wooo/awoooi
1
1
Fork 0
Code Issues 2 Pull Requests 1 Actions 2 Packages Projects Releases Wiki Activity

docs(security): add ref truth template status ledger

Browse Source
This commit is contained in:
Your Name
2026-05-18 19:32:42 +08:00
parent 51dc2cff27
commit d7d8f9f565
33 changed files with 267 additions and 58 deletions
Download Patch File Download Diff File Expand all files Collapse all files

110
docs/security/source-control-ref-truth-owner-response.snapshot.json
View File

@@ -25,6 +25,7 @@
"release_tag_review_count": 3,
"github_only_review_count": 20,
"owner_response_request_packet_count": 1,
"owner_response_template_status_count": 5,
"response_template_count": 5,
"received_response_count": 0,
"accepted_response_count": 0,
@@ -125,6 +126,115 @@
"不新增 AwoooP execution action button"
]
},
"owner_response_template_statuses": [
{
"template_id": "response-main-branch-truth-source",
"lane": "main_truth_required",
"display_order": 1,
"collection_status": "waiting_owner_response",
"request_status": "request_ready_not_sent",
"received_response_count": 0,
"accepted_response_count": 0,
"rejected_response_count": 0,
"latest_outcome_lane": "keep_waiting_owner_response",
"next_owner_action": "Owner 需逐 repo 回覆 main branch truth source、deploy marker owner、production source owner 與 rollback point owner；不得把 request ready 當成 refs sync approval。",
"awooop_display_mode": "display_template_status_only",
"execution_authorized": false,
"not_approval": true,
"still_forbidden": [
"不 fetch refs",
"不 push refs",
"不 delete refs",
"不 force push",
"不切 GitHub primary"
]
},
{
"template_id": "response-active-dev-branch-truth-source",
"lane": "active_branch_truth_required",
"display_order": 2,
"collection_status": "waiting_owner_response",
"request_status": "request_ready_not_sent",
"received_response_count": 0,
"accepted_response_count": 0,
"rejected_response_count": 0,
"latest_outcome_lane": "keep_waiting_owner_response",
"next_owner_action": "Owner 需回覆 `wooo/awoooi dev` 是否仍為 active workflow、legacy candidate 或需補 workflow owner；不得把 legacy candidate 當成 delete approval。",
"awooop_display_mode": "display_template_status_only",
"execution_authorized": false,
"not_approval": true,
"still_forbidden": [
"不 fetch refs",
"不 push refs",
"不 delete refs",
"不 force push",
"不 rewrite branch"
]
},
{
"template_id": "response-drift-deprecated-candidate-batch",
"lane": "archive_or_deprecate_candidate",
"display_order": 3,
"collection_status": "waiting_owner_response",
"request_status": "request_ready_not_sent",
"received_response_count": 0,
"accepted_response_count": 0,
"rejected_response_count": 0,
"latest_outcome_lane": "keep_waiting_owner_response",
"next_owner_action": "Owner 需回覆 `drift/adopt-*` batch 的 deprecated、audit retention 或 split batch disposition；不得把 deprecated candidate 當成 prune/delete approval。",
"awooop_display_mode": "display_template_status_only",
"execution_authorized": false,
"not_approval": true,
"still_forbidden": [
"不 prune refs",
"不 delete refs",
"不 force push",
"不把 batch disposition 當執行批准"
]
},
{
"template_id": "response-release-tag-retention",
"lane": "release_tag_missing_on_github",
"display_order": 4,
"collection_status": "waiting_owner_response",
"request_status": "request_ready_not_sent",
"received_response_count": 0,
"accepted_response_count": 0,
"rejected_response_count": 0,
"latest_outcome_lane": "keep_waiting_owner_response",
"next_owner_action": "Owner 需回覆 release tag retention、artifact owner 與 deploy marker owner；不得把 tag retention 當成 tag push、rewrite 或 delete approval。",
"awooop_display_mode": "display_template_status_only",
"execution_authorized": false,
"not_approval": true,
"still_forbidden": [
"不 push tag",
"不 rewrite tag",
"不 delete tag",
"不切 GitHub primary"
]
},
{
"template_id": "response-github-only-ref-review",
"lane": "github_only_manual_review",
"display_order": 5,
"collection_status": "waiting_owner_response",
"request_status": "request_ready_not_sent",
"received_response_count": 0,
"accepted_response_count": 0,
"rejected_response_count": 0,
"latest_outcome_lane": "keep_waiting_owner_response",
"next_owner_action": "Owner 需回覆 GitHub-only branch / UAT tags 的保留、backfill candidate、legacy 或補證 owner；不得把 backfill candidate 當成 push approval。",
"awooop_display_mode": "display_template_status_only",
"execution_authorized": false,
"not_approval": true,
"still_forbidden": [
"不 push refs",
"不 delete GitHub-only refs",
"不 backfill refs",
"不切 GitHub primary"
]
}
],
"response_templates": [
{
"template_id": "response-main-branch-truth-source",