wooo/awoooi
1
1
Fork 0
Code Issues 2 Pull Requests 1 Actions 2 Packages Projects Releases Wiki Activity

feat(security): 綁定 S4.9 metadata intake 封套
Some checks failed
CD Pipeline / tests (push) Successful in 1m30s
Details
Code Review / ai-code-review (push) Successful in 14s
Details
CD Pipeline / post-deploy-checks (push) Has been cancelled
Details
CD Pipeline / build-and-deploy (push) Has been cancelled
Details

Browse Source
This commit is contained in:
Your Name
2026-06-11 18:01:57 +08:00
parent b32c21472d
commit c9d0eb69df
9 changed files with 895 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

162
docs/security/gitea-inventory-owner-attestation-response.snapshot.json
View File

@@ -35,6 +35,16 @@
"owner_response_intake_handoff_queue_runtime_gate_count": 0,
"owner_response_intake_handoff_queue_raw_payload_allowed": false,
"owner_response_intake_handoff_queue_action_buttons_allowed": false,
"owner_response_metadata_intake_field_count": 6,
"owner_response_metadata_intake_required_count": 6,
"owner_response_metadata_intake_filled_count": 0,
"owner_response_metadata_intake_received_count": 0,
"owner_response_metadata_intake_accepted_count": 0,
"owner_response_metadata_intake_runtime_gate_count": 0,
"owner_response_metadata_intake_redacted_ref_required": true,
"owner_response_metadata_intake_raw_payload_allowed": false,
"owner_response_metadata_intake_secret_plaintext_allowed": false,
"owner_response_metadata_intake_action_buttons_allowed": false,
"intake_preflight_check_count": 6,
"intake_outcome_lane_count": 5,
"acceptance_check_count": 8,
@@ -545,6 +555,158 @@
]
}
],
"owner_response_metadata_intake_envelope": [
{
"field_id": "ownerRoleTeam",
"display_order": 1,
"source_required_field": "owner_role_or_team",
"field_label": "負責人角色 / 團隊",
"field_status": "waiting_owner_response_metadata",
"intake_mode": "redacted_metadata_only",
"required": true,
"filled_count": 0,
"received_response_count": 0,
"accepted_response_count": 0,
"runtime_gate_count": 0,
"redacted_reference_required": true,
"raw_payload_allowed": false,
"secret_plaintext_allowed": false,
"action_buttons_allowed": false,
"execution_authorized": false,
"not_approval": true,
"still_forbidden": [
"mark_received_from_metadata_envelope",
"mark_accepted_from_metadata_envelope",
"store_owner_response_raw_body",
"store_secret_value"
]
},
{
"field_id": "decision",
"display_order": 2,
"source_required_field": "decision",
"field_label": "判定",
"field_status": "waiting_owner_response_metadata",
"intake_mode": "controlled_value_only",
"required": true,
"filled_count": 0,
"received_response_count": 0,
"accepted_response_count": 0,
"runtime_gate_count": 0,
"redacted_reference_required": true,
"raw_payload_allowed": false,
"secret_plaintext_allowed": false,
"action_buttons_allowed": false,
"execution_authorized": false,
"not_approval": true,
"still_forbidden": [
"mark_received_from_metadata_envelope",
"mark_accepted_from_metadata_envelope",
"override_allowed_decisions",
"open_runtime_gate"
]
},
{
"field_id": "decisionReason",
"display_order": 3,
"source_required_field": "decision_reason",
"field_label": "判定理由",
"field_status": "waiting_owner_response_metadata",
"intake_mode": "redacted_metadata_only",
"required": true,
"filled_count": 0,
"received_response_count": 0,
"accepted_response_count": 0,
"runtime_gate_count": 0,
"redacted_reference_required": true,
"raw_payload_allowed": false,
"secret_plaintext_allowed": false,
"action_buttons_allowed": false,
"execution_authorized": false,
"not_approval": true,
"still_forbidden": [
"mark_received_from_metadata_envelope",
"mark_accepted_from_metadata_envelope",
"store_owner_response_raw_body",
"treat_reason_as_approval"
]
},
{
"field_id": "affectedScope",
"display_order": 4,
"source_required_field": "affected_scope",
"field_label": "受影響範圍",
"field_status": "waiting_owner_response_metadata",
"intake_mode": "scope_pointer_only",
"required": true,
"filled_count": 0,
"received_response_count": 0,
"accepted_response_count": 0,
"runtime_gate_count": 0,
"redacted_reference_required": true,
"raw_payload_allowed": false,
"secret_plaintext_allowed": false,
"action_buttons_allowed": false,
"execution_authorized": false,
"not_approval": true,
"still_forbidden": [
"mark_received_from_metadata_envelope",
"mark_accepted_from_metadata_envelope",
"create_or_delete_repo",
"sync_refs"
]
},
{
"field_id": "redactedEvidenceRefs",
"display_order": 5,
"source_required_field": "evidence_refs",
"field_label": "脫敏證據參照",
"field_status": "waiting_owner_response_metadata",
"intake_mode": "redacted_reference_only",
"required": true,
"filled_count": 0,
"received_response_count": 0,
"accepted_response_count": 0,
"runtime_gate_count": 0,
"redacted_reference_required": true,
"raw_payload_allowed": false,
"secret_plaintext_allowed": false,
"action_buttons_allowed": false,
"execution_authorized": false,
"not_approval": true,
"still_forbidden": [
"mark_received_from_metadata_envelope",
"mark_accepted_from_metadata_envelope",
"store_unredacted_evidence",
"store_secret_value"
]
},
{
"field_id": "followupOwner",
"display_order": 6,
"source_required_field": "followup_owner",
"field_label": "後續負責人",
"field_status": "waiting_owner_response_metadata",
"intake_mode": "owner_pointer_only",
"required": true,
"filled_count": 0,
"received_response_count": 0,
"accepted_response_count": 0,
"runtime_gate_count": 0,
"redacted_reference_required": true,
"raw_payload_allowed": false,
"secret_plaintext_allowed": false,
"action_buttons_allowed": false,
"execution_authorized": false,
"not_approval": true,
"still_forbidden": [
"mark_received_from_metadata_envelope",
"mark_accepted_from_metadata_envelope",
"assign_runtime_owner_without_review",
"open_runtime_gate"
]
}
],
"owner_response_audit_event_templates": [
{
"event_template_id": "audit-owner-response-request-shown",

132
docs/security/iwooos-posture-projection.snapshot.json
View File

@@ -121,6 +121,16 @@
"s4_9_owner_response_intake_handoff_queue_runtime_gate_count": 0,
"s4_9_owner_response_intake_handoff_queue_raw_payload_allowed": false,
"s4_9_owner_response_intake_handoff_queue_action_buttons_allowed": false,
"s4_9_owner_response_metadata_intake_field_count": 6,
"s4_9_owner_response_metadata_intake_required_count": 6,
"s4_9_owner_response_metadata_intake_filled_count": 0,
"s4_9_owner_response_metadata_intake_received_count": 0,
"s4_9_owner_response_metadata_intake_accepted_count": 0,
"s4_9_owner_response_metadata_intake_runtime_gate_count": 0,
"s4_9_owner_response_metadata_intake_redacted_ref_required": true,
"s4_9_owner_response_metadata_intake_raw_payload_allowed": false,
"s4_9_owner_response_metadata_intake_secret_plaintext_allowed": false,
"s4_9_owner_response_metadata_intake_action_buttons_allowed": false,
"visual_command_dashboard_widget_count": 14,
"visual_command_dashboard_first_layer": true,
"visual_command_dashboard_default_visible": false,
@@ -1010,6 +1020,128 @@
"not_authorization": true
}
],
"s4_9_owner_response_metadata_intake_fields": [
{
"field_id": "ownerRoleTeam",
"display_order": 1,
"display_mode": "first_screen_s4_9_owner_response_metadata_intake_field",
"source_required_field": "owner_role_or_team",
"field_status": "waiting_owner_response_metadata",
"field_label": "負責人角色 / 團隊",
"intake_mode": "redacted_metadata_only",
"required": true,
"filled_count": 0,
"received_response_count": 0,
"accepted_response_count": 0,
"runtime_gate_count": 0,
"redacted_reference_required": true,
"raw_payload_allowed": false,
"secret_plaintext_allowed": false,
"runtime_execution_authorized": false,
"action_buttons_allowed": false,
"not_authorization": true
},
{
"field_id": "decision",
"display_order": 2,
"display_mode": "first_screen_s4_9_owner_response_metadata_intake_field",
"source_required_field": "decision",
"field_status": "waiting_owner_response_metadata",
"field_label": "判定",
"intake_mode": "controlled_value_only",
"required": true,
"filled_count": 0,
"received_response_count": 0,
"accepted_response_count": 0,
"runtime_gate_count": 0,
"redacted_reference_required": true,
"raw_payload_allowed": false,
"secret_plaintext_allowed": false,
"runtime_execution_authorized": false,
"action_buttons_allowed": false,
"not_authorization": true
},
{
"field_id": "decisionReason",
"display_order": 3,
"display_mode": "first_screen_s4_9_owner_response_metadata_intake_field",
"source_required_field": "decision_reason",
"field_status": "waiting_owner_response_metadata",
"field_label": "判定理由",
"intake_mode": "redacted_metadata_only",
"required": true,
"filled_count": 0,
"received_response_count": 0,
"accepted_response_count": 0,
"runtime_gate_count": 0,
"redacted_reference_required": true,
"raw_payload_allowed": false,
"secret_plaintext_allowed": false,
"runtime_execution_authorized": false,
"action_buttons_allowed": false,
"not_authorization": true
},
{
"field_id": "affectedScope",
"display_order": 4,
"display_mode": "first_screen_s4_9_owner_response_metadata_intake_field",
"source_required_field": "affected_scope",
"field_status": "waiting_owner_response_metadata",
"field_label": "受影響範圍",
"intake_mode": "scope_pointer_only",
"required": true,
"filled_count": 0,
"received_response_count": 0,
"accepted_response_count": 0,
"runtime_gate_count": 0,
"redacted_reference_required": true,
"raw_payload_allowed": false,
"secret_plaintext_allowed": false,
"runtime_execution_authorized": false,
"action_buttons_allowed": false,
"not_authorization": true
},
{
"field_id": "redactedEvidenceRefs",
"display_order": 5,
"display_mode": "first_screen_s4_9_owner_response_metadata_intake_field",
"source_required_field": "evidence_refs",
"field_status": "waiting_owner_response_metadata",
"field_label": "脫敏證據參照",
"intake_mode": "redacted_reference_only",
"required": true,
"filled_count": 0,
"received_response_count": 0,
"accepted_response_count": 0,
"runtime_gate_count": 0,
"redacted_reference_required": true,
"raw_payload_allowed": false,
"secret_plaintext_allowed": false,
"runtime_execution_authorized": false,
"action_buttons_allowed": false,
"not_authorization": true
},
{
"field_id": "followupOwner",
"display_order": 6,
"display_mode": "first_screen_s4_9_owner_response_metadata_intake_field",
"source_required_field": "followup_owner",
"field_status": "waiting_owner_response_metadata",
"field_label": "後續負責人",
"intake_mode": "owner_pointer_only",
"required": true,
"filled_count": 0,
"received_response_count": 0,
"accepted_response_count": 0,
"runtime_gate_count": 0,
"redacted_reference_required": true,
"raw_payload_allowed": false,
"secret_plaintext_allowed": false,
"runtime_execution_authorized": false,
"action_buttons_allowed": false,
"not_authorization": true
}
],
"first_progress_unlock_path_steps": [
{
"step_id": "owner_response_scope",