wooo/awoooi
1
1
Fork 0
Code Issues 2 Pull Requests 1 Actions 4 Packages Projects Releases Wiki Activity

docs(security): add mirror acceptance contract [skip ci]

Browse Source
This commit is contained in:
Your Name
2026-05-13 11:51:44 +08:00
parent 40b4e35330
commit cec38a4edd
16 changed files with 486 additions and 42 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
docs/security/SECURITY-MIRROR-READINESS.md
View File

@@ -23,7 +23,7 @@
| 狀態 | 數量 | 說明 |
|------|------|------|
| `ready_for_mirror` | 20 | 可直接 mirror 成 Operator Console / Runtime State / Channel Event / Audit evidence |
| `ready_for_mirror` | 21 | 可直接 mirror 成 Operator Console / Runtime State / Channel Event / Audit evidence |
| `partial_ready` | 2 | 可 mirror，但 evidence 仍不完整 |
| `contract_only` | 1 | 有 schema / handoff，尚無正式 snapshot |
| `blocked` | 0 | 目前沒有禁止 mirror 的 contract |
@@ -69,9 +69,10 @@ AwoooP 可以將 ready / partial contracts mirror 到：
1. AwoooP 先 mirror `security_mirror_readiness_v1` 與 `security_supply_chain_contract_manifest_v1`。
2. 再使用 `security_mirror_event_v1` 包裝每一筆 mirror payload。
3. 再 mirror `security_mirror_route_v1`，決定目的地、channel policy 與 review lane。
4. 再 mirror `security_mirror_intake_plan_v1`，照 wave 執行 read-only intake。
5. 再 mirror `security_approval_queue_v1`，只顯示 review order。
6. 再 mirror `kali_integration_status_v1` 與 `kali_scan_scope_approval_v1`。
7. 最後再 mirror source-control 相關 contracts。
4. 再 mirror `security_mirror_acceptance_v1`，驗收 contract count、event envelope、route coverage 與 redaction。
5. 再 mirror `security_mirror_intake_plan_v1`，照 wave 執行 read-only intake。
6. 再 mirror `security_approval_queue_v1`，只顯示 review order。
7. 再 mirror `kali_integration_status_v1` 與 `kali_scan_scope_approval_v1`。
8. 最後再 mirror source-control 相關 contracts。
整個 S2 不新增 execution router、不新增執行按鈕、不新增 runtime blocker。