wooo/awoooi
1
1
Fork 0
Code Issues 2 Pull Requests 1 Actions 2 Packages Projects Releases Wiki Activity

docs(security): add approval review packet contract [skip ci]

Browse Source
This commit is contained in:
Your Name
2026-05-13 16:36:37 +08:00
parent f124df9823
commit aff70dd896
28 changed files with 800 additions and 61 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
docs/security/security-mirror-route.snapshot.json
View File

@@ -11,7 +11,7 @@
"docs/security/security-mirror-event-sample.snapshot.json"
],
"summary": {
"total_contracts": 29,
"total_contracts": 30,
"route_group_count": 5,
"channel_event_policy": "初期只對階段完成、blocked 狀態或需要人工批准的高風險候選發低噪音事件；LOW / MEDIUM observation 不發阻擋事件。",
"approval_queue_policy": "只有 approval-only、suggest-only 或 blocked-until-approved 項目可進 approval queue；approval queue 不代表可執行。"
@@ -46,7 +46,8 @@
"顯示 security_mirror_acceptance_v1 驗收結果",
"顯示 security_mirror_quarantine_v1 隔離 lane 與 retry gate",
"顯示 security_mirror_dry_run_v1 dry-run steps",
"顯示 security_mirror_status_rollup_v1 跨 Session 狀態與下一個 gate"
"顯示 security_mirror_status_rollup_v1 跨 Session 狀態與下一個 gate",
"顯示 S3 review packet contract 位置"
],
"blocked_processing": [
"新增執行按鈕",
@@ -54,7 +55,7 @@
"runtime blocking",
"自動批准任何 queue item"
],
"exit_gate": "AwoooP 可顯示 29 個 contract、5 個 route groups、7 個 acceptance checks、5 個 quarantine lanes、6 個 dry-run steps、status rollup、approval gate 與 decision record，且所有 route 都維持 runtime_execution_authorized=false。"
"exit_gate": "AwoooP 可顯示 30 個 contract、5 個 route groups、7 個 acceptance checks、5 個 quarantine lanes、6 個 dry-run steps、status rollup、approval gate、decision record 與 review packet，且所有 route 都維持 runtime_execution_authorized=false。"
},
{
"wave_id": "M1_kali_visibility",
@@ -138,6 +139,7 @@
"security_approval_queue_v1",
"security_approval_gate_v1",
"security_approval_decision_record_v1",
"security_approval_review_packet_v1",
"github_target_repo_approval_package_v1",
"source_control_approval_board_v1",
"kali_scan_scope_approval_v1"
@@ -153,6 +155,7 @@
"建立 approval candidate",
"顯示 S3 approval gate 與 follow-up runtime gate",
"顯示人工 decision record 與 execution_authorized=false",
"顯示人工 review packet、review lane 與 action_buttons_allowed=false",
"顯示 required reviewers",
"顯示 blocked_until_approved",
"記錄人工決策結果"
@@ -163,7 +166,7 @@
"把人工批准記錄轉成 runtime executor",
"保存 token 或 secret value"
],
"exit_gate": "Approval candidate、S3 approval gate 與 decision record 可顯示與留痕，但批准後執行仍需要下一階段 runtime gate。"
"exit_gate": "Approval candidate、S3 approval gate、decision record 與 review packet 可顯示與留痕，但批准後執行仍需要下一階段 runtime gate。"
},
{
"wave_id": "M4_patch_only_backlog",
@@ -195,7 +198,7 @@
"acceptance_gates": [
{
"gate_id": "ROUTE_COVERS_ALL_CONTRACTS",
"requirement": "route_groups 合併後必須涵蓋 manifest 的 29 個 contracts。"
"requirement": "route_groups 合併後必須涵蓋 manifest 的 30 個 contracts。"
},
{
"gate_id": "NO_EXECUTION_SURFACE",