wooo/awoooi
1
1
Fork 0
Code Issues 2 Pull Requests 1 Actions 2 Packages Projects Releases Wiki Activity

feat(security): 綁定 S4.9 metadata intake 封套
Some checks failed
CD Pipeline / tests (push) Successful in 1m30s
Details
Code Review / ai-code-review (push) Successful in 14s
Details
CD Pipeline / post-deploy-checks (push) Has been cancelled
Details
CD Pipeline / build-and-deploy (push) Has been cancelled
Details

Browse Source
This commit is contained in:
Your Name
2026-06-11 18:01:57 +08:00
parent b32c21472d
commit c9d0eb69df
9 changed files with 895 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

82
docs/schemas/gitea_inventory_owner_attestation_response_v1.schema.json
View File

@@ -16,6 +16,7 @@
"summary",
"response_templates",
"owner_response_intake_handoff_queue",
"owner_response_metadata_intake_envelope",
"acceptance_checks",
"rejection_rules",
"allowed_outputs",
@@ -75,6 +76,16 @@
"owner_response_intake_handoff_queue_runtime_gate_count",
"owner_response_intake_handoff_queue_raw_payload_allowed",
"owner_response_intake_handoff_queue_action_buttons_allowed",
"owner_response_metadata_intake_field_count",
"owner_response_metadata_intake_required_count",
"owner_response_metadata_intake_filled_count",
"owner_response_metadata_intake_received_count",
"owner_response_metadata_intake_accepted_count",
"owner_response_metadata_intake_runtime_gate_count",
"owner_response_metadata_intake_redacted_ref_required",
"owner_response_metadata_intake_raw_payload_allowed",
"owner_response_metadata_intake_secret_plaintext_allowed",
"owner_response_metadata_intake_action_buttons_allowed",
"intake_preflight_check_count",
"intake_outcome_lane_count",
"acceptance_check_count",
@@ -115,6 +126,28 @@
"type": "boolean",
"const": false
},
"owner_response_metadata_intake_field_count": {"type": "integer", "minimum": 0},
"owner_response_metadata_intake_required_count": {"type": "integer", "minimum": 0},
"owner_response_metadata_intake_filled_count": {"type": "integer", "const": 0},
"owner_response_metadata_intake_received_count": {"type": "integer", "const": 0},
"owner_response_metadata_intake_accepted_count": {"type": "integer", "const": 0},
"owner_response_metadata_intake_runtime_gate_count": {"type": "integer", "const": 0},
"owner_response_metadata_intake_redacted_ref_required": {
"type": "boolean",
"const": true
},
"owner_response_metadata_intake_raw_payload_allowed": {
"type": "boolean",
"const": false
},
"owner_response_metadata_intake_secret_plaintext_allowed": {
"type": "boolean",
"const": false
},
"owner_response_metadata_intake_action_buttons_allowed": {
"type": "boolean",
"const": false
},
"intake_preflight_check_count": {"type": "integer", "minimum": 0},
"intake_outcome_lane_count": {"type": "integer", "minimum": 0},
"acceptance_check_count": {"type": "integer", "minimum": 0},
@@ -425,6 +458,55 @@
},
"minItems": 1
},
"owner_response_metadata_intake_envelope": {
"type": "array",
"description": "S4.9 owner response 的必填中繼資料 envelope；只允許脫敏欄位與 reference pointer，不代表已收件、已接受或 runtime gate。",
"items": {
"type": "object",
"required": [
"field_id",
"display_order",
"source_required_field",
"field_label",
"field_status",
"intake_mode",
"required",
"filled_count",
"received_response_count",
"accepted_response_count",
"runtime_gate_count",
"redacted_reference_required",
"raw_payload_allowed",
"secret_plaintext_allowed",
"action_buttons_allowed",
"execution_authorized",
"not_approval",
"still_forbidden"
],
"properties": {
"field_id": {"type": "string"},
"display_order": {"type": "integer", "minimum": 1},
"source_required_field": {"type": "string"},
"field_label": {"type": "string"},
"field_status": {"type": "string", "enum": ["waiting_owner_response_metadata"]},
"intake_mode": {"type": "string"},
"required": {"type": "boolean", "const": true},
"filled_count": {"type": "integer", "const": 0},
"received_response_count": {"type": "integer", "const": 0},
"accepted_response_count": {"type": "integer", "const": 0},
"runtime_gate_count": {"type": "integer", "const": 0},
"redacted_reference_required": {"type": "boolean", "const": true},
"raw_payload_allowed": {"type": "boolean", "const": false},
"secret_plaintext_allowed": {"type": "boolean", "const": false},
"action_buttons_allowed": {"type": "boolean", "const": false},
"execution_authorized": {"type": "boolean", "const": false},
"not_approval": {"type": "boolean", "const": true},
"still_forbidden": {"type": "array", "items": {"type": "string"}, "minItems": 1}
},
"additionalProperties": false
},
"minItems": 1
},
"owner_response_request_packet": {
"type": "object",
"description": "AwoooP 可直接顯示給 owner 的 S4.9 回覆請求；只說明要填什麼與不得貼什麼，不授權任何執行。",

150
docs/schemas/iwooos_posture_projection_v1.schema.json
View File

@@ -22,6 +22,7 @@
"source_control_primary_readiness_items",
"s4_9_owner_response_preflight_checks",
"s4_9_owner_response_request_templates",
"s4_9_owner_response_metadata_intake_fields",
"posture_pillars",
"non_blocking_lane_ids",
"existing_frontend_surfaces",
@@ -190,7 +191,17 @@
"s4_9_owner_response_intake_handoff_queue_accepted_count",
"s4_9_owner_response_intake_handoff_queue_runtime_gate_count",
"s4_9_owner_response_intake_handoff_queue_raw_payload_allowed",
"s4_9_owner_response_intake_handoff_queue_action_buttons_allowed"
"s4_9_owner_response_intake_handoff_queue_action_buttons_allowed",
"s4_9_owner_response_metadata_intake_field_count",
"s4_9_owner_response_metadata_intake_required_count",
"s4_9_owner_response_metadata_intake_filled_count",
"s4_9_owner_response_metadata_intake_received_count",
"s4_9_owner_response_metadata_intake_accepted_count",
"s4_9_owner_response_metadata_intake_runtime_gate_count",
"s4_9_owner_response_metadata_intake_redacted_ref_required",
"s4_9_owner_response_metadata_intake_raw_payload_allowed",
"s4_9_owner_response_metadata_intake_secret_plaintext_allowed",
"s4_9_owner_response_metadata_intake_action_buttons_allowed"
],
"properties": {
"route_path": {
@@ -539,6 +550,46 @@
"s4_9_owner_response_intake_handoff_queue_action_buttons_allowed": {
"type": "boolean",
"const": false
},
"s4_9_owner_response_metadata_intake_field_count": {
"type": "integer",
"minimum": 0
},
"s4_9_owner_response_metadata_intake_required_count": {
"type": "integer",
"minimum": 0
},
"s4_9_owner_response_metadata_intake_filled_count": {
"type": "integer",
"const": 0
},
"s4_9_owner_response_metadata_intake_received_count": {
"type": "integer",
"const": 0
},
"s4_9_owner_response_metadata_intake_accepted_count": {
"type": "integer",
"const": 0
},
"s4_9_owner_response_metadata_intake_runtime_gate_count": {
"type": "integer",
"const": 0
},
"s4_9_owner_response_metadata_intake_redacted_ref_required": {
"type": "boolean",
"const": true
},
"s4_9_owner_response_metadata_intake_raw_payload_allowed": {
"type": "boolean",
"const": false
},
"s4_9_owner_response_metadata_intake_secret_plaintext_allowed": {
"type": "boolean",
"const": false
},
"s4_9_owner_response_metadata_intake_action_buttons_allowed": {
"type": "boolean",
"const": false
}
},
"additionalProperties": false
@@ -4762,6 +4813,103 @@
"additionalProperties": false
}
},
"s4_9_owner_response_metadata_intake_fields": {
"type": "array",
"minItems": 6,
"maxItems": 6,
"items": {
"type": "object",
"required": [
"field_id",
"display_order",
"display_mode",
"source_required_field",
"field_status",
"field_label",
"intake_mode",
"required",
"filled_count",
"received_response_count",
"accepted_response_count",
"runtime_gate_count",
"redacted_reference_required",
"raw_payload_allowed",
"secret_plaintext_allowed",
"runtime_execution_authorized",
"action_buttons_allowed",
"not_authorization"
],
"properties": {
"field_id": {
"type": "string"
},
"display_order": {
"type": "integer",
"minimum": 1
},
"display_mode": {
"const": "first_screen_s4_9_owner_response_metadata_intake_field"
},
"source_required_field": {
"type": "string"
},
"field_status": {
"const": "waiting_owner_response_metadata"
},
"field_label": {
"type": "string"
},
"intake_mode": {
"type": "string"
},
"required": {
"type": "boolean",
"const": true
},
"filled_count": {
"type": "integer",
"const": 0
},
"received_response_count": {
"type": "integer",
"const": 0
},
"accepted_response_count": {
"type": "integer",
"const": 0
},
"runtime_gate_count": {
"type": "integer",
"const": 0
},
"redacted_reference_required": {
"type": "boolean",
"const": true
},
"raw_payload_allowed": {
"type": "boolean",
"const": false
},
"secret_plaintext_allowed": {
"type": "boolean",
"const": false
},
"runtime_execution_authorized": {
"type": "boolean",
"const": false
},
"action_buttons_allowed": {
"type": "boolean",
"const": false
},
"not_authorization": {
"type": "boolean",
"const": true
}
},
"additionalProperties": false
}
},
"s4_9_owner_response_preflight_checks": {
"type": "array",
"minItems": 6,

162
docs/security/gitea-inventory-owner-attestation-response.snapshot.json
View File

@@ -35,6 +35,16 @@
"owner_response_intake_handoff_queue_runtime_gate_count": 0,
"owner_response_intake_handoff_queue_raw_payload_allowed": false,
"owner_response_intake_handoff_queue_action_buttons_allowed": false,
"owner_response_metadata_intake_field_count": 6,
"owner_response_metadata_intake_required_count": 6,
"owner_response_metadata_intake_filled_count": 0,
"owner_response_metadata_intake_received_count": 0,
"owner_response_metadata_intake_accepted_count": 0,
"owner_response_metadata_intake_runtime_gate_count": 0,
"owner_response_metadata_intake_redacted_ref_required": true,
"owner_response_metadata_intake_raw_payload_allowed": false,
"owner_response_metadata_intake_secret_plaintext_allowed": false,
"owner_response_metadata_intake_action_buttons_allowed": false,
"intake_preflight_check_count": 6,
"intake_outcome_lane_count": 5,
"acceptance_check_count": 8,
@@ -545,6 +555,158 @@
]
}
],
"owner_response_metadata_intake_envelope": [
{
"field_id": "ownerRoleTeam",
"display_order": 1,
"source_required_field": "owner_role_or_team",
"field_label": "負責人角色 / 團隊",
"field_status": "waiting_owner_response_metadata",
"intake_mode": "redacted_metadata_only",
"required": true,
"filled_count": 0,
"received_response_count": 0,
"accepted_response_count": 0,
"runtime_gate_count": 0,
"redacted_reference_required": true,
"raw_payload_allowed": false,
"secret_plaintext_allowed": false,
"action_buttons_allowed": false,
"execution_authorized": false,
"not_approval": true,
"still_forbidden": [
"mark_received_from_metadata_envelope",
"mark_accepted_from_metadata_envelope",
"store_owner_response_raw_body",
"store_secret_value"
]
},
{
"field_id": "decision",
"display_order": 2,
"source_required_field": "decision",
"field_label": "判定",
"field_status": "waiting_owner_response_metadata",
"intake_mode": "controlled_value_only",
"required": true,
"filled_count": 0,
"received_response_count": 0,
"accepted_response_count": 0,
"runtime_gate_count": 0,
"redacted_reference_required": true,
"raw_payload_allowed": false,
"secret_plaintext_allowed": false,
"action_buttons_allowed": false,
"execution_authorized": false,
"not_approval": true,
"still_forbidden": [
"mark_received_from_metadata_envelope",
"mark_accepted_from_metadata_envelope",
"override_allowed_decisions",
"open_runtime_gate"
]
},
{
"field_id": "decisionReason",
"display_order": 3,
"source_required_field": "decision_reason",
"field_label": "判定理由",
"field_status": "waiting_owner_response_metadata",
"intake_mode": "redacted_metadata_only",
"required": true,
"filled_count": 0,
"received_response_count": 0,
"accepted_response_count": 0,
"runtime_gate_count": 0,
"redacted_reference_required": true,
"raw_payload_allowed": false,
"secret_plaintext_allowed": false,
"action_buttons_allowed": false,
"execution_authorized": false,
"not_approval": true,
"still_forbidden": [
"mark_received_from_metadata_envelope",
"mark_accepted_from_metadata_envelope",
"store_owner_response_raw_body",
"treat_reason_as_approval"
]
},
{
"field_id": "affectedScope",
"display_order": 4,
"source_required_field": "affected_scope",
"field_label": "受影響範圍",
"field_status": "waiting_owner_response_metadata",
"intake_mode": "scope_pointer_only",
"required": true,
"filled_count": 0,
"received_response_count": 0,
"accepted_response_count": 0,
"runtime_gate_count": 0,
"redacted_reference_required": true,
"raw_payload_allowed": false,
"secret_plaintext_allowed": false,
"action_buttons_allowed": false,
"execution_authorized": false,
"not_approval": true,
"still_forbidden": [
"mark_received_from_metadata_envelope",
"mark_accepted_from_metadata_envelope",
"create_or_delete_repo",
"sync_refs"
]
},
{
"field_id": "redactedEvidenceRefs",
"display_order": 5,
"source_required_field": "evidence_refs",
"field_label": "脫敏證據參照",
"field_status": "waiting_owner_response_metadata",
"intake_mode": "redacted_reference_only",
"required": true,
"filled_count": 0,
"received_response_count": 0,
"accepted_response_count": 0,
"runtime_gate_count": 0,
"redacted_reference_required": true,
"raw_payload_allowed": false,
"secret_plaintext_allowed": false,
"action_buttons_allowed": false,
"execution_authorized": false,
"not_approval": true,
"still_forbidden": [
"mark_received_from_metadata_envelope",
"mark_accepted_from_metadata_envelope",
"store_unredacted_evidence",
"store_secret_value"
]
},
{
"field_id": "followupOwner",
"display_order": 6,
"source_required_field": "followup_owner",
"field_label": "後續負責人",
"field_status": "waiting_owner_response_metadata",
"intake_mode": "owner_pointer_only",
"required": true,
"filled_count": 0,
"received_response_count": 0,
"accepted_response_count": 0,
"runtime_gate_count": 0,
"redacted_reference_required": true,
"raw_payload_allowed": false,
"secret_plaintext_allowed": false,
"action_buttons_allowed": false,
"execution_authorized": false,
"not_approval": true,
"still_forbidden": [
"mark_received_from_metadata_envelope",
"mark_accepted_from_metadata_envelope",
"assign_runtime_owner_without_review",
"open_runtime_gate"
]
}
],
"owner_response_audit_event_templates": [
{
"event_template_id": "audit-owner-response-request-shown",

132
docs/security/iwooos-posture-projection.snapshot.json
View File

@@ -121,6 +121,16 @@
"s4_9_owner_response_intake_handoff_queue_runtime_gate_count": 0,
"s4_9_owner_response_intake_handoff_queue_raw_payload_allowed": false,
"s4_9_owner_response_intake_handoff_queue_action_buttons_allowed": false,
"s4_9_owner_response_metadata_intake_field_count": 6,
"s4_9_owner_response_metadata_intake_required_count": 6,
"s4_9_owner_response_metadata_intake_filled_count": 0,
"s4_9_owner_response_metadata_intake_received_count": 0,
"s4_9_owner_response_metadata_intake_accepted_count": 0,
"s4_9_owner_response_metadata_intake_runtime_gate_count": 0,
"s4_9_owner_response_metadata_intake_redacted_ref_required": true,
"s4_9_owner_response_metadata_intake_raw_payload_allowed": false,
"s4_9_owner_response_metadata_intake_secret_plaintext_allowed": false,
"s4_9_owner_response_metadata_intake_action_buttons_allowed": false,
"visual_command_dashboard_widget_count": 14,
"visual_command_dashboard_first_layer": true,
"visual_command_dashboard_default_visible": false,
@@ -1010,6 +1020,128 @@
"not_authorization": true
}
],
"s4_9_owner_response_metadata_intake_fields": [
{
"field_id": "ownerRoleTeam",
"display_order": 1,
"display_mode": "first_screen_s4_9_owner_response_metadata_intake_field",
"source_required_field": "owner_role_or_team",
"field_status": "waiting_owner_response_metadata",
"field_label": "負責人角色 / 團隊",
"intake_mode": "redacted_metadata_only",
"required": true,
"filled_count": 0,
"received_response_count": 0,
"accepted_response_count": 0,
"runtime_gate_count": 0,
"redacted_reference_required": true,
"raw_payload_allowed": false,
"secret_plaintext_allowed": false,
"runtime_execution_authorized": false,
"action_buttons_allowed": false,
"not_authorization": true
},
{
"field_id": "decision",
"display_order": 2,
"display_mode": "first_screen_s4_9_owner_response_metadata_intake_field",
"source_required_field": "decision",
"field_status": "waiting_owner_response_metadata",
"field_label": "判定",
"intake_mode": "controlled_value_only",
"required": true,
"filled_count": 0,
"received_response_count": 0,
"accepted_response_count": 0,
"runtime_gate_count": 0,
"redacted_reference_required": true,
"raw_payload_allowed": false,
"secret_plaintext_allowed": false,
"runtime_execution_authorized": false,
"action_buttons_allowed": false,
"not_authorization": true
},
{
"field_id": "decisionReason",
"display_order": 3,
"display_mode": "first_screen_s4_9_owner_response_metadata_intake_field",
"source_required_field": "decision_reason",
"field_status": "waiting_owner_response_metadata",
"field_label": "判定理由",
"intake_mode": "redacted_metadata_only",
"required": true,
"filled_count": 0,
"received_response_count": 0,
"accepted_response_count": 0,
"runtime_gate_count": 0,
"redacted_reference_required": true,
"raw_payload_allowed": false,
"secret_plaintext_allowed": false,
"runtime_execution_authorized": false,
"action_buttons_allowed": false,
"not_authorization": true
},
{
"field_id": "affectedScope",
"display_order": 4,
"display_mode": "first_screen_s4_9_owner_response_metadata_intake_field",
"source_required_field": "affected_scope",
"field_status": "waiting_owner_response_metadata",
"field_label": "受影響範圍",
"intake_mode": "scope_pointer_only",
"required": true,
"filled_count": 0,
"received_response_count": 0,
"accepted_response_count": 0,
"runtime_gate_count": 0,
"redacted_reference_required": true,
"raw_payload_allowed": false,
"secret_plaintext_allowed": false,
"runtime_execution_authorized": false,
"action_buttons_allowed": false,
"not_authorization": true
},
{
"field_id": "redactedEvidenceRefs",
"display_order": 5,
"display_mode": "first_screen_s4_9_owner_response_metadata_intake_field",
"source_required_field": "evidence_refs",
"field_status": "waiting_owner_response_metadata",
"field_label": "脫敏證據參照",
"intake_mode": "redacted_reference_only",
"required": true,
"filled_count": 0,
"received_response_count": 0,
"accepted_response_count": 0,
"runtime_gate_count": 0,
"redacted_reference_required": true,
"raw_payload_allowed": false,
"secret_plaintext_allowed": false,
"runtime_execution_authorized": false,
"action_buttons_allowed": false,
"not_authorization": true
},
{
"field_id": "followupOwner",
"display_order": 6,
"display_mode": "first_screen_s4_9_owner_response_metadata_intake_field",
"source_required_field": "followup_owner",
"field_status": "waiting_owner_response_metadata",
"field_label": "後續負責人",
"intake_mode": "owner_pointer_only",
"required": true,
"filled_count": 0,
"received_response_count": 0,
"accepted_response_count": 0,
"runtime_gate_count": 0,
"redacted_reference_required": true,
"raw_payload_allowed": false,
"secret_plaintext_allowed": false,
"runtime_execution_authorized": false,
"action_buttons_allowed": false,
"not_authorization": true
}
],
"first_progress_unlock_path_steps": [
{
"step_id": "owner_response_scope",