdbb0dc..95e894de6 100644 --- a/docs/LOGBOOK.md +++ b/docs/LOGBOOK.md @@ -1,3 +1,34 @@ +## 2026-06-15｜Monitoring / Alerting / Observability owner response acceptance 只讀帳本 + +**背景**：Monitoring / Alerting / Observability 已有 repo-only 清冊與 owner request draft，但仍缺少「owner 回覆收件後如何驗收、哪些欄位必填、哪些證據可接受、哪些動作必須阻擋」的固定帳本。這會讓 Prometheus / Alertmanager / Grafana / SigNoz / Sentry / Langfuse / OTEL / Telegram 告警鏈路在後續收件時，可能被誤判成 reload、receiver route change、silence change、Telegram send 或 alert chain smoke 授權。 + +**完成項目**： +- 新增 `scripts/security/monitoring-owner-response-acceptance.py`，承接 `monitoring_alerting_observability_inventory_v1` 與 `monitoring_owner_request_draft_v1`，產生 `monitoring_owner_response_acceptance_v1`。 +- 新增 `docs/security/monitoring-owner-response-acceptance.snapshot.json`，固定 `acceptance_candidate_count=60`、`write_capable_acceptance_candidate_count=11`、`live_evidence_required_candidate_count=60`、`acceptance_field_count=30`、`required_owner_field_count=14`、`reviewer_check_count=15`、`outcome_lane_count=7`、`blocked_action_count=28`。 +- 新增 `docs/security/MONITORING-OWNER-RESPONSE-ACCEPTANCE.md`，說明 owner response 必填欄位、reviewer checks、outcome lanes、blocked actions、完成度與 `0 / false` 邊界。 +- `scripts/security/iwooos-config-control-guard.py`、`scripts/security/security-mirror-progress-guard.py` 與 `scripts/security/high-value-config-control-coverage.py` 已同步鎖住新 artifact；Monitoring / Alerting / Observability 只讀成熟度從 `62%` 推進到 `66%`，高價值配置平均只讀成熟度從 `68%` 推進到 `69%`。 +- `docs/security/MONITORING-OWNER-REQUEST-DRAFT.md`、`docs/security/IWOOOS-CONFIG-CONTROL-INVENTORY.md`、`docs/security/HIGH-VALUE-CONFIG-CONTROL-COVERAGE.md`、`docs/security/SECURITY-SUPPLY-CHAIN-PROGRESS.md`、P0 workplan 與 MASTER artifact / changelog 已同步。 + +**本地驗證**： +- `python3 scripts/security/monitoring-owner-response-acceptance.py --root . --owner-request-report docs/security/monitoring-owner-request-draft.snapshot.json --output docs/security/monitoring-owner-response-acceptance.snapshot.json --generated-at 2026-06-15T09:20:00+08:00` → `MONITORING_OWNER_RESPONSE_ACCEPTANCE_OK candidates=60 write_capable=11 checks=15 lanes=7 accepted=0 runtime_gate=0`。 +- `python3 -m py_compile scripts/security/monitoring-owner-response-acceptance.py scripts/security/iwooos-config-control-guard.py scripts/security/security-mirror-progress-guard.py scripts/security/high-value-config-control-coverage.py` 通過。 +- `python3 -m json.tool docs/security/monitoring-owner-response-acceptance.snapshot.json` 通過。 +- `python3 -m json.tool docs/security/high-value-config-control-coverage.snapshot.json` 通過。 +- `python3 scripts/security/iwooos-config-control-guard.py --root .` → `IWOOOS_CONFIG_CONTROL_GUARD_OK`。 +- `python3 scripts/security/security-mirror-progress-guard.py --root .` → `SECURITY_MIRROR_PROGRESS_GUARD_OK`。 +- `python3 scripts/security/source-control-owner-response-guard.py --root .` → `SOURCE_CONTROL_OWNER_RESPONSE_GUARD_OK`。 +- `python3 scripts/security/package-supply-chain-owner-policy-guard.py --root .` → `PACKAGE_SUPPLY_CHAIN_OWNER_POLICY_GUARD_OK`。 +- `python3 scripts/ops/doc-secrets-sanity-check.py docs .gitea` → `DOC_SECRET_SANITY_OK scanned_files=867`。 +- `git diff --check` 通過。 + +**完成度與邊界**： +- Monitoring / Alerting / Observability owner response acceptance：`0% -> 100%`。 +- Monitoring / Alerting / Observability 只讀治理成熟度：`62% -> 66%`。 +- 高價值配置平均只讀治理成熟度：`68% -> 69%`。 +- IwoooS headline 維持 `64%`；active runtime gate 維持 `0`。 +- owner response received / accepted / rejected、live evidence、Prometheus reload、Alertmanager reload、Grafana import、SigNoz apply、Sentry deploy、Langfuse config change、OTEL reload、receiver route change、silence change、Telegram send、live alert fire、alert chain smoke、secret collection、host write、production write、runtime gate 與 action button 全部維持 `0 / false`。 +- 本輪未 SSH、未讀 live conf、未改主機、未重啟 Prometheus / Alertmanager / Grafana / SigNoz / Sentry / Langfuse / OTEL、未修改 Telegram Bot、未發送告警、未執行 live alert、未改 receiver route / silence policy、未收 secret 明文、未執行 active scan、未 force push。 + ## 2026-06-15｜AwoooP Tenants 前台身份與內部識別最小化補強 **背景**：`/zh-TW/awooop/tenants` 曾在 production 高可見區塊暴露個人 owner namespace、外部 org namespace、完整英文產品 / repo 名稱、raw source-control 狀態碼與 `blockers` 類內部數值。這不符合 IwoooS 前台資安原則：公開頁只可呈現脫敏範圍、只讀證據狀態與低摩擦治理邊界；個人識別、完整 repo namespace、內部狀態碼、schema id、工作視窗溝通內容與可被誤讀為 runtime 授權的字串不得進入前台或 client bundle。 diff --git a/docs/security/HIGH-VALUE-CONFIG-CONTROL-COVERAGE.md b/docs/security/HIGH-VALUE-CONFIG-CONTROL-COVERAGE.md index ddb700098..e6c1e1d7d 100644 --- a/docs/security/HIGH-VALUE-CONFIG-CONTROL-COVERAGE.md +++ b/docs/security/HIGH-VALUE-CONFIG-CONTROL-COVERAGE.md @@ -284,6 +284,8 @@ python3 scripts/security/iwooos-config-control-guard.py --root . 2026-06-14 再新增 `monitoring_owner_request_draft_v1`，把 60 個 surface 轉成 `request_draft_count=60`、`write_capable_request_draft_count=11`、`live_evidence_required_request_count=60`、`required_owner_field_count=14`、`blocked_action_count=24` 的人工送件前草稿。此更新仍不調高類別成熟度，因為 request sent、owner response received / accepted、live evidence、reload、receiver route change、silence change、Telegram send、alert chain smoke、runtime gate 與 action button 仍全部為 `0`。 +2026-06-15 再新增 `monitoring_owner_response_acceptance_v1`，把 60 份 request draft 轉成 `acceptance_candidate_count=60`、`write_capable_acceptance_candidate_count=11`、`live_evidence_required_candidate_count=60`、`required_owner_field_count=14`、`reviewer_check_count=15`、`outcome_lane_count=7`、`blocked_action_count=28` 的 owner response acceptance 只讀帳本。此更新讓 `monitoring_alerting_observability` 從 `62%` 推進到 `66%`，高價值配置平均成熟度從 `68%` 推進到 `69%`；但 owner response received / accepted / rejected、live evidence、reload、receiver route change、silence change、Telegram send、alert chain smoke、runtime gate 與 action button 仍全部為 `0`。 + ## 12. P0 Public Gateway Preflight 清冊更新 `public_gateway_preflight_inventory_v1` 已把 Nginx public gateway reload / route change 前置 Gate 固定成只讀清冊，共 `3` 份 source config、`14` 個 route impact、`14` 個 unique upstream、`12` 個 preflight gate，其中 `2` 個 gate 只代表 repo-only ready，`10` 個 gate 仍需 owner acceptance。此更新讓 `nginx_public_gateway` 從 `78%` 推進到 `84%`；owner response、owner-provided live conf、rendered diff、`nginx -t` evidence、route smoke、maintenance window、rollback owner、runtime gate 與 action button 仍全部為 `0`。 diff --git a/docs/security/IWOOOS-CONFIG-CONTROL-INVENTORY.md b/docs/security/IWOOOS-CONFIG-CONTROL-INVENTORY.md index e5f5fcd3d..5c24ea439 100644 --- a/docs/security/IWOOOS-CONFIG-CONTROL-INVENTORY.md +++ b/docs/security/IWOOOS-CONFIG-CONTROL-INVENTORY.md @@ -97,6 +97,8 @@ 2026-06-14 已新增 `monitoring_owner_request_draft_v1`，把 60 個 monitoring / alerting / observability surface 轉成人工送件前 owner request draft。固定 `drafts=60`、`write_capable=11`、`live_evidence_required=60`、`owner_fields=14`、`blocked_actions=24`，但 request sent、owner response received / accepted、live evidence、reload、receiver route change、silence change、Telegram send、alert chain smoke、host write、runtime gate 仍全部為 `0 / false`。 +2026-06-15 已新增 `monitoring_owner_response_acceptance_v1`，將 60 份 owner request draft 轉成 owner response acceptance 只讀帳本。固定 `candidates=60`、`write_capable=11`、`live_evidence_required=60`、`owner_fields=14`、`reviewer_checks=15`、`outcome_lanes=7`、`blocked_actions=28`，讓 monitoring / alerting / observability 類別成熟度從 `62%` 推進到 `66%`；但 owner response received / accepted / rejected、live evidence、reload、receiver route change、silence change、Telegram send、alert chain smoke、host write、runtime gate 仍全部為 `0 / false`。 + ### 0.6 2026-06-12 Public Gateway Preflight repo-only 清冊 `public_gateway_preflight_inventory_v1` 已把 Nginx public gateway reload / route change 前置 Gate 固定成只讀 snapshot。清冊目前共有 `3` 份 Nginx source config、`2` 份 C0 source config、`14` 個 route impact、`14` 個 unique upstream、`10` 條 TLS certificate path、`4` 個 certificate owner 確認缺口、`7` 個 ACME challenge domain、`1` 個 admin route domain、`6` 個 WebSocket route domain 與 `12` 個 preflight gate，讓 Nginx public gateway 類別成熟度從 `78%` 推進到 `84%`。 @@ -245,6 +247,7 @@ Nginx 是目前必須最先資安控管的配置，原因是它同時控制公 | Backup / restore / escrow owner response acceptance | `100%` | 已新增 `backup_restore_owner_response_acceptance_v1`，38 個 candidate、27 個 write-capable、13 個 reviewer checks、7 條 outcome lanes、22 類 blocked action；成熟度 `58% -> 62%` | | Monitoring / alerting / observability 清冊 | `100%` | 已新增 `monitoring_alerting_observability_inventory_v1`，納入 60 個 repo-only surface；成熟度 `56% -> 62%` | | Monitoring / alerting / observability owner request draft | `100%` | 已將 60 個 monitoring surface 轉成 owner request draft；request sent / received / accepted、reload、receiver route change、Telegram send、alert chain smoke 仍為 0 | +| Monitoring / alerting / observability owner response acceptance | `100%` | 已新增 `monitoring_owner_response_acceptance_v1`，60 個 candidate、11 個 write-capable、15 個 reviewer checks、7 條 outcome lanes、28 類 blocked action；成熟度 `62% -> 66%` | | owner packet 前台只讀接入 | `100%` | `/zh-TW/iwooos` 已顯示高價值配置 owner packet 草案、C0/C1 packet 數、request / received / accepted 仍為 0 與禁止執行邊界 | | owner response request / received / accepted | `0%` | Packet 只是草案；尚未送件、尚未收件、尚未 reviewer accepted | | agent-bounty-protocol owner request draft | `100%` | 已將 repo / refs、deployment、data classification、external agent / treasury 與 7 個 product surface 轉成 11 份 owner request draft；claim / submit、payout、cron / daemon、runtime gate 仍為 0 | diff --git a/docs/security/MONITORING-OWNER-REQUEST-DRAFT.md b/docs/security/MONITORING-OWNER-REQUEST-DRAFT.md index 8a6fe1492..54876f5c6 100644 --- a/docs/security/MONITORING-OWNER-REQUEST-DRAFT.md +++ b/docs/security/MONITORING-OWNER-REQUEST-DRAFT.md @@ -125,3 +125,9 @@ python3 scripts/security/source-control-owner-response-guard.py --root . ## 8. 邊界 這份 owner request draft 不是資安批准、不是 runtime approval、不是 alert chain smoke proof，也不是 live monitoring truth。不得把 request draft、snapshot、IwoooS UI、AwoooP approval、LOGBOOK 或 committed source visibility 解讀成 Prometheus reload、Alertmanager reload、Grafana import、SigNoz apply、Sentry deploy、Langfuse change、OTEL reload、receiver route change、silence change、Telegram send、live alert fire、alert chain smoke、SSH、kubectl、active scan、secret collection、host write 或 production write 授權。 + +## 9. 2026-06-15 owner response acceptance 只讀帳本 + +2026-06-15 已新增 `docs/security/MONITORING-OWNER-RESPONSE-ACCEPTANCE.md` 與 `docs/security/monitoring-owner-response-acceptance.snapshot.json`，把本文件的 60 份 request draft 轉成 owner response acceptance 只讀帳本。固定 `candidates=60`、`write_capable=11`、`live_evidence_required=60`、`owner_fields=14`、`reviewer_checks=15`、`outcome_lanes=7`、`blocked_actions=28`；owner response received / accepted / rejected、live evidence、reload、receiver route change、silence change、Telegram send、alert chain smoke、host write、runtime gate 與 action button 仍全部為 `0 / false`。 + +這份 acceptance ledger 只定義未來 owner response 如何收件、隔離、拒收、補件或進 monitoring reviewer review；不代表 request sent、owner response received / accepted、Prometheus reload、Alertmanager reload、Grafana import、SigNoz apply、Sentry deploy、Langfuse change、OTEL reload、receiver route change、Telegram send、live alert fire、alert chain smoke 或 runtime gate。 diff --git a/docs/security/MONITORING-OWNER-RESPONSE-ACCEPTANCE.md b/docs/security/MONITORING-OWNER-RESPONSE-ACCEPTANCE.md new file mode 100644 index 000000000..45d69144b --- /dev/null +++ b/docs/security/MONITORING-OWNER-RESPONSE-ACCEPTANCE.md @@ -0,0 +1,122 @@ +# IwoooS Monitoring / Alerting / Observability owner response acceptance + +| 項目 | 內容 | +|------|------| +| 日期 | 2026-06-15 | +| 狀態 | `owner_response_acceptance_ledger_ready_no_runtime_action` | +| 工具 | `scripts/security/monitoring-owner-response-acceptance.py` | +| Snapshot | `docs/security/monitoring-owner-response-acceptance.snapshot.json` | +| Source inventory | `docs/security/monitoring-alerting-observability-inventory.snapshot.json` | +| Source owner request | `docs/security/monitoring-owner-request-draft.snapshot.json` | +| runtime gate | `0` | + +## 1. 目的 + +本文件把 Monitoring / Alerting / Observability owner request draft 轉成 owner response acceptance 只讀帳本。目的不是 reload Prometheus / Alertmanager，也不是送 Telegram 或 fire alert，而是固定未來收到 owner 回覆後，必須如何做欄位完整性、脫敏證據、receiver / route smoke、noise budget、maintenance window、rollback 與 validation plan 檢查。 + +本階段仍是 metadata-only acceptance ledger：不連 live Prometheus、不 reload Alertmanager、不套用 Grafana / SigNoz、不部署 Sentry、不改 Langfuse、不 reload OTEL、不改 receiver route、不建立 silence、不送 Telegram、不 fire live alert、不跑 alert chain smoke、不 SSH、不 kubectl、不讀 secret value、不寫 production。 + +## 2. 摘要 + +| 指標 | 目前值 | 說明 | +|------|--------|------| +| acceptance candidate | `60` | 全部由 committed owner request draft 轉換 | +| write-capable candidate | `11` | 可能 reload、deploy、send notification、fire alert 或 restart exporter 的 surface | +| live evidence required candidate | `60` | 每份 candidate 都需要 owner 提供脫敏 live evidence ref | +| acceptance field | `30` | 每份候選固定欄位數 | +| required owner field | `14` | owner 必須補齊的欄位數 | +| reviewer check | `15` | 收件、隔離、拒收、補件與 reviewer 分流檢查 | +| outcome lane | `7` | 等待、隔離、拒收、補件、review、只讀更新、runtime gate 等結果 | +| blocked action | `28` | 驗收前全部禁止 | +| request sent / recipient confirmed | `0 / 0` | 尚未送件，收件人也未確認 | +| owner response received / accepted / rejected | `0 / 0 / 0` | 不得假性拉高 | +| live evidence / reload / receiver / route smoke accepted | `0 / 0 / 0 / 0` | 未授權、未執行 | +| Telegram send / alert chain smoke / runtime gate | `0 / 0 / 0` | 無發送、無實測、無執行入口 | + +## 3. Reviewer 檢查 + +| 檢查 | 說明 | +|------|------| +| owner 身分 | owner role / team 必須可追溯 | +| decision / reason | 判定與理由必須同時存在，且不得包含機敏值 | +| affected scope | 必須能對回 committed `surface_id` | +| redacted evidence | 只能是脫敏 ref、hash、ticket、commit 或 artifact pointer | +| secret absence | 不得出現 token、Bot token、DSN secret、cookie、private key、env dump 或 partial secret | +| live config hash | 只能是 owner-provided metadata ref，不得貼 raw config | +| reload owner | reload / deploy 類變更必須有 owner | +| receiver owner | receiver route、Telegram receipt 與 notification policy 必須有 owner | +| route smoke plan | route smoke / receipt proof 必須是計畫或脫敏證據 ref，不得直接 fire alert | +| noise budget | 告警噪音、silence、dedup 與測試通知必須有 owner | +| maintenance window | reload、deploy、route change、smoke 或 notification send 必須另有窗口 | +| rollback owner | rollback owner、rollback ref 或 disable path 必須存在 | +| validation plan | 必須列 route、receipt、alert state、metrics 與 rollback stop condition | +| execution request | 夾帶 reload、receiver route change、Telegram send、alert smoke、SSH 或 kubectl 要求時拒收 | +| count transition | 只有 reviewer record 可更新 received / accepted / rejected；不得同時開 runtime gate | + +## 4. 禁止動作 + +```text +prometheus_reload +alertmanager_reload +grafana_dashboard_apply +signoz_rule_apply +sentry_deploy +langfuse_config_change +otel_collector_reload +receiver_route_change +silence_policy_change +telegram_send +notification_route_change +webhook_receiver_change +remote_write_change +exporter_deploy +live_alert_fire +alert_chain_smoke +ssh_read +ssh_write +kubectl_action +secret_value_collection +host_write +active_scan +production_write +runtime_gate_open +raw_monitoring_payload_storage +accept_secret_value_evidence +mark_owner_response_accepted_without_reviewer_record +add_action_button +``` + +## 5. 指令 + +固定 committed snapshot 時間： + +```bash +python3 scripts/security/monitoring-owner-response-acceptance.py \ + --root . \ + --owner-request-report docs/security/monitoring-owner-request-draft.snapshot.json \ + --output docs/security/monitoring-owner-response-acceptance.snapshot.json \ + --generated-at 2026-06-15T09:20:00+08:00 +``` + +只讀 guard： + +```bash +python3 scripts/security/iwooos-config-control-guard.py --root . +python3 scripts/security/security-mirror-progress-guard.py --root . +python3 scripts/security/source-control-owner-response-guard.py --root . +``` + +## 6. 完成度 + +| 工作 | 完成度 | 說明 | +|------|--------|------| +| owner response acceptance artifact | `100%` | 60 份 candidate、snapshot、文件與 guard 已固定 | +| request dispatch | `0%` | 尚未送件，recipient 未確認 | +| owner response received / accepted | `0%` | 尚未收到或接受任何 owner response | +| live evidence collection | `0%` | 未讀 live monitoring stack | +| reload / receiver / Telegram / alert chain smoke | `0%` | 未授權、未執行 | +| runtime / production write | `0%` | 無 action button，無 production write | + +## 7. 邊界 + +這份帳本不是 live alert chain truth、不是 Telegram delivery proof、不是 reload approval，也不是 monitoring runtime approval。不得把 owner response acceptance ledger、snapshot、LOGBOOK、IwoooS UI 或 AwoooP approval 解讀成 Prometheus reload、Alertmanager reload、Grafana import、SigNoz apply、Sentry deploy、Langfuse change、OTEL reload、receiver route change、silence change、Telegram send、live alert fire、alert chain smoke、SSH、kubectl、active scan、secret collection、host write 或 production write 授權。 diff --git a/docs/security/SECURITY-SUPPLY-CHAIN-PROGRESS.md b/docs/security/SECURITY-SUPPLY-CHAIN-PROGRESS.md index 0816dcc46..d2f1e57a2 100644 --- a/docs/security/SECURITY-SUPPLY-CHAIN-PROGRESS.md +++ b/docs/security/SECURITY-SUPPLY-CHAIN-PROGRESS.md @@ -3,17 +3,23 @@ | 項目 | 內容 | |------|------| | 日期 | 2026-06-15 | -| 狀態 | IwoooS 64% 只讀治理推進中；高價值配置集中 guard、Package / Docker 供應鏈 repo-only baseline 與 Package / Docker 供應鏈 owner policy gate 已完成；CD / Runner / Secret 注入變更證據驗收與 Public / Admin / API runtime config 變更證據驗收只讀帳本已本地完成；端口 / 防火牆變更證據驗收與 K8s / ArgoCD GitOps 變更證據驗收已正式部署驗證；S4.9 owner response gate 仍是第一優先 | +| 狀態 | IwoooS 64% 只讀治理推進中；高價值配置集中 guard、Package / Docker 供應鏈 repo-only baseline 與 Package / Docker 供應鏈 owner policy gate 已完成；Monitoring / Alerting / Observability owner response acceptance、CD / Runner / Secret 注入變更證據驗收與 Public / Admin / API runtime config 變更證據驗收只讀帳本已本地完成；端口 / 防火牆變更證據驗收與 K8s / ArgoCD GitOps 變更證據驗收已正式部署驗證；S4.9 owner response gate 仍是第一優先 | | 本階段完成 | 資安供應鏈 contract manifest + Source Control Approval Board + Draft Reconcile Plan + Ref Detail Diff + Ref Truth Classification + Source Control Ref Truth Owner Response 收件包 + GitHub Primary Readiness Gate + GitHub Primary Rollback ADR + GitHub Target Owner Decision Response 收件包 + Gitea 認證清冊匯出請求 + Gitea 認證清冊匯入驗收契約 + Gitea 清冊覆蓋 Owner Attestation + Gitea Owner Attestation Approval Lane 對齊 + Gitea Owner Attestation Response 收件包 + Workflow / Secret Name Inventory + Workflow / Secret Name Local Evidence + Workflow / Secret Name Redacted Export Request + Workflow / Secret Name Owner Response 收件包 + Source Control Owner Response Validation Rollup + Kali 112 live integration status + Security Finding contract + Kali scan scope approval package + Security Approval Queue + S3 人工批准 Gate + S3 人工決策紀錄 + S3 人工審查封包 + S3 人工決策狀態轉移 + S3 後續 runtime gate 準備契約 + 鏡像 readiness index + 鏡像接收計畫 + 鏡像事件信封 + 鏡像路由矩陣 + 鏡像驗收契約 + 鏡像隔離契約 + 鏡像 dry-run 報告契約 + 鏡像狀態彙整契約 + IwoooS 前端態勢入口 + IwoooS posture projection contract + IwoooS 既有前端資安頁面整合 + IwoooS 覆蓋與邊界矩陣 + IwoooS 只讀資安處理旅程 + IwoooS owner evidence readiness board + IwoooS host coverage view + IwoooS host action gate matrix + IwoooS host evidence readiness board + IwoooS host evidence collection order + IwoooS host evidence intake preflight + IwoooS host evidence review outcome lanes + IwoooS host evidence review handoff packets + IwoooS host evidence reviewer checklist + IwoooS host evidence reviewer outcome lanes + IwoooS host owner decision candidate packets + IwoooS host owner decision review checklist + IwoooS host owner decision review outcome lanes + IwoooS host owner decision record draft packets + IwoooS host owner decision record draft review checklist + IwoooS host owner decision record draft review outcome lanes + IwoooS host owner decision record write-up packets + IwoooS host owner decision record write-up review checklist + IwoooS host owner decision record write-up review outcome lanes + IwoooS host owner decision record formal candidate packets + IwoooS host owner decision record formal candidate review checklist + IwoooS host owner decision record formal candidate review outcome lanes + IwoooS host owner decision record formal record queue packets + IwoooS host owner decision record formal record queue review checklist + IwoooS host owner decision record formal record queue review outcome lanes + IwoooS host owner decision record human handoff readiness packets + IwoooS host owner decision record human handoff readiness review checklist + IwoooS host owner decision record human handoff readiness review outcome lanes + IwoooS host owner decision record human record owner review candidate packets + IwoooS host owner decision record human record owner review candidate checklist + IwoooS host owner decision record human record owner review candidate outcome lanes + IwoooS host owner decision record human record owner review preparation packets + IwoooS host owner decision record human record owner review preparation checklist + IwoooS progress acceleration lanes + IwoooS owner response next-action focus + IwoooS S4.9 owner response preflight + IwoooS S4.9 owner response request templates + IwoooS progress hold movement gates + IwoooS AwoooP read-only landing readiness + IwoooS AwoooP cross-session handoff packets + AwoooP 首頁 IwoooS 資安鏡像候選 + AwoooP 工作鏈路 IwoooS 資安鏡像候選 + AwoooP 審批佇列 IwoooS owner response 只讀焦點 | | 本階段追加 | AwoooP 合約儀表板 IwoooS 資安契約只讀候選 + AwoooP 租戶管理 IwoooS 資安租戶範圍只讀候選 + AwoooP 執行監控 IwoooS 執行狀態只讀候選 + 既有安全 / 合規頁面 IwoooS 只讀反向橋接 + 告警 / 錯誤 / 授權 / 治理頁面 IwoooS 只讀反向橋接 + 稽核 / 工程審查頁面 IwoooS 深色只讀反向橋接 + IwoooS 前端資安頁面連接狀態板 + IwoooS GitHub 主要來源就緒度只讀狀態板 + AwoooP 工作鏈路 GitHub 主要來源就緒度只讀工作項 + AwoooP 合約儀表板 GitHub 主要來源就緒度合約只讀候選 + AwoooP 審批佇列 GitHub 主要來源就緒度審批邊界 + AwoooP 首頁 GitHub 主要來源就緒度只讀摘要 + AwoooP 租戶管理 GitHub 主要來源就緒度租戶範圍 + AwoooP 執行監控 GitHub 主要來源就緒度執行邊界 + IwoooS / AwoooP 資安可視區塊繁體中文呈現防護檢查 + AwoooP 執行詳情 / 審批詳情繁體中文呈現防護檢查 + AwoooP 首頁負責人回覆驗收總覽 + AwoooP 工作鏈路負責人回覆驗收只讀工作項 + AwoooP 合約儀表板負責人回覆驗收契約只讀候選 + AwoooP 審批佇列負責人回覆驗收只讀審查邊界 + AwoooP 租戶管理負責人回覆驗收租戶範圍 + AwoooP 執行監控負責人回覆驗收執行邊界 + AwoooP 執行詳情負責人回覆驗收詳情邊界 + AwoooP 審批決策負責人回覆驗收審批邊界 + IwoooS AwoooP 資安入口覆蓋狀態板 + IwoooS 階段式資安收斂節奏圖 + IwoooS 下一步人工收件作戰板 + IwoooS 人工回覆安全驗收閘道 + IwoooS 人工回覆審查結果分流 + IwoooS 人工決策準備佇列 + IwoooS 人工決策紀錄草稿防誤用 + IwoooS 人工決策正式紀錄負責人指派確認準備包 + IwoooS 人工決策正式紀錄負責人指派確認清單 + IwoooS 人工決策正式紀錄負責人指派確認結果分流 + IwoooS 人工決策正式紀錄負責人指派決策準備包 + IwoooS 人工決策正式紀錄負責人指派決策檢查清單 + IwoooS S4.9 負責人回覆封套欄位 + IwoooS S4.9 負責人回覆封套送件前檢查 + IwoooS S4.9 負責人回覆封套送件前結果分流 + IwoooS S4.9 負責人回覆送件請求草稿 + IwoooS S4.9 負責人回覆送件鏈路摘要 + IwoooS 低摩擦分階段收斂主控 + IwoooS 低摩擦下一步行動邊界 + IwoooS 64% 進度移動訊號驗收條 + IwoooS 第一個進度解鎖路徑 + IwoooS 第一解鎖證據包 + IwoooS 第一解鎖證據包預檢分流 + IwoooS 第一解鎖證據包補件路徑 + IwoooS 第一解鎖證據包補件送審前檢查 + IwoooS 第一解鎖證據包補件送審結果分流 + IwoooS 第一解鎖證據包 reviewer 指派準備包 + IwoooS 第一解鎖證據包 reviewer 指派前檢查 + IwoooS 第一解鎖證據包 reviewer 指派前檢查結果分流 + IwoooS 正式只讀 landing 與 Kali 112 只讀證據進度重估 | | 本階段追加補充 | IwoooS 目前具體工作地圖 + IwoooS 目前具體交付清單 + IwoooS 目前阻塞與解除條件 + IwoooS 三軸進度與全產品套用範圍 + IwoooS 全產品分階段套用台帳 + IwoooS 全產品 rollout 波次驗收門檻 + IwoooS 全產品 rollout 驗收結果分流 + IwoooS 全產品證據接線地圖 + IwoooS 全產品證據接線預檢 + IwoooS 全產品證據接線預檢結果分流 + IwoooS 全產品預檢補件回收台帳 + IwoooS 全產品補件重試門檻 + IwoooS 全產品重試結果分流 + IwoooS 全產品人工審查候選準備 + IwoooS 全產品人工審查候選預檢 + IwoooS 全產品人工審查候選預檢結果分流 + IwoooS 全產品人工審查候選預檢補件回收台帳 + IwoooS 全產品人工審查候選預檢補件重試門檻 + IwoooS 全產品只讀套用快照 + P2-145 owner response acceptance gate 正式驗證完成 | | P0 追加 | IwoooS P0 配置控管優先序前台正式驗證完成；Nginx public gateway、DNS / TLS / certbot、K8s / ArgoCD / production manifests、Workflow / runner / secret metadata、Public / admin / API runtime config、agent-bounty runtime / treasury 六類先列為即時風險配置；高價值配置 Gate 已補上 `k8s/nginx/**`、`scripts/ops/**/*cert*`、`scripts/ops/**/*tls*`，sample 從 `matched=0 / C0=0` 收斂到 `matched=3 / C0=2`；Gate 預設工作樹 preflight 已可讀取 staged / unstaged / untracked，本地 smoke 對臨時 `k8s/nginx/*` 檔命中 C0；Owner Packet snapshot 已同步為 `packets=3 / c0=2`，Coverage snapshot 已同步最新 patterns；IwoooS / AwoooP 前台 Owner Packet 摘要已正式驗證 `packet=3 / c0=2`，feature commit `e999c16b`、deploy marker `16c6b983`、Gitea code-review `2973` / CD `2972` success；IwoooS posture projection snapshot / schema / guard 已同步 `packet=3 / c0=2`，不再保留舊 `1 / 0` 口徑；高價值配置 Owner Packet 收件預檢已新增 `checks=9 / lanes=5 / required_fields=27 / blocked_requests=16`；高價值配置 Owner Request 草稿包已新增 `drafts=3 / handoff_fields=11 / forbidden_payloads=12 / sent=0`；Public Gateway live conf 匯出請求包已新增 `requests=3 / c0=2 / redaction_rules=8 / received=0`；Public Gateway redacted export 收件預檢已新增 `candidates=3 / c0=2 / checks=10 / rejection_guards=12 / received=0 / accepted=0`；Public Gateway rendered diff / nginx gate 草稿已新增 `candidates=3 / c0=2 / stages=7 / blocked=14 / rendered_diff=0 / runtime=0`；Public Gateway owner response acceptance 只讀帳本已新增 `candidates=3 / c0=2 / fields=12 / checks=12 / lanes=7 / blocked=18 / accepted=0 / runtime=0`；DNS / TLS / certbot Owner Confirmation Request 已新增 `requests=4 / c0=4 / fields=9 / questions=5 / guards=12 / received=0 / accepted=0`；K8s / ArgoCD manifest repo-only 清冊已新增 `files=49 / c0=36 / yaml=45 / kinds=20 / blocked=13 / runtime=0`；K8s / ArgoCD Owner Request Draft 已新增 `drafts=4 / c0=3 / fields=11 / sent=0 / runtime=0`；K8s / ArgoCD owner response acceptance 只讀帳本已新增 `candidates=4 / c0=3 / fields=11 / checks=12 / lanes=7 / blocked=18 / accepted=0 / runtime=0`；K8s / ArgoCD GitOps 變更證據驗收已新增 `candidates=4 / c0=3 / write_capable=4 / evidence_fields=18 / checks=18 / lanes=8 / blocked=28 / accepted=0 / runtime=0`；CD / Runner / Secret 注入變更證據驗收已新增 `candidates=5 / c0=4 / write_capable=5 / workflow_files=33 / secret_names=42 / runner_labels=5 / evidence_fields=19 / checks=19 / lanes=8 / blocked=32 / accepted=0 / runtime=0`；Public / Admin / API runtime config 變更證據驗收已新增 `candidates=6 / c0=5 / write_capable=6 / source_refs=20 / evidence_fields=21 / checks=21 / lanes=8 / blocked=32 / accepted=0 / runtime=0`，並把 raw namespace、repo slug、內部狀態碼與內部協作內容外洩列為拒收 / 隔離；Backup / Restore / Escrow owner response acceptance 只讀帳本已新增 `candidates=38 / write_capable=27 / fields=14 / checks=13 / lanes=7 / blocked=22 / accepted=0 / runtime=0`；SSH / Firewall / Network Access owner response acceptance 只讀帳本已新增 `candidates=16 / write_capable=6 / fields=13 / checks=15 / lanes=7 / blocked=22 / accepted=0 / runtime=0`；端口 / 防火牆變更證據驗收只讀帳本已新增 `candidates=14 / write_capable=6 / policy_or_exposure=5 / evidence_fields=16 / checks=16 / lanes=8 / blocked=24 / accepted=0 / runtime=0`；owner response / live evidence / runtime gate / action buttons 仍全部為 0 | | P0 agent-bounty 追加 | agent-bounty-protocol Owner Request Draft 已新增 `drafts=11 / control=4 / surface=7 / write_capable=8 / treasury=4 / mcp_a2a=5 / fields=22 / forbidden_inputs=25 / blocked=28 / sent=0 / runtime=0`；這是 repo / refs、deployment、data classification、MCP / A2A、cron / daemon、admin / treasury、webhook / traffic 的人工送件前草稿，不是 owner response、repo push、refs sync、workflow 修改、secret 收集、deploy、compose restart、DB migration、claim / submit、payout / withdrawal、cron / daemon、external send、host write 或 runtime gate | -| P1 追加 | Docker / systemd / Host Service Owner Request Draft 已新增 `drafts=9 / write_capable=3 / fields=12 / blocked=14 / sent=0 / runtime=0`；SSH / Firewall / Network Access Owner Request Draft 已新增 `drafts=16 / write_capable=6 / fields=13 / blocked=16 / sent=0 / runtime=0`；Backup / Restore / Escrow Owner Request Draft 已新增 `drafts=38 / write_capable=27 / fields=14 / blocked=18 / sent=0 / runtime=0`；Backup / Restore / Escrow Owner Response Acceptance 已新增 `candidates=38 / write_capable=27 / reviewer_checks=13 / lanes=7 / blocked=22 / accepted=0 / runtime=0`；Monitoring / Alerting / Observability Owner Request Draft 已新增 `drafts=60 / write_capable=11 / fields=14 / blocked=24 / sent=0 / runtime=0`；上述全部仍是人工送件前草稿或只讀 acceptance 帳本，不是 owner response、live evidence、reload、restart、backup、restore、Telegram send、alert smoke、host write 或 runtime gate | +| P1 追加 | Docker / systemd / Host Service Owner Request Draft 已新增 `drafts=9 / write_capable=3 / fields=12 / blocked=14 / sent=0 / runtime=0`；SSH / Firewall / Network Access Owner Request Draft 已新增 `drafts=16 / write_capable=6 / fields=13 / blocked=16 / sent=0 / runtime=0`；Backup / Restore / Escrow Owner Request Draft 已新增 `drafts=38 / write_capable=27 / fields=14 / blocked=18 / sent=0 / runtime=0`；Backup / Restore / Escrow Owner Response Acceptance 已新增 `candidates=38 / write_capable=27 / reviewer_checks=13 / lanes=7 / blocked=22 / accepted=0 / runtime=0`；Monitoring / Alerting / Observability Owner Request Draft 已新增 `drafts=60 / write_capable=11 / fields=14 / blocked=24 / sent=0 / runtime=0`；Monitoring / Alerting / Observability Owner Response Acceptance 已新增 `candidates=60 / write_capable=11 / live_evidence_required=60 / fields=30 / owner_fields=14 / reviewer_checks=15 / lanes=7 / blocked=28 / accepted=0 / runtime=0`；上述全部仍是人工送件前草稿或只讀 acceptance 帳本，不是 owner response、live evidence、reload、restart、backup、restore、Telegram send、alert smoke、host write 或 runtime gate | | P2 供應鏈追加 | Package / Docker 供應鏈 repo-only baseline 已新增 `package_json=6 / pyproject=4 / requirements=2 / dockerfiles=2 / compose=6 / gaps=5 / runtime=0`；Package / Docker 供應鏈 owner policy gate 已新增 `requests=6 / c0=2 / fields=8 / checks=12 / blocked=20 / sent=0 / accepted=0 / runtime=0`；缺口為 Python lockfile 缺席、requirements 未 pin、Docker base image 未全數 digest pinning、Docker `COPY --from` 外部 image 未 digest pinning、compose image 未 digest pinning，以及 CVE / license / SBOM window 未定；目前尚未列入 36 個正式 AwoooP 消費 contract，後續若要前台消費需同步 manifest / readiness / route / rollup / dry-run / posture projection / guard count；本輪不 install、不 upgrade、不跑 CVE、不 pull / build / push image、不改 tag、不登入 registry、不部署 | | 原則 | 低摩擦分階段；文件、schema、read-only evidence 優先；不做 runtime enforcement、不切 primary | | P0 主控板 | `docs/workplans/2026-06-04-iwooos-security-governance-p0.md` | +## 0.00aaaaaa 2026-06-15 Monitoring / Alerting / Observability owner response acceptance + +本輪把 Prometheus、Alertmanager、Grafana、SigNoz、Sentry、Langfuse、OTEL、receiver route、silence policy、Telegram Bot 與 alert chain smoke 從 owner request draft 推進到 owner response acceptance 只讀帳本：`monitoring_owner_response_acceptance_v1` 固定 `candidates=60`、`write_capable=11`、`live_evidence_required=60`、`acceptance_fields=30`、`owner_fields=14`、`reviewer_checks=15`、`outcome_lanes=7`、`blocked_actions=28`，並讓 `monitoring_alerting_observability` 只讀治理成熟度 `62% -> 66%`，高價值配置平均只讀成熟度 `68% -> 69%`。這是 owner response 收件驗收帳本，不是 owner response received / accepted / rejected、Prometheus reload、Alertmanager reload、Grafana import、SigNoz apply、Sentry deploy、Langfuse change、OTEL reload、receiver route change、silence change、Telegram send、live alert fire、alert chain smoke、runtime approval package 或 runtime gate。 + +同步邊界：IwoooS headline 維持 `64%`，active runtime gate 維持 `0`；owner response、live evidence、reload、receiver route、silence policy、Telegram Bot、alert smoke、secret collection、host write、production write、runtime gate 與 action buttons 全部仍為 `0 / false`。本段只更新文件、snapshot、guard、覆蓋矩陣與 workplan，不讀 live conf、不改告警規則、不 reload 服務、不送 Telegram、不打 live alert、不部署。 + ## 0.00aaaaa 2026-06-15 Public / Admin / API runtime config 變更證據驗收 本輪把公開產品頁、AwoooP 後台、API / CORS、frontend env、Sentry tunnel、webhook / callback 與跨產品 runtime route 從 policy-ready 推進到變更證據驗收只讀帳本：`public_runtime_config_change_evidence_acceptance_v1` 固定 `candidates=6`、`c0=5`、`c1=1`、`write_capable=6`、`source_refs=20`、`required_evidence_fields=21`、`reviewer_checks=21`、`outcome_lanes=8`、`blocked_actions=32`，並讓 `public_admin_api_runtime_config` 只讀治理成熟度 `62% -> 64%`，高價值配置平均只讀成熟度仍維持 `68%`。這是 metadata-only 收件驗收，不是 affected route accepted、admin/auth boundary accepted、API readback accepted、CORS diff accepted、frontend env diff accepted、i18n redaction accepted、desktop/mobile smoke accepted、sensitive scan accepted、runtime approval package、route / CORS / env / auth / webhook 變更、frontend / API deploy、production deploy 或 runtime gate。 diff --git a/docs/security/high-value-config-control-coverage.snapshot.json b/docs/security/high-value-config-control-coverage.snapshot.json index 9d8c1812d..c7f8b1ce2 100644 --- a/docs/security/high-value-config-control-coverage.snapshot.json +++ b/docs/security/high-value-config-control-coverage.snapshot.json @@ -325,17 +325,21 @@ "action_buttons_allowed": false, "category_id": "monitoring_alerting_observability", "control_tier": "C1", - "coverage_percent": 62, - "coverage_status": "repo_only_inventory_ready_needs_live_route_evidence", - "current_gap": "repo-only 清冊已納入 60 個 monitoring / alerting / observability surface；仍缺 live config hash、rule diff、receiver diff、reload owner、route smoke、receipt proof 與 owner response。", + "coverage_percent": 66, + "coverage_status": "owner_response_acceptance_ledger_ready_needs_live_route_evidence", + "current_gap": "已固定 60 份 monitoring / alerting / observability owner response acceptance candidate；仍缺 owner response、live config hash、rule diff、receiver diff、reload owner、route smoke、receipt proof、noise budget owner 與 maintenance window。", "evidence_refs": [ "docs/security/IWOOOS-CONFIG-CONTROL-INVENTORY.md", "docs/security/MONITORING-ALERTING-OBSERVABILITY-INVENTORY.md", "docs/security/monitoring-alerting-observability-inventory.snapshot.json", + "docs/security/MONITORING-OWNER-REQUEST-DRAFT.md", + "docs/security/monitoring-owner-request-draft.snapshot.json", + "docs/security/MONITORING-OWNER-RESPONSE-ACCEPTANCE.md", + "docs/security/monitoring-owner-response-acceptance.snapshot.json", "docs/schemas/monitoring_alerting_observability_inventory_v1.schema.json" ], "label": "Prometheus / Alertmanager / Grafana / SigNoz / Sentry / Langfuse", - "next_owner_action": "補 Prometheus / Alertmanager / Grafana / SigNoz / Sentry / Langfuse / Telegram owner、live drift evidence、reload window、receiver owner、rollback owner 與 no-secret-value evidence。", + "next_owner_action": "補 Prometheus / Alertmanager / Grafana / SigNoz / Sentry / Langfuse / Telegram owner、live drift evidence、reload window、receiver owner、route smoke plan、noise budget、rollback owner 與 no-secret-value evidence。", "owner_response_accepted": false, "owner_response_received": false, "owner_response_required": true, @@ -630,8 +634,8 @@ "websocket_route_change_authorized": false, "workflow_modification_authorized": false }, - "generated_at": "2026-06-15T04:20:00+08:00", - "git_commit": "77a76d1a", + "generated_at": "2026-06-15T09:24:00+08:00", + "git_commit": "802c4e5a", "lowest_coverage_categories": [ { "category_id": "docker_compose_systemd_host_config", @@ -686,7 +690,7 @@ "status": "coverage_matrix_ready", "summary": { "action_button_count": 0, - "average_coverage_percent": 68, + "average_coverage_percent": 69, "c0_category_count": 8, "c1_category_count": 4, "c2_category_count": 1, diff --git a/docs/security/monitoring-owner-response-acceptance.snapshot.json b/docs/security/monitoring-owner-response-acceptance.snapshot.json new file mode 100644 index 000000000..26cad8aea --- /dev/null +++ b/docs/security/monitoring-owner-response-acceptance.snapshot.json @@ -0,0 +1,11154 @@ +{ + "acceptance_candidates": [ + { + "acceptance_candidate_id": "monitoring_owner_response_acceptance:prometheus_k8s_base_config", + "acceptance_fields": [ + "acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "owner_response_ref", + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "action_buttons_allowed": false, + "active_scan_authorized": false, + "affected_scope": "pending_owner_response", + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "add_action_button" + ], + "config_kind": "prometheus_config", + "control_tier": "C1", + "decision": "pending_owner_response", + "decision_reason": "pending_owner_response", + "expected_scope": "k8s_monitoring_prometheus_base", + "exporter_deploy_authorized": false, + "followup_owner": "pending_owner_response", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "kubectl_action_authorized": false, + "label": "K8s Prometheus base config", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "live_config_hash_accepted": false, + "live_config_hash_ref": null, + "live_evidence_received": false, + "maintenance_window": "pending_owner_response", + "maintenance_window_accepted": false, + "noise_budget_owner": "pending_owner_response", + "noise_budget_owner_accepted": false, + "not_approval": true, + "notification_route_change_authorized": false, + "observability_scope": [ + "scrape config", + "service discovery", + "alert rule includes" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_owner_response", + "quarantine_secret_or_raw_payload", + "reject_execution_request", + "request_supplement", + "ready_for_monitoring_review", + "owner_review_only_update", + "waiting_runtime_gate" + ], + "owner_response_accepted": false, + "owner_response_quarantined": false, + "owner_response_received": false, + "owner_response_ref": null, + "owner_response_rejected": false, + "owner_role_or_team": "pending_owner_response", + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "receiver_owner": "pending_owner_response", + "receiver_owner_accepted": false, + "receiver_route_change_authorized": false, + "recipient_confirmed": false, + "redacted_evidence_refs": [], + "reload_owner": "pending_owner_response", + "reload_owner_accepted": false, + "remote_write_change_authorized": false, + "repo_sha256": "5ea5ec736686dabb05bff0691dd45196eae4d2ab645c14b3f812748186ad6da9", + "repo_source_path": "k8s/monitoring/prometheus.yml", + "request_id": "monitoring_owner_request:prometheus_k8s_base_config", + "request_sent": false, + "required_owner_fields": [ + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "followup_owner" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "owner_identity_present", + "decision_reason_present", + "affected_scope_matches_surface", + "redacted_refs_only", + "secret_value_absent", + "live_config_hash_metadata_only", + "reload_owner_present", + "receiver_owner_present", + "route_smoke_plan_present", + "noise_budget_owner_present", + "maintenance_window_present", + "rollback_owner_present", + "validation_plan_present", + "no_runtime_request", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_owner_response", + "rollback_owner": "pending_owner_response", + "rollback_owner_accepted": false, + "route_smoke_accepted": false, + "route_smoke_plan": "pending_owner_response", + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_policy_change_authorized": false, + "source_line_count": 208, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "status": "waiting_owner_response", + "supplement_requested": false, + "surface_id": "prometheus_k8s_base_config", + "telegram_send_authorized": false, + "validation_plan": "pending_owner_response", + "validation_plan_accepted": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "acceptance_candidate_id": "monitoring_owner_response_acceptance:prometheus_k8s_additions_config", + "acceptance_fields": [ + "acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "owner_response_ref", + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "action_buttons_allowed": false, + "active_scan_authorized": false, + "affected_scope": "pending_owner_response", + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "add_action_button" + ], + "config_kind": "prometheus_config", + "control_tier": "C1", + "decision": "pending_owner_response", + "decision_reason": "pending_owner_response", + "expected_scope": "k8s_monitoring_prometheus_additions", + "exporter_deploy_authorized": false, + "followup_owner": "pending_owner_response", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "kubectl_action_authorized": false, + "label": "K8s Prometheus additions", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "live_config_hash_accepted": false, + "live_config_hash_ref": null, + "live_evidence_received": false, + "maintenance_window": "pending_owner_response", + "maintenance_window_accepted": false, + "noise_budget_owner": "pending_owner_response", + "noise_budget_owner_accepted": false, + "not_approval": true, + "notification_route_change_authorized": false, + "observability_scope": [ + "supplemental scrape", + "additional rule paths" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_owner_response", + "quarantine_secret_or_raw_payload", + "reject_execution_request", + "request_supplement", + "ready_for_monitoring_review", + "owner_review_only_update", + "waiting_runtime_gate" + ], + "owner_response_accepted": false, + "owner_response_quarantined": false, + "owner_response_received": false, + "owner_response_ref": null, + "owner_response_rejected": false, + "owner_role_or_team": "pending_owner_response", + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "receiver_owner": "pending_owner_response", + "receiver_owner_accepted": false, + "receiver_route_change_authorized": false, + "recipient_confirmed": false, + "redacted_evidence_refs": [], + "reload_owner": "pending_owner_response", + "reload_owner_accepted": false, + "remote_write_change_authorized": false, + "repo_sha256": "67bd6ef7b9da39fd4decb5254dc9bea1980f54fcd162f8468ac98f49258a39b4", + "repo_source_path": "k8s/monitoring/prometheus-config-additions.yaml", + "request_id": "monitoring_owner_request:prometheus_k8s_additions_config", + "request_sent": false, + "required_owner_fields": [ + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "followup_owner" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "owner_identity_present", + "decision_reason_present", + "affected_scope_matches_surface", + "redacted_refs_only", + "secret_value_absent", + "live_config_hash_metadata_only", + "reload_owner_present", + "receiver_owner_present", + "route_smoke_plan_present", + "noise_budget_owner_present", + "maintenance_window_present", + "rollback_owner_present", + "validation_plan_present", + "no_runtime_request", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_owner_response", + "rollback_owner": "pending_owner_response", + "rollback_owner_accepted": false, + "route_smoke_accepted": false, + "route_smoke_plan": "pending_owner_response", + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_policy_change_authorized": false, + "source_line_count": 112, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "status": "waiting_owner_response", + "supplement_requested": false, + "surface_id": "prometheus_k8s_additions_config", + "telegram_send_authorized": false, + "validation_plan": "pending_owner_response", + "validation_plan_accepted": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "acceptance_candidate_id": "monitoring_owner_response_acceptance:prometheus_phase_o_config", + "acceptance_fields": [ + "acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "owner_response_ref", + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "action_buttons_allowed": false, + "active_scan_authorized": false, + "affected_scope": "pending_owner_response", + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "add_action_button" + ], + "config_kind": "prometheus_config", + "control_tier": "C1", + "decision": "pending_owner_response", + "decision_reason": "pending_owner_response", + "expected_scope": "phase_o_prometheus_config", + "exporter_deploy_authorized": false, + "followup_owner": "pending_owner_response", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "kubectl_action_authorized": false, + "label": "Prometheus Phase O config", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "live_config_hash_accepted": false, + "live_config_hash_ref": null, + "live_evidence_received": false, + "maintenance_window": "pending_owner_response", + "maintenance_window_accepted": false, + "noise_budget_owner": "pending_owner_response", + "noise_budget_owner_accepted": false, + "not_approval": true, + "notification_route_change_authorized": false, + "observability_scope": [ + "Phase O monitoring", + "baseline scrape" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_owner_response", + "quarantine_secret_or_raw_payload", + "reject_execution_request", + "request_supplement", + "ready_for_monitoring_review", + "owner_review_only_update", + "waiting_runtime_gate" + ], + "owner_response_accepted": false, + "owner_response_quarantined": false, + "owner_response_received": false, + "owner_response_ref": null, + "owner_response_rejected": false, + "owner_role_or_team": "pending_owner_response", + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "receiver_owner": "pending_owner_response", + "receiver_owner_accepted": false, + "receiver_route_change_authorized": false, + "recipient_confirmed": false, + "redacted_evidence_refs": [], + "reload_owner": "pending_owner_response", + "reload_owner_accepted": false, + "remote_write_change_authorized": false, + "repo_sha256": "7bdb94a23f6f14912c89655e5313fb745a772286671647db32d7ee2f07b50d9d", + "repo_source_path": "k8s/monitoring/prometheus-config-phase-o.yaml", + "request_id": "monitoring_owner_request:prometheus_phase_o_config", + "request_sent": false, + "required_owner_fields": [ + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "followup_owner" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "owner_identity_present", + "decision_reason_present", + "affected_scope_matches_surface", + "redacted_refs_only", + "secret_value_absent", + "live_config_hash_metadata_only", + "reload_owner_present", + "receiver_owner_present", + "route_smoke_plan_present", + "noise_budget_owner_present", + "maintenance_window_present", + "rollback_owner_present", + "validation_plan_present", + "no_runtime_request", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_owner_response", + "rollback_owner": "pending_owner_response", + "rollback_owner_accepted": false, + "route_smoke_accepted": false, + "route_smoke_plan": "pending_owner_response", + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_policy_change_authorized": false, + "source_line_count": 83, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "status": "waiting_owner_response", + "supplement_requested": false, + "surface_id": "prometheus_phase_o_config", + "telegram_send_authorized": false, + "validation_plan": "pending_owner_response", + "validation_plan_accepted": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "acceptance_candidate_id": "monitoring_owner_response_acceptance:prometheus_remote_write_signoz", + "acceptance_fields": [ + "acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "owner_response_ref", + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "action_buttons_allowed": false, + "active_scan_authorized": false, + "affected_scope": "pending_owner_response", + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "add_action_button" + ], + "config_kind": "prometheus_remote_write", + "control_tier": "C1", + "decision": "pending_owner_response", + "decision_reason": "pending_owner_response", + "expected_scope": "prometheus_remote_write_signoz", + "exporter_deploy_authorized": false, + "followup_owner": "pending_owner_response", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "kubectl_action_authorized": false, + "label": "Prometheus remote write to SigNoz", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "live_config_hash_accepted": false, + "live_config_hash_ref": null, + "live_evidence_received": false, + "maintenance_window": "pending_owner_response", + "maintenance_window_accepted": false, + "noise_budget_owner": "pending_owner_response", + "noise_budget_owner_accepted": false, + "not_approval": true, + "notification_route_change_authorized": false, + "observability_scope": [ + "remote write", + "SigNoz ingestion", + "data export boundary" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_owner_response", + "quarantine_secret_or_raw_payload", + "reject_execution_request", + "request_supplement", + "ready_for_monitoring_review", + "owner_review_only_update", + "waiting_runtime_gate" + ], + "owner_response_accepted": false, + "owner_response_quarantined": false, + "owner_response_received": false, + "owner_response_ref": null, + "owner_response_rejected": false, + "owner_role_or_team": "pending_owner_response", + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "receiver_owner": "pending_owner_response", + "receiver_owner_accepted": false, + "receiver_route_change_authorized": false, + "recipient_confirmed": false, + "redacted_evidence_refs": [], + "reload_owner": "pending_owner_response", + "reload_owner_accepted": false, + "remote_write_change_authorized": false, + "repo_sha256": "da6ae1ef0be420b07fc0f56861e548d049ec53fd0f601ee913797304315fbcc7", + "repo_source_path": "k8s/monitoring/prometheus-remote-write-signoz.yaml", + "request_id": "monitoring_owner_request:prometheus_remote_write_signoz", + "request_sent": false, + "required_owner_fields": [ + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "followup_owner" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "owner_identity_present", + "decision_reason_present", + "affected_scope_matches_surface", + "redacted_refs_only", + "secret_value_absent", + "live_config_hash_metadata_only", + "reload_owner_present", + "receiver_owner_present", + "route_smoke_plan_present", + "noise_budget_owner_present", + "maintenance_window_present", + "rollback_owner_present", + "validation_plan_present", + "no_runtime_request", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_owner_response", + "rollback_owner": "pending_owner_response", + "rollback_owner_accepted": false, + "route_smoke_accepted": false, + "route_smoke_plan": "pending_owner_response", + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_policy_change_authorized": false, + "source_line_count": 89, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "status": "waiting_owner_response", + "supplement_requested": false, + "surface_id": "prometheus_remote_write_signoz", + "telegram_send_authorized": false, + "validation_plan": "pending_owner_response", + "validation_plan_accepted": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "acceptance_candidate_id": "monitoring_owner_response_acceptance:prometheus_generated_scrape_config", + "acceptance_fields": [ + "acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "owner_response_ref", + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "action_buttons_allowed": false, + "active_scan_authorized": false, + "affected_scope": "pending_owner_response", + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "add_action_button" + ], + "config_kind": "prometheus_generated_config", + "control_tier": "C1", + "decision": "pending_owner_response", + "decision_reason": "pending_owner_response", + "expected_scope": "generated_scrape_targets", + "exporter_deploy_authorized": false, + "followup_owner": "pending_owner_response", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "kubectl_action_authorized": false, + "label": "Generated Prometheus scrape config", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "live_config_hash_accepted": false, + "live_config_hash_ref": null, + "live_evidence_received": false, + "maintenance_window": "pending_owner_response", + "maintenance_window_accepted": false, + "noise_budget_owner": "pending_owner_response", + "noise_budget_owner_accepted": false, + "not_approval": true, + "notification_route_change_authorized": false, + "observability_scope": [ + "generated targets", + "service registry" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_owner_response", + "quarantine_secret_or_raw_payload", + "reject_execution_request", + "request_supplement", + "ready_for_monitoring_review", + "owner_review_only_update", + "waiting_runtime_gate" + ], + "owner_response_accepted": false, + "owner_response_quarantined": false, + "owner_response_received": false, + "owner_response_ref": null, + "owner_response_rejected": false, + "owner_role_or_team": "pending_owner_response", + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "receiver_owner": "pending_owner_response", + "receiver_owner_accepted": false, + "receiver_route_change_authorized": false, + "recipient_confirmed": false, + "redacted_evidence_refs": [], + "reload_owner": "pending_owner_response", + "reload_owner_accepted": false, + "remote_write_change_authorized": false, + "repo_sha256": "6c1fb1ef0b672e016584a26b3dd1c1fb62904d9a4d26ec30e35f5493e23b0f9b", + "repo_source_path": "ops/monitoring/generated/prometheus-scrape-generated.yaml", + "request_id": "monitoring_owner_request:prometheus_generated_scrape_config", + "request_sent": false, + "required_owner_fields": [ + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "followup_owner" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "owner_identity_present", + "decision_reason_present", + "affected_scope_matches_surface", + "redacted_refs_only", + "secret_value_absent", + "live_config_hash_metadata_only", + "reload_owner_present", + "receiver_owner_present", + "route_smoke_plan_present", + "noise_budget_owner_present", + "maintenance_window_present", + "rollback_owner_present", + "validation_plan_present", + "no_runtime_request", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_owner_response", + "rollback_owner": "pending_owner_response", + "rollback_owner_accepted": false, + "route_smoke_accepted": false, + "route_smoke_plan": "pending_owner_response", + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_policy_change_authorized": false, + "source_line_count": 192, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "status": "waiting_owner_response", + "supplement_requested": false, + "surface_id": "prometheus_generated_scrape_config", + "telegram_send_authorized": false, + "validation_plan": "pending_owner_response", + "validation_plan_accepted": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "acceptance_candidate_id": "monitoring_owner_response_acceptance:prometheus_generated_blackbox_targets", + "acceptance_fields": [ + "acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "owner_response_ref", + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "action_buttons_allowed": false, + "active_scan_authorized": false, + "affected_scope": "pending_owner_response", + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "add_action_button" + ], + "config_kind": "prometheus_generated_config", + "control_tier": "C1", + "decision": "pending_owner_response", + "decision_reason": "pending_owner_response", + "expected_scope": "generated_blackbox_targets", + "exporter_deploy_authorized": false, + "followup_owner": "pending_owner_response", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "kubectl_action_authorized": false, + "label": "Generated blackbox targets", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "live_config_hash_accepted": false, + "live_config_hash_ref": null, + "live_evidence_received": false, + "maintenance_window": "pending_owner_response", + "maintenance_window_accepted": false, + "noise_budget_owner": "pending_owner_response", + "noise_budget_owner_accepted": false, + "not_approval": true, + "notification_route_change_authorized": false, + "observability_scope": [ + "blackbox targets", + "public route smoke candidates" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_owner_response", + "quarantine_secret_or_raw_payload", + "reject_execution_request", + "request_supplement", + "ready_for_monitoring_review", + "owner_review_only_update", + "waiting_runtime_gate" + ], + "owner_response_accepted": false, + "owner_response_quarantined": false, + "owner_response_received": false, + "owner_response_ref": null, + "owner_response_rejected": false, + "owner_role_or_team": "pending_owner_response", + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "receiver_owner": "pending_owner_response", + "receiver_owner_accepted": false, + "receiver_route_change_authorized": false, + "recipient_confirmed": false, + "redacted_evidence_refs": [], + "reload_owner": "pending_owner_response", + "reload_owner_accepted": false, + "remote_write_change_authorized": false, + "repo_sha256": "e375aec2fe6b602157de4d187d66c8a4b0dc237c1ba2ae8c9ad3f598f4730e79", + "repo_source_path": "ops/monitoring/generated/blackbox-targets-generated.yaml", + "request_id": "monitoring_owner_request:prometheus_generated_blackbox_targets", + "request_sent": false, + "required_owner_fields": [ + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "followup_owner" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "owner_identity_present", + "decision_reason_present", + "affected_scope_matches_surface", + "redacted_refs_only", + "secret_value_absent", + "live_config_hash_metadata_only", + "reload_owner_present", + "receiver_owner_present", + "route_smoke_plan_present", + "noise_budget_owner_present", + "maintenance_window_present", + "rollback_owner_present", + "validation_plan_present", + "no_runtime_request", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_owner_response", + "rollback_owner": "pending_owner_response", + "rollback_owner_accepted": false, + "route_smoke_accepted": false, + "route_smoke_plan": "pending_owner_response", + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_policy_change_authorized": false, + "source_line_count": 110, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "status": "waiting_owner_response", + "supplement_requested": false, + "surface_id": "prometheus_generated_blackbox_targets", + "telegram_send_authorized": false, + "validation_plan": "pending_owner_response", + "validation_plan_accepted": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "acceptance_candidate_id": "monitoring_owner_response_acceptance:monitoring_service_registry", + "acceptance_fields": [ + "acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "owner_response_ref", + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "action_buttons_allowed": false, + "active_scan_authorized": false, + "affected_scope": "pending_owner_response", + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "add_action_button" + ], + "config_kind": "monitoring_service_registry", + "control_tier": "C1", + "decision": "pending_owner_response", + "decision_reason": "pending_owner_response", + "expected_scope": "monitoring_service_registry", + "exporter_deploy_authorized": false, + "followup_owner": "pending_owner_response", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "kubectl_action_authorized": false, + "label": "Monitoring service registry", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "live_config_hash_accepted": false, + "live_config_hash_ref": null, + "live_evidence_received": false, + "maintenance_window": "pending_owner_response", + "maintenance_window_accepted": false, + "noise_budget_owner": "pending_owner_response", + "noise_budget_owner_accepted": false, + "not_approval": true, + "notification_route_change_authorized": false, + "observability_scope": [ + "service registry", + "target generation" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_owner_response", + "quarantine_secret_or_raw_payload", + "reject_execution_request", + "request_supplement", + "ready_for_monitoring_review", + "owner_review_only_update", + "waiting_runtime_gate" + ], + "owner_response_accepted": false, + "owner_response_quarantined": false, + "owner_response_received": false, + "owner_response_ref": null, + "owner_response_rejected": false, + "owner_role_or_team": "pending_owner_response", + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "receiver_owner": "pending_owner_response", + "receiver_owner_accepted": false, + "receiver_route_change_authorized": false, + "recipient_confirmed": false, + "redacted_evidence_refs": [], + "reload_owner": "pending_owner_response", + "reload_owner_accepted": false, + "remote_write_change_authorized": false, + "repo_sha256": "e01aa01299381506ac901229ab3154329c978358d40882618cfbaa134c007418", + "repo_source_path": "ops/monitoring/service-registry.yaml", + "request_id": "monitoring_owner_request:monitoring_service_registry", + "request_sent": false, + "required_owner_fields": [ + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "followup_owner" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "owner_identity_present", + "decision_reason_present", + "affected_scope_matches_surface", + "redacted_refs_only", + "secret_value_absent", + "live_config_hash_metadata_only", + "reload_owner_present", + "receiver_owner_present", + "route_smoke_plan_present", + "noise_budget_owner_present", + "maintenance_window_present", + "rollback_owner_present", + "validation_plan_present", + "no_runtime_request", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_owner_response", + "rollback_owner": "pending_owner_response", + "rollback_owner_accepted": false, + "route_smoke_accepted": false, + "route_smoke_plan": "pending_owner_response", + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_policy_change_authorized": false, + "source_line_count": 830, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "status": "waiting_owner_response", + "supplement_requested": false, + "surface_id": "monitoring_service_registry", + "telegram_send_authorized": false, + "validation_plan": "pending_owner_response", + "validation_plan_accepted": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "acceptance_candidate_id": "monitoring_owner_response_acceptance:postgres_exporter_queries", + "acceptance_fields": [ + "acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "owner_response_ref", + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "action_buttons_allowed": false, + "active_scan_authorized": false, + "affected_scope": "pending_owner_response", + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "add_action_button" + ], + "config_kind": "exporter_query_config", + "control_tier": "C1", + "decision": "pending_owner_response", + "decision_reason": "pending_owner_response", + "expected_scope": "postgres_exporter_queries", + "exporter_deploy_authorized": false, + "followup_owner": "pending_owner_response", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "kubectl_action_authorized": false, + "label": "Postgres exporter query config", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "live_config_hash_accepted": false, + "live_config_hash_ref": null, + "live_evidence_received": false, + "maintenance_window": "pending_owner_response", + "maintenance_window_accepted": false, + "noise_budget_owner": "pending_owner_response", + "noise_budget_owner_accepted": false, + "not_approval": true, + "notification_route_change_authorized": false, + "observability_scope": [ + "PostgreSQL metrics", + "custom exporter queries" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_owner_response", + "quarantine_secret_or_raw_payload", + "reject_execution_request", + "request_supplement", + "ready_for_monitoring_review", + "owner_review_only_update", + "waiting_runtime_gate" + ], + "owner_response_accepted": false, + "owner_response_quarantined": false, + "owner_response_received": false, + "owner_response_ref": null, + "owner_response_rejected": false, + "owner_role_or_team": "pending_owner_response", + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "receiver_owner": "pending_owner_response", + "receiver_owner_accepted": false, + "receiver_route_change_authorized": false, + "recipient_confirmed": false, + "redacted_evidence_refs": [], + "reload_owner": "pending_owner_response", + "reload_owner_accepted": false, + "remote_write_change_authorized": false, + "repo_sha256": "50102b017c91d24c1dcae79779b4da39ce44628a2bd89250f5145411f0ac6f21", + "repo_source_path": "ops/monitoring/postgres-exporter-queries.yaml", + "request_id": "monitoring_owner_request:postgres_exporter_queries", + "request_sent": false, + "required_owner_fields": [ + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "followup_owner" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "owner_identity_present", + "decision_reason_present", + "affected_scope_matches_surface", + "redacted_refs_only", + "secret_value_absent", + "live_config_hash_metadata_only", + "reload_owner_present", + "receiver_owner_present", + "route_smoke_plan_present", + "noise_budget_owner_present", + "maintenance_window_present", + "rollback_owner_present", + "validation_plan_present", + "no_runtime_request", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_owner_response", + "rollback_owner": "pending_owner_response", + "rollback_owner_accepted": false, + "route_smoke_accepted": false, + "route_smoke_plan": "pending_owner_response", + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_policy_change_authorized": false, + "source_line_count": 215, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "status": "waiting_owner_response", + "supplement_requested": false, + "surface_id": "postgres_exporter_queries", + "telegram_send_authorized": false, + "validation_plan": "pending_owner_response", + "validation_plan_accepted": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "acceptance_candidate_id": "monitoring_owner_response_acceptance:monitoring_110_compose", + "acceptance_fields": [ + "acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "owner_response_ref", + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "action_buttons_allowed": false, + "active_scan_authorized": false, + "affected_scope": "pending_owner_response", + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "add_action_button" + ], + "config_kind": "monitoring_runtime_compose", + "control_tier": "C1", + "decision": "pending_owner_response", + "decision_reason": "pending_owner_response", + "expected_scope": "192.168.0.110_monitoring_stack", + "exporter_deploy_authorized": false, + "followup_owner": "pending_owner_response", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "kubectl_action_authorized": false, + "label": "110 monitoring compose", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "live_config_hash_accepted": false, + "live_config_hash_ref": null, + "live_evidence_received": false, + "maintenance_window": "pending_owner_response", + "maintenance_window_accepted": false, + "noise_budget_owner": "pending_owner_response", + "noise_budget_owner_accepted": false, + "not_approval": true, + "notification_route_change_authorized": false, + "observability_scope": [ + "Prometheus", + "Grafana", + "Alertmanager", + "blackbox", + "cadvisor" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_owner_response", + "quarantine_secret_or_raw_payload", + "reject_execution_request", + "request_supplement", + "ready_for_monitoring_review", + "owner_review_only_update", + "waiting_runtime_gate" + ], + "owner_response_accepted": false, + "owner_response_quarantined": false, + "owner_response_received": false, + "owner_response_ref": null, + "owner_response_rejected": false, + "owner_role_or_team": "pending_owner_response", + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "receiver_owner": "pending_owner_response", + "receiver_owner_accepted": false, + "receiver_route_change_authorized": false, + "recipient_confirmed": false, + "redacted_evidence_refs": [], + "reload_owner": "pending_owner_response", + "reload_owner_accepted": false, + "remote_write_change_authorized": false, + "repo_sha256": "00126e9a5cb7a3cf2bf02cfddefea11f05849b46835a4e602eac4777fcb25281", + "repo_source_path": "k8s/monitoring/docker-compose-110.yml", + "request_id": "monitoring_owner_request:monitoring_110_compose", + "request_sent": false, + "required_owner_fields": [ + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "followup_owner" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "owner_identity_present", + "decision_reason_present", + "affected_scope_matches_surface", + "redacted_refs_only", + "secret_value_absent", + "live_config_hash_metadata_only", + "reload_owner_present", + "receiver_owner_present", + "route_smoke_plan_present", + "noise_budget_owner_present", + "maintenance_window_present", + "rollback_owner_present", + "validation_plan_present", + "no_runtime_request", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_owner_response", + "rollback_owner": "pending_owner_response", + "rollback_owner_accepted": false, + "route_smoke_accepted": false, + "route_smoke_plan": "pending_owner_response", + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_policy_change_authorized": false, + "source_line_count": 148, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "status": "waiting_owner_response", + "supplement_requested": false, + "surface_id": "monitoring_110_compose", + "telegram_send_authorized": false, + "validation_plan": "pending_owner_response", + "validation_plan_accepted": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "acceptance_candidate_id": "monitoring_owner_response_acceptance:monitoring_exporters_compose", + "acceptance_fields": [ + "acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "owner_response_ref", + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "action_buttons_allowed": false, + "active_scan_authorized": false, + "affected_scope": "pending_owner_response", + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "add_action_button" + ], + "config_kind": "monitoring_runtime_compose", + "control_tier": "C1", + "decision": "pending_owner_response", + "decision_reason": "pending_owner_response", + "expected_scope": "192.168.0.188_exporters", + "exporter_deploy_authorized": false, + "followup_owner": "pending_owner_response", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "kubectl_action_authorized": false, + "label": "188 monitoring exporters compose", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "live_config_hash_accepted": false, + "live_config_hash_ref": null, + "live_evidence_received": false, + "maintenance_window": "pending_owner_response", + "maintenance_window_accepted": false, + "noise_budget_owner": "pending_owner_response", + "noise_budget_owner_accepted": false, + "not_approval": true, + "notification_route_change_authorized": false, + "observability_scope": [ + "postgres-exporter", + "redis-exporter" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_owner_response", + "quarantine_secret_or_raw_payload", + "reject_execution_request", + "request_supplement", + "ready_for_monitoring_review", + "owner_review_only_update", + "waiting_runtime_gate" + ], + "owner_response_accepted": false, + "owner_response_quarantined": false, + "owner_response_received": false, + "owner_response_ref": null, + "owner_response_rejected": false, + "owner_role_or_team": "pending_owner_response", + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "receiver_owner": "pending_owner_response", + "receiver_owner_accepted": false, + "receiver_route_change_authorized": false, + "recipient_confirmed": false, + "redacted_evidence_refs": [], + "reload_owner": "pending_owner_response", + "reload_owner_accepted": false, + "remote_write_change_authorized": false, + "repo_sha256": "3ffb3bd2e98091d18e60b74721904777c27f279c37ab6e873b82e6ef73eb87d4", + "repo_source_path": "ops/monitoring/docker-compose.exporters.yaml", + "request_id": "monitoring_owner_request:monitoring_exporters_compose", + "request_sent": false, + "required_owner_fields": [ + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "followup_owner" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "owner_identity_present", + "decision_reason_present", + "affected_scope_matches_surface", + "redacted_refs_only", + "secret_value_absent", + "live_config_hash_metadata_only", + "reload_owner_present", + "receiver_owner_present", + "route_smoke_plan_present", + "noise_budget_owner_present", + "maintenance_window_present", + "rollback_owner_present", + "validation_plan_present", + "no_runtime_request", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_owner_response", + "rollback_owner": "pending_owner_response", + "rollback_owner_accepted": false, + "route_smoke_accepted": false, + "route_smoke_plan": "pending_owner_response", + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_policy_change_authorized": false, + "source_line_count": 69, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "status": "waiting_owner_response", + "supplement_requested": false, + "surface_id": "monitoring_exporters_compose", + "telegram_send_authorized": false, + "validation_plan": "pending_owner_response", + "validation_plan_accepted": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "acceptance_candidate_id": "monitoring_owner_response_acceptance:alertmanager_receiver_config", + "acceptance_fields": [ + "acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "owner_response_ref", + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "action_buttons_allowed": false, + "active_scan_authorized": false, + "affected_scope": "pending_owner_response", + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "add_action_button" + ], + "config_kind": "alertmanager_receiver_config", + "control_tier": "C1", + "decision": "pending_owner_response", + "decision_reason": "pending_owner_response", + "expected_scope": "alertmanager_routes_receivers", + "exporter_deploy_authorized": false, + "followup_owner": "pending_owner_response", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "kubectl_action_authorized": false, + "label": "Alertmanager receiver config", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "live_config_hash_accepted": false, + "live_config_hash_ref": null, + "live_evidence_received": false, + "maintenance_window": "pending_owner_response", + "maintenance_window_accepted": false, + "noise_budget_owner": "pending_owner_response", + "noise_budget_owner_accepted": false, + "not_approval": true, + "notification_route_change_authorized": false, + "observability_scope": [ + "routes", + "receivers", + "grouping", + "Telegram / webhook receiver boundary" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_owner_response", + "quarantine_secret_or_raw_payload", + "reject_execution_request", + "request_supplement", + "ready_for_monitoring_review", + "owner_review_only_update", + "waiting_runtime_gate" + ], + "owner_response_accepted": false, + "owner_response_quarantined": false, + "owner_response_received": false, + "owner_response_ref": null, + "owner_response_rejected": false, + "owner_role_or_team": "pending_owner_response", + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "receiver_owner": "pending_owner_response", + "receiver_owner_accepted": false, + "receiver_route_change_authorized": false, + "recipient_confirmed": false, + "redacted_evidence_refs": [], + "reload_owner": "pending_owner_response", + "reload_owner_accepted": false, + "remote_write_change_authorized": false, + "repo_sha256": "7ee436fbe114bd2fffa616d8d87c42dd0cc7f59151dc03ab09258dfa83a1de86", + "repo_source_path": "ops/alertmanager/alertmanager.yml", + "request_id": "monitoring_owner_request:alertmanager_receiver_config", + "request_sent": false, + "required_owner_fields": [ + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "followup_owner" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "owner_identity_present", + "decision_reason_present", + "affected_scope_matches_surface", + "redacted_refs_only", + "secret_value_absent", + "live_config_hash_metadata_only", + "reload_owner_present", + "receiver_owner_present", + "route_smoke_plan_present", + "noise_budget_owner_present", + "maintenance_window_present", + "rollback_owner_present", + "validation_plan_present", + "no_runtime_request", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_owner_response", + "rollback_owner": "pending_owner_response", + "rollback_owner_accepted": false, + "route_smoke_accepted": false, + "route_smoke_plan": "pending_owner_response", + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_policy_change_authorized": false, + "source_line_count": 146, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "status": "waiting_owner_response", + "supplement_requested": false, + "surface_id": "alertmanager_receiver_config", + "telegram_send_authorized": false, + "validation_plan": "pending_owner_response", + "validation_plan_accepted": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "acceptance_candidate_id": "monitoring_owner_response_acceptance:prometheus_alerts_ops", + "acceptance_fields": [ + "acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "owner_response_ref", + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "action_buttons_allowed": false, + "active_scan_authorized": false, + "affected_scope": "pending_owner_response", + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "add_action_button" + ], + "config_kind": "prometheus_alert_rules", + "control_tier": "C1", + "decision": "pending_owner_response", + "decision_reason": "pending_owner_response", + "expected_scope": "ops_prometheus_alerts", + "exporter_deploy_authorized": false, + "followup_owner": "pending_owner_response", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "kubectl_action_authorized": false, + "label": "Ops Prometheus alerts", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "live_config_hash_accepted": false, + "live_config_hash_ref": null, + "live_evidence_received": false, + "maintenance_window": "pending_owner_response", + "maintenance_window_accepted": false, + "noise_budget_owner": "pending_owner_response", + "noise_budget_owner_accepted": false, + "not_approval": true, + "notification_route_change_authorized": false, + "observability_scope": [ + "infrastructure alerts", + "backup alerts", + "route alerts" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_owner_response", + "quarantine_secret_or_raw_payload", + "reject_execution_request", + "request_supplement", + "ready_for_monitoring_review", + "owner_review_only_update", + "waiting_runtime_gate" + ], + "owner_response_accepted": false, + "owner_response_quarantined": false, + "owner_response_received": false, + "owner_response_ref": null, + "owner_response_rejected": false, + "owner_role_or_team": "pending_owner_response", + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "receiver_owner": "pending_owner_response", + "receiver_owner_accepted": false, + "receiver_route_change_authorized": false, + "recipient_confirmed": false, + "redacted_evidence_refs": [], + "reload_owner": "pending_owner_response", + "reload_owner_accepted": false, + "remote_write_change_authorized": false, + "repo_sha256": "94d439a2ea599995601a5022dc0a001cc09f405964cd1308b103f86e2af14e90", + "repo_source_path": "ops/monitoring/alerts.yml", + "request_id": "monitoring_owner_request:prometheus_alerts_ops", + "request_sent": false, + "required_owner_fields": [ + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "followup_owner" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "owner_identity_present", + "decision_reason_present", + "affected_scope_matches_surface", + "redacted_refs_only", + "secret_value_absent", + "live_config_hash_metadata_only", + "reload_owner_present", + "receiver_owner_present", + "route_smoke_plan_present", + "noise_budget_owner_present", + "maintenance_window_present", + "rollback_owner_present", + "validation_plan_present", + "no_runtime_request", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_owner_response", + "rollback_owner": "pending_owner_response", + "rollback_owner_accepted": false, + "route_smoke_accepted": false, + "route_smoke_plan": "pending_owner_response", + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_policy_change_authorized": false, + "source_line_count": 1355, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "status": "waiting_owner_response", + "supplement_requested": false, + "surface_id": "prometheus_alerts_ops", + "telegram_send_authorized": false, + "validation_plan": "pending_owner_response", + "validation_plan_accepted": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "acceptance_candidate_id": "monitoring_owner_response_acceptance:prometheus_alerts_unified", + "acceptance_fields": [ + "acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "owner_response_ref", + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "action_buttons_allowed": false, + "active_scan_authorized": false, + "affected_scope": "pending_owner_response", + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "add_action_button" + ], + "config_kind": "prometheus_alert_rules", + "control_tier": "C1", + "decision": "pending_owner_response", + "decision_reason": "pending_owner_response", + "expected_scope": "unified_prometheus_alerts", + "exporter_deploy_authorized": false, + "followup_owner": "pending_owner_response", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "kubectl_action_authorized": false, + "label": "Unified Prometheus alerts", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "live_config_hash_accepted": false, + "live_config_hash_ref": null, + "live_evidence_received": false, + "maintenance_window": "pending_owner_response", + "maintenance_window_accepted": false, + "noise_budget_owner": "pending_owner_response", + "noise_budget_owner_accepted": false, + "not_approval": true, + "notification_route_change_authorized": false, + "observability_scope": [ + "unified alerts", + "routing labels" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_owner_response", + "quarantine_secret_or_raw_payload", + "reject_execution_request", + "request_supplement", + "ready_for_monitoring_review", + "owner_review_only_update", + "waiting_runtime_gate" + ], + "owner_response_accepted": false, + "owner_response_quarantined": false, + "owner_response_received": false, + "owner_response_ref": null, + "owner_response_rejected": false, + "owner_role_or_team": "pending_owner_response", + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "receiver_owner": "pending_owner_response", + "receiver_owner_accepted": false, + "receiver_route_change_authorized": false, + "recipient_confirmed": false, + "redacted_evidence_refs": [], + "reload_owner": "pending_owner_response", + "reload_owner_accepted": false, + "remote_write_change_authorized": false, + "repo_sha256": "97b5be44a5af982c8013323d353c67748f87a7336d22a7c8270d7d6a1546bf45", + "repo_source_path": "ops/monitoring/alerts-unified.yml", + "request_id": "monitoring_owner_request:prometheus_alerts_unified", + "request_sent": false, + "required_owner_fields": [ + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "followup_owner" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "owner_identity_present", + "decision_reason_present", + "affected_scope_matches_surface", + "redacted_refs_only", + "secret_value_absent", + "live_config_hash_metadata_only", + "reload_owner_present", + "receiver_owner_present", + "route_smoke_plan_present", + "noise_budget_owner_present", + "maintenance_window_present", + "rollback_owner_present", + "validation_plan_present", + "no_runtime_request", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_owner_response", + "rollback_owner": "pending_owner_response", + "rollback_owner_accepted": false, + "route_smoke_accepted": false, + "route_smoke_plan": "pending_owner_response", + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_policy_change_authorized": false, + "source_line_count": 2031, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "status": "waiting_owner_response", + "supplement_requested": false, + "surface_id": "prometheus_alerts_unified", + "telegram_send_authorized": false, + "validation_plan": "pending_owner_response", + "validation_plan_accepted": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "acceptance_candidate_id": "monitoring_owner_response_acceptance:prometheus_slo_rules", + "acceptance_fields": [ + "acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "owner_response_ref", + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "action_buttons_allowed": false, + "active_scan_authorized": false, + "affected_scope": "pending_owner_response", + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "add_action_button" + ], + "config_kind": "prometheus_alert_rules", + "control_tier": "C1", + "decision": "pending_owner_response", + "decision_reason": "pending_owner_response", + "expected_scope": "prometheus_slo_rules", + "exporter_deploy_authorized": false, + "followup_owner": "pending_owner_response", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "kubectl_action_authorized": false, + "label": "Prometheus SLO rules", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "live_config_hash_accepted": false, + "live_config_hash_ref": null, + "live_evidence_received": false, + "maintenance_window": "pending_owner_response", + "maintenance_window_accepted": false, + "noise_budget_owner": "pending_owner_response", + "noise_budget_owner_accepted": false, + "not_approval": true, + "notification_route_change_authorized": false, + "observability_scope": [ + "SLO burn rate", + "availability indicators" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_owner_response", + "quarantine_secret_or_raw_payload", + "reject_execution_request", + "request_supplement", + "ready_for_monitoring_review", + "owner_review_only_update", + "waiting_runtime_gate" + ], + "owner_response_accepted": false, + "owner_response_quarantined": false, + "owner_response_received": false, + "owner_response_ref": null, + "owner_response_rejected": false, + "owner_role_or_team": "pending_owner_response", + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "receiver_owner": "pending_owner_response", + "receiver_owner_accepted": false, + "receiver_route_change_authorized": false, + "recipient_confirmed": false, + "redacted_evidence_refs": [], + "reload_owner": "pending_owner_response", + "reload_owner_accepted": false, + "remote_write_change_authorized": false, + "repo_sha256": "31b7cbe0af22c5ad2320cf23fd06cce73a93194acff0e1d4045ed0acb7b3b3bd", + "repo_source_path": "ops/monitoring/slo-rules.yml", + "request_id": "monitoring_owner_request:prometheus_slo_rules", + "request_sent": false, + "required_owner_fields": [ + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "followup_owner" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "owner_identity_present", + "decision_reason_present", + "affected_scope_matches_surface", + "redacted_refs_only", + "secret_value_absent", + "live_config_hash_metadata_only", + "reload_owner_present", + "receiver_owner_present", + "route_smoke_plan_present", + "noise_budget_owner_present", + "maintenance_window_present", + "rollback_owner_present", + "validation_plan_present", + "no_runtime_request", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_owner_response", + "rollback_owner": "pending_owner_response", + "rollback_owner_accepted": false, + "route_smoke_accepted": false, + "route_smoke_plan": "pending_owner_response", + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_policy_change_authorized": false, + "source_line_count": 257, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "status": "waiting_owner_response", + "supplement_requested": false, + "surface_id": "prometheus_slo_rules", + "telegram_send_authorized": false, + "validation_plan": "pending_owner_response", + "validation_plan_accepted": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "acceptance_candidate_id": "monitoring_owner_response_acceptance:prometheus_ollama_health_rules", + "acceptance_fields": [ + "acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "owner_response_ref", + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "action_buttons_allowed": false, + "active_scan_authorized": false, + "affected_scope": "pending_owner_response", + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "add_action_button" + ], + "config_kind": "prometheus_alert_rules", + "control_tier": "C1", + "decision": "pending_owner_response", + "decision_reason": "pending_owner_response", + "expected_scope": "ollama_health_rules", + "exporter_deploy_authorized": false, + "followup_owner": "pending_owner_response", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "kubectl_action_authorized": false, + "label": "Ollama health alert rules", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "live_config_hash_accepted": false, + "live_config_hash_ref": null, + "live_evidence_received": false, + "maintenance_window": "pending_owner_response", + "maintenance_window_accepted": false, + "noise_budget_owner": "pending_owner_response", + "noise_budget_owner_accepted": false, + "not_approval": true, + "notification_route_change_authorized": false, + "observability_scope": [ + "Ollama health", + "AI provider availability" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_owner_response", + "quarantine_secret_or_raw_payload", + "reject_execution_request", + "request_supplement", + "ready_for_monitoring_review", + "owner_review_only_update", + "waiting_runtime_gate" + ], + "owner_response_accepted": false, + "owner_response_quarantined": false, + "owner_response_received": false, + "owner_response_ref": null, + "owner_response_rejected": false, + "owner_role_or_team": "pending_owner_response", + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "receiver_owner": "pending_owner_response", + "receiver_owner_accepted": false, + "receiver_route_change_authorized": false, + "recipient_confirmed": false, + "redacted_evidence_refs": [], + "reload_owner": "pending_owner_response", + "reload_owner_accepted": false, + "remote_write_change_authorized": false, + "repo_sha256": "9f994c654d8a8c6c7d570fec0ba0418f8d4cc7fe4e4a83cb1bb80988a3cd0b55", + "repo_source_path": "ops/monitoring/ollama_health_rules.yaml", + "request_id": "monitoring_owner_request:prometheus_ollama_health_rules", + "request_sent": false, + "required_owner_fields": [ + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "followup_owner" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "owner_identity_present", + "decision_reason_present", + "affected_scope_matches_surface", + "redacted_refs_only", + "secret_value_absent", + "live_config_hash_metadata_only", + "reload_owner_present", + "receiver_owner_present", + "route_smoke_plan_present", + "noise_budget_owner_present", + "maintenance_window_present", + "rollback_owner_present", + "validation_plan_present", + "no_runtime_request", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_owner_response", + "rollback_owner": "pending_owner_response", + "rollback_owner_accepted": false, + "route_smoke_accepted": false, + "route_smoke_plan": "pending_owner_response", + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_policy_change_authorized": false, + "source_line_count": 149, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "status": "waiting_owner_response", + "supplement_requested": false, + "surface_id": "prometheus_ollama_health_rules", + "telegram_send_authorized": false, + "validation_plan": "pending_owner_response", + "validation_plan_accepted": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "acceptance_candidate_id": "monitoring_owner_response_acceptance:k8s_k3s_alerts", + "acceptance_fields": [ + "acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "owner_response_ref", + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "action_buttons_allowed": false, + "active_scan_authorized": false, + "affected_scope": "pending_owner_response", + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "add_action_button" + ], + "config_kind": "prometheus_alert_rules", + "control_tier": "C1", + "decision": "pending_owner_response", + "decision_reason": "pending_owner_response", + "expected_scope": "k3s_cluster_alerts", + "exporter_deploy_authorized": false, + "followup_owner": "pending_owner_response", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "kubectl_action_authorized": false, + "label": "K3s alert rules", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "live_config_hash_accepted": false, + "live_config_hash_ref": null, + "live_evidence_received": false, + "maintenance_window": "pending_owner_response", + "maintenance_window_accepted": false, + "noise_budget_owner": "pending_owner_response", + "noise_budget_owner_accepted": false, + "not_approval": true, + "notification_route_change_authorized": false, + "observability_scope": [ + "K3s workloads", + "cluster health" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_owner_response", + "quarantine_secret_or_raw_payload", + "reject_execution_request", + "request_supplement", + "ready_for_monitoring_review", + "owner_review_only_update", + "waiting_runtime_gate" + ], + "owner_response_accepted": false, + "owner_response_quarantined": false, + "owner_response_received": false, + "owner_response_ref": null, + "owner_response_rejected": false, + "owner_role_or_team": "pending_owner_response", + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "receiver_owner": "pending_owner_response", + "receiver_owner_accepted": false, + "receiver_route_change_authorized": false, + "recipient_confirmed": false, + "redacted_evidence_refs": [], + "reload_owner": "pending_owner_response", + "reload_owner_accepted": false, + "remote_write_change_authorized": false, + "repo_sha256": "be1a4e796f6f6363566898ffd07ac37a938255b895cde11743fe0770d9946663", + "repo_source_path": "k8s/monitoring/k3s-alerts.yaml", + "request_id": "monitoring_owner_request:k8s_k3s_alerts", + "request_sent": false, + "required_owner_fields": [ + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "followup_owner" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "owner_identity_present", + "decision_reason_present", + "affected_scope_matches_surface", + "redacted_refs_only", + "secret_value_absent", + "live_config_hash_metadata_only", + "reload_owner_present", + "receiver_owner_present", + "route_smoke_plan_present", + "noise_budget_owner_present", + "maintenance_window_present", + "rollback_owner_present", + "validation_plan_present", + "no_runtime_request", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_owner_response", + "rollback_owner": "pending_owner_response", + "rollback_owner_accepted": false, + "route_smoke_accepted": false, + "route_smoke_plan": "pending_owner_response", + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_policy_change_authorized": false, + "source_line_count": 203, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "status": "waiting_owner_response", + "supplement_requested": false, + "surface_id": "k8s_k3s_alerts", + "telegram_send_authorized": false, + "validation_plan": "pending_owner_response", + "validation_plan_accepted": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "acceptance_candidate_id": "monitoring_owner_response_acceptance:k8s_k3s_supplemental_alerts", + "acceptance_fields": [ + "acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "owner_response_ref", + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "action_buttons_allowed": false, + "active_scan_authorized": false, + "affected_scope": "pending_owner_response", + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "add_action_button" + ], + "config_kind": "prometheus_alert_rules", + "control_tier": "C1", + "decision": "pending_owner_response", + "decision_reason": "pending_owner_response", + "expected_scope": "k3s_supplemental_alerts", + "exporter_deploy_authorized": false, + "followup_owner": "pending_owner_response", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "kubectl_action_authorized": false, + "label": "K3s supplemental alert rules", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "live_config_hash_accepted": false, + "live_config_hash_ref": null, + "live_evidence_received": false, + "maintenance_window": "pending_owner_response", + "maintenance_window_accepted": false, + "noise_budget_owner": "pending_owner_response", + "noise_budget_owner_accepted": false, + "not_approval": true, + "notification_route_change_authorized": false, + "observability_scope": [ + "K3s supplemental health", + "gap alerts" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_owner_response", + "quarantine_secret_or_raw_payload", + "reject_execution_request", + "request_supplement", + "ready_for_monitoring_review", + "owner_review_only_update", + "waiting_runtime_gate" + ], + "owner_response_accepted": false, + "owner_response_quarantined": false, + "owner_response_received": false, + "owner_response_ref": null, + "owner_response_rejected": false, + "owner_role_or_team": "pending_owner_response", + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "receiver_owner": "pending_owner_response", + "receiver_owner_accepted": false, + "receiver_route_change_authorized": false, + "recipient_confirmed": false, + "redacted_evidence_refs": [], + "reload_owner": "pending_owner_response", + "reload_owner_accepted": false, + "remote_write_change_authorized": false, + "repo_sha256": "14fd4f8c7deaf22c6828ffbf66400e6d0e274f03db1999197af26311bdb6d203", + "repo_source_path": "k8s/monitoring/k3s-alerts-supplemental.yaml", + "request_id": "monitoring_owner_request:k8s_k3s_supplemental_alerts", + "request_sent": false, + "required_owner_fields": [ + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "followup_owner" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "owner_identity_present", + "decision_reason_present", + "affected_scope_matches_surface", + "redacted_refs_only", + "secret_value_absent", + "live_config_hash_metadata_only", + "reload_owner_present", + "receiver_owner_present", + "route_smoke_plan_present", + "noise_budget_owner_present", + "maintenance_window_present", + "rollback_owner_present", + "validation_plan_present", + "no_runtime_request", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_owner_response", + "rollback_owner": "pending_owner_response", + "rollback_owner_accepted": false, + "route_smoke_accepted": false, + "route_smoke_plan": "pending_owner_response", + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_policy_change_authorized": false, + "source_line_count": 290, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "status": "waiting_owner_response", + "supplement_requested": false, + "surface_id": "k8s_k3s_supplemental_alerts", + "telegram_send_authorized": false, + "validation_plan": "pending_owner_response", + "validation_plan_accepted": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "acceptance_candidate_id": "monitoring_owner_response_acceptance:k8s_database_alerts", + "acceptance_fields": [ + "acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "owner_response_ref", + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "action_buttons_allowed": false, + "active_scan_authorized": false, + "affected_scope": "pending_owner_response", + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "add_action_button" + ], + "config_kind": "prometheus_alert_rules", + "control_tier": "C1", + "decision": "pending_owner_response", + "decision_reason": "pending_owner_response", + "expected_scope": "database_alerts", + "exporter_deploy_authorized": false, + "followup_owner": "pending_owner_response", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "kubectl_action_authorized": false, + "label": "Database alert rules", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "live_config_hash_accepted": false, + "live_config_hash_ref": null, + "live_evidence_received": false, + "maintenance_window": "pending_owner_response", + "maintenance_window_accepted": false, + "noise_budget_owner": "pending_owner_response", + "noise_budget_owner_accepted": false, + "not_approval": true, + "notification_route_change_authorized": false, + "observability_scope": [ + "PostgreSQL", + "Redis", + "DB availability" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_owner_response", + "quarantine_secret_or_raw_payload", + "reject_execution_request", + "request_supplement", + "ready_for_monitoring_review", + "owner_review_only_update", + "waiting_runtime_gate" + ], + "owner_response_accepted": false, + "owner_response_quarantined": false, + "owner_response_received": false, + "owner_response_ref": null, + "owner_response_rejected": false, + "owner_role_or_team": "pending_owner_response", + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "receiver_owner": "pending_owner_response", + "receiver_owner_accepted": false, + "receiver_route_change_authorized": false, + "recipient_confirmed": false, + "redacted_evidence_refs": [], + "reload_owner": "pending_owner_response", + "reload_owner_accepted": false, + "remote_write_change_authorized": false, + "repo_sha256": "6077aa4e061c6604519eaede01144ffec46c39a6715a296a1ae54ff5484a0111", + "repo_source_path": "k8s/monitoring/database-alerts.yaml", + "request_id": "monitoring_owner_request:k8s_database_alerts", + "request_sent": false, + "required_owner_fields": [ + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "followup_owner" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "owner_identity_present", + "decision_reason_present", + "affected_scope_matches_surface", + "redacted_refs_only", + "secret_value_absent", + "live_config_hash_metadata_only", + "reload_owner_present", + "receiver_owner_present", + "route_smoke_plan_present", + "noise_budget_owner_present", + "maintenance_window_present", + "rollback_owner_present", + "validation_plan_present", + "no_runtime_request", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_owner_response", + "rollback_owner": "pending_owner_response", + "rollback_owner_accepted": false, + "route_smoke_accepted": false, + "route_smoke_plan": "pending_owner_response", + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_policy_change_authorized": false, + "source_line_count": 264, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "status": "waiting_owner_response", + "supplement_requested": false, + "surface_id": "k8s_database_alerts", + "telegram_send_authorized": false, + "validation_plan": "pending_owner_response", + "validation_plan_accepted": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "acceptance_candidate_id": "monitoring_owner_response_acceptance:k8s_nvidia_alerts", + "acceptance_fields": [ + "acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "owner_response_ref", + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "action_buttons_allowed": false, + "active_scan_authorized": false, + "affected_scope": "pending_owner_response", + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "add_action_button" + ], + "config_kind": "prometheus_alert_rules", + "control_tier": "C1", + "decision": "pending_owner_response", + "decision_reason": "pending_owner_response", + "expected_scope": "nvidia_gpu_alerts", + "exporter_deploy_authorized": false, + "followup_owner": "pending_owner_response", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "kubectl_action_authorized": false, + "label": "NVIDIA alert rules", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "live_config_hash_accepted": false, + "live_config_hash_ref": null, + "live_evidence_received": false, + "maintenance_window": "pending_owner_response", + "maintenance_window_accepted": false, + "noise_budget_owner": "pending_owner_response", + "noise_budget_owner_accepted": false, + "not_approval": true, + "notification_route_change_authorized": false, + "observability_scope": [ + "GPU health", + "AI workload capacity" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_owner_response", + "quarantine_secret_or_raw_payload", + "reject_execution_request", + "request_supplement", + "ready_for_monitoring_review", + "owner_review_only_update", + "waiting_runtime_gate" + ], + "owner_response_accepted": false, + "owner_response_quarantined": false, + "owner_response_received": false, + "owner_response_ref": null, + "owner_response_rejected": false, + "owner_role_or_team": "pending_owner_response", + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "receiver_owner": "pending_owner_response", + "receiver_owner_accepted": false, + "receiver_route_change_authorized": false, + "recipient_confirmed": false, + "redacted_evidence_refs": [], + "reload_owner": "pending_owner_response", + "reload_owner_accepted": false, + "remote_write_change_authorized": false, + "repo_sha256": "c43a6413269dadc8269b9724ee905650f39926249a37c7339179ec88facdf972", + "repo_source_path": "k8s/monitoring/nvidia-alerts.yaml", + "request_id": "monitoring_owner_request:k8s_nvidia_alerts", + "request_sent": false, + "required_owner_fields": [ + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "followup_owner" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "owner_identity_present", + "decision_reason_present", + "affected_scope_matches_surface", + "redacted_refs_only", + "secret_value_absent", + "live_config_hash_metadata_only", + "reload_owner_present", + "receiver_owner_present", + "route_smoke_plan_present", + "noise_budget_owner_present", + "maintenance_window_present", + "rollback_owner_present", + "validation_plan_present", + "no_runtime_request", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_owner_response", + "rollback_owner": "pending_owner_response", + "rollback_owner_accepted": false, + "route_smoke_accepted": false, + "route_smoke_plan": "pending_owner_response", + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_policy_change_authorized": false, + "source_line_count": 122, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "status": "waiting_owner_response", + "supplement_requested": false, + "surface_id": "k8s_nvidia_alerts", + "telegram_send_authorized": false, + "validation_plan": "pending_owner_response", + "validation_plan_accepted": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "acceptance_candidate_id": "monitoring_owner_response_acceptance:k8s_minio_kali_alerts", + "acceptance_fields": [ + "acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "owner_response_ref", + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "action_buttons_allowed": false, + "active_scan_authorized": false, + "affected_scope": "pending_owner_response", + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "add_action_button" + ], + "config_kind": "prometheus_alert_rules", + "control_tier": "C1", + "decision": "pending_owner_response", + "decision_reason": "pending_owner_response", + "expected_scope": "minio_kali_alerts", + "exporter_deploy_authorized": false, + "followup_owner": "pending_owner_response", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "kubectl_action_authorized": false, + "label": "MinIO / Kali alert rules", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "live_config_hash_accepted": false, + "live_config_hash_ref": null, + "live_evidence_received": false, + "maintenance_window": "pending_owner_response", + "maintenance_window_accepted": false, + "noise_budget_owner": "pending_owner_response", + "noise_budget_owner_accepted": false, + "not_approval": true, + "notification_route_change_authorized": false, + "observability_scope": [ + "MinIO", + "Kali scanner", + "read-only scanner status" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_owner_response", + "quarantine_secret_or_raw_payload", + "reject_execution_request", + "request_supplement", + "ready_for_monitoring_review", + "owner_review_only_update", + "waiting_runtime_gate" + ], + "owner_response_accepted": false, + "owner_response_quarantined": false, + "owner_response_received": false, + "owner_response_ref": null, + "owner_response_rejected": false, + "owner_role_or_team": "pending_owner_response", + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "receiver_owner": "pending_owner_response", + "receiver_owner_accepted": false, + "receiver_route_change_authorized": false, + "recipient_confirmed": false, + "redacted_evidence_refs": [], + "reload_owner": "pending_owner_response", + "reload_owner_accepted": false, + "remote_write_change_authorized": false, + "repo_sha256": "3f3ca8c012a40f5a9983b6f587dfd60ffd0a8fb3dcea6b793cb1d5fbad0fe50b", + "repo_source_path": "k8s/monitoring/minio-kali-alerts.yaml", + "request_id": "monitoring_owner_request:k8s_minio_kali_alerts", + "request_sent": false, + "required_owner_fields": [ + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "followup_owner" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "owner_identity_present", + "decision_reason_present", + "affected_scope_matches_surface", + "redacted_refs_only", + "secret_value_absent", + "live_config_hash_metadata_only", + "reload_owner_present", + "receiver_owner_present", + "route_smoke_plan_present", + "noise_budget_owner_present", + "maintenance_window_present", + "rollback_owner_present", + "validation_plan_present", + "no_runtime_request", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_owner_response", + "rollback_owner": "pending_owner_response", + "rollback_owner_accepted": false, + "route_smoke_accepted": false, + "route_smoke_plan": "pending_owner_response", + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_policy_change_authorized": false, + "source_line_count": 67, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "status": "waiting_owner_response", + "supplement_requested": false, + "surface_id": "k8s_minio_kali_alerts", + "telegram_send_authorized": false, + "validation_plan": "pending_owner_response", + "validation_plan_accepted": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "acceptance_candidate_id": "monitoring_owner_response_acceptance:k8s_flywheel_alerts", + "acceptance_fields": [ + "acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "owner_response_ref", + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "action_buttons_allowed": false, + "active_scan_authorized": false, + "affected_scope": "pending_owner_response", + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "add_action_button" + ], + "config_kind": "prometheus_alert_rules", + "control_tier": "C1", + "decision": "pending_owner_response", + "decision_reason": "pending_owner_response", + "expected_scope": "ai_flywheel_alerts", + "exporter_deploy_authorized": false, + "followup_owner": "pending_owner_response", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "kubectl_action_authorized": false, + "label": "AI flywheel alert rules", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "live_config_hash_accepted": false, + "live_config_hash_ref": null, + "live_evidence_received": false, + "maintenance_window": "pending_owner_response", + "maintenance_window_accepted": false, + "noise_budget_owner": "pending_owner_response", + "noise_budget_owner_accepted": false, + "not_approval": true, + "notification_route_change_authorized": false, + "observability_scope": [ + "AI flywheel", + "learning / runtime health" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_owner_response", + "quarantine_secret_or_raw_payload", + "reject_execution_request", + "request_supplement", + "ready_for_monitoring_review", + "owner_review_only_update", + "waiting_runtime_gate" + ], + "owner_response_accepted": false, + "owner_response_quarantined": false, + "owner_response_received": false, + "owner_response_ref": null, + "owner_response_rejected": false, + "owner_role_or_team": "pending_owner_response", + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "receiver_owner": "pending_owner_response", + "receiver_owner_accepted": false, + "receiver_route_change_authorized": false, + "recipient_confirmed": false, + "redacted_evidence_refs": [], + "reload_owner": "pending_owner_response", + "reload_owner_accepted": false, + "remote_write_change_authorized": false, + "repo_sha256": "74334919400623ff4115472e39ba30a6bbc5383bc7dfd6a3fae7bd06531e7cc6", + "repo_source_path": "k8s/monitoring/flywheel-alerts.yaml", + "request_id": "monitoring_owner_request:k8s_flywheel_alerts", + "request_sent": false, + "required_owner_fields": [ + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "followup_owner" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "owner_identity_present", + "decision_reason_present", + "affected_scope_matches_surface", + "redacted_refs_only", + "secret_value_absent", + "live_config_hash_metadata_only", + "reload_owner_present", + "receiver_owner_present", + "route_smoke_plan_present", + "noise_budget_owner_present", + "maintenance_window_present", + "rollback_owner_present", + "validation_plan_present", + "no_runtime_request", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_owner_response", + "rollback_owner": "pending_owner_response", + "rollback_owner_accepted": false, + "route_smoke_accepted": false, + "route_smoke_plan": "pending_owner_response", + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_policy_change_authorized": false, + "source_line_count": 219, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "status": "waiting_owner_response", + "supplement_requested": false, + "surface_id": "k8s_flywheel_alerts", + "telegram_send_authorized": false, + "validation_plan": "pending_owner_response", + "validation_plan_accepted": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "acceptance_candidate_id": "monitoring_owner_response_acceptance:k8s_alert_chain_monitor", + "acceptance_fields": [ + "acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "owner_response_ref", + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "action_buttons_allowed": false, + "active_scan_authorized": false, + "affected_scope": "pending_owner_response", + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "add_action_button" + ], + "config_kind": "prometheus_alert_rules", + "control_tier": "C1", + "decision": "pending_owner_response", + "decision_reason": "pending_owner_response", + "expected_scope": "alert_chain_monitor", + "exporter_deploy_authorized": false, + "followup_owner": "pending_owner_response", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "kubectl_action_authorized": false, + "label": "Alert chain monitor", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "live_config_hash_accepted": false, + "live_config_hash_ref": null, + "live_evidence_received": false, + "maintenance_window": "pending_owner_response", + "maintenance_window_accepted": false, + "noise_budget_owner": "pending_owner_response", + "noise_budget_owner_accepted": false, + "not_approval": true, + "notification_route_change_authorized": false, + "observability_scope": [ + "Alertmanager chain", + "E2E alert visibility" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_owner_response", + "quarantine_secret_or_raw_payload", + "reject_execution_request", + "request_supplement", + "ready_for_monitoring_review", + "owner_review_only_update", + "waiting_runtime_gate" + ], + "owner_response_accepted": false, + "owner_response_quarantined": false, + "owner_response_received": false, + "owner_response_ref": null, + "owner_response_rejected": false, + "owner_role_or_team": "pending_owner_response", + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "receiver_owner": "pending_owner_response", + "receiver_owner_accepted": false, + "receiver_route_change_authorized": false, + "recipient_confirmed": false, + "redacted_evidence_refs": [], + "reload_owner": "pending_owner_response", + "reload_owner_accepted": false, + "remote_write_change_authorized": false, + "repo_sha256": "03ad55d72425f27071ba3afa8d43959a7ee361cc8f76fcf2ca295a33297bbf54", + "repo_source_path": "k8s/monitoring/alert-chain-monitor.yaml", + "request_id": "monitoring_owner_request:k8s_alert_chain_monitor", + "request_sent": false, + "required_owner_fields": [ + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "followup_owner" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "owner_identity_present", + "decision_reason_present", + "affected_scope_matches_surface", + "redacted_refs_only", + "secret_value_absent", + "live_config_hash_metadata_only", + "reload_owner_present", + "receiver_owner_present", + "route_smoke_plan_present", + "noise_budget_owner_present", + "maintenance_window_present", + "rollback_owner_present", + "validation_plan_present", + "no_runtime_request", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_owner_response", + "rollback_owner": "pending_owner_response", + "rollback_owner_accepted": false, + "route_smoke_accepted": false, + "route_smoke_plan": "pending_owner_response", + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_policy_change_authorized": false, + "source_line_count": 202, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "status": "waiting_owner_response", + "supplement_requested": false, + "surface_id": "k8s_alert_chain_monitor", + "telegram_send_authorized": false, + "validation_plan": "pending_owner_response", + "validation_plan_accepted": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "acceptance_candidate_id": "monitoring_owner_response_acceptance:app_alert_rules_yaml", + "acceptance_fields": [ + "acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "owner_response_ref", + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "action_buttons_allowed": false, + "active_scan_authorized": false, + "affected_scope": "pending_owner_response", + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "add_action_button" + ], + "config_kind": "app_alert_rule_contract", + "control_tier": "C1", + "decision": "pending_owner_response", + "decision_reason": "pending_owner_response", + "expected_scope": "api_alert_rule_engine", + "exporter_deploy_authorized": false, + "followup_owner": "pending_owner_response", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "kubectl_action_authorized": false, + "label": "API alert rule engine rules", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "live_config_hash_accepted": false, + "live_config_hash_ref": null, + "live_evidence_received": false, + "maintenance_window": "pending_owner_response", + "maintenance_window_accepted": false, + "noise_budget_owner": "pending_owner_response", + "noise_budget_owner_accepted": false, + "not_approval": true, + "notification_route_change_authorized": false, + "observability_scope": [ + "alert classification", + "approval recommendations", + "playbook matching" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_owner_response", + "quarantine_secret_or_raw_payload", + "reject_execution_request", + "request_supplement", + "ready_for_monitoring_review", + "owner_review_only_update", + "waiting_runtime_gate" + ], + "owner_response_accepted": false, + "owner_response_quarantined": false, + "owner_response_received": false, + "owner_response_ref": null, + "owner_response_rejected": false, + "owner_role_or_team": "pending_owner_response", + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "receiver_owner": "pending_owner_response", + "receiver_owner_accepted": false, + "receiver_route_change_authorized": false, + "recipient_confirmed": false, + "redacted_evidence_refs": [], + "reload_owner": "pending_owner_response", + "reload_owner_accepted": false, + "remote_write_change_authorized": false, + "repo_sha256": "5786505aa05073bbb2069203a443a75c8337a289dc015630792d0c201c85cafb", + "repo_source_path": "apps/api/alert_rules.yaml", + "request_id": "monitoring_owner_request:app_alert_rules_yaml", + "request_sent": false, + "required_owner_fields": [ + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "followup_owner" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "owner_identity_present", + "decision_reason_present", + "affected_scope_matches_surface", + "redacted_refs_only", + "secret_value_absent", + "live_config_hash_metadata_only", + "reload_owner_present", + "receiver_owner_present", + "route_smoke_plan_present", + "noise_budget_owner_present", + "maintenance_window_present", + "rollback_owner_present", + "validation_plan_present", + "no_runtime_request", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_owner_response", + "rollback_owner": "pending_owner_response", + "rollback_owner_accepted": false, + "route_smoke_accepted": false, + "route_smoke_plan": "pending_owner_response", + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_policy_change_authorized": false, + "source_line_count": 889, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "status": "waiting_owner_response", + "supplement_requested": false, + "surface_id": "app_alert_rules_yaml", + "telegram_send_authorized": false, + "validation_plan": "pending_owner_response", + "validation_plan_accepted": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "acceptance_candidate_id": "monitoring_owner_response_acceptance:grafana_agent_step_latency_rules", + "acceptance_fields": [ + "acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "owner_response_ref", + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "action_buttons_allowed": false, + "active_scan_authorized": false, + "affected_scope": "pending_owner_response", + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "add_action_button" + ], + "config_kind": "grafana_alert_rules", + "control_tier": "C1", + "decision": "pending_owner_response", + "decision_reason": "pending_owner_response", + "expected_scope": "grafana_agent_step_latency_rules", + "exporter_deploy_authorized": false, + "followup_owner": "pending_owner_response", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "kubectl_action_authorized": false, + "label": "Grafana agent step latency rules", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "live_config_hash_accepted": false, + "live_config_hash_ref": null, + "live_evidence_received": false, + "maintenance_window": "pending_owner_response", + "maintenance_window_accepted": false, + "noise_budget_owner": "pending_owner_response", + "noise_budget_owner_accepted": false, + "not_approval": true, + "notification_route_change_authorized": false, + "observability_scope": [ + "agent step latency", + "Grafana alerting" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_owner_response", + "quarantine_secret_or_raw_payload", + "reject_execution_request", + "request_supplement", + "ready_for_monitoring_review", + "owner_review_only_update", + "waiting_runtime_gate" + ], + "owner_response_accepted": false, + "owner_response_quarantined": false, + "owner_response_received": false, + "owner_response_ref": null, + "owner_response_rejected": false, + "owner_role_or_team": "pending_owner_response", + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "receiver_owner": "pending_owner_response", + "receiver_owner_accepted": false, + "receiver_route_change_authorized": false, + "recipient_confirmed": false, + "redacted_evidence_refs": [], + "reload_owner": "pending_owner_response", + "reload_owner_accepted": false, + "remote_write_change_authorized": false, + "repo_sha256": "24b086bdf0eaca72c90fc323e562de4b47708c25f2427c0fc0b350e883431564", + "repo_source_path": "ops/monitoring/grafana/agent_step_latency_rules.yaml", + "request_id": "monitoring_owner_request:grafana_agent_step_latency_rules", + "request_sent": false, + "required_owner_fields": [ + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "followup_owner" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "owner_identity_present", + "decision_reason_present", + "affected_scope_matches_surface", + "redacted_refs_only", + "secret_value_absent", + "live_config_hash_metadata_only", + "reload_owner_present", + "receiver_owner_present", + "route_smoke_plan_present", + "noise_budget_owner_present", + "maintenance_window_present", + "rollback_owner_present", + "validation_plan_present", + "no_runtime_request", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_owner_response", + "rollback_owner": "pending_owner_response", + "rollback_owner_accepted": false, + "route_smoke_accepted": false, + "route_smoke_plan": "pending_owner_response", + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_policy_change_authorized": false, + "source_line_count": 201, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "status": "waiting_owner_response", + "supplement_requested": false, + "surface_id": "grafana_agent_step_latency_rules", + "telegram_send_authorized": false, + "validation_plan": "pending_owner_response", + "validation_plan_accepted": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "acceptance_candidate_id": "monitoring_owner_response_acceptance:grafana_ai_slo_dashboard", + "acceptance_fields": [ + "acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "owner_response_ref", + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "action_buttons_allowed": false, + "active_scan_authorized": false, + "affected_scope": "pending_owner_response", + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "add_action_button" + ], + "config_kind": "grafana_dashboard", + "control_tier": "C1", + "decision": "pending_owner_response", + "decision_reason": "pending_owner_response", + "expected_scope": "grafana_ai_slo_dashboard", + "exporter_deploy_authorized": false, + "followup_owner": "pending_owner_response", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "kubectl_action_authorized": false, + "label": "Grafana AI SLO dashboard", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "live_config_hash_accepted": false, + "live_config_hash_ref": null, + "live_evidence_received": false, + "maintenance_window": "pending_owner_response", + "maintenance_window_accepted": false, + "noise_budget_owner": "pending_owner_response", + "noise_budget_owner_accepted": false, + "not_approval": true, + "notification_route_change_authorized": false, + "observability_scope": [ + "AI SLO", + "dashboard panels" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_owner_response", + "quarantine_secret_or_raw_payload", + "reject_execution_request", + "request_supplement", + "ready_for_monitoring_review", + "owner_review_only_update", + "waiting_runtime_gate" + ], + "owner_response_accepted": false, + "owner_response_quarantined": false, + "owner_response_received": false, + "owner_response_ref": null, + "owner_response_rejected": false, + "owner_role_or_team": "pending_owner_response", + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "receiver_owner": "pending_owner_response", + "receiver_owner_accepted": false, + "receiver_route_change_authorized": false, + "recipient_confirmed": false, + "redacted_evidence_refs": [], + "reload_owner": "pending_owner_response", + "reload_owner_accepted": false, + "remote_write_change_authorized": false, + "repo_sha256": "e7518d6c234330d4b19c056a1810cb8037fbe1572f5a7968ac623dbee3630db3", + "repo_source_path": "ops/monitoring/grafana/dashboards/ai-slo-dashboard.json", + "request_id": "monitoring_owner_request:grafana_ai_slo_dashboard", + "request_sent": false, + "required_owner_fields": [ + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "followup_owner" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "owner_identity_present", + "decision_reason_present", + "affected_scope_matches_surface", + "redacted_refs_only", + "secret_value_absent", + "live_config_hash_metadata_only", + "reload_owner_present", + "receiver_owner_present", + "route_smoke_plan_present", + "noise_budget_owner_present", + "maintenance_window_present", + "rollback_owner_present", + "validation_plan_present", + "no_runtime_request", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_owner_response", + "rollback_owner": "pending_owner_response", + "rollback_owner_accepted": false, + "route_smoke_accepted": false, + "route_smoke_plan": "pending_owner_response", + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_policy_change_authorized": false, + "source_line_count": 496, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "status": "waiting_owner_response", + "supplement_requested": false, + "surface_id": "grafana_ai_slo_dashboard", + "telegram_send_authorized": false, + "validation_plan": "pending_owner_response", + "validation_plan_accepted": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "acceptance_candidate_id": "monitoring_owner_response_acceptance:grafana_ollama_failover_dashboard", + "acceptance_fields": [ + "acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "owner_response_ref", + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "action_buttons_allowed": false, + "active_scan_authorized": false, + "affected_scope": "pending_owner_response", + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "add_action_button" + ], + "config_kind": "grafana_dashboard", + "control_tier": "C1", + "decision": "pending_owner_response", + "decision_reason": "pending_owner_response", + "expected_scope": "grafana_ollama_failover_dashboard", + "exporter_deploy_authorized": false, + "followup_owner": "pending_owner_response", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "kubectl_action_authorized": false, + "label": "Grafana Ollama failover dashboard", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "live_config_hash_accepted": false, + "live_config_hash_ref": null, + "live_evidence_received": false, + "maintenance_window": "pending_owner_response", + "maintenance_window_accepted": false, + "noise_budget_owner": "pending_owner_response", + "noise_budget_owner_accepted": false, + "not_approval": true, + "notification_route_change_authorized": false, + "observability_scope": [ + "Ollama failover", + "AI provider health" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_owner_response", + "quarantine_secret_or_raw_payload", + "reject_execution_request", + "request_supplement", + "ready_for_monitoring_review", + "owner_review_only_update", + "waiting_runtime_gate" + ], + "owner_response_accepted": false, + "owner_response_quarantined": false, + "owner_response_received": false, + "owner_response_ref": null, + "owner_response_rejected": false, + "owner_role_or_team": "pending_owner_response", + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "receiver_owner": "pending_owner_response", + "receiver_owner_accepted": false, + "receiver_route_change_authorized": false, + "recipient_confirmed": false, + "redacted_evidence_refs": [], + "reload_owner": "pending_owner_response", + "reload_owner_accepted": false, + "remote_write_change_authorized": false, + "repo_sha256": "f583bc00a8af0c87f9594fb2452b9835e90a7c1473131bf8fb4b6709887a7a5b", + "repo_source_path": "ops/monitoring/grafana/dashboards/ollama_failover.json", + "request_id": "monitoring_owner_request:grafana_ollama_failover_dashboard", + "request_sent": false, + "required_owner_fields": [ + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "followup_owner" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "owner_identity_present", + "decision_reason_present", + "affected_scope_matches_surface", + "redacted_refs_only", + "secret_value_absent", + "live_config_hash_metadata_only", + "reload_owner_present", + "receiver_owner_present", + "route_smoke_plan_present", + "noise_budget_owner_present", + "maintenance_window_present", + "rollback_owner_present", + "validation_plan_present", + "no_runtime_request", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_owner_response", + "rollback_owner": "pending_owner_response", + "rollback_owner_accepted": false, + "route_smoke_accepted": false, + "route_smoke_plan": "pending_owner_response", + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_policy_change_authorized": false, + "source_line_count": 295, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "status": "waiting_owner_response", + "supplement_requested": false, + "surface_id": "grafana_ollama_failover_dashboard", + "telegram_send_authorized": false, + "validation_plan": "pending_owner_response", + "validation_plan_accepted": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "acceptance_candidate_id": "monitoring_owner_response_acceptance:grafana_ai_monitoring_dashboard", + "acceptance_fields": [ + "acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "owner_response_ref", + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "action_buttons_allowed": false, + "active_scan_authorized": false, + "affected_scope": "pending_owner_response", + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "add_action_button" + ], + "config_kind": "grafana_dashboard", + "control_tier": "C1", + "decision": "pending_owner_response", + "decision_reason": "pending_owner_response", + "expected_scope": "grafana_ai_monitoring_dashboard", + "exporter_deploy_authorized": false, + "followup_owner": "pending_owner_response", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "kubectl_action_authorized": false, + "label": "Grafana AI monitoring dashboard", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "live_config_hash_accepted": false, + "live_config_hash_ref": null, + "live_evidence_received": false, + "maintenance_window": "pending_owner_response", + "maintenance_window_accepted": false, + "noise_budget_owner": "pending_owner_response", + "noise_budget_owner_accepted": false, + "not_approval": true, + "notification_route_change_authorized": false, + "observability_scope": [ + "AI monitoring", + "runtime health" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_owner_response", + "quarantine_secret_or_raw_payload", + "reject_execution_request", + "request_supplement", + "ready_for_monitoring_review", + "owner_review_only_update", + "waiting_runtime_gate" + ], + "owner_response_accepted": false, + "owner_response_quarantined": false, + "owner_response_received": false, + "owner_response_ref": null, + "owner_response_rejected": false, + "owner_role_or_team": "pending_owner_response", + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "receiver_owner": "pending_owner_response", + "receiver_owner_accepted": false, + "receiver_route_change_authorized": false, + "recipient_confirmed": false, + "redacted_evidence_refs": [], + "reload_owner": "pending_owner_response", + "reload_owner_accepted": false, + "remote_write_change_authorized": false, + "repo_sha256": "acf865af021100244b91358c423e9d73d8bf2d58221cf274ea7ad7ae2fc933fd", + "repo_source_path": "ops/grafana/dashboards/ai-monitoring.json", + "request_id": "monitoring_owner_request:grafana_ai_monitoring_dashboard", + "request_sent": false, + "required_owner_fields": [ + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "followup_owner" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "owner_identity_present", + "decision_reason_present", + "affected_scope_matches_surface", + "redacted_refs_only", + "secret_value_absent", + "live_config_hash_metadata_only", + "reload_owner_present", + "receiver_owner_present", + "route_smoke_plan_present", + "noise_budget_owner_present", + "maintenance_window_present", + "rollback_owner_present", + "validation_plan_present", + "no_runtime_request", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_owner_response", + "rollback_owner": "pending_owner_response", + "rollback_owner_accepted": false, + "route_smoke_accepted": false, + "route_smoke_plan": "pending_owner_response", + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_policy_change_authorized": false, + "source_line_count": 347, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "status": "waiting_owner_response", + "supplement_requested": false, + "surface_id": "grafana_ai_monitoring_dashboard", + "telegram_send_authorized": false, + "validation_plan": "pending_owner_response", + "validation_plan_accepted": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "acceptance_candidate_id": "monitoring_owner_response_acceptance:grafana_infra_monitoring_dashboard", + "acceptance_fields": [ + "acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "owner_response_ref", + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "action_buttons_allowed": false, + "active_scan_authorized": false, + "affected_scope": "pending_owner_response", + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "add_action_button" + ], + "config_kind": "grafana_dashboard", + "control_tier": "C1", + "decision": "pending_owner_response", + "decision_reason": "pending_owner_response", + "expected_scope": "grafana_infra_monitoring_dashboard", + "exporter_deploy_authorized": false, + "followup_owner": "pending_owner_response", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "kubectl_action_authorized": false, + "label": "Grafana infra monitoring dashboard", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "live_config_hash_accepted": false, + "live_config_hash_ref": null, + "live_evidence_received": false, + "maintenance_window": "pending_owner_response", + "maintenance_window_accepted": false, + "noise_budget_owner": "pending_owner_response", + "noise_budget_owner_accepted": false, + "not_approval": true, + "notification_route_change_authorized": false, + "observability_scope": [ + "infrastructure monitoring", + "host health" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_owner_response", + "quarantine_secret_or_raw_payload", + "reject_execution_request", + "request_supplement", + "ready_for_monitoring_review", + "owner_review_only_update", + "waiting_runtime_gate" + ], + "owner_response_accepted": false, + "owner_response_quarantined": false, + "owner_response_received": false, + "owner_response_ref": null, + "owner_response_rejected": false, + "owner_role_or_team": "pending_owner_response", + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "receiver_owner": "pending_owner_response", + "receiver_owner_accepted": false, + "receiver_route_change_authorized": false, + "recipient_confirmed": false, + "redacted_evidence_refs": [], + "reload_owner": "pending_owner_response", + "reload_owner_accepted": false, + "remote_write_change_authorized": false, + "repo_sha256": "40c696e140585bd1889c4e07cbd8f9be302c1653b5d0736cd93c8d9c29c2beb0", + "repo_source_path": "ops/grafana/dashboards/infra-monitoring.json", + "request_id": "monitoring_owner_request:grafana_infra_monitoring_dashboard", + "request_sent": false, + "required_owner_fields": [ + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "followup_owner" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "owner_identity_present", + "decision_reason_present", + "affected_scope_matches_surface", + "redacted_refs_only", + "secret_value_absent", + "live_config_hash_metadata_only", + "reload_owner_present", + "receiver_owner_present", + "route_smoke_plan_present", + "noise_budget_owner_present", + "maintenance_window_present", + "rollback_owner_present", + "validation_plan_present", + "no_runtime_request", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_owner_response", + "rollback_owner": "pending_owner_response", + "rollback_owner_accepted": false, + "route_smoke_accepted": false, + "route_smoke_plan": "pending_owner_response", + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_policy_change_authorized": false, + "source_line_count": 306, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "status": "waiting_owner_response", + "supplement_requested": false, + "surface_id": "grafana_infra_monitoring_dashboard", + "telegram_send_authorized": false, + "validation_plan": "pending_owner_response", + "validation_plan_accepted": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "acceptance_candidate_id": "monitoring_owner_response_acceptance:grafana_nvidia_nemotron_dashboard", + "acceptance_fields": [ + "acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "owner_response_ref", + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "action_buttons_allowed": false, + "active_scan_authorized": false, + "affected_scope": "pending_owner_response", + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "add_action_button" + ], + "config_kind": "grafana_dashboard", + "control_tier": "C1", + "decision": "pending_owner_response", + "decision_reason": "pending_owner_response", + "expected_scope": "grafana_nvidia_nemotron_dashboard", + "exporter_deploy_authorized": false, + "followup_owner": "pending_owner_response", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "kubectl_action_authorized": false, + "label": "Grafana NVIDIA / NemoTron dashboard", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "live_config_hash_accepted": false, + "live_config_hash_ref": null, + "live_evidence_received": false, + "maintenance_window": "pending_owner_response", + "maintenance_window_accepted": false, + "noise_budget_owner": "pending_owner_response", + "noise_budget_owner_accepted": false, + "not_approval": true, + "notification_route_change_authorized": false, + "observability_scope": [ + "NVIDIA", + "NemoTron", + "GPU AI route" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_owner_response", + "quarantine_secret_or_raw_payload", + "reject_execution_request", + "request_supplement", + "ready_for_monitoring_review", + "owner_review_only_update", + "waiting_runtime_gate" + ], + "owner_response_accepted": false, + "owner_response_quarantined": false, + "owner_response_received": false, + "owner_response_ref": null, + "owner_response_rejected": false, + "owner_role_or_team": "pending_owner_response", + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "receiver_owner": "pending_owner_response", + "receiver_owner_accepted": false, + "receiver_route_change_authorized": false, + "recipient_confirmed": false, + "redacted_evidence_refs": [], + "reload_owner": "pending_owner_response", + "reload_owner_accepted": false, + "remote_write_change_authorized": false, + "repo_sha256": "f47280987546c8546058d61b25a41f14bbb573e33a9c08f45b138d8176397d82", + "repo_source_path": "ops/grafana/dashboards/nvidia-nemotron.json", + "request_id": "monitoring_owner_request:grafana_nvidia_nemotron_dashboard", + "request_sent": false, + "required_owner_fields": [ + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "followup_owner" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "owner_identity_present", + "decision_reason_present", + "affected_scope_matches_surface", + "redacted_refs_only", + "secret_value_absent", + "live_config_hash_metadata_only", + "reload_owner_present", + "receiver_owner_present", + "route_smoke_plan_present", + "noise_budget_owner_present", + "maintenance_window_present", + "rollback_owner_present", + "validation_plan_present", + "no_runtime_request", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_owner_response", + "rollback_owner": "pending_owner_response", + "rollback_owner_accepted": false, + "route_smoke_accepted": false, + "route_smoke_plan": "pending_owner_response", + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_policy_change_authorized": false, + "source_line_count": 1426, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "status": "waiting_owner_response", + "supplement_requested": false, + "surface_id": "grafana_nvidia_nemotron_dashboard", + "telegram_send_authorized": false, + "validation_plan": "pending_owner_response", + "validation_plan_accepted": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "acceptance_candidate_id": "monitoring_owner_response_acceptance:signoz_otel_collector_config", + "acceptance_fields": [ + "acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "owner_response_ref", + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "action_buttons_allowed": false, + "active_scan_authorized": false, + "affected_scope": "pending_owner_response", + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "add_action_button" + ], + "config_kind": "otel_collector_config", + "control_tier": "C1", + "decision": "pending_owner_response", + "decision_reason": "pending_owner_response", + "expected_scope": "signoz_otel_collector_phase_o", + "exporter_deploy_authorized": false, + "followup_owner": "pending_owner_response", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "kubectl_action_authorized": false, + "label": "SigNoz OTEL collector config", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "live_config_hash_accepted": false, + "live_config_hash_ref": null, + "live_evidence_received": false, + "maintenance_window": "pending_owner_response", + "maintenance_window_accepted": false, + "noise_budget_owner": "pending_owner_response", + "noise_budget_owner_accepted": false, + "not_approval": true, + "notification_route_change_authorized": false, + "observability_scope": [ + "OTEL collector", + "traces / metrics / logs routing" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_owner_response", + "quarantine_secret_or_raw_payload", + "reject_execution_request", + "request_supplement", + "ready_for_monitoring_review", + "owner_review_only_update", + "waiting_runtime_gate" + ], + "owner_response_accepted": false, + "owner_response_quarantined": false, + "owner_response_received": false, + "owner_response_ref": null, + "owner_response_rejected": false, + "owner_role_or_team": "pending_owner_response", + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "receiver_owner": "pending_owner_response", + "receiver_owner_accepted": false, + "receiver_route_change_authorized": false, + "recipient_confirmed": false, + "redacted_evidence_refs": [], + "reload_owner": "pending_owner_response", + "reload_owner_accepted": false, + "remote_write_change_authorized": false, + "repo_sha256": "85abede3243b0775da600d1a5e092df3ff8c79eea56131b0da52a51aa7f668b9", + "repo_source_path": "ops/signoz/otel-collector-config-phase-o.yaml", + "request_id": "monitoring_owner_request:signoz_otel_collector_config", + "request_sent": false, + "required_owner_fields": [ + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "followup_owner" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "owner_identity_present", + "decision_reason_present", + "affected_scope_matches_surface", + "redacted_refs_only", + "secret_value_absent", + "live_config_hash_metadata_only", + "reload_owner_present", + "receiver_owner_present", + "route_smoke_plan_present", + "noise_budget_owner_present", + "maintenance_window_present", + "rollback_owner_present", + "validation_plan_present", + "no_runtime_request", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_owner_response", + "rollback_owner": "pending_owner_response", + "rollback_owner_accepted": false, + "route_smoke_accepted": false, + "route_smoke_plan": "pending_owner_response", + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_policy_change_authorized": false, + "source_line_count": 188, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "status": "waiting_owner_response", + "supplement_requested": false, + "surface_id": "signoz_otel_collector_config", + "telegram_send_authorized": false, + "validation_plan": "pending_owner_response", + "validation_plan_accepted": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "acceptance_candidate_id": "monitoring_owner_response_acceptance:signoz_alerting_rules", + "acceptance_fields": [ + "acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "owner_response_ref", + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "action_buttons_allowed": false, + "active_scan_authorized": false, + "affected_scope": "pending_owner_response", + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "add_action_button" + ], + "config_kind": "signoz_alert_rules", + "control_tier": "C1", + "decision": "pending_owner_response", + "decision_reason": "pending_owner_response", + "expected_scope": "signoz_alerting_rules", + "exporter_deploy_authorized": false, + "followup_owner": "pending_owner_response", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "kubectl_action_authorized": false, + "label": "SigNoz alerting rules", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "live_config_hash_accepted": false, + "live_config_hash_ref": null, + "live_evidence_received": false, + "maintenance_window": "pending_owner_response", + "maintenance_window_accepted": false, + "noise_budget_owner": "pending_owner_response", + "noise_budget_owner_accepted": false, + "not_approval": true, + "notification_route_change_authorized": false, + "observability_scope": [ + "SigNoz alert rules", + "logs / traces alerting" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_owner_response", + "quarantine_secret_or_raw_payload", + "reject_execution_request", + "request_supplement", + "ready_for_monitoring_review", + "owner_review_only_update", + "waiting_runtime_gate" + ], + "owner_response_accepted": false, + "owner_response_quarantined": false, + "owner_response_received": false, + "owner_response_ref": null, + "owner_response_rejected": false, + "owner_role_or_team": "pending_owner_response", + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "receiver_owner": "pending_owner_response", + "receiver_owner_accepted": false, + "receiver_route_change_authorized": false, + "recipient_confirmed": false, + "redacted_evidence_refs": [], + "reload_owner": "pending_owner_response", + "reload_owner_accepted": false, + "remote_write_change_authorized": false, + "repo_sha256": "a70519216e354ff78e323b1d77898e9d55b19eea5704fd8a8e9dd928196881e4", + "repo_source_path": "ops/signoz/alerting/rules.yaml", + "request_id": "monitoring_owner_request:signoz_alerting_rules", + "request_sent": false, + "required_owner_fields": [ + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "followup_owner" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "owner_identity_present", + "decision_reason_present", + "affected_scope_matches_surface", + "redacted_refs_only", + "secret_value_absent", + "live_config_hash_metadata_only", + "reload_owner_present", + "receiver_owner_present", + "route_smoke_plan_present", + "noise_budget_owner_present", + "maintenance_window_present", + "rollback_owner_present", + "validation_plan_present", + "no_runtime_request", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_owner_response", + "rollback_owner": "pending_owner_response", + "rollback_owner_accepted": false, + "route_smoke_accepted": false, + "route_smoke_plan": "pending_owner_response", + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_policy_change_authorized": false, + "source_line_count": 165, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "status": "waiting_owner_response", + "supplement_requested": false, + "surface_id": "signoz_alerting_rules", + "telegram_send_authorized": false, + "validation_plan": "pending_owner_response", + "validation_plan_accepted": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "acceptance_candidate_id": "monitoring_owner_response_acceptance:signoz_log_rules", + "acceptance_fields": [ + "acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "owner_response_ref", + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "action_buttons_allowed": false, + "active_scan_authorized": false, + "affected_scope": "pending_owner_response", + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "add_action_button" + ], + "config_kind": "signoz_log_rules", + "control_tier": "C1", + "decision": "pending_owner_response", + "decision_reason": "pending_owner_response", + "expected_scope": "signoz_log_alert_rules", + "exporter_deploy_authorized": false, + "followup_owner": "pending_owner_response", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "kubectl_action_authorized": false, + "label": "SigNoz log alert rules", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "live_config_hash_accepted": false, + "live_config_hash_ref": null, + "live_evidence_received": false, + "maintenance_window": "pending_owner_response", + "maintenance_window_accepted": false, + "noise_budget_owner": "pending_owner_response", + "noise_budget_owner_accepted": false, + "not_approval": true, + "notification_route_change_authorized": false, + "observability_scope": [ + "log alerting", + "manual rule translation" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_owner_response", + "quarantine_secret_or_raw_payload", + "reject_execution_request", + "request_supplement", + "ready_for_monitoring_review", + "owner_review_only_update", + "waiting_runtime_gate" + ], + "owner_response_accepted": false, + "owner_response_quarantined": false, + "owner_response_received": false, + "owner_response_ref": null, + "owner_response_rejected": false, + "owner_role_or_team": "pending_owner_response", + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "receiver_owner": "pending_owner_response", + "receiver_owner_accepted": false, + "receiver_route_change_authorized": false, + "recipient_confirmed": false, + "redacted_evidence_refs": [], + "reload_owner": "pending_owner_response", + "reload_owner_accepted": false, + "remote_write_change_authorized": false, + "repo_sha256": "f4e77c4e8e6fa149df5a4b5ef4651e514f9e0142f66f3f27dbd951fe3abed533", + "repo_source_path": "ops/signoz/alerting/log-rules.md", + "request_id": "monitoring_owner_request:signoz_log_rules", + "request_sent": false, + "required_owner_fields": [ + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "followup_owner" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "owner_identity_present", + "decision_reason_present", + "affected_scope_matches_surface", + "redacted_refs_only", + "secret_value_absent", + "live_config_hash_metadata_only", + "reload_owner_present", + "receiver_owner_present", + "route_smoke_plan_present", + "noise_budget_owner_present", + "maintenance_window_present", + "rollback_owner_present", + "validation_plan_present", + "no_runtime_request", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_owner_response", + "rollback_owner": "pending_owner_response", + "rollback_owner_accepted": false, + "route_smoke_accepted": false, + "route_smoke_plan": "pending_owner_response", + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_policy_change_authorized": false, + "source_line_count": 107, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "status": "waiting_owner_response", + "supplement_requested": false, + "surface_id": "signoz_log_rules", + "telegram_send_authorized": false, + "validation_plan": "pending_owner_response", + "validation_plan_accepted": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "acceptance_candidate_id": "monitoring_owner_response_acceptance:sentry_self_hosted_compose", + "acceptance_fields": [ + "acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "owner_response_ref", + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "action_buttons_allowed": false, + "active_scan_authorized": false, + "affected_scope": "pending_owner_response", + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "add_action_button" + ], + "config_kind": "sentry_runtime_compose", + "control_tier": "C1", + "decision": "pending_owner_response", + "decision_reason": "pending_owner_response", + "expected_scope": "sentry_self_hosted_runtime", + "exporter_deploy_authorized": false, + "followup_owner": "pending_owner_response", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "kubectl_action_authorized": false, + "label": "Sentry self-hosted compose", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "live_config_hash_accepted": false, + "live_config_hash_ref": null, + "live_evidence_received": false, + "maintenance_window": "pending_owner_response", + "maintenance_window_accepted": false, + "noise_budget_owner": "pending_owner_response", + "noise_budget_owner_accepted": false, + "not_approval": true, + "notification_route_change_authorized": false, + "observability_scope": [ + "Sentry self-hosted", + "ClickHouse / Postgres / Redis boundary" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_owner_response", + "quarantine_secret_or_raw_payload", + "reject_execution_request", + "request_supplement", + "ready_for_monitoring_review", + "owner_review_only_update", + "waiting_runtime_gate" + ], + "owner_response_accepted": false, + "owner_response_quarantined": false, + "owner_response_received": false, + "owner_response_ref": null, + "owner_response_rejected": false, + "owner_role_or_team": "pending_owner_response", + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "receiver_owner": "pending_owner_response", + "receiver_owner_accepted": false, + "receiver_route_change_authorized": false, + "recipient_confirmed": false, + "redacted_evidence_refs": [], + "reload_owner": "pending_owner_response", + "reload_owner_accepted": false, + "remote_write_change_authorized": false, + "repo_sha256": "bba852dc0d73934998fa375130168615f9ac7611ce3f3efaa901e3b7e222eae3", + "repo_source_path": "ops/sentry-self-hosted/docker-compose.yml", + "request_id": "monitoring_owner_request:sentry_self_hosted_compose", + "request_sent": false, + "required_owner_fields": [ + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "followup_owner" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "owner_identity_present", + "decision_reason_present", + "affected_scope_matches_surface", + "redacted_refs_only", + "secret_value_absent", + "live_config_hash_metadata_only", + "reload_owner_present", + "receiver_owner_present", + "route_smoke_plan_present", + "noise_budget_owner_present", + "maintenance_window_present", + "rollback_owner_present", + "validation_plan_present", + "no_runtime_request", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_owner_response", + "rollback_owner": "pending_owner_response", + "rollback_owner_accepted": false, + "route_smoke_accepted": false, + "route_smoke_plan": "pending_owner_response", + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_policy_change_authorized": false, + "source_line_count": 49, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "status": "waiting_owner_response", + "supplement_requested": false, + "surface_id": "sentry_self_hosted_compose", + "telegram_send_authorized": false, + "validation_plan": "pending_owner_response", + "validation_plan_accepted": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "acceptance_candidate_id": "monitoring_owner_response_acceptance:sentry_self_hosted_deploy", + "acceptance_fields": [ + "acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "owner_response_ref", + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "action_buttons_allowed": false, + "active_scan_authorized": false, + "affected_scope": "pending_owner_response", + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "add_action_button" + ], + "config_kind": "sentry_deploy_script", + "control_tier": "C1", + "decision": "pending_owner_response", + "decision_reason": "pending_owner_response", + "expected_scope": "sentry_self_hosted_deploy", + "exporter_deploy_authorized": false, + "followup_owner": "pending_owner_response", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "kubectl_action_authorized": false, + "label": "Sentry self-hosted deploy script", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "live_config_hash_accepted": false, + "live_config_hash_ref": null, + "live_evidence_received": false, + "maintenance_window": "pending_owner_response", + "maintenance_window_accepted": false, + "noise_budget_owner": "pending_owner_response", + "noise_budget_owner_accepted": false, + "not_approval": true, + "notification_route_change_authorized": false, + "observability_scope": [ + "Sentry deploy", + "compose pull / up", + "migration boundary" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_owner_response", + "quarantine_secret_or_raw_payload", + "reject_execution_request", + "request_supplement", + "ready_for_monitoring_review", + "owner_review_only_update", + "waiting_runtime_gate" + ], + "owner_response_accepted": false, + "owner_response_quarantined": false, + "owner_response_received": false, + "owner_response_ref": null, + "owner_response_rejected": false, + "owner_role_or_team": "pending_owner_response", + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "receiver_owner": "pending_owner_response", + "receiver_owner_accepted": false, + "receiver_route_change_authorized": false, + "recipient_confirmed": false, + "redacted_evidence_refs": [], + "reload_owner": "pending_owner_response", + "reload_owner_accepted": false, + "remote_write_change_authorized": false, + "repo_sha256": "b3dfb577c398a12d8f0521b159d18413257850eed7220234fcc491ff9aee9c7a", + "repo_source_path": "ops/sentry-self-hosted/deploy.sh", + "request_id": "monitoring_owner_request:sentry_self_hosted_deploy", + "request_sent": false, + "required_owner_fields": [ + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "followup_owner" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "owner_identity_present", + "decision_reason_present", + "affected_scope_matches_surface", + "redacted_refs_only", + "secret_value_absent", + "live_config_hash_metadata_only", + "reload_owner_present", + "receiver_owner_present", + "route_smoke_plan_present", + "noise_budget_owner_present", + "maintenance_window_present", + "rollback_owner_present", + "validation_plan_present", + "no_runtime_request", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_owner_response", + "rollback_owner": "pending_owner_response", + "rollback_owner_accepted": false, + "route_smoke_accepted": false, + "route_smoke_plan": "pending_owner_response", + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_policy_change_authorized": false, + "source_line_count": 65, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "status": "waiting_owner_response", + "supplement_requested": false, + "surface_id": "sentry_self_hosted_deploy", + "telegram_send_authorized": false, + "validation_plan": "pending_owner_response", + "validation_plan_accepted": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": true + }, + { + "acceptance_candidate_id": "monitoring_owner_response_acceptance:langfuse_compose", + "acceptance_fields": [ + "acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "owner_response_ref", + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "action_buttons_allowed": false, + "active_scan_authorized": false, + "affected_scope": "pending_owner_response", + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "add_action_button" + ], + "config_kind": "langfuse_runtime_compose", + "control_tier": "C1", + "decision": "pending_owner_response", + "decision_reason": "pending_owner_response", + "expected_scope": "langfuse_observability_runtime", + "exporter_deploy_authorized": false, + "followup_owner": "pending_owner_response", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "kubectl_action_authorized": false, + "label": "Langfuse compose", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "live_config_hash_accepted": false, + "live_config_hash_ref": null, + "live_evidence_received": false, + "maintenance_window": "pending_owner_response", + "maintenance_window_accepted": false, + "noise_budget_owner": "pending_owner_response", + "noise_budget_owner_accepted": false, + "not_approval": true, + "notification_route_change_authorized": false, + "observability_scope": [ + "Langfuse", + "LLM trace storage", + "PostgreSQL dependency" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_owner_response", + "quarantine_secret_or_raw_payload", + "reject_execution_request", + "request_supplement", + "ready_for_monitoring_review", + "owner_review_only_update", + "waiting_runtime_gate" + ], + "owner_response_accepted": false, + "owner_response_quarantined": false, + "owner_response_received": false, + "owner_response_ref": null, + "owner_response_rejected": false, + "owner_role_or_team": "pending_owner_response", + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "receiver_owner": "pending_owner_response", + "receiver_owner_accepted": false, + "receiver_route_change_authorized": false, + "recipient_confirmed": false, + "redacted_evidence_refs": [], + "reload_owner": "pending_owner_response", + "reload_owner_accepted": false, + "remote_write_change_authorized": false, + "repo_sha256": "6c703a27525e62ef4d4d3c4cba8a89d64f646b01020782e35d22a3bf73f2dc83", + "repo_source_path": "infra/langfuse/docker-compose.yml", + "request_id": "monitoring_owner_request:langfuse_compose", + "request_sent": false, + "required_owner_fields": [ + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "followup_owner" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "owner_identity_present", + "decision_reason_present", + "affected_scope_matches_surface", + "redacted_refs_only", + "secret_value_absent", + "live_config_hash_metadata_only", + "reload_owner_present", + "receiver_owner_present", + "route_smoke_plan_present", + "noise_budget_owner_present", + "maintenance_window_present", + "rollback_owner_present", + "validation_plan_present", + "no_runtime_request", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_owner_response", + "rollback_owner": "pending_owner_response", + "rollback_owner_accepted": false, + "route_smoke_accepted": false, + "route_smoke_plan": "pending_owner_response", + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_policy_change_authorized": false, + "source_line_count": 71, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "status": "waiting_owner_response", + "supplement_requested": false, + "surface_id": "langfuse_compose", + "telegram_send_authorized": false, + "validation_plan": "pending_owner_response", + "validation_plan_accepted": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "acceptance_candidate_id": "monitoring_owner_response_acceptance:langfuse_readme", + "acceptance_fields": [ + "acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "owner_response_ref", + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "action_buttons_allowed": false, + "active_scan_authorized": false, + "affected_scope": "pending_owner_response", + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "add_action_button" + ], + "config_kind": "langfuse_runbook", + "control_tier": "C1", + "decision": "pending_owner_response", + "decision_reason": "pending_owner_response", + "expected_scope": "langfuse_observability_runbook", + "exporter_deploy_authorized": false, + "followup_owner": "pending_owner_response", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "kubectl_action_authorized": false, + "label": "Langfuse deployment README", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "live_config_hash_accepted": false, + "live_config_hash_ref": null, + "live_evidence_received": false, + "maintenance_window": "pending_owner_response", + "maintenance_window_accepted": false, + "noise_budget_owner": "pending_owner_response", + "noise_budget_owner_accepted": false, + "not_approval": true, + "notification_route_change_authorized": false, + "observability_scope": [ + "Langfuse deployment", + "trace governance" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_owner_response", + "quarantine_secret_or_raw_payload", + "reject_execution_request", + "request_supplement", + "ready_for_monitoring_review", + "owner_review_only_update", + "waiting_runtime_gate" + ], + "owner_response_accepted": false, + "owner_response_quarantined": false, + "owner_response_received": false, + "owner_response_ref": null, + "owner_response_rejected": false, + "owner_role_or_team": "pending_owner_response", + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "receiver_owner": "pending_owner_response", + "receiver_owner_accepted": false, + "receiver_route_change_authorized": false, + "recipient_confirmed": false, + "redacted_evidence_refs": [], + "reload_owner": "pending_owner_response", + "reload_owner_accepted": false, + "remote_write_change_authorized": false, + "repo_sha256": "7441665bfd3ce69e643364c7e792c837641bd36ff05d1aec44f15a7be62082e1", + "repo_source_path": "infra/langfuse/README.md", + "request_id": "monitoring_owner_request:langfuse_readme", + "request_sent": false, + "required_owner_fields": [ + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "followup_owner" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "owner_identity_present", + "decision_reason_present", + "affected_scope_matches_surface", + "redacted_refs_only", + "secret_value_absent", + "live_config_hash_metadata_only", + "reload_owner_present", + "receiver_owner_present", + "route_smoke_plan_present", + "noise_budget_owner_present", + "maintenance_window_present", + "rollback_owner_present", + "validation_plan_present", + "no_runtime_request", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_owner_response", + "rollback_owner": "pending_owner_response", + "rollback_owner_accepted": false, + "route_smoke_accepted": false, + "route_smoke_plan": "pending_owner_response", + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_policy_change_authorized": false, + "source_line_count": 69, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "status": "waiting_owner_response", + "supplement_requested": false, + "surface_id": "langfuse_readme", + "telegram_send_authorized": false, + "validation_plan": "pending_owner_response", + "validation_plan_accepted": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "acceptance_candidate_id": "monitoring_owner_response_acceptance:service_health_failure_policy_snapshot", + "acceptance_fields": [ + "acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "owner_response_ref", + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "action_buttons_allowed": false, + "active_scan_authorized": false, + "affected_scope": "pending_owner_response", + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "add_action_button" + ], + "config_kind": "notification_policy_snapshot", + "control_tier": "C1", + "decision": "pending_owner_response", + "decision_reason": "pending_owner_response", + "expected_scope": "service_health_failure_notification_policy", + "exporter_deploy_authorized": false, + "followup_owner": "pending_owner_response", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "kubectl_action_authorized": false, + "label": "Service health failure notification policy", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "live_config_hash_accepted": false, + "live_config_hash_ref": null, + "live_evidence_received": false, + "maintenance_window": "pending_owner_response", + "maintenance_window_accepted": false, + "noise_budget_owner": "pending_owner_response", + "noise_budget_owner_accepted": false, + "not_approval": true, + "notification_route_change_authorized": false, + "observability_scope": [ + "failure-only notification", + "redaction contract" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_owner_response", + "quarantine_secret_or_raw_payload", + "reject_execution_request", + "request_supplement", + "ready_for_monitoring_review", + "owner_review_only_update", + "waiting_runtime_gate" + ], + "owner_response_accepted": false, + "owner_response_quarantined": false, + "owner_response_received": false, + "owner_response_ref": null, + "owner_response_rejected": false, + "owner_role_or_team": "pending_owner_response", + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "receiver_owner": "pending_owner_response", + "receiver_owner_accepted": false, + "receiver_route_change_authorized": false, + "recipient_confirmed": false, + "redacted_evidence_refs": [], + "reload_owner": "pending_owner_response", + "reload_owner_accepted": false, + "remote_write_change_authorized": false, + "repo_sha256": "210a35e3e122d4311d5d25585c0d88b46206da87baa39a3f712fba291fea6ea3", + "repo_source_path": "docs/evaluations/service_health_failure_notification_policy_2026-06-05.json", + "request_id": "monitoring_owner_request:service_health_failure_policy_snapshot", + "request_sent": false, + "required_owner_fields": [ + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "followup_owner" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "owner_identity_present", + "decision_reason_present", + "affected_scope_matches_surface", + "redacted_refs_only", + "secret_value_absent", + "live_config_hash_metadata_only", + "reload_owner_present", + "receiver_owner_present", + "route_smoke_plan_present", + "noise_budget_owner_present", + "maintenance_window_present", + "rollback_owner_present", + "validation_plan_present", + "no_runtime_request", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_owner_response", + "rollback_owner": "pending_owner_response", + "rollback_owner_accepted": false, + "route_smoke_accepted": false, + "route_smoke_plan": "pending_owner_response", + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_policy_change_authorized": false, + "source_line_count": 303, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "status": "waiting_owner_response", + "supplement_requested": false, + "surface_id": "service_health_failure_policy_snapshot", + "telegram_send_authorized": false, + "validation_plan": "pending_owner_response", + "validation_plan_accepted": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "acceptance_candidate_id": "monitoring_owner_response_acceptance:backup_notification_policy_snapshot", + "acceptance_fields": [ + "acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "owner_response_ref", + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "action_buttons_allowed": false, + "active_scan_authorized": false, + "affected_scope": "pending_owner_response", + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "add_action_button" + ], + "config_kind": "notification_policy_snapshot", + "control_tier": "C1", + "decision": "pending_owner_response", + "decision_reason": "pending_owner_response", + "expected_scope": "backup_notification_policy", + "exporter_deploy_authorized": false, + "followup_owner": "pending_owner_response", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "kubectl_action_authorized": false, + "label": "Backup notification policy", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "live_config_hash_accepted": false, + "live_config_hash_ref": null, + "live_evidence_received": false, + "maintenance_window": "pending_owner_response", + "maintenance_window_accepted": false, + "noise_budget_owner": "pending_owner_response", + "noise_budget_owner_accepted": false, + "not_approval": true, + "notification_route_change_authorized": false, + "observability_scope": [ + "backup failure notification", + "restore / offsite alerting" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_owner_response", + "quarantine_secret_or_raw_payload", + "reject_execution_request", + "request_supplement", + "ready_for_monitoring_review", + "owner_review_only_update", + "waiting_runtime_gate" + ], + "owner_response_accepted": false, + "owner_response_quarantined": false, + "owner_response_received": false, + "owner_response_ref": null, + "owner_response_rejected": false, + "owner_role_or_team": "pending_owner_response", + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "receiver_owner": "pending_owner_response", + "receiver_owner_accepted": false, + "receiver_route_change_authorized": false, + "recipient_confirmed": false, + "redacted_evidence_refs": [], + "reload_owner": "pending_owner_response", + "reload_owner_accepted": false, + "remote_write_change_authorized": false, + "repo_sha256": "0b282dc88bbe140871d9e232de5ebce97168b1a38b16e46b2e90c62fea6d6c8d", + "repo_source_path": "docs/evaluations/backup_notification_policy_2026-06-04.json", + "request_id": "monitoring_owner_request:backup_notification_policy_snapshot", + "request_sent": false, + "required_owner_fields": [ + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "followup_owner" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "owner_identity_present", + "decision_reason_present", + "affected_scope_matches_surface", + "redacted_refs_only", + "secret_value_absent", + "live_config_hash_metadata_only", + "reload_owner_present", + "receiver_owner_present", + "route_smoke_plan_present", + "noise_budget_owner_present", + "maintenance_window_present", + "rollback_owner_present", + "validation_plan_present", + "no_runtime_request", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_owner_response", + "rollback_owner": "pending_owner_response", + "rollback_owner_accepted": false, + "route_smoke_accepted": false, + "route_smoke_plan": "pending_owner_response", + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_policy_change_authorized": false, + "source_line_count": 276, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "status": "waiting_owner_response", + "supplement_requested": false, + "surface_id": "backup_notification_policy_snapshot", + "telegram_send_authorized": false, + "validation_plan": "pending_owner_response", + "validation_plan_accepted": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "acceptance_candidate_id": "monitoring_owner_response_acceptance:observability_contract_matrix_snapshot", + "acceptance_fields": [ + "acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "owner_response_ref", + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "action_buttons_allowed": false, + "active_scan_authorized": false, + "affected_scope": "pending_owner_response", + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "add_action_button" + ], + "config_kind": "observability_contract_snapshot", + "control_tier": "C1", + "decision": "pending_owner_response", + "decision_reason": "pending_owner_response", + "expected_scope": "observability_contract_matrix", + "exporter_deploy_authorized": false, + "followup_owner": "pending_owner_response", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "kubectl_action_authorized": false, + "label": "Observability contract matrix", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "live_config_hash_accepted": false, + "live_config_hash_ref": null, + "live_evidence_received": false, + "maintenance_window": "pending_owner_response", + "maintenance_window_accepted": false, + "noise_budget_owner": "pending_owner_response", + "noise_budget_owner_accepted": false, + "not_approval": true, + "notification_route_change_authorized": false, + "observability_scope": [ + "observability contract", + "source coverage", + "runtime evidence" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_owner_response", + "quarantine_secret_or_raw_payload", + "reject_execution_request", + "request_supplement", + "ready_for_monitoring_review", + "owner_review_only_update", + "waiting_runtime_gate" + ], + "owner_response_accepted": false, + "owner_response_quarantined": false, + "owner_response_received": false, + "owner_response_ref": null, + "owner_response_rejected": false, + "owner_role_or_team": "pending_owner_response", + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "receiver_owner": "pending_owner_response", + "receiver_owner_accepted": false, + "receiver_route_change_authorized": false, + "recipient_confirmed": false, + "redacted_evidence_refs": [], + "reload_owner": "pending_owner_response", + "reload_owner_accepted": false, + "remote_write_change_authorized": false, + "repo_sha256": "b274f086080a4ac8d6e1786fa8d44a585ce92aadb1f6608dfb891cef7b1f05a1", + "repo_source_path": "docs/evaluations/observability_contract_matrix_2026-06-05.json", + "request_id": "monitoring_owner_request:observability_contract_matrix_snapshot", + "request_sent": false, + "required_owner_fields": [ + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "followup_owner" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "owner_identity_present", + "decision_reason_present", + "affected_scope_matches_surface", + "redacted_refs_only", + "secret_value_absent", + "live_config_hash_metadata_only", + "reload_owner_present", + "receiver_owner_present", + "route_smoke_plan_present", + "noise_budget_owner_present", + "maintenance_window_present", + "rollback_owner_present", + "validation_plan_present", + "no_runtime_request", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_owner_response", + "rollback_owner": "pending_owner_response", + "rollback_owner_accepted": false, + "route_smoke_accepted": false, + "route_smoke_plan": "pending_owner_response", + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_policy_change_authorized": false, + "source_line_count": 391, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "status": "waiting_owner_response", + "supplement_requested": false, + "surface_id": "observability_contract_matrix_snapshot", + "telegram_send_authorized": false, + "validation_plan": "pending_owner_response", + "validation_plan_accepted": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "acceptance_candidate_id": "monitoring_owner_response_acceptance:telegram_action_required_digest_snapshot", + "acceptance_fields": [ + "acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "owner_response_ref", + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "action_buttons_allowed": false, + "active_scan_authorized": false, + "affected_scope": "pending_owner_response", + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "add_action_button" + ], + "config_kind": "telegram_policy_snapshot", + "control_tier": "C1", + "decision": "pending_owner_response", + "decision_reason": "pending_owner_response", + "expected_scope": "ai_agent_telegram_digest_policy", + "exporter_deploy_authorized": false, + "followup_owner": "pending_owner_response", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "kubectl_action_authorized": false, + "label": "Telegram action required digest policy", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "live_config_hash_accepted": false, + "live_config_hash_ref": null, + "live_evidence_received": false, + "maintenance_window": "pending_owner_response", + "maintenance_window_accepted": false, + "noise_budget_owner": "pending_owner_response", + "noise_budget_owner_accepted": false, + "not_approval": true, + "notification_route_change_authorized": false, + "observability_scope": [ + "Telegram digest", + "action required routing" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_owner_response", + "quarantine_secret_or_raw_payload", + "reject_execution_request", + "request_supplement", + "ready_for_monitoring_review", + "owner_review_only_update", + "waiting_runtime_gate" + ], + "owner_response_accepted": false, + "owner_response_quarantined": false, + "owner_response_received": false, + "owner_response_ref": null, + "owner_response_rejected": false, + "owner_role_or_team": "pending_owner_response", + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "receiver_owner": "pending_owner_response", + "receiver_owner_accepted": false, + "receiver_route_change_authorized": false, + "recipient_confirmed": false, + "redacted_evidence_refs": [], + "reload_owner": "pending_owner_response", + "reload_owner_accepted": false, + "remote_write_change_authorized": false, + "repo_sha256": "2f8d00a8d697720e3198678dbaecca9fc618aa7957a348d89fd1bce250be842e", + "repo_source_path": "docs/evaluations/ai_agent_telegram_action_required_digest_policy_2026-06-11.json", + "request_id": "monitoring_owner_request:telegram_action_required_digest_snapshot", + "request_sent": false, + "required_owner_fields": [ + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "followup_owner" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "owner_identity_present", + "decision_reason_present", + "affected_scope_matches_surface", + "redacted_refs_only", + "secret_value_absent", + "live_config_hash_metadata_only", + "reload_owner_present", + "receiver_owner_present", + "route_smoke_plan_present", + "noise_budget_owner_present", + "maintenance_window_present", + "rollback_owner_present", + "validation_plan_present", + "no_runtime_request", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_owner_response", + "rollback_owner": "pending_owner_response", + "rollback_owner_accepted": false, + "route_smoke_accepted": false, + "route_smoke_plan": "pending_owner_response", + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_policy_change_authorized": false, + "source_line_count": 405, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "status": "waiting_owner_response", + "supplement_requested": false, + "surface_id": "telegram_action_required_digest_snapshot", + "telegram_send_authorized": false, + "validation_plan": "pending_owner_response", + "validation_plan_accepted": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "acceptance_candidate_id": "monitoring_owner_response_acceptance:telegram_receipt_approval_snapshot", + "acceptance_fields": [ + "acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "owner_response_ref", + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "action_buttons_allowed": false, + "active_scan_authorized": false, + "affected_scope": "pending_owner_response", + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "add_action_button" + ], + "config_kind": "telegram_policy_snapshot", + "control_tier": "C1", + "decision": "pending_owner_response", + "decision_reason": "pending_owner_response", + "expected_scope": "ai_agent_telegram_receipt_policy", + "exporter_deploy_authorized": false, + "followup_owner": "pending_owner_response", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "kubectl_action_authorized": false, + "label": "Telegram receipt approval package", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "live_config_hash_accepted": false, + "live_config_hash_ref": null, + "live_evidence_received": false, + "maintenance_window": "pending_owner_response", + "maintenance_window_accepted": false, + "noise_budget_owner": "pending_owner_response", + "noise_budget_owner_accepted": false, + "not_approval": true, + "notification_route_change_authorized": false, + "observability_scope": [ + "delivery receipt", + "ack / retry policy" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_owner_response", + "quarantine_secret_or_raw_payload", + "reject_execution_request", + "request_supplement", + "ready_for_monitoring_review", + "owner_review_only_update", + "waiting_runtime_gate" + ], + "owner_response_accepted": false, + "owner_response_quarantined": false, + "owner_response_received": false, + "owner_response_ref": null, + "owner_response_rejected": false, + "owner_role_or_team": "pending_owner_response", + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "receiver_owner": "pending_owner_response", + "receiver_owner_accepted": false, + "receiver_route_change_authorized": false, + "recipient_confirmed": false, + "redacted_evidence_refs": [], + "reload_owner": "pending_owner_response", + "reload_owner_accepted": false, + "remote_write_change_authorized": false, + "repo_sha256": "4fcb0f5a9ab809df3ea2ea1e384aa1f9c09544af0a12274029fc52c21c15e857", + "repo_source_path": "docs/evaluations/ai_agent_telegram_receipt_approval_package_2026-06-11.json", + "request_id": "monitoring_owner_request:telegram_receipt_approval_snapshot", + "request_sent": false, + "required_owner_fields": [ + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "followup_owner" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "owner_identity_present", + "decision_reason_present", + "affected_scope_matches_surface", + "redacted_refs_only", + "secret_value_absent", + "live_config_hash_metadata_only", + "reload_owner_present", + "receiver_owner_present", + "route_smoke_plan_present", + "noise_budget_owner_present", + "maintenance_window_present", + "rollback_owner_present", + "validation_plan_present", + "no_runtime_request", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_owner_response", + "rollback_owner": "pending_owner_response", + "rollback_owner_accepted": false, + "route_smoke_accepted": false, + "route_smoke_plan": "pending_owner_response", + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_policy_change_authorized": false, + "source_line_count": 179, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "status": "waiting_owner_response", + "supplement_requested": false, + "surface_id": "telegram_receipt_approval_snapshot", + "telegram_send_authorized": false, + "validation_plan": "pending_owner_response", + "validation_plan_accepted": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "acceptance_candidate_id": "monitoring_owner_response_acceptance:telegram_gateway_service", + "acceptance_fields": [ + "acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "owner_response_ref", + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "action_buttons_allowed": false, + "active_scan_authorized": false, + "affected_scope": "pending_owner_response", + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "add_action_button" + ], + "config_kind": "telegram_runtime_sender", + "control_tier": "C1", + "decision": "pending_owner_response", + "decision_reason": "pending_owner_response", + "expected_scope": "telegram_gateway_runtime_sender", + "exporter_deploy_authorized": false, + "followup_owner": "pending_owner_response", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "kubectl_action_authorized": false, + "label": "Telegram gateway service", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "live_config_hash_accepted": false, + "live_config_hash_ref": null, + "live_evidence_received": false, + "maintenance_window": "pending_owner_response", + "maintenance_window_accepted": false, + "noise_budget_owner": "pending_owner_response", + "noise_budget_owner_accepted": false, + "not_approval": true, + "notification_route_change_authorized": false, + "observability_scope": [ + "Telegram Bot API", + "dedup", + "delivery queue" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_owner_response", + "quarantine_secret_or_raw_payload", + "reject_execution_request", + "request_supplement", + "ready_for_monitoring_review", + "owner_review_only_update", + "waiting_runtime_gate" + ], + "owner_response_accepted": false, + "owner_response_quarantined": false, + "owner_response_received": false, + "owner_response_ref": null, + "owner_response_rejected": false, + "owner_role_or_team": "pending_owner_response", + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "receiver_owner": "pending_owner_response", + "receiver_owner_accepted": false, + "receiver_route_change_authorized": false, + "recipient_confirmed": false, + "redacted_evidence_refs": [], + "reload_owner": "pending_owner_response", + "reload_owner_accepted": false, + "remote_write_change_authorized": false, + "repo_sha256": "bf8727f1fcb8cfbdda0997dbd6e1d5f9298a09d10bebf719a3d3b70a23e3633c", + "repo_source_path": "apps/api/src/services/telegram_gateway.py", + "request_id": "monitoring_owner_request:telegram_gateway_service", + "request_sent": false, + "required_owner_fields": [ + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "followup_owner" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "owner_identity_present", + "decision_reason_present", + "affected_scope_matches_surface", + "redacted_refs_only", + "secret_value_absent", + "live_config_hash_metadata_only", + "reload_owner_present", + "receiver_owner_present", + "route_smoke_plan_present", + "noise_budget_owner_present", + "maintenance_window_present", + "rollback_owner_present", + "validation_plan_present", + "no_runtime_request", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_owner_response", + "rollback_owner": "pending_owner_response", + "rollback_owner_accepted": false, + "route_smoke_accepted": false, + "route_smoke_plan": "pending_owner_response", + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_policy_change_authorized": false, + "source_line_count": 9452, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "status": "waiting_owner_response", + "supplement_requested": false, + "surface_id": "telegram_gateway_service", + "telegram_send_authorized": false, + "validation_plan": "pending_owner_response", + "validation_plan_accepted": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": true + }, + { + "acceptance_candidate_id": "monitoring_owner_response_acceptance:notification_manager_service", + "acceptance_fields": [ + "acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "owner_response_ref", + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "action_buttons_allowed": false, + "active_scan_authorized": false, + "affected_scope": "pending_owner_response", + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "add_action_button" + ], + "config_kind": "notification_runtime_router", + "control_tier": "C1", + "decision": "pending_owner_response", + "decision_reason": "pending_owner_response", + "expected_scope": "notification_runtime_routing", + "exporter_deploy_authorized": false, + "followup_owner": "pending_owner_response", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "kubectl_action_authorized": false, + "label": "Notification manager", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "live_config_hash_accepted": false, + "live_config_hash_ref": null, + "live_evidence_received": false, + "maintenance_window": "pending_owner_response", + "maintenance_window_accepted": false, + "noise_budget_owner": "pending_owner_response", + "noise_budget_owner_accepted": false, + "not_approval": true, + "notification_route_change_authorized": false, + "observability_scope": [ + "notification channel routing", + "Telegram / Discord manager" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_owner_response", + "quarantine_secret_or_raw_payload", + "reject_execution_request", + "request_supplement", + "ready_for_monitoring_review", + "owner_review_only_update", + "waiting_runtime_gate" + ], + "owner_response_accepted": false, + "owner_response_quarantined": false, + "owner_response_received": false, + "owner_response_ref": null, + "owner_response_rejected": false, + "owner_role_or_team": "pending_owner_response", + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "receiver_owner": "pending_owner_response", + "receiver_owner_accepted": false, + "receiver_route_change_authorized": false, + "recipient_confirmed": false, + "redacted_evidence_refs": [], + "reload_owner": "pending_owner_response", + "reload_owner_accepted": false, + "remote_write_change_authorized": false, + "repo_sha256": "f3b61e55dba30aca4be16282681445671559467ddc21b946f76762ad829cfeb2", + "repo_source_path": "apps/api/src/services/notifications/manager.py", + "request_id": "monitoring_owner_request:notification_manager_service", + "request_sent": false, + "required_owner_fields": [ + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "followup_owner" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "owner_identity_present", + "decision_reason_present", + "affected_scope_matches_surface", + "redacted_refs_only", + "secret_value_absent", + "live_config_hash_metadata_only", + "reload_owner_present", + "receiver_owner_present", + "route_smoke_plan_present", + "noise_budget_owner_present", + "maintenance_window_present", + "rollback_owner_present", + "validation_plan_present", + "no_runtime_request", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_owner_response", + "rollback_owner": "pending_owner_response", + "rollback_owner_accepted": false, + "route_smoke_accepted": false, + "route_smoke_plan": "pending_owner_response", + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_policy_change_authorized": false, + "source_line_count": 172, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "status": "waiting_owner_response", + "supplement_requested": false, + "surface_id": "notification_manager_service", + "telegram_send_authorized": false, + "validation_plan": "pending_owner_response", + "validation_plan_accepted": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": true + }, + { + "acceptance_candidate_id": "monitoring_owner_response_acceptance:notification_matrix_service", + "acceptance_fields": [ + "acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "owner_response_ref", + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "action_buttons_allowed": false, + "active_scan_authorized": false, + "affected_scope": "pending_owner_response", + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "add_action_button" + ], + "config_kind": "notification_policy_code", + "control_tier": "C1", + "decision": "pending_owner_response", + "decision_reason": "pending_owner_response", + "expected_scope": "notification_matrix_policy", + "exporter_deploy_authorized": false, + "followup_owner": "pending_owner_response", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "kubectl_action_authorized": false, + "label": "Notification matrix", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "live_config_hash_accepted": false, + "live_config_hash_ref": null, + "live_evidence_received": false, + "maintenance_window": "pending_owner_response", + "maintenance_window_accepted": false, + "noise_budget_owner": "pending_owner_response", + "noise_budget_owner_accepted": false, + "not_approval": true, + "notification_route_change_authorized": false, + "observability_scope": [ + "notification policy", + "recipient / channel mapping" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_owner_response", + "quarantine_secret_or_raw_payload", + "reject_execution_request", + "request_supplement", + "ready_for_monitoring_review", + "owner_review_only_update", + "waiting_runtime_gate" + ], + "owner_response_accepted": false, + "owner_response_quarantined": false, + "owner_response_received": false, + "owner_response_ref": null, + "owner_response_rejected": false, + "owner_role_or_team": "pending_owner_response", + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "receiver_owner": "pending_owner_response", + "receiver_owner_accepted": false, + "receiver_route_change_authorized": false, + "recipient_confirmed": false, + "redacted_evidence_refs": [], + "reload_owner": "pending_owner_response", + "reload_owner_accepted": false, + "remote_write_change_authorized": false, + "repo_sha256": "5881a477e7fe6b7f60af9ad1e880197b01474bc08749977d46fd541764d81442", + "repo_source_path": "apps/api/src/services/notification_matrix.py", + "request_id": "monitoring_owner_request:notification_matrix_service", + "request_sent": false, + "required_owner_fields": [ + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "followup_owner" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "owner_identity_present", + "decision_reason_present", + "affected_scope_matches_surface", + "redacted_refs_only", + "secret_value_absent", + "live_config_hash_metadata_only", + "reload_owner_present", + "receiver_owner_present", + "route_smoke_plan_present", + "noise_budget_owner_present", + "maintenance_window_present", + "rollback_owner_present", + "validation_plan_present", + "no_runtime_request", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_owner_response", + "rollback_owner": "pending_owner_response", + "rollback_owner_accepted": false, + "route_smoke_accepted": false, + "route_smoke_plan": "pending_owner_response", + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_policy_change_authorized": false, + "source_line_count": 66, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "status": "waiting_owner_response", + "supplement_requested": false, + "surface_id": "notification_matrix_service", + "telegram_send_authorized": false, + "validation_plan": "pending_owner_response", + "validation_plan_accepted": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "acceptance_candidate_id": "monitoring_owner_response_acceptance:alert_chain_metrics_service", + "acceptance_fields": [ + "acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "owner_response_ref", + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "action_buttons_allowed": false, + "active_scan_authorized": false, + "affected_scope": "pending_owner_response", + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "add_action_button" + ], + "config_kind": "alert_metrics_service", + "control_tier": "C1", + "decision": "pending_owner_response", + "decision_reason": "pending_owner_response", + "expected_scope": "alert_chain_metrics", + "exporter_deploy_authorized": false, + "followup_owner": "pending_owner_response", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "kubectl_action_authorized": false, + "label": "Alert chain metrics service", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "live_config_hash_accepted": false, + "live_config_hash_ref": null, + "live_evidence_received": false, + "maintenance_window": "pending_owner_response", + "maintenance_window_accepted": false, + "noise_budget_owner": "pending_owner_response", + "noise_budget_owner_accepted": false, + "not_approval": true, + "notification_route_change_authorized": false, + "observability_scope": [ + "alert chain metrics", + "delivery visibility" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_owner_response", + "quarantine_secret_or_raw_payload", + "reject_execution_request", + "request_supplement", + "ready_for_monitoring_review", + "owner_review_only_update", + "waiting_runtime_gate" + ], + "owner_response_accepted": false, + "owner_response_quarantined": false, + "owner_response_received": false, + "owner_response_ref": null, + "owner_response_rejected": false, + "owner_role_or_team": "pending_owner_response", + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "receiver_owner": "pending_owner_response", + "receiver_owner_accepted": false, + "receiver_route_change_authorized": false, + "recipient_confirmed": false, + "redacted_evidence_refs": [], + "reload_owner": "pending_owner_response", + "reload_owner_accepted": false, + "remote_write_change_authorized": false, + "repo_sha256": "4eee6ac9e7228183a6fbc05179b85c0d8aca001bf7cc15736d480b3dd1d6f96d", + "repo_source_path": "apps/api/src/services/alert_chain_metrics_service.py", + "request_id": "monitoring_owner_request:alert_chain_metrics_service", + "request_sent": false, + "required_owner_fields": [ + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "followup_owner" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "owner_identity_present", + "decision_reason_present", + "affected_scope_matches_surface", + "redacted_refs_only", + "secret_value_absent", + "live_config_hash_metadata_only", + "reload_owner_present", + "receiver_owner_present", + "route_smoke_plan_present", + "noise_budget_owner_present", + "maintenance_window_present", + "rollback_owner_present", + "validation_plan_present", + "no_runtime_request", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_owner_response", + "rollback_owner": "pending_owner_response", + "rollback_owner_accepted": false, + "route_smoke_accepted": false, + "route_smoke_plan": "pending_owner_response", + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_policy_change_authorized": false, + "source_line_count": 160, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "status": "waiting_owner_response", + "supplement_requested": false, + "surface_id": "alert_chain_metrics_service", + "telegram_send_authorized": false, + "validation_plan": "pending_owner_response", + "validation_plan_accepted": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "acceptance_candidate_id": "monitoring_owner_response_acceptance:converged_alert_recurrence_notifier", + "acceptance_fields": [ + "acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "owner_response_ref", + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "action_buttons_allowed": false, + "active_scan_authorized": false, + "affected_scope": "pending_owner_response", + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "add_action_button" + ], + "config_kind": "notification_runtime_router", + "control_tier": "C1", + "decision": "pending_owner_response", + "decision_reason": "pending_owner_response", + "expected_scope": "recurrence_notification_runtime", + "exporter_deploy_authorized": false, + "followup_owner": "pending_owner_response", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "kubectl_action_authorized": false, + "label": "Converged alert recurrence notifier", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "live_config_hash_accepted": false, + "live_config_hash_ref": null, + "live_evidence_received": false, + "maintenance_window": "pending_owner_response", + "maintenance_window_accepted": false, + "noise_budget_owner": "pending_owner_response", + "noise_budget_owner_accepted": false, + "not_approval": true, + "notification_route_change_authorized": false, + "observability_scope": [ + "recurrence notification", + "dedup", + "escalation routing" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_owner_response", + "quarantine_secret_or_raw_payload", + "reject_execution_request", + "request_supplement", + "ready_for_monitoring_review", + "owner_review_only_update", + "waiting_runtime_gate" + ], + "owner_response_accepted": false, + "owner_response_quarantined": false, + "owner_response_received": false, + "owner_response_ref": null, + "owner_response_rejected": false, + "owner_role_or_team": "pending_owner_response", + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "receiver_owner": "pending_owner_response", + "receiver_owner_accepted": false, + "receiver_route_change_authorized": false, + "recipient_confirmed": false, + "redacted_evidence_refs": [], + "reload_owner": "pending_owner_response", + "reload_owner_accepted": false, + "remote_write_change_authorized": false, + "repo_sha256": "66e7026bd8b6662c6daaaeb004cb5b58a9ffe81b705b227e2ad1f50e84bc6856", + "repo_source_path": "apps/api/src/services/converged_alert_recurrence_notifier.py", + "request_id": "monitoring_owner_request:converged_alert_recurrence_notifier", + "request_sent": false, + "required_owner_fields": [ + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "followup_owner" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "owner_identity_present", + "decision_reason_present", + "affected_scope_matches_surface", + "redacted_refs_only", + "secret_value_absent", + "live_config_hash_metadata_only", + "reload_owner_present", + "receiver_owner_present", + "route_smoke_plan_present", + "noise_budget_owner_present", + "maintenance_window_present", + "rollback_owner_present", + "validation_plan_present", + "no_runtime_request", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_owner_response", + "rollback_owner": "pending_owner_response", + "rollback_owner_accepted": false, + "route_smoke_accepted": false, + "route_smoke_plan": "pending_owner_response", + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_policy_change_authorized": false, + "source_line_count": 215, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "status": "waiting_owner_response", + "supplement_requested": false, + "surface_id": "converged_alert_recurrence_notifier", + "telegram_send_authorized": false, + "validation_plan": "pending_owner_response", + "validation_plan_accepted": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": true + }, + { + "acceptance_candidate_id": "monitoring_owner_response_acceptance:sentry_webhook_service", + "acceptance_fields": [ + "acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "owner_response_ref", + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "action_buttons_allowed": false, + "active_scan_authorized": false, + "affected_scope": "pending_owner_response", + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "add_action_button" + ], + "config_kind": "webhook_receiver", + "control_tier": "C1", + "decision": "pending_owner_response", + "decision_reason": "pending_owner_response", + "expected_scope": "sentry_webhook_receiver", + "exporter_deploy_authorized": false, + "followup_owner": "pending_owner_response", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "kubectl_action_authorized": false, + "label": "Sentry webhook service", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "live_config_hash_accepted": false, + "live_config_hash_ref": null, + "live_evidence_received": false, + "maintenance_window": "pending_owner_response", + "maintenance_window_accepted": false, + "noise_budget_owner": "pending_owner_response", + "noise_budget_owner_accepted": false, + "not_approval": true, + "notification_route_change_authorized": false, + "observability_scope": [ + "Sentry webhook", + "signature validation", + "triage route" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_owner_response", + "quarantine_secret_or_raw_payload", + "reject_execution_request", + "request_supplement", + "ready_for_monitoring_review", + "owner_review_only_update", + "waiting_runtime_gate" + ], + "owner_response_accepted": false, + "owner_response_quarantined": false, + "owner_response_received": false, + "owner_response_ref": null, + "owner_response_rejected": false, + "owner_role_or_team": "pending_owner_response", + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "receiver_owner": "pending_owner_response", + "receiver_owner_accepted": false, + "receiver_route_change_authorized": false, + "recipient_confirmed": false, + "redacted_evidence_refs": [], + "reload_owner": "pending_owner_response", + "reload_owner_accepted": false, + "remote_write_change_authorized": false, + "repo_sha256": "00c192d55a56f4dafd4e11a4fa7d3950a8938ab158f066bb7d49ab70c4c19d06", + "repo_source_path": "apps/api/src/services/sentry_webhook_service.py", + "request_id": "monitoring_owner_request:sentry_webhook_service", + "request_sent": false, + "required_owner_fields": [ + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "followup_owner" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "owner_identity_present", + "decision_reason_present", + "affected_scope_matches_surface", + "redacted_refs_only", + "secret_value_absent", + "live_config_hash_metadata_only", + "reload_owner_present", + "receiver_owner_present", + "route_smoke_plan_present", + "noise_budget_owner_present", + "maintenance_window_present", + "rollback_owner_present", + "validation_plan_present", + "no_runtime_request", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_owner_response", + "rollback_owner": "pending_owner_response", + "rollback_owner_accepted": false, + "route_smoke_accepted": false, + "route_smoke_plan": "pending_owner_response", + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_policy_change_authorized": false, + "source_line_count": 452, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "status": "waiting_owner_response", + "supplement_requested": false, + "surface_id": "sentry_webhook_service", + "telegram_send_authorized": false, + "validation_plan": "pending_owner_response", + "validation_plan_accepted": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "acceptance_candidate_id": "monitoring_owner_response_acceptance:signoz_client_service", + "acceptance_fields": [ + "acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "owner_response_ref", + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "action_buttons_allowed": false, + "active_scan_authorized": false, + "affected_scope": "pending_owner_response", + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "add_action_button" + ], + "config_kind": "signoz_observability_client", + "control_tier": "C1", + "decision": "pending_owner_response", + "decision_reason": "pending_owner_response", + "expected_scope": "signoz_api_client", + "exporter_deploy_authorized": false, + "followup_owner": "pending_owner_response", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "kubectl_action_authorized": false, + "label": "SigNoz client service", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "live_config_hash_accepted": false, + "live_config_hash_ref": null, + "live_evidence_received": false, + "maintenance_window": "pending_owner_response", + "maintenance_window_accepted": false, + "noise_budget_owner": "pending_owner_response", + "noise_budget_owner_accepted": false, + "not_approval": true, + "notification_route_change_authorized": false, + "observability_scope": [ + "SigNoz API", + "log query", + "trace query" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_owner_response", + "quarantine_secret_or_raw_payload", + "reject_execution_request", + "request_supplement", + "ready_for_monitoring_review", + "owner_review_only_update", + "waiting_runtime_gate" + ], + "owner_response_accepted": false, + "owner_response_quarantined": false, + "owner_response_received": false, + "owner_response_ref": null, + "owner_response_rejected": false, + "owner_role_or_team": "pending_owner_response", + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "receiver_owner": "pending_owner_response", + "receiver_owner_accepted": false, + "receiver_route_change_authorized": false, + "recipient_confirmed": false, + "redacted_evidence_refs": [], + "reload_owner": "pending_owner_response", + "reload_owner_accepted": false, + "remote_write_change_authorized": false, + "repo_sha256": "3eceb5f6d2a611390024215e12c8ff634b1eafc7ee9ca697dcde81cf7927de5c", + "repo_source_path": "apps/api/src/services/signoz_client.py", + "request_id": "monitoring_owner_request:signoz_client_service", + "request_sent": false, + "required_owner_fields": [ + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "followup_owner" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "owner_identity_present", + "decision_reason_present", + "affected_scope_matches_surface", + "redacted_refs_only", + "secret_value_absent", + "live_config_hash_metadata_only", + "reload_owner_present", + "receiver_owner_present", + "route_smoke_plan_present", + "noise_budget_owner_present", + "maintenance_window_present", + "rollback_owner_present", + "validation_plan_present", + "no_runtime_request", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_owner_response", + "rollback_owner": "pending_owner_response", + "rollback_owner_accepted": false, + "route_smoke_accepted": false, + "route_smoke_plan": "pending_owner_response", + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_policy_change_authorized": false, + "source_line_count": 577, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "status": "waiting_owner_response", + "supplement_requested": false, + "surface_id": "signoz_client_service", + "telegram_send_authorized": false, + "validation_plan": "pending_owner_response", + "validation_plan_accepted": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "acceptance_candidate_id": "monitoring_owner_response_acceptance:sentry_service_client", + "acceptance_fields": [ + "acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "owner_response_ref", + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "action_buttons_allowed": false, + "active_scan_authorized": false, + "affected_scope": "pending_owner_response", + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "add_action_button" + ], + "config_kind": "sentry_observability_client", + "control_tier": "C1", + "decision": "pending_owner_response", + "decision_reason": "pending_owner_response", + "expected_scope": "sentry_api_client", + "exporter_deploy_authorized": false, + "followup_owner": "pending_owner_response", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "kubectl_action_authorized": false, + "label": "Sentry service client", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "live_config_hash_accepted": false, + "live_config_hash_ref": null, + "live_evidence_received": false, + "maintenance_window": "pending_owner_response", + "maintenance_window_accepted": false, + "noise_budget_owner": "pending_owner_response", + "noise_budget_owner_accepted": false, + "not_approval": true, + "notification_route_change_authorized": false, + "observability_scope": [ + "Sentry API", + "issue query", + "AI triage" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_owner_response", + "quarantine_secret_or_raw_payload", + "reject_execution_request", + "request_supplement", + "ready_for_monitoring_review", + "owner_review_only_update", + "waiting_runtime_gate" + ], + "owner_response_accepted": false, + "owner_response_quarantined": false, + "owner_response_received": false, + "owner_response_ref": null, + "owner_response_rejected": false, + "owner_role_or_team": "pending_owner_response", + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "receiver_owner": "pending_owner_response", + "receiver_owner_accepted": false, + "receiver_route_change_authorized": false, + "recipient_confirmed": false, + "redacted_evidence_refs": [], + "reload_owner": "pending_owner_response", + "reload_owner_accepted": false, + "remote_write_change_authorized": false, + "repo_sha256": "8287af9f12a5fbc991f2a8e369559075d863f4d36e4384a0616dc06e0919c05f", + "repo_source_path": "apps/api/src/services/sentry_service.py", + "request_id": "monitoring_owner_request:sentry_service_client", + "request_sent": false, + "required_owner_fields": [ + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "followup_owner" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "owner_identity_present", + "decision_reason_present", + "affected_scope_matches_surface", + "redacted_refs_only", + "secret_value_absent", + "live_config_hash_metadata_only", + "reload_owner_present", + "receiver_owner_present", + "route_smoke_plan_present", + "noise_budget_owner_present", + "maintenance_window_present", + "rollback_owner_present", + "validation_plan_present", + "no_runtime_request", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_owner_response", + "rollback_owner": "pending_owner_response", + "rollback_owner_accepted": false, + "route_smoke_accepted": false, + "route_smoke_plan": "pending_owner_response", + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_policy_change_authorized": false, + "source_line_count": 464, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "status": "waiting_owner_response", + "supplement_requested": false, + "surface_id": "sentry_service_client", + "telegram_send_authorized": false, + "validation_plan": "pending_owner_response", + "validation_plan_accepted": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "acceptance_candidate_id": "monitoring_owner_response_acceptance:langfuse_client_service", + "acceptance_fields": [ + "acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "owner_response_ref", + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "action_buttons_allowed": false, + "active_scan_authorized": false, + "affected_scope": "pending_owner_response", + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "add_action_button" + ], + "config_kind": "langfuse_observability_client", + "control_tier": "C1", + "decision": "pending_owner_response", + "decision_reason": "pending_owner_response", + "expected_scope": "langfuse_api_client", + "exporter_deploy_authorized": false, + "followup_owner": "pending_owner_response", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "kubectl_action_authorized": false, + "label": "Langfuse client service", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "live_config_hash_accepted": false, + "live_config_hash_ref": null, + "live_evidence_received": false, + "maintenance_window": "pending_owner_response", + "maintenance_window_accepted": false, + "noise_budget_owner": "pending_owner_response", + "noise_budget_owner_accepted": false, + "not_approval": true, + "notification_route_change_authorized": false, + "observability_scope": [ + "Langfuse API", + "AI trace", + "prompt / output privacy" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_owner_response", + "quarantine_secret_or_raw_payload", + "reject_execution_request", + "request_supplement", + "ready_for_monitoring_review", + "owner_review_only_update", + "waiting_runtime_gate" + ], + "owner_response_accepted": false, + "owner_response_quarantined": false, + "owner_response_received": false, + "owner_response_ref": null, + "owner_response_rejected": false, + "owner_role_or_team": "pending_owner_response", + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "receiver_owner": "pending_owner_response", + "receiver_owner_accepted": false, + "receiver_route_change_authorized": false, + "recipient_confirmed": false, + "redacted_evidence_refs": [], + "reload_owner": "pending_owner_response", + "reload_owner_accepted": false, + "remote_write_change_authorized": false, + "repo_sha256": "fdd232688d58d31d38d1c8545b75a34f3afc53076c5c13bfe318d4d13cffc7cb", + "repo_source_path": "apps/api/src/services/langfuse_client.py", + "request_id": "monitoring_owner_request:langfuse_client_service", + "request_sent": false, + "required_owner_fields": [ + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "followup_owner" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "owner_identity_present", + "decision_reason_present", + "affected_scope_matches_surface", + "redacted_refs_only", + "secret_value_absent", + "live_config_hash_metadata_only", + "reload_owner_present", + "receiver_owner_present", + "route_smoke_plan_present", + "noise_budget_owner_present", + "maintenance_window_present", + "rollback_owner_present", + "validation_plan_present", + "no_runtime_request", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_owner_response", + "rollback_owner": "pending_owner_response", + "rollback_owner_accepted": false, + "route_smoke_accepted": false, + "route_smoke_plan": "pending_owner_response", + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_policy_change_authorized": false, + "source_line_count": 347, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "status": "waiting_owner_response", + "supplement_requested": false, + "surface_id": "langfuse_client_service", + "telegram_send_authorized": false, + "validation_plan": "pending_owner_response", + "validation_plan_accepted": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "acceptance_candidate_id": "monitoring_owner_response_acceptance:deploy_alertmanager_config_script", + "acceptance_fields": [ + "acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "owner_response_ref", + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "action_buttons_allowed": false, + "active_scan_authorized": false, + "affected_scope": "pending_owner_response", + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "add_action_button" + ], + "config_kind": "reload_capable_script", + "control_tier": "C1", + "decision": "pending_owner_response", + "decision_reason": "pending_owner_response", + "expected_scope": "alertmanager_config_deploy", + "exporter_deploy_authorized": false, + "followup_owner": "pending_owner_response", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "kubectl_action_authorized": false, + "label": "Alertmanager config deploy script", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "live_config_hash_accepted": false, + "live_config_hash_ref": null, + "live_evidence_received": false, + "maintenance_window": "pending_owner_response", + "maintenance_window_accepted": false, + "noise_budget_owner": "pending_owner_response", + "noise_budget_owner_accepted": false, + "not_approval": true, + "notification_route_change_authorized": false, + "observability_scope": [ + "Alertmanager config copy", + "reload" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_owner_response", + "quarantine_secret_or_raw_payload", + "reject_execution_request", + "request_supplement", + "ready_for_monitoring_review", + "owner_review_only_update", + "waiting_runtime_gate" + ], + "owner_response_accepted": false, + "owner_response_quarantined": false, + "owner_response_received": false, + "owner_response_ref": null, + "owner_response_rejected": false, + "owner_role_or_team": "pending_owner_response", + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "receiver_owner": "pending_owner_response", + "receiver_owner_accepted": false, + "receiver_route_change_authorized": false, + "recipient_confirmed": false, + "redacted_evidence_refs": [], + "reload_owner": "pending_owner_response", + "reload_owner_accepted": false, + "remote_write_change_authorized": false, + "repo_sha256": "861ce84b7abea40d279e9c346baa4388b6962416914ad39fbd388ef0613c2c30", + "repo_source_path": "scripts/ops/deploy-alertmanager-config.sh", + "request_id": "monitoring_owner_request:deploy_alertmanager_config_script", + "request_sent": false, + "required_owner_fields": [ + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "followup_owner" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "owner_identity_present", + "decision_reason_present", + "affected_scope_matches_surface", + "redacted_refs_only", + "secret_value_absent", + "live_config_hash_metadata_only", + "reload_owner_present", + "receiver_owner_present", + "route_smoke_plan_present", + "noise_budget_owner_present", + "maintenance_window_present", + "rollback_owner_present", + "validation_plan_present", + "no_runtime_request", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_owner_response", + "rollback_owner": "pending_owner_response", + "rollback_owner_accepted": false, + "route_smoke_accepted": false, + "route_smoke_plan": "pending_owner_response", + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_policy_change_authorized": false, + "source_line_count": 145, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "status": "waiting_owner_response", + "supplement_requested": false, + "surface_id": "deploy_alertmanager_config_script", + "telegram_send_authorized": false, + "validation_plan": "pending_owner_response", + "validation_plan_accepted": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": true + }, + { + "acceptance_candidate_id": "monitoring_owner_response_acceptance:deploy_prometheus_alerts_script", + "acceptance_fields": [ + "acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "owner_response_ref", + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "action_buttons_allowed": false, + "active_scan_authorized": false, + "affected_scope": "pending_owner_response", + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "add_action_button" + ], + "config_kind": "reload_capable_script", + "control_tier": "C1", + "decision": "pending_owner_response", + "decision_reason": "pending_owner_response", + "expected_scope": "prometheus_alerts_deploy", + "exporter_deploy_authorized": false, + "followup_owner": "pending_owner_response", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "kubectl_action_authorized": false, + "label": "Prometheus alerts deploy script", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "live_config_hash_accepted": false, + "live_config_hash_ref": null, + "live_evidence_received": false, + "maintenance_window": "pending_owner_response", + "maintenance_window_accepted": false, + "noise_budget_owner": "pending_owner_response", + "noise_budget_owner_accepted": false, + "not_approval": true, + "notification_route_change_authorized": false, + "observability_scope": [ + "Prometheus alert rule deploy", + "reload" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_owner_response", + "quarantine_secret_or_raw_payload", + "reject_execution_request", + "request_supplement", + "ready_for_monitoring_review", + "owner_review_only_update", + "waiting_runtime_gate" + ], + "owner_response_accepted": false, + "owner_response_quarantined": false, + "owner_response_received": false, + "owner_response_ref": null, + "owner_response_rejected": false, + "owner_role_or_team": "pending_owner_response", + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "receiver_owner": "pending_owner_response", + "receiver_owner_accepted": false, + "receiver_route_change_authorized": false, + "recipient_confirmed": false, + "redacted_evidence_refs": [], + "reload_owner": "pending_owner_response", + "reload_owner_accepted": false, + "remote_write_change_authorized": false, + "repo_sha256": "302df2ac135a8b360684797cc6210584120f115896859435ddd15a0d3c1cf883", + "repo_source_path": "scripts/ops/deploy-alerts.sh", + "request_id": "monitoring_owner_request:deploy_prometheus_alerts_script", + "request_sent": false, + "required_owner_fields": [ + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "followup_owner" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "owner_identity_present", + "decision_reason_present", + "affected_scope_matches_surface", + "redacted_refs_only", + "secret_value_absent", + "live_config_hash_metadata_only", + "reload_owner_present", + "receiver_owner_present", + "route_smoke_plan_present", + "noise_budget_owner_present", + "maintenance_window_present", + "rollback_owner_present", + "validation_plan_present", + "no_runtime_request", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_owner_response", + "rollback_owner": "pending_owner_response", + "rollback_owner_accepted": false, + "route_smoke_accepted": false, + "route_smoke_plan": "pending_owner_response", + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_policy_change_authorized": false, + "source_line_count": 164, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "status": "waiting_owner_response", + "supplement_requested": false, + "surface_id": "deploy_prometheus_alerts_script", + "telegram_send_authorized": false, + "validation_plan": "pending_owner_response", + "validation_plan_accepted": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": true + }, + { + "acceptance_candidate_id": "monitoring_owner_response_acceptance:prometheus_rule_drift_guard_script", + "acceptance_fields": [ + "acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "owner_response_ref", + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "action_buttons_allowed": false, + "active_scan_authorized": false, + "affected_scope": "pending_owner_response", + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "add_action_button" + ], + "config_kind": "drift_guard_script", + "control_tier": "C1", + "decision": "pending_owner_response", + "decision_reason": "pending_owner_response", + "expected_scope": "prometheus_rule_drift_guard", + "exporter_deploy_authorized": false, + "followup_owner": "pending_owner_response", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "kubectl_action_authorized": false, + "label": "Prometheus rule drift guard", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "live_config_hash_accepted": false, + "live_config_hash_ref": null, + "live_evidence_received": false, + "maintenance_window": "pending_owner_response", + "maintenance_window_accepted": false, + "noise_budget_owner": "pending_owner_response", + "noise_budget_owner_accepted": false, + "not_approval": true, + "notification_route_change_authorized": false, + "observability_scope": [ + "rule diff", + "drift evidence", + "reload guard" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_owner_response", + "quarantine_secret_or_raw_payload", + "reject_execution_request", + "request_supplement", + "ready_for_monitoring_review", + "owner_review_only_update", + "waiting_runtime_gate" + ], + "owner_response_accepted": false, + "owner_response_quarantined": false, + "owner_response_received": false, + "owner_response_ref": null, + "owner_response_rejected": false, + "owner_role_or_team": "pending_owner_response", + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "receiver_owner": "pending_owner_response", + "receiver_owner_accepted": false, + "receiver_route_change_authorized": false, + "recipient_confirmed": false, + "redacted_evidence_refs": [], + "reload_owner": "pending_owner_response", + "reload_owner_accepted": false, + "remote_write_change_authorized": false, + "repo_sha256": "c284f7abe4f511f4670f03f78b945f4506d277fe8a9c382e1bfedae48dfde61a", + "repo_source_path": "scripts/ops/prometheus-rule-drift-guard.sh", + "request_id": "monitoring_owner_request:prometheus_rule_drift_guard_script", + "request_sent": false, + "required_owner_fields": [ + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "followup_owner" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "owner_identity_present", + "decision_reason_present", + "affected_scope_matches_surface", + "redacted_refs_only", + "secret_value_absent", + "live_config_hash_metadata_only", + "reload_owner_present", + "receiver_owner_present", + "route_smoke_plan_present", + "noise_budget_owner_present", + "maintenance_window_present", + "rollback_owner_present", + "validation_plan_present", + "no_runtime_request", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_owner_response", + "rollback_owner": "pending_owner_response", + "rollback_owner_accepted": false, + "route_smoke_accepted": false, + "route_smoke_plan": "pending_owner_response", + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_policy_change_authorized": false, + "source_line_count": 149, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "status": "waiting_owner_response", + "supplement_requested": false, + "surface_id": "prometheus_rule_drift_guard_script", + "telegram_send_authorized": false, + "validation_plan": "pending_owner_response", + "validation_plan_accepted": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "acceptance_candidate_id": "monitoring_owner_response_acceptance:k8s_deploy_prometheus_config_script", + "acceptance_fields": [ + "acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "owner_response_ref", + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "action_buttons_allowed": false, + "active_scan_authorized": false, + "affected_scope": "pending_owner_response", + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "add_action_button" + ], + "config_kind": "reload_capable_script", + "control_tier": "C1", + "decision": "pending_owner_response", + "decision_reason": "pending_owner_response", + "expected_scope": "k8s_prometheus_config_deploy", + "exporter_deploy_authorized": false, + "followup_owner": "pending_owner_response", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "kubectl_action_authorized": false, + "label": "K8s Prometheus config deploy script", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "live_config_hash_accepted": false, + "live_config_hash_ref": null, + "live_evidence_received": false, + "maintenance_window": "pending_owner_response", + "maintenance_window_accepted": false, + "noise_budget_owner": "pending_owner_response", + "noise_budget_owner_accepted": false, + "not_approval": true, + "notification_route_change_authorized": false, + "observability_scope": [ + "K8s config apply", + "Prometheus reload" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_owner_response", + "quarantine_secret_or_raw_payload", + "reject_execution_request", + "request_supplement", + "ready_for_monitoring_review", + "owner_review_only_update", + "waiting_runtime_gate" + ], + "owner_response_accepted": false, + "owner_response_quarantined": false, + "owner_response_received": false, + "owner_response_ref": null, + "owner_response_rejected": false, + "owner_role_or_team": "pending_owner_response", + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "receiver_owner": "pending_owner_response", + "receiver_owner_accepted": false, + "receiver_route_change_authorized": false, + "recipient_confirmed": false, + "redacted_evidence_refs": [], + "reload_owner": "pending_owner_response", + "reload_owner_accepted": false, + "remote_write_change_authorized": false, + "repo_sha256": "5511681efdd5563aa980396b2ebb37b7d28e43092feda48f3cba014a4b863adf", + "repo_source_path": "k8s/monitoring/deploy-prometheus-config.sh", + "request_id": "monitoring_owner_request:k8s_deploy_prometheus_config_script", + "request_sent": false, + "required_owner_fields": [ + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "followup_owner" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "owner_identity_present", + "decision_reason_present", + "affected_scope_matches_surface", + "redacted_refs_only", + "secret_value_absent", + "live_config_hash_metadata_only", + "reload_owner_present", + "receiver_owner_present", + "route_smoke_plan_present", + "noise_budget_owner_present", + "maintenance_window_present", + "rollback_owner_present", + "validation_plan_present", + "no_runtime_request", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_owner_response", + "rollback_owner": "pending_owner_response", + "rollback_owner_accepted": false, + "route_smoke_accepted": false, + "route_smoke_plan": "pending_owner_response", + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_policy_change_authorized": false, + "source_line_count": 118, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "status": "waiting_owner_response", + "supplement_requested": false, + "surface_id": "k8s_deploy_prometheus_config_script", + "telegram_send_authorized": false, + "validation_plan": "pending_owner_response", + "validation_plan_accepted": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": true + }, + { + "acceptance_candidate_id": "monitoring_owner_response_acceptance:api_apply_prometheus_config_script", + "acceptance_fields": [ + "acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "owner_response_ref", + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "action_buttons_allowed": false, + "active_scan_authorized": false, + "affected_scope": "pending_owner_response", + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "add_action_button" + ], + "config_kind": "reload_capable_script", + "control_tier": "C1", + "decision": "pending_owner_response", + "decision_reason": "pending_owner_response", + "expected_scope": "api_prometheus_config_apply", + "exporter_deploy_authorized": false, + "followup_owner": "pending_owner_response", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "kubectl_action_authorized": false, + "label": "API Prometheus config apply script", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "live_config_hash_accepted": false, + "live_config_hash_ref": null, + "live_evidence_received": false, + "maintenance_window": "pending_owner_response", + "maintenance_window_accepted": false, + "noise_budget_owner": "pending_owner_response", + "noise_budget_owner_accepted": false, + "not_approval": true, + "notification_route_change_authorized": false, + "observability_scope": [ + "Prometheus config apply", + "API-owned alert deploy" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_owner_response", + "quarantine_secret_or_raw_payload", + "reject_execution_request", + "request_supplement", + "ready_for_monitoring_review", + "owner_review_only_update", + "waiting_runtime_gate" + ], + "owner_response_accepted": false, + "owner_response_quarantined": false, + "owner_response_received": false, + "owner_response_ref": null, + "owner_response_rejected": false, + "owner_role_or_team": "pending_owner_response", + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "receiver_owner": "pending_owner_response", + "receiver_owner_accepted": false, + "receiver_route_change_authorized": false, + "recipient_confirmed": false, + "redacted_evidence_refs": [], + "reload_owner": "pending_owner_response", + "reload_owner_accepted": false, + "remote_write_change_authorized": false, + "repo_sha256": "dfc154732a7858116fab423655eff8bc0b6e36f135cbd7f5e5f23745c7402aef", + "repo_source_path": "apps/api/scripts/apply_prometheus_config.sh", + "request_id": "monitoring_owner_request:api_apply_prometheus_config_script", + "request_sent": false, + "required_owner_fields": [ + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "followup_owner" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "owner_identity_present", + "decision_reason_present", + "affected_scope_matches_surface", + "redacted_refs_only", + "secret_value_absent", + "live_config_hash_metadata_only", + "reload_owner_present", + "receiver_owner_present", + "route_smoke_plan_present", + "noise_budget_owner_present", + "maintenance_window_present", + "rollback_owner_present", + "validation_plan_present", + "no_runtime_request", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_owner_response", + "rollback_owner": "pending_owner_response", + "rollback_owner_accepted": false, + "route_smoke_accepted": false, + "route_smoke_plan": "pending_owner_response", + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_policy_change_authorized": false, + "source_line_count": 198, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "status": "waiting_owner_response", + "supplement_requested": false, + "surface_id": "api_apply_prometheus_config_script", + "telegram_send_authorized": false, + "validation_plan": "pending_owner_response", + "validation_plan_accepted": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": true + }, + { + "acceptance_candidate_id": "monitoring_owner_response_acceptance:monitoring_exporter_deploy_script", + "acceptance_fields": [ + "acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "owner_response_ref", + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "action_buttons_allowed": false, + "active_scan_authorized": false, + "affected_scope": "pending_owner_response", + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "add_action_button" + ], + "config_kind": "host_deploy_script", + "control_tier": "C1", + "decision": "pending_owner_response", + "decision_reason": "pending_owner_response", + "expected_scope": "monitoring_exporter_deploy", + "exporter_deploy_authorized": false, + "followup_owner": "pending_owner_response", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "kubectl_action_authorized": false, + "label": "Monitoring exporter deploy script", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "live_config_hash_accepted": false, + "live_config_hash_ref": null, + "live_evidence_received": false, + "maintenance_window": "pending_owner_response", + "maintenance_window_accepted": false, + "noise_budget_owner": "pending_owner_response", + "noise_budget_owner_accepted": false, + "not_approval": true, + "notification_route_change_authorized": false, + "observability_scope": [ + "exporter deploy", + "host service restart" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_owner_response", + "quarantine_secret_or_raw_payload", + "reject_execution_request", + "request_supplement", + "ready_for_monitoring_review", + "owner_review_only_update", + "waiting_runtime_gate" + ], + "owner_response_accepted": false, + "owner_response_quarantined": false, + "owner_response_received": false, + "owner_response_ref": null, + "owner_response_rejected": false, + "owner_role_or_team": "pending_owner_response", + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "receiver_owner": "pending_owner_response", + "receiver_owner_accepted": false, + "receiver_route_change_authorized": false, + "recipient_confirmed": false, + "redacted_evidence_refs": [], + "reload_owner": "pending_owner_response", + "reload_owner_accepted": false, + "remote_write_change_authorized": false, + "repo_sha256": "dbcbca21cf6fd5083177cb8a12c008c1aefed8e6ed05b70d738b3db37699cef3", + "repo_source_path": "ops/monitoring/deploy-exporters.sh", + "request_id": "monitoring_owner_request:monitoring_exporter_deploy_script", + "request_sent": false, + "required_owner_fields": [ + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "followup_owner" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "owner_identity_present", + "decision_reason_present", + "affected_scope_matches_surface", + "redacted_refs_only", + "secret_value_absent", + "live_config_hash_metadata_only", + "reload_owner_present", + "receiver_owner_present", + "route_smoke_plan_present", + "noise_budget_owner_present", + "maintenance_window_present", + "rollback_owner_present", + "validation_plan_present", + "no_runtime_request", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_owner_response", + "rollback_owner": "pending_owner_response", + "rollback_owner_accepted": false, + "route_smoke_accepted": false, + "route_smoke_plan": "pending_owner_response", + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_policy_change_authorized": false, + "source_line_count": 76, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "status": "waiting_owner_response", + "supplement_requested": false, + "surface_id": "monitoring_exporter_deploy_script", + "telegram_send_authorized": false, + "validation_plan": "pending_owner_response", + "validation_plan_accepted": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": true + }, + { + "acceptance_candidate_id": "monitoring_owner_response_acceptance:fire_live_alert_script", + "acceptance_fields": [ + "acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "owner_response_ref", + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "action_buttons_allowed": false, + "active_scan_authorized": false, + "affected_scope": "pending_owner_response", + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "add_action_button" + ], + "config_kind": "live_alert_sender", + "control_tier": "C1", + "decision": "pending_owner_response", + "decision_reason": "pending_owner_response", + "expected_scope": "live_alert_fire_script", + "exporter_deploy_authorized": false, + "followup_owner": "pending_owner_response", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "kubectl_action_authorized": false, + "label": "Live alert firing script", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "live_config_hash_accepted": false, + "live_config_hash_ref": null, + "live_evidence_received": false, + "maintenance_window": "pending_owner_response", + "maintenance_window_accepted": false, + "noise_budget_owner": "pending_owner_response", + "noise_budget_owner_accepted": false, + "not_approval": true, + "notification_route_change_authorized": false, + "observability_scope": [ + "live alert", + "Alertmanager ingestion", + "notification route" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_owner_response", + "quarantine_secret_or_raw_payload", + "reject_execution_request", + "request_supplement", + "ready_for_monitoring_review", + "owner_review_only_update", + "waiting_runtime_gate" + ], + "owner_response_accepted": false, + "owner_response_quarantined": false, + "owner_response_received": false, + "owner_response_ref": null, + "owner_response_rejected": false, + "owner_role_or_team": "pending_owner_response", + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "receiver_owner": "pending_owner_response", + "receiver_owner_accepted": false, + "receiver_route_change_authorized": false, + "recipient_confirmed": false, + "redacted_evidence_refs": [], + "reload_owner": "pending_owner_response", + "reload_owner_accepted": false, + "remote_write_change_authorized": false, + "repo_sha256": "ec79532dd23559103c8e436b73311d4a2b04be8655c1a804787da6e18c510acf", + "repo_source_path": "apps/api/scripts/fire_live_alert.py", + "request_id": "monitoring_owner_request:fire_live_alert_script", + "request_sent": false, + "required_owner_fields": [ + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "followup_owner" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "owner_identity_present", + "decision_reason_present", + "affected_scope_matches_surface", + "redacted_refs_only", + "secret_value_absent", + "live_config_hash_metadata_only", + "reload_owner_present", + "receiver_owner_present", + "route_smoke_plan_present", + "noise_budget_owner_present", + "maintenance_window_present", + "rollback_owner_present", + "validation_plan_present", + "no_runtime_request", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_owner_response", + "rollback_owner": "pending_owner_response", + "rollback_owner_accepted": false, + "route_smoke_accepted": false, + "route_smoke_plan": "pending_owner_response", + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_policy_change_authorized": false, + "source_line_count": 369, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "status": "waiting_owner_response", + "supplement_requested": false, + "surface_id": "fire_live_alert_script", + "telegram_send_authorized": false, + "validation_plan": "pending_owner_response", + "validation_plan_accepted": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": true + }, + { + "acceptance_candidate_id": "monitoring_owner_response_acceptance:fire_test_alert_script", + "acceptance_fields": [ + "acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "owner_response_ref", + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "action_buttons_allowed": false, + "active_scan_authorized": false, + "affected_scope": "pending_owner_response", + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "add_action_button" + ], + "config_kind": "live_alert_sender", + "control_tier": "C1", + "decision": "pending_owner_response", + "decision_reason": "pending_owner_response", + "expected_scope": "test_alert_fire_script", + "exporter_deploy_authorized": false, + "followup_owner": "pending_owner_response", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "kubectl_action_authorized": false, + "label": "Test alert firing script", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "live_config_hash_accepted": false, + "live_config_hash_ref": null, + "live_evidence_received": false, + "maintenance_window": "pending_owner_response", + "maintenance_window_accepted": false, + "noise_budget_owner": "pending_owner_response", + "noise_budget_owner_accepted": false, + "not_approval": true, + "notification_route_change_authorized": false, + "observability_scope": [ + "test alert", + "notification chain smoke" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_owner_response", + "quarantine_secret_or_raw_payload", + "reject_execution_request", + "request_supplement", + "ready_for_monitoring_review", + "owner_review_only_update", + "waiting_runtime_gate" + ], + "owner_response_accepted": false, + "owner_response_quarantined": false, + "owner_response_received": false, + "owner_response_ref": null, + "owner_response_rejected": false, + "owner_role_or_team": "pending_owner_response", + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "receiver_owner": "pending_owner_response", + "receiver_owner_accepted": false, + "receiver_route_change_authorized": false, + "recipient_confirmed": false, + "redacted_evidence_refs": [], + "reload_owner": "pending_owner_response", + "reload_owner_accepted": false, + "remote_write_change_authorized": false, + "repo_sha256": "62623a452644aaad1b0997d59f7b120839a1e3605e4cbd0b58bbab2dcb727fe6", + "repo_source_path": "apps/api/scripts/fire_test_alert.py", + "request_id": "monitoring_owner_request:fire_test_alert_script", + "request_sent": false, + "required_owner_fields": [ + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "followup_owner" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "owner_identity_present", + "decision_reason_present", + "affected_scope_matches_surface", + "redacted_refs_only", + "secret_value_absent", + "live_config_hash_metadata_only", + "reload_owner_present", + "receiver_owner_present", + "route_smoke_plan_present", + "noise_budget_owner_present", + "maintenance_window_present", + "rollback_owner_present", + "validation_plan_present", + "no_runtime_request", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_owner_response", + "rollback_owner": "pending_owner_response", + "rollback_owner_accepted": false, + "route_smoke_accepted": false, + "route_smoke_plan": "pending_owner_response", + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_policy_change_authorized": false, + "source_line_count": 318, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "status": "waiting_owner_response", + "supplement_requested": false, + "surface_id": "fire_test_alert_script", + "telegram_send_authorized": false, + "validation_plan": "pending_owner_response", + "validation_plan_accepted": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": true + }, + { + "acceptance_candidate_id": "monitoring_owner_response_acceptance:alert_chain_smoke_script", + "acceptance_fields": [ + "acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "owner_response_ref", + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "action_buttons_allowed": false, + "active_scan_authorized": false, + "affected_scope": "pending_owner_response", + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "add_action_button" + ], + "config_kind": "smoke_script", + "control_tier": "C1", + "decision": "pending_owner_response", + "decision_reason": "pending_owner_response", + "expected_scope": "alert_chain_smoke", + "exporter_deploy_authorized": false, + "followup_owner": "pending_owner_response", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "kubectl_action_authorized": false, + "label": "Alert chain smoke script", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "live_config_hash_accepted": false, + "live_config_hash_ref": null, + "live_evidence_received": false, + "maintenance_window": "pending_owner_response", + "maintenance_window_accepted": false, + "noise_budget_owner": "pending_owner_response", + "noise_budget_owner_accepted": false, + "not_approval": true, + "notification_route_change_authorized": false, + "observability_scope": [ + "alert chain E2E", + "notification delivery" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_owner_response", + "quarantine_secret_or_raw_payload", + "reject_execution_request", + "request_supplement", + "ready_for_monitoring_review", + "owner_review_only_update", + "waiting_runtime_gate" + ], + "owner_response_accepted": false, + "owner_response_quarantined": false, + "owner_response_received": false, + "owner_response_ref": null, + "owner_response_rejected": false, + "owner_role_or_team": "pending_owner_response", + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "receiver_owner": "pending_owner_response", + "receiver_owner_accepted": false, + "receiver_route_change_authorized": false, + "recipient_confirmed": false, + "redacted_evidence_refs": [], + "reload_owner": "pending_owner_response", + "reload_owner_accepted": false, + "remote_write_change_authorized": false, + "repo_sha256": "033506075fbdad8cb6b712712fb9af28f2c03fd676889597353f2827cfb5b9d9", + "repo_source_path": "scripts/alert_chain_smoke_test.py", + "request_id": "monitoring_owner_request:alert_chain_smoke_script", + "request_sent": false, + "required_owner_fields": [ + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "followup_owner" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "owner_identity_present", + "decision_reason_present", + "affected_scope_matches_surface", + "redacted_refs_only", + "secret_value_absent", + "live_config_hash_metadata_only", + "reload_owner_present", + "receiver_owner_present", + "route_smoke_plan_present", + "noise_budget_owner_present", + "maintenance_window_present", + "rollback_owner_present", + "validation_plan_present", + "no_runtime_request", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_owner_response", + "rollback_owner": "pending_owner_response", + "rollback_owner_accepted": false, + "route_smoke_accepted": false, + "route_smoke_plan": "pending_owner_response", + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_policy_change_authorized": false, + "source_line_count": 1245, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "status": "waiting_owner_response", + "supplement_requested": false, + "surface_id": "alert_chain_smoke_script", + "telegram_send_authorized": false, + "validation_plan": "pending_owner_response", + "validation_plan_accepted": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "acceptance_candidate_id": "monitoring_owner_response_acceptance:ops_alert_chain_smoke_script", + "acceptance_fields": [ + "acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "owner_response_ref", + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "action_buttons_allowed": false, + "active_scan_authorized": false, + "affected_scope": "pending_owner_response", + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "add_action_button" + ], + "config_kind": "smoke_script", + "control_tier": "C1", + "decision": "pending_owner_response", + "decision_reason": "pending_owner_response", + "expected_scope": "ops_alert_chain_smoke", + "exporter_deploy_authorized": false, + "followup_owner": "pending_owner_response", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "kubectl_action_authorized": false, + "label": "Ops alert chain smoke script", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "live_config_hash_accepted": false, + "live_config_hash_ref": null, + "live_evidence_received": false, + "maintenance_window": "pending_owner_response", + "maintenance_window_accepted": false, + "noise_budget_owner": "pending_owner_response", + "noise_budget_owner_accepted": false, + "not_approval": true, + "notification_route_change_authorized": false, + "observability_scope": [ + "ops alert chain", + "Alertmanager / Telegram smoke" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_owner_response", + "quarantine_secret_or_raw_payload", + "reject_execution_request", + "request_supplement", + "ready_for_monitoring_review", + "owner_review_only_update", + "waiting_runtime_gate" + ], + "owner_response_accepted": false, + "owner_response_quarantined": false, + "owner_response_received": false, + "owner_response_ref": null, + "owner_response_rejected": false, + "owner_role_or_team": "pending_owner_response", + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "receiver_owner": "pending_owner_response", + "receiver_owner_accepted": false, + "receiver_route_change_authorized": false, + "recipient_confirmed": false, + "redacted_evidence_refs": [], + "reload_owner": "pending_owner_response", + "reload_owner_accepted": false, + "remote_write_change_authorized": false, + "repo_sha256": "473189af791d6df3dfa75c00b3702b7179a5db0bd61692250bcaa79e25f1bc35", + "repo_source_path": "ops/scripts/alert_chain_smoke_test.py", + "request_id": "monitoring_owner_request:ops_alert_chain_smoke_script", + "request_sent": false, + "required_owner_fields": [ + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "followup_owner" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "owner_identity_present", + "decision_reason_present", + "affected_scope_matches_surface", + "redacted_refs_only", + "secret_value_absent", + "live_config_hash_metadata_only", + "reload_owner_present", + "receiver_owner_present", + "route_smoke_plan_present", + "noise_budget_owner_present", + "maintenance_window_present", + "rollback_owner_present", + "validation_plan_present", + "no_runtime_request", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_owner_response", + "rollback_owner": "pending_owner_response", + "rollback_owner_accepted": false, + "route_smoke_accepted": false, + "route_smoke_plan": "pending_owner_response", + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_policy_change_authorized": false, + "source_line_count": 267, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "status": "waiting_owner_response", + "supplement_requested": false, + "surface_id": "ops_alert_chain_smoke_script", + "telegram_send_authorized": false, + "validation_plan": "pending_owner_response", + "validation_plan_accepted": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + } + ], + "acceptance_fields": [ + "acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "owner_response_ref", + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "add_action_button" + ], + "execution_boundaries": { + "action_buttons_allowed": false, + "active_scan_authorized": false, + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "exporter_deploy_authorized": false, + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "kubectl_action_authorized": false, + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "live_evidence_received": false, + "not_authorization": true, + "notification_route_change_authorized": false, + "otel_collector_reload_authorized": false, + "owner_response_accepted": false, + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "receiver_route_change_authorized": false, + "remote_write_change_authorized": false, + "request_dispatch_authorized": false, + "runtime_execution_authorized": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_policy_change_authorized": false, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "telegram_send_authorized": false, + "webhook_receiver_change_authorized": false + }, + "generated_at": "2026-06-15T09:20:00+08:00", + "git_commit": "802c4e5a", + "next_steps": [ + "等待 owner response；未收到前不得更新 received / accepted / rejected count。", + "收到回覆後先做欄位完整性、敏感 payload 隔離、reload / send / smoke execution request 拒收。", + "metadata 合格也只能進 monitoring reviewer review；reload、receiver route change、Telegram send、live alert fire、alert chain smoke 與 production write 仍需獨立人工批准。" + ], + "outcome_lanes": [ + { + "lane_id": "waiting_owner_response", + "meaning": "尚未收到 owner response；所有 accepted / runtime count 維持 0。" + }, + { + "lane_id": "quarantine_secret_or_raw_payload", + "meaning": "收到 secret、raw config、raw receiver payload、未脫敏 log 或截圖時隔離。" + }, + { + "lane_id": "reject_execution_request", + "meaning": "夾帶 reload、deploy、route change、Telegram send、fire alert、SSH 或 kubectl 要求時拒收。" + }, + { + "lane_id": "request_supplement", + "meaning": "欄位不足、scope 不清、reload / receiver / route smoke / rollback / noise owner 缺失時要求補件。" + }, + { + "lane_id": "ready_for_monitoring_review", + "meaning": "metadata 合格後，只能進 monitoring reviewer review。" + }, + { + "lane_id": "owner_review_only_update", + "meaning": "只允許更新只讀 owner review ledger，不得 reload、send Telegram 或 fire alert。" + }, + { + "lane_id": "waiting_runtime_gate", + "meaning": "即使 owner response accepted，runtime gate 仍等待獨立人工批准。" + } + ], + "required_owner_fields": [ + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "followup_owner" + ], + "reviewer_checks": [ + { + "check_id": "owner_identity_present", + "instruction": "owner role / team 必須可追溯。" + }, + { + "check_id": "decision_reason_present", + "instruction": "decision 與 decision reason 必須同時存在。" + }, + { + "check_id": "affected_scope_matches_surface", + "instruction": "affected scope 必須能對回 committed surface_id。" + }, + { + "check_id": "redacted_refs_only", + "instruction": "evidence 只能是脫敏 ref、hash、ticket、commit 或 artifact pointer。" + }, + { + "check_id": "secret_value_absent", + "instruction": "不得出現 token、Bot token、DSN secret、cookie、private key、env dump 或 partial secret。" + }, + { + "check_id": "live_config_hash_metadata_only", + "instruction": "live config hash 只能是 owner-provided metadata ref，不得貼 raw config。" + }, + { + "check_id": "reload_owner_present", + "instruction": "Prometheus / Alertmanager / OTEL / Sentry 類變更必須有 reload / deploy owner。" + }, + { + "check_id": "receiver_owner_present", + "instruction": "receiver route、Telegram receipt 與 notification policy 必須有 receiver owner。" + }, + { + "check_id": "route_smoke_plan_present", + "instruction": "route smoke / receipt proof 必須是計畫或脫敏證據 ref，不得直接 fire alert。" + }, + { + "check_id": "noise_budget_owner_present", + "instruction": "告警噪音、silence、dedup 與測試通知必須有 noise budget owner。" + }, + { + "check_id": "maintenance_window_present", + "instruction": "reload、deploy、route change、smoke 或 notification send 必須另有維護窗口。" + }, + { + "check_id": "rollback_owner_present", + "instruction": "rollback owner、rollback ref 或 disable path 必須存在。" + }, + { + "check_id": "validation_plan_present", + "instruction": "validation / post-check 必須列 route、receipt、alert state、metrics 與 rollback stop condition。" + }, + { + "check_id": "no_runtime_request", + "instruction": "夾帶 reload、receiver route change、Telegram send、alert smoke、SSH 或 kubectl 要求時拒收。" + }, + { + "check_id": "counts_transition_safe", + "instruction": "只有 reviewer record 可更新 received / accepted / rejected；不得同時開 runtime gate。" + } + ], + "schema_version": "monitoring_owner_response_acceptance_v1", + "source_inventory_schema_version": "monitoring_alerting_observability_inventory_v1", + "source_inventory_status": "repo_only_inventory_ready", + "source_owner_request_schema_version": "monitoring_owner_request_draft_v1", + "source_owner_request_status": "owner_request_draft_ready_not_dispatched", + "status": "owner_response_acceptance_ledger_ready_no_runtime_action", + "summary": { + "acceptance_candidate_count": 60, + "acceptance_field_count": 30, + "action_button_count": 0, + "active_scan_authorized_count": 0, + "alert_chain_smoke_authorized_count": 0, + "alertmanager_reload_authorized_count": 0, + "blocked_action_count": 28, + "exporter_deploy_authorized_count": 0, + "grafana_dashboard_apply_authorized_count": 0, + "host_write_authorized_count": 0, + "kubectl_action_authorized_count": 0, + "langfuse_config_change_authorized_count": 0, + "live_alert_fire_authorized_count": 0, + "live_config_hash_accepted_count": 0, + "live_evidence_received_count": 0, + "live_evidence_required_candidate_count": 60, + "maintenance_window_accepted_count": 0, + "noise_budget_owner_accepted_count": 0, + "notification_route_change_authorized_count": 0, + "otel_collector_reload_authorized_count": 0, + "outcome_lane_count": 7, + "owner_response_accepted_count": 0, + "owner_response_quarantined_count": 0, + "owner_response_received_count": 0, + "owner_response_rejected_count": 0, + "production_write_authorized_count": 0, + "prometheus_reload_authorized_count": 0, + "receiver_owner_accepted_count": 0, + "receiver_route_change_authorized_count": 0, + "recipient_confirmed_count": 0, + "reload_owner_accepted_count": 0, + "remote_write_change_authorized_count": 0, + "request_sent_count": 0, + "required_owner_field_count": 14, + "reviewer_check_count": 15, + "rollback_owner_accepted_count": 0, + "route_smoke_accepted_count": 0, + "runtime_gate_count": 0, + "secret_value_collection_allowed_count": 0, + "sentry_deploy_authorized_count": 0, + "signoz_rule_apply_authorized_count": 0, + "silence_policy_change_authorized_count": 0, + "source_request_draft_count": 60, + "source_surface_count": 60, + "ssh_read_authorized_count": 0, + "ssh_write_authorized_count": 0, + "supplement_requested_count": 0, + "telegram_send_authorized_count": 0, + "validation_plan_accepted_count": 0, + "webhook_receiver_change_authorized_count": 0, + "write_capable_acceptance_candidate_count": 11 + } +} diff --git a/docs/superpowers/specs/2026-04-15-MASTER-ai-autonomous-flywheel-v2.md b/docs/superpowers/specs/2026-04-15-MASTER-ai-autonomous-flywheel-v2.md index 6c0c660fb..a719dc341 100644 --- a/docs/superpowers/specs/2026-04-15-MASTER-ai-autonomous-flywheel-v2.md +++ b/docs/superpowers/specs/2026-04-15-MASTER-ai-autonomous-flywheel-v2.md @@ -704,6 +704,7 @@ Alert / Sentry / SigNoz / Gitea / Market Watch / Operator | `docs/security/backup-restore-owner-request-draft.snapshot.json` + `scripts/security/backup-restore-owner-request-draft.py` | Backup / Restore / Escrow Owner Request Draft 已本地完成；承接 backup / restore repo-only 清冊，固定 38 份 request draft、27 份 write-capable request draft、38 份需 live evidence request、24 欄 request fields、14 欄 required owner fields 與 18 類 blocked action；request sent、recipient confirmed、owner response received / accepted、live backup evidence、backup run、restore run、offsite sync、escrow marker write、retention change、runtime gate、action buttons 仍全部為 `0` | 這是人工送件前 request draft，不是 request sent、owner response received / accepted、backup run、restore run、offsite sync、remote delete、credential escrow marker write、retention change、restic prune、rclone config、Velero restore / backup、secret collection、host write、production write 或 runtime gate | | `docs/security/backup-restore-owner-response-acceptance.snapshot.json` + `scripts/security/backup-restore-owner-response-acceptance.py` | Backup / Restore / Escrow Owner Response Acceptance 只讀帳本已本地完成；承接 backup / restore owner request draft，固定 38 份 acceptance candidate、27 份 write-capable acceptance candidate、24 欄 acceptance field、14 欄 required owner field、13 個 reviewer check、7 條 outcome lane 與 22 類 blocked action；owner response received / accepted、live backup evidence、backup run、restore run、offsite sync、credential escrow marker write、retention change、runtime gate、action buttons 仍全部為 `0` | 這是 owner response 收件驗收帳本，不是 owner response received / accepted、backup run、restore run、offsite sync、remote delete、credential escrow marker write、retention change、restic prune、rclone config、Velero restore / backup、secret collection、host write、production write 或 runtime gate | | `docs/security/monitoring-owner-request-draft.snapshot.json` + `scripts/security/monitoring-owner-request-draft.py` | Monitoring / Alerting / Observability Owner Request Draft 已本地完成；承接 monitoring repo-only 清冊，固定 60 份 request draft、11 份 write-capable request draft、60 份需 live evidence request、24 欄 request fields、14 欄 required owner fields 與 24 類 blocked action；request sent、recipient confirmed、owner response received / accepted、live evidence、reload、receiver route change、silence change、Telegram send、alert chain smoke、runtime gate、action buttons 仍全部為 `0` | 這是人工送件前 request draft，不是 request sent、owner response received / accepted、Prometheus reload、Alertmanager reload、Grafana import、SigNoz apply、Sentry deploy、Langfuse change、OTEL reload、receiver route change、silence change、Telegram send、live alert fire、alert chain smoke、secret collection、host write、production write 或 runtime gate | +| `docs/security/monitoring-owner-response-acceptance.snapshot.json` + `scripts/security/monitoring-owner-response-acceptance.py` | Monitoring / Alerting / Observability Owner Response Acceptance 只讀帳本已本地完成；承接 monitoring owner request draft，固定 60 份 acceptance candidate、11 份 write-capable acceptance candidate、60 份需 live evidence candidate、30 欄 acceptance field、14 欄 required owner field、15 個 reviewer check、7 條 outcome lane 與 28 類 blocked action；monitoring 類別成熟度 `62% -> 66%`，高價值配置平均成熟度 `68% -> 69%`；owner response received / accepted / rejected、live evidence、reload、receiver route change、silence change、Telegram send、live alert fire、alert chain smoke、runtime gate、action buttons 仍全部為 `0` | 這是 owner response 收件驗收帳本，不是 owner response received / accepted、Prometheus reload、Alertmanager reload、Grafana import、SigNoz apply、Sentry deploy、Langfuse change、OTEL reload、receiver route change、silence change、Telegram send、live alert fire、alert chain smoke、secret collection、host write、production write 或 runtime gate | | `docs/security/agent-bounty-owner-request-draft.snapshot.json` + `scripts/security/agent-bounty-owner-request-draft.py` | agent-bounty-protocol Owner Request Draft 已本地完成；承接 onboarding handoff，固定 11 份 request draft、4 份 control boundary、7 份 product surface、8 份 write-capable request draft、4 份 treasury-related request draft、5 份 MCP / A2A-related request draft、22 欄 required owner fields、25 類 forbidden input 與 28 類 blocked action；request sent、recipient confirmed、owner response received / accepted、repo refs truth、deployment boundary、data classification、external agent boundary、treasury boundary、runtime gate、action buttons 仍全部為 `0` | 這是人工送件前 request draft，不是 request sent、owner response received / accepted、repo push、refs sync、workflow 修改、secret collection、deploy、compose restart、DB migration、claim / submit、payout / withdrawal、cron / daemon、external send、host write、production write 或 runtime gate | | `docs/evaluations/ai_agent_live_read_model_gate_2026-06-11.json` + `GET /api/v1/agents/agent-live-read-model-gate` | P2-403B AgentSession / Redis Streams live read model gate；定義 safe fields、Redis envelope、worker gate、rollback plan 與 no-write smoke，不連 DB、不讀寫 Redis、不啟動 worker | @@ -861,6 +862,7 @@ Repo / registry / release notes / K8s / host / observability / backup evidence 85a. 建立 K8s / ArgoCD GitOps 變更證據驗收只讀帳本。✅ 本地完成；新增 `k8s-argocd-change-evidence-acceptance.py`、snapshot 與說明文件，將四個 scan group 串成 `change_evidence_candidate_count=4`、`c0_change_evidence_candidate_count=3`、`write_capable_candidate_count=4`、`required_evidence_field_count=18`、`reviewer_check_count=18`、`outcome_lane_count=8`、`blocked_action_count=28` 的 GitOps change evidence acceptance ledger；change evidence received / accepted、runtime approval package、ArgoCD API read、ArgoCD sync、kubectl action、Helm upgrade、NetworkPolicy / NodePort / RBAC change、live cluster read、secret collection、runtime gate、action buttons 仍全部為 `0`。這不是 change evidence received / accepted、runtime approval、ArgoCD API read、ArgoCD sync、kubectl action、Helm upgrade、production write 或 runtime gate。 86. 建立 Backup / Restore / Escrow Owner Response Acceptance 只讀帳本。✅ 本地完成；新增 `backup-restore-owner-response-acceptance.py`、snapshot 與說明文件，將 38 份 backup / restore / escrow owner request draft 串成 `acceptance_candidate_count=38`、`write_capable_acceptance_candidate_count=27`、`live_evidence_required_candidate_count=38`、`required_owner_field_count=14`、`reviewer_check_count=13`、`outcome_lane_count=7`、`blocked_action_count=22` 的 owner response acceptance ledger；backup / restore 類別只讀成熟度 `58% -> 62%`，高價值配置平均只讀成熟度 `66% -> 67%`；owner response received / accepted、live backup evidence、backup run、restore run、offsite sync、remote delete、credential escrow marker write、retention change、secret collection、host write、runtime gate、action buttons 仍全部為 `0`。這不是 owner response received / accepted、backup run、restore run、offsite sync、remote delete、credential escrow marker write、retention change、restic prune、rclone config、Velero restore / backup、secret collection、host write、production write 或 runtime gate。 87. 建立 SSH / Firewall / Network Access Owner Response Acceptance 只讀帳本。✅ 本地完成；新增 `ssh-network-owner-response-acceptance.py`、snapshot 與說明文件，將 16 份 SSH / network owner request draft 串成 `acceptance_candidate_count=16`、`write_capable_acceptance_candidate_count=6`、`live_evidence_required_candidate_count=16`、`required_owner_field_count=13`、`reviewer_check_count=15`、`outcome_lane_count=7`、`blocked_action_count=22` 的 owner response acceptance ledger；SSH / network 類別只讀成熟度 `54% -> 58%`，高價值配置平均只讀成熟度仍為 `67%`；owner response received / accepted、live access state、host key pinning、port policy、firewall owner、NetworkPolicy / NodePort、WireGuard cutover、SSH、keyscan、known_hosts patch、firewall / port change、secret collection、host write、runtime gate、action buttons 仍全部為 `0`。這不是 owner response received / accepted、live host read、host keyscan、known_hosts patch、firewall / port change、NetworkPolicy apply、NodePort change、WireGuard cutover、secret collection、host write、production write 或 runtime gate。 +88. 建立 Monitoring / Alerting / Observability Owner Response Acceptance 只讀帳本。✅ 本地完成；新增 `monitoring-owner-response-acceptance.py`、snapshot 與說明文件，將 60 份 monitoring owner request draft 串成 `acceptance_candidate_count=60`、`write_capable_acceptance_candidate_count=11`、`live_evidence_required_candidate_count=60`、`acceptance_field_count=30`、`required_owner_field_count=14`、`reviewer_check_count=15`、`outcome_lane_count=7`、`blocked_action_count=28` 的 owner response acceptance ledger；monitoring / alerting / observability 類別只讀成熟度 `62% -> 66%`，高價值配置平均只讀成熟度 `68% -> 69%`；owner response received / accepted / rejected、live evidence、Prometheus reload、Alertmanager reload、Grafana import、SigNoz apply、Sentry deploy、Langfuse change、OTEL reload、receiver route change、silence change、Telegram send、live alert fire、alert chain smoke、secret collection、host write、runtime gate、action buttons 仍全部為 `0`。這不是 owner response received / accepted、reload、deploy、receiver route change、silence change、Telegram send、alert chain smoke、host write、production write 或 runtime gate。 #### 3.2.1d 2026-06-11 Agent 互動、學習與成長證據面 @@ -4963,3 +4965,15 @@ Trigger commit `f5cd37b7` 與 deploy marker `0ba92357` 已把 governance UI 的 - 高價值配置 coverage、agent-bounty onboarding handoff、IwoooS 配置控管總清單、P0 主控板、供應鏈進度與 MASTER artifact 表已同步 P0-23。 **裁決：** 這是人工送件前 request draft，不是 request sent、recipient confirmed、owner response received / accepted、repo push、refs sync、workflow 修改、secret collection、deploy、compose restart、DB migration、claim / submit、payout / withdrawal、cron / daemon、external send、host write、active scan、production write 或 runtime gate；IwoooS headline 仍維持 `64%`，active runtime gate 仍 `0`。 + +### 2026-06-15 09:20 (台北) — §3.2 / §5 — 新增 Monitoring / Alerting / Observability Owner Response Acceptance 只讀帳本 — 把告警與 Telegram 收件驗收固定成 guard artifact + +**觸發**：Monitoring / Alerting / Observability 已有 repo-only 清冊與 owner request draft，但仍需要固定 owner 回覆收件後的驗收格式、reviewer checks、outcome lanes 與 blocked actions，避免後續把 Prometheus / Alertmanager / Grafana / SigNoz / Sentry / Langfuse / OTEL / Telegram 的 owner response、UI 可見、CD success 或 smoke 結果誤判成 reload、receiver route change、silence change、Telegram send 或 alert chain smoke 授權。 + +**已推進：** +- 新增 `scripts/security/monitoring-owner-response-acceptance.py`，讀取 monitoring repo-only inventory 與 owner request draft，產生 60 份 owner response acceptance candidate。 +- 新增 `docs/security/monitoring-owner-response-acceptance.snapshot.json`，固定 `acceptance_candidate_count=60`、`write_capable_acceptance_candidate_count=11`、`live_evidence_required_candidate_count=60`、`acceptance_field_count=30`、`required_owner_field_count=14`、`reviewer_check_count=15`、`outcome_lane_count=7`、`blocked_action_count=28`。 +- 新增 `docs/security/MONITORING-OWNER-RESPONSE-ACCEPTANCE.md`，說明 owner 必填欄位、reviewer checks、outcome lanes、blocked actions、完成度與 0 / false 邊界。 +- `iwooos-config-control-guard.py`、`security-mirror-progress-guard.py` 與高價值配置 coverage 已鎖住新 artifact；`monitoring_alerting_observability` 只讀治理成熟度 `62% -> 66%`，高價值配置平均只讀治理成熟度 `68% -> 69%`。 + +**裁決：** 這是 owner response acceptance 只讀帳本，不是 owner response received / accepted / rejected、live evidence、Prometheus reload、Alertmanager reload、Grafana import、SigNoz apply、Sentry deploy、Langfuse config change、OTEL reload、receiver route change、silence change、Telegram send、live alert fire、alert chain smoke、secret collection、host write、production write 或 runtime gate；IwoooS headline 仍維持 `64%`，active runtime gate 仍 `0`。 diff --git a/docs/workplans/2026-06-04-iwooos-security-governance-p0.md b/docs/workplans/2026-06-04-iwooos-security-governance-p0.md index 852dc0000..5a17118f4 100644 --- a/docs/workplans/2026-06-04-iwooos-security-governance-p0.md +++ b/docs/workplans/2026-06-04-iwooos-security-governance-p0.md @@ -26,7 +26,7 @@ | 最新 P1 Docker / systemd / Host Service 配置控管基準 | repo-only inventory 已固定 `surface=9`、`write_capable=3`、`live_evidence_required=8`、成熟度 `42% -> 50%`；owner request draft 固定 `drafts=9`、`owner_fields=12`、`blocked_actions=14`；本輪新增 owner response acceptance 只讀帳本，固定 `candidates=9`、`write_capable=3`、`live_evidence_required=8`、`reviewer_checks=14`、`outcome_lanes=7`、`blocked_actions=20`，成熟度 `50% -> 54%`；request sent / received / accepted / live evidence / host read / restart window / rollback owner / host write / runtime gate 全部 `0` | | 最新 P1 SSH / Firewall / Network Access 配置控管基準 | repo-only inventory 已固定 `surface=16`、`write_capable=6`、`live_evidence_required=16`、成熟度 `48% -> 54%`；本輪新增 owner request draft，固定 `drafts=16`、`owner_fields=13`、`blocked_actions=16`、request sent / received / accepted / live access state / firewall / port change / NetworkPolicy / NodePort / WireGuard / host write / runtime gate 全部 `0` | | 最新 P1 Backup / Restore / Escrow 配置控管基準 | repo-only inventory 已固定 `surface=38`、`write_capable=27`、`live_evidence_required=38`、成熟度 `52% -> 58%`；本輪新增 owner request draft，固定 `drafts=38`、`owner_fields=14`、`blocked_actions=18`、request sent / received / accepted / backup run / restore run / offsite sync / remote delete / escrow marker / retention change / runtime gate 全部 `0` | -| 最新 P1 Monitoring / Alerting / Observability 配置控管基準 | repo-only inventory 已固定 `surface=60`、`write_capable=11`、`live_evidence_required=60`、成熟度 `56% -> 62%`；本輪新增 owner request draft，固定 `drafts=60`、`owner_fields=14`、`blocked_actions=24`、request sent / received / accepted / live evidence / reload / receiver route change / Telegram send / alert chain smoke / runtime gate 全部 `0` | +| 最新 P1 Monitoring / Alerting / Observability 配置控管基準 | repo-only inventory 已固定 `surface=60`、`write_capable=11`、`live_evidence_required=60`、成熟度 `56% -> 62%`；owner request draft 固定 `drafts=60`、`owner_fields=14`、`blocked_actions=24`；本輪新增 owner response acceptance 只讀帳本，固定 `candidates=60`、`write_capable=11`、`live_evidence_required=60`、`reviewer_checks=15`、`outcome_lanes=7`、`blocked_actions=28`，成熟度 `62% -> 66%`；request sent / received / accepted / rejected / live evidence / reload / receiver route change / Telegram send / alert chain smoke / runtime gate 全部 `0` | | 最新 P0 CD / Runner / Secret 注入變更證據驗收基準 | 已新增 `CD-RUNNER-SECRET-INJECTION-CHANGE-EVIDENCE-ACCEPTANCE.md`、snapshot 與產生器；固定 `candidates=5`、`c0=4`、`c1=1`、`write_capable=5`、`workflow_files=33`、`referenced_secret_names=42`、`runner_labels=5`、`evidence_fields=19`、`reviewer_checks=19`、`outcome_lanes=8`、`blocked_actions=32`；secret metadata 成熟度 `66% -> 68%`，workflow / runner 成熟度 `70% -> 72%`；workflow diff / runner attestation / secret name parity / secret injection route / deploy marker readback / guard result / postcheck evidence accepted、workflow modification、runner change、repo secret change、secret rotation、Gitea action dispatch、production deploy、runtime gate 全部 `0` | | 最新 P0 Public / Admin / API runtime config 變更證據驗收基準 | 已新增 `PUBLIC-RUNTIME-CONFIG-CHANGE-EVIDENCE-ACCEPTANCE.md`、snapshot 與產生器；固定 `candidates=6`、`c0=5`、`c1=1`、`write_capable=6`、`source_refs=20`、`evidence_fields=21`、`reviewer_checks=21`、`outcome_lanes=8`、`blocked_actions=32`；public/admin/API runtime config 成熟度 `62% -> 64%`；affected route / admin auth / API readback / CORS diff / frontend env diff / i18n redaction / desktop-mobile smoke / sensitive scan / postcheck accepted、route / CORS / env / auth / webhook 變更、production deploy、runtime gate 全部 `0`；raw namespace、repo slug、內部狀態碼、內部協作內容外洩列為拒收或隔離 | | 最新 AI Agent automation P1-305 / P1-306 基準 | code `4f0787f8`、deploy marker `af3a9d48`、CD `2592`、code-review `2593`；任務批准邊界與進度彙總已正式驗證；backlog `70%`、done `16/23`、下一步 `P1-001` | diff --git a/scripts/security/high-value-config-control-coverage.py b/scripts/security/high-value-config-control-coverage.py index 949bd3426..e80f2cfa0 100644 --- a/scripts/security/high-value-config-control-coverage.py +++ b/scripts/security/high-value-config-control-coverage.py @@ -140,16 +140,20 @@ CONTROL_STATUS_BY_CATEGORY = { "next_owner_action": "補 repo owner、external agent owner、treasury owner、runtime gate owner、maintenance window、rollback owner 與 validation plan。", }, "monitoring_alerting_observability": { - "coverage_status": "repo_only_inventory_ready_needs_live_route_evidence", - "coverage_percent": 62, + "coverage_status": "owner_response_acceptance_ledger_ready_needs_live_route_evidence", + "coverage_percent": 66, "evidence_refs": [ "docs/security/IWOOOS-CONFIG-CONTROL-INVENTORY.md", "docs/security/MONITORING-ALERTING-OBSERVABILITY-INVENTORY.md", "docs/security/monitoring-alerting-observability-inventory.snapshot.json", + "docs/security/MONITORING-OWNER-REQUEST-DRAFT.md", + "docs/security/monitoring-owner-request-draft.snapshot.json", + "docs/security/MONITORING-OWNER-RESPONSE-ACCEPTANCE.md", + "docs/security/monitoring-owner-response-acceptance.snapshot.json", "docs/schemas/monitoring_alerting_observability_inventory_v1.schema.json", ], - "current_gap": "repo-only 清冊已納入 60 個 monitoring / alerting / observability surface；仍缺 live config hash、rule diff、receiver diff、reload owner、route smoke、receipt proof 與 owner response。", - "next_owner_action": "補 Prometheus / Alertmanager / Grafana / SigNoz / Sentry / Langfuse / Telegram owner、live drift evidence、reload window、receiver owner、rollback owner 與 no-secret-value evidence。", + "current_gap": "已固定 60 份 monitoring / alerting / observability owner response acceptance candidate；仍缺 owner response、live config hash、rule diff、receiver diff、reload owner、route smoke、receipt proof、noise budget owner 與 maintenance window。", + "next_owner_action": "補 Prometheus / Alertmanager / Grafana / SigNoz / Sentry / Langfuse / Telegram owner、live drift evidence、reload window、receiver owner、route smoke plan、noise budget、rollback owner 與 no-secret-value evidence。", }, "docker_compose_systemd_host_config": { "coverage_status": "owner_response_acceptance_ledger_ready_needs_live_owner_evidence", @@ -373,6 +377,7 @@ def build_report(root: Path, generated_at: str | None) -> dict[str, Any]: "change_evidence_acceptance_ready_needs_runtime_config_owner_evidence", "owner_response_acceptance_ledger_ready_needs_restore_drill_owner", "owner_response_acceptance_ledger_ready_needs_network_owner", + "owner_response_acceptance_ledger_ready_needs_live_route_evidence", "change_evidence_acceptance_ready_needs_network_owner_evidence", "policy_ready_needs_drift_evidence", "inventory_needed", diff --git a/scripts/security/iwooos-config-control-guard.py b/scripts/security/iwooos-config-control-guard.py index 3daedcb12..aba3b3e1a 100644 --- a/scripts/security/iwooos-config-control-guard.py +++ b/scripts/security/iwooos-config-control-guard.py @@ -25,7 +25,7 @@ EXPECTED_CATEGORIES = { "public_admin_api_runtime_config": 64, "backup_restore_credential": 62, "agent_bounty_protocol_runtime": 68, - "monitoring_alerting_observability": 62, + "monitoring_alerting_observability": 66, "docker_compose_systemd_host_config": 54, "ssh_firewall_network_access": 60, "ai_provider_model_routing": 60, @@ -341,6 +341,26 @@ ARTIFACT_SPECS = [ "runtime_gate_count": 0, }, }, + { + "label": "monitoring owner response acceptance", + "path": "docs/security/monitoring-owner-response-acceptance.snapshot.json", + "schema": "monitoring_owner_response_acceptance_v1", + "status": "owner_response_acceptance_ledger_ready_no_runtime_action", + "list_counts": { + "acceptance_candidates": 60, + "blocked_actions": 28, + "reviewer_checks": 15, + "outcome_lanes": 7, + "required_owner_fields": 14, + }, + "summary_counts": { + "acceptance_candidate_count": 60, + "write_capable_acceptance_candidate_count": 11, + "owner_response_received_count": 0, + "owner_response_accepted_count": 0, + "runtime_gate_count": 0, + }, + }, { "label": "agent bounty owner request draft", "path": "docs/security/agent-bounty-owner-request-draft.snapshot.json", diff --git a/scripts/security/monitoring-owner-response-acceptance.py b/scripts/security/monitoring-owner-response-acceptance.py new file mode 100644 index 000000000..2b84b30c9 --- /dev/null +++ b/scripts/security/monitoring-owner-response-acceptance.py @@ -0,0 +1,385 @@ +#!/usr/bin/env python3 +""" +IwoooS Monitoring / Alerting / Observability owner response acceptance 只讀帳本產生器。 + +本工具讀取 monitoring / alerting / observability inventory 與 owner request +draft，建立未來 owner response 如何收件、補件、隔離、拒收或進入 +monitoring reviewer review 的 metadata-only acceptance ledger。它不連 live +Prometheus、不 reload Alertmanager、不套用 Grafana / SigNoz / Sentry / +Langfuse、不 reload OTEL、不改 receiver route、不建立 silence、不送 +Telegram、不 fire live alert、不跑 alert chain smoke、不 SSH、不 kubectl、 +不讀 secret value、不寫 production。 +""" + +from __future__ import annotations + +import argparse +import json +import subprocess +import sys +from datetime import datetime, timedelta, timezone +from pathlib import Path +from typing import Any + + +TAIPEI = timezone(timedelta(hours=8)) + +ACCEPTANCE_FIELDS = [ + "acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "owner_response_ref", + "owner_role_or_team", + "decision", + "decision_reason", + "affected_scope", + "redacted_evidence_refs", + "live_config_hash_ref", + "reload_owner", + "receiver_owner", + "route_smoke_plan", + "maintenance_window", + "rollback_owner", + "validation_plan", + "noise_budget_owner", + "reviewer_outcome", + "followup_owner", + "not_approval", +] + +REVIEWER_CHECKS = [ + {"check_id": "owner_identity_present", "instruction": "owner role / team 必須可追溯。"}, + {"check_id": "decision_reason_present", "instruction": "decision 與 decision reason 必須同時存在。"}, + {"check_id": "affected_scope_matches_surface", "instruction": "affected scope 必須能對回 committed surface_id。"}, + {"check_id": "redacted_refs_only", "instruction": "evidence 只能是脫敏 ref、hash、ticket、commit 或 artifact pointer。"}, + {"check_id": "secret_value_absent", "instruction": "不得出現 token、Bot token、DSN secret、cookie、private key、env dump 或 partial secret。"}, + {"check_id": "live_config_hash_metadata_only", "instruction": "live config hash 只能是 owner-provided metadata ref，不得貼 raw config。"}, + {"check_id": "reload_owner_present", "instruction": "Prometheus / Alertmanager / OTEL / Sentry 類變更必須有 reload / deploy owner。"}, + {"check_id": "receiver_owner_present", "instruction": "receiver route、Telegram receipt 與 notification policy 必須有 receiver owner。"}, + {"check_id": "route_smoke_plan_present", "instruction": "route smoke / receipt proof 必須是計畫或脫敏證據 ref，不得直接 fire alert。"}, + {"check_id": "noise_budget_owner_present", "instruction": "告警噪音、silence、dedup 與測試通知必須有 noise budget owner。"}, + {"check_id": "maintenance_window_present", "instruction": "reload、deploy、route change、smoke 或 notification send 必須另有維護窗口。"}, + {"check_id": "rollback_owner_present", "instruction": "rollback owner、rollback ref 或 disable path 必須存在。"}, + {"check_id": "validation_plan_present", "instruction": "validation / post-check 必須列 route、receipt、alert state、metrics 與 rollback stop condition。"}, + {"check_id": "no_runtime_request", "instruction": "夾帶 reload、receiver route change、Telegram send、alert smoke、SSH 或 kubectl 要求時拒收。"}, + {"check_id": "counts_transition_safe", "instruction": "只有 reviewer record 可更新 received / accepted / rejected；不得同時開 runtime gate。"}, +] + +OUTCOME_LANES = [ + {"lane_id": "waiting_owner_response", "meaning": "尚未收到 owner response；所有 accepted / runtime count 維持 0。"}, + {"lane_id": "quarantine_secret_or_raw_payload", "meaning": "收到 secret、raw config、raw receiver payload、未脫敏 log 或截圖時隔離。"}, + {"lane_id": "reject_execution_request", "meaning": "夾帶 reload、deploy、route change、Telegram send、fire alert、SSH 或 kubectl 要求時拒收。"}, + {"lane_id": "request_supplement", "meaning": "欄位不足、scope 不清、reload / receiver / route smoke / rollback / noise owner 缺失時要求補件。"}, + {"lane_id": "ready_for_monitoring_review", "meaning": "metadata 合格後，只能進 monitoring reviewer review。"}, + {"lane_id": "owner_review_only_update", "meaning": "只允許更新只讀 owner review ledger，不得 reload、send Telegram 或 fire alert。"}, + {"lane_id": "waiting_runtime_gate", "meaning": "即使 owner response accepted，runtime gate 仍等待獨立人工批准。"}, +] + +BLOCKED_ACTIONS = [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "add_action_button", +] + + +def git_short_sha(root: Path) -> str: + try: + result = subprocess.run( + ["git", "rev-parse", "--short", "HEAD"], + cwd=root, + check=True, + capture_output=True, + text=True, + ) + return result.stdout.strip() + except Exception: + return "unknown" + + +def load_json(path: Path) -> dict[str, Any]: + return json.loads(path.read_text(encoding="utf-8")) + + +def acceptance_candidate(request: dict[str, Any]) -> dict[str, Any]: + surface_id = request["surface_id"] + return { + "acceptance_candidate_id": f"monitoring_owner_response_acceptance:{surface_id}", + "status": "waiting_owner_response", + "request_id": request["request_id"], + "surface_id": surface_id, + "label": request["label"], + "expected_scope": request["expected_scope"], + "config_kind": request["config_kind"], + "observability_scope": request["observability_scope"], + "control_tier": request["control_tier"], + "repo_source_path": request["repo_source_path"], + "repo_sha256": request["repo_sha256"], + "source_line_count": request["source_line_count"], + "write_capable_surface": request["write_capable_surface"], + "requires_live_evidence": request["requires_live_evidence"], + "owner_response_ref": None, + "owner_role_or_team": "pending_owner_response", + "decision": "pending_owner_response", + "decision_reason": "pending_owner_response", + "affected_scope": "pending_owner_response", + "redacted_evidence_refs": [], + "live_config_hash_ref": None, + "reload_owner": "pending_owner_response", + "receiver_owner": "pending_owner_response", + "route_smoke_plan": "pending_owner_response", + "maintenance_window": "pending_owner_response", + "rollback_owner": "pending_owner_response", + "validation_plan": "pending_owner_response", + "noise_budget_owner": "pending_owner_response", + "reviewer_outcome": "waiting_owner_response", + "followup_owner": "pending_owner_response", + "acceptance_fields": ACCEPTANCE_FIELDS, + "required_owner_fields": request["required_owner_fields"], + "reviewer_checks": [item["check_id"] for item in REVIEWER_CHECKS], + "outcome_lanes": [item["lane_id"] for item in OUTCOME_LANES], + "blocked_actions": BLOCKED_ACTIONS, + "not_approval": True, + "request_sent": False, + "recipient_confirmed": False, + "owner_response_received": False, + "owner_response_accepted": False, + "owner_response_rejected": False, + "owner_response_quarantined": False, + "supplement_requested": False, + "live_evidence_received": False, + "live_config_hash_accepted": False, + "reload_owner_accepted": False, + "receiver_owner_accepted": False, + "route_smoke_accepted": False, + "maintenance_window_accepted": False, + "rollback_owner_accepted": False, + "validation_plan_accepted": False, + "noise_budget_owner_accepted": False, + "prometheus_reload_authorized": False, + "alertmanager_reload_authorized": False, + "grafana_dashboard_apply_authorized": False, + "signoz_rule_apply_authorized": False, + "sentry_deploy_authorized": False, + "langfuse_config_change_authorized": False, + "otel_collector_reload_authorized": False, + "receiver_route_change_authorized": False, + "silence_policy_change_authorized": False, + "telegram_send_authorized": False, + "notification_route_change_authorized": False, + "webhook_receiver_change_authorized": False, + "remote_write_change_authorized": False, + "exporter_deploy_authorized": False, + "live_alert_fire_authorized": False, + "alert_chain_smoke_authorized": False, + "ssh_read_authorized": False, + "ssh_write_authorized": False, + "kubectl_action_authorized": False, + "secret_value_collection_allowed": False, + "host_write_authorized": False, + "active_scan_authorized": False, + "production_write_authorized": False, + "runtime_gate": False, + "action_buttons_allowed": False, + } + + +def build_report( + root: Path, + inventory: dict[str, Any], + request_draft_report: dict[str, Any], + generated_at: str | None, +) -> dict[str, Any]: + report_time = generated_at or datetime.now(TAIPEI).isoformat(timespec="seconds") + requests = request_draft_report.get("request_drafts", []) + acceptance_candidates = [acceptance_candidate(item) for item in requests] + write_capable = [item for item in acceptance_candidates if item["write_capable_surface"]] + live_evidence = [item for item in acceptance_candidates if item["requires_live_evidence"]] + + return { + "schema_version": "monitoring_owner_response_acceptance_v1", + "generated_at": report_time, + "git_commit": git_short_sha(root), + "source_inventory_schema_version": inventory.get("schema_version"), + "source_inventory_status": inventory.get("status"), + "source_owner_request_schema_version": request_draft_report.get("schema_version"), + "source_owner_request_status": request_draft_report.get("status"), + "status": "owner_response_acceptance_ledger_ready_no_runtime_action", + "summary": { + "source_surface_count": inventory.get("summary", {}).get("surface_count", 0), + "source_request_draft_count": request_draft_report.get("summary", {}).get("request_draft_count", 0), + "acceptance_candidate_count": len(acceptance_candidates), + "write_capable_acceptance_candidate_count": len(write_capable), + "live_evidence_required_candidate_count": len(live_evidence), + "acceptance_field_count": len(ACCEPTANCE_FIELDS), + "required_owner_field_count": len(request_draft_report["required_owner_fields"]), + "reviewer_check_count": len(REVIEWER_CHECKS), + "outcome_lane_count": len(OUTCOME_LANES), + "blocked_action_count": len(BLOCKED_ACTIONS), + "request_sent_count": 0, + "recipient_confirmed_count": 0, + "owner_response_received_count": 0, + "owner_response_accepted_count": 0, + "owner_response_rejected_count": 0, + "owner_response_quarantined_count": 0, + "supplement_requested_count": 0, + "live_evidence_received_count": 0, + "live_config_hash_accepted_count": 0, + "reload_owner_accepted_count": 0, + "receiver_owner_accepted_count": 0, + "route_smoke_accepted_count": 0, + "maintenance_window_accepted_count": 0, + "rollback_owner_accepted_count": 0, + "validation_plan_accepted_count": 0, + "noise_budget_owner_accepted_count": 0, + "prometheus_reload_authorized_count": 0, + "alertmanager_reload_authorized_count": 0, + "grafana_dashboard_apply_authorized_count": 0, + "signoz_rule_apply_authorized_count": 0, + "sentry_deploy_authorized_count": 0, + "langfuse_config_change_authorized_count": 0, + "otel_collector_reload_authorized_count": 0, + "receiver_route_change_authorized_count": 0, + "silence_policy_change_authorized_count": 0, + "telegram_send_authorized_count": 0, + "notification_route_change_authorized_count": 0, + "webhook_receiver_change_authorized_count": 0, + "remote_write_change_authorized_count": 0, + "exporter_deploy_authorized_count": 0, + "live_alert_fire_authorized_count": 0, + "alert_chain_smoke_authorized_count": 0, + "ssh_read_authorized_count": 0, + "ssh_write_authorized_count": 0, + "kubectl_action_authorized_count": 0, + "secret_value_collection_allowed_count": 0, + "host_write_authorized_count": 0, + "active_scan_authorized_count": 0, + "production_write_authorized_count": 0, + "runtime_gate_count": 0, + "action_button_count": 0, + }, + "execution_boundaries": { + "request_dispatch_authorized": False, + "owner_response_accepted": False, + "live_evidence_received": False, + "prometheus_reload_authorized": False, + "alertmanager_reload_authorized": False, + "grafana_dashboard_apply_authorized": False, + "signoz_rule_apply_authorized": False, + "sentry_deploy_authorized": False, + "langfuse_config_change_authorized": False, + "otel_collector_reload_authorized": False, + "receiver_route_change_authorized": False, + "silence_policy_change_authorized": False, + "telegram_send_authorized": False, + "notification_route_change_authorized": False, + "webhook_receiver_change_authorized": False, + "remote_write_change_authorized": False, + "exporter_deploy_authorized": False, + "live_alert_fire_authorized": False, + "alert_chain_smoke_authorized": False, + "ssh_read_authorized": False, + "ssh_write_authorized": False, + "kubectl_action_authorized": False, + "secret_value_collection_allowed": False, + "host_write_authorized": False, + "active_scan_authorized": False, + "production_write_authorized": False, + "runtime_execution_authorized": False, + "action_buttons_allowed": False, + "not_authorization": True, + }, + "acceptance_fields": ACCEPTANCE_FIELDS, + "required_owner_fields": request_draft_report["required_owner_fields"], + "reviewer_checks": REVIEWER_CHECKS, + "outcome_lanes": OUTCOME_LANES, + "blocked_actions": BLOCKED_ACTIONS, + "acceptance_candidates": acceptance_candidates, + "next_steps": [ + "等待 owner response；未收到前不得更新 received / accepted / rejected count。", + "收到回覆後先做欄位完整性、敏感 payload 隔離、reload / send / smoke execution request 拒收。", + "metadata 合格也只能進 monitoring reviewer review；reload、receiver route change、Telegram send、live alert fire、alert chain smoke 與 production write 仍需獨立人工批准。", + ], + } + + +def main() -> int: + parser = argparse.ArgumentParser(description="IwoooS Monitoring owner response acceptance 只讀帳本產生器") + parser.add_argument("--root", default=".", help="repo root") + parser.add_argument( + "--inventory-report", + default="docs/security/monitoring-alerting-observability-inventory.snapshot.json", + help="monitoring-alerting-observability-inventory.py 輸出的 JSON", + ) + parser.add_argument( + "--owner-request-report", + default="docs/security/monitoring-owner-request-draft.snapshot.json", + help="monitoring-owner-request-draft.py 輸出的 JSON", + ) + parser.add_argument("--output", help="寫出 JSON 報告") + parser.add_argument("--generated-at", help="固定報告時間，供 committed snapshot 使用") + args = parser.parse_args() + + root = Path(args.root).resolve() + inventory = load_json(root / args.inventory_report) + request_draft_report = load_json(root / args.owner_request_report) + report = build_report(root, inventory, request_draft_report, args.generated_at) + payload = json.dumps(report, ensure_ascii=False, indent=2, sort_keys=True) + + if args.output: + output = Path(args.output) + output.parent.mkdir(parents=True, exist_ok=True) + output.write_text(payload + "\n", encoding="utf-8") + else: + print(payload) + + summary = report["summary"] + print( + "MONITORING_OWNER_RESPONSE_ACCEPTANCE_OK " + f"candidates={summary['acceptance_candidate_count']} " + f"write_capable={summary['write_capable_acceptance_candidate_count']} " + f"checks={summary['reviewer_check_count']} " + f"lanes={summary['outcome_lane_count']} " + f"accepted={summary['owner_response_accepted_count']} " + f"runtime_gate={summary['runtime_gate_count']}", + file=sys.stderr, + ) + return 0 + + +if __name__ == "__main__": + raise SystemExit(main()) diff --git a/scripts/security/security-mirror-progress-guard.py b/scripts/security/security-mirror-progress-guard.py index e18fbfe57..0929b8e36 100755 --- a/scripts/security/security-mirror-progress-guard.py +++ b/scripts/security/security-mirror-progress-guard.py @@ -136,6 +136,9 @@ def validate(root: Path) -> None: monitoring_owner_request_draft = load_json( security_dir / "monitoring-owner-request-draft.snapshot.json" ) + monitoring_owner_response_acceptance = load_json( + security_dir / "monitoring-owner-response-acceptance.snapshot.json" + ) domain_tls_inventory = load_json(security_dir / "domain-tls-certbot-inventory.snapshot.json") domain_tls_owner_confirmation_request = load_json( security_dir / "domain-tls-certbot-owner-confirmation-request.snapshot.json" @@ -2707,7 +2710,7 @@ def validate(root: Path) -> None: assert_equal( "high_value_config_coverage.summary.average_coverage_percent", high_value_config_coverage["summary"]["average_coverage_percent"], - 68, + 69, ) assert_equal( "high_value_config_coverage.summary.needs_live_evidence_count", @@ -3211,16 +3214,20 @@ def validate(root: Path) -> None: assert_equal( "high_value_config_coverage.coverage_categories.monitoring.coverage_percent", monitoring_category["coverage_percent"], - 62, + 66, ) assert_equal( "high_value_config_coverage.coverage_categories.monitoring.coverage_status", monitoring_category["coverage_status"], - "repo_only_inventory_ready_needs_live_route_evidence", + "owner_response_acceptance_ledger_ready_needs_live_route_evidence", ) for evidence_ref in [ "docs/security/MONITORING-ALERTING-OBSERVABILITY-INVENTORY.md", "docs/security/monitoring-alerting-observability-inventory.snapshot.json", + "docs/security/MONITORING-OWNER-REQUEST-DRAFT.md", + "docs/security/monitoring-owner-request-draft.snapshot.json", + "docs/security/MONITORING-OWNER-RESPONSE-ACCEPTANCE.md", + "docs/security/monitoring-owner-response-acceptance.snapshot.json", "docs/schemas/monitoring_alerting_observability_inventory_v1.schema.json", ]: assert_contains( @@ -5040,6 +5047,214 @@ def validate(root: Path) -> None: f"monitoring_owner_request_draft.{draft['request_id']}.{false_key}", draft[false_key], ) + assert_equal( + "monitoring_owner_response_acceptance.schema", + monitoring_owner_response_acceptance["schema_version"], + "monitoring_owner_response_acceptance_v1", + ) + assert_equal( + "monitoring_owner_response_acceptance.status", + monitoring_owner_response_acceptance["status"], + "owner_response_acceptance_ledger_ready_no_runtime_action", + ) + assert_equal( + "monitoring_owner_response_acceptance.source_inventory_schema_version", + monitoring_owner_response_acceptance["source_inventory_schema_version"], + "monitoring_alerting_observability_inventory_v1", + ) + assert_equal( + "monitoring_owner_response_acceptance.source_inventory_status", + monitoring_owner_response_acceptance["source_inventory_status"], + "repo_only_inventory_ready", + ) + assert_equal( + "monitoring_owner_response_acceptance.source_owner_request_schema_version", + monitoring_owner_response_acceptance["source_owner_request_schema_version"], + "monitoring_owner_request_draft_v1", + ) + assert_equal( + "monitoring_owner_response_acceptance.source_owner_request_status", + monitoring_owner_response_acceptance["source_owner_request_status"], + "owner_request_draft_ready_not_dispatched", + ) + expected_monitoring_owner_response_acceptance_summary = { + "source_surface_count": 60, + "source_request_draft_count": 60, + "acceptance_candidate_count": 60, + "write_capable_acceptance_candidate_count": 11, + "live_evidence_required_candidate_count": 60, + "acceptance_field_count": 30, + "required_owner_field_count": 14, + "reviewer_check_count": 15, + "outcome_lane_count": 7, + "blocked_action_count": 28, + "request_sent_count": 0, + "recipient_confirmed_count": 0, + "owner_response_received_count": 0, + "owner_response_accepted_count": 0, + "owner_response_rejected_count": 0, + "owner_response_quarantined_count": 0, + "supplement_requested_count": 0, + "live_evidence_received_count": 0, + "live_config_hash_accepted_count": 0, + "reload_owner_accepted_count": 0, + "receiver_owner_accepted_count": 0, + "route_smoke_accepted_count": 0, + "maintenance_window_accepted_count": 0, + "rollback_owner_accepted_count": 0, + "validation_plan_accepted_count": 0, + "noise_budget_owner_accepted_count": 0, + "prometheus_reload_authorized_count": 0, + "alertmanager_reload_authorized_count": 0, + "grafana_dashboard_apply_authorized_count": 0, + "signoz_rule_apply_authorized_count": 0, + "sentry_deploy_authorized_count": 0, + "langfuse_config_change_authorized_count": 0, + "otel_collector_reload_authorized_count": 0, + "receiver_route_change_authorized_count": 0, + "silence_policy_change_authorized_count": 0, + "telegram_send_authorized_count": 0, + "notification_route_change_authorized_count": 0, + "webhook_receiver_change_authorized_count": 0, + "remote_write_change_authorized_count": 0, + "exporter_deploy_authorized_count": 0, + "live_alert_fire_authorized_count": 0, + "alert_chain_smoke_authorized_count": 0, + "ssh_read_authorized_count": 0, + "ssh_write_authorized_count": 0, + "kubectl_action_authorized_count": 0, + "secret_value_collection_allowed_count": 0, + "host_write_authorized_count": 0, + "active_scan_authorized_count": 0, + "production_write_authorized_count": 0, + "runtime_gate_count": 0, + "action_button_count": 0, + } + for key, expected in expected_monitoring_owner_response_acceptance_summary.items(): + assert_equal( + f"monitoring_owner_response_acceptance.summary.{key}", + monitoring_owner_response_acceptance["summary"][key], + expected, + ) + for key, value in monitoring_owner_response_acceptance["execution_boundaries"].items(): + if key == "not_authorization": + assert_true(f"monitoring_owner_response_acceptance.execution_boundaries.{key}", value) + else: + assert_false(f"monitoring_owner_response_acceptance.execution_boundaries.{key}", value) + assert_equal( + "monitoring_owner_response_acceptance.acceptance_candidates.count", + len(monitoring_owner_response_acceptance["acceptance_candidates"]), + 60, + ) + monitoring_acceptance_ids = [ + item["acceptance_candidate_id"] + for item in monitoring_owner_response_acceptance["acceptance_candidates"] + ] + for acceptance_candidate_id in [ + "monitoring_owner_response_acceptance:alertmanager_receiver_config", + "monitoring_owner_response_acceptance:deploy_alertmanager_config_script", + "monitoring_owner_response_acceptance:telegram_gateway_service", + "monitoring_owner_response_acceptance:fire_live_alert_script", + "monitoring_owner_response_acceptance:sentry_self_hosted_deploy", + "monitoring_owner_response_acceptance:langfuse_compose", + ]: + assert_contains( + "monitoring_owner_response_acceptance.acceptance_candidates", + monitoring_acceptance_ids, + acceptance_candidate_id, + ) + assert_equal( + "monitoring_owner_response_acceptance.reviewer_checks.count", + len(monitoring_owner_response_acceptance["reviewer_checks"]), + 15, + ) + assert_equal( + "monitoring_owner_response_acceptance.outcome_lanes.count", + len(monitoring_owner_response_acceptance["outcome_lanes"]), + 7, + ) + assert_equal( + "monitoring_owner_response_acceptance.blocked_actions.count", + len(monitoring_owner_response_acceptance["blocked_actions"]), + 28, + ) + for item in monitoring_owner_response_acceptance["acceptance_candidates"]: + assert_equal( + f"monitoring_owner_response_acceptance.{item['acceptance_candidate_id']}.acceptance_fields", + len(item["acceptance_fields"]), + 30, + ) + assert_equal( + f"monitoring_owner_response_acceptance.{item['acceptance_candidate_id']}.required_owner_fields", + len(item["required_owner_fields"]), + 14, + ) + assert_equal( + f"monitoring_owner_response_acceptance.{item['acceptance_candidate_id']}.reviewer_checks", + len(item["reviewer_checks"]), + 15, + ) + assert_equal( + f"monitoring_owner_response_acceptance.{item['acceptance_candidate_id']}.outcome_lanes", + len(item["outcome_lanes"]), + 7, + ) + assert_equal( + f"monitoring_owner_response_acceptance.{item['acceptance_candidate_id']}.blocked_actions", + len(item["blocked_actions"]), + 28, + ) + assert_true( + f"monitoring_owner_response_acceptance.{item['acceptance_candidate_id']}.not_approval", + item["not_approval"], + ) + for false_key in [ + "request_sent", + "recipient_confirmed", + "owner_response_received", + "owner_response_accepted", + "owner_response_rejected", + "owner_response_quarantined", + "supplement_requested", + "live_evidence_received", + "live_config_hash_accepted", + "reload_owner_accepted", + "receiver_owner_accepted", + "route_smoke_accepted", + "maintenance_window_accepted", + "rollback_owner_accepted", + "validation_plan_accepted", + "noise_budget_owner_accepted", + "prometheus_reload_authorized", + "alertmanager_reload_authorized", + "grafana_dashboard_apply_authorized", + "signoz_rule_apply_authorized", + "sentry_deploy_authorized", + "langfuse_config_change_authorized", + "otel_collector_reload_authorized", + "receiver_route_change_authorized", + "silence_policy_change_authorized", + "telegram_send_authorized", + "notification_route_change_authorized", + "webhook_receiver_change_authorized", + "remote_write_change_authorized", + "exporter_deploy_authorized", + "live_alert_fire_authorized", + "alert_chain_smoke_authorized", + "ssh_read_authorized", + "ssh_write_authorized", + "kubectl_action_authorized", + "secret_value_collection_allowed", + "host_write_authorized", + "active_scan_authorized", + "production_write_authorized", + "runtime_gate", + "action_buttons_allowed", + ]: + assert_false( + f"monitoring_owner_response_acceptance.{item['acceptance_candidate_id']}.{false_key}", + item[false_key], + ) assert_equal( "public_gateway_preflight_inventory.schema", public_gateway_preflight_inventory["schema_version"],