chore(ops): refresh ordered p0 readback

docs/operations/awoooi-gitea-private-inventory-p0-scorecard.snapshot.json

@@ -1,6 +1,6 @@
 {
   "schema_version": "awoooi_gitea_private_inventory_p0_scorecard_v1",
-  "generated_at": "2026-06-29T14:09:49+08:00",
+  "generated_at": "2026-06-29T15:24:00+08:00",
   "workplan_id": "P0-003",
   "status": "blocked_waiting_gitea_authenticated_or_owner_export_inventory",
   "source_control_authority": "gitea",
@@ -14,7 +14,13 @@
     "schema_version": "gitea_repo_inventory_v1",
     "status": "partial",
     "visibility_scope": "public_only",
-    "repo_count": 2,
+    "repo_count": 4,
+    "public_repos": [
+      "wooo/awoooi",
+      "wooo/ewoooc",
+      "wooo/agent-bounty-protocol",
+      "wooo/2026FIFAWorldCup"
+    ],
     "token_present": false,
     "blocking_reason": "未提供 token，結果只代表公開可見 repo；private/internal repos 仍需只讀 token 或管理匯出"
   },

docs/operations/awoooi-priority-work-order-readback.snapshot.json

@@ -1,11 +1,11 @@
 {
   "schema_version": "awoooi_priority_work_order_readback_v1",
-  "generated_at": "2026-06-29T15:05:00+08:00",
-  "status": "p0_006a_reboot_auto_recovery_slo_timer_live_services_green_waiting_reboot_window",
+  "generated_at": "2026-06-29T15:24:00+08:00",
+  "status": "p0_ordered_readback_p0_006_timer_live_p0_005_escrow_missing_p0_003_public_inventory_refreshed",
   "source_refs": {
     "global_scorecard": "~/.codex/product-runtime-governance-completion-scorecard.snapshot.json",
     "workstation_dashboard": "~/.codex/codex-workstation-sync-dashboard.snapshot.json",
-    "post_reboot_summary": "/home/wooo/reboot-recovery/reboot-auto-recovery-slo-20260629-150501/summary.txt",
+    "post_reboot_summary": "/home/wooo/reboot-recovery/reboot-auto-recovery-slo-20260629-151707/summary.txt",
     "full_stack_cold_start_check": "scripts/reboot-recovery/full-stack-cold-start-check.sh --monitor-read-only --no-color",
     "delivery_closure_workbench": "https://awoooi.wooo.work/api/v1/agents/delivery-closure-workbench",
     "public_gitea_queue_readback": "ops/runner/read-public-gitea-actions-queue.py --json",
@@ -13,17 +13,22 @@
     "dr_escrow_evidence_checklist_generator": "scripts/reboot-recovery/dr-escrow-evidence-checklist.py",
     "gitea_private_inventory_p0_scorecard": "docs/operations/awoooi-gitea-private-inventory-p0-scorecard.snapshot.json",
     "reboot_auto_recovery_slo_scorecard": "docs/operations/awoooi-reboot-auto-recovery-slo-scorecard.snapshot.json",
-    "reboot_auto_recovery_slo_metric": "/home/wooo/node_exporter_textfiles/reboot_auto_recovery_slo.prom"
+    "reboot_auto_recovery_slo_metric": "/home/wooo/node_exporter_textfiles/reboot_auto_recovery_slo.prom",
+    "credential_escrow_live_status": "/tmp/awoooi-p0-005-escrow-status-live.txt",
+    "dr_escrow_evidence_checklist_latest": "/tmp/awoooi-dr-escrow-evidence-checklist-current.json",
+    "gitea_repo_inventory_snapshot": "docs/security/gitea-repo-inventory.snapshot.json"
   },
   "current_head": {
-    "gitea_main_sha": "7ff959b6a8bbdf152da1969687f188ceda4b0561",
+    "gitea_main_sha": "fe42ed1b4368800fca43ce040f8f498f0e88494f",
     "latest_successful_deploy_marker": "15824e9ec chore(cd): deploy 57c1df1 [skip ci]",
     "latest_successful_deployed_source_sha": "57c1df19fca580dafa5980d82d164819de0dbcd5",
     "latest_source_readiness_commit_sha": "0c8d4e88c39157b92322fa41a92e6b15c317ac49",
     "latest_source_readiness_cd_run_id": "3882",
     "latest_source_readiness_cd_run_status": "Success",
     "source_readiness_ci_fix_required": false,
-    "no_matching_runner_visible": false
+    "no_matching_runner_visible": false,
+    "latest_verified_worktree_base_sha": "8f0c6d300",
+    "latest_fetched_gitea_main_subject": "feat(awooop): expose ai automation log taxonomy"
   },
   "completed_in_priority_order": [
     {
@@ -107,7 +112,7 @@
       "workplan_id": "P0-005",
       "title": "產品資料與備份 contract",
       "status": "checklist_ready_waiting_non_secret_credential_escrow_evidence",
-      "reason": "Backup core and product freshness are green, and the P0-005 lane now has one no-secret checklist packet for the five remaining credential escrow evidence markers.",
+      "reason": "Live no-secret backup status is green for backup/offsite freshness, but all five DR credential escrow evidence refs are still missing. This lane stays on the single checklist and one preflight only.",
       "evidence": {
         "product_data_green": true,
         "stock_freshness_status": "ok",
@@ -122,7 +127,13 @@
         "secret_value_collection_allowed": false,
         "checklist_generator_present": true,
         "checklist_schema_version": "awoooi_dr_escrow_evidence_checklist_v1",
-        "placeholder_preflight_guard_present": true
+        "placeholder_preflight_guard_present": true,
+        "offsite_fresh": true,
+        "rclone_gdrive_configured": true,
+        "rclone_gdrive_fresh": true,
+        "escrow_status_live_checked": true,
+        "live_no_secret_status_path": "/tmp/awoooi-p0-005-escrow-status-live.txt",
+        "checklist_latest_path": "/tmp/awoooi-dr-escrow-evidence-checklist-current.json"
       },
       "missing_items": [
         "restic_repository_password",
@@ -152,19 +163,32 @@
       "workplan_id": "P0-003",
       "title": "取得 Gitea private inventory 權限",
       "status": "blocked_waiting_gitea_authenticated_or_owner_export_inventory",
-      "reason": "P0-003 now has a Gitea-only scorecard. GitHub is excluded from active P0 blocker math; remaining blockers are Gitea authenticated/admin export payload and owner coverage attestation.",
+      "reason": "Gitea-only public inventory was refreshed from live 110 readback and now shows four public repos. It is still public_only with no token present, so private/internal coverage requires an authenticated/admin redacted export payload or owner coverage attestation.",
       "evidence": {
         "private_inventory_source": "gitea",
         "github_lane_excluded_from_p0_blocker_count": true,
         "gitea_inventory_status": "partial",
         "gitea_visibility_scope": "public_only",
-        "gitea_public_repo_count": 2,
+        "gitea_public_repo_count": 4,
         "accepted_inventory_payload_count": 0,
         "owner_coverage_attestation_received_count": 0,
         "expected_product_count": 11,
         "present_product_row_count": 11,
         "missing_product_row_count": 0,
-        "all_active_product_repos_have_gitea_owner_readiness_row": true
+        "all_active_product_repos_have_gitea_owner_readiness_row": true,
+        "gitea_public_repos": [
+          "wooo/awoooi",
+          "wooo/ewoooc",
+          "wooo/agent-bounty-protocol",
+          "wooo/2026FIFAWorldCup"
+        ],
+        "gitea_readonly_token_present": false,
+        "active_blockers": [
+          "gitea_repo_inventory_status_not_ok",
+          "gitea_visibility_scope_public_only_or_unknown",
+          "gitea_authenticated_inventory_payload_not_accepted",
+          "gitea_owner_coverage_attestation_not_received"
+        ]
       },
       "professional_fix": {
         "owner": "Gitea inventory lane",
@@ -177,13 +201,13 @@
           "all_active_product_repos_have_gitea_owner_readiness_row=true"
         ]
       },
-      "safe_next_step": "validate_gitea_authenticated_or_admin_export_redacted_inventory_payload"
+      "safe_next_step": "validate_gitea_authenticated_or_admin_export_redacted_inventory_payload_or_owner_coverage_attestation"
     },
     {
       "workplan_id": "P0-006",
       "title": "主機重啟自動偵測、自動觸發與 10 分鐘恢復 SLO",
       "status": "blocked_waiting_fresh_all_host_reboot_window",
-      "reason": "Boot-triggered SLO timer is enabled and active on host 110; live metric and scorecard observed all required hosts. Service/data/backup/188 readback is green. The 10-minute claim remains fail-closed only because the current boot observation is older than the 600-second target window, so the next proof requires an actual fresh all-host reboot event or an approved reboot drill.",
+      "reason": "Verify-only readback confirms the live SLO timer remains enabled and active on 110, observes all required hosts, and has only host_boot_observation_older_than_target_window as blocker. The 10-minute claim still requires a fresh all-host reboot event or separately approved reboot drill.",
       "evidence": {
         "target_minutes": 10,
         "can_claim_all_services_recovered_within_target": false,
@@ -223,7 +247,8 @@
           "host_boot_observation_older_than_target_window"
         ],
         "host_188_service_green": true,
-        "safe_next_step_from_scorecard": "timer_deployed_and_services_readback_green_wait_for_next_all_host_reboot_event_or_approved_reboot_drill_to_prove_10_minute_slo"
+        "safe_next_step_from_scorecard": "timer_deployed_and_services_readback_green_wait_for_next_all_host_reboot_event_or_approved_reboot_drill_to_prove_10_minute_slo",
+        "latest_live_slo_artifact": "/home/wooo/reboot-recovery/reboot-auto-recovery-slo-20260629-151707"
       },
       "professional_fix": {
         "owner": "reboot auto-recovery lane",
@@ -242,7 +267,7 @@
           "live_slo_metric_present=true"
         ]
       },
-      "safe_next_step": "wait_for_next_all_host_reboot_event_or_separately_approved_reboot_drill_to_prove_10_minute_slo"
+      "safe_next_step": "keep_timer_live_wait_for_next_all_host_reboot_event_or_separately_approved_reboot_drill_to_prove_10_minute_slo"
     }
   ],
   "noise_integrated_risk_register": [
@@ -314,8 +339,8 @@
     "database_write_or_restore_performed": false
   },
   "next_execution_order": [
-    "P0-006: keep the live reboot SLO timer active; next proof is the next fresh all-host reboot event or separately approved reboot drill, not another source deploy.",
-    "P0-005: fill the single DR escrow evidence checklist with five non-secret refs and rerun one preflight.",
-    "P0-003: complete Gitea authenticated/admin inventory export and owner coverage attestation; GitHub remains stopped/retired/do_not_use."
+    "P0-006: keep the live reboot SLO timer active; no reboot or service restart from this lane; next proof is the next fresh all-host reboot event or separately approved reboot drill.",
+    "P0-005: fill the single DR escrow evidence checklist with five non-secret refs, then rerun one preflight; backup/offsite freshness is already green.",
+    "P0-003: complete Gitea authenticated/admin redacted inventory export or owner coverage attestation; public-only live inventory is refreshed to four repos; GitHub remains stopped/retired/do_not_use."
   ]
 }