wooo/awoooi
1
1
Fork 0
Code Issues 2 Pull Requests 1 Actions 2 Packages Projects Releases Wiki Activity

feat(web): add iwooos evidence preflight

Browse Source
This commit is contained in:
Your Name
2026-05-24 16:33:57 +08:00
parent 878674379d
commit ccafbb9cdd
8 changed files with 382 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
docs/security/SECURITY-MIRROR-STATUS-ROLLUP.md
View File

@@ -59,6 +59,7 @@
| IwoooS 58% 進度移動訊號驗收條 | S2.113 已在 `/iwooos` 顯示負責人回覆接受、脫敏證據匯入、執行期閘門、GitHub 主要來源就緒、AwoooP 落地證據五個 headline movement signals；`iwooos_progress_movement_signal_count=5`、`iwooos_progress_current_headline_percent=58`、`iwooos_progress_owner_response_accepted_count=0`、`iwooos_progress_redacted_payload_ingested=false`、`iwooos_progress_active_runtime_gate_count=0`、`iwooos_progress_github_primary_ready_count=0`、`iwooos_progress_awooop_landing_evidence_count=0`、`iwooos_progress_review_authorized=false`、`runtime_execution_authorized=false`、`active_runtime_gate_count=0`、`not_authorization=true`，仍不代表 headline review 授權、runtime 授權、審批、掃描、修復、部署、GitHub 主要來源切換、Gitea 停用、Kali / SSH / 主機更新或執行期授權 |
| IwoooS 第一個進度解鎖路徑 | S2.114 已在 `/iwooos` 顯示 S4.9 負責人回覆的第一個進度解鎖路徑：收到負責人回覆、補齊脫敏證據參照、通過收件預檢、審查接受、成為進度審查候選五步；`iwooos_first_unlock_path_step_count=5`、`iwooos_first_unlock_path_current_focus=s4_9_owner_response`、`iwooos_first_unlock_path_owner_response_received_count=0`、`iwooos_first_unlock_path_owner_response_accepted_count=0`、`iwooos_first_unlock_path_redacted_evidence_pointer_count=0`、`iwooos_first_unlock_path_intake_preflight_passed_count=0`、`iwooos_first_unlock_path_headline_review_authorized=false`、`iwooos_first_unlock_path_runtime_gate_opened=false`、`runtime_execution_authorized=false`、`active_runtime_gate_count=0`、`not_authorization=true`，仍不代表送件完成、回覆已收到、headline review 授權、runtime 授權、審批、掃描、修復、部署、GitHub 主要來源切換、Gitea 停用、Kali / SSH / 主機更新或執行期授權 |
| IwoooS 第一解鎖證據包 | S2.115 已在 `/iwooos` 顯示 S4.9 第一解鎖證據包：負責人判定 metadata、範圍與來源參照、脫敏聲明、收件預檢軌跡、審查接受摘要五個欄位；`iwooos_first_unlock_evidence_packet_slot_count=5`、`iwooos_first_unlock_evidence_packet_current_focus=s4_9_owner_response`、`iwooos_first_unlock_evidence_packet_filled_count=0`、`iwooos_first_unlock_evidence_packet_accepted_count=0`、`iwooos_first_unlock_evidence_packet_redacted_pointer_required=true`、`iwooos_first_unlock_evidence_packet_raw_payload_allowed=false`、`iwooos_first_unlock_evidence_packet_secret_value_allowed=false`、`iwooos_first_unlock_evidence_packet_headline_review_authorized=false`、`iwooos_first_unlock_evidence_packet_runtime_gate_opened=false`、`runtime_execution_authorized=false`、`active_runtime_gate_count=0`、`not_authorization=true`，仍不代表送件完成、回覆已收到、證據已補齊、審查已接受、headline review 授權、runtime 授權、掃描、修復、部署、GitHub 主要來源切換、Gitea 停用、Kali / SSH / 主機更新或執行期授權 |
| IwoooS 第一解鎖證據包預檢分流 | S2.116 已在 `/iwooos` 顯示第一解鎖證據包預檢結果分流：可進人工審查、要求補 owner metadata、要求補範圍參照、隔離 raw payload、拒收機密明文值、等待 reviewer 接受六條分流；`iwooos_first_unlock_evidence_packet_preflight_outcome_lane_count=6`、`iwooos_first_unlock_evidence_packet_preflight_ready_for_review_count=0`、`iwooos_first_unlock_evidence_packet_preflight_needs_supplement_count=0`、`iwooos_first_unlock_evidence_packet_preflight_quarantined_count=0`、`iwooos_first_unlock_evidence_packet_preflight_rejected_count=0`、`iwooos_first_unlock_evidence_packet_review_accepted_count=0`、`iwooos_first_unlock_evidence_packet_headline_review_authorized=false`、`iwooos_first_unlock_evidence_packet_runtime_gate_opened=false`、`runtime_execution_authorized=false`、`active_runtime_gate_count=0`、`not_authorization=true`，仍不代表證據已補齊、審查已接受、headline review 授權、runtime 授權、掃描、修復、部署、GitHub 主要來源切換、Gitea 停用、Kali / SSH / 主機更新或執行期授權 |
| AwoooP approvals IwoooS owner response focus | S2.55 已把 S4.9-S4.12 owner response 下一個人工收件焦點放進 `/awooop/approvals` 只讀面板；received=0、accepted=0、active runtime gates=0、headline=58%、approval_record_created=false；仍不新增 approve、execute、deploy、primary switch、refs action 或 runtime gate |
| AwoooP contracts IwoooS security contract candidate | S2.56 已把四個 security mirror contract refs 放進 `/awooop/contracts` 只讀面板；total contracts=36、ready=33、partial=2、active runtime gates=0、contract_publish_authorized=false；仍不發布 contract revision、不改 lifecycle、不寫 platform contracts API、不新增 action button |
| AwoooP tenants IwoooS tenant scope candidate | S2.57 已把 AWOOOI first tenant、IwoooS security mirror、Kali 112 / Dev 168 / Dev 111 與 S4.9-S4.12 owner response waiting 放進 `/awooop/tenants` 只讀面板；host coverage=3、tenant policy changes=0、tenant_migration_mode_changed=false；仍不改 migration mode、不改 tenant policy、不寫 platform tenants API、不新增 action button |
@@ -259,6 +260,7 @@
| S2.113 IwoooS 58% 進度移動訊號驗收條 | framework detail | 0 | 只在 `/iwooos` 顯示 58% 進度移動訊號驗收條，把負責人回覆接受、脫敏證據匯入、執行期閘門、GitHub 主要來源就緒與 AwoooP 落地證據五個訊號拆開；iwooos_progress_movement_signal_count=5、iwooos_progress_current_headline_percent=58、iwooos_progress_owner_response_accepted_count=0、iwooos_progress_redacted_payload_ingested=false、iwooos_progress_active_runtime_gate_count=0、iwooos_progress_github_primary_ready_count=0、iwooos_progress_awooop_landing_evidence_count=0、iwooos_progress_review_authorized=false、runtime_execution_authorized=false、active_runtime_gate_count=0、action_buttons_allowed=false、not_authorization=true，不把進度移動訊號驗收條當 headline review 授權、runtime 授權、審批、掃描、修復、部署、主機變更、專案庫建立、分支 / 標籤參照同步、工作流程 / 機密設定修改、主要來源切換、Gitea 停用、Kali / SSH / 主機更新或執行期授權 |
| S2.114 IwoooS 第一個進度解鎖路徑 | framework detail | 0 | 只在 `/iwooos` 顯示第一個進度解鎖路徑，把 58% 下一個可能真正前進的 S4.9 負責人回覆拆成收到負責人回覆、補齊脫敏證據參照、通過收件預檢、審查接受、成為進度審查候選五步；iwooos_first_unlock_path_step_count=5、iwooos_first_unlock_path_current_focus=s4_9_owner_response、iwooos_first_unlock_path_owner_response_received_count=0、iwooos_first_unlock_path_owner_response_accepted_count=0、iwooos_first_unlock_path_redacted_evidence_pointer_count=0、iwooos_first_unlock_path_intake_preflight_passed_count=0、iwooos_first_unlock_path_headline_review_authorized=false、iwooos_first_unlock_path_runtime_gate_opened=false、runtime_execution_authorized=false、active_runtime_gate_count=0、action_buttons_allowed=false、not_authorization=true，不把第一個進度解鎖路徑當送件完成、回覆已收到、headline review 授權、runtime 授權、審批、掃描、修復、部署、主機變更、專案庫建立、分支 / 標籤參照同步、工作流程 / 機密設定修改、主要來源切換、Gitea 停用、Kali / SSH / 主機更新或執行期授權 |
| S2.115 IwoooS 第一解鎖證據包 | framework detail | 0 | 只在 `/iwooos` 顯示第一解鎖證據包，把 S4.9 要讓 58% 真正前進所需的負責人判定 metadata、範圍與來源參照、脫敏聲明、收件預檢軌跡、審查接受摘要拆成五個欄位；iwooos_first_unlock_evidence_packet_slot_count=5、iwooos_first_unlock_evidence_packet_current_focus=s4_9_owner_response、iwooos_first_unlock_evidence_packet_filled_count=0、iwooos_first_unlock_evidence_packet_accepted_count=0、iwooos_first_unlock_evidence_packet_redacted_pointer_required=true、iwooos_first_unlock_evidence_packet_raw_payload_allowed=false、iwooos_first_unlock_evidence_packet_secret_value_allowed=false、iwooos_first_unlock_evidence_packet_headline_review_authorized=false、iwooos_first_unlock_evidence_packet_runtime_gate_opened=false、runtime_execution_authorized=false、active_runtime_gate_count=0、action_buttons_allowed=false、not_authorization=true，不把證據包欄位定義當送件完成、回覆已收到、證據已補齊、審查已接受、headline review 授權、runtime 授權、審批、掃描、修復、部署、主機變更、專案庫建立、分支 / 標籤參照同步、工作流程 / 機密設定修改、主要來源切換、Gitea 停用、Kali / SSH / 主機更新或執行期授權 |
| S2.116 IwoooS 第一解鎖證據包預檢分流 | framework detail | 0 | 只在 `/iwooos` 顯示第一解鎖證據包預檢分流，把可進審查、補 owner metadata、補範圍參照、隔離 raw payload、拒收機密值、等待 reviewer 六條結果拆開；iwooos_first_unlock_evidence_packet_preflight_outcome_lane_count=6、iwooos_first_unlock_evidence_packet_preflight_ready_for_review_count=0、iwooos_first_unlock_evidence_packet_preflight_needs_supplement_count=0、iwooos_first_unlock_evidence_packet_preflight_quarantined_count=0、iwooos_first_unlock_evidence_packet_preflight_rejected_count=0、iwooos_first_unlock_evidence_packet_review_accepted_count=0、iwooos_first_unlock_evidence_packet_headline_review_authorized=false、iwooos_first_unlock_evidence_packet_runtime_gate_opened=false、runtime_execution_authorized=false、active_runtime_gate_count=0、action_buttons_allowed=false、not_authorization=true，不把預檢分流當證據已補齊、審查已接受、headline review 授權、runtime 授權、審批、掃描、修復、部署、主機變更、專案庫建立、分支 / 標籤參照同步、工作流程 / 機密設定修改、主要來源切換、Gitea 停用、Kali / SSH / 主機更新或執行期授權 |
headline 進度要再往上，至少需要下列任一高層 gate 有實質 evidence：