docs(security): add mirror acceptance contract [skip ci]

This commit is contained in:
Your Name
2026-05-13 11:51:44 +08:00
parent 40b4e35330
commit cec38a4edd
16 changed files with 486 additions and 42 deletions

View File

@@ -11,7 +11,7 @@
"docs/security/security-mirror-event-sample.snapshot.json"
],
"summary": {
"total_contracts": 23,
"total_contracts": 24,
"route_group_count": 5,
"channel_event_policy": "初期只對階段完成、blocked 狀態或需要人工批准的高風險候選發低噪音事件LOW / MEDIUM observation 不發阻擋事件。",
"approval_queue_policy": "只有 approval-only、suggest-only 或 blocked-until-approved 項目可進 approval queueapproval queue 不代表可執行。"
@@ -25,7 +25,8 @@
"security_rollout_policy_v1",
"security_mirror_event_v1",
"security_mirror_intake_plan_v1",
"security_mirror_route_v1"
"security_mirror_route_v1",
"security_mirror_acceptance_v1"
],
"destinations": [
"operator_console",
@@ -38,7 +39,8 @@
"顯示 contract readiness 與 manifest",
"顯示 mirror-only policy",
"顯示每個 wave 的目的地與 blocked processing",
"要求所有鏡像 payload 使用 security_mirror_event_v1 信封"
"要求所有鏡像 payload 使用 security_mirror_event_v1 信封",
"顯示 security_mirror_acceptance_v1 驗收結果"
],
"blocked_processing": [
"新增執行按鈕",
@@ -46,7 +48,7 @@
"runtime blocking",
"自動批准任何 queue item"
],
"exit_gate": "AwoooP 可顯示 23 個 contract、5 個 route groups且所有 route 都維持 runtime_execution_authorized=false。"
"exit_gate": "AwoooP 可顯示 24 個 contract、5 個 route groups、7 個 acceptance checks,且所有 route 都維持 runtime_execution_authorized=false。"
},
{
"wave_id": "M1_kali_visibility",
@@ -183,7 +185,7 @@
"acceptance_gates": [
{
"gate_id": "ROUTE_COVERS_ALL_CONTRACTS",
"requirement": "route_groups 合併後必須涵蓋 manifest 的 23 個 contracts。"
"requirement": "route_groups 合併後必須涵蓋 manifest 的 24 個 contracts。"
},
{
"gate_id": "NO_EXECUTION_SURFACE",