From d89f271af3502e1b9544f44b86863198bda73fe6 Mon Sep 17 00:00:00 2001 From: Your Name Date: Tue, 16 Jun 2026 11:07:34 +0800 Subject: [PATCH] =?UTF-8?q?feat(iwooos):=20=E6=96=B0=E5=A2=9E=E7=9B=A3?= =?UTF-8?q?=E6=8E=A7=E5=91=8A=E8=AD=A6=E4=BA=8B=E6=95=85=E5=9B=9E=E8=AE=80?= =?UTF-8?q?=20gate?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- apps/web/messages/en.json | 6 +- apps/web/messages/zh-TW.json | 6 +- apps/web/src/app/[locale]/iwooos/page.tsx | 18 +- .../iwooos_posture_projection_v1.schema.json | 90 + .../HIGH-VALUE-CONFIG-CONTROL-COVERAGE.md | 5 +- .../IWOOOS-CONFIG-CONTROL-INVENTORY.md | 3 + docs/security/IWOOOS-POSTURE-PROJECTION.md | 8 + .../MONITORING-POST-INCIDENT-READBACK-PLAN.md | 90 + .../SECURITY-SUPPLY-CHAIN-PROGRESS.md | 7 + ...alue-config-control-coverage.snapshot.json | 14 +- .../iwooos-posture-projection.snapshot.json | 438 +- ...-post-incident-readback-plan.snapshot.json | 16116 ++++++++++++++++ .../high-value-config-control-coverage.py | 11 +- .../security/iwooos-config-control-guard.py | 52 +- .../monitoring-post-incident-readback-plan.py | 514 + .../security-mirror-progress-guard.py | 284 +- 16 files changed, 17430 insertions(+), 232 deletions(-) create mode 100644 docs/security/MONITORING-POST-INCIDENT-READBACK-PLAN.md create mode 100644 docs/security/monitoring-post-incident-readback-plan.snapshot.json create mode 100644 scripts/security/monitoring-post-incident-readback-plan.py diff --git a/apps/web/messages/en.json b/apps/web/messages/en.json index 68a95bca0..f0af61db4 100644 --- a/apps/web/messages/en.json +++ b/apps/web/messages/en.json @@ -17854,7 +17854,7 @@ }, "publicRuntime": { "title": "Public / admin / API runtime config", - "body": "AWOOOI、AwoooP、IwoooS、任務媒合產品、股票研究平台、官方形象網站、藥局網站、直播角色網站 等公開、後台、API、callback、webhook 與 env runtime config 已新增變更證據驗收；前台 source / messages 也已納入敏感資訊防洩漏 guard，只讀成熟度 66%，掃 225 個檔案、12 類禁字、違規 0。目前只收 affected route、auth boundary、API readback、CORS diff、frontend env diff、i18n redaction、desktop / mobile smoke、sensitive scan 與 rollback owner，不改 CORS、不改 route、不部署，也不得暴露 raw namespace、內部狀態碼或內部協作內容。" + "body": "AWOOOI、AwoooP、IwoooS、任務媒合產品、股票研究平台、官方形象網站、藥局網站、直播角色網站 等公開、後台、API、callback、webhook 與 env runtime config 已新增變更證據驗收；前台 source / messages 也已納入敏感資訊防洩漏 guard，只讀成熟度 66%，掃 225 個檔案、12 類禁字、違規 0。目前只收 affected route、auth boundary、API readback、CORS diff、frontend env diff、i18n redaction、desktop / mobile smoke、sensitive scan 與 rollback owner，不改 CORS、不改 route、不部署，也不得暴露原始命名空間、內部狀態碼或內部協作內容。" }, "agentBounty": { "title": "agent-bounty runtime / treasury", @@ -17933,7 +17933,7 @@ }, "coverage": { "label": "平均成熟度", - "detail": "host service 事故回讀 gate 納入後，平均控管成熟度為 71%。" + "detail": "多個事故後回讀 gate 納入後，平均控管成熟度為 71%。" }, "runtimeGate": { "label": "執行期", @@ -17967,7 +17967,7 @@ }, "monitoring": { "title": "監控與告警設定", - "body": "已新增 60 個 monitoring / alerting / observability repo-only surface，並補上告警鏈路 no-false-green 回補 Gate；目前只讀成熟度 68%，23 個 reviewer checks、12 條 outcome lanes、34 類 blocked action，receiver receipt、stale alert、silence / dedup、post-reload readback 與 false-green accepted 仍全部為 0。" + "body": "已新增 60 個 monitoring / alerting / observability surface，並補上事故後回讀計畫；目前只讀成熟度 70%，30 個必填回讀欄位、28 個 reviewer checks、11 條 outcome lanes、53 類 blocked action。receiver receipt、stale / silence review、alert chain health、post-incident readback accepted、runtime gate 與 action button 仍全部為 0。" } } }, diff --git a/apps/web/messages/zh-TW.json b/apps/web/messages/zh-TW.json index 68a95bca0..f0af61db4 100644 --- a/apps/web/messages/zh-TW.json +++ b/apps/web/messages/zh-TW.json @@ -17854,7 +17854,7 @@ }, "publicRuntime": { "title": "Public / admin / API runtime config", - "body": "AWOOOI、AwoooP、IwoooS、任務媒合產品、股票研究平台、官方形象網站、藥局網站、直播角色網站 等公開、後台、API、callback、webhook 與 env runtime config 已新增變更證據驗收；前台 source / messages 也已納入敏感資訊防洩漏 guard，只讀成熟度 66%，掃 225 個檔案、12 類禁字、違規 0。目前只收 affected route、auth boundary、API readback、CORS diff、frontend env diff、i18n redaction、desktop / mobile smoke、sensitive scan 與 rollback owner，不改 CORS、不改 route、不部署，也不得暴露 raw namespace、內部狀態碼或內部協作內容。" + "body": "AWOOOI、AwoooP、IwoooS、任務媒合產品、股票研究平台、官方形象網站、藥局網站、直播角色網站 等公開、後台、API、callback、webhook 與 env runtime config 已新增變更證據驗收；前台 source / messages 也已納入敏感資訊防洩漏 guard，只讀成熟度 66%，掃 225 個檔案、12 類禁字、違規 0。目前只收 affected route、auth boundary、API readback、CORS diff、frontend env diff、i18n redaction、desktop / mobile smoke、sensitive scan 與 rollback owner，不改 CORS、不改 route、不部署，也不得暴露原始命名空間、內部狀態碼或內部協作內容。" }, "agentBounty": { "title": "agent-bounty runtime / treasury", @@ -17933,7 +17933,7 @@ }, "coverage": { "label": "平均成熟度", - "detail": "host service 事故回讀 gate 納入後，平均控管成熟度為 71%。" + "detail": "多個事故後回讀 gate 納入後，平均控管成熟度為 71%。" }, "runtimeGate": { "label": "執行期", @@ -17967,7 +17967,7 @@ }, "monitoring": { "title": "監控與告警設定", - "body": "已新增 60 個 monitoring / alerting / observability repo-only surface，並補上告警鏈路 no-false-green 回補 Gate；目前只讀成熟度 68%，23 個 reviewer checks、12 條 outcome lanes、34 類 blocked action，receiver receipt、stale alert、silence / dedup、post-reload readback 與 false-green accepted 仍全部為 0。" + "body": "已新增 60 個 monitoring / alerting / observability surface，並補上事故後回讀計畫；目前只讀成熟度 70%，30 個必填回讀欄位、28 個 reviewer checks、11 條 outcome lanes、53 類 blocked action。receiver receipt、stale / silence review、alert chain health、post-incident readback accepted、runtime gate 與 action button 仍全部為 0。" } } }, diff --git a/apps/web/src/app/[locale]/iwooos/page.tsx b/apps/web/src/app/[locale]/iwooos/page.tsx index cbf807f72..2d0954c5b 100644 --- a/apps/web/src/app/[locale]/iwooos/page.tsx +++ b/apps/web/src/app/[locale]/iwooos/page.tsx @@ -2353,7 +2353,7 @@ const highValueConfigControlCoverageBoundaries = [ 'monitoring_alerting_observability_inventory_reload_owner_accepted_count=0', 'monitoring_alerting_observability_inventory_receiver_owner_accepted_count=0', 'monitoring_alerting_observability_inventory_route_smoke_accepted_count=0', - 'monitoring_alerting_observability_coverage_percent=68', + 'monitoring_alerting_observability_coverage_percent=70', 'monitoring_owner_response_acceptance_required_owner_field_count=14', 'monitoring_owner_response_acceptance_reviewer_check_count=23', 'monitoring_owner_response_acceptance_outcome_lane_count=12', @@ -2364,6 +2364,22 @@ const highValueConfigControlCoverageBoundaries = [ 'monitoring_owner_response_acceptance_silence_or_dedup_review_accepted_count=0', 'monitoring_owner_response_acceptance_post_reload_readback_plan_accepted_count=0', 'monitoring_owner_response_acceptance_runtime_gate_count=0', + 'monitoring_post_incident_readback_plan_candidate_count=60', + 'monitoring_post_incident_readback_plan_write_capable_candidate_count=11', + 'monitoring_post_incident_readback_plan_live_evidence_required_candidate_count=60', + 'monitoring_post_incident_readback_plan_alert_rule_candidate_count=13', + 'monitoring_post_incident_readback_plan_deploy_or_reload_candidate_count=6', + 'monitoring_post_incident_readback_plan_required_readback_field_count=30', + 'monitoring_post_incident_readback_plan_reviewer_check_count=28', + 'monitoring_post_incident_readback_plan_outcome_lane_count=11', + 'monitoring_post_incident_readback_plan_blocked_action_count=53', + 'monitoring_post_incident_readback_plan_post_incident_readback_received_count=0', + 'monitoring_post_incident_readback_plan_post_incident_readback_accepted_count=0', + 'monitoring_post_incident_readback_plan_receiver_receipt_readback_accepted_count=0', + 'monitoring_post_incident_readback_plan_stale_pending_resolved_review_accepted_count=0', + 'monitoring_post_incident_readback_plan_silence_mute_dedup_inhibit_review_accepted_count=0', + 'monitoring_post_incident_readback_plan_alert_chain_health_readback_accepted_count=0', + 'monitoring_post_incident_readback_plan_runtime_gate_count=0', 'docker_compose_action_authorized=false', 'systemctl_action_authorized=false', 'repair_bot_execution_authorized=false', diff --git a/docs/schemas/iwooos_posture_projection_v1.schema.json b/docs/schemas/iwooos_posture_projection_v1.schema.json index 78ccace9f..3981a0af6 100644 --- a/docs/schemas/iwooos_posture_projection_v1.schema.json +++ b/docs/schemas/iwooos_posture_projection_v1.schema.json @@ -276,6 +276,24 @@ "monitoring_alerting_observability_inventory_source_exists_count", "monitoring_alerting_observability_inventory_surface_count", "monitoring_alerting_observability_inventory_first_layer", + "monitoring_post_incident_readback_plan_candidate_count", + "monitoring_post_incident_readback_plan_write_capable_candidate_count", + "monitoring_post_incident_readback_plan_live_evidence_required_candidate_count", + "monitoring_post_incident_readback_plan_alert_rule_candidate_count", + "monitoring_post_incident_readback_plan_deploy_or_reload_candidate_count", + "monitoring_post_incident_readback_plan_required_readback_field_count", + "monitoring_post_incident_readback_plan_reviewer_check_count", + "monitoring_post_incident_readback_plan_outcome_lane_count", + "monitoring_post_incident_readback_plan_blocked_action_count", + "monitoring_post_incident_readback_plan_post_incident_readback_received_count", + "monitoring_post_incident_readback_plan_post_incident_readback_accepted_count", + "monitoring_post_incident_readback_plan_receiver_receipt_readback_accepted_count", + "monitoring_post_incident_readback_plan_stale_pending_resolved_review_accepted_count", + "monitoring_post_incident_readback_plan_silence_mute_dedup_inhibit_review_accepted_count", + "monitoring_post_incident_readback_plan_alert_chain_health_readback_accepted_count", + "monitoring_post_incident_readback_plan_runtime_gate_count", + "monitoring_post_incident_readback_plan_action_button_count", + "monitoring_post_incident_readback_plan_coverage_percent_after_readback_plan", "high_value_config_owner_packet_first_layer", "high_value_config_owner_packet_summary_count", "high_value_config_owner_packet_item_count", @@ -1445,6 +1463,78 @@ "minimum": 0, "maximum": 100 }, + "monitoring_post_incident_readback_plan_candidate_count": { + "type": "integer", + "const": 60 + }, + "monitoring_post_incident_readback_plan_write_capable_candidate_count": { + "type": "integer", + "const": 11 + }, + "monitoring_post_incident_readback_plan_live_evidence_required_candidate_count": { + "type": "integer", + "const": 60 + }, + "monitoring_post_incident_readback_plan_alert_rule_candidate_count": { + "type": "integer", + "const": 13 + }, + "monitoring_post_incident_readback_plan_deploy_or_reload_candidate_count": { + "type": "integer", + "const": 6 + }, + "monitoring_post_incident_readback_plan_required_readback_field_count": { + "type": "integer", + "const": 30 + }, + "monitoring_post_incident_readback_plan_reviewer_check_count": { + "type": "integer", + "const": 28 + }, + "monitoring_post_incident_readback_plan_outcome_lane_count": { + "type": "integer", + "const": 11 + }, + "monitoring_post_incident_readback_plan_blocked_action_count": { + "type": "integer", + "const": 53 + }, + "monitoring_post_incident_readback_plan_post_incident_readback_received_count": { + "type": "integer", + "const": 0 + }, + "monitoring_post_incident_readback_plan_post_incident_readback_accepted_count": { + "type": "integer", + "const": 0 + }, + "monitoring_post_incident_readback_plan_receiver_receipt_readback_accepted_count": { + "type": "integer", + "const": 0 + }, + "monitoring_post_incident_readback_plan_stale_pending_resolved_review_accepted_count": { + "type": "integer", + "const": 0 + }, + "monitoring_post_incident_readback_plan_silence_mute_dedup_inhibit_review_accepted_count": { + "type": "integer", + "const": 0 + }, + "monitoring_post_incident_readback_plan_alert_chain_health_readback_accepted_count": { + "type": "integer", + "const": 0 + }, + "monitoring_post_incident_readback_plan_runtime_gate_count": { + "type": "integer", + "const": 0 + }, + "monitoring_post_incident_readback_plan_action_button_count": { + "type": "integer", + "const": 0 + }, + "monitoring_post_incident_readback_plan_coverage_percent_after_readback_plan": { + "type": "integer", + "const": 70 + }, "public_gateway_preflight_first_layer": { "type": "boolean", "const": true diff --git a/docs/security/HIGH-VALUE-CONFIG-CONTROL-COVERAGE.md b/docs/security/HIGH-VALUE-CONFIG-CONTROL-COVERAGE.md index 4759701ee..75c900ea7 100644 --- a/docs/security/HIGH-VALUE-CONFIG-CONTROL-COVERAGE.md +++ b/docs/security/HIGH-VALUE-CONFIG-CONTROL-COVERAGE.md @@ -134,7 +134,7 @@ | P1-3 | AI provider / model routing / Ollama proxy / cost and privacy | `64%` | 已新增 owner response acceptance 帳本，固定 8 個候選、24 個 owner 必填欄位、24 個 reviewer checks、10 條 outcome lanes、38 類 blocked actions；仍缺 provider owner、fallback order、dry-run、benchmark、cost review、privacy review、data classification、prompt redaction、quality gate、rollback owner 與 post-check evidence，不切 production | | P1-4 | K8s / ArgoCD / production manifests | `64%` | manifest inventory、owner response acceptance 與 GitOps change evidence acceptance 已完成；仍缺 proposed commit ref、rendered manifest diff、ArgoCD app / sync revision、health before / after、rollout、route smoke、metrics / alert、blast radius、rollback revision、maintenance window 與 post-check owner | | P1-5 | Backup / restore / escrow / retention | `64%` | repo-only 清冊已納入 38 個 surface，owner request draft 與 owner response acceptance ledger 已完成，並補 restore recovery、freshness SLO、隔離還原目標、remote delete guard、retention runway、credential recovery metadata-only 與 no-false-green backup health Gate；仍缺 owner response、restore drill approval package、offsite / escrow owner、rollback owner、validation plan 與 no-secret-value evidence | -| P1-6 | Prometheus / Alertmanager / Grafana / SigNoz / Sentry / Langfuse | `68%` | repo-only 清冊已納入 60 個 monitoring / alerting / observability surface，owner response acceptance 已補 no-false-green 回補 Gate；仍缺 owner response、live drift evidence、reload owner、receiver owner、receipt proof、stale / silence review、post-reload readback、route smoke plan 與 noise budget | +| P1-6 | Prometheus / Alertmanager / Grafana / SigNoz / Sentry / Langfuse | `70%` | repo-only 清冊、owner response acceptance 與事故後回讀計畫已納入 60 個 monitoring / alerting / observability surface；actor、時間窗、before / after alert state、rule / datasource / scrape、receiver receipt、stale / silence、freshness、alert chain health、cross-project sync、rollback 與 no-false-green 已納入；仍缺 owner response、事故回讀包、live drift evidence、receiver receipt proof、noise budget owner 與 maintenance window | ## 4. 固定 0 / false 邊界 @@ -268,6 +268,7 @@ python3 scripts/security/iwooos-config-control-guard.py --root . | Public / Admin / API runtime config 變更證據驗收 | `100%` | 已新增 `public_runtime_config_change_evidence_acceptance_v1` 與前台 source / messages 防洩漏 guard；6 個 candidate、5 個 C0、21 個 reviewer checks、8 條 outcome lanes、32 類 blocked action，另掃 225 個前端檔案、12 類禁字、違規 0；public/admin/API runtime config 成熟度 `62% -> 66%`，raw namespace / repo slug / 內部狀態碼 / 內部協作內容外洩列為拒收或隔離條件 | | Backup / restore / escrow owner response acceptance backfill | `100%` | 已將 `backup_restore_owner_response_acceptance_v1` 補強為 38 個 candidate、27 個 write-capable、23 個 owner 必填欄位、22 個 reviewer checks、9 條 outcome lanes、31 類 blocked action；backup / restore / credential 成熟度 `62% -> 64%` | | Monitoring / alerting / observability owner response acceptance backfill | `100%` | 已將 `monitoring_owner_response_acceptance_v1` 補強為 60 個 candidate、11 個 write-capable、38 個 acceptance fields、23 個 reviewer checks、12 條 outcome lanes、34 類 blocked action；monitoring / alerting / observability 成熟度 `66% -> 68%` | +| Monitoring / alerting / observability post-incident readback plan | `100%` | 已新增 `monitoring_post_incident_readback_plan_v1`，60 個事故回讀 candidate、11 個 write-capable、30 個必填欄位、28 個 reviewer checks、11 條 outcome lanes、53 類 blocked action；成熟度 `68% -> 70%`，readback received / accepted、receiver receipt、stale / silence、alert chain health、reload、Telegram send、alert chain smoke 與 runtime gate 仍為 `0` | | AI provider / model routing owner response acceptance | `100%` | 已新增 `ai_provider_owner_response_acceptance_v1`，8 個 candidate、5 個 write-capable、24 個 owner 必填欄位、24 個 reviewer checks、10 條 outcome lanes、38 類 blocked action；AI provider / model routing 成熟度 `60% -> 64%` | | Public Gateway / Nginx post-incident readback plan | `100%` | 已新增 `public_gateway_post_incident_readback_plan_v1`，3 個事故回讀 candidate、2 個 C0、30 個必填欄位、28 個 reviewer checks、10 條 outcome lanes、41 類 blocked action；成熟度 `90% -> 92%`，readback received / accepted、`nginx -t`、reload、route smoke、DNS / TLS、certbot 與 runtime gate 仍為 `0` | | SSH / firewall / network post-incident readback plan | `100%` | 已新增 `ssh_network_post_incident_readback_plan_v1`，14 個事故回讀 candidate、6 個 write-capable、24 個必填欄位、24 個 reviewer checks、10 條 outcome lanes、34 類 blocked action；成熟度 `62% -> 64%`，readback received / accepted、actor、before / after、impact、通知、同步、恢復、防再發與 runtime gate 仍為 `0` | @@ -319,6 +320,8 @@ python3 scripts/security/iwooos-config-control-guard.py --root . 2026-06-15 再補告警鏈路 no-false-green 回補欄位，將 `monitoring_owner_response_acceptance_v1` 固定為 `acceptance_field_count=38`、`reviewer_check_count=23`、`outcome_lane_count=12`、`blocked_action_count=34`。新增要求包含 incident context、alert chain health 不得只用 route 200 或 UI 可見判定、receiver receipt proof、stale alert review、silence / dedup review、false-green risk review、post-reload readback plan 與 cross-project notification ref。此更新讓 `monitoring_alerting_observability` 從 `66%` 推進到 `68%`；但 owner response received / accepted / rejected、receiver receipt accepted、stale alert review accepted、silence / dedup review accepted、false-green risk review accepted、post-reload readback accepted、reload、receiver route change、silence change、Telegram send、alert chain smoke、runtime gate 與 action button 仍全部為 `0`。 +2026-06-15 再新增 `monitoring_post_incident_readback_plan_v1`，把同一批 60 個 monitoring / alerting / observability surface 轉成 `readback_candidate_count=60`、`write_capable_readback_candidate_count=11`、`live_evidence_required_readback_candidate_count=60`、`alert_rule_readback_candidate_count=13`、`deploy_or_reload_readback_candidate_count=6`、`required_readback_field_count=30`、`reviewer_check_count=28`、`outcome_lane_count=11`、`blocked_action_count=53` 的事故後回讀計畫。此更新讓 `monitoring_alerting_observability` 從 `68%` 推進到 `70%`；但 post-incident readback received / accepted、actor attribution、before / after alert state、rule / datasource / scrape state、receiver route、receiver receipt、stale / pending / resolved review、silence / mute / dedup / inhibit review、dashboard / trace / log freshness、notification delivery、alert chain health、cross-project sync、rollback、post-change monitoring、防再發、no-false-green、reload、receiver route change、Telegram send、alert chain smoke、production write、runtime gate 與 action button 仍全部為 `0`。 + ## 12. P0 Public Gateway Preflight 清冊更新 `public_gateway_preflight_inventory_v1` 已把 Nginx public gateway reload / route change 前置 Gate 固定成只讀清冊，共 `3` 份 source config、`14` 個 route impact、`14` 個 unique upstream、`12` 個 preflight gate，其中 `2` 個 gate 只代表 repo-only ready，`10` 個 gate 仍需 owner acceptance。此更新讓 `nginx_public_gateway` 從 `78%` 推進到 `84%`；owner response、owner-provided live conf、rendered diff、`nginx -t` evidence、route smoke、maintenance window、rollback owner、runtime gate 與 action button 仍全部為 `0`。 diff --git a/docs/security/IWOOOS-CONFIG-CONTROL-INVENTORY.md b/docs/security/IWOOOS-CONFIG-CONTROL-INVENTORY.md index ea4838c56..a217a83c9 100644 --- a/docs/security/IWOOOS-CONFIG-CONTROL-INVENTORY.md +++ b/docs/security/IWOOOS-CONFIG-CONTROL-INVENTORY.md @@ -113,6 +113,8 @@ 2026-06-15 再補告警鏈路 no-false-green 回補欄位，將 `monitoring_owner_response_acceptance_v1` 固定為 `acceptance_fields=38`、`reviewer_checks=23`、`outcome_lanes=12`、`blocked_actions=34`。新增要求包含 incident context、alert chain health 不能只看 route 200、receiver receipt proof、stale alert review、silence / dedup review、false-green risk review、post-reload readback plan 與 cross-project notification ref，讓 monitoring / alerting / observability 類別成熟度從 `66%` 推進到 `68%`；但 owner response、receiver receipt、stale alert review、silence / dedup review、false-green risk review、post-reload readback、reload、Telegram send、live alert fire、alert chain smoke、host write、runtime gate 仍全部為 `0 / false`。 +2026-06-15 再新增 `monitoring_post_incident_readback_plan_v1`，將同一批 60 個 monitoring / alerting / observability surface 轉成事故後回讀計畫。固定 `candidates=60`、`write_capable=11`、`live_evidence_required=60`、`alert_rule=13`、`deploy_or_reload=6`、`required_readback_fields=30`、`reviewer_checks=28`、`outcome_lanes=11`、`blocked_actions=53`，讓 monitoring / alerting / observability 類別成熟度從 `68%` 推進到 `70%`；但 post-incident readback received / accepted、receiver receipt、stale / silence review、alert chain health、reload、Telegram send、live alert fire、alert chain smoke、host write、production write、runtime gate 與 action button 仍全部為 `0 / false`。 + ### 0.6 2026-06-12 Public Gateway Preflight repo-only 清冊 `public_gateway_preflight_inventory_v1` 已把 Nginx public gateway reload / route change 前置 Gate 固定成只讀 snapshot。清冊目前共有 `3` 份 Nginx source config、`2` 份 C0 source config、`14` 個 route impact、`14` 個 unique upstream、`10` 條 TLS certificate path、`4` 個 certificate owner 確認缺口、`7` 個 ACME challenge domain、`1` 個 admin route domain、`6` 個 WebSocket route domain 與 `12` 個 preflight gate，讓 Nginx public gateway 類別成熟度從 `78%` 推進到 `84%`。 @@ -284,6 +286,7 @@ Nginx 是目前必須最先資安控管的配置，原因是它同時控制公 | Monitoring / alerting / observability 清冊 | `100%` | 已新增 `monitoring_alerting_observability_inventory_v1`，納入 60 個 repo-only surface；成熟度 `56% -> 62%` | | Monitoring / alerting / observability owner request draft | `100%` | 已將 60 個 monitoring surface 轉成 owner request draft；request sent / received / accepted、reload、receiver route change、Telegram send、alert chain smoke 仍為 0 | | Monitoring / alerting / observability owner response acceptance | `100%` | 已新增並強化 `monitoring_owner_response_acceptance_v1`，60 個 candidate、11 個 write-capable、23 個 reviewer checks、12 條 outcome lanes、34 類 blocked action；成熟度 `62% -> 68%` | +| Monitoring / alerting / observability post-incident readback plan | `100%` | 已新增 `monitoring_post_incident_readback_plan_v1`，60 個事故回讀 candidate、11 個 write-capable、30 個必填欄位、28 個 reviewer checks、11 條 outcome lanes、53 類 blocked action；成熟度 `68% -> 70%`，readback accepted、receiver receipt、stale / silence、alert chain health、reload、Telegram send、alert chain smoke 與 runtime gate 仍為 0 | | owner packet 前台只讀接入 | `100%` | `/zh-TW/iwooos` 已顯示高價值配置 owner packet 草案、C0/C1 packet 數、request / received / accepted 仍為 0 與禁止執行邊界 | | owner response request / received / accepted | `0%` | Packet 只是草案；尚未送件、尚未收件、尚未 reviewer accepted | | agent-bounty-protocol owner request draft | `100%` | 已將 repo / refs、deployment、data classification、external agent / treasury 與 7 個 product surface 轉成 11 份 owner request draft；claim / submit、payout、cron / daemon、runtime gate 仍為 0 | diff --git a/docs/security/IWOOOS-POSTURE-PROJECTION.md b/docs/security/IWOOOS-POSTURE-PROJECTION.md index 95126196c..e47b82b9b 100644 --- a/docs/security/IWOOOS-POSTURE-PROJECTION.md +++ b/docs/security/IWOOOS-POSTURE-PROJECTION.md @@ -35,6 +35,12 @@ 此同步只代表前端可以顯示 Nginx / Public Gateway 事故後回讀計畫與邊界；`post_incident_readback_received_count`、`post_incident_readback_accepted_count`、`host_live_conf_read_authorized_count`、`nginx_test_authorized_count`、`nginx_reload_authorized_count`、`route_smoke_authorized_count`、`dns_tls_probe_authorized_count`、`certbot_renew_authorized_count`、`runtime_gate_count` 與 `action_button_count` 仍全部維持 `0`。不得把 route `200`、Nginx active、dashboard up、CD success 或 UI 可見視為資安驗收。 +## 1.4 2026-06-15 Monitoring / Alerting / Observability 事故後回讀投影 + +`monitoring_post_incident_readback_plan_v1` 已投影到 `iwooos-posture-projection.snapshot.json` 與前台 marker。固定 `candidate_count=60`、`write_capable_candidate_count=11`、`live_evidence_required_candidate_count=60`、`alert_rule_candidate_count=13`、`deploy_or_reload_candidate_count=6`、`required_readback_field_count=30`、`reviewer_check_count=28`、`outcome_lane_count=11`、`blocked_action_count=53`，並讓 `monitoring_alerting_observability_coverage_percent=70`。 + +此同步只代表前端可以顯示監控 / 告警 / 可觀測性事故後回讀計畫與邊界；`post_incident_readback_received_count`、`post_incident_readback_accepted_count`、`receiver_receipt_readback_accepted_count`、`stale_pending_resolved_review_accepted_count`、`silence_mute_dedup_inhibit_review_accepted_count`、`alert_chain_health_readback_accepted_count`、`runtime_gate_count` 與 `action_button_count` 仍全部維持 `0`。不得把 route `200`、dashboard up、container up、receiver reachable、CD success 或 UI 可見視為告警鏈路驗收。 + ## 2. 來源 IwoooS 首版只讀取或對齊以下已提交 evidence： @@ -47,6 +53,7 @@ IwoooS 首版只讀取或對齊以下已提交 evidence： | `source_control_primary_readiness_gate_v1` | GitHub primary readiness 仍為 0、候選 repo 與切換前置缺口 | | `public_gateway_post_incident_readback_plan_v1` | Public Gateway / Nginx 事故後回讀計畫、92% 子項成熟度、30 個必填欄位、41 類 blocked action、runtime gate 0 | | `k8s_argocd_post_incident_readback_plan_v1` | K8s / ArgoCD 事故後回讀計畫、66% 子項成熟度、31 個必填欄位、41 類 blocked action、runtime gate 0 | +| `monitoring_post_incident_readback_plan_v1` | Monitoring / Alerting / Observability 事故後回讀計畫、70% 子項成熟度、30 個必填欄位、53 類 blocked action、runtime gate 0 | | `kali_integration_status_v1` | Kali 112 observe-only 整合態勢 | | `vibework_iwooos_onboarding_handoff_v1` | VibeWork repo / product / surface / owner / evidence refs / 獨立產品邊界只讀 handoff | | `docs/LOGBOOK.md` | 部署 marker、Gitea run 與 rollout risk 邊界紀錄 | @@ -124,6 +131,7 @@ IwoooS 首版只讀取或對齊以下已提交 evidence： 57a. 38 個 Backup / restore / escrow owner response acceptance backfill，顯示 restore recovery、freshness SLO、隔離 restore target、backup dependency map、data classification、remote delete guard、retention runway、restore observer / stop condition、credential recovery non-secret proof 與 backup health no-false-green review 收件規則；owner field `23`、reviewer check `22`、outcome lane `9`、blocked action `31`，讓 backup / restore / credential 類別成熟度從 `62%` 推進到 `64%`；owner response、freshness SLO accepted、restore target isolation accepted、remote delete guard accepted、retention runway accepted、credential recovery drill accepted、backup run、restore run、offsite sync、remote delete、retention change、secret collection、runtime gate 與 action button 仍全部為 `0`。 58. 60 個 Monitoring / alerting / observability repo-only inventory surfaces，顯示 Prometheus、Alertmanager、Grafana、SigNoz、Sentry、Langfuse、OTEL、Telegram / notification policy、deploy / reload scripts 與 alert chain smoke scripts 的第一層清冊；write-capable surface `11`、alert rule surface `13`、deploy / reload surface `6`，owner response、live evidence、reload owner、receiver owner、route smoke、runtime gate 與 action button 仍全部為 `0`，不代表 Prometheus reload、Alertmanager reload、Grafana import、SigNoz apply、Sentry deploy、Telegram send、live alert fire 或 alert chain smoke 已授權。 58a. 60 個 Monitoring / alerting / observability owner response acceptance 候選已補告警鏈路 no-false-green 回補規則；acceptance field `38`、reviewer check `23`、outcome lane `12`、blocked action `34`，新增 incident context、alert chain health 不能只看 route 200、receiver receipt proof、stale alert review、silence / dedup review、false-green risk review、post-reload readback plan 與 cross-project notification ref，讓 monitoring / alerting / observability 類別成熟度從 `66%` 推進到 `68%`；owner response、receiver receipt、stale alert review、silence / dedup review、false-green risk review、post-reload readback、runtime gate 與 action button 仍全部為 `0`。 +58b. 60 個 Monitoring / alerting / observability post-incident readback 候選，顯示 actor、change / outage time window、before / after alert state、rule / datasource / scrape state、receiver route、receiver receipt、stale / silence review、dashboard / trace / log freshness、notification delivery、alert chain health、cross-project sync、rollback、post-change monitoring、postcheck、recurrence guard 與 no-false-green attestation 的事故後回讀規則；write-capable candidate `11`、live evidence required `60`、alert rule candidate `13`、deploy / reload candidate `6`、required readback field `30`、reviewer check `28`、outcome lane `11`、blocked action `53`，讓 monitoring / alerting / observability 類別成熟度從 `68%` 推進到 `70%`；readback received / accepted、receiver receipt、stale / silence、alert chain health、reload、Telegram send、alert chain smoke、runtime gate 與 action button 仍全部為 `0`。 59. 12 個 Public Gateway Preflight repo-only gates，顯示 Nginx public gateway reload / route change 前必備的 owner、live conf、rendered diff、`nginx -t`、public / admin / WebSocket route smoke、ACME / TLS owner check、maintenance window 與 rollback owner；source config `3`、route impact `14`、repo-only ready gate `2`，owner acceptance、live conf、rendered diff、`nginx -t` evidence、route smoke、runtime gate 與 action button 仍全部為 `0`，不代表 SSH、live conf read、Nginx reload、route change、DNS / TLS probe 或 certbot renew 已授權。 ## 3.1 既有前端資安頁面整合 diff --git a/docs/security/MONITORING-POST-INCIDENT-READBACK-PLAN.md b/docs/security/MONITORING-POST-INCIDENT-READBACK-PLAN.md new file mode 100644 index 000000000..db4787176 --- /dev/null +++ b/docs/security/MONITORING-POST-INCIDENT-READBACK-PLAN.md @@ -0,0 +1,90 @@ +# IwoooS Monitoring / Alerting / Observability 事故後回讀計畫 + +| 項目 | 內容 | +|------|------| +| 日期 | 2026-06-15 | +| 狀態 | `post_incident_readback_plan_ready_no_runtime_action` | +| 工具 | `scripts/security/monitoring-post-incident-readback-plan.py` | +| Snapshot | `docs/security/monitoring-post-incident-readback-plan.snapshot.json` | +| 來源 | `docs/security/monitoring-owner-response-acceptance.snapshot.json` | +| runtime gate | `0` | + +## 1. 目的 + +此計畫把 Monitoring / Alerting / Observability 的事故後回讀從「服務看起來恢復」推進成可重跑、可審查、可拒收的只讀帳本。 + +它處理的風險不是替正式監控系統下指令，而是先定義未來 owner 必須提供哪些脫敏 ref，才能說明誰改了告警 / receiver / silence、何時異常、改前改後 alert state、receiver 是否真的收到、stale / silence 是否造成 false green、如何 rollback、如何防再發。 + +本 artifact 不連 live Prometheus、不 reload Alertmanager、不套用 Grafana / SigNoz / Sentry / Langfuse、不 reload OTEL、不改 receiver route、不建立 silence、不送 Telegram、不 fire live alert、不跑 alert chain smoke、不 SSH、不 kubectl、不讀 secret value、不保存 raw alert payload、不寫 production。 + +## 2. 固定數字 + +| 指標 | 數值 | +|------|------| +| readback candidate | `60` | +| write-capable candidate | `11` | +| live evidence required candidate | `60` | +| alert rule readback candidate | `13` | +| deploy / reload readback candidate | `6` | +| required readback fields | `30` | +| reviewer checks | `28` | +| outcome lanes | `11` | +| blocked actions | `53` | +| post-incident readback received / accepted | `0 / 0` | +| runtime gate | `0` | + +## 3. 必填回讀欄位 + +每一個候選都必須補齊以下 metadata-only refs，才能進入 reviewer review： + +1. incident / change / outage ref。 +2. actor role / team attribution ref。 +3. change / outage time window ref。 +4. change intent 或 break-glass reason ref。 +5. before / after alert state refs。 +6. rule、datasource、scrape、remote write 或 exporter state ref。 +7. receiver route / notification policy / webhook / Telegram route state ref。 +8. reload / no-reload ref。 +9. receiver receipt readback ref。 +10. stale / pending / resolved review ref。 +11. silence / mute / dedup / inhibit / maintenance rule review ref。 +12. dashboard / trace / log freshness ref。 +13. notification delivery metadata ref。 +14. alert chain health readback ref。 +15. cross-project sync ref。 +16. rollback / disable validation ref。 +17. post-change monitoring ref。 +18. independent postcheck readback ref。 +19. recurrence guard ref。 +20. maintenance window、rollback owner、followup owner。 +21. redacted evidence refs、no-secret-value、no-raw-payload、no-false-green、receipt-not-route-only、independent-postcheck 與 noise-budget / silence-owner attestation。 + +## 4. Reviewer 檢查 + +Reviewer 必須確認來源 snapshot 是目前版本，並逐項檢查 actor、時間窗、變更意圖、before / after alert state、rule / datasource / scrape state、receiver route state、reload / no-reload、receiver receipt、stale / silence review、dashboard / trace / log freshness、notification metadata、alert chain health、cross-project sync、rollback、post-change monitoring、independent postcheck、recurrence guard、maintenance window、noise budget owner、脫敏 ref、secret absence、raw payload absence、no-false-green、runtime stays zero 與 count transition safe。 + +不能把 route `200`、dashboard up、container up、receiver reachable、CD success 或 UI 可見視為告警鏈路驗收。 + +## 5. 分流 + +| lane | 用途 | +|------|------| +| `waiting_post_incident_readback` | 尚未收到回讀包；所有 accepted / runtime count 維持 `0` | +| `request_actor_or_time_supplement` | 缺 actor、時間窗、intent 或 break-glass reason | +| `request_alert_state_supplement` | 缺 before / after alert state、rule、datasource、scrape、remote write 或 exporter state | +| `request_receiver_receipt_supplement` | 缺 receiver route state、receipt proof、delivery metadata 或 notification owner | +| `request_stale_silence_supplement` | 缺 stale / pending / resolved、silence、mute、dedup、inhibit 或 maintenance review | +| `request_freshness_or_alert_chain_supplement` | 缺 freshness、alert chain health、post-change monitoring 或 rollback validation | +| `quarantine_raw_payload` | 收到 secret、raw config、raw alert payload、raw receiver payload、未脫敏 log 或截圖時隔離 | +| `reject_false_green_claim` | 把 route 200、dashboard up、container up、receiver reachable、CD success 或 UI 可見當驗收時拒收 | +| `ready_for_monitoring_post_incident_review` | metadata 合格後只能進 reviewer review | +| `recurrence_guard_backfill_required` | 需補防再發 guard、owner review、change freeze、automation block 或 noise budget owner | +| `waiting_runtime_gate` | 即使 readback accepted，runtime gate 仍需獨立人工批准 | + +## 6. 固定禁止動作 + +本階段明確阻擋 `prometheus_reload`、`alertmanager_reload`、`grafana_dashboard_apply`、`signoz_rule_apply`、`sentry_deploy`、`langfuse_config_change`、`otel_collector_reload`、`receiver_route_change`、`silence_policy_change`、`telegram_send`、`notification_route_change`、`webhook_receiver_change`、`remote_write_change`、`exporter_deploy`、`live_alert_fire`、`alert_chain_smoke`、`ssh_read`、`ssh_write`、`kubectl_action`、`secret_value_collection`、`host_write`、`active_scan`、`production_write`、`raw payload storage`、`raw live config storage`、`full receiver payload storage`、`Bot token / DSN / webhook secret collection`、`alert rule / scrape config / dashboard / notification policy / silence / inhibit change` 與任何 action button。 + +## 7. 目前邊界 + +此 artifact 只代表事故後回讀計畫已建立。`post_incident_readback_received_count`、`post_incident_readback_accepted_count`、`receiver_receipt_readback_accepted_count`、`stale_pending_resolved_review_accepted_count`、`silence_mute_dedup_inhibit_review_accepted_count`、`alert_chain_health_readback_accepted_count`、`prometheus_reload_authorized_count`、`alertmanager_reload_authorized_count`、`telegram_send_authorized_count`、`alert_chain_smoke_authorized_count`、`runtime_gate_count` 與 `action_button_count` 仍全部維持 `0`。 diff --git a/docs/security/SECURITY-SUPPLY-CHAIN-PROGRESS.md b/docs/security/SECURITY-SUPPLY-CHAIN-PROGRESS.md index d3cc52f2f..63f8b7a01 100644 --- a/docs/security/SECURITY-SUPPLY-CHAIN-PROGRESS.md +++ b/docs/security/SECURITY-SUPPLY-CHAIN-PROGRESS.md @@ -44,6 +44,12 @@ 同步邊界：IwoooS headline 維持 `64%`，active runtime gate 維持 `0`；owner response、fallback order、dry-run、benchmark、cost review、privacy review、prompt redaction、quality gate、provider switch、external provider call、paid provider call、prompt send、live endpoint probe、secret collection、SDK install、model download、shadow / canary、production deploy、runtime gate 與 action buttons 全部仍為 `0 / false`。本段只更新文件、snapshot、guard、覆蓋矩陣、模型卡片脫敏與前端 marker，不呼叫模型、不切 provider、不改 proxy、不新增付費呼叫、不外送資料。 +## 0.00aaaaaaa 2026-06-15 Monitoring / Alerting / Observability 事故後回讀計畫 + +本輪把 Prometheus、Alertmanager、Grafana、SigNoz、Sentry、Langfuse、OTEL、receiver route、silence policy、Telegram Bot 與 alert chain smoke 從 owner response acceptance 再補一層事故後回讀計畫：`monitoring_post_incident_readback_plan_v1` 固定 `candidates=60`、`write_capable=11`、`live_evidence_required=60`、`alert_rule=13`、`deploy_or_reload=6`、`readback_fields=39`、`required_readback_fields=30`、`reviewer_checks=28`、`outcome_lanes=11`、`blocked_actions=53`，並讓 `monitoring_alerting_observability` 只讀治理成熟度 `68% -> 70%`。新增要求包含 actor、change / outage time window、change intent / break-glass、before / after alert state、rule / datasource / scrape state、receiver route state、reload / no-reload、receiver receipt、stale / pending / resolved review、silence / mute / dedup / inhibit review、dashboard / trace / log freshness、notification metadata、alert chain health、cross-project sync、rollback / disable validation、post-change monitoring、postcheck、recurrence guard 與 no-false-green attestation。 + +同步邊界：IwoooS headline 維持 `64%`，active runtime gate 維持 `0`；readback received / accepted、receiver receipt accepted、stale / silence accepted、alert chain health accepted、Prometheus reload、Alertmanager reload、Grafana import、SigNoz apply、Sentry deploy、Langfuse change、OTEL reload、receiver route change、silence change、Telegram send、live alert fire、alert chain smoke、secret collection、host write、production write、runtime gate 與 action buttons 全部仍為 `0 / false`。本段只更新文件、snapshot、guard、投影契約與前端 marker，不連 live monitoring、不 reload、不改告警規則、不送 Telegram、不打 live alert、不跑 alert-chain smoke。 + ## 0.00aaaaaa 2026-06-15 Monitoring / Alerting / Observability owner response acceptance 本輪把 Prometheus、Alertmanager、Grafana、SigNoz、Sentry、Langfuse、OTEL、receiver route、silence policy、Telegram Bot 與 alert chain smoke 從 owner request draft 推進到 owner response acceptance 只讀帳本：`monitoring_owner_response_acceptance_v1` 固定 `candidates=60`、`write_capable=11`、`live_evidence_required=60`、`acceptance_fields=38`、`owner_fields=14`、`reviewer_checks=23`、`outcome_lanes=12`、`blocked_actions=34`，並讓 `monitoring_alerting_observability` 只讀治理成熟度 `62% -> 68%`。這是 owner response 收件驗收與 no-false-green 回補帳本，不是 owner response received / accepted / rejected、Prometheus reload、Alertmanager reload、Grafana import、SigNoz apply、Sentry deploy、Langfuse change、OTEL reload、receiver route change、silence change、Telegram send、live alert fire、alert chain smoke、runtime approval package 或 runtime gate。 @@ -487,6 +493,7 @@ headline 要再往上，需要 S4.9 / S4.10 / S4.11 / S4.12 任一 owner respons | Backup / Restore / Escrow Owner Request Draft | 本地完成 | `backup-restore-owner-request-draft.snapshot.json` 已固定 `request_draft_count=38`、`write_capable_request_draft_count=27`、`live_evidence_required_request_count=38`、`request_field_count=24`、`required_owner_field_count=14`、`blocked_action_count=18`、`request_sent_count=0`、`owner_response_received_count=0`、`runtime_gate_count=0`，並由 `security-mirror-progress-guard.py` 鎖住 request ids、blocked actions 與 false flags | 這是 backup、restore、offsite、credential escrow、retention、Velero、alert / health 與 DR runbook 的人工送件前 request draft，不是 request sent、owner response received / accepted、live backup evidence、backup run、restore run、offsite sync、remote delete、escrow marker write、retention change、restic prune、rclone config、Velero restore / backup、secret collection、host write、production write 或 runtime gate；不需要 production browser smoke | | Backup / Restore / Escrow Owner Response Acceptance | 本地完成 | `backup-restore-owner-response-acceptance.snapshot.json` 已固定 `acceptance_candidate_count=38`、`write_capable_acceptance_candidate_count=27`、`live_evidence_required_candidate_count=38`、`acceptance_field_count=33`、`required_owner_field_count=23`、`reviewer_check_count=22`、`outcome_lane_count=9`、`blocked_action_count=31`、`owner_response_received_count=0`、`owner_response_accepted_count=0`、`runtime_gate_count=0`，並由 `security-mirror-progress-guard.py` 鎖住 candidate ids、reviewer checks、outcome lanes、blocked actions 與 false flags | 這是 backup、restore、offsite、credential escrow、retention、Velero、alert / health、freshness SLO、隔離還原目標、遠端刪除保護、保留期 runway、金庫非明文復原證明與 DR runbook 的 owner response 收件驗收帳本，不是 owner response received / accepted、live backup evidence、backup run、restore run、offsite sync、remote delete、escrow marker write、retention change、restic prune、rclone config、Velero restore / backup、secret collection、host write、production write 或 runtime gate；前端數字會隨本輪 commit / deploy 另行 smoke | | Monitoring / Alerting / Observability Owner Request Draft | 本地完成 | `monitoring-owner-request-draft.snapshot.json` 已固定 `request_draft_count=60`、`write_capable_request_draft_count=11`、`live_evidence_required_request_count=60`、`request_field_count=24`、`required_owner_field_count=14`、`blocked_action_count=24`、`request_sent_count=0`、`owner_response_received_count=0`、`runtime_gate_count=0`，並由 `security-mirror-progress-guard.py` 鎖住 request ids、blocked actions 與 false flags | 這是 Prometheus、Alertmanager、Grafana、SigNoz、Sentry、Langfuse、OTEL、Telegram / notification policy、deploy / reload scripts 與 alert chain smoke 的人工送件前 request draft，不是 request sent、owner response received / accepted、live evidence、Prometheus reload、Alertmanager reload、Grafana import、SigNoz apply、Sentry deploy、Langfuse change、OTEL reload、receiver route change、silence change、Telegram send、live alert fire、alert chain smoke、secret collection、host write、production write 或 runtime gate；不需要 production browser smoke | +| Monitoring / Alerting / Observability Post-incident Readback Plan | 本地完成 | `monitoring-post-incident-readback-plan.snapshot.json` 已固定 `readback_candidate_count=60`、`write_capable_readback_candidate_count=11`、`live_evidence_required_readback_candidate_count=60`、`alert_rule_readback_candidate_count=13`、`deploy_or_reload_readback_candidate_count=6`、`required_readback_field_count=30`、`reviewer_check_count=28`、`outcome_lane_count=11`、`blocked_action_count=53`、`post_incident_readback_received_count=0`、`post_incident_readback_accepted_count=0`、`runtime_gate_count=0`，並由 `security-mirror-progress-guard.py` 鎖住 readback ids、reviewer checks、outcome lanes、blocked actions 與 false flags | 這是監控 / 告警事故後回讀計畫，不是 owner response received / accepted、live evidence、Prometheus reload、Alertmanager reload、Grafana import、SigNoz apply、Sentry deploy、Langfuse change、OTEL reload、receiver route change、silence change、Telegram send、live alert fire、alert chain smoke、secret collection、host write、production write 或 runtime gate；前端數字會隨本輪 commit / deploy 另行 smoke | | S3 approval gate | 進行中 | `security_approval_gate_v1` 已建立 8 個人工 gate items：7 pending、1 block candidate、0 approved | 不得繞過人工批准；批准後仍需 follow-up runtime gate | | S3.0 人工批准 Gate 契約 | 完成草案 | 定義批准範圍、決策選項、required reviewers、still forbidden 與 follow-up runtime gate | AwoooP 可記錄決策，不可執行 gate item | | S3.1 人工決策紀錄契約 | 完成草案 | `security_approval_decision_record_v1` 已建立；目前 0 筆 decision records、0 個 runtime action 授權 | AwoooP 可稽核決策，不可把決策當執行 | diff --git a/docs/security/high-value-config-control-coverage.snapshot.json b/docs/security/high-value-config-control-coverage.snapshot.json index 1035194b5..e98c522cc 100644 --- a/docs/security/high-value-config-control-coverage.snapshot.json +++ b/docs/security/high-value-config-control-coverage.snapshot.json @@ -330,9 +330,9 @@ "action_buttons_allowed": false, "category_id": "monitoring_alerting_observability", "control_tier": "C1", - "coverage_percent": 68, - "coverage_status": "alert_chain_no_false_green_backfill_ready_needs_live_evidence_receipt", - "current_gap": "已固定 60 份 monitoring / alerting / observability owner response acceptance candidate，並新增告警鏈路 no-false-green 回補欄位；仍缺 owner response、live config hash、rule diff、receiver diff、receipt proof、stale / silence review、post-reload readback、noise budget owner 與 maintenance window。", + "coverage_percent": 70, + "coverage_status": "post_incident_readback_plan_ready_needs_monitoring_owner_evidence", + "current_gap": "已固定 60 份 monitoring / alerting / observability owner response acceptance candidate，並新增事故後回讀計畫；actor、時間窗、改前改後 alert state、rule / datasource / scrape、receiver route、reload / no-reload、receiver receipt、stale / silence、dashboard / trace / log freshness、notification delivery、alert chain health、cross-project sync、rollback、post-change monitoring、防再發與 no-false-green 已納入只讀帳本；仍缺 owner response、事故回讀包、live config hash、rule diff、receiver diff、receipt proof、stale / silence review、post-reload readback、noise budget owner 與 maintenance window。", "evidence_refs": [ "docs/security/IWOOOS-CONFIG-CONTROL-INVENTORY.md", "docs/security/MONITORING-ALERTING-OBSERVABILITY-INVENTORY.md", @@ -341,10 +341,12 @@ "docs/security/monitoring-owner-request-draft.snapshot.json", "docs/security/MONITORING-OWNER-RESPONSE-ACCEPTANCE.md", "docs/security/monitoring-owner-response-acceptance.snapshot.json", + "docs/security/MONITORING-POST-INCIDENT-READBACK-PLAN.md", + "docs/security/monitoring-post-incident-readback-plan.snapshot.json", "docs/schemas/monitoring_alerting_observability_inventory_v1.schema.json" ], "label": "Prometheus / Alertmanager / Grafana / SigNoz / Sentry / Langfuse", - "next_owner_action": "補 Prometheus / Alertmanager / Grafana / SigNoz / Sentry / Langfuse / Telegram owner、live drift evidence、reload window、receiver owner、receipt proof、stale alert review、silence / dedup review、route smoke plan、noise budget、rollback owner 與 no-secret-value evidence。", + "next_owner_action": "補 Prometheus / Alertmanager / Grafana / SigNoz / Sentry / Langfuse / Telegram 事故回讀包：owner、actor role / team、change / outage time window、before / after alert state、rule / datasource / scrape state、receiver route state、reload / no-reload、receiver receipt、stale alert review、silence / dedup / inhibit review、dashboard / trace / log freshness、notification metadata、alert chain health、cross-project sync、rollback owner、post-change monitoring、recurrence guard、noise budget 與 no-secret-value evidence。", "owner_response_accepted": false, "owner_response_received": false, "owner_response_required": true, @@ -647,8 +649,8 @@ "websocket_route_change_authorized": false, "workflow_modification_authorized": false }, - "generated_at": "2026-06-15T22:10:00+08:00", - "git_commit": "915cbaac", + "generated_at": "2026-06-15T23:45:00+08:00", + "git_commit": "dfee85c0", "lowest_coverage_categories": [ { "category_id": "backup_restore_credential", diff --git a/docs/security/iwooos-posture-projection.snapshot.json b/docs/security/iwooos-posture-projection.snapshot.json index 548348a73..d56c1aef0 100644 --- a/docs/security/iwooos-posture-projection.snapshot.json +++ b/docs/security/iwooos-posture-projection.snapshot.json @@ -8434,7 +8434,9 @@ "docs/security/host-service-post-incident-readback-plan.snapshot.json", "docs/security/HOST-SERVICE-POST-INCIDENT-READBACK-PLAN.md", "docs/security/K8S-ARGOCD-POST-INCIDENT-READBACK-PLAN.md", - "docs/security/k8s-argocd-post-incident-readback-plan.snapshot.json" + "docs/security/k8s-argocd-post-incident-readback-plan.snapshot.json", + "docs/security/monitoring-post-incident-readback-plan.snapshot.json", + "docs/security/MONITORING-POST-INCIDENT-READBACK-PLAN.md" ], "status": "draft", "summary": { @@ -8444,6 +8446,36 @@ "agent_bounty_security_onboarding_first_layer": true, "agent_bounty_security_onboarding_item_count": 7, "agent_bounty_security_onboarding_runtime_gate_count": 0, + "ai_provider_model_routing_coverage_percent": 64, + "ai_provider_owner_response_acceptance_acceptance_field_count": 37, + "ai_provider_owner_response_acceptance_benchmark_result_accepted_count": 0, + "ai_provider_owner_response_acceptance_blocked_action_count": 38, + "ai_provider_owner_response_acceptance_candidate_count": 8, + "ai_provider_owner_response_acceptance_cost_review_accepted_count": 0, + "ai_provider_owner_response_acceptance_coverage_percent_after_acceptance": 64, + "ai_provider_owner_response_acceptance_data_egress_candidate_count": 6, + "ai_provider_owner_response_acceptance_dry_run_result_accepted_count": 0, + "ai_provider_owner_response_acceptance_external_provider_call_authorized_count": 0, + "ai_provider_owner_response_acceptance_fallback_order_accepted_count": 0, + "ai_provider_owner_response_acceptance_live_endpoint_probe_authorized_count": 0, + "ai_provider_owner_response_acceptance_live_evidence_required_candidate_count": 6, + "ai_provider_owner_response_acceptance_outcome_lane_count": 10, + "ai_provider_owner_response_acceptance_owner_response_accepted_count": 0, + "ai_provider_owner_response_acceptance_owner_response_received_count": 0, + "ai_provider_owner_response_acceptance_paid_provider_call_authorized_count": 0, + "ai_provider_owner_response_acceptance_paid_provider_related_candidate_count": 5, + "ai_provider_owner_response_acceptance_privacy_review_accepted_count": 0, + "ai_provider_owner_response_acceptance_prompt_redaction_accepted_count": 0, + "ai_provider_owner_response_acceptance_prompt_send_authorized_count": 0, + "ai_provider_owner_response_acceptance_provider_switch_authorized_count": 0, + "ai_provider_owner_response_acceptance_quality_gate_accepted_count": 0, + "ai_provider_owner_response_acceptance_required_owner_field_count": 24, + "ai_provider_owner_response_acceptance_reviewer_check_count": 24, + "ai_provider_owner_response_acceptance_rollback_owner_accepted_count": 0, + "ai_provider_owner_response_acceptance_runtime_gate_count": 0, + "ai_provider_owner_response_acceptance_secret_handling_accepted_count": 0, + "ai_provider_owner_response_acceptance_secret_value_collection_allowed_count": 0, + "ai_provider_owner_response_acceptance_write_capable_candidate_count": 5, "all_product_coverage_snapshot_default_summary_mode": "compact_first", "all_product_coverage_snapshot_detail_ledger_collapsed": true, "all_product_coverage_snapshot_read_only_count": 8, @@ -8550,6 +8582,7 @@ "decision_runway_owner_response_received_count": 0, "decision_runway_runtime_gate_count": 0, "decision_runway_step_count": 5, + "docker_compose_systemd_host_config_coverage_percent": 64, "domain_tls_certbot_inventory_accepted_response_count": 0, "domain_tls_certbot_inventory_acme_challenge_domain_count": 7, "domain_tls_certbot_inventory_action_buttons_allowed": false, @@ -8681,6 +8714,23 @@ "host_owner_decision_record_writeup_review_outcome_lane_count": 7, "host_owner_decision_review_checklist_item_count": 7, "host_owner_decision_review_outcome_lane_count": 7, + "host_service_change_evidence_acceptance_accepted_count": 0, + "host_service_change_evidence_acceptance_blocked_action_count": 39, + "host_service_change_evidence_acceptance_candidate_count": 9, + "host_service_change_evidence_acceptance_change_evidence_field_count": 45, + "host_service_change_evidence_acceptance_compose_stack_state_accepted_count": 0, + "host_service_change_evidence_acceptance_coverage_percent_after_acceptance": 62, + "host_service_change_evidence_acceptance_docker_daemon_state_accepted_count": 0, + "host_service_change_evidence_acceptance_failed_unit_review_accepted_count": 0, + "host_service_change_evidence_acceptance_operator_notification_accepted_count": 0, + "host_service_change_evidence_acceptance_outcome_lane_count": 10, + "host_service_change_evidence_acceptance_port_binding_state_accepted_count": 0, + "host_service_change_evidence_acceptance_public_route_recovery_accepted_count": 0, + "host_service_change_evidence_acceptance_received_count": 0, + "host_service_change_evidence_acceptance_required_evidence_field_count": 25, + "host_service_change_evidence_acceptance_reviewer_check_count": 26, + "host_service_change_evidence_acceptance_runtime_gate_count": 0, + "host_service_change_evidence_acceptance_systemd_unit_state_accepted_count": 0, "host_service_config_inventory_action_button_count": 0, "host_service_config_inventory_coverage_percent_after_inventory": 50, "host_service_config_inventory_coverage_percent_before_inventory": 42, @@ -8700,23 +8750,40 @@ "host_service_config_inventory_surface_count": 9, "host_service_config_inventory_systemd_restart_surface_count": 1, "host_service_config_inventory_write_capable_surface_count": 3, - "host_service_change_evidence_acceptance_candidate_count": 9, - "host_service_change_evidence_acceptance_change_evidence_field_count": 45, - "host_service_change_evidence_acceptance_required_evidence_field_count": 25, - "host_service_change_evidence_acceptance_reviewer_check_count": 26, - "host_service_change_evidence_acceptance_outcome_lane_count": 10, - "host_service_change_evidence_acceptance_blocked_action_count": 39, - "host_service_change_evidence_acceptance_received_count": 0, - "host_service_change_evidence_acceptance_accepted_count": 0, - "host_service_change_evidence_acceptance_docker_daemon_state_accepted_count": 0, - "host_service_change_evidence_acceptance_compose_stack_state_accepted_count": 0, - "host_service_change_evidence_acceptance_systemd_unit_state_accepted_count": 0, - "host_service_change_evidence_acceptance_failed_unit_review_accepted_count": 0, - "host_service_change_evidence_acceptance_port_binding_state_accepted_count": 0, - "host_service_change_evidence_acceptance_public_route_recovery_accepted_count": 0, - "host_service_change_evidence_acceptance_operator_notification_accepted_count": 0, - "host_service_change_evidence_acceptance_runtime_gate_count": 0, - "host_service_change_evidence_acceptance_coverage_percent_after_acceptance": 62, + "host_service_post_incident_readback_plan_action_button_count": 0, + "host_service_post_incident_readback_plan_actor_attribution_accepted_count": 0, + "host_service_post_incident_readback_plan_admin_route_recovery_accepted_count": 0, + "host_service_post_incident_readback_plan_agent_provider_health_accepted_count": 0, + "host_service_post_incident_readback_plan_before_after_state_accepted_count": 0, + "host_service_post_incident_readback_plan_blocked_action_count": 41, + "host_service_post_incident_readback_plan_candidate_count": 9, + "host_service_post_incident_readback_plan_compose_stack_state_accepted_count": 0, + "host_service_post_incident_readback_plan_coverage_percent_after_readback_plan": 64, + "host_service_post_incident_readback_plan_cross_project_sync_accepted_count": 0, + "host_service_post_incident_readback_plan_cross_project_sync_required_candidate_count": 9, + "host_service_post_incident_readback_plan_docker_daemon_state_accepted_count": 0, + "host_service_post_incident_readback_plan_failed_unit_review_accepted_count": 0, + "host_service_post_incident_readback_plan_first_layer": true, + "host_service_post_incident_readback_plan_live_evidence_required_candidate_count": 8, + "host_service_post_incident_readback_plan_monitoring_alert_accepted_count": 0, + "host_service_post_incident_readback_plan_no_false_green_accepted_count": 0, + "host_service_post_incident_readback_plan_no_false_green_required_candidate_count": 9, + "host_service_post_incident_readback_plan_operator_notification_accepted_count": 0, + "host_service_post_incident_readback_plan_outcome_lane_count": 10, + "host_service_post_incident_readback_plan_port_binding_state_accepted_count": 0, + "host_service_post_incident_readback_plan_post_incident_readback_accepted_count": 0, + "host_service_post_incident_readback_plan_post_incident_readback_received_count": 0, + "host_service_post_incident_readback_plan_postcheck_readback_accepted_count": 0, + "host_service_post_incident_readback_plan_public_route_recovery_accepted_count": 0, + "host_service_post_incident_readback_plan_readback_field_count": 36, + "host_service_post_incident_readback_plan_recovery_health_impact_review_required_candidate_count": 9, + "host_service_post_incident_readback_plan_recurrence_guard_accepted_count": 0, + "host_service_post_incident_readback_plan_required_readback_field_count": 28, + "host_service_post_incident_readback_plan_restoration_evidence_accepted_count": 0, + "host_service_post_incident_readback_plan_reviewer_check_count": 28, + "host_service_post_incident_readback_plan_runtime_gate_count": 0, + "host_service_post_incident_readback_plan_systemd_unit_state_accepted_count": 0, + "host_service_post_incident_readback_plan_write_capable_candidate_count": 3, "host_tool_evidence_chain_default_visible": false, "host_tool_evidence_chain_first_layer": true, "host_tool_evidence_chain_host_count": 3, @@ -8753,6 +8820,61 @@ "k8s_argocd_change_evidence_acceptance_source_manifest_file_count": 49, "k8s_argocd_change_evidence_acceptance_source_yaml_manifest_file_count": 45, "k8s_argocd_change_evidence_acceptance_write_capable_candidate_count": 4, + "k8s_argocd_post_incident_readback_plan_action_button_count": 0, + "k8s_argocd_post_incident_readback_plan_actor_attribution_accepted_count": 0, + "k8s_argocd_post_incident_readback_plan_ai_provider_monitoring_impact_accepted_count": 0, + "k8s_argocd_post_incident_readback_plan_argocd_api_read_authorized_count": 0, + "k8s_argocd_post_incident_readback_plan_argocd_app_health_accepted_count": 0, + "k8s_argocd_post_incident_readback_plan_argocd_sync_authorized_count": 0, + "k8s_argocd_post_incident_readback_plan_argocd_sync_status_accepted_count": 0, + "k8s_argocd_post_incident_readback_plan_backup_restore_impact_accepted_count": 0, + "k8s_argocd_post_incident_readback_plan_blocked_action_count": 41, + "k8s_argocd_post_incident_readback_plan_c0_candidate_count": 3, + "k8s_argocd_post_incident_readback_plan_c1_candidate_count": 1, + "k8s_argocd_post_incident_readback_plan_candidate_count": 4, + "k8s_argocd_post_incident_readback_plan_coverage_percent_after_readback_plan": 66, + "k8s_argocd_post_incident_readback_plan_cronjob_schedule_accepted_count": 0, + "k8s_argocd_post_incident_readback_plan_cross_project_sync_accepted_count": 0, + "k8s_argocd_post_incident_readback_plan_cross_project_sync_required_candidate_count": 4, + "k8s_argocd_post_incident_readback_plan_degraded_or_pending_review_required_candidate_count": 4, + "k8s_argocd_post_incident_readback_plan_degraded_state_accepted_count": 0, + "k8s_argocd_post_incident_readback_plan_drift_or_schedule_review_required_candidate_count": 4, + "k8s_argocd_post_incident_readback_plan_drift_scanner_accepted_count": 0, + "k8s_argocd_post_incident_readback_plan_event_summary_accepted_count": 0, + "k8s_argocd_post_incident_readback_plan_first_layer": true, + "k8s_argocd_post_incident_readback_plan_helm_action_authorized_count": 0, + "k8s_argocd_post_incident_readback_plan_image_pull_or_scheduling_accepted_count": 0, + "k8s_argocd_post_incident_readback_plan_kubectl_action_authorized_count": 0, + "k8s_argocd_post_incident_readback_plan_live_cluster_read_authorized_count": 0, + "k8s_argocd_post_incident_readback_plan_metrics_alert_accepted_count": 0, + "k8s_argocd_post_incident_readback_plan_network_policy_change_authorized_count": 0, + "k8s_argocd_post_incident_readback_plan_network_policy_service_impact_accepted_count": 0, + "k8s_argocd_post_incident_readback_plan_no_false_green_accepted_count": 0, + "k8s_argocd_post_incident_readback_plan_no_false_green_required_candidate_count": 4, + "k8s_argocd_post_incident_readback_plan_nodeport_change_authorized_count": 0, + "k8s_argocd_post_incident_readback_plan_operator_notification_accepted_count": 0, + "k8s_argocd_post_incident_readback_plan_outcome_lane_count": 10, + "k8s_argocd_post_incident_readback_plan_pending_workload_accepted_count": 0, + "k8s_argocd_post_incident_readback_plan_post_incident_readback_accepted_count": 0, + "k8s_argocd_post_incident_readback_plan_post_incident_readback_received_count": 0, + "k8s_argocd_post_incident_readback_plan_postcheck_readback_accepted_count": 0, + "k8s_argocd_post_incident_readback_plan_production_write_authorized_count": 0, + "k8s_argocd_post_incident_readback_plan_public_admin_route_impact_accepted_count": 0, + "k8s_argocd_post_incident_readback_plan_rbac_change_authorized_count": 0, + "k8s_argocd_post_incident_readback_plan_rbac_serviceaccount_impact_accepted_count": 0, + "k8s_argocd_post_incident_readback_plan_readback_field_count": 36, + "k8s_argocd_post_incident_readback_plan_recovery_or_still_degraded_accepted_count": 0, + "k8s_argocd_post_incident_readback_plan_recurrence_guard_accepted_count": 0, + "k8s_argocd_post_incident_readback_plan_required_readback_field_count": 31, + "k8s_argocd_post_incident_readback_plan_reviewer_check_count": 28, + "k8s_argocd_post_incident_readback_plan_rollout_before_after_accepted_count": 0, + "k8s_argocd_post_incident_readback_plan_route_ai_monitoring_impact_required_candidate_count": 4, + "k8s_argocd_post_incident_readback_plan_route_smoke_authorized_count": 0, + "k8s_argocd_post_incident_readback_plan_runtime_gate_count": 0, + "k8s_argocd_post_incident_readback_plan_secret_metadata_parity_accepted_count": 0, + "k8s_argocd_post_incident_readback_plan_secret_value_collection_allowed_count": 0, + "k8s_argocd_post_incident_readback_plan_write_capable_candidate_count": 4, + "k8s_production_gitops_coverage_percent": 66, "kali_maintenance_readiness_item_count": 6, "long_form_sections_default_collapsed": true, "monitoring_alerting_observability_inventory_action_button_count": 0, @@ -8790,6 +8912,7 @@ "monitoring_owner_response_acceptance_acceptance_field_count": 38, "monitoring_owner_response_acceptance_blocked_action_count": 34, "monitoring_owner_response_acceptance_candidate_count": 60, + "monitoring_owner_response_acceptance_coverage_percent_after_backfill": 68, "monitoring_owner_response_acceptance_cross_project_notification_accepted_count": 0, "monitoring_owner_response_acceptance_false_green_risk_review_accepted_count": 0, "monitoring_owner_response_acceptance_outcome_lane_count": 12, @@ -8799,8 +8922,26 @@ "monitoring_owner_response_acceptance_runtime_gate_count": 0, "monitoring_owner_response_acceptance_silence_or_dedup_review_accepted_count": 0, "monitoring_owner_response_acceptance_stale_alert_review_accepted_count": 0, - "monitoring_owner_response_acceptance_coverage_percent_after_backfill": 68, + "monitoring_post_incident_readback_plan_action_button_count": 0, + "monitoring_post_incident_readback_plan_alert_chain_health_readback_accepted_count": 0, + "monitoring_post_incident_readback_plan_alert_rule_candidate_count": 13, + "monitoring_post_incident_readback_plan_blocked_action_count": 53, + "monitoring_post_incident_readback_plan_candidate_count": 60, + "monitoring_post_incident_readback_plan_coverage_percent_after_readback_plan": 70, + "monitoring_post_incident_readback_plan_deploy_or_reload_candidate_count": 6, + "monitoring_post_incident_readback_plan_live_evidence_required_candidate_count": 60, + "monitoring_post_incident_readback_plan_outcome_lane_count": 11, + "monitoring_post_incident_readback_plan_post_incident_readback_accepted_count": 0, + "monitoring_post_incident_readback_plan_post_incident_readback_received_count": 0, + "monitoring_post_incident_readback_plan_receiver_receipt_readback_accepted_count": 0, + "monitoring_post_incident_readback_plan_required_readback_field_count": 30, + "monitoring_post_incident_readback_plan_reviewer_check_count": 28, + "monitoring_post_incident_readback_plan_runtime_gate_count": 0, + "monitoring_post_incident_readback_plan_silence_mute_dedup_inhibit_review_accepted_count": 0, + "monitoring_post_incident_readback_plan_stale_pending_resolved_review_accepted_count": 0, + "monitoring_post_incident_readback_plan_write_capable_candidate_count": 11, "nav_entry_added": true, + "nginx_public_gateway_coverage_percent": 92, "operator_journey_step_count": 6, "owner_evidence_readiness_item_count": 7, "owner_response_next_action_focus_item_count": 4, @@ -8855,6 +8996,44 @@ "public_frontend_sensitive_surface_guard_forbidden_pattern_count": 12, "public_frontend_sensitive_surface_guard_runtime_gate_count": 0, "public_frontend_sensitive_surface_guard_violation_count": 0, + "public_gateway_post_incident_readback_plan_action_button_count": 0, + "public_gateway_post_incident_readback_plan_actor_attribution_accepted_count": 0, + "public_gateway_post_incident_readback_plan_ai_provider_impact_accepted_count": 0, + "public_gateway_post_incident_readback_plan_before_after_route_state_accepted_count": 0, + "public_gateway_post_incident_readback_plan_blocked_action_count": 41, + "public_gateway_post_incident_readback_plan_c0_candidate_count": 2, + "public_gateway_post_incident_readback_plan_candidate_count": 3, + "public_gateway_post_incident_readback_plan_certbot_renew_authorized_count": 0, + "public_gateway_post_incident_readback_plan_coverage_percent_after_readback_plan": 92, + "public_gateway_post_incident_readback_plan_cross_project_sync_accepted_count": 0, + "public_gateway_post_incident_readback_plan_dns_tls_probe_authorized_count": 0, + "public_gateway_post_incident_readback_plan_host_live_conf_read_authorized_count": 0, + "public_gateway_post_incident_readback_plan_monitoring_alert_accepted_count": 0, + "public_gateway_post_incident_readback_plan_nginx_reload_authorized_count": 0, + "public_gateway_post_incident_readback_plan_nginx_reload_or_no_reload_accepted_count": 0, + "public_gateway_post_incident_readback_plan_nginx_test_authorized_count": 0, + "public_gateway_post_incident_readback_plan_nginx_test_readback_accepted_count": 0, + "public_gateway_post_incident_readback_plan_no_false_green_accepted_count": 0, + "public_gateway_post_incident_readback_plan_operator_notification_accepted_count": 0, + "public_gateway_post_incident_readback_plan_outcome_lane_count": 10, + "public_gateway_post_incident_readback_plan_post_change_monitoring_accepted_count": 0, + "public_gateway_post_incident_readback_plan_post_incident_readback_accepted_count": 0, + "public_gateway_post_incident_readback_plan_post_incident_readback_received_count": 0, + "public_gateway_post_incident_readback_plan_postcheck_readback_accepted_count": 0, + "public_gateway_post_incident_readback_plan_public_admin_api_route_impact_accepted_count": 0, + "public_gateway_post_incident_readback_plan_public_gateway_reload_authorized_count": 0, + "public_gateway_post_incident_readback_plan_recurrence_guard_accepted_count": 0, + "public_gateway_post_incident_readback_plan_required_readback_field_count": 30, + "public_gateway_post_incident_readback_plan_reviewer_check_count": 28, + "public_gateway_post_incident_readback_plan_rollback_validation_accepted_count": 0, + "public_gateway_post_incident_readback_plan_route_smoke_authorized_count": 0, + "public_gateway_post_incident_readback_plan_route_smoke_readback_accepted_count": 0, + "public_gateway_post_incident_readback_plan_runtime_gate_count": 0, + "public_gateway_post_incident_readback_plan_source_live_diff_state_accepted_count": 0, + "public_gateway_post_incident_readback_plan_tls_acme_readback_accepted_count": 0, + "public_gateway_post_incident_readback_plan_upstream_health_accepted_count": 0, + "public_gateway_post_incident_readback_plan_websocket_readback_accepted_count": 0, + "public_gateway_post_incident_readback_plan_write_capable_candidate_count": 3, "public_gateway_preflight_acme_challenge_domain_count": 7, "public_gateway_preflight_action_button_count": 0, "public_gateway_preflight_admin_route_domain_count": 1, @@ -8974,6 +9153,7 @@ "s4_9_request_draft_package_runtime_gate_count": 0, "s4_9_request_draft_package_template_ready_count": 5, "source_control_primary_readiness_item_count": 6, + "ssh_firewall_network_access_coverage_percent": 64, "ssh_network_access_inventory_action_button_count": 0, "ssh_network_access_inventory_coverage_percent_after_inventory": 54, "ssh_network_access_inventory_coverage_percent_before_inventory": 48, @@ -9010,6 +9190,35 @@ "ssh_network_owner_response_acceptance_runtime_gate_count": 0, "ssh_network_owner_response_acceptance_wireguard_cutover_accepted_count": 0, "ssh_network_owner_response_acceptance_write_capable_candidate_count": 6, + "ssh_network_post_incident_readback_plan_action_button_count": 0, + "ssh_network_post_incident_readback_plan_actor_attribution_accepted_count": 0, + "ssh_network_post_incident_readback_plan_ai_provider_impact_accepted_count": 0, + "ssh_network_post_incident_readback_plan_before_after_state_accepted_count": 0, + "ssh_network_post_incident_readback_plan_blocked_action_count": 34, + "ssh_network_post_incident_readback_plan_candidate_count": 14, + "ssh_network_post_incident_readback_plan_coverage_percent_after_readback_plan": 64, + "ssh_network_post_incident_readback_plan_cross_project_sync_accepted_count": 0, + "ssh_network_post_incident_readback_plan_cross_project_sync_required_candidate_count": 14, + "ssh_network_post_incident_readback_plan_first_layer": true, + "ssh_network_post_incident_readback_plan_health_impact_review_required_candidate_count": 14, + "ssh_network_post_incident_readback_plan_monitoring_alert_impact_accepted_count": 0, + "ssh_network_post_incident_readback_plan_no_false_green_accepted_count": 0, + "ssh_network_post_incident_readback_plan_operator_notification_accepted_count": 0, + "ssh_network_post_incident_readback_plan_outcome_lane_count": 10, + "ssh_network_post_incident_readback_plan_policy_or_exposure_candidate_count": 5, + "ssh_network_post_incident_readback_plan_post_incident_readback_accepted_count": 0, + "ssh_network_post_incident_readback_plan_post_incident_readback_received_count": 0, + "ssh_network_post_incident_readback_plan_postcheck_readback_accepted_count": 0, + "ssh_network_post_incident_readback_plan_public_route_impact_accepted_count": 0, + "ssh_network_post_incident_readback_plan_readback_field_count": 30, + "ssh_network_post_incident_readback_plan_recurrence_guard_accepted_count": 0, + "ssh_network_post_incident_readback_plan_recurrence_guard_required_candidate_count": 14, + "ssh_network_post_incident_readback_plan_required_readback_field_count": 24, + "ssh_network_post_incident_readback_plan_restoration_evidence_accepted_count": 0, + "ssh_network_post_incident_readback_plan_reviewer_check_count": 24, + "ssh_network_post_incident_readback_plan_runtime_gate_count": 0, + "ssh_network_post_incident_readback_plan_service_dependency_accepted_count": 0, + "ssh_network_post_incident_readback_plan_write_capable_candidate_count": 6, "topology_atlas_above_gate_radar": true, "topology_atlas_first_layer": true, "topology_atlas_interactive_lens_allowed": true, @@ -9036,196 +9245,7 @@ "vibework_security_onboarding_runtime_gate_count": 0, "visual_command_dashboard_default_visible": false, "visual_command_dashboard_first_layer": true, - "visual_command_dashboard_widget_count": 14, - "ai_provider_owner_response_acceptance_candidate_count": 8, - "ai_provider_owner_response_acceptance_write_capable_candidate_count": 5, - "ai_provider_owner_response_acceptance_paid_provider_related_candidate_count": 5, - "ai_provider_owner_response_acceptance_data_egress_candidate_count": 6, - "ai_provider_owner_response_acceptance_live_evidence_required_candidate_count": 6, - "ai_provider_owner_response_acceptance_acceptance_field_count": 37, - "ai_provider_owner_response_acceptance_required_owner_field_count": 24, - "ai_provider_owner_response_acceptance_reviewer_check_count": 24, - "ai_provider_owner_response_acceptance_outcome_lane_count": 10, - "ai_provider_owner_response_acceptance_blocked_action_count": 38, - "ai_provider_owner_response_acceptance_owner_response_received_count": 0, - "ai_provider_owner_response_acceptance_owner_response_accepted_count": 0, - "ai_provider_owner_response_acceptance_dry_run_result_accepted_count": 0, - "ai_provider_owner_response_acceptance_benchmark_result_accepted_count": 0, - "ai_provider_owner_response_acceptance_cost_review_accepted_count": 0, - "ai_provider_owner_response_acceptance_privacy_review_accepted_count": 0, - "ai_provider_owner_response_acceptance_fallback_order_accepted_count": 0, - "ai_provider_owner_response_acceptance_prompt_redaction_accepted_count": 0, - "ai_provider_owner_response_acceptance_secret_handling_accepted_count": 0, - "ai_provider_owner_response_acceptance_quality_gate_accepted_count": 0, - "ai_provider_owner_response_acceptance_rollback_owner_accepted_count": 0, - "ai_provider_owner_response_acceptance_provider_switch_authorized_count": 0, - "ai_provider_owner_response_acceptance_external_provider_call_authorized_count": 0, - "ai_provider_owner_response_acceptance_paid_provider_call_authorized_count": 0, - "ai_provider_owner_response_acceptance_prompt_send_authorized_count": 0, - "ai_provider_owner_response_acceptance_live_endpoint_probe_authorized_count": 0, - "ai_provider_owner_response_acceptance_secret_value_collection_allowed_count": 0, - "ai_provider_owner_response_acceptance_runtime_gate_count": 0, - "ai_provider_owner_response_acceptance_coverage_percent_after_acceptance": 64, - "ai_provider_model_routing_coverage_percent": 64, - "ssh_network_post_incident_readback_plan_first_layer": true, - "ssh_network_post_incident_readback_plan_candidate_count": 14, - "ssh_network_post_incident_readback_plan_write_capable_candidate_count": 6, - "ssh_network_post_incident_readback_plan_policy_or_exposure_candidate_count": 5, - "ssh_network_post_incident_readback_plan_health_impact_review_required_candidate_count": 14, - "ssh_network_post_incident_readback_plan_cross_project_sync_required_candidate_count": 14, - "ssh_network_post_incident_readback_plan_recurrence_guard_required_candidate_count": 14, - "ssh_network_post_incident_readback_plan_readback_field_count": 30, - "ssh_network_post_incident_readback_plan_required_readback_field_count": 24, - "ssh_network_post_incident_readback_plan_reviewer_check_count": 24, - "ssh_network_post_incident_readback_plan_outcome_lane_count": 10, - "ssh_network_post_incident_readback_plan_blocked_action_count": 34, - "ssh_network_post_incident_readback_plan_post_incident_readback_received_count": 0, - "ssh_network_post_incident_readback_plan_post_incident_readback_accepted_count": 0, - "ssh_network_post_incident_readback_plan_actor_attribution_accepted_count": 0, - "ssh_network_post_incident_readback_plan_before_after_state_accepted_count": 0, - "ssh_network_post_incident_readback_plan_service_dependency_accepted_count": 0, - "ssh_network_post_incident_readback_plan_public_route_impact_accepted_count": 0, - "ssh_network_post_incident_readback_plan_ai_provider_impact_accepted_count": 0, - "ssh_network_post_incident_readback_plan_monitoring_alert_impact_accepted_count": 0, - "ssh_network_post_incident_readback_plan_operator_notification_accepted_count": 0, - "ssh_network_post_incident_readback_plan_cross_project_sync_accepted_count": 0, - "ssh_network_post_incident_readback_plan_restoration_evidence_accepted_count": 0, - "ssh_network_post_incident_readback_plan_postcheck_readback_accepted_count": 0, - "ssh_network_post_incident_readback_plan_recurrence_guard_accepted_count": 0, - "ssh_network_post_incident_readback_plan_no_false_green_accepted_count": 0, - "ssh_network_post_incident_readback_plan_runtime_gate_count": 0, - "ssh_network_post_incident_readback_plan_action_button_count": 0, - "ssh_network_post_incident_readback_plan_coverage_percent_after_readback_plan": 64, - "ssh_firewall_network_access_coverage_percent": 64, - "host_service_post_incident_readback_plan_first_layer": true, - "host_service_post_incident_readback_plan_candidate_count": 9, - "host_service_post_incident_readback_plan_write_capable_candidate_count": 3, - "host_service_post_incident_readback_plan_live_evidence_required_candidate_count": 8, - "host_service_post_incident_readback_plan_recovery_health_impact_review_required_candidate_count": 9, - "host_service_post_incident_readback_plan_cross_project_sync_required_candidate_count": 9, - "host_service_post_incident_readback_plan_no_false_green_required_candidate_count": 9, - "host_service_post_incident_readback_plan_readback_field_count": 36, - "host_service_post_incident_readback_plan_required_readback_field_count": 28, - "host_service_post_incident_readback_plan_reviewer_check_count": 28, - "host_service_post_incident_readback_plan_outcome_lane_count": 10, - "host_service_post_incident_readback_plan_blocked_action_count": 41, - "host_service_post_incident_readback_plan_post_incident_readback_received_count": 0, - "host_service_post_incident_readback_plan_post_incident_readback_accepted_count": 0, - "host_service_post_incident_readback_plan_actor_attribution_accepted_count": 0, - "host_service_post_incident_readback_plan_before_after_state_accepted_count": 0, - "host_service_post_incident_readback_plan_docker_daemon_state_accepted_count": 0, - "host_service_post_incident_readback_plan_compose_stack_state_accepted_count": 0, - "host_service_post_incident_readback_plan_systemd_unit_state_accepted_count": 0, - "host_service_post_incident_readback_plan_failed_unit_review_accepted_count": 0, - "host_service_post_incident_readback_plan_port_binding_state_accepted_count": 0, - "host_service_post_incident_readback_plan_public_route_recovery_accepted_count": 0, - "host_service_post_incident_readback_plan_admin_route_recovery_accepted_count": 0, - "host_service_post_incident_readback_plan_agent_provider_health_accepted_count": 0, - "host_service_post_incident_readback_plan_monitoring_alert_accepted_count": 0, - "host_service_post_incident_readback_plan_operator_notification_accepted_count": 0, - "host_service_post_incident_readback_plan_cross_project_sync_accepted_count": 0, - "host_service_post_incident_readback_plan_restoration_evidence_accepted_count": 0, - "host_service_post_incident_readback_plan_postcheck_readback_accepted_count": 0, - "host_service_post_incident_readback_plan_recurrence_guard_accepted_count": 0, - "host_service_post_incident_readback_plan_no_false_green_accepted_count": 0, - "host_service_post_incident_readback_plan_runtime_gate_count": 0, - "host_service_post_incident_readback_plan_action_button_count": 0, - "host_service_post_incident_readback_plan_coverage_percent_after_readback_plan": 64, - "docker_compose_systemd_host_config_coverage_percent": 64, - "k8s_argocd_post_incident_readback_plan_first_layer": true, - "k8s_argocd_post_incident_readback_plan_candidate_count": 4, - "k8s_argocd_post_incident_readback_plan_c0_candidate_count": 3, - "k8s_argocd_post_incident_readback_plan_c1_candidate_count": 1, - "k8s_argocd_post_incident_readback_plan_write_capable_candidate_count": 4, - "k8s_argocd_post_incident_readback_plan_degraded_or_pending_review_required_candidate_count": 4, - "k8s_argocd_post_incident_readback_plan_drift_or_schedule_review_required_candidate_count": 4, - "k8s_argocd_post_incident_readback_plan_route_ai_monitoring_impact_required_candidate_count": 4, - "k8s_argocd_post_incident_readback_plan_cross_project_sync_required_candidate_count": 4, - "k8s_argocd_post_incident_readback_plan_no_false_green_required_candidate_count": 4, - "k8s_argocd_post_incident_readback_plan_readback_field_count": 36, - "k8s_argocd_post_incident_readback_plan_required_readback_field_count": 31, - "k8s_argocd_post_incident_readback_plan_reviewer_check_count": 28, - "k8s_argocd_post_incident_readback_plan_outcome_lane_count": 10, - "k8s_argocd_post_incident_readback_plan_blocked_action_count": 41, - "k8s_argocd_post_incident_readback_plan_post_incident_readback_received_count": 0, - "k8s_argocd_post_incident_readback_plan_post_incident_readback_accepted_count": 0, - "k8s_argocd_post_incident_readback_plan_actor_attribution_accepted_count": 0, - "k8s_argocd_post_incident_readback_plan_argocd_app_health_accepted_count": 0, - "k8s_argocd_post_incident_readback_plan_argocd_sync_status_accepted_count": 0, - "k8s_argocd_post_incident_readback_plan_degraded_state_accepted_count": 0, - "k8s_argocd_post_incident_readback_plan_pending_workload_accepted_count": 0, - "k8s_argocd_post_incident_readback_plan_image_pull_or_scheduling_accepted_count": 0, - "k8s_argocd_post_incident_readback_plan_rollout_before_after_accepted_count": 0, - "k8s_argocd_post_incident_readback_plan_event_summary_accepted_count": 0, - "k8s_argocd_post_incident_readback_plan_metrics_alert_accepted_count": 0, - "k8s_argocd_post_incident_readback_plan_drift_scanner_accepted_count": 0, - "k8s_argocd_post_incident_readback_plan_cronjob_schedule_accepted_count": 0, - "k8s_argocd_post_incident_readback_plan_network_policy_service_impact_accepted_count": 0, - "k8s_argocd_post_incident_readback_plan_rbac_serviceaccount_impact_accepted_count": 0, - "k8s_argocd_post_incident_readback_plan_secret_metadata_parity_accepted_count": 0, - "k8s_argocd_post_incident_readback_plan_public_admin_route_impact_accepted_count": 0, - "k8s_argocd_post_incident_readback_plan_ai_provider_monitoring_impact_accepted_count": 0, - "k8s_argocd_post_incident_readback_plan_backup_restore_impact_accepted_count": 0, - "k8s_argocd_post_incident_readback_plan_operator_notification_accepted_count": 0, - "k8s_argocd_post_incident_readback_plan_cross_project_sync_accepted_count": 0, - "k8s_argocd_post_incident_readback_plan_recovery_or_still_degraded_accepted_count": 0, - "k8s_argocd_post_incident_readback_plan_postcheck_readback_accepted_count": 0, - "k8s_argocd_post_incident_readback_plan_recurrence_guard_accepted_count": 0, - "k8s_argocd_post_incident_readback_plan_no_false_green_accepted_count": 0, - "k8s_argocd_post_incident_readback_plan_argocd_api_read_authorized_count": 0, - "k8s_argocd_post_incident_readback_plan_argocd_sync_authorized_count": 0, - "k8s_argocd_post_incident_readback_plan_live_cluster_read_authorized_count": 0, - "k8s_argocd_post_incident_readback_plan_kubectl_action_authorized_count": 0, - "k8s_argocd_post_incident_readback_plan_helm_action_authorized_count": 0, - "k8s_argocd_post_incident_readback_plan_network_policy_change_authorized_count": 0, - "k8s_argocd_post_incident_readback_plan_nodeport_change_authorized_count": 0, - "k8s_argocd_post_incident_readback_plan_rbac_change_authorized_count": 0, - "k8s_argocd_post_incident_readback_plan_secret_value_collection_allowed_count": 0, - "k8s_argocd_post_incident_readback_plan_route_smoke_authorized_count": 0, - "k8s_argocd_post_incident_readback_plan_production_write_authorized_count": 0, - "k8s_argocd_post_incident_readback_plan_runtime_gate_count": 0, - "k8s_argocd_post_incident_readback_plan_action_button_count": 0, - "k8s_argocd_post_incident_readback_plan_coverage_percent_after_readback_plan": 66, - "k8s_production_gitops_coverage_percent": 66, - "nginx_public_gateway_coverage_percent": 92, - "public_gateway_post_incident_readback_plan_candidate_count": 3, - "public_gateway_post_incident_readback_plan_c0_candidate_count": 2, - "public_gateway_post_incident_readback_plan_write_capable_candidate_count": 3, - "public_gateway_post_incident_readback_plan_required_readback_field_count": 30, - "public_gateway_post_incident_readback_plan_reviewer_check_count": 28, - "public_gateway_post_incident_readback_plan_outcome_lane_count": 10, - "public_gateway_post_incident_readback_plan_blocked_action_count": 41, - "public_gateway_post_incident_readback_plan_post_incident_readback_received_count": 0, - "public_gateway_post_incident_readback_plan_post_incident_readback_accepted_count": 0, - "public_gateway_post_incident_readback_plan_actor_attribution_accepted_count": 0, - "public_gateway_post_incident_readback_plan_before_after_route_state_accepted_count": 0, - "public_gateway_post_incident_readback_plan_source_live_diff_state_accepted_count": 0, - "public_gateway_post_incident_readback_plan_nginx_test_readback_accepted_count": 0, - "public_gateway_post_incident_readback_plan_nginx_reload_or_no_reload_accepted_count": 0, - "public_gateway_post_incident_readback_plan_route_smoke_readback_accepted_count": 0, - "public_gateway_post_incident_readback_plan_tls_acme_readback_accepted_count": 0, - "public_gateway_post_incident_readback_plan_websocket_readback_accepted_count": 0, - "public_gateway_post_incident_readback_plan_upstream_health_accepted_count": 0, - "public_gateway_post_incident_readback_plan_public_admin_api_route_impact_accepted_count": 0, - "public_gateway_post_incident_readback_plan_ai_provider_impact_accepted_count": 0, - "public_gateway_post_incident_readback_plan_monitoring_alert_accepted_count": 0, - "public_gateway_post_incident_readback_plan_operator_notification_accepted_count": 0, - "public_gateway_post_incident_readback_plan_cross_project_sync_accepted_count": 0, - "public_gateway_post_incident_readback_plan_rollback_validation_accepted_count": 0, - "public_gateway_post_incident_readback_plan_post_change_monitoring_accepted_count": 0, - "public_gateway_post_incident_readback_plan_postcheck_readback_accepted_count": 0, - "public_gateway_post_incident_readback_plan_recurrence_guard_accepted_count": 0, - "public_gateway_post_incident_readback_plan_no_false_green_accepted_count": 0, - "public_gateway_post_incident_readback_plan_host_live_conf_read_authorized_count": 0, - "public_gateway_post_incident_readback_plan_nginx_test_authorized_count": 0, - "public_gateway_post_incident_readback_plan_nginx_reload_authorized_count": 0, - "public_gateway_post_incident_readback_plan_public_gateway_reload_authorized_count": 0, - "public_gateway_post_incident_readback_plan_route_smoke_authorized_count": 0, - "public_gateway_post_incident_readback_plan_dns_tls_probe_authorized_count": 0, - "public_gateway_post_incident_readback_plan_certbot_renew_authorized_count": 0, - "public_gateway_post_incident_readback_plan_runtime_gate_count": 0, - "public_gateway_post_incident_readback_plan_action_button_count": 0, - "public_gateway_post_incident_readback_plan_coverage_percent_after_readback_plan": 92 + "visual_command_dashboard_widget_count": 14 }, "topology_atlas_lenses": [ { diff --git a/docs/security/monitoring-post-incident-readback-plan.snapshot.json b/docs/security/monitoring-post-incident-readback-plan.snapshot.json new file mode 100644 index 000000000..b758600f8 --- /dev/null +++ b/docs/security/monitoring-post-incident-readback-plan.snapshot.json @@ -0,0 +1,16116 @@ +{ + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", + "add_action_button", + "store_raw_live_config", + "store_full_receiver_payload", + "collect_bot_token", + "collect_dsn_secret", + "collect_webhook_secret", + "change_alert_rule", + "change_scrape_config", + "change_dashboard", + "change_notification_policy", + "change_silence", + "change_inhibit_rule", + "accept_dashboard_up_as_alert_chain_healthy", + "skip_receiver_receipt", + "skip_stale_review", + "skip_silence_review", + "skip_rollback_validation", + "skip_post_change_monitoring", + "skip_cross_project_sync", + "live_receiver_probe" + ], + "execution_boundaries": { + "action_buttons_allowed": false, + "active_scan_authorized": false, + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "exporter_deploy_authorized": false, + "false_green_acceptance_authorized": false, + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "kubectl_action_authorized": false, + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "not_authorization": true, + "notification_route_change_authorized": false, + "otel_collector_reload_authorized": false, + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "raw_alert_payload_storage_allowed": false, + "receiver_route_change_authorized": false, + "remote_write_change_authorized": false, + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_policy_change_authorized": false, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "telegram_send_authorized": false, + "webhook_receiver_change_authorized": false + }, + "generated_at": "2026-06-15T23:40:00+08:00", + "git_commit": "dfee85c0", + "mode": "metadata_only_no_live_monitoring_no_reload_no_alert_send", + "operator_interpretation": [ + "此計畫只定義 Monitoring / Alerting / Observability 事故後回讀欄位，不代表 live monitoring 已讀取或可讀取。", + "route 200、dashboard up、container up、receiver reachable、CD success、UI 可見都不能單獨當成告警鏈路事故驗收。", + "未來若要 reload、rule apply、receiver route change、silence、Telegram send、alert fire 或 alert chain smoke，必須另有維護窗口、rollback owner 與人工批准。" + ], + "outcome_lanes": [ + { + "lane_id": "waiting_post_incident_readback", + "meaning": "尚未收到監控 / 告警事故回讀包；所有 accepted / runtime count 維持 0。" + }, + { + "lane_id": "request_actor_or_time_supplement", + "meaning": "缺 actor、change / outage time window、intent 或 break-glass reason 時要求補件。" + }, + { + "lane_id": "request_alert_state_supplement", + "meaning": "缺 before / after alert state、rule、datasource、scrape、remote write 或 exporter state 時要求補件。" + }, + { + "lane_id": "request_receiver_receipt_supplement", + "meaning": "缺 receiver route state、receipt proof、delivery metadata 或 notification owner 時要求補件。" + }, + { + "lane_id": "request_stale_silence_supplement", + "meaning": "缺 stale / pending / resolved、silence、mute、dedup、inhibit 或 maintenance rule review 時要求補件。" + }, + { + "lane_id": "request_freshness_or_alert_chain_supplement", + "meaning": "缺 dashboard / trace / log freshness、alert chain health、post-change monitoring 或 rollback validation 時要求補件。" + }, + { + "lane_id": "quarantine_raw_payload", + "meaning": "收到 secret、raw config、raw alert payload、raw receiver payload、未脫敏 log 或截圖時只能隔離。" + }, + { + "lane_id": "reject_false_green_claim", + "meaning": "把 route 200、dashboard up、container up、receiver reachable、CD success 或 UI 可見當驗收時拒收。" + }, + { + "lane_id": "ready_for_monitoring_post_incident_review", + "meaning": "metadata 合格後，只能進 monitoring post-incident reviewer review。" + }, + { + "lane_id": "recurrence_guard_backfill_required", + "meaning": "需補防再發 guard、owner review、change freeze、automation block 或 noise budget owner。" + }, + { + "lane_id": "waiting_runtime_gate", + "meaning": "即使 readback accepted，runtime gate 仍需獨立人工批准。" + } + ], + "readback_candidates": [ + { + "action_buttons_allowed": false, + "active_scan_authorized": false, + "actor_attribution_accepted": false, + "actor_attribution_ref": null, + "after_alert_state_ref": null, + "alert_chain_health_readback_accepted": false, + "alert_chain_health_readback_ref": null, + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "before_after_alert_state_accepted": false, + "before_alert_state_ref": null, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", + "add_action_button", + "store_raw_live_config", + "store_full_receiver_payload", + "collect_bot_token", + "collect_dsn_secret", + "collect_webhook_secret", + "change_alert_rule", + "change_scrape_config", + "change_dashboard", + "change_notification_policy", + "change_silence", + "change_inhibit_rule", + "accept_dashboard_up_as_alert_chain_healthy", + "skip_receiver_receipt", + "skip_stale_review", + "skip_silence_review", + "skip_rollback_validation", + "skip_post_change_monitoring", + "skip_cross_project_sync", + "live_receiver_probe" + ], + "change_intent_or_break_glass_ref": null, + "change_or_outage_time_window_accepted": false, + "change_or_outage_time_window_ref": null, + "config_kind": "prometheus_config", + "control_tier": "C1", + "cross_project_sync_accepted": false, + "cross_project_sync_ref": null, + "dashboard_trace_log_freshness_accepted": false, + "dashboard_trace_log_freshness_ref": null, + "expected_scope": "k8s_monitoring_prometheus_base", + "exporter_deploy_authorized": false, + "followup_owner": "pending_post_incident_readback", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "intent_or_break_glass_accepted": false, + "kubectl_action_authorized": false, + "label": "K8s Prometheus base config", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "maintenance_window": "pending_post_incident_readback", + "monitoring_incident_or_change_ref": null, + "no_false_green_accepted": false, + "not_approval": true, + "notification_delivery_metadata_accepted": false, + "notification_delivery_metadata_ref": null, + "notification_route_change_authorized": false, + "observability_scope": [ + "scrape config", + "service discovery", + "alert rule includes" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_post_incident_readback", + "request_actor_or_time_supplement", + "request_alert_state_supplement", + "request_receiver_receipt_supplement", + "request_stale_silence_supplement", + "request_freshness_or_alert_chain_supplement", + "quarantine_raw_payload", + "reject_false_green_claim", + "ready_for_monitoring_post_incident_review", + "recurrence_guard_backfill_required", + "waiting_runtime_gate" + ], + "post_change_monitoring_accepted": false, + "post_change_monitoring_ref": null, + "post_incident_readback_accepted": false, + "post_incident_readback_candidate_id": "monitoring_post_incident_readback:prometheus_k8s_base_config", + "post_incident_readback_received": false, + "postcheck_readback_accepted": false, + "postcheck_readback_ref": null, + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "readback_fields": [ + "post_incident_readback_candidate_id", + "source_acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "receiver_receipt_readback_accepted": false, + "receiver_receipt_readback_ref": null, + "receiver_route_change_authorized": false, + "receiver_route_state_accepted": false, + "receiver_route_state_ref": null, + "recurrence_guard_accepted": false, + "recurrence_guard_ref": null, + "reload_or_no_reload_accepted": false, + "reload_or_no_reload_ref": null, + "remote_write_change_authorized": false, + "repo_sha256": "5ea5ec736686dabb05bff0691dd45196eae4d2ab645c14b3f812748186ad6da9", + "repo_source_path": "k8s/monitoring/prometheus.yml", + "request_id": "monitoring_owner_request:prometheus_k8s_base_config", + "required_readback_fields": [ + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "followup_owner", + "redacted_evidence_refs", + "no_secret_value_attestation", + "no_raw_payload_attestation", + "no_false_green_attestation", + "receipt_not_route_only_attestation", + "independent_postcheck_attestation", + "noise_budget_or_silence_owner_attestation" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "source_owner_response_acceptance_current", + "incident_or_change_ref_present", + "actor_attribution_present", + "change_or_outage_time_window_present", + "intent_or_break_glass_present", + "before_after_alert_state_present", + "rule_datasource_scrape_state_present", + "receiver_route_state_present", + "reload_or_no_reload_called_out", + "receiver_receipt_readback_present", + "stale_pending_resolved_review_present", + "silence_mute_dedup_inhibit_review_present", + "dashboard_trace_log_freshness_present", + "notification_delivery_metadata_present", + "alert_chain_health_not_route_only", + "cross_project_sync_present", + "rollback_or_disable_validation_present", + "post_change_monitoring_present", + "postcheck_independent", + "recurrence_guard_present", + "maintenance_window_present", + "noise_budget_owner_present", + "redacted_refs_only", + "secret_value_absent", + "raw_payload_absent", + "no_false_green", + "runtime_stays_zero", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_post_incident_readback", + "rollback_or_disable_validation_accepted": false, + "rollback_or_disable_validation_ref": null, + "rollback_owner": "pending_post_incident_readback", + "rule_datasource_scrape_state_accepted": false, + "rule_datasource_scrape_state_ref": null, + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_mute_dedup_inhibit_review_accepted": false, + "silence_mute_dedup_inhibit_review_ref": null, + "silence_policy_change_authorized": false, + "source_acceptance_candidate_id": "monitoring_owner_response_acceptance:prometheus_k8s_base_config", + "source_line_count": 208, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "stale_pending_resolved_review_accepted": false, + "stale_pending_resolved_review_ref": null, + "status": "waiting_post_incident_readback", + "surface_id": "prometheus_k8s_base_config", + "telegram_send_authorized": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "action_buttons_allowed": false, + "active_scan_authorized": false, + "actor_attribution_accepted": false, + "actor_attribution_ref": null, + "after_alert_state_ref": null, + "alert_chain_health_readback_accepted": false, + "alert_chain_health_readback_ref": null, + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "before_after_alert_state_accepted": false, + "before_alert_state_ref": null, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", + "add_action_button", + "store_raw_live_config", + "store_full_receiver_payload", + "collect_bot_token", + "collect_dsn_secret", + "collect_webhook_secret", + "change_alert_rule", + "change_scrape_config", + "change_dashboard", + "change_notification_policy", + "change_silence", + "change_inhibit_rule", + "accept_dashboard_up_as_alert_chain_healthy", + "skip_receiver_receipt", + "skip_stale_review", + "skip_silence_review", + "skip_rollback_validation", + "skip_post_change_monitoring", + "skip_cross_project_sync", + "live_receiver_probe" + ], + "change_intent_or_break_glass_ref": null, + "change_or_outage_time_window_accepted": false, + "change_or_outage_time_window_ref": null, + "config_kind": "prometheus_config", + "control_tier": "C1", + "cross_project_sync_accepted": false, + "cross_project_sync_ref": null, + "dashboard_trace_log_freshness_accepted": false, + "dashboard_trace_log_freshness_ref": null, + "expected_scope": "k8s_monitoring_prometheus_additions", + "exporter_deploy_authorized": false, + "followup_owner": "pending_post_incident_readback", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "intent_or_break_glass_accepted": false, + "kubectl_action_authorized": false, + "label": "K8s Prometheus additions", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "maintenance_window": "pending_post_incident_readback", + "monitoring_incident_or_change_ref": null, + "no_false_green_accepted": false, + "not_approval": true, + "notification_delivery_metadata_accepted": false, + "notification_delivery_metadata_ref": null, + "notification_route_change_authorized": false, + "observability_scope": [ + "supplemental scrape", + "additional rule paths" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_post_incident_readback", + "request_actor_or_time_supplement", + "request_alert_state_supplement", + "request_receiver_receipt_supplement", + "request_stale_silence_supplement", + "request_freshness_or_alert_chain_supplement", + "quarantine_raw_payload", + "reject_false_green_claim", + "ready_for_monitoring_post_incident_review", + "recurrence_guard_backfill_required", + "waiting_runtime_gate" + ], + "post_change_monitoring_accepted": false, + "post_change_monitoring_ref": null, + "post_incident_readback_accepted": false, + "post_incident_readback_candidate_id": "monitoring_post_incident_readback:prometheus_k8s_additions_config", + "post_incident_readback_received": false, + "postcheck_readback_accepted": false, + "postcheck_readback_ref": null, + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "readback_fields": [ + "post_incident_readback_candidate_id", + "source_acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "receiver_receipt_readback_accepted": false, + "receiver_receipt_readback_ref": null, + "receiver_route_change_authorized": false, + "receiver_route_state_accepted": false, + "receiver_route_state_ref": null, + "recurrence_guard_accepted": false, + "recurrence_guard_ref": null, + "reload_or_no_reload_accepted": false, + "reload_or_no_reload_ref": null, + "remote_write_change_authorized": false, + "repo_sha256": "67bd6ef7b9da39fd4decb5254dc9bea1980f54fcd162f8468ac98f49258a39b4", + "repo_source_path": "k8s/monitoring/prometheus-config-additions.yaml", + "request_id": "monitoring_owner_request:prometheus_k8s_additions_config", + "required_readback_fields": [ + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "followup_owner", + "redacted_evidence_refs", + "no_secret_value_attestation", + "no_raw_payload_attestation", + "no_false_green_attestation", + "receipt_not_route_only_attestation", + "independent_postcheck_attestation", + "noise_budget_or_silence_owner_attestation" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "source_owner_response_acceptance_current", + "incident_or_change_ref_present", + "actor_attribution_present", + "change_or_outage_time_window_present", + "intent_or_break_glass_present", + "before_after_alert_state_present", + "rule_datasource_scrape_state_present", + "receiver_route_state_present", + "reload_or_no_reload_called_out", + "receiver_receipt_readback_present", + "stale_pending_resolved_review_present", + "silence_mute_dedup_inhibit_review_present", + "dashboard_trace_log_freshness_present", + "notification_delivery_metadata_present", + "alert_chain_health_not_route_only", + "cross_project_sync_present", + "rollback_or_disable_validation_present", + "post_change_monitoring_present", + "postcheck_independent", + "recurrence_guard_present", + "maintenance_window_present", + "noise_budget_owner_present", + "redacted_refs_only", + "secret_value_absent", + "raw_payload_absent", + "no_false_green", + "runtime_stays_zero", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_post_incident_readback", + "rollback_or_disable_validation_accepted": false, + "rollback_or_disable_validation_ref": null, + "rollback_owner": "pending_post_incident_readback", + "rule_datasource_scrape_state_accepted": false, + "rule_datasource_scrape_state_ref": null, + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_mute_dedup_inhibit_review_accepted": false, + "silence_mute_dedup_inhibit_review_ref": null, + "silence_policy_change_authorized": false, + "source_acceptance_candidate_id": "monitoring_owner_response_acceptance:prometheus_k8s_additions_config", + "source_line_count": 112, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "stale_pending_resolved_review_accepted": false, + "stale_pending_resolved_review_ref": null, + "status": "waiting_post_incident_readback", + "surface_id": "prometheus_k8s_additions_config", + "telegram_send_authorized": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "action_buttons_allowed": false, + "active_scan_authorized": false, + "actor_attribution_accepted": false, + "actor_attribution_ref": null, + "after_alert_state_ref": null, + "alert_chain_health_readback_accepted": false, + "alert_chain_health_readback_ref": null, + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "before_after_alert_state_accepted": false, + "before_alert_state_ref": null, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", + "add_action_button", + "store_raw_live_config", + "store_full_receiver_payload", + "collect_bot_token", + "collect_dsn_secret", + "collect_webhook_secret", + "change_alert_rule", + "change_scrape_config", + "change_dashboard", + "change_notification_policy", + "change_silence", + "change_inhibit_rule", + "accept_dashboard_up_as_alert_chain_healthy", + "skip_receiver_receipt", + "skip_stale_review", + "skip_silence_review", + "skip_rollback_validation", + "skip_post_change_monitoring", + "skip_cross_project_sync", + "live_receiver_probe" + ], + "change_intent_or_break_glass_ref": null, + "change_or_outage_time_window_accepted": false, + "change_or_outage_time_window_ref": null, + "config_kind": "prometheus_config", + "control_tier": "C1", + "cross_project_sync_accepted": false, + "cross_project_sync_ref": null, + "dashboard_trace_log_freshness_accepted": false, + "dashboard_trace_log_freshness_ref": null, + "expected_scope": "phase_o_prometheus_config", + "exporter_deploy_authorized": false, + "followup_owner": "pending_post_incident_readback", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "intent_or_break_glass_accepted": false, + "kubectl_action_authorized": false, + "label": "Prometheus Phase O config", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "maintenance_window": "pending_post_incident_readback", + "monitoring_incident_or_change_ref": null, + "no_false_green_accepted": false, + "not_approval": true, + "notification_delivery_metadata_accepted": false, + "notification_delivery_metadata_ref": null, + "notification_route_change_authorized": false, + "observability_scope": [ + "Phase O monitoring", + "baseline scrape" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_post_incident_readback", + "request_actor_or_time_supplement", + "request_alert_state_supplement", + "request_receiver_receipt_supplement", + "request_stale_silence_supplement", + "request_freshness_or_alert_chain_supplement", + "quarantine_raw_payload", + "reject_false_green_claim", + "ready_for_monitoring_post_incident_review", + "recurrence_guard_backfill_required", + "waiting_runtime_gate" + ], + "post_change_monitoring_accepted": false, + "post_change_monitoring_ref": null, + "post_incident_readback_accepted": false, + "post_incident_readback_candidate_id": "monitoring_post_incident_readback:prometheus_phase_o_config", + "post_incident_readback_received": false, + "postcheck_readback_accepted": false, + "postcheck_readback_ref": null, + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "readback_fields": [ + "post_incident_readback_candidate_id", + "source_acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "receiver_receipt_readback_accepted": false, + "receiver_receipt_readback_ref": null, + "receiver_route_change_authorized": false, + "receiver_route_state_accepted": false, + "receiver_route_state_ref": null, + "recurrence_guard_accepted": false, + "recurrence_guard_ref": null, + "reload_or_no_reload_accepted": false, + "reload_or_no_reload_ref": null, + "remote_write_change_authorized": false, + "repo_sha256": "7bdb94a23f6f14912c89655e5313fb745a772286671647db32d7ee2f07b50d9d", + "repo_source_path": "k8s/monitoring/prometheus-config-phase-o.yaml", + "request_id": "monitoring_owner_request:prometheus_phase_o_config", + "required_readback_fields": [ + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "followup_owner", + "redacted_evidence_refs", + "no_secret_value_attestation", + "no_raw_payload_attestation", + "no_false_green_attestation", + "receipt_not_route_only_attestation", + "independent_postcheck_attestation", + "noise_budget_or_silence_owner_attestation" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "source_owner_response_acceptance_current", + "incident_or_change_ref_present", + "actor_attribution_present", + "change_or_outage_time_window_present", + "intent_or_break_glass_present", + "before_after_alert_state_present", + "rule_datasource_scrape_state_present", + "receiver_route_state_present", + "reload_or_no_reload_called_out", + "receiver_receipt_readback_present", + "stale_pending_resolved_review_present", + "silence_mute_dedup_inhibit_review_present", + "dashboard_trace_log_freshness_present", + "notification_delivery_metadata_present", + "alert_chain_health_not_route_only", + "cross_project_sync_present", + "rollback_or_disable_validation_present", + "post_change_monitoring_present", + "postcheck_independent", + "recurrence_guard_present", + "maintenance_window_present", + "noise_budget_owner_present", + "redacted_refs_only", + "secret_value_absent", + "raw_payload_absent", + "no_false_green", + "runtime_stays_zero", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_post_incident_readback", + "rollback_or_disable_validation_accepted": false, + "rollback_or_disable_validation_ref": null, + "rollback_owner": "pending_post_incident_readback", + "rule_datasource_scrape_state_accepted": false, + "rule_datasource_scrape_state_ref": null, + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_mute_dedup_inhibit_review_accepted": false, + "silence_mute_dedup_inhibit_review_ref": null, + "silence_policy_change_authorized": false, + "source_acceptance_candidate_id": "monitoring_owner_response_acceptance:prometheus_phase_o_config", + "source_line_count": 83, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "stale_pending_resolved_review_accepted": false, + "stale_pending_resolved_review_ref": null, + "status": "waiting_post_incident_readback", + "surface_id": "prometheus_phase_o_config", + "telegram_send_authorized": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "action_buttons_allowed": false, + "active_scan_authorized": false, + "actor_attribution_accepted": false, + "actor_attribution_ref": null, + "after_alert_state_ref": null, + "alert_chain_health_readback_accepted": false, + "alert_chain_health_readback_ref": null, + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "before_after_alert_state_accepted": false, + "before_alert_state_ref": null, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", + "add_action_button", + "store_raw_live_config", + "store_full_receiver_payload", + "collect_bot_token", + "collect_dsn_secret", + "collect_webhook_secret", + "change_alert_rule", + "change_scrape_config", + "change_dashboard", + "change_notification_policy", + "change_silence", + "change_inhibit_rule", + "accept_dashboard_up_as_alert_chain_healthy", + "skip_receiver_receipt", + "skip_stale_review", + "skip_silence_review", + "skip_rollback_validation", + "skip_post_change_monitoring", + "skip_cross_project_sync", + "live_receiver_probe" + ], + "change_intent_or_break_glass_ref": null, + "change_or_outage_time_window_accepted": false, + "change_or_outage_time_window_ref": null, + "config_kind": "prometheus_remote_write", + "control_tier": "C1", + "cross_project_sync_accepted": false, + "cross_project_sync_ref": null, + "dashboard_trace_log_freshness_accepted": false, + "dashboard_trace_log_freshness_ref": null, + "expected_scope": "prometheus_remote_write_signoz", + "exporter_deploy_authorized": false, + "followup_owner": "pending_post_incident_readback", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "intent_or_break_glass_accepted": false, + "kubectl_action_authorized": false, + "label": "Prometheus remote write to SigNoz", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "maintenance_window": "pending_post_incident_readback", + "monitoring_incident_or_change_ref": null, + "no_false_green_accepted": false, + "not_approval": true, + "notification_delivery_metadata_accepted": false, + "notification_delivery_metadata_ref": null, + "notification_route_change_authorized": false, + "observability_scope": [ + "remote write", + "SigNoz ingestion", + "data export boundary" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_post_incident_readback", + "request_actor_or_time_supplement", + "request_alert_state_supplement", + "request_receiver_receipt_supplement", + "request_stale_silence_supplement", + "request_freshness_or_alert_chain_supplement", + "quarantine_raw_payload", + "reject_false_green_claim", + "ready_for_monitoring_post_incident_review", + "recurrence_guard_backfill_required", + "waiting_runtime_gate" + ], + "post_change_monitoring_accepted": false, + "post_change_monitoring_ref": null, + "post_incident_readback_accepted": false, + "post_incident_readback_candidate_id": "monitoring_post_incident_readback:prometheus_remote_write_signoz", + "post_incident_readback_received": false, + "postcheck_readback_accepted": false, + "postcheck_readback_ref": null, + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "readback_fields": [ + "post_incident_readback_candidate_id", + "source_acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "receiver_receipt_readback_accepted": false, + "receiver_receipt_readback_ref": null, + "receiver_route_change_authorized": false, + "receiver_route_state_accepted": false, + "receiver_route_state_ref": null, + "recurrence_guard_accepted": false, + "recurrence_guard_ref": null, + "reload_or_no_reload_accepted": false, + "reload_or_no_reload_ref": null, + "remote_write_change_authorized": false, + "repo_sha256": "da6ae1ef0be420b07fc0f56861e548d049ec53fd0f601ee913797304315fbcc7", + "repo_source_path": "k8s/monitoring/prometheus-remote-write-signoz.yaml", + "request_id": "monitoring_owner_request:prometheus_remote_write_signoz", + "required_readback_fields": [ + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "followup_owner", + "redacted_evidence_refs", + "no_secret_value_attestation", + "no_raw_payload_attestation", + "no_false_green_attestation", + "receipt_not_route_only_attestation", + "independent_postcheck_attestation", + "noise_budget_or_silence_owner_attestation" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "source_owner_response_acceptance_current", + "incident_or_change_ref_present", + "actor_attribution_present", + "change_or_outage_time_window_present", + "intent_or_break_glass_present", + "before_after_alert_state_present", + "rule_datasource_scrape_state_present", + "receiver_route_state_present", + "reload_or_no_reload_called_out", + "receiver_receipt_readback_present", + "stale_pending_resolved_review_present", + "silence_mute_dedup_inhibit_review_present", + "dashboard_trace_log_freshness_present", + "notification_delivery_metadata_present", + "alert_chain_health_not_route_only", + "cross_project_sync_present", + "rollback_or_disable_validation_present", + "post_change_monitoring_present", + "postcheck_independent", + "recurrence_guard_present", + "maintenance_window_present", + "noise_budget_owner_present", + "redacted_refs_only", + "secret_value_absent", + "raw_payload_absent", + "no_false_green", + "runtime_stays_zero", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_post_incident_readback", + "rollback_or_disable_validation_accepted": false, + "rollback_or_disable_validation_ref": null, + "rollback_owner": "pending_post_incident_readback", + "rule_datasource_scrape_state_accepted": false, + "rule_datasource_scrape_state_ref": null, + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_mute_dedup_inhibit_review_accepted": false, + "silence_mute_dedup_inhibit_review_ref": null, + "silence_policy_change_authorized": false, + "source_acceptance_candidate_id": "monitoring_owner_response_acceptance:prometheus_remote_write_signoz", + "source_line_count": 89, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "stale_pending_resolved_review_accepted": false, + "stale_pending_resolved_review_ref": null, + "status": "waiting_post_incident_readback", + "surface_id": "prometheus_remote_write_signoz", + "telegram_send_authorized": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "action_buttons_allowed": false, + "active_scan_authorized": false, + "actor_attribution_accepted": false, + "actor_attribution_ref": null, + "after_alert_state_ref": null, + "alert_chain_health_readback_accepted": false, + "alert_chain_health_readback_ref": null, + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "before_after_alert_state_accepted": false, + "before_alert_state_ref": null, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", + "add_action_button", + "store_raw_live_config", + "store_full_receiver_payload", + "collect_bot_token", + "collect_dsn_secret", + "collect_webhook_secret", + "change_alert_rule", + "change_scrape_config", + "change_dashboard", + "change_notification_policy", + "change_silence", + "change_inhibit_rule", + "accept_dashboard_up_as_alert_chain_healthy", + "skip_receiver_receipt", + "skip_stale_review", + "skip_silence_review", + "skip_rollback_validation", + "skip_post_change_monitoring", + "skip_cross_project_sync", + "live_receiver_probe" + ], + "change_intent_or_break_glass_ref": null, + "change_or_outage_time_window_accepted": false, + "change_or_outage_time_window_ref": null, + "config_kind": "prometheus_generated_config", + "control_tier": "C1", + "cross_project_sync_accepted": false, + "cross_project_sync_ref": null, + "dashboard_trace_log_freshness_accepted": false, + "dashboard_trace_log_freshness_ref": null, + "expected_scope": "generated_scrape_targets", + "exporter_deploy_authorized": false, + "followup_owner": "pending_post_incident_readback", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "intent_or_break_glass_accepted": false, + "kubectl_action_authorized": false, + "label": "Generated Prometheus scrape config", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "maintenance_window": "pending_post_incident_readback", + "monitoring_incident_or_change_ref": null, + "no_false_green_accepted": false, + "not_approval": true, + "notification_delivery_metadata_accepted": false, + "notification_delivery_metadata_ref": null, + "notification_route_change_authorized": false, + "observability_scope": [ + "generated targets", + "service registry" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_post_incident_readback", + "request_actor_or_time_supplement", + "request_alert_state_supplement", + "request_receiver_receipt_supplement", + "request_stale_silence_supplement", + "request_freshness_or_alert_chain_supplement", + "quarantine_raw_payload", + "reject_false_green_claim", + "ready_for_monitoring_post_incident_review", + "recurrence_guard_backfill_required", + "waiting_runtime_gate" + ], + "post_change_monitoring_accepted": false, + "post_change_monitoring_ref": null, + "post_incident_readback_accepted": false, + "post_incident_readback_candidate_id": "monitoring_post_incident_readback:prometheus_generated_scrape_config", + "post_incident_readback_received": false, + "postcheck_readback_accepted": false, + "postcheck_readback_ref": null, + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "readback_fields": [ + "post_incident_readback_candidate_id", + "source_acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "receiver_receipt_readback_accepted": false, + "receiver_receipt_readback_ref": null, + "receiver_route_change_authorized": false, + "receiver_route_state_accepted": false, + "receiver_route_state_ref": null, + "recurrence_guard_accepted": false, + "recurrence_guard_ref": null, + "reload_or_no_reload_accepted": false, + "reload_or_no_reload_ref": null, + "remote_write_change_authorized": false, + "repo_sha256": "6c1fb1ef0b672e016584a26b3dd1c1fb62904d9a4d26ec30e35f5493e23b0f9b", + "repo_source_path": "ops/monitoring/generated/prometheus-scrape-generated.yaml", + "request_id": "monitoring_owner_request:prometheus_generated_scrape_config", + "required_readback_fields": [ + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "followup_owner", + "redacted_evidence_refs", + "no_secret_value_attestation", + "no_raw_payload_attestation", + "no_false_green_attestation", + "receipt_not_route_only_attestation", + "independent_postcheck_attestation", + "noise_budget_or_silence_owner_attestation" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "source_owner_response_acceptance_current", + "incident_or_change_ref_present", + "actor_attribution_present", + "change_or_outage_time_window_present", + "intent_or_break_glass_present", + "before_after_alert_state_present", + "rule_datasource_scrape_state_present", + "receiver_route_state_present", + "reload_or_no_reload_called_out", + "receiver_receipt_readback_present", + "stale_pending_resolved_review_present", + "silence_mute_dedup_inhibit_review_present", + "dashboard_trace_log_freshness_present", + "notification_delivery_metadata_present", + "alert_chain_health_not_route_only", + "cross_project_sync_present", + "rollback_or_disable_validation_present", + "post_change_monitoring_present", + "postcheck_independent", + "recurrence_guard_present", + "maintenance_window_present", + "noise_budget_owner_present", + "redacted_refs_only", + "secret_value_absent", + "raw_payload_absent", + "no_false_green", + "runtime_stays_zero", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_post_incident_readback", + "rollback_or_disable_validation_accepted": false, + "rollback_or_disable_validation_ref": null, + "rollback_owner": "pending_post_incident_readback", + "rule_datasource_scrape_state_accepted": false, + "rule_datasource_scrape_state_ref": null, + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_mute_dedup_inhibit_review_accepted": false, + "silence_mute_dedup_inhibit_review_ref": null, + "silence_policy_change_authorized": false, + "source_acceptance_candidate_id": "monitoring_owner_response_acceptance:prometheus_generated_scrape_config", + "source_line_count": 192, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "stale_pending_resolved_review_accepted": false, + "stale_pending_resolved_review_ref": null, + "status": "waiting_post_incident_readback", + "surface_id": "prometheus_generated_scrape_config", + "telegram_send_authorized": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "action_buttons_allowed": false, + "active_scan_authorized": false, + "actor_attribution_accepted": false, + "actor_attribution_ref": null, + "after_alert_state_ref": null, + "alert_chain_health_readback_accepted": false, + "alert_chain_health_readback_ref": null, + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "before_after_alert_state_accepted": false, + "before_alert_state_ref": null, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", + "add_action_button", + "store_raw_live_config", + "store_full_receiver_payload", + "collect_bot_token", + "collect_dsn_secret", + "collect_webhook_secret", + "change_alert_rule", + "change_scrape_config", + "change_dashboard", + "change_notification_policy", + "change_silence", + "change_inhibit_rule", + "accept_dashboard_up_as_alert_chain_healthy", + "skip_receiver_receipt", + "skip_stale_review", + "skip_silence_review", + "skip_rollback_validation", + "skip_post_change_monitoring", + "skip_cross_project_sync", + "live_receiver_probe" + ], + "change_intent_or_break_glass_ref": null, + "change_or_outage_time_window_accepted": false, + "change_or_outage_time_window_ref": null, + "config_kind": "prometheus_generated_config", + "control_tier": "C1", + "cross_project_sync_accepted": false, + "cross_project_sync_ref": null, + "dashboard_trace_log_freshness_accepted": false, + "dashboard_trace_log_freshness_ref": null, + "expected_scope": "generated_blackbox_targets", + "exporter_deploy_authorized": false, + "followup_owner": "pending_post_incident_readback", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "intent_or_break_glass_accepted": false, + "kubectl_action_authorized": false, + "label": "Generated blackbox targets", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "maintenance_window": "pending_post_incident_readback", + "monitoring_incident_or_change_ref": null, + "no_false_green_accepted": false, + "not_approval": true, + "notification_delivery_metadata_accepted": false, + "notification_delivery_metadata_ref": null, + "notification_route_change_authorized": false, + "observability_scope": [ + "blackbox targets", + "public route smoke candidates" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_post_incident_readback", + "request_actor_or_time_supplement", + "request_alert_state_supplement", + "request_receiver_receipt_supplement", + "request_stale_silence_supplement", + "request_freshness_or_alert_chain_supplement", + "quarantine_raw_payload", + "reject_false_green_claim", + "ready_for_monitoring_post_incident_review", + "recurrence_guard_backfill_required", + "waiting_runtime_gate" + ], + "post_change_monitoring_accepted": false, + "post_change_monitoring_ref": null, + "post_incident_readback_accepted": false, + "post_incident_readback_candidate_id": "monitoring_post_incident_readback:prometheus_generated_blackbox_targets", + "post_incident_readback_received": false, + "postcheck_readback_accepted": false, + "postcheck_readback_ref": null, + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "readback_fields": [ + "post_incident_readback_candidate_id", + "source_acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "receiver_receipt_readback_accepted": false, + "receiver_receipt_readback_ref": null, + "receiver_route_change_authorized": false, + "receiver_route_state_accepted": false, + "receiver_route_state_ref": null, + "recurrence_guard_accepted": false, + "recurrence_guard_ref": null, + "reload_or_no_reload_accepted": false, + "reload_or_no_reload_ref": null, + "remote_write_change_authorized": false, + "repo_sha256": "e375aec2fe6b602157de4d187d66c8a4b0dc237c1ba2ae8c9ad3f598f4730e79", + "repo_source_path": "ops/monitoring/generated/blackbox-targets-generated.yaml", + "request_id": "monitoring_owner_request:prometheus_generated_blackbox_targets", + "required_readback_fields": [ + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "followup_owner", + "redacted_evidence_refs", + "no_secret_value_attestation", + "no_raw_payload_attestation", + "no_false_green_attestation", + "receipt_not_route_only_attestation", + "independent_postcheck_attestation", + "noise_budget_or_silence_owner_attestation" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "source_owner_response_acceptance_current", + "incident_or_change_ref_present", + "actor_attribution_present", + "change_or_outage_time_window_present", + "intent_or_break_glass_present", + "before_after_alert_state_present", + "rule_datasource_scrape_state_present", + "receiver_route_state_present", + "reload_or_no_reload_called_out", + "receiver_receipt_readback_present", + "stale_pending_resolved_review_present", + "silence_mute_dedup_inhibit_review_present", + "dashboard_trace_log_freshness_present", + "notification_delivery_metadata_present", + "alert_chain_health_not_route_only", + "cross_project_sync_present", + "rollback_or_disable_validation_present", + "post_change_monitoring_present", + "postcheck_independent", + "recurrence_guard_present", + "maintenance_window_present", + "noise_budget_owner_present", + "redacted_refs_only", + "secret_value_absent", + "raw_payload_absent", + "no_false_green", + "runtime_stays_zero", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_post_incident_readback", + "rollback_or_disable_validation_accepted": false, + "rollback_or_disable_validation_ref": null, + "rollback_owner": "pending_post_incident_readback", + "rule_datasource_scrape_state_accepted": false, + "rule_datasource_scrape_state_ref": null, + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_mute_dedup_inhibit_review_accepted": false, + "silence_mute_dedup_inhibit_review_ref": null, + "silence_policy_change_authorized": false, + "source_acceptance_candidate_id": "monitoring_owner_response_acceptance:prometheus_generated_blackbox_targets", + "source_line_count": 110, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "stale_pending_resolved_review_accepted": false, + "stale_pending_resolved_review_ref": null, + "status": "waiting_post_incident_readback", + "surface_id": "prometheus_generated_blackbox_targets", + "telegram_send_authorized": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "action_buttons_allowed": false, + "active_scan_authorized": false, + "actor_attribution_accepted": false, + "actor_attribution_ref": null, + "after_alert_state_ref": null, + "alert_chain_health_readback_accepted": false, + "alert_chain_health_readback_ref": null, + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "before_after_alert_state_accepted": false, + "before_alert_state_ref": null, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", + "add_action_button", + "store_raw_live_config", + "store_full_receiver_payload", + "collect_bot_token", + "collect_dsn_secret", + "collect_webhook_secret", + "change_alert_rule", + "change_scrape_config", + "change_dashboard", + "change_notification_policy", + "change_silence", + "change_inhibit_rule", + "accept_dashboard_up_as_alert_chain_healthy", + "skip_receiver_receipt", + "skip_stale_review", + "skip_silence_review", + "skip_rollback_validation", + "skip_post_change_monitoring", + "skip_cross_project_sync", + "live_receiver_probe" + ], + "change_intent_or_break_glass_ref": null, + "change_or_outage_time_window_accepted": false, + "change_or_outage_time_window_ref": null, + "config_kind": "monitoring_service_registry", + "control_tier": "C1", + "cross_project_sync_accepted": false, + "cross_project_sync_ref": null, + "dashboard_trace_log_freshness_accepted": false, + "dashboard_trace_log_freshness_ref": null, + "expected_scope": "monitoring_service_registry", + "exporter_deploy_authorized": false, + "followup_owner": "pending_post_incident_readback", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "intent_or_break_glass_accepted": false, + "kubectl_action_authorized": false, + "label": "Monitoring service registry", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "maintenance_window": "pending_post_incident_readback", + "monitoring_incident_or_change_ref": null, + "no_false_green_accepted": false, + "not_approval": true, + "notification_delivery_metadata_accepted": false, + "notification_delivery_metadata_ref": null, + "notification_route_change_authorized": false, + "observability_scope": [ + "service registry", + "target generation" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_post_incident_readback", + "request_actor_or_time_supplement", + "request_alert_state_supplement", + "request_receiver_receipt_supplement", + "request_stale_silence_supplement", + "request_freshness_or_alert_chain_supplement", + "quarantine_raw_payload", + "reject_false_green_claim", + "ready_for_monitoring_post_incident_review", + "recurrence_guard_backfill_required", + "waiting_runtime_gate" + ], + "post_change_monitoring_accepted": false, + "post_change_monitoring_ref": null, + "post_incident_readback_accepted": false, + "post_incident_readback_candidate_id": "monitoring_post_incident_readback:monitoring_service_registry", + "post_incident_readback_received": false, + "postcheck_readback_accepted": false, + "postcheck_readback_ref": null, + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "readback_fields": [ + "post_incident_readback_candidate_id", + "source_acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "receiver_receipt_readback_accepted": false, + "receiver_receipt_readback_ref": null, + "receiver_route_change_authorized": false, + "receiver_route_state_accepted": false, + "receiver_route_state_ref": null, + "recurrence_guard_accepted": false, + "recurrence_guard_ref": null, + "reload_or_no_reload_accepted": false, + "reload_or_no_reload_ref": null, + "remote_write_change_authorized": false, + "repo_sha256": "e01aa01299381506ac901229ab3154329c978358d40882618cfbaa134c007418", + "repo_source_path": "ops/monitoring/service-registry.yaml", + "request_id": "monitoring_owner_request:monitoring_service_registry", + "required_readback_fields": [ + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "followup_owner", + "redacted_evidence_refs", + "no_secret_value_attestation", + "no_raw_payload_attestation", + "no_false_green_attestation", + "receipt_not_route_only_attestation", + "independent_postcheck_attestation", + "noise_budget_or_silence_owner_attestation" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "source_owner_response_acceptance_current", + "incident_or_change_ref_present", + "actor_attribution_present", + "change_or_outage_time_window_present", + "intent_or_break_glass_present", + "before_after_alert_state_present", + "rule_datasource_scrape_state_present", + "receiver_route_state_present", + "reload_or_no_reload_called_out", + "receiver_receipt_readback_present", + "stale_pending_resolved_review_present", + "silence_mute_dedup_inhibit_review_present", + "dashboard_trace_log_freshness_present", + "notification_delivery_metadata_present", + "alert_chain_health_not_route_only", + "cross_project_sync_present", + "rollback_or_disable_validation_present", + "post_change_monitoring_present", + "postcheck_independent", + "recurrence_guard_present", + "maintenance_window_present", + "noise_budget_owner_present", + "redacted_refs_only", + "secret_value_absent", + "raw_payload_absent", + "no_false_green", + "runtime_stays_zero", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_post_incident_readback", + "rollback_or_disable_validation_accepted": false, + "rollback_or_disable_validation_ref": null, + "rollback_owner": "pending_post_incident_readback", + "rule_datasource_scrape_state_accepted": false, + "rule_datasource_scrape_state_ref": null, + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_mute_dedup_inhibit_review_accepted": false, + "silence_mute_dedup_inhibit_review_ref": null, + "silence_policy_change_authorized": false, + "source_acceptance_candidate_id": "monitoring_owner_response_acceptance:monitoring_service_registry", + "source_line_count": 830, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "stale_pending_resolved_review_accepted": false, + "stale_pending_resolved_review_ref": null, + "status": "waiting_post_incident_readback", + "surface_id": "monitoring_service_registry", + "telegram_send_authorized": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "action_buttons_allowed": false, + "active_scan_authorized": false, + "actor_attribution_accepted": false, + "actor_attribution_ref": null, + "after_alert_state_ref": null, + "alert_chain_health_readback_accepted": false, + "alert_chain_health_readback_ref": null, + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "before_after_alert_state_accepted": false, + "before_alert_state_ref": null, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", + "add_action_button", + "store_raw_live_config", + "store_full_receiver_payload", + "collect_bot_token", + "collect_dsn_secret", + "collect_webhook_secret", + "change_alert_rule", + "change_scrape_config", + "change_dashboard", + "change_notification_policy", + "change_silence", + "change_inhibit_rule", + "accept_dashboard_up_as_alert_chain_healthy", + "skip_receiver_receipt", + "skip_stale_review", + "skip_silence_review", + "skip_rollback_validation", + "skip_post_change_monitoring", + "skip_cross_project_sync", + "live_receiver_probe" + ], + "change_intent_or_break_glass_ref": null, + "change_or_outage_time_window_accepted": false, + "change_or_outage_time_window_ref": null, + "config_kind": "exporter_query_config", + "control_tier": "C1", + "cross_project_sync_accepted": false, + "cross_project_sync_ref": null, + "dashboard_trace_log_freshness_accepted": false, + "dashboard_trace_log_freshness_ref": null, + "expected_scope": "postgres_exporter_queries", + "exporter_deploy_authorized": false, + "followup_owner": "pending_post_incident_readback", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "intent_or_break_glass_accepted": false, + "kubectl_action_authorized": false, + "label": "Postgres exporter query config", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "maintenance_window": "pending_post_incident_readback", + "monitoring_incident_or_change_ref": null, + "no_false_green_accepted": false, + "not_approval": true, + "notification_delivery_metadata_accepted": false, + "notification_delivery_metadata_ref": null, + "notification_route_change_authorized": false, + "observability_scope": [ + "PostgreSQL metrics", + "custom exporter queries" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_post_incident_readback", + "request_actor_or_time_supplement", + "request_alert_state_supplement", + "request_receiver_receipt_supplement", + "request_stale_silence_supplement", + "request_freshness_or_alert_chain_supplement", + "quarantine_raw_payload", + "reject_false_green_claim", + "ready_for_monitoring_post_incident_review", + "recurrence_guard_backfill_required", + "waiting_runtime_gate" + ], + "post_change_monitoring_accepted": false, + "post_change_monitoring_ref": null, + "post_incident_readback_accepted": false, + "post_incident_readback_candidate_id": "monitoring_post_incident_readback:postgres_exporter_queries", + "post_incident_readback_received": false, + "postcheck_readback_accepted": false, + "postcheck_readback_ref": null, + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "readback_fields": [ + "post_incident_readback_candidate_id", + "source_acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "receiver_receipt_readback_accepted": false, + "receiver_receipt_readback_ref": null, + "receiver_route_change_authorized": false, + "receiver_route_state_accepted": false, + "receiver_route_state_ref": null, + "recurrence_guard_accepted": false, + "recurrence_guard_ref": null, + "reload_or_no_reload_accepted": false, + "reload_or_no_reload_ref": null, + "remote_write_change_authorized": false, + "repo_sha256": "50102b017c91d24c1dcae79779b4da39ce44628a2bd89250f5145411f0ac6f21", + "repo_source_path": "ops/monitoring/postgres-exporter-queries.yaml", + "request_id": "monitoring_owner_request:postgres_exporter_queries", + "required_readback_fields": [ + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "followup_owner", + "redacted_evidence_refs", + "no_secret_value_attestation", + "no_raw_payload_attestation", + "no_false_green_attestation", + "receipt_not_route_only_attestation", + "independent_postcheck_attestation", + "noise_budget_or_silence_owner_attestation" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "source_owner_response_acceptance_current", + "incident_or_change_ref_present", + "actor_attribution_present", + "change_or_outage_time_window_present", + "intent_or_break_glass_present", + "before_after_alert_state_present", + "rule_datasource_scrape_state_present", + "receiver_route_state_present", + "reload_or_no_reload_called_out", + "receiver_receipt_readback_present", + "stale_pending_resolved_review_present", + "silence_mute_dedup_inhibit_review_present", + "dashboard_trace_log_freshness_present", + "notification_delivery_metadata_present", + "alert_chain_health_not_route_only", + "cross_project_sync_present", + "rollback_or_disable_validation_present", + "post_change_monitoring_present", + "postcheck_independent", + "recurrence_guard_present", + "maintenance_window_present", + "noise_budget_owner_present", + "redacted_refs_only", + "secret_value_absent", + "raw_payload_absent", + "no_false_green", + "runtime_stays_zero", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_post_incident_readback", + "rollback_or_disable_validation_accepted": false, + "rollback_or_disable_validation_ref": null, + "rollback_owner": "pending_post_incident_readback", + "rule_datasource_scrape_state_accepted": false, + "rule_datasource_scrape_state_ref": null, + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_mute_dedup_inhibit_review_accepted": false, + "silence_mute_dedup_inhibit_review_ref": null, + "silence_policy_change_authorized": false, + "source_acceptance_candidate_id": "monitoring_owner_response_acceptance:postgres_exporter_queries", + "source_line_count": 215, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "stale_pending_resolved_review_accepted": false, + "stale_pending_resolved_review_ref": null, + "status": "waiting_post_incident_readback", + "surface_id": "postgres_exporter_queries", + "telegram_send_authorized": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "action_buttons_allowed": false, + "active_scan_authorized": false, + "actor_attribution_accepted": false, + "actor_attribution_ref": null, + "after_alert_state_ref": null, + "alert_chain_health_readback_accepted": false, + "alert_chain_health_readback_ref": null, + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "before_after_alert_state_accepted": false, + "before_alert_state_ref": null, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", + "add_action_button", + "store_raw_live_config", + "store_full_receiver_payload", + "collect_bot_token", + "collect_dsn_secret", + "collect_webhook_secret", + "change_alert_rule", + "change_scrape_config", + "change_dashboard", + "change_notification_policy", + "change_silence", + "change_inhibit_rule", + "accept_dashboard_up_as_alert_chain_healthy", + "skip_receiver_receipt", + "skip_stale_review", + "skip_silence_review", + "skip_rollback_validation", + "skip_post_change_monitoring", + "skip_cross_project_sync", + "live_receiver_probe" + ], + "change_intent_or_break_glass_ref": null, + "change_or_outage_time_window_accepted": false, + "change_or_outage_time_window_ref": null, + "config_kind": "monitoring_runtime_compose", + "control_tier": "C1", + "cross_project_sync_accepted": false, + "cross_project_sync_ref": null, + "dashboard_trace_log_freshness_accepted": false, + "dashboard_trace_log_freshness_ref": null, + "expected_scope": "192.168.0.110_monitoring_stack", + "exporter_deploy_authorized": false, + "followup_owner": "pending_post_incident_readback", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "intent_or_break_glass_accepted": false, + "kubectl_action_authorized": false, + "label": "110 monitoring compose", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "maintenance_window": "pending_post_incident_readback", + "monitoring_incident_or_change_ref": null, + "no_false_green_accepted": false, + "not_approval": true, + "notification_delivery_metadata_accepted": false, + "notification_delivery_metadata_ref": null, + "notification_route_change_authorized": false, + "observability_scope": [ + "Prometheus", + "Grafana", + "Alertmanager", + "blackbox", + "cadvisor" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_post_incident_readback", + "request_actor_or_time_supplement", + "request_alert_state_supplement", + "request_receiver_receipt_supplement", + "request_stale_silence_supplement", + "request_freshness_or_alert_chain_supplement", + "quarantine_raw_payload", + "reject_false_green_claim", + "ready_for_monitoring_post_incident_review", + "recurrence_guard_backfill_required", + "waiting_runtime_gate" + ], + "post_change_monitoring_accepted": false, + "post_change_monitoring_ref": null, + "post_incident_readback_accepted": false, + "post_incident_readback_candidate_id": "monitoring_post_incident_readback:monitoring_110_compose", + "post_incident_readback_received": false, + "postcheck_readback_accepted": false, + "postcheck_readback_ref": null, + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "readback_fields": [ + "post_incident_readback_candidate_id", + "source_acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "receiver_receipt_readback_accepted": false, + "receiver_receipt_readback_ref": null, + "receiver_route_change_authorized": false, + "receiver_route_state_accepted": false, + "receiver_route_state_ref": null, + "recurrence_guard_accepted": false, + "recurrence_guard_ref": null, + "reload_or_no_reload_accepted": false, + "reload_or_no_reload_ref": null, + "remote_write_change_authorized": false, + "repo_sha256": "00126e9a5cb7a3cf2bf02cfddefea11f05849b46835a4e602eac4777fcb25281", + "repo_source_path": "k8s/monitoring/docker-compose-110.yml", + "request_id": "monitoring_owner_request:monitoring_110_compose", + "required_readback_fields": [ + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "followup_owner", + "redacted_evidence_refs", + "no_secret_value_attestation", + "no_raw_payload_attestation", + "no_false_green_attestation", + "receipt_not_route_only_attestation", + "independent_postcheck_attestation", + "noise_budget_or_silence_owner_attestation" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "source_owner_response_acceptance_current", + "incident_or_change_ref_present", + "actor_attribution_present", + "change_or_outage_time_window_present", + "intent_or_break_glass_present", + "before_after_alert_state_present", + "rule_datasource_scrape_state_present", + "receiver_route_state_present", + "reload_or_no_reload_called_out", + "receiver_receipt_readback_present", + "stale_pending_resolved_review_present", + "silence_mute_dedup_inhibit_review_present", + "dashboard_trace_log_freshness_present", + "notification_delivery_metadata_present", + "alert_chain_health_not_route_only", + "cross_project_sync_present", + "rollback_or_disable_validation_present", + "post_change_monitoring_present", + "postcheck_independent", + "recurrence_guard_present", + "maintenance_window_present", + "noise_budget_owner_present", + "redacted_refs_only", + "secret_value_absent", + "raw_payload_absent", + "no_false_green", + "runtime_stays_zero", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_post_incident_readback", + "rollback_or_disable_validation_accepted": false, + "rollback_or_disable_validation_ref": null, + "rollback_owner": "pending_post_incident_readback", + "rule_datasource_scrape_state_accepted": false, + "rule_datasource_scrape_state_ref": null, + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_mute_dedup_inhibit_review_accepted": false, + "silence_mute_dedup_inhibit_review_ref": null, + "silence_policy_change_authorized": false, + "source_acceptance_candidate_id": "monitoring_owner_response_acceptance:monitoring_110_compose", + "source_line_count": 148, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "stale_pending_resolved_review_accepted": false, + "stale_pending_resolved_review_ref": null, + "status": "waiting_post_incident_readback", + "surface_id": "monitoring_110_compose", + "telegram_send_authorized": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "action_buttons_allowed": false, + "active_scan_authorized": false, + "actor_attribution_accepted": false, + "actor_attribution_ref": null, + "after_alert_state_ref": null, + "alert_chain_health_readback_accepted": false, + "alert_chain_health_readback_ref": null, + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "before_after_alert_state_accepted": false, + "before_alert_state_ref": null, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", + "add_action_button", + "store_raw_live_config", + "store_full_receiver_payload", + "collect_bot_token", + "collect_dsn_secret", + "collect_webhook_secret", + "change_alert_rule", + "change_scrape_config", + "change_dashboard", + "change_notification_policy", + "change_silence", + "change_inhibit_rule", + "accept_dashboard_up_as_alert_chain_healthy", + "skip_receiver_receipt", + "skip_stale_review", + "skip_silence_review", + "skip_rollback_validation", + "skip_post_change_monitoring", + "skip_cross_project_sync", + "live_receiver_probe" + ], + "change_intent_or_break_glass_ref": null, + "change_or_outage_time_window_accepted": false, + "change_or_outage_time_window_ref": null, + "config_kind": "monitoring_runtime_compose", + "control_tier": "C1", + "cross_project_sync_accepted": false, + "cross_project_sync_ref": null, + "dashboard_trace_log_freshness_accepted": false, + "dashboard_trace_log_freshness_ref": null, + "expected_scope": "192.168.0.188_exporters", + "exporter_deploy_authorized": false, + "followup_owner": "pending_post_incident_readback", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "intent_or_break_glass_accepted": false, + "kubectl_action_authorized": false, + "label": "188 monitoring exporters compose", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "maintenance_window": "pending_post_incident_readback", + "monitoring_incident_or_change_ref": null, + "no_false_green_accepted": false, + "not_approval": true, + "notification_delivery_metadata_accepted": false, + "notification_delivery_metadata_ref": null, + "notification_route_change_authorized": false, + "observability_scope": [ + "postgres-exporter", + "redis-exporter" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_post_incident_readback", + "request_actor_or_time_supplement", + "request_alert_state_supplement", + "request_receiver_receipt_supplement", + "request_stale_silence_supplement", + "request_freshness_or_alert_chain_supplement", + "quarantine_raw_payload", + "reject_false_green_claim", + "ready_for_monitoring_post_incident_review", + "recurrence_guard_backfill_required", + "waiting_runtime_gate" + ], + "post_change_monitoring_accepted": false, + "post_change_monitoring_ref": null, + "post_incident_readback_accepted": false, + "post_incident_readback_candidate_id": "monitoring_post_incident_readback:monitoring_exporters_compose", + "post_incident_readback_received": false, + "postcheck_readback_accepted": false, + "postcheck_readback_ref": null, + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "readback_fields": [ + "post_incident_readback_candidate_id", + "source_acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "receiver_receipt_readback_accepted": false, + "receiver_receipt_readback_ref": null, + "receiver_route_change_authorized": false, + "receiver_route_state_accepted": false, + "receiver_route_state_ref": null, + "recurrence_guard_accepted": false, + "recurrence_guard_ref": null, + "reload_or_no_reload_accepted": false, + "reload_or_no_reload_ref": null, + "remote_write_change_authorized": false, + "repo_sha256": "3ffb3bd2e98091d18e60b74721904777c27f279c37ab6e873b82e6ef73eb87d4", + "repo_source_path": "ops/monitoring/docker-compose.exporters.yaml", + "request_id": "monitoring_owner_request:monitoring_exporters_compose", + "required_readback_fields": [ + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "followup_owner", + "redacted_evidence_refs", + "no_secret_value_attestation", + "no_raw_payload_attestation", + "no_false_green_attestation", + "receipt_not_route_only_attestation", + "independent_postcheck_attestation", + "noise_budget_or_silence_owner_attestation" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "source_owner_response_acceptance_current", + "incident_or_change_ref_present", + "actor_attribution_present", + "change_or_outage_time_window_present", + "intent_or_break_glass_present", + "before_after_alert_state_present", + "rule_datasource_scrape_state_present", + "receiver_route_state_present", + "reload_or_no_reload_called_out", + "receiver_receipt_readback_present", + "stale_pending_resolved_review_present", + "silence_mute_dedup_inhibit_review_present", + "dashboard_trace_log_freshness_present", + "notification_delivery_metadata_present", + "alert_chain_health_not_route_only", + "cross_project_sync_present", + "rollback_or_disable_validation_present", + "post_change_monitoring_present", + "postcheck_independent", + "recurrence_guard_present", + "maintenance_window_present", + "noise_budget_owner_present", + "redacted_refs_only", + "secret_value_absent", + "raw_payload_absent", + "no_false_green", + "runtime_stays_zero", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_post_incident_readback", + "rollback_or_disable_validation_accepted": false, + "rollback_or_disable_validation_ref": null, + "rollback_owner": "pending_post_incident_readback", + "rule_datasource_scrape_state_accepted": false, + "rule_datasource_scrape_state_ref": null, + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_mute_dedup_inhibit_review_accepted": false, + "silence_mute_dedup_inhibit_review_ref": null, + "silence_policy_change_authorized": false, + "source_acceptance_candidate_id": "monitoring_owner_response_acceptance:monitoring_exporters_compose", + "source_line_count": 69, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "stale_pending_resolved_review_accepted": false, + "stale_pending_resolved_review_ref": null, + "status": "waiting_post_incident_readback", + "surface_id": "monitoring_exporters_compose", + "telegram_send_authorized": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "action_buttons_allowed": false, + "active_scan_authorized": false, + "actor_attribution_accepted": false, + "actor_attribution_ref": null, + "after_alert_state_ref": null, + "alert_chain_health_readback_accepted": false, + "alert_chain_health_readback_ref": null, + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "before_after_alert_state_accepted": false, + "before_alert_state_ref": null, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", + "add_action_button", + "store_raw_live_config", + "store_full_receiver_payload", + "collect_bot_token", + "collect_dsn_secret", + "collect_webhook_secret", + "change_alert_rule", + "change_scrape_config", + "change_dashboard", + "change_notification_policy", + "change_silence", + "change_inhibit_rule", + "accept_dashboard_up_as_alert_chain_healthy", + "skip_receiver_receipt", + "skip_stale_review", + "skip_silence_review", + "skip_rollback_validation", + "skip_post_change_monitoring", + "skip_cross_project_sync", + "live_receiver_probe" + ], + "change_intent_or_break_glass_ref": null, + "change_or_outage_time_window_accepted": false, + "change_or_outage_time_window_ref": null, + "config_kind": "alertmanager_receiver_config", + "control_tier": "C1", + "cross_project_sync_accepted": false, + "cross_project_sync_ref": null, + "dashboard_trace_log_freshness_accepted": false, + "dashboard_trace_log_freshness_ref": null, + "expected_scope": "alertmanager_routes_receivers", + "exporter_deploy_authorized": false, + "followup_owner": "pending_post_incident_readback", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "intent_or_break_glass_accepted": false, + "kubectl_action_authorized": false, + "label": "Alertmanager receiver config", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "maintenance_window": "pending_post_incident_readback", + "monitoring_incident_or_change_ref": null, + "no_false_green_accepted": false, + "not_approval": true, + "notification_delivery_metadata_accepted": false, + "notification_delivery_metadata_ref": null, + "notification_route_change_authorized": false, + "observability_scope": [ + "routes", + "receivers", + "grouping", + "Telegram / webhook receiver boundary" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_post_incident_readback", + "request_actor_or_time_supplement", + "request_alert_state_supplement", + "request_receiver_receipt_supplement", + "request_stale_silence_supplement", + "request_freshness_or_alert_chain_supplement", + "quarantine_raw_payload", + "reject_false_green_claim", + "ready_for_monitoring_post_incident_review", + "recurrence_guard_backfill_required", + "waiting_runtime_gate" + ], + "post_change_monitoring_accepted": false, + "post_change_monitoring_ref": null, + "post_incident_readback_accepted": false, + "post_incident_readback_candidate_id": "monitoring_post_incident_readback:alertmanager_receiver_config", + "post_incident_readback_received": false, + "postcheck_readback_accepted": false, + "postcheck_readback_ref": null, + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "readback_fields": [ + "post_incident_readback_candidate_id", + "source_acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "receiver_receipt_readback_accepted": false, + "receiver_receipt_readback_ref": null, + "receiver_route_change_authorized": false, + "receiver_route_state_accepted": false, + "receiver_route_state_ref": null, + "recurrence_guard_accepted": false, + "recurrence_guard_ref": null, + "reload_or_no_reload_accepted": false, + "reload_or_no_reload_ref": null, + "remote_write_change_authorized": false, + "repo_sha256": "7ee436fbe114bd2fffa616d8d87c42dd0cc7f59151dc03ab09258dfa83a1de86", + "repo_source_path": "ops/alertmanager/alertmanager.yml", + "request_id": "monitoring_owner_request:alertmanager_receiver_config", + "required_readback_fields": [ + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "followup_owner", + "redacted_evidence_refs", + "no_secret_value_attestation", + "no_raw_payload_attestation", + "no_false_green_attestation", + "receipt_not_route_only_attestation", + "independent_postcheck_attestation", + "noise_budget_or_silence_owner_attestation" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "source_owner_response_acceptance_current", + "incident_or_change_ref_present", + "actor_attribution_present", + "change_or_outage_time_window_present", + "intent_or_break_glass_present", + "before_after_alert_state_present", + "rule_datasource_scrape_state_present", + "receiver_route_state_present", + "reload_or_no_reload_called_out", + "receiver_receipt_readback_present", + "stale_pending_resolved_review_present", + "silence_mute_dedup_inhibit_review_present", + "dashboard_trace_log_freshness_present", + "notification_delivery_metadata_present", + "alert_chain_health_not_route_only", + "cross_project_sync_present", + "rollback_or_disable_validation_present", + "post_change_monitoring_present", + "postcheck_independent", + "recurrence_guard_present", + "maintenance_window_present", + "noise_budget_owner_present", + "redacted_refs_only", + "secret_value_absent", + "raw_payload_absent", + "no_false_green", + "runtime_stays_zero", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_post_incident_readback", + "rollback_or_disable_validation_accepted": false, + "rollback_or_disable_validation_ref": null, + "rollback_owner": "pending_post_incident_readback", + "rule_datasource_scrape_state_accepted": false, + "rule_datasource_scrape_state_ref": null, + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_mute_dedup_inhibit_review_accepted": false, + "silence_mute_dedup_inhibit_review_ref": null, + "silence_policy_change_authorized": false, + "source_acceptance_candidate_id": "monitoring_owner_response_acceptance:alertmanager_receiver_config", + "source_line_count": 146, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "stale_pending_resolved_review_accepted": false, + "stale_pending_resolved_review_ref": null, + "status": "waiting_post_incident_readback", + "surface_id": "alertmanager_receiver_config", + "telegram_send_authorized": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "action_buttons_allowed": false, + "active_scan_authorized": false, + "actor_attribution_accepted": false, + "actor_attribution_ref": null, + "after_alert_state_ref": null, + "alert_chain_health_readback_accepted": false, + "alert_chain_health_readback_ref": null, + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "before_after_alert_state_accepted": false, + "before_alert_state_ref": null, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", + "add_action_button", + "store_raw_live_config", + "store_full_receiver_payload", + "collect_bot_token", + "collect_dsn_secret", + "collect_webhook_secret", + "change_alert_rule", + "change_scrape_config", + "change_dashboard", + "change_notification_policy", + "change_silence", + "change_inhibit_rule", + "accept_dashboard_up_as_alert_chain_healthy", + "skip_receiver_receipt", + "skip_stale_review", + "skip_silence_review", + "skip_rollback_validation", + "skip_post_change_monitoring", + "skip_cross_project_sync", + "live_receiver_probe" + ], + "change_intent_or_break_glass_ref": null, + "change_or_outage_time_window_accepted": false, + "change_or_outage_time_window_ref": null, + "config_kind": "prometheus_alert_rules", + "control_tier": "C1", + "cross_project_sync_accepted": false, + "cross_project_sync_ref": null, + "dashboard_trace_log_freshness_accepted": false, + "dashboard_trace_log_freshness_ref": null, + "expected_scope": "ops_prometheus_alerts", + "exporter_deploy_authorized": false, + "followup_owner": "pending_post_incident_readback", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "intent_or_break_glass_accepted": false, + "kubectl_action_authorized": false, + "label": "Ops Prometheus alerts", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "maintenance_window": "pending_post_incident_readback", + "monitoring_incident_or_change_ref": null, + "no_false_green_accepted": false, + "not_approval": true, + "notification_delivery_metadata_accepted": false, + "notification_delivery_metadata_ref": null, + "notification_route_change_authorized": false, + "observability_scope": [ + "infrastructure alerts", + "backup alerts", + "route alerts" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_post_incident_readback", + "request_actor_or_time_supplement", + "request_alert_state_supplement", + "request_receiver_receipt_supplement", + "request_stale_silence_supplement", + "request_freshness_or_alert_chain_supplement", + "quarantine_raw_payload", + "reject_false_green_claim", + "ready_for_monitoring_post_incident_review", + "recurrence_guard_backfill_required", + "waiting_runtime_gate" + ], + "post_change_monitoring_accepted": false, + "post_change_monitoring_ref": null, + "post_incident_readback_accepted": false, + "post_incident_readback_candidate_id": "monitoring_post_incident_readback:prometheus_alerts_ops", + "post_incident_readback_received": false, + "postcheck_readback_accepted": false, + "postcheck_readback_ref": null, + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "readback_fields": [ + "post_incident_readback_candidate_id", + "source_acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "receiver_receipt_readback_accepted": false, + "receiver_receipt_readback_ref": null, + "receiver_route_change_authorized": false, + "receiver_route_state_accepted": false, + "receiver_route_state_ref": null, + "recurrence_guard_accepted": false, + "recurrence_guard_ref": null, + "reload_or_no_reload_accepted": false, + "reload_or_no_reload_ref": null, + "remote_write_change_authorized": false, + "repo_sha256": "94d439a2ea599995601a5022dc0a001cc09f405964cd1308b103f86e2af14e90", + "repo_source_path": "ops/monitoring/alerts.yml", + "request_id": "monitoring_owner_request:prometheus_alerts_ops", + "required_readback_fields": [ + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "followup_owner", + "redacted_evidence_refs", + "no_secret_value_attestation", + "no_raw_payload_attestation", + "no_false_green_attestation", + "receipt_not_route_only_attestation", + "independent_postcheck_attestation", + "noise_budget_or_silence_owner_attestation" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "source_owner_response_acceptance_current", + "incident_or_change_ref_present", + "actor_attribution_present", + "change_or_outage_time_window_present", + "intent_or_break_glass_present", + "before_after_alert_state_present", + "rule_datasource_scrape_state_present", + "receiver_route_state_present", + "reload_or_no_reload_called_out", + "receiver_receipt_readback_present", + "stale_pending_resolved_review_present", + "silence_mute_dedup_inhibit_review_present", + "dashboard_trace_log_freshness_present", + "notification_delivery_metadata_present", + "alert_chain_health_not_route_only", + "cross_project_sync_present", + "rollback_or_disable_validation_present", + "post_change_monitoring_present", + "postcheck_independent", + "recurrence_guard_present", + "maintenance_window_present", + "noise_budget_owner_present", + "redacted_refs_only", + "secret_value_absent", + "raw_payload_absent", + "no_false_green", + "runtime_stays_zero", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_post_incident_readback", + "rollback_or_disable_validation_accepted": false, + "rollback_or_disable_validation_ref": null, + "rollback_owner": "pending_post_incident_readback", + "rule_datasource_scrape_state_accepted": false, + "rule_datasource_scrape_state_ref": null, + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_mute_dedup_inhibit_review_accepted": false, + "silence_mute_dedup_inhibit_review_ref": null, + "silence_policy_change_authorized": false, + "source_acceptance_candidate_id": "monitoring_owner_response_acceptance:prometheus_alerts_ops", + "source_line_count": 1355, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "stale_pending_resolved_review_accepted": false, + "stale_pending_resolved_review_ref": null, + "status": "waiting_post_incident_readback", + "surface_id": "prometheus_alerts_ops", + "telegram_send_authorized": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "action_buttons_allowed": false, + "active_scan_authorized": false, + "actor_attribution_accepted": false, + "actor_attribution_ref": null, + "after_alert_state_ref": null, + "alert_chain_health_readback_accepted": false, + "alert_chain_health_readback_ref": null, + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "before_after_alert_state_accepted": false, + "before_alert_state_ref": null, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", + "add_action_button", + "store_raw_live_config", + "store_full_receiver_payload", + "collect_bot_token", + "collect_dsn_secret", + "collect_webhook_secret", + "change_alert_rule", + "change_scrape_config", + "change_dashboard", + "change_notification_policy", + "change_silence", + "change_inhibit_rule", + "accept_dashboard_up_as_alert_chain_healthy", + "skip_receiver_receipt", + "skip_stale_review", + "skip_silence_review", + "skip_rollback_validation", + "skip_post_change_monitoring", + "skip_cross_project_sync", + "live_receiver_probe" + ], + "change_intent_or_break_glass_ref": null, + "change_or_outage_time_window_accepted": false, + "change_or_outage_time_window_ref": null, + "config_kind": "prometheus_alert_rules", + "control_tier": "C1", + "cross_project_sync_accepted": false, + "cross_project_sync_ref": null, + "dashboard_trace_log_freshness_accepted": false, + "dashboard_trace_log_freshness_ref": null, + "expected_scope": "unified_prometheus_alerts", + "exporter_deploy_authorized": false, + "followup_owner": "pending_post_incident_readback", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "intent_or_break_glass_accepted": false, + "kubectl_action_authorized": false, + "label": "Unified Prometheus alerts", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "maintenance_window": "pending_post_incident_readback", + "monitoring_incident_or_change_ref": null, + "no_false_green_accepted": false, + "not_approval": true, + "notification_delivery_metadata_accepted": false, + "notification_delivery_metadata_ref": null, + "notification_route_change_authorized": false, + "observability_scope": [ + "unified alerts", + "routing labels" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_post_incident_readback", + "request_actor_or_time_supplement", + "request_alert_state_supplement", + "request_receiver_receipt_supplement", + "request_stale_silence_supplement", + "request_freshness_or_alert_chain_supplement", + "quarantine_raw_payload", + "reject_false_green_claim", + "ready_for_monitoring_post_incident_review", + "recurrence_guard_backfill_required", + "waiting_runtime_gate" + ], + "post_change_monitoring_accepted": false, + "post_change_monitoring_ref": null, + "post_incident_readback_accepted": false, + "post_incident_readback_candidate_id": "monitoring_post_incident_readback:prometheus_alerts_unified", + "post_incident_readback_received": false, + "postcheck_readback_accepted": false, + "postcheck_readback_ref": null, + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "readback_fields": [ + "post_incident_readback_candidate_id", + "source_acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "receiver_receipt_readback_accepted": false, + "receiver_receipt_readback_ref": null, + "receiver_route_change_authorized": false, + "receiver_route_state_accepted": false, + "receiver_route_state_ref": null, + "recurrence_guard_accepted": false, + "recurrence_guard_ref": null, + "reload_or_no_reload_accepted": false, + "reload_or_no_reload_ref": null, + "remote_write_change_authorized": false, + "repo_sha256": "97b5be44a5af982c8013323d353c67748f87a7336d22a7c8270d7d6a1546bf45", + "repo_source_path": "ops/monitoring/alerts-unified.yml", + "request_id": "monitoring_owner_request:prometheus_alerts_unified", + "required_readback_fields": [ + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "followup_owner", + "redacted_evidence_refs", + "no_secret_value_attestation", + "no_raw_payload_attestation", + "no_false_green_attestation", + "receipt_not_route_only_attestation", + "independent_postcheck_attestation", + "noise_budget_or_silence_owner_attestation" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "source_owner_response_acceptance_current", + "incident_or_change_ref_present", + "actor_attribution_present", + "change_or_outage_time_window_present", + "intent_or_break_glass_present", + "before_after_alert_state_present", + "rule_datasource_scrape_state_present", + "receiver_route_state_present", + "reload_or_no_reload_called_out", + "receiver_receipt_readback_present", + "stale_pending_resolved_review_present", + "silence_mute_dedup_inhibit_review_present", + "dashboard_trace_log_freshness_present", + "notification_delivery_metadata_present", + "alert_chain_health_not_route_only", + "cross_project_sync_present", + "rollback_or_disable_validation_present", + "post_change_monitoring_present", + "postcheck_independent", + "recurrence_guard_present", + "maintenance_window_present", + "noise_budget_owner_present", + "redacted_refs_only", + "secret_value_absent", + "raw_payload_absent", + "no_false_green", + "runtime_stays_zero", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_post_incident_readback", + "rollback_or_disable_validation_accepted": false, + "rollback_or_disable_validation_ref": null, + "rollback_owner": "pending_post_incident_readback", + "rule_datasource_scrape_state_accepted": false, + "rule_datasource_scrape_state_ref": null, + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_mute_dedup_inhibit_review_accepted": false, + "silence_mute_dedup_inhibit_review_ref": null, + "silence_policy_change_authorized": false, + "source_acceptance_candidate_id": "monitoring_owner_response_acceptance:prometheus_alerts_unified", + "source_line_count": 2031, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "stale_pending_resolved_review_accepted": false, + "stale_pending_resolved_review_ref": null, + "status": "waiting_post_incident_readback", + "surface_id": "prometheus_alerts_unified", + "telegram_send_authorized": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "action_buttons_allowed": false, + "active_scan_authorized": false, + "actor_attribution_accepted": false, + "actor_attribution_ref": null, + "after_alert_state_ref": null, + "alert_chain_health_readback_accepted": false, + "alert_chain_health_readback_ref": null, + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "before_after_alert_state_accepted": false, + "before_alert_state_ref": null, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", + "add_action_button", + "store_raw_live_config", + "store_full_receiver_payload", + "collect_bot_token", + "collect_dsn_secret", + "collect_webhook_secret", + "change_alert_rule", + "change_scrape_config", + "change_dashboard", + "change_notification_policy", + "change_silence", + "change_inhibit_rule", + "accept_dashboard_up_as_alert_chain_healthy", + "skip_receiver_receipt", + "skip_stale_review", + "skip_silence_review", + "skip_rollback_validation", + "skip_post_change_monitoring", + "skip_cross_project_sync", + "live_receiver_probe" + ], + "change_intent_or_break_glass_ref": null, + "change_or_outage_time_window_accepted": false, + "change_or_outage_time_window_ref": null, + "config_kind": "prometheus_alert_rules", + "control_tier": "C1", + "cross_project_sync_accepted": false, + "cross_project_sync_ref": null, + "dashboard_trace_log_freshness_accepted": false, + "dashboard_trace_log_freshness_ref": null, + "expected_scope": "prometheus_slo_rules", + "exporter_deploy_authorized": false, + "followup_owner": "pending_post_incident_readback", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "intent_or_break_glass_accepted": false, + "kubectl_action_authorized": false, + "label": "Prometheus SLO rules", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "maintenance_window": "pending_post_incident_readback", + "monitoring_incident_or_change_ref": null, + "no_false_green_accepted": false, + "not_approval": true, + "notification_delivery_metadata_accepted": false, + "notification_delivery_metadata_ref": null, + "notification_route_change_authorized": false, + "observability_scope": [ + "SLO burn rate", + "availability indicators" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_post_incident_readback", + "request_actor_or_time_supplement", + "request_alert_state_supplement", + "request_receiver_receipt_supplement", + "request_stale_silence_supplement", + "request_freshness_or_alert_chain_supplement", + "quarantine_raw_payload", + "reject_false_green_claim", + "ready_for_monitoring_post_incident_review", + "recurrence_guard_backfill_required", + "waiting_runtime_gate" + ], + "post_change_monitoring_accepted": false, + "post_change_monitoring_ref": null, + "post_incident_readback_accepted": false, + "post_incident_readback_candidate_id": "monitoring_post_incident_readback:prometheus_slo_rules", + "post_incident_readback_received": false, + "postcheck_readback_accepted": false, + "postcheck_readback_ref": null, + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "readback_fields": [ + "post_incident_readback_candidate_id", + "source_acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "receiver_receipt_readback_accepted": false, + "receiver_receipt_readback_ref": null, + "receiver_route_change_authorized": false, + "receiver_route_state_accepted": false, + "receiver_route_state_ref": null, + "recurrence_guard_accepted": false, + "recurrence_guard_ref": null, + "reload_or_no_reload_accepted": false, + "reload_or_no_reload_ref": null, + "remote_write_change_authorized": false, + "repo_sha256": "31b7cbe0af22c5ad2320cf23fd06cce73a93194acff0e1d4045ed0acb7b3b3bd", + "repo_source_path": "ops/monitoring/slo-rules.yml", + "request_id": "monitoring_owner_request:prometheus_slo_rules", + "required_readback_fields": [ + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "followup_owner", + "redacted_evidence_refs", + "no_secret_value_attestation", + "no_raw_payload_attestation", + "no_false_green_attestation", + "receipt_not_route_only_attestation", + "independent_postcheck_attestation", + "noise_budget_or_silence_owner_attestation" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "source_owner_response_acceptance_current", + "incident_or_change_ref_present", + "actor_attribution_present", + "change_or_outage_time_window_present", + "intent_or_break_glass_present", + "before_after_alert_state_present", + "rule_datasource_scrape_state_present", + "receiver_route_state_present", + "reload_or_no_reload_called_out", + "receiver_receipt_readback_present", + "stale_pending_resolved_review_present", + "silence_mute_dedup_inhibit_review_present", + "dashboard_trace_log_freshness_present", + "notification_delivery_metadata_present", + "alert_chain_health_not_route_only", + "cross_project_sync_present", + "rollback_or_disable_validation_present", + "post_change_monitoring_present", + "postcheck_independent", + "recurrence_guard_present", + "maintenance_window_present", + "noise_budget_owner_present", + "redacted_refs_only", + "secret_value_absent", + "raw_payload_absent", + "no_false_green", + "runtime_stays_zero", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_post_incident_readback", + "rollback_or_disable_validation_accepted": false, + "rollback_or_disable_validation_ref": null, + "rollback_owner": "pending_post_incident_readback", + "rule_datasource_scrape_state_accepted": false, + "rule_datasource_scrape_state_ref": null, + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_mute_dedup_inhibit_review_accepted": false, + "silence_mute_dedup_inhibit_review_ref": null, + "silence_policy_change_authorized": false, + "source_acceptance_candidate_id": "monitoring_owner_response_acceptance:prometheus_slo_rules", + "source_line_count": 257, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "stale_pending_resolved_review_accepted": false, + "stale_pending_resolved_review_ref": null, + "status": "waiting_post_incident_readback", + "surface_id": "prometheus_slo_rules", + "telegram_send_authorized": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "action_buttons_allowed": false, + "active_scan_authorized": false, + "actor_attribution_accepted": false, + "actor_attribution_ref": null, + "after_alert_state_ref": null, + "alert_chain_health_readback_accepted": false, + "alert_chain_health_readback_ref": null, + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "before_after_alert_state_accepted": false, + "before_alert_state_ref": null, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", + "add_action_button", + "store_raw_live_config", + "store_full_receiver_payload", + "collect_bot_token", + "collect_dsn_secret", + "collect_webhook_secret", + "change_alert_rule", + "change_scrape_config", + "change_dashboard", + "change_notification_policy", + "change_silence", + "change_inhibit_rule", + "accept_dashboard_up_as_alert_chain_healthy", + "skip_receiver_receipt", + "skip_stale_review", + "skip_silence_review", + "skip_rollback_validation", + "skip_post_change_monitoring", + "skip_cross_project_sync", + "live_receiver_probe" + ], + "change_intent_or_break_glass_ref": null, + "change_or_outage_time_window_accepted": false, + "change_or_outage_time_window_ref": null, + "config_kind": "prometheus_alert_rules", + "control_tier": "C1", + "cross_project_sync_accepted": false, + "cross_project_sync_ref": null, + "dashboard_trace_log_freshness_accepted": false, + "dashboard_trace_log_freshness_ref": null, + "expected_scope": "ollama_health_rules", + "exporter_deploy_authorized": false, + "followup_owner": "pending_post_incident_readback", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "intent_or_break_glass_accepted": false, + "kubectl_action_authorized": false, + "label": "Ollama health alert rules", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "maintenance_window": "pending_post_incident_readback", + "monitoring_incident_or_change_ref": null, + "no_false_green_accepted": false, + "not_approval": true, + "notification_delivery_metadata_accepted": false, + "notification_delivery_metadata_ref": null, + "notification_route_change_authorized": false, + "observability_scope": [ + "Ollama health", + "AI provider availability" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_post_incident_readback", + "request_actor_or_time_supplement", + "request_alert_state_supplement", + "request_receiver_receipt_supplement", + "request_stale_silence_supplement", + "request_freshness_or_alert_chain_supplement", + "quarantine_raw_payload", + "reject_false_green_claim", + "ready_for_monitoring_post_incident_review", + "recurrence_guard_backfill_required", + "waiting_runtime_gate" + ], + "post_change_monitoring_accepted": false, + "post_change_monitoring_ref": null, + "post_incident_readback_accepted": false, + "post_incident_readback_candidate_id": "monitoring_post_incident_readback:prometheus_ollama_health_rules", + "post_incident_readback_received": false, + "postcheck_readback_accepted": false, + "postcheck_readback_ref": null, + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "readback_fields": [ + "post_incident_readback_candidate_id", + "source_acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "receiver_receipt_readback_accepted": false, + "receiver_receipt_readback_ref": null, + "receiver_route_change_authorized": false, + "receiver_route_state_accepted": false, + "receiver_route_state_ref": null, + "recurrence_guard_accepted": false, + "recurrence_guard_ref": null, + "reload_or_no_reload_accepted": false, + "reload_or_no_reload_ref": null, + "remote_write_change_authorized": false, + "repo_sha256": "9f994c654d8a8c6c7d570fec0ba0418f8d4cc7fe4e4a83cb1bb80988a3cd0b55", + "repo_source_path": "ops/monitoring/ollama_health_rules.yaml", + "request_id": "monitoring_owner_request:prometheus_ollama_health_rules", + "required_readback_fields": [ + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "followup_owner", + "redacted_evidence_refs", + "no_secret_value_attestation", + "no_raw_payload_attestation", + "no_false_green_attestation", + "receipt_not_route_only_attestation", + "independent_postcheck_attestation", + "noise_budget_or_silence_owner_attestation" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "source_owner_response_acceptance_current", + "incident_or_change_ref_present", + "actor_attribution_present", + "change_or_outage_time_window_present", + "intent_or_break_glass_present", + "before_after_alert_state_present", + "rule_datasource_scrape_state_present", + "receiver_route_state_present", + "reload_or_no_reload_called_out", + "receiver_receipt_readback_present", + "stale_pending_resolved_review_present", + "silence_mute_dedup_inhibit_review_present", + "dashboard_trace_log_freshness_present", + "notification_delivery_metadata_present", + "alert_chain_health_not_route_only", + "cross_project_sync_present", + "rollback_or_disable_validation_present", + "post_change_monitoring_present", + "postcheck_independent", + "recurrence_guard_present", + "maintenance_window_present", + "noise_budget_owner_present", + "redacted_refs_only", + "secret_value_absent", + "raw_payload_absent", + "no_false_green", + "runtime_stays_zero", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_post_incident_readback", + "rollback_or_disable_validation_accepted": false, + "rollback_or_disable_validation_ref": null, + "rollback_owner": "pending_post_incident_readback", + "rule_datasource_scrape_state_accepted": false, + "rule_datasource_scrape_state_ref": null, + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_mute_dedup_inhibit_review_accepted": false, + "silence_mute_dedup_inhibit_review_ref": null, + "silence_policy_change_authorized": false, + "source_acceptance_candidate_id": "monitoring_owner_response_acceptance:prometheus_ollama_health_rules", + "source_line_count": 149, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "stale_pending_resolved_review_accepted": false, + "stale_pending_resolved_review_ref": null, + "status": "waiting_post_incident_readback", + "surface_id": "prometheus_ollama_health_rules", + "telegram_send_authorized": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "action_buttons_allowed": false, + "active_scan_authorized": false, + "actor_attribution_accepted": false, + "actor_attribution_ref": null, + "after_alert_state_ref": null, + "alert_chain_health_readback_accepted": false, + "alert_chain_health_readback_ref": null, + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "before_after_alert_state_accepted": false, + "before_alert_state_ref": null, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", + "add_action_button", + "store_raw_live_config", + "store_full_receiver_payload", + "collect_bot_token", + "collect_dsn_secret", + "collect_webhook_secret", + "change_alert_rule", + "change_scrape_config", + "change_dashboard", + "change_notification_policy", + "change_silence", + "change_inhibit_rule", + "accept_dashboard_up_as_alert_chain_healthy", + "skip_receiver_receipt", + "skip_stale_review", + "skip_silence_review", + "skip_rollback_validation", + "skip_post_change_monitoring", + "skip_cross_project_sync", + "live_receiver_probe" + ], + "change_intent_or_break_glass_ref": null, + "change_or_outage_time_window_accepted": false, + "change_or_outage_time_window_ref": null, + "config_kind": "prometheus_alert_rules", + "control_tier": "C1", + "cross_project_sync_accepted": false, + "cross_project_sync_ref": null, + "dashboard_trace_log_freshness_accepted": false, + "dashboard_trace_log_freshness_ref": null, + "expected_scope": "k3s_cluster_alerts", + "exporter_deploy_authorized": false, + "followup_owner": "pending_post_incident_readback", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "intent_or_break_glass_accepted": false, + "kubectl_action_authorized": false, + "label": "K3s alert rules", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "maintenance_window": "pending_post_incident_readback", + "monitoring_incident_or_change_ref": null, + "no_false_green_accepted": false, + "not_approval": true, + "notification_delivery_metadata_accepted": false, + "notification_delivery_metadata_ref": null, + "notification_route_change_authorized": false, + "observability_scope": [ + "K3s workloads", + "cluster health" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_post_incident_readback", + "request_actor_or_time_supplement", + "request_alert_state_supplement", + "request_receiver_receipt_supplement", + "request_stale_silence_supplement", + "request_freshness_or_alert_chain_supplement", + "quarantine_raw_payload", + "reject_false_green_claim", + "ready_for_monitoring_post_incident_review", + "recurrence_guard_backfill_required", + "waiting_runtime_gate" + ], + "post_change_monitoring_accepted": false, + "post_change_monitoring_ref": null, + "post_incident_readback_accepted": false, + "post_incident_readback_candidate_id": "monitoring_post_incident_readback:k8s_k3s_alerts", + "post_incident_readback_received": false, + "postcheck_readback_accepted": false, + "postcheck_readback_ref": null, + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "readback_fields": [ + "post_incident_readback_candidate_id", + "source_acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "receiver_receipt_readback_accepted": false, + "receiver_receipt_readback_ref": null, + "receiver_route_change_authorized": false, + "receiver_route_state_accepted": false, + "receiver_route_state_ref": null, + "recurrence_guard_accepted": false, + "recurrence_guard_ref": null, + "reload_or_no_reload_accepted": false, + "reload_or_no_reload_ref": null, + "remote_write_change_authorized": false, + "repo_sha256": "be1a4e796f6f6363566898ffd07ac37a938255b895cde11743fe0770d9946663", + "repo_source_path": "k8s/monitoring/k3s-alerts.yaml", + "request_id": "monitoring_owner_request:k8s_k3s_alerts", + "required_readback_fields": [ + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "followup_owner", + "redacted_evidence_refs", + "no_secret_value_attestation", + "no_raw_payload_attestation", + "no_false_green_attestation", + "receipt_not_route_only_attestation", + "independent_postcheck_attestation", + "noise_budget_or_silence_owner_attestation" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "source_owner_response_acceptance_current", + "incident_or_change_ref_present", + "actor_attribution_present", + "change_or_outage_time_window_present", + "intent_or_break_glass_present", + "before_after_alert_state_present", + "rule_datasource_scrape_state_present", + "receiver_route_state_present", + "reload_or_no_reload_called_out", + "receiver_receipt_readback_present", + "stale_pending_resolved_review_present", + "silence_mute_dedup_inhibit_review_present", + "dashboard_trace_log_freshness_present", + "notification_delivery_metadata_present", + "alert_chain_health_not_route_only", + "cross_project_sync_present", + "rollback_or_disable_validation_present", + "post_change_monitoring_present", + "postcheck_independent", + "recurrence_guard_present", + "maintenance_window_present", + "noise_budget_owner_present", + "redacted_refs_only", + "secret_value_absent", + "raw_payload_absent", + "no_false_green", + "runtime_stays_zero", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_post_incident_readback", + "rollback_or_disable_validation_accepted": false, + "rollback_or_disable_validation_ref": null, + "rollback_owner": "pending_post_incident_readback", + "rule_datasource_scrape_state_accepted": false, + "rule_datasource_scrape_state_ref": null, + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_mute_dedup_inhibit_review_accepted": false, + "silence_mute_dedup_inhibit_review_ref": null, + "silence_policy_change_authorized": false, + "source_acceptance_candidate_id": "monitoring_owner_response_acceptance:k8s_k3s_alerts", + "source_line_count": 203, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "stale_pending_resolved_review_accepted": false, + "stale_pending_resolved_review_ref": null, + "status": "waiting_post_incident_readback", + "surface_id": "k8s_k3s_alerts", + "telegram_send_authorized": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "action_buttons_allowed": false, + "active_scan_authorized": false, + "actor_attribution_accepted": false, + "actor_attribution_ref": null, + "after_alert_state_ref": null, + "alert_chain_health_readback_accepted": false, + "alert_chain_health_readback_ref": null, + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "before_after_alert_state_accepted": false, + "before_alert_state_ref": null, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", + "add_action_button", + "store_raw_live_config", + "store_full_receiver_payload", + "collect_bot_token", + "collect_dsn_secret", + "collect_webhook_secret", + "change_alert_rule", + "change_scrape_config", + "change_dashboard", + "change_notification_policy", + "change_silence", + "change_inhibit_rule", + "accept_dashboard_up_as_alert_chain_healthy", + "skip_receiver_receipt", + "skip_stale_review", + "skip_silence_review", + "skip_rollback_validation", + "skip_post_change_monitoring", + "skip_cross_project_sync", + "live_receiver_probe" + ], + "change_intent_or_break_glass_ref": null, + "change_or_outage_time_window_accepted": false, + "change_or_outage_time_window_ref": null, + "config_kind": "prometheus_alert_rules", + "control_tier": "C1", + "cross_project_sync_accepted": false, + "cross_project_sync_ref": null, + "dashboard_trace_log_freshness_accepted": false, + "dashboard_trace_log_freshness_ref": null, + "expected_scope": "k3s_supplemental_alerts", + "exporter_deploy_authorized": false, + "followup_owner": "pending_post_incident_readback", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "intent_or_break_glass_accepted": false, + "kubectl_action_authorized": false, + "label": "K3s supplemental alert rules", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "maintenance_window": "pending_post_incident_readback", + "monitoring_incident_or_change_ref": null, + "no_false_green_accepted": false, + "not_approval": true, + "notification_delivery_metadata_accepted": false, + "notification_delivery_metadata_ref": null, + "notification_route_change_authorized": false, + "observability_scope": [ + "K3s supplemental health", + "gap alerts" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_post_incident_readback", + "request_actor_or_time_supplement", + "request_alert_state_supplement", + "request_receiver_receipt_supplement", + "request_stale_silence_supplement", + "request_freshness_or_alert_chain_supplement", + "quarantine_raw_payload", + "reject_false_green_claim", + "ready_for_monitoring_post_incident_review", + "recurrence_guard_backfill_required", + "waiting_runtime_gate" + ], + "post_change_monitoring_accepted": false, + "post_change_monitoring_ref": null, + "post_incident_readback_accepted": false, + "post_incident_readback_candidate_id": "monitoring_post_incident_readback:k8s_k3s_supplemental_alerts", + "post_incident_readback_received": false, + "postcheck_readback_accepted": false, + "postcheck_readback_ref": null, + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "readback_fields": [ + "post_incident_readback_candidate_id", + "source_acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "receiver_receipt_readback_accepted": false, + "receiver_receipt_readback_ref": null, + "receiver_route_change_authorized": false, + "receiver_route_state_accepted": false, + "receiver_route_state_ref": null, + "recurrence_guard_accepted": false, + "recurrence_guard_ref": null, + "reload_or_no_reload_accepted": false, + "reload_or_no_reload_ref": null, + "remote_write_change_authorized": false, + "repo_sha256": "14fd4f8c7deaf22c6828ffbf66400e6d0e274f03db1999197af26311bdb6d203", + "repo_source_path": "k8s/monitoring/k3s-alerts-supplemental.yaml", + "request_id": "monitoring_owner_request:k8s_k3s_supplemental_alerts", + "required_readback_fields": [ + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "followup_owner", + "redacted_evidence_refs", + "no_secret_value_attestation", + "no_raw_payload_attestation", + "no_false_green_attestation", + "receipt_not_route_only_attestation", + "independent_postcheck_attestation", + "noise_budget_or_silence_owner_attestation" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "source_owner_response_acceptance_current", + "incident_or_change_ref_present", + "actor_attribution_present", + "change_or_outage_time_window_present", + "intent_or_break_glass_present", + "before_after_alert_state_present", + "rule_datasource_scrape_state_present", + "receiver_route_state_present", + "reload_or_no_reload_called_out", + "receiver_receipt_readback_present", + "stale_pending_resolved_review_present", + "silence_mute_dedup_inhibit_review_present", + "dashboard_trace_log_freshness_present", + "notification_delivery_metadata_present", + "alert_chain_health_not_route_only", + "cross_project_sync_present", + "rollback_or_disable_validation_present", + "post_change_monitoring_present", + "postcheck_independent", + "recurrence_guard_present", + "maintenance_window_present", + "noise_budget_owner_present", + "redacted_refs_only", + "secret_value_absent", + "raw_payload_absent", + "no_false_green", + "runtime_stays_zero", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_post_incident_readback", + "rollback_or_disable_validation_accepted": false, + "rollback_or_disable_validation_ref": null, + "rollback_owner": "pending_post_incident_readback", + "rule_datasource_scrape_state_accepted": false, + "rule_datasource_scrape_state_ref": null, + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_mute_dedup_inhibit_review_accepted": false, + "silence_mute_dedup_inhibit_review_ref": null, + "silence_policy_change_authorized": false, + "source_acceptance_candidate_id": "monitoring_owner_response_acceptance:k8s_k3s_supplemental_alerts", + "source_line_count": 290, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "stale_pending_resolved_review_accepted": false, + "stale_pending_resolved_review_ref": null, + "status": "waiting_post_incident_readback", + "surface_id": "k8s_k3s_supplemental_alerts", + "telegram_send_authorized": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "action_buttons_allowed": false, + "active_scan_authorized": false, + "actor_attribution_accepted": false, + "actor_attribution_ref": null, + "after_alert_state_ref": null, + "alert_chain_health_readback_accepted": false, + "alert_chain_health_readback_ref": null, + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "before_after_alert_state_accepted": false, + "before_alert_state_ref": null, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", + "add_action_button", + "store_raw_live_config", + "store_full_receiver_payload", + "collect_bot_token", + "collect_dsn_secret", + "collect_webhook_secret", + "change_alert_rule", + "change_scrape_config", + "change_dashboard", + "change_notification_policy", + "change_silence", + "change_inhibit_rule", + "accept_dashboard_up_as_alert_chain_healthy", + "skip_receiver_receipt", + "skip_stale_review", + "skip_silence_review", + "skip_rollback_validation", + "skip_post_change_monitoring", + "skip_cross_project_sync", + "live_receiver_probe" + ], + "change_intent_or_break_glass_ref": null, + "change_or_outage_time_window_accepted": false, + "change_or_outage_time_window_ref": null, + "config_kind": "prometheus_alert_rules", + "control_tier": "C1", + "cross_project_sync_accepted": false, + "cross_project_sync_ref": null, + "dashboard_trace_log_freshness_accepted": false, + "dashboard_trace_log_freshness_ref": null, + "expected_scope": "database_alerts", + "exporter_deploy_authorized": false, + "followup_owner": "pending_post_incident_readback", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "intent_or_break_glass_accepted": false, + "kubectl_action_authorized": false, + "label": "Database alert rules", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "maintenance_window": "pending_post_incident_readback", + "monitoring_incident_or_change_ref": null, + "no_false_green_accepted": false, + "not_approval": true, + "notification_delivery_metadata_accepted": false, + "notification_delivery_metadata_ref": null, + "notification_route_change_authorized": false, + "observability_scope": [ + "PostgreSQL", + "Redis", + "DB availability" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_post_incident_readback", + "request_actor_or_time_supplement", + "request_alert_state_supplement", + "request_receiver_receipt_supplement", + "request_stale_silence_supplement", + "request_freshness_or_alert_chain_supplement", + "quarantine_raw_payload", + "reject_false_green_claim", + "ready_for_monitoring_post_incident_review", + "recurrence_guard_backfill_required", + "waiting_runtime_gate" + ], + "post_change_monitoring_accepted": false, + "post_change_monitoring_ref": null, + "post_incident_readback_accepted": false, + "post_incident_readback_candidate_id": "monitoring_post_incident_readback:k8s_database_alerts", + "post_incident_readback_received": false, + "postcheck_readback_accepted": false, + "postcheck_readback_ref": null, + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "readback_fields": [ + "post_incident_readback_candidate_id", + "source_acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "receiver_receipt_readback_accepted": false, + "receiver_receipt_readback_ref": null, + "receiver_route_change_authorized": false, + "receiver_route_state_accepted": false, + "receiver_route_state_ref": null, + "recurrence_guard_accepted": false, + "recurrence_guard_ref": null, + "reload_or_no_reload_accepted": false, + "reload_or_no_reload_ref": null, + "remote_write_change_authorized": false, + "repo_sha256": "6077aa4e061c6604519eaede01144ffec46c39a6715a296a1ae54ff5484a0111", + "repo_source_path": "k8s/monitoring/database-alerts.yaml", + "request_id": "monitoring_owner_request:k8s_database_alerts", + "required_readback_fields": [ + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "followup_owner", + "redacted_evidence_refs", + "no_secret_value_attestation", + "no_raw_payload_attestation", + "no_false_green_attestation", + "receipt_not_route_only_attestation", + "independent_postcheck_attestation", + "noise_budget_or_silence_owner_attestation" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "source_owner_response_acceptance_current", + "incident_or_change_ref_present", + "actor_attribution_present", + "change_or_outage_time_window_present", + "intent_or_break_glass_present", + "before_after_alert_state_present", + "rule_datasource_scrape_state_present", + "receiver_route_state_present", + "reload_or_no_reload_called_out", + "receiver_receipt_readback_present", + "stale_pending_resolved_review_present", + "silence_mute_dedup_inhibit_review_present", + "dashboard_trace_log_freshness_present", + "notification_delivery_metadata_present", + "alert_chain_health_not_route_only", + "cross_project_sync_present", + "rollback_or_disable_validation_present", + "post_change_monitoring_present", + "postcheck_independent", + "recurrence_guard_present", + "maintenance_window_present", + "noise_budget_owner_present", + "redacted_refs_only", + "secret_value_absent", + "raw_payload_absent", + "no_false_green", + "runtime_stays_zero", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_post_incident_readback", + "rollback_or_disable_validation_accepted": false, + "rollback_or_disable_validation_ref": null, + "rollback_owner": "pending_post_incident_readback", + "rule_datasource_scrape_state_accepted": false, + "rule_datasource_scrape_state_ref": null, + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_mute_dedup_inhibit_review_accepted": false, + "silence_mute_dedup_inhibit_review_ref": null, + "silence_policy_change_authorized": false, + "source_acceptance_candidate_id": "monitoring_owner_response_acceptance:k8s_database_alerts", + "source_line_count": 264, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "stale_pending_resolved_review_accepted": false, + "stale_pending_resolved_review_ref": null, + "status": "waiting_post_incident_readback", + "surface_id": "k8s_database_alerts", + "telegram_send_authorized": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "action_buttons_allowed": false, + "active_scan_authorized": false, + "actor_attribution_accepted": false, + "actor_attribution_ref": null, + "after_alert_state_ref": null, + "alert_chain_health_readback_accepted": false, + "alert_chain_health_readback_ref": null, + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "before_after_alert_state_accepted": false, + "before_alert_state_ref": null, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", + "add_action_button", + "store_raw_live_config", + "store_full_receiver_payload", + "collect_bot_token", + "collect_dsn_secret", + "collect_webhook_secret", + "change_alert_rule", + "change_scrape_config", + "change_dashboard", + "change_notification_policy", + "change_silence", + "change_inhibit_rule", + "accept_dashboard_up_as_alert_chain_healthy", + "skip_receiver_receipt", + "skip_stale_review", + "skip_silence_review", + "skip_rollback_validation", + "skip_post_change_monitoring", + "skip_cross_project_sync", + "live_receiver_probe" + ], + "change_intent_or_break_glass_ref": null, + "change_or_outage_time_window_accepted": false, + "change_or_outage_time_window_ref": null, + "config_kind": "prometheus_alert_rules", + "control_tier": "C1", + "cross_project_sync_accepted": false, + "cross_project_sync_ref": null, + "dashboard_trace_log_freshness_accepted": false, + "dashboard_trace_log_freshness_ref": null, + "expected_scope": "nvidia_gpu_alerts", + "exporter_deploy_authorized": false, + "followup_owner": "pending_post_incident_readback", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "intent_or_break_glass_accepted": false, + "kubectl_action_authorized": false, + "label": "NVIDIA alert rules", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "maintenance_window": "pending_post_incident_readback", + "monitoring_incident_or_change_ref": null, + "no_false_green_accepted": false, + "not_approval": true, + "notification_delivery_metadata_accepted": false, + "notification_delivery_metadata_ref": null, + "notification_route_change_authorized": false, + "observability_scope": [ + "GPU health", + "AI workload capacity" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_post_incident_readback", + "request_actor_or_time_supplement", + "request_alert_state_supplement", + "request_receiver_receipt_supplement", + "request_stale_silence_supplement", + "request_freshness_or_alert_chain_supplement", + "quarantine_raw_payload", + "reject_false_green_claim", + "ready_for_monitoring_post_incident_review", + "recurrence_guard_backfill_required", + "waiting_runtime_gate" + ], + "post_change_monitoring_accepted": false, + "post_change_monitoring_ref": null, + "post_incident_readback_accepted": false, + "post_incident_readback_candidate_id": "monitoring_post_incident_readback:k8s_nvidia_alerts", + "post_incident_readback_received": false, + "postcheck_readback_accepted": false, + "postcheck_readback_ref": null, + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "readback_fields": [ + "post_incident_readback_candidate_id", + "source_acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "receiver_receipt_readback_accepted": false, + "receiver_receipt_readback_ref": null, + "receiver_route_change_authorized": false, + "receiver_route_state_accepted": false, + "receiver_route_state_ref": null, + "recurrence_guard_accepted": false, + "recurrence_guard_ref": null, + "reload_or_no_reload_accepted": false, + "reload_or_no_reload_ref": null, + "remote_write_change_authorized": false, + "repo_sha256": "c43a6413269dadc8269b9724ee905650f39926249a37c7339179ec88facdf972", + "repo_source_path": "k8s/monitoring/nvidia-alerts.yaml", + "request_id": "monitoring_owner_request:k8s_nvidia_alerts", + "required_readback_fields": [ + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "followup_owner", + "redacted_evidence_refs", + "no_secret_value_attestation", + "no_raw_payload_attestation", + "no_false_green_attestation", + "receipt_not_route_only_attestation", + "independent_postcheck_attestation", + "noise_budget_or_silence_owner_attestation" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "source_owner_response_acceptance_current", + "incident_or_change_ref_present", + "actor_attribution_present", + "change_or_outage_time_window_present", + "intent_or_break_glass_present", + "before_after_alert_state_present", + "rule_datasource_scrape_state_present", + "receiver_route_state_present", + "reload_or_no_reload_called_out", + "receiver_receipt_readback_present", + "stale_pending_resolved_review_present", + "silence_mute_dedup_inhibit_review_present", + "dashboard_trace_log_freshness_present", + "notification_delivery_metadata_present", + "alert_chain_health_not_route_only", + "cross_project_sync_present", + "rollback_or_disable_validation_present", + "post_change_monitoring_present", + "postcheck_independent", + "recurrence_guard_present", + "maintenance_window_present", + "noise_budget_owner_present", + "redacted_refs_only", + "secret_value_absent", + "raw_payload_absent", + "no_false_green", + "runtime_stays_zero", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_post_incident_readback", + "rollback_or_disable_validation_accepted": false, + "rollback_or_disable_validation_ref": null, + "rollback_owner": "pending_post_incident_readback", + "rule_datasource_scrape_state_accepted": false, + "rule_datasource_scrape_state_ref": null, + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_mute_dedup_inhibit_review_accepted": false, + "silence_mute_dedup_inhibit_review_ref": null, + "silence_policy_change_authorized": false, + "source_acceptance_candidate_id": "monitoring_owner_response_acceptance:k8s_nvidia_alerts", + "source_line_count": 122, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "stale_pending_resolved_review_accepted": false, + "stale_pending_resolved_review_ref": null, + "status": "waiting_post_incident_readback", + "surface_id": "k8s_nvidia_alerts", + "telegram_send_authorized": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "action_buttons_allowed": false, + "active_scan_authorized": false, + "actor_attribution_accepted": false, + "actor_attribution_ref": null, + "after_alert_state_ref": null, + "alert_chain_health_readback_accepted": false, + "alert_chain_health_readback_ref": null, + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "before_after_alert_state_accepted": false, + "before_alert_state_ref": null, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", + "add_action_button", + "store_raw_live_config", + "store_full_receiver_payload", + "collect_bot_token", + "collect_dsn_secret", + "collect_webhook_secret", + "change_alert_rule", + "change_scrape_config", + "change_dashboard", + "change_notification_policy", + "change_silence", + "change_inhibit_rule", + "accept_dashboard_up_as_alert_chain_healthy", + "skip_receiver_receipt", + "skip_stale_review", + "skip_silence_review", + "skip_rollback_validation", + "skip_post_change_monitoring", + "skip_cross_project_sync", + "live_receiver_probe" + ], + "change_intent_or_break_glass_ref": null, + "change_or_outage_time_window_accepted": false, + "change_or_outage_time_window_ref": null, + "config_kind": "prometheus_alert_rules", + "control_tier": "C1", + "cross_project_sync_accepted": false, + "cross_project_sync_ref": null, + "dashboard_trace_log_freshness_accepted": false, + "dashboard_trace_log_freshness_ref": null, + "expected_scope": "minio_kali_alerts", + "exporter_deploy_authorized": false, + "followup_owner": "pending_post_incident_readback", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "intent_or_break_glass_accepted": false, + "kubectl_action_authorized": false, + "label": "MinIO / Kali alert rules", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "maintenance_window": "pending_post_incident_readback", + "monitoring_incident_or_change_ref": null, + "no_false_green_accepted": false, + "not_approval": true, + "notification_delivery_metadata_accepted": false, + "notification_delivery_metadata_ref": null, + "notification_route_change_authorized": false, + "observability_scope": [ + "MinIO", + "Kali scanner", + "read-only scanner status" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_post_incident_readback", + "request_actor_or_time_supplement", + "request_alert_state_supplement", + "request_receiver_receipt_supplement", + "request_stale_silence_supplement", + "request_freshness_or_alert_chain_supplement", + "quarantine_raw_payload", + "reject_false_green_claim", + "ready_for_monitoring_post_incident_review", + "recurrence_guard_backfill_required", + "waiting_runtime_gate" + ], + "post_change_monitoring_accepted": false, + "post_change_monitoring_ref": null, + "post_incident_readback_accepted": false, + "post_incident_readback_candidate_id": "monitoring_post_incident_readback:k8s_minio_kali_alerts", + "post_incident_readback_received": false, + "postcheck_readback_accepted": false, + "postcheck_readback_ref": null, + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "readback_fields": [ + "post_incident_readback_candidate_id", + "source_acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "receiver_receipt_readback_accepted": false, + "receiver_receipt_readback_ref": null, + "receiver_route_change_authorized": false, + "receiver_route_state_accepted": false, + "receiver_route_state_ref": null, + "recurrence_guard_accepted": false, + "recurrence_guard_ref": null, + "reload_or_no_reload_accepted": false, + "reload_or_no_reload_ref": null, + "remote_write_change_authorized": false, + "repo_sha256": "3f3ca8c012a40f5a9983b6f587dfd60ffd0a8fb3dcea6b793cb1d5fbad0fe50b", + "repo_source_path": "k8s/monitoring/minio-kali-alerts.yaml", + "request_id": "monitoring_owner_request:k8s_minio_kali_alerts", + "required_readback_fields": [ + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "followup_owner", + "redacted_evidence_refs", + "no_secret_value_attestation", + "no_raw_payload_attestation", + "no_false_green_attestation", + "receipt_not_route_only_attestation", + "independent_postcheck_attestation", + "noise_budget_or_silence_owner_attestation" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "source_owner_response_acceptance_current", + "incident_or_change_ref_present", + "actor_attribution_present", + "change_or_outage_time_window_present", + "intent_or_break_glass_present", + "before_after_alert_state_present", + "rule_datasource_scrape_state_present", + "receiver_route_state_present", + "reload_or_no_reload_called_out", + "receiver_receipt_readback_present", + "stale_pending_resolved_review_present", + "silence_mute_dedup_inhibit_review_present", + "dashboard_trace_log_freshness_present", + "notification_delivery_metadata_present", + "alert_chain_health_not_route_only", + "cross_project_sync_present", + "rollback_or_disable_validation_present", + "post_change_monitoring_present", + "postcheck_independent", + "recurrence_guard_present", + "maintenance_window_present", + "noise_budget_owner_present", + "redacted_refs_only", + "secret_value_absent", + "raw_payload_absent", + "no_false_green", + "runtime_stays_zero", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_post_incident_readback", + "rollback_or_disable_validation_accepted": false, + "rollback_or_disable_validation_ref": null, + "rollback_owner": "pending_post_incident_readback", + "rule_datasource_scrape_state_accepted": false, + "rule_datasource_scrape_state_ref": null, + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_mute_dedup_inhibit_review_accepted": false, + "silence_mute_dedup_inhibit_review_ref": null, + "silence_policy_change_authorized": false, + "source_acceptance_candidate_id": "monitoring_owner_response_acceptance:k8s_minio_kali_alerts", + "source_line_count": 67, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "stale_pending_resolved_review_accepted": false, + "stale_pending_resolved_review_ref": null, + "status": "waiting_post_incident_readback", + "surface_id": "k8s_minio_kali_alerts", + "telegram_send_authorized": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "action_buttons_allowed": false, + "active_scan_authorized": false, + "actor_attribution_accepted": false, + "actor_attribution_ref": null, + "after_alert_state_ref": null, + "alert_chain_health_readback_accepted": false, + "alert_chain_health_readback_ref": null, + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "before_after_alert_state_accepted": false, + "before_alert_state_ref": null, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", + "add_action_button", + "store_raw_live_config", + "store_full_receiver_payload", + "collect_bot_token", + "collect_dsn_secret", + "collect_webhook_secret", + "change_alert_rule", + "change_scrape_config", + "change_dashboard", + "change_notification_policy", + "change_silence", + "change_inhibit_rule", + "accept_dashboard_up_as_alert_chain_healthy", + "skip_receiver_receipt", + "skip_stale_review", + "skip_silence_review", + "skip_rollback_validation", + "skip_post_change_monitoring", + "skip_cross_project_sync", + "live_receiver_probe" + ], + "change_intent_or_break_glass_ref": null, + "change_or_outage_time_window_accepted": false, + "change_or_outage_time_window_ref": null, + "config_kind": "prometheus_alert_rules", + "control_tier": "C1", + "cross_project_sync_accepted": false, + "cross_project_sync_ref": null, + "dashboard_trace_log_freshness_accepted": false, + "dashboard_trace_log_freshness_ref": null, + "expected_scope": "ai_flywheel_alerts", + "exporter_deploy_authorized": false, + "followup_owner": "pending_post_incident_readback", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "intent_or_break_glass_accepted": false, + "kubectl_action_authorized": false, + "label": "AI flywheel alert rules", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "maintenance_window": "pending_post_incident_readback", + "monitoring_incident_or_change_ref": null, + "no_false_green_accepted": false, + "not_approval": true, + "notification_delivery_metadata_accepted": false, + "notification_delivery_metadata_ref": null, + "notification_route_change_authorized": false, + "observability_scope": [ + "AI flywheel", + "learning / runtime health" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_post_incident_readback", + "request_actor_or_time_supplement", + "request_alert_state_supplement", + "request_receiver_receipt_supplement", + "request_stale_silence_supplement", + "request_freshness_or_alert_chain_supplement", + "quarantine_raw_payload", + "reject_false_green_claim", + "ready_for_monitoring_post_incident_review", + "recurrence_guard_backfill_required", + "waiting_runtime_gate" + ], + "post_change_monitoring_accepted": false, + "post_change_monitoring_ref": null, + "post_incident_readback_accepted": false, + "post_incident_readback_candidate_id": "monitoring_post_incident_readback:k8s_flywheel_alerts", + "post_incident_readback_received": false, + "postcheck_readback_accepted": false, + "postcheck_readback_ref": null, + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "readback_fields": [ + "post_incident_readback_candidate_id", + "source_acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "receiver_receipt_readback_accepted": false, + "receiver_receipt_readback_ref": null, + "receiver_route_change_authorized": false, + "receiver_route_state_accepted": false, + "receiver_route_state_ref": null, + "recurrence_guard_accepted": false, + "recurrence_guard_ref": null, + "reload_or_no_reload_accepted": false, + "reload_or_no_reload_ref": null, + "remote_write_change_authorized": false, + "repo_sha256": "74334919400623ff4115472e39ba30a6bbc5383bc7dfd6a3fae7bd06531e7cc6", + "repo_source_path": "k8s/monitoring/flywheel-alerts.yaml", + "request_id": "monitoring_owner_request:k8s_flywheel_alerts", + "required_readback_fields": [ + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "followup_owner", + "redacted_evidence_refs", + "no_secret_value_attestation", + "no_raw_payload_attestation", + "no_false_green_attestation", + "receipt_not_route_only_attestation", + "independent_postcheck_attestation", + "noise_budget_or_silence_owner_attestation" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "source_owner_response_acceptance_current", + "incident_or_change_ref_present", + "actor_attribution_present", + "change_or_outage_time_window_present", + "intent_or_break_glass_present", + "before_after_alert_state_present", + "rule_datasource_scrape_state_present", + "receiver_route_state_present", + "reload_or_no_reload_called_out", + "receiver_receipt_readback_present", + "stale_pending_resolved_review_present", + "silence_mute_dedup_inhibit_review_present", + "dashboard_trace_log_freshness_present", + "notification_delivery_metadata_present", + "alert_chain_health_not_route_only", + "cross_project_sync_present", + "rollback_or_disable_validation_present", + "post_change_monitoring_present", + "postcheck_independent", + "recurrence_guard_present", + "maintenance_window_present", + "noise_budget_owner_present", + "redacted_refs_only", + "secret_value_absent", + "raw_payload_absent", + "no_false_green", + "runtime_stays_zero", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_post_incident_readback", + "rollback_or_disable_validation_accepted": false, + "rollback_or_disable_validation_ref": null, + "rollback_owner": "pending_post_incident_readback", + "rule_datasource_scrape_state_accepted": false, + "rule_datasource_scrape_state_ref": null, + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_mute_dedup_inhibit_review_accepted": false, + "silence_mute_dedup_inhibit_review_ref": null, + "silence_policy_change_authorized": false, + "source_acceptance_candidate_id": "monitoring_owner_response_acceptance:k8s_flywheel_alerts", + "source_line_count": 219, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "stale_pending_resolved_review_accepted": false, + "stale_pending_resolved_review_ref": null, + "status": "waiting_post_incident_readback", + "surface_id": "k8s_flywheel_alerts", + "telegram_send_authorized": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "action_buttons_allowed": false, + "active_scan_authorized": false, + "actor_attribution_accepted": false, + "actor_attribution_ref": null, + "after_alert_state_ref": null, + "alert_chain_health_readback_accepted": false, + "alert_chain_health_readback_ref": null, + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "before_after_alert_state_accepted": false, + "before_alert_state_ref": null, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", + "add_action_button", + "store_raw_live_config", + "store_full_receiver_payload", + "collect_bot_token", + "collect_dsn_secret", + "collect_webhook_secret", + "change_alert_rule", + "change_scrape_config", + "change_dashboard", + "change_notification_policy", + "change_silence", + "change_inhibit_rule", + "accept_dashboard_up_as_alert_chain_healthy", + "skip_receiver_receipt", + "skip_stale_review", + "skip_silence_review", + "skip_rollback_validation", + "skip_post_change_monitoring", + "skip_cross_project_sync", + "live_receiver_probe" + ], + "change_intent_or_break_glass_ref": null, + "change_or_outage_time_window_accepted": false, + "change_or_outage_time_window_ref": null, + "config_kind": "prometheus_alert_rules", + "control_tier": "C1", + "cross_project_sync_accepted": false, + "cross_project_sync_ref": null, + "dashboard_trace_log_freshness_accepted": false, + "dashboard_trace_log_freshness_ref": null, + "expected_scope": "alert_chain_monitor", + "exporter_deploy_authorized": false, + "followup_owner": "pending_post_incident_readback", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "intent_or_break_glass_accepted": false, + "kubectl_action_authorized": false, + "label": "Alert chain monitor", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "maintenance_window": "pending_post_incident_readback", + "monitoring_incident_or_change_ref": null, + "no_false_green_accepted": false, + "not_approval": true, + "notification_delivery_metadata_accepted": false, + "notification_delivery_metadata_ref": null, + "notification_route_change_authorized": false, + "observability_scope": [ + "Alertmanager chain", + "E2E alert visibility" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_post_incident_readback", + "request_actor_or_time_supplement", + "request_alert_state_supplement", + "request_receiver_receipt_supplement", + "request_stale_silence_supplement", + "request_freshness_or_alert_chain_supplement", + "quarantine_raw_payload", + "reject_false_green_claim", + "ready_for_monitoring_post_incident_review", + "recurrence_guard_backfill_required", + "waiting_runtime_gate" + ], + "post_change_monitoring_accepted": false, + "post_change_monitoring_ref": null, + "post_incident_readback_accepted": false, + "post_incident_readback_candidate_id": "monitoring_post_incident_readback:k8s_alert_chain_monitor", + "post_incident_readback_received": false, + "postcheck_readback_accepted": false, + "postcheck_readback_ref": null, + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "readback_fields": [ + "post_incident_readback_candidate_id", + "source_acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "receiver_receipt_readback_accepted": false, + "receiver_receipt_readback_ref": null, + "receiver_route_change_authorized": false, + "receiver_route_state_accepted": false, + "receiver_route_state_ref": null, + "recurrence_guard_accepted": false, + "recurrence_guard_ref": null, + "reload_or_no_reload_accepted": false, + "reload_or_no_reload_ref": null, + "remote_write_change_authorized": false, + "repo_sha256": "03ad55d72425f27071ba3afa8d43959a7ee361cc8f76fcf2ca295a33297bbf54", + "repo_source_path": "k8s/monitoring/alert-chain-monitor.yaml", + "request_id": "monitoring_owner_request:k8s_alert_chain_monitor", + "required_readback_fields": [ + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "followup_owner", + "redacted_evidence_refs", + "no_secret_value_attestation", + "no_raw_payload_attestation", + "no_false_green_attestation", + "receipt_not_route_only_attestation", + "independent_postcheck_attestation", + "noise_budget_or_silence_owner_attestation" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "source_owner_response_acceptance_current", + "incident_or_change_ref_present", + "actor_attribution_present", + "change_or_outage_time_window_present", + "intent_or_break_glass_present", + "before_after_alert_state_present", + "rule_datasource_scrape_state_present", + "receiver_route_state_present", + "reload_or_no_reload_called_out", + "receiver_receipt_readback_present", + "stale_pending_resolved_review_present", + "silence_mute_dedup_inhibit_review_present", + "dashboard_trace_log_freshness_present", + "notification_delivery_metadata_present", + "alert_chain_health_not_route_only", + "cross_project_sync_present", + "rollback_or_disable_validation_present", + "post_change_monitoring_present", + "postcheck_independent", + "recurrence_guard_present", + "maintenance_window_present", + "noise_budget_owner_present", + "redacted_refs_only", + "secret_value_absent", + "raw_payload_absent", + "no_false_green", + "runtime_stays_zero", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_post_incident_readback", + "rollback_or_disable_validation_accepted": false, + "rollback_or_disable_validation_ref": null, + "rollback_owner": "pending_post_incident_readback", + "rule_datasource_scrape_state_accepted": false, + "rule_datasource_scrape_state_ref": null, + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_mute_dedup_inhibit_review_accepted": false, + "silence_mute_dedup_inhibit_review_ref": null, + "silence_policy_change_authorized": false, + "source_acceptance_candidate_id": "monitoring_owner_response_acceptance:k8s_alert_chain_monitor", + "source_line_count": 202, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "stale_pending_resolved_review_accepted": false, + "stale_pending_resolved_review_ref": null, + "status": "waiting_post_incident_readback", + "surface_id": "k8s_alert_chain_monitor", + "telegram_send_authorized": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "action_buttons_allowed": false, + "active_scan_authorized": false, + "actor_attribution_accepted": false, + "actor_attribution_ref": null, + "after_alert_state_ref": null, + "alert_chain_health_readback_accepted": false, + "alert_chain_health_readback_ref": null, + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "before_after_alert_state_accepted": false, + "before_alert_state_ref": null, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", + "add_action_button", + "store_raw_live_config", + "store_full_receiver_payload", + "collect_bot_token", + "collect_dsn_secret", + "collect_webhook_secret", + "change_alert_rule", + "change_scrape_config", + "change_dashboard", + "change_notification_policy", + "change_silence", + "change_inhibit_rule", + "accept_dashboard_up_as_alert_chain_healthy", + "skip_receiver_receipt", + "skip_stale_review", + "skip_silence_review", + "skip_rollback_validation", + "skip_post_change_monitoring", + "skip_cross_project_sync", + "live_receiver_probe" + ], + "change_intent_or_break_glass_ref": null, + "change_or_outage_time_window_accepted": false, + "change_or_outage_time_window_ref": null, + "config_kind": "app_alert_rule_contract", + "control_tier": "C1", + "cross_project_sync_accepted": false, + "cross_project_sync_ref": null, + "dashboard_trace_log_freshness_accepted": false, + "dashboard_trace_log_freshness_ref": null, + "expected_scope": "api_alert_rule_engine", + "exporter_deploy_authorized": false, + "followup_owner": "pending_post_incident_readback", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "intent_or_break_glass_accepted": false, + "kubectl_action_authorized": false, + "label": "API alert rule engine rules", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "maintenance_window": "pending_post_incident_readback", + "monitoring_incident_or_change_ref": null, + "no_false_green_accepted": false, + "not_approval": true, + "notification_delivery_metadata_accepted": false, + "notification_delivery_metadata_ref": null, + "notification_route_change_authorized": false, + "observability_scope": [ + "alert classification", + "approval recommendations", + "playbook matching" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_post_incident_readback", + "request_actor_or_time_supplement", + "request_alert_state_supplement", + "request_receiver_receipt_supplement", + "request_stale_silence_supplement", + "request_freshness_or_alert_chain_supplement", + "quarantine_raw_payload", + "reject_false_green_claim", + "ready_for_monitoring_post_incident_review", + "recurrence_guard_backfill_required", + "waiting_runtime_gate" + ], + "post_change_monitoring_accepted": false, + "post_change_monitoring_ref": null, + "post_incident_readback_accepted": false, + "post_incident_readback_candidate_id": "monitoring_post_incident_readback:app_alert_rules_yaml", + "post_incident_readback_received": false, + "postcheck_readback_accepted": false, + "postcheck_readback_ref": null, + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "readback_fields": [ + "post_incident_readback_candidate_id", + "source_acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "receiver_receipt_readback_accepted": false, + "receiver_receipt_readback_ref": null, + "receiver_route_change_authorized": false, + "receiver_route_state_accepted": false, + "receiver_route_state_ref": null, + "recurrence_guard_accepted": false, + "recurrence_guard_ref": null, + "reload_or_no_reload_accepted": false, + "reload_or_no_reload_ref": null, + "remote_write_change_authorized": false, + "repo_sha256": "5786505aa05073bbb2069203a443a75c8337a289dc015630792d0c201c85cafb", + "repo_source_path": "apps/api/alert_rules.yaml", + "request_id": "monitoring_owner_request:app_alert_rules_yaml", + "required_readback_fields": [ + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "followup_owner", + "redacted_evidence_refs", + "no_secret_value_attestation", + "no_raw_payload_attestation", + "no_false_green_attestation", + "receipt_not_route_only_attestation", + "independent_postcheck_attestation", + "noise_budget_or_silence_owner_attestation" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "source_owner_response_acceptance_current", + "incident_or_change_ref_present", + "actor_attribution_present", + "change_or_outage_time_window_present", + "intent_or_break_glass_present", + "before_after_alert_state_present", + "rule_datasource_scrape_state_present", + "receiver_route_state_present", + "reload_or_no_reload_called_out", + "receiver_receipt_readback_present", + "stale_pending_resolved_review_present", + "silence_mute_dedup_inhibit_review_present", + "dashboard_trace_log_freshness_present", + "notification_delivery_metadata_present", + "alert_chain_health_not_route_only", + "cross_project_sync_present", + "rollback_or_disable_validation_present", + "post_change_monitoring_present", + "postcheck_independent", + "recurrence_guard_present", + "maintenance_window_present", + "noise_budget_owner_present", + "redacted_refs_only", + "secret_value_absent", + "raw_payload_absent", + "no_false_green", + "runtime_stays_zero", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_post_incident_readback", + "rollback_or_disable_validation_accepted": false, + "rollback_or_disable_validation_ref": null, + "rollback_owner": "pending_post_incident_readback", + "rule_datasource_scrape_state_accepted": false, + "rule_datasource_scrape_state_ref": null, + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_mute_dedup_inhibit_review_accepted": false, + "silence_mute_dedup_inhibit_review_ref": null, + "silence_policy_change_authorized": false, + "source_acceptance_candidate_id": "monitoring_owner_response_acceptance:app_alert_rules_yaml", + "source_line_count": 889, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "stale_pending_resolved_review_accepted": false, + "stale_pending_resolved_review_ref": null, + "status": "waiting_post_incident_readback", + "surface_id": "app_alert_rules_yaml", + "telegram_send_authorized": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "action_buttons_allowed": false, + "active_scan_authorized": false, + "actor_attribution_accepted": false, + "actor_attribution_ref": null, + "after_alert_state_ref": null, + "alert_chain_health_readback_accepted": false, + "alert_chain_health_readback_ref": null, + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "before_after_alert_state_accepted": false, + "before_alert_state_ref": null, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", + "add_action_button", + "store_raw_live_config", + "store_full_receiver_payload", + "collect_bot_token", + "collect_dsn_secret", + "collect_webhook_secret", + "change_alert_rule", + "change_scrape_config", + "change_dashboard", + "change_notification_policy", + "change_silence", + "change_inhibit_rule", + "accept_dashboard_up_as_alert_chain_healthy", + "skip_receiver_receipt", + "skip_stale_review", + "skip_silence_review", + "skip_rollback_validation", + "skip_post_change_monitoring", + "skip_cross_project_sync", + "live_receiver_probe" + ], + "change_intent_or_break_glass_ref": null, + "change_or_outage_time_window_accepted": false, + "change_or_outage_time_window_ref": null, + "config_kind": "grafana_alert_rules", + "control_tier": "C1", + "cross_project_sync_accepted": false, + "cross_project_sync_ref": null, + "dashboard_trace_log_freshness_accepted": false, + "dashboard_trace_log_freshness_ref": null, + "expected_scope": "grafana_agent_step_latency_rules", + "exporter_deploy_authorized": false, + "followup_owner": "pending_post_incident_readback", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "intent_or_break_glass_accepted": false, + "kubectl_action_authorized": false, + "label": "Grafana agent step latency rules", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "maintenance_window": "pending_post_incident_readback", + "monitoring_incident_or_change_ref": null, + "no_false_green_accepted": false, + "not_approval": true, + "notification_delivery_metadata_accepted": false, + "notification_delivery_metadata_ref": null, + "notification_route_change_authorized": false, + "observability_scope": [ + "agent step latency", + "Grafana alerting" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_post_incident_readback", + "request_actor_or_time_supplement", + "request_alert_state_supplement", + "request_receiver_receipt_supplement", + "request_stale_silence_supplement", + "request_freshness_or_alert_chain_supplement", + "quarantine_raw_payload", + "reject_false_green_claim", + "ready_for_monitoring_post_incident_review", + "recurrence_guard_backfill_required", + "waiting_runtime_gate" + ], + "post_change_monitoring_accepted": false, + "post_change_monitoring_ref": null, + "post_incident_readback_accepted": false, + "post_incident_readback_candidate_id": "monitoring_post_incident_readback:grafana_agent_step_latency_rules", + "post_incident_readback_received": false, + "postcheck_readback_accepted": false, + "postcheck_readback_ref": null, + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "readback_fields": [ + "post_incident_readback_candidate_id", + "source_acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "receiver_receipt_readback_accepted": false, + "receiver_receipt_readback_ref": null, + "receiver_route_change_authorized": false, + "receiver_route_state_accepted": false, + "receiver_route_state_ref": null, + "recurrence_guard_accepted": false, + "recurrence_guard_ref": null, + "reload_or_no_reload_accepted": false, + "reload_or_no_reload_ref": null, + "remote_write_change_authorized": false, + "repo_sha256": "24b086bdf0eaca72c90fc323e562de4b47708c25f2427c0fc0b350e883431564", + "repo_source_path": "ops/monitoring/grafana/agent_step_latency_rules.yaml", + "request_id": "monitoring_owner_request:grafana_agent_step_latency_rules", + "required_readback_fields": [ + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "followup_owner", + "redacted_evidence_refs", + "no_secret_value_attestation", + "no_raw_payload_attestation", + "no_false_green_attestation", + "receipt_not_route_only_attestation", + "independent_postcheck_attestation", + "noise_budget_or_silence_owner_attestation" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "source_owner_response_acceptance_current", + "incident_or_change_ref_present", + "actor_attribution_present", + "change_or_outage_time_window_present", + "intent_or_break_glass_present", + "before_after_alert_state_present", + "rule_datasource_scrape_state_present", + "receiver_route_state_present", + "reload_or_no_reload_called_out", + "receiver_receipt_readback_present", + "stale_pending_resolved_review_present", + "silence_mute_dedup_inhibit_review_present", + "dashboard_trace_log_freshness_present", + "notification_delivery_metadata_present", + "alert_chain_health_not_route_only", + "cross_project_sync_present", + "rollback_or_disable_validation_present", + "post_change_monitoring_present", + "postcheck_independent", + "recurrence_guard_present", + "maintenance_window_present", + "noise_budget_owner_present", + "redacted_refs_only", + "secret_value_absent", + "raw_payload_absent", + "no_false_green", + "runtime_stays_zero", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_post_incident_readback", + "rollback_or_disable_validation_accepted": false, + "rollback_or_disable_validation_ref": null, + "rollback_owner": "pending_post_incident_readback", + "rule_datasource_scrape_state_accepted": false, + "rule_datasource_scrape_state_ref": null, + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_mute_dedup_inhibit_review_accepted": false, + "silence_mute_dedup_inhibit_review_ref": null, + "silence_policy_change_authorized": false, + "source_acceptance_candidate_id": "monitoring_owner_response_acceptance:grafana_agent_step_latency_rules", + "source_line_count": 201, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "stale_pending_resolved_review_accepted": false, + "stale_pending_resolved_review_ref": null, + "status": "waiting_post_incident_readback", + "surface_id": "grafana_agent_step_latency_rules", + "telegram_send_authorized": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "action_buttons_allowed": false, + "active_scan_authorized": false, + "actor_attribution_accepted": false, + "actor_attribution_ref": null, + "after_alert_state_ref": null, + "alert_chain_health_readback_accepted": false, + "alert_chain_health_readback_ref": null, + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "before_after_alert_state_accepted": false, + "before_alert_state_ref": null, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", + "add_action_button", + "store_raw_live_config", + "store_full_receiver_payload", + "collect_bot_token", + "collect_dsn_secret", + "collect_webhook_secret", + "change_alert_rule", + "change_scrape_config", + "change_dashboard", + "change_notification_policy", + "change_silence", + "change_inhibit_rule", + "accept_dashboard_up_as_alert_chain_healthy", + "skip_receiver_receipt", + "skip_stale_review", + "skip_silence_review", + "skip_rollback_validation", + "skip_post_change_monitoring", + "skip_cross_project_sync", + "live_receiver_probe" + ], + "change_intent_or_break_glass_ref": null, + "change_or_outage_time_window_accepted": false, + "change_or_outage_time_window_ref": null, + "config_kind": "grafana_dashboard", + "control_tier": "C1", + "cross_project_sync_accepted": false, + "cross_project_sync_ref": null, + "dashboard_trace_log_freshness_accepted": false, + "dashboard_trace_log_freshness_ref": null, + "expected_scope": "grafana_ai_slo_dashboard", + "exporter_deploy_authorized": false, + "followup_owner": "pending_post_incident_readback", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "intent_or_break_glass_accepted": false, + "kubectl_action_authorized": false, + "label": "Grafana AI SLO dashboard", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "maintenance_window": "pending_post_incident_readback", + "monitoring_incident_or_change_ref": null, + "no_false_green_accepted": false, + "not_approval": true, + "notification_delivery_metadata_accepted": false, + "notification_delivery_metadata_ref": null, + "notification_route_change_authorized": false, + "observability_scope": [ + "AI SLO", + "dashboard panels" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_post_incident_readback", + "request_actor_or_time_supplement", + "request_alert_state_supplement", + "request_receiver_receipt_supplement", + "request_stale_silence_supplement", + "request_freshness_or_alert_chain_supplement", + "quarantine_raw_payload", + "reject_false_green_claim", + "ready_for_monitoring_post_incident_review", + "recurrence_guard_backfill_required", + "waiting_runtime_gate" + ], + "post_change_monitoring_accepted": false, + "post_change_monitoring_ref": null, + "post_incident_readback_accepted": false, + "post_incident_readback_candidate_id": "monitoring_post_incident_readback:grafana_ai_slo_dashboard", + "post_incident_readback_received": false, + "postcheck_readback_accepted": false, + "postcheck_readback_ref": null, + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "readback_fields": [ + "post_incident_readback_candidate_id", + "source_acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "receiver_receipt_readback_accepted": false, + "receiver_receipt_readback_ref": null, + "receiver_route_change_authorized": false, + "receiver_route_state_accepted": false, + "receiver_route_state_ref": null, + "recurrence_guard_accepted": false, + "recurrence_guard_ref": null, + "reload_or_no_reload_accepted": false, + "reload_or_no_reload_ref": null, + "remote_write_change_authorized": false, + "repo_sha256": "e7518d6c234330d4b19c056a1810cb8037fbe1572f5a7968ac623dbee3630db3", + "repo_source_path": "ops/monitoring/grafana/dashboards/ai-slo-dashboard.json", + "request_id": "monitoring_owner_request:grafana_ai_slo_dashboard", + "required_readback_fields": [ + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "followup_owner", + "redacted_evidence_refs", + "no_secret_value_attestation", + "no_raw_payload_attestation", + "no_false_green_attestation", + "receipt_not_route_only_attestation", + "independent_postcheck_attestation", + "noise_budget_or_silence_owner_attestation" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "source_owner_response_acceptance_current", + "incident_or_change_ref_present", + "actor_attribution_present", + "change_or_outage_time_window_present", + "intent_or_break_glass_present", + "before_after_alert_state_present", + "rule_datasource_scrape_state_present", + "receiver_route_state_present", + "reload_or_no_reload_called_out", + "receiver_receipt_readback_present", + "stale_pending_resolved_review_present", + "silence_mute_dedup_inhibit_review_present", + "dashboard_trace_log_freshness_present", + "notification_delivery_metadata_present", + "alert_chain_health_not_route_only", + "cross_project_sync_present", + "rollback_or_disable_validation_present", + "post_change_monitoring_present", + "postcheck_independent", + "recurrence_guard_present", + "maintenance_window_present", + "noise_budget_owner_present", + "redacted_refs_only", + "secret_value_absent", + "raw_payload_absent", + "no_false_green", + "runtime_stays_zero", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_post_incident_readback", + "rollback_or_disable_validation_accepted": false, + "rollback_or_disable_validation_ref": null, + "rollback_owner": "pending_post_incident_readback", + "rule_datasource_scrape_state_accepted": false, + "rule_datasource_scrape_state_ref": null, + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_mute_dedup_inhibit_review_accepted": false, + "silence_mute_dedup_inhibit_review_ref": null, + "silence_policy_change_authorized": false, + "source_acceptance_candidate_id": "monitoring_owner_response_acceptance:grafana_ai_slo_dashboard", + "source_line_count": 496, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "stale_pending_resolved_review_accepted": false, + "stale_pending_resolved_review_ref": null, + "status": "waiting_post_incident_readback", + "surface_id": "grafana_ai_slo_dashboard", + "telegram_send_authorized": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "action_buttons_allowed": false, + "active_scan_authorized": false, + "actor_attribution_accepted": false, + "actor_attribution_ref": null, + "after_alert_state_ref": null, + "alert_chain_health_readback_accepted": false, + "alert_chain_health_readback_ref": null, + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "before_after_alert_state_accepted": false, + "before_alert_state_ref": null, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", + "add_action_button", + "store_raw_live_config", + "store_full_receiver_payload", + "collect_bot_token", + "collect_dsn_secret", + "collect_webhook_secret", + "change_alert_rule", + "change_scrape_config", + "change_dashboard", + "change_notification_policy", + "change_silence", + "change_inhibit_rule", + "accept_dashboard_up_as_alert_chain_healthy", + "skip_receiver_receipt", + "skip_stale_review", + "skip_silence_review", + "skip_rollback_validation", + "skip_post_change_monitoring", + "skip_cross_project_sync", + "live_receiver_probe" + ], + "change_intent_or_break_glass_ref": null, + "change_or_outage_time_window_accepted": false, + "change_or_outage_time_window_ref": null, + "config_kind": "grafana_dashboard", + "control_tier": "C1", + "cross_project_sync_accepted": false, + "cross_project_sync_ref": null, + "dashboard_trace_log_freshness_accepted": false, + "dashboard_trace_log_freshness_ref": null, + "expected_scope": "grafana_ollama_failover_dashboard", + "exporter_deploy_authorized": false, + "followup_owner": "pending_post_incident_readback", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "intent_or_break_glass_accepted": false, + "kubectl_action_authorized": false, + "label": "Grafana Ollama failover dashboard", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "maintenance_window": "pending_post_incident_readback", + "monitoring_incident_or_change_ref": null, + "no_false_green_accepted": false, + "not_approval": true, + "notification_delivery_metadata_accepted": false, + "notification_delivery_metadata_ref": null, + "notification_route_change_authorized": false, + "observability_scope": [ + "Ollama failover", + "AI provider health" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_post_incident_readback", + "request_actor_or_time_supplement", + "request_alert_state_supplement", + "request_receiver_receipt_supplement", + "request_stale_silence_supplement", + "request_freshness_or_alert_chain_supplement", + "quarantine_raw_payload", + "reject_false_green_claim", + "ready_for_monitoring_post_incident_review", + "recurrence_guard_backfill_required", + "waiting_runtime_gate" + ], + "post_change_monitoring_accepted": false, + "post_change_monitoring_ref": null, + "post_incident_readback_accepted": false, + "post_incident_readback_candidate_id": "monitoring_post_incident_readback:grafana_ollama_failover_dashboard", + "post_incident_readback_received": false, + "postcheck_readback_accepted": false, + "postcheck_readback_ref": null, + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "readback_fields": [ + "post_incident_readback_candidate_id", + "source_acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "receiver_receipt_readback_accepted": false, + "receiver_receipt_readback_ref": null, + "receiver_route_change_authorized": false, + "receiver_route_state_accepted": false, + "receiver_route_state_ref": null, + "recurrence_guard_accepted": false, + "recurrence_guard_ref": null, + "reload_or_no_reload_accepted": false, + "reload_or_no_reload_ref": null, + "remote_write_change_authorized": false, + "repo_sha256": "f583bc00a8af0c87f9594fb2452b9835e90a7c1473131bf8fb4b6709887a7a5b", + "repo_source_path": "ops/monitoring/grafana/dashboards/ollama_failover.json", + "request_id": "monitoring_owner_request:grafana_ollama_failover_dashboard", + "required_readback_fields": [ + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "followup_owner", + "redacted_evidence_refs", + "no_secret_value_attestation", + "no_raw_payload_attestation", + "no_false_green_attestation", + "receipt_not_route_only_attestation", + "independent_postcheck_attestation", + "noise_budget_or_silence_owner_attestation" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "source_owner_response_acceptance_current", + "incident_or_change_ref_present", + "actor_attribution_present", + "change_or_outage_time_window_present", + "intent_or_break_glass_present", + "before_after_alert_state_present", + "rule_datasource_scrape_state_present", + "receiver_route_state_present", + "reload_or_no_reload_called_out", + "receiver_receipt_readback_present", + "stale_pending_resolved_review_present", + "silence_mute_dedup_inhibit_review_present", + "dashboard_trace_log_freshness_present", + "notification_delivery_metadata_present", + "alert_chain_health_not_route_only", + "cross_project_sync_present", + "rollback_or_disable_validation_present", + "post_change_monitoring_present", + "postcheck_independent", + "recurrence_guard_present", + "maintenance_window_present", + "noise_budget_owner_present", + "redacted_refs_only", + "secret_value_absent", + "raw_payload_absent", + "no_false_green", + "runtime_stays_zero", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_post_incident_readback", + "rollback_or_disable_validation_accepted": false, + "rollback_or_disable_validation_ref": null, + "rollback_owner": "pending_post_incident_readback", + "rule_datasource_scrape_state_accepted": false, + "rule_datasource_scrape_state_ref": null, + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_mute_dedup_inhibit_review_accepted": false, + "silence_mute_dedup_inhibit_review_ref": null, + "silence_policy_change_authorized": false, + "source_acceptance_candidate_id": "monitoring_owner_response_acceptance:grafana_ollama_failover_dashboard", + "source_line_count": 295, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "stale_pending_resolved_review_accepted": false, + "stale_pending_resolved_review_ref": null, + "status": "waiting_post_incident_readback", + "surface_id": "grafana_ollama_failover_dashboard", + "telegram_send_authorized": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "action_buttons_allowed": false, + "active_scan_authorized": false, + "actor_attribution_accepted": false, + "actor_attribution_ref": null, + "after_alert_state_ref": null, + "alert_chain_health_readback_accepted": false, + "alert_chain_health_readback_ref": null, + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "before_after_alert_state_accepted": false, + "before_alert_state_ref": null, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", + "add_action_button", + "store_raw_live_config", + "store_full_receiver_payload", + "collect_bot_token", + "collect_dsn_secret", + "collect_webhook_secret", + "change_alert_rule", + "change_scrape_config", + "change_dashboard", + "change_notification_policy", + "change_silence", + "change_inhibit_rule", + "accept_dashboard_up_as_alert_chain_healthy", + "skip_receiver_receipt", + "skip_stale_review", + "skip_silence_review", + "skip_rollback_validation", + "skip_post_change_monitoring", + "skip_cross_project_sync", + "live_receiver_probe" + ], + "change_intent_or_break_glass_ref": null, + "change_or_outage_time_window_accepted": false, + "change_or_outage_time_window_ref": null, + "config_kind": "grafana_dashboard", + "control_tier": "C1", + "cross_project_sync_accepted": false, + "cross_project_sync_ref": null, + "dashboard_trace_log_freshness_accepted": false, + "dashboard_trace_log_freshness_ref": null, + "expected_scope": "grafana_ai_monitoring_dashboard", + "exporter_deploy_authorized": false, + "followup_owner": "pending_post_incident_readback", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "intent_or_break_glass_accepted": false, + "kubectl_action_authorized": false, + "label": "Grafana AI monitoring dashboard", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "maintenance_window": "pending_post_incident_readback", + "monitoring_incident_or_change_ref": null, + "no_false_green_accepted": false, + "not_approval": true, + "notification_delivery_metadata_accepted": false, + "notification_delivery_metadata_ref": null, + "notification_route_change_authorized": false, + "observability_scope": [ + "AI monitoring", + "runtime health" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_post_incident_readback", + "request_actor_or_time_supplement", + "request_alert_state_supplement", + "request_receiver_receipt_supplement", + "request_stale_silence_supplement", + "request_freshness_or_alert_chain_supplement", + "quarantine_raw_payload", + "reject_false_green_claim", + "ready_for_monitoring_post_incident_review", + "recurrence_guard_backfill_required", + "waiting_runtime_gate" + ], + "post_change_monitoring_accepted": false, + "post_change_monitoring_ref": null, + "post_incident_readback_accepted": false, + "post_incident_readback_candidate_id": "monitoring_post_incident_readback:grafana_ai_monitoring_dashboard", + "post_incident_readback_received": false, + "postcheck_readback_accepted": false, + "postcheck_readback_ref": null, + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "readback_fields": [ + "post_incident_readback_candidate_id", + "source_acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "receiver_receipt_readback_accepted": false, + "receiver_receipt_readback_ref": null, + "receiver_route_change_authorized": false, + "receiver_route_state_accepted": false, + "receiver_route_state_ref": null, + "recurrence_guard_accepted": false, + "recurrence_guard_ref": null, + "reload_or_no_reload_accepted": false, + "reload_or_no_reload_ref": null, + "remote_write_change_authorized": false, + "repo_sha256": "acf865af021100244b91358c423e9d73d8bf2d58221cf274ea7ad7ae2fc933fd", + "repo_source_path": "ops/grafana/dashboards/ai-monitoring.json", + "request_id": "monitoring_owner_request:grafana_ai_monitoring_dashboard", + "required_readback_fields": [ + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "followup_owner", + "redacted_evidence_refs", + "no_secret_value_attestation", + "no_raw_payload_attestation", + "no_false_green_attestation", + "receipt_not_route_only_attestation", + "independent_postcheck_attestation", + "noise_budget_or_silence_owner_attestation" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "source_owner_response_acceptance_current", + "incident_or_change_ref_present", + "actor_attribution_present", + "change_or_outage_time_window_present", + "intent_or_break_glass_present", + "before_after_alert_state_present", + "rule_datasource_scrape_state_present", + "receiver_route_state_present", + "reload_or_no_reload_called_out", + "receiver_receipt_readback_present", + "stale_pending_resolved_review_present", + "silence_mute_dedup_inhibit_review_present", + "dashboard_trace_log_freshness_present", + "notification_delivery_metadata_present", + "alert_chain_health_not_route_only", + "cross_project_sync_present", + "rollback_or_disable_validation_present", + "post_change_monitoring_present", + "postcheck_independent", + "recurrence_guard_present", + "maintenance_window_present", + "noise_budget_owner_present", + "redacted_refs_only", + "secret_value_absent", + "raw_payload_absent", + "no_false_green", + "runtime_stays_zero", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_post_incident_readback", + "rollback_or_disable_validation_accepted": false, + "rollback_or_disable_validation_ref": null, + "rollback_owner": "pending_post_incident_readback", + "rule_datasource_scrape_state_accepted": false, + "rule_datasource_scrape_state_ref": null, + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_mute_dedup_inhibit_review_accepted": false, + "silence_mute_dedup_inhibit_review_ref": null, + "silence_policy_change_authorized": false, + "source_acceptance_candidate_id": "monitoring_owner_response_acceptance:grafana_ai_monitoring_dashboard", + "source_line_count": 347, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "stale_pending_resolved_review_accepted": false, + "stale_pending_resolved_review_ref": null, + "status": "waiting_post_incident_readback", + "surface_id": "grafana_ai_monitoring_dashboard", + "telegram_send_authorized": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "action_buttons_allowed": false, + "active_scan_authorized": false, + "actor_attribution_accepted": false, + "actor_attribution_ref": null, + "after_alert_state_ref": null, + "alert_chain_health_readback_accepted": false, + "alert_chain_health_readback_ref": null, + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "before_after_alert_state_accepted": false, + "before_alert_state_ref": null, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", + "add_action_button", + "store_raw_live_config", + "store_full_receiver_payload", + "collect_bot_token", + "collect_dsn_secret", + "collect_webhook_secret", + "change_alert_rule", + "change_scrape_config", + "change_dashboard", + "change_notification_policy", + "change_silence", + "change_inhibit_rule", + "accept_dashboard_up_as_alert_chain_healthy", + "skip_receiver_receipt", + "skip_stale_review", + "skip_silence_review", + "skip_rollback_validation", + "skip_post_change_monitoring", + "skip_cross_project_sync", + "live_receiver_probe" + ], + "change_intent_or_break_glass_ref": null, + "change_or_outage_time_window_accepted": false, + "change_or_outage_time_window_ref": null, + "config_kind": "grafana_dashboard", + "control_tier": "C1", + "cross_project_sync_accepted": false, + "cross_project_sync_ref": null, + "dashboard_trace_log_freshness_accepted": false, + "dashboard_trace_log_freshness_ref": null, + "expected_scope": "grafana_infra_monitoring_dashboard", + "exporter_deploy_authorized": false, + "followup_owner": "pending_post_incident_readback", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "intent_or_break_glass_accepted": false, + "kubectl_action_authorized": false, + "label": "Grafana infra monitoring dashboard", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "maintenance_window": "pending_post_incident_readback", + "monitoring_incident_or_change_ref": null, + "no_false_green_accepted": false, + "not_approval": true, + "notification_delivery_metadata_accepted": false, + "notification_delivery_metadata_ref": null, + "notification_route_change_authorized": false, + "observability_scope": [ + "infrastructure monitoring", + "host health" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_post_incident_readback", + "request_actor_or_time_supplement", + "request_alert_state_supplement", + "request_receiver_receipt_supplement", + "request_stale_silence_supplement", + "request_freshness_or_alert_chain_supplement", + "quarantine_raw_payload", + "reject_false_green_claim", + "ready_for_monitoring_post_incident_review", + "recurrence_guard_backfill_required", + "waiting_runtime_gate" + ], + "post_change_monitoring_accepted": false, + "post_change_monitoring_ref": null, + "post_incident_readback_accepted": false, + "post_incident_readback_candidate_id": "monitoring_post_incident_readback:grafana_infra_monitoring_dashboard", + "post_incident_readback_received": false, + "postcheck_readback_accepted": false, + "postcheck_readback_ref": null, + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "readback_fields": [ + "post_incident_readback_candidate_id", + "source_acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "receiver_receipt_readback_accepted": false, + "receiver_receipt_readback_ref": null, + "receiver_route_change_authorized": false, + "receiver_route_state_accepted": false, + "receiver_route_state_ref": null, + "recurrence_guard_accepted": false, + "recurrence_guard_ref": null, + "reload_or_no_reload_accepted": false, + "reload_or_no_reload_ref": null, + "remote_write_change_authorized": false, + "repo_sha256": "40c696e140585bd1889c4e07cbd8f9be302c1653b5d0736cd93c8d9c29c2beb0", + "repo_source_path": "ops/grafana/dashboards/infra-monitoring.json", + "request_id": "monitoring_owner_request:grafana_infra_monitoring_dashboard", + "required_readback_fields": [ + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "followup_owner", + "redacted_evidence_refs", + "no_secret_value_attestation", + "no_raw_payload_attestation", + "no_false_green_attestation", + "receipt_not_route_only_attestation", + "independent_postcheck_attestation", + "noise_budget_or_silence_owner_attestation" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "source_owner_response_acceptance_current", + "incident_or_change_ref_present", + "actor_attribution_present", + "change_or_outage_time_window_present", + "intent_or_break_glass_present", + "before_after_alert_state_present", + "rule_datasource_scrape_state_present", + "receiver_route_state_present", + "reload_or_no_reload_called_out", + "receiver_receipt_readback_present", + "stale_pending_resolved_review_present", + "silence_mute_dedup_inhibit_review_present", + "dashboard_trace_log_freshness_present", + "notification_delivery_metadata_present", + "alert_chain_health_not_route_only", + "cross_project_sync_present", + "rollback_or_disable_validation_present", + "post_change_monitoring_present", + "postcheck_independent", + "recurrence_guard_present", + "maintenance_window_present", + "noise_budget_owner_present", + "redacted_refs_only", + "secret_value_absent", + "raw_payload_absent", + "no_false_green", + "runtime_stays_zero", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_post_incident_readback", + "rollback_or_disable_validation_accepted": false, + "rollback_or_disable_validation_ref": null, + "rollback_owner": "pending_post_incident_readback", + "rule_datasource_scrape_state_accepted": false, + "rule_datasource_scrape_state_ref": null, + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_mute_dedup_inhibit_review_accepted": false, + "silence_mute_dedup_inhibit_review_ref": null, + "silence_policy_change_authorized": false, + "source_acceptance_candidate_id": "monitoring_owner_response_acceptance:grafana_infra_monitoring_dashboard", + "source_line_count": 306, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "stale_pending_resolved_review_accepted": false, + "stale_pending_resolved_review_ref": null, + "status": "waiting_post_incident_readback", + "surface_id": "grafana_infra_monitoring_dashboard", + "telegram_send_authorized": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "action_buttons_allowed": false, + "active_scan_authorized": false, + "actor_attribution_accepted": false, + "actor_attribution_ref": null, + "after_alert_state_ref": null, + "alert_chain_health_readback_accepted": false, + "alert_chain_health_readback_ref": null, + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "before_after_alert_state_accepted": false, + "before_alert_state_ref": null, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", + "add_action_button", + "store_raw_live_config", + "store_full_receiver_payload", + "collect_bot_token", + "collect_dsn_secret", + "collect_webhook_secret", + "change_alert_rule", + "change_scrape_config", + "change_dashboard", + "change_notification_policy", + "change_silence", + "change_inhibit_rule", + "accept_dashboard_up_as_alert_chain_healthy", + "skip_receiver_receipt", + "skip_stale_review", + "skip_silence_review", + "skip_rollback_validation", + "skip_post_change_monitoring", + "skip_cross_project_sync", + "live_receiver_probe" + ], + "change_intent_or_break_glass_ref": null, + "change_or_outage_time_window_accepted": false, + "change_or_outage_time_window_ref": null, + "config_kind": "grafana_dashboard", + "control_tier": "C1", + "cross_project_sync_accepted": false, + "cross_project_sync_ref": null, + "dashboard_trace_log_freshness_accepted": false, + "dashboard_trace_log_freshness_ref": null, + "expected_scope": "grafana_nvidia_nemotron_dashboard", + "exporter_deploy_authorized": false, + "followup_owner": "pending_post_incident_readback", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "intent_or_break_glass_accepted": false, + "kubectl_action_authorized": false, + "label": "Grafana NVIDIA / NemoTron dashboard", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "maintenance_window": "pending_post_incident_readback", + "monitoring_incident_or_change_ref": null, + "no_false_green_accepted": false, + "not_approval": true, + "notification_delivery_metadata_accepted": false, + "notification_delivery_metadata_ref": null, + "notification_route_change_authorized": false, + "observability_scope": [ + "NVIDIA", + "NemoTron", + "GPU AI route" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_post_incident_readback", + "request_actor_or_time_supplement", + "request_alert_state_supplement", + "request_receiver_receipt_supplement", + "request_stale_silence_supplement", + "request_freshness_or_alert_chain_supplement", + "quarantine_raw_payload", + "reject_false_green_claim", + "ready_for_monitoring_post_incident_review", + "recurrence_guard_backfill_required", + "waiting_runtime_gate" + ], + "post_change_monitoring_accepted": false, + "post_change_monitoring_ref": null, + "post_incident_readback_accepted": false, + "post_incident_readback_candidate_id": "monitoring_post_incident_readback:grafana_nvidia_nemotron_dashboard", + "post_incident_readback_received": false, + "postcheck_readback_accepted": false, + "postcheck_readback_ref": null, + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "readback_fields": [ + "post_incident_readback_candidate_id", + "source_acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "receiver_receipt_readback_accepted": false, + "receiver_receipt_readback_ref": null, + "receiver_route_change_authorized": false, + "receiver_route_state_accepted": false, + "receiver_route_state_ref": null, + "recurrence_guard_accepted": false, + "recurrence_guard_ref": null, + "reload_or_no_reload_accepted": false, + "reload_or_no_reload_ref": null, + "remote_write_change_authorized": false, + "repo_sha256": "f47280987546c8546058d61b25a41f14bbb573e33a9c08f45b138d8176397d82", + "repo_source_path": "ops/grafana/dashboards/nvidia-nemotron.json", + "request_id": "monitoring_owner_request:grafana_nvidia_nemotron_dashboard", + "required_readback_fields": [ + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "followup_owner", + "redacted_evidence_refs", + "no_secret_value_attestation", + "no_raw_payload_attestation", + "no_false_green_attestation", + "receipt_not_route_only_attestation", + "independent_postcheck_attestation", + "noise_budget_or_silence_owner_attestation" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "source_owner_response_acceptance_current", + "incident_or_change_ref_present", + "actor_attribution_present", + "change_or_outage_time_window_present", + "intent_or_break_glass_present", + "before_after_alert_state_present", + "rule_datasource_scrape_state_present", + "receiver_route_state_present", + "reload_or_no_reload_called_out", + "receiver_receipt_readback_present", + "stale_pending_resolved_review_present", + "silence_mute_dedup_inhibit_review_present", + "dashboard_trace_log_freshness_present", + "notification_delivery_metadata_present", + "alert_chain_health_not_route_only", + "cross_project_sync_present", + "rollback_or_disable_validation_present", + "post_change_monitoring_present", + "postcheck_independent", + "recurrence_guard_present", + "maintenance_window_present", + "noise_budget_owner_present", + "redacted_refs_only", + "secret_value_absent", + "raw_payload_absent", + "no_false_green", + "runtime_stays_zero", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_post_incident_readback", + "rollback_or_disable_validation_accepted": false, + "rollback_or_disable_validation_ref": null, + "rollback_owner": "pending_post_incident_readback", + "rule_datasource_scrape_state_accepted": false, + "rule_datasource_scrape_state_ref": null, + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_mute_dedup_inhibit_review_accepted": false, + "silence_mute_dedup_inhibit_review_ref": null, + "silence_policy_change_authorized": false, + "source_acceptance_candidate_id": "monitoring_owner_response_acceptance:grafana_nvidia_nemotron_dashboard", + "source_line_count": 1426, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "stale_pending_resolved_review_accepted": false, + "stale_pending_resolved_review_ref": null, + "status": "waiting_post_incident_readback", + "surface_id": "grafana_nvidia_nemotron_dashboard", + "telegram_send_authorized": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "action_buttons_allowed": false, + "active_scan_authorized": false, + "actor_attribution_accepted": false, + "actor_attribution_ref": null, + "after_alert_state_ref": null, + "alert_chain_health_readback_accepted": false, + "alert_chain_health_readback_ref": null, + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "before_after_alert_state_accepted": false, + "before_alert_state_ref": null, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", + "add_action_button", + "store_raw_live_config", + "store_full_receiver_payload", + "collect_bot_token", + "collect_dsn_secret", + "collect_webhook_secret", + "change_alert_rule", + "change_scrape_config", + "change_dashboard", + "change_notification_policy", + "change_silence", + "change_inhibit_rule", + "accept_dashboard_up_as_alert_chain_healthy", + "skip_receiver_receipt", + "skip_stale_review", + "skip_silence_review", + "skip_rollback_validation", + "skip_post_change_monitoring", + "skip_cross_project_sync", + "live_receiver_probe" + ], + "change_intent_or_break_glass_ref": null, + "change_or_outage_time_window_accepted": false, + "change_or_outage_time_window_ref": null, + "config_kind": "otel_collector_config", + "control_tier": "C1", + "cross_project_sync_accepted": false, + "cross_project_sync_ref": null, + "dashboard_trace_log_freshness_accepted": false, + "dashboard_trace_log_freshness_ref": null, + "expected_scope": "signoz_otel_collector_phase_o", + "exporter_deploy_authorized": false, + "followup_owner": "pending_post_incident_readback", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "intent_or_break_glass_accepted": false, + "kubectl_action_authorized": false, + "label": "SigNoz OTEL collector config", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "maintenance_window": "pending_post_incident_readback", + "monitoring_incident_or_change_ref": null, + "no_false_green_accepted": false, + "not_approval": true, + "notification_delivery_metadata_accepted": false, + "notification_delivery_metadata_ref": null, + "notification_route_change_authorized": false, + "observability_scope": [ + "OTEL collector", + "traces / metrics / logs routing" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_post_incident_readback", + "request_actor_or_time_supplement", + "request_alert_state_supplement", + "request_receiver_receipt_supplement", + "request_stale_silence_supplement", + "request_freshness_or_alert_chain_supplement", + "quarantine_raw_payload", + "reject_false_green_claim", + "ready_for_monitoring_post_incident_review", + "recurrence_guard_backfill_required", + "waiting_runtime_gate" + ], + "post_change_monitoring_accepted": false, + "post_change_monitoring_ref": null, + "post_incident_readback_accepted": false, + "post_incident_readback_candidate_id": "monitoring_post_incident_readback:signoz_otel_collector_config", + "post_incident_readback_received": false, + "postcheck_readback_accepted": false, + "postcheck_readback_ref": null, + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "readback_fields": [ + "post_incident_readback_candidate_id", + "source_acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "receiver_receipt_readback_accepted": false, + "receiver_receipt_readback_ref": null, + "receiver_route_change_authorized": false, + "receiver_route_state_accepted": false, + "receiver_route_state_ref": null, + "recurrence_guard_accepted": false, + "recurrence_guard_ref": null, + "reload_or_no_reload_accepted": false, + "reload_or_no_reload_ref": null, + "remote_write_change_authorized": false, + "repo_sha256": "85abede3243b0775da600d1a5e092df3ff8c79eea56131b0da52a51aa7f668b9", + "repo_source_path": "ops/signoz/otel-collector-config-phase-o.yaml", + "request_id": "monitoring_owner_request:signoz_otel_collector_config", + "required_readback_fields": [ + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "followup_owner", + "redacted_evidence_refs", + "no_secret_value_attestation", + "no_raw_payload_attestation", + "no_false_green_attestation", + "receipt_not_route_only_attestation", + "independent_postcheck_attestation", + "noise_budget_or_silence_owner_attestation" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "source_owner_response_acceptance_current", + "incident_or_change_ref_present", + "actor_attribution_present", + "change_or_outage_time_window_present", + "intent_or_break_glass_present", + "before_after_alert_state_present", + "rule_datasource_scrape_state_present", + "receiver_route_state_present", + "reload_or_no_reload_called_out", + "receiver_receipt_readback_present", + "stale_pending_resolved_review_present", + "silence_mute_dedup_inhibit_review_present", + "dashboard_trace_log_freshness_present", + "notification_delivery_metadata_present", + "alert_chain_health_not_route_only", + "cross_project_sync_present", + "rollback_or_disable_validation_present", + "post_change_monitoring_present", + "postcheck_independent", + "recurrence_guard_present", + "maintenance_window_present", + "noise_budget_owner_present", + "redacted_refs_only", + "secret_value_absent", + "raw_payload_absent", + "no_false_green", + "runtime_stays_zero", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_post_incident_readback", + "rollback_or_disable_validation_accepted": false, + "rollback_or_disable_validation_ref": null, + "rollback_owner": "pending_post_incident_readback", + "rule_datasource_scrape_state_accepted": false, + "rule_datasource_scrape_state_ref": null, + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_mute_dedup_inhibit_review_accepted": false, + "silence_mute_dedup_inhibit_review_ref": null, + "silence_policy_change_authorized": false, + "source_acceptance_candidate_id": "monitoring_owner_response_acceptance:signoz_otel_collector_config", + "source_line_count": 188, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "stale_pending_resolved_review_accepted": false, + "stale_pending_resolved_review_ref": null, + "status": "waiting_post_incident_readback", + "surface_id": "signoz_otel_collector_config", + "telegram_send_authorized": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "action_buttons_allowed": false, + "active_scan_authorized": false, + "actor_attribution_accepted": false, + "actor_attribution_ref": null, + "after_alert_state_ref": null, + "alert_chain_health_readback_accepted": false, + "alert_chain_health_readback_ref": null, + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "before_after_alert_state_accepted": false, + "before_alert_state_ref": null, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", + "add_action_button", + "store_raw_live_config", + "store_full_receiver_payload", + "collect_bot_token", + "collect_dsn_secret", + "collect_webhook_secret", + "change_alert_rule", + "change_scrape_config", + "change_dashboard", + "change_notification_policy", + "change_silence", + "change_inhibit_rule", + "accept_dashboard_up_as_alert_chain_healthy", + "skip_receiver_receipt", + "skip_stale_review", + "skip_silence_review", + "skip_rollback_validation", + "skip_post_change_monitoring", + "skip_cross_project_sync", + "live_receiver_probe" + ], + "change_intent_or_break_glass_ref": null, + "change_or_outage_time_window_accepted": false, + "change_or_outage_time_window_ref": null, + "config_kind": "signoz_alert_rules", + "control_tier": "C1", + "cross_project_sync_accepted": false, + "cross_project_sync_ref": null, + "dashboard_trace_log_freshness_accepted": false, + "dashboard_trace_log_freshness_ref": null, + "expected_scope": "signoz_alerting_rules", + "exporter_deploy_authorized": false, + "followup_owner": "pending_post_incident_readback", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "intent_or_break_glass_accepted": false, + "kubectl_action_authorized": false, + "label": "SigNoz alerting rules", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "maintenance_window": "pending_post_incident_readback", + "monitoring_incident_or_change_ref": null, + "no_false_green_accepted": false, + "not_approval": true, + "notification_delivery_metadata_accepted": false, + "notification_delivery_metadata_ref": null, + "notification_route_change_authorized": false, + "observability_scope": [ + "SigNoz alert rules", + "logs / traces alerting" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_post_incident_readback", + "request_actor_or_time_supplement", + "request_alert_state_supplement", + "request_receiver_receipt_supplement", + "request_stale_silence_supplement", + "request_freshness_or_alert_chain_supplement", + "quarantine_raw_payload", + "reject_false_green_claim", + "ready_for_monitoring_post_incident_review", + "recurrence_guard_backfill_required", + "waiting_runtime_gate" + ], + "post_change_monitoring_accepted": false, + "post_change_monitoring_ref": null, + "post_incident_readback_accepted": false, + "post_incident_readback_candidate_id": "monitoring_post_incident_readback:signoz_alerting_rules", + "post_incident_readback_received": false, + "postcheck_readback_accepted": false, + "postcheck_readback_ref": null, + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "readback_fields": [ + "post_incident_readback_candidate_id", + "source_acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "receiver_receipt_readback_accepted": false, + "receiver_receipt_readback_ref": null, + "receiver_route_change_authorized": false, + "receiver_route_state_accepted": false, + "receiver_route_state_ref": null, + "recurrence_guard_accepted": false, + "recurrence_guard_ref": null, + "reload_or_no_reload_accepted": false, + "reload_or_no_reload_ref": null, + "remote_write_change_authorized": false, + "repo_sha256": "a70519216e354ff78e323b1d77898e9d55b19eea5704fd8a8e9dd928196881e4", + "repo_source_path": "ops/signoz/alerting/rules.yaml", + "request_id": "monitoring_owner_request:signoz_alerting_rules", + "required_readback_fields": [ + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "followup_owner", + "redacted_evidence_refs", + "no_secret_value_attestation", + "no_raw_payload_attestation", + "no_false_green_attestation", + "receipt_not_route_only_attestation", + "independent_postcheck_attestation", + "noise_budget_or_silence_owner_attestation" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "source_owner_response_acceptance_current", + "incident_or_change_ref_present", + "actor_attribution_present", + "change_or_outage_time_window_present", + "intent_or_break_glass_present", + "before_after_alert_state_present", + "rule_datasource_scrape_state_present", + "receiver_route_state_present", + "reload_or_no_reload_called_out", + "receiver_receipt_readback_present", + "stale_pending_resolved_review_present", + "silence_mute_dedup_inhibit_review_present", + "dashboard_trace_log_freshness_present", + "notification_delivery_metadata_present", + "alert_chain_health_not_route_only", + "cross_project_sync_present", + "rollback_or_disable_validation_present", + "post_change_monitoring_present", + "postcheck_independent", + "recurrence_guard_present", + "maintenance_window_present", + "noise_budget_owner_present", + "redacted_refs_only", + "secret_value_absent", + "raw_payload_absent", + "no_false_green", + "runtime_stays_zero", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_post_incident_readback", + "rollback_or_disable_validation_accepted": false, + "rollback_or_disable_validation_ref": null, + "rollback_owner": "pending_post_incident_readback", + "rule_datasource_scrape_state_accepted": false, + "rule_datasource_scrape_state_ref": null, + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_mute_dedup_inhibit_review_accepted": false, + "silence_mute_dedup_inhibit_review_ref": null, + "silence_policy_change_authorized": false, + "source_acceptance_candidate_id": "monitoring_owner_response_acceptance:signoz_alerting_rules", + "source_line_count": 165, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "stale_pending_resolved_review_accepted": false, + "stale_pending_resolved_review_ref": null, + "status": "waiting_post_incident_readback", + "surface_id": "signoz_alerting_rules", + "telegram_send_authorized": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "action_buttons_allowed": false, + "active_scan_authorized": false, + "actor_attribution_accepted": false, + "actor_attribution_ref": null, + "after_alert_state_ref": null, + "alert_chain_health_readback_accepted": false, + "alert_chain_health_readback_ref": null, + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "before_after_alert_state_accepted": false, + "before_alert_state_ref": null, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", + "add_action_button", + "store_raw_live_config", + "store_full_receiver_payload", + "collect_bot_token", + "collect_dsn_secret", + "collect_webhook_secret", + "change_alert_rule", + "change_scrape_config", + "change_dashboard", + "change_notification_policy", + "change_silence", + "change_inhibit_rule", + "accept_dashboard_up_as_alert_chain_healthy", + "skip_receiver_receipt", + "skip_stale_review", + "skip_silence_review", + "skip_rollback_validation", + "skip_post_change_monitoring", + "skip_cross_project_sync", + "live_receiver_probe" + ], + "change_intent_or_break_glass_ref": null, + "change_or_outage_time_window_accepted": false, + "change_or_outage_time_window_ref": null, + "config_kind": "signoz_log_rules", + "control_tier": "C1", + "cross_project_sync_accepted": false, + "cross_project_sync_ref": null, + "dashboard_trace_log_freshness_accepted": false, + "dashboard_trace_log_freshness_ref": null, + "expected_scope": "signoz_log_alert_rules", + "exporter_deploy_authorized": false, + "followup_owner": "pending_post_incident_readback", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "intent_or_break_glass_accepted": false, + "kubectl_action_authorized": false, + "label": "SigNoz log alert rules", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "maintenance_window": "pending_post_incident_readback", + "monitoring_incident_or_change_ref": null, + "no_false_green_accepted": false, + "not_approval": true, + "notification_delivery_metadata_accepted": false, + "notification_delivery_metadata_ref": null, + "notification_route_change_authorized": false, + "observability_scope": [ + "log alerting", + "manual rule translation" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_post_incident_readback", + "request_actor_or_time_supplement", + "request_alert_state_supplement", + "request_receiver_receipt_supplement", + "request_stale_silence_supplement", + "request_freshness_or_alert_chain_supplement", + "quarantine_raw_payload", + "reject_false_green_claim", + "ready_for_monitoring_post_incident_review", + "recurrence_guard_backfill_required", + "waiting_runtime_gate" + ], + "post_change_monitoring_accepted": false, + "post_change_monitoring_ref": null, + "post_incident_readback_accepted": false, + "post_incident_readback_candidate_id": "monitoring_post_incident_readback:signoz_log_rules", + "post_incident_readback_received": false, + "postcheck_readback_accepted": false, + "postcheck_readback_ref": null, + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "readback_fields": [ + "post_incident_readback_candidate_id", + "source_acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "receiver_receipt_readback_accepted": false, + "receiver_receipt_readback_ref": null, + "receiver_route_change_authorized": false, + "receiver_route_state_accepted": false, + "receiver_route_state_ref": null, + "recurrence_guard_accepted": false, + "recurrence_guard_ref": null, + "reload_or_no_reload_accepted": false, + "reload_or_no_reload_ref": null, + "remote_write_change_authorized": false, + "repo_sha256": "f4e77c4e8e6fa149df5a4b5ef4651e514f9e0142f66f3f27dbd951fe3abed533", + "repo_source_path": "ops/signoz/alerting/log-rules.md", + "request_id": "monitoring_owner_request:signoz_log_rules", + "required_readback_fields": [ + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "followup_owner", + "redacted_evidence_refs", + "no_secret_value_attestation", + "no_raw_payload_attestation", + "no_false_green_attestation", + "receipt_not_route_only_attestation", + "independent_postcheck_attestation", + "noise_budget_or_silence_owner_attestation" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "source_owner_response_acceptance_current", + "incident_or_change_ref_present", + "actor_attribution_present", + "change_or_outage_time_window_present", + "intent_or_break_glass_present", + "before_after_alert_state_present", + "rule_datasource_scrape_state_present", + "receiver_route_state_present", + "reload_or_no_reload_called_out", + "receiver_receipt_readback_present", + "stale_pending_resolved_review_present", + "silence_mute_dedup_inhibit_review_present", + "dashboard_trace_log_freshness_present", + "notification_delivery_metadata_present", + "alert_chain_health_not_route_only", + "cross_project_sync_present", + "rollback_or_disable_validation_present", + "post_change_monitoring_present", + "postcheck_independent", + "recurrence_guard_present", + "maintenance_window_present", + "noise_budget_owner_present", + "redacted_refs_only", + "secret_value_absent", + "raw_payload_absent", + "no_false_green", + "runtime_stays_zero", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_post_incident_readback", + "rollback_or_disable_validation_accepted": false, + "rollback_or_disable_validation_ref": null, + "rollback_owner": "pending_post_incident_readback", + "rule_datasource_scrape_state_accepted": false, + "rule_datasource_scrape_state_ref": null, + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_mute_dedup_inhibit_review_accepted": false, + "silence_mute_dedup_inhibit_review_ref": null, + "silence_policy_change_authorized": false, + "source_acceptance_candidate_id": "monitoring_owner_response_acceptance:signoz_log_rules", + "source_line_count": 107, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "stale_pending_resolved_review_accepted": false, + "stale_pending_resolved_review_ref": null, + "status": "waiting_post_incident_readback", + "surface_id": "signoz_log_rules", + "telegram_send_authorized": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "action_buttons_allowed": false, + "active_scan_authorized": false, + "actor_attribution_accepted": false, + "actor_attribution_ref": null, + "after_alert_state_ref": null, + "alert_chain_health_readback_accepted": false, + "alert_chain_health_readback_ref": null, + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "before_after_alert_state_accepted": false, + "before_alert_state_ref": null, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", + "add_action_button", + "store_raw_live_config", + "store_full_receiver_payload", + "collect_bot_token", + "collect_dsn_secret", + "collect_webhook_secret", + "change_alert_rule", + "change_scrape_config", + "change_dashboard", + "change_notification_policy", + "change_silence", + "change_inhibit_rule", + "accept_dashboard_up_as_alert_chain_healthy", + "skip_receiver_receipt", + "skip_stale_review", + "skip_silence_review", + "skip_rollback_validation", + "skip_post_change_monitoring", + "skip_cross_project_sync", + "live_receiver_probe" + ], + "change_intent_or_break_glass_ref": null, + "change_or_outage_time_window_accepted": false, + "change_or_outage_time_window_ref": null, + "config_kind": "sentry_runtime_compose", + "control_tier": "C1", + "cross_project_sync_accepted": false, + "cross_project_sync_ref": null, + "dashboard_trace_log_freshness_accepted": false, + "dashboard_trace_log_freshness_ref": null, + "expected_scope": "sentry_self_hosted_runtime", + "exporter_deploy_authorized": false, + "followup_owner": "pending_post_incident_readback", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "intent_or_break_glass_accepted": false, + "kubectl_action_authorized": false, + "label": "Sentry self-hosted compose", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "maintenance_window": "pending_post_incident_readback", + "monitoring_incident_or_change_ref": null, + "no_false_green_accepted": false, + "not_approval": true, + "notification_delivery_metadata_accepted": false, + "notification_delivery_metadata_ref": null, + "notification_route_change_authorized": false, + "observability_scope": [ + "Sentry self-hosted", + "ClickHouse / Postgres / Redis boundary" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_post_incident_readback", + "request_actor_or_time_supplement", + "request_alert_state_supplement", + "request_receiver_receipt_supplement", + "request_stale_silence_supplement", + "request_freshness_or_alert_chain_supplement", + "quarantine_raw_payload", + "reject_false_green_claim", + "ready_for_monitoring_post_incident_review", + "recurrence_guard_backfill_required", + "waiting_runtime_gate" + ], + "post_change_monitoring_accepted": false, + "post_change_monitoring_ref": null, + "post_incident_readback_accepted": false, + "post_incident_readback_candidate_id": "monitoring_post_incident_readback:sentry_self_hosted_compose", + "post_incident_readback_received": false, + "postcheck_readback_accepted": false, + "postcheck_readback_ref": null, + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "readback_fields": [ + "post_incident_readback_candidate_id", + "source_acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "receiver_receipt_readback_accepted": false, + "receiver_receipt_readback_ref": null, + "receiver_route_change_authorized": false, + "receiver_route_state_accepted": false, + "receiver_route_state_ref": null, + "recurrence_guard_accepted": false, + "recurrence_guard_ref": null, + "reload_or_no_reload_accepted": false, + "reload_or_no_reload_ref": null, + "remote_write_change_authorized": false, + "repo_sha256": "bba852dc0d73934998fa375130168615f9ac7611ce3f3efaa901e3b7e222eae3", + "repo_source_path": "ops/sentry-self-hosted/docker-compose.yml", + "request_id": "monitoring_owner_request:sentry_self_hosted_compose", + "required_readback_fields": [ + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "followup_owner", + "redacted_evidence_refs", + "no_secret_value_attestation", + "no_raw_payload_attestation", + "no_false_green_attestation", + "receipt_not_route_only_attestation", + "independent_postcheck_attestation", + "noise_budget_or_silence_owner_attestation" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "source_owner_response_acceptance_current", + "incident_or_change_ref_present", + "actor_attribution_present", + "change_or_outage_time_window_present", + "intent_or_break_glass_present", + "before_after_alert_state_present", + "rule_datasource_scrape_state_present", + "receiver_route_state_present", + "reload_or_no_reload_called_out", + "receiver_receipt_readback_present", + "stale_pending_resolved_review_present", + "silence_mute_dedup_inhibit_review_present", + "dashboard_trace_log_freshness_present", + "notification_delivery_metadata_present", + "alert_chain_health_not_route_only", + "cross_project_sync_present", + "rollback_or_disable_validation_present", + "post_change_monitoring_present", + "postcheck_independent", + "recurrence_guard_present", + "maintenance_window_present", + "noise_budget_owner_present", + "redacted_refs_only", + "secret_value_absent", + "raw_payload_absent", + "no_false_green", + "runtime_stays_zero", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_post_incident_readback", + "rollback_or_disable_validation_accepted": false, + "rollback_or_disable_validation_ref": null, + "rollback_owner": "pending_post_incident_readback", + "rule_datasource_scrape_state_accepted": false, + "rule_datasource_scrape_state_ref": null, + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_mute_dedup_inhibit_review_accepted": false, + "silence_mute_dedup_inhibit_review_ref": null, + "silence_policy_change_authorized": false, + "source_acceptance_candidate_id": "monitoring_owner_response_acceptance:sentry_self_hosted_compose", + "source_line_count": 49, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "stale_pending_resolved_review_accepted": false, + "stale_pending_resolved_review_ref": null, + "status": "waiting_post_incident_readback", + "surface_id": "sentry_self_hosted_compose", + "telegram_send_authorized": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "action_buttons_allowed": false, + "active_scan_authorized": false, + "actor_attribution_accepted": false, + "actor_attribution_ref": null, + "after_alert_state_ref": null, + "alert_chain_health_readback_accepted": false, + "alert_chain_health_readback_ref": null, + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "before_after_alert_state_accepted": false, + "before_alert_state_ref": null, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", + "add_action_button", + "store_raw_live_config", + "store_full_receiver_payload", + "collect_bot_token", + "collect_dsn_secret", + "collect_webhook_secret", + "change_alert_rule", + "change_scrape_config", + "change_dashboard", + "change_notification_policy", + "change_silence", + "change_inhibit_rule", + "accept_dashboard_up_as_alert_chain_healthy", + "skip_receiver_receipt", + "skip_stale_review", + "skip_silence_review", + "skip_rollback_validation", + "skip_post_change_monitoring", + "skip_cross_project_sync", + "live_receiver_probe" + ], + "change_intent_or_break_glass_ref": null, + "change_or_outage_time_window_accepted": false, + "change_or_outage_time_window_ref": null, + "config_kind": "sentry_deploy_script", + "control_tier": "C1", + "cross_project_sync_accepted": false, + "cross_project_sync_ref": null, + "dashboard_trace_log_freshness_accepted": false, + "dashboard_trace_log_freshness_ref": null, + "expected_scope": "sentry_self_hosted_deploy", + "exporter_deploy_authorized": false, + "followup_owner": "pending_post_incident_readback", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "intent_or_break_glass_accepted": false, + "kubectl_action_authorized": false, + "label": "Sentry self-hosted deploy script", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "maintenance_window": "pending_post_incident_readback", + "monitoring_incident_or_change_ref": null, + "no_false_green_accepted": false, + "not_approval": true, + "notification_delivery_metadata_accepted": false, + "notification_delivery_metadata_ref": null, + "notification_route_change_authorized": false, + "observability_scope": [ + "Sentry deploy", + "compose pull / up", + "migration boundary" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_post_incident_readback", + "request_actor_or_time_supplement", + "request_alert_state_supplement", + "request_receiver_receipt_supplement", + "request_stale_silence_supplement", + "request_freshness_or_alert_chain_supplement", + "quarantine_raw_payload", + "reject_false_green_claim", + "ready_for_monitoring_post_incident_review", + "recurrence_guard_backfill_required", + "waiting_runtime_gate" + ], + "post_change_monitoring_accepted": false, + "post_change_monitoring_ref": null, + "post_incident_readback_accepted": false, + "post_incident_readback_candidate_id": "monitoring_post_incident_readback:sentry_self_hosted_deploy", + "post_incident_readback_received": false, + "postcheck_readback_accepted": false, + "postcheck_readback_ref": null, + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "readback_fields": [ + "post_incident_readback_candidate_id", + "source_acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "receiver_receipt_readback_accepted": false, + "receiver_receipt_readback_ref": null, + "receiver_route_change_authorized": false, + "receiver_route_state_accepted": false, + "receiver_route_state_ref": null, + "recurrence_guard_accepted": false, + "recurrence_guard_ref": null, + "reload_or_no_reload_accepted": false, + "reload_or_no_reload_ref": null, + "remote_write_change_authorized": false, + "repo_sha256": "b3dfb577c398a12d8f0521b159d18413257850eed7220234fcc491ff9aee9c7a", + "repo_source_path": "ops/sentry-self-hosted/deploy.sh", + "request_id": "monitoring_owner_request:sentry_self_hosted_deploy", + "required_readback_fields": [ + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "followup_owner", + "redacted_evidence_refs", + "no_secret_value_attestation", + "no_raw_payload_attestation", + "no_false_green_attestation", + "receipt_not_route_only_attestation", + "independent_postcheck_attestation", + "noise_budget_or_silence_owner_attestation" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "source_owner_response_acceptance_current", + "incident_or_change_ref_present", + "actor_attribution_present", + "change_or_outage_time_window_present", + "intent_or_break_glass_present", + "before_after_alert_state_present", + "rule_datasource_scrape_state_present", + "receiver_route_state_present", + "reload_or_no_reload_called_out", + "receiver_receipt_readback_present", + "stale_pending_resolved_review_present", + "silence_mute_dedup_inhibit_review_present", + "dashboard_trace_log_freshness_present", + "notification_delivery_metadata_present", + "alert_chain_health_not_route_only", + "cross_project_sync_present", + "rollback_or_disable_validation_present", + "post_change_monitoring_present", + "postcheck_independent", + "recurrence_guard_present", + "maintenance_window_present", + "noise_budget_owner_present", + "redacted_refs_only", + "secret_value_absent", + "raw_payload_absent", + "no_false_green", + "runtime_stays_zero", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_post_incident_readback", + "rollback_or_disable_validation_accepted": false, + "rollback_or_disable_validation_ref": null, + "rollback_owner": "pending_post_incident_readback", + "rule_datasource_scrape_state_accepted": false, + "rule_datasource_scrape_state_ref": null, + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_mute_dedup_inhibit_review_accepted": false, + "silence_mute_dedup_inhibit_review_ref": null, + "silence_policy_change_authorized": false, + "source_acceptance_candidate_id": "monitoring_owner_response_acceptance:sentry_self_hosted_deploy", + "source_line_count": 65, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "stale_pending_resolved_review_accepted": false, + "stale_pending_resolved_review_ref": null, + "status": "waiting_post_incident_readback", + "surface_id": "sentry_self_hosted_deploy", + "telegram_send_authorized": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": true + }, + { + "action_buttons_allowed": false, + "active_scan_authorized": false, + "actor_attribution_accepted": false, + "actor_attribution_ref": null, + "after_alert_state_ref": null, + "alert_chain_health_readback_accepted": false, + "alert_chain_health_readback_ref": null, + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "before_after_alert_state_accepted": false, + "before_alert_state_ref": null, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", + "add_action_button", + "store_raw_live_config", + "store_full_receiver_payload", + "collect_bot_token", + "collect_dsn_secret", + "collect_webhook_secret", + "change_alert_rule", + "change_scrape_config", + "change_dashboard", + "change_notification_policy", + "change_silence", + "change_inhibit_rule", + "accept_dashboard_up_as_alert_chain_healthy", + "skip_receiver_receipt", + "skip_stale_review", + "skip_silence_review", + "skip_rollback_validation", + "skip_post_change_monitoring", + "skip_cross_project_sync", + "live_receiver_probe" + ], + "change_intent_or_break_glass_ref": null, + "change_or_outage_time_window_accepted": false, + "change_or_outage_time_window_ref": null, + "config_kind": "langfuse_runtime_compose", + "control_tier": "C1", + "cross_project_sync_accepted": false, + "cross_project_sync_ref": null, + "dashboard_trace_log_freshness_accepted": false, + "dashboard_trace_log_freshness_ref": null, + "expected_scope": "langfuse_observability_runtime", + "exporter_deploy_authorized": false, + "followup_owner": "pending_post_incident_readback", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "intent_or_break_glass_accepted": false, + "kubectl_action_authorized": false, + "label": "Langfuse compose", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "maintenance_window": "pending_post_incident_readback", + "monitoring_incident_or_change_ref": null, + "no_false_green_accepted": false, + "not_approval": true, + "notification_delivery_metadata_accepted": false, + "notification_delivery_metadata_ref": null, + "notification_route_change_authorized": false, + "observability_scope": [ + "Langfuse", + "LLM trace storage", + "PostgreSQL dependency" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_post_incident_readback", + "request_actor_or_time_supplement", + "request_alert_state_supplement", + "request_receiver_receipt_supplement", + "request_stale_silence_supplement", + "request_freshness_or_alert_chain_supplement", + "quarantine_raw_payload", + "reject_false_green_claim", + "ready_for_monitoring_post_incident_review", + "recurrence_guard_backfill_required", + "waiting_runtime_gate" + ], + "post_change_monitoring_accepted": false, + "post_change_monitoring_ref": null, + "post_incident_readback_accepted": false, + "post_incident_readback_candidate_id": "monitoring_post_incident_readback:langfuse_compose", + "post_incident_readback_received": false, + "postcheck_readback_accepted": false, + "postcheck_readback_ref": null, + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "readback_fields": [ + "post_incident_readback_candidate_id", + "source_acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "receiver_receipt_readback_accepted": false, + "receiver_receipt_readback_ref": null, + "receiver_route_change_authorized": false, + "receiver_route_state_accepted": false, + "receiver_route_state_ref": null, + "recurrence_guard_accepted": false, + "recurrence_guard_ref": null, + "reload_or_no_reload_accepted": false, + "reload_or_no_reload_ref": null, + "remote_write_change_authorized": false, + "repo_sha256": "6c703a27525e62ef4d4d3c4cba8a89d64f646b01020782e35d22a3bf73f2dc83", + "repo_source_path": "infra/langfuse/docker-compose.yml", + "request_id": "monitoring_owner_request:langfuse_compose", + "required_readback_fields": [ + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "followup_owner", + "redacted_evidence_refs", + "no_secret_value_attestation", + "no_raw_payload_attestation", + "no_false_green_attestation", + "receipt_not_route_only_attestation", + "independent_postcheck_attestation", + "noise_budget_or_silence_owner_attestation" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "source_owner_response_acceptance_current", + "incident_or_change_ref_present", + "actor_attribution_present", + "change_or_outage_time_window_present", + "intent_or_break_glass_present", + "before_after_alert_state_present", + "rule_datasource_scrape_state_present", + "receiver_route_state_present", + "reload_or_no_reload_called_out", + "receiver_receipt_readback_present", + "stale_pending_resolved_review_present", + "silence_mute_dedup_inhibit_review_present", + "dashboard_trace_log_freshness_present", + "notification_delivery_metadata_present", + "alert_chain_health_not_route_only", + "cross_project_sync_present", + "rollback_or_disable_validation_present", + "post_change_monitoring_present", + "postcheck_independent", + "recurrence_guard_present", + "maintenance_window_present", + "noise_budget_owner_present", + "redacted_refs_only", + "secret_value_absent", + "raw_payload_absent", + "no_false_green", + "runtime_stays_zero", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_post_incident_readback", + "rollback_or_disable_validation_accepted": false, + "rollback_or_disable_validation_ref": null, + "rollback_owner": "pending_post_incident_readback", + "rule_datasource_scrape_state_accepted": false, + "rule_datasource_scrape_state_ref": null, + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_mute_dedup_inhibit_review_accepted": false, + "silence_mute_dedup_inhibit_review_ref": null, + "silence_policy_change_authorized": false, + "source_acceptance_candidate_id": "monitoring_owner_response_acceptance:langfuse_compose", + "source_line_count": 71, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "stale_pending_resolved_review_accepted": false, + "stale_pending_resolved_review_ref": null, + "status": "waiting_post_incident_readback", + "surface_id": "langfuse_compose", + "telegram_send_authorized": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "action_buttons_allowed": false, + "active_scan_authorized": false, + "actor_attribution_accepted": false, + "actor_attribution_ref": null, + "after_alert_state_ref": null, + "alert_chain_health_readback_accepted": false, + "alert_chain_health_readback_ref": null, + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "before_after_alert_state_accepted": false, + "before_alert_state_ref": null, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", + "add_action_button", + "store_raw_live_config", + "store_full_receiver_payload", + "collect_bot_token", + "collect_dsn_secret", + "collect_webhook_secret", + "change_alert_rule", + "change_scrape_config", + "change_dashboard", + "change_notification_policy", + "change_silence", + "change_inhibit_rule", + "accept_dashboard_up_as_alert_chain_healthy", + "skip_receiver_receipt", + "skip_stale_review", + "skip_silence_review", + "skip_rollback_validation", + "skip_post_change_monitoring", + "skip_cross_project_sync", + "live_receiver_probe" + ], + "change_intent_or_break_glass_ref": null, + "change_or_outage_time_window_accepted": false, + "change_or_outage_time_window_ref": null, + "config_kind": "langfuse_runbook", + "control_tier": "C1", + "cross_project_sync_accepted": false, + "cross_project_sync_ref": null, + "dashboard_trace_log_freshness_accepted": false, + "dashboard_trace_log_freshness_ref": null, + "expected_scope": "langfuse_observability_runbook", + "exporter_deploy_authorized": false, + "followup_owner": "pending_post_incident_readback", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "intent_or_break_glass_accepted": false, + "kubectl_action_authorized": false, + "label": "Langfuse deployment README", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "maintenance_window": "pending_post_incident_readback", + "monitoring_incident_or_change_ref": null, + "no_false_green_accepted": false, + "not_approval": true, + "notification_delivery_metadata_accepted": false, + "notification_delivery_metadata_ref": null, + "notification_route_change_authorized": false, + "observability_scope": [ + "Langfuse deployment", + "trace governance" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_post_incident_readback", + "request_actor_or_time_supplement", + "request_alert_state_supplement", + "request_receiver_receipt_supplement", + "request_stale_silence_supplement", + "request_freshness_or_alert_chain_supplement", + "quarantine_raw_payload", + "reject_false_green_claim", + "ready_for_monitoring_post_incident_review", + "recurrence_guard_backfill_required", + "waiting_runtime_gate" + ], + "post_change_monitoring_accepted": false, + "post_change_monitoring_ref": null, + "post_incident_readback_accepted": false, + "post_incident_readback_candidate_id": "monitoring_post_incident_readback:langfuse_readme", + "post_incident_readback_received": false, + "postcheck_readback_accepted": false, + "postcheck_readback_ref": null, + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "readback_fields": [ + "post_incident_readback_candidate_id", + "source_acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "receiver_receipt_readback_accepted": false, + "receiver_receipt_readback_ref": null, + "receiver_route_change_authorized": false, + "receiver_route_state_accepted": false, + "receiver_route_state_ref": null, + "recurrence_guard_accepted": false, + "recurrence_guard_ref": null, + "reload_or_no_reload_accepted": false, + "reload_or_no_reload_ref": null, + "remote_write_change_authorized": false, + "repo_sha256": "7441665bfd3ce69e643364c7e792c837641bd36ff05d1aec44f15a7be62082e1", + "repo_source_path": "infra/langfuse/README.md", + "request_id": "monitoring_owner_request:langfuse_readme", + "required_readback_fields": [ + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "followup_owner", + "redacted_evidence_refs", + "no_secret_value_attestation", + "no_raw_payload_attestation", + "no_false_green_attestation", + "receipt_not_route_only_attestation", + "independent_postcheck_attestation", + "noise_budget_or_silence_owner_attestation" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "source_owner_response_acceptance_current", + "incident_or_change_ref_present", + "actor_attribution_present", + "change_or_outage_time_window_present", + "intent_or_break_glass_present", + "before_after_alert_state_present", + "rule_datasource_scrape_state_present", + "receiver_route_state_present", + "reload_or_no_reload_called_out", + "receiver_receipt_readback_present", + "stale_pending_resolved_review_present", + "silence_mute_dedup_inhibit_review_present", + "dashboard_trace_log_freshness_present", + "notification_delivery_metadata_present", + "alert_chain_health_not_route_only", + "cross_project_sync_present", + "rollback_or_disable_validation_present", + "post_change_monitoring_present", + "postcheck_independent", + "recurrence_guard_present", + "maintenance_window_present", + "noise_budget_owner_present", + "redacted_refs_only", + "secret_value_absent", + "raw_payload_absent", + "no_false_green", + "runtime_stays_zero", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_post_incident_readback", + "rollback_or_disable_validation_accepted": false, + "rollback_or_disable_validation_ref": null, + "rollback_owner": "pending_post_incident_readback", + "rule_datasource_scrape_state_accepted": false, + "rule_datasource_scrape_state_ref": null, + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_mute_dedup_inhibit_review_accepted": false, + "silence_mute_dedup_inhibit_review_ref": null, + "silence_policy_change_authorized": false, + "source_acceptance_candidate_id": "monitoring_owner_response_acceptance:langfuse_readme", + "source_line_count": 69, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "stale_pending_resolved_review_accepted": false, + "stale_pending_resolved_review_ref": null, + "status": "waiting_post_incident_readback", + "surface_id": "langfuse_readme", + "telegram_send_authorized": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "action_buttons_allowed": false, + "active_scan_authorized": false, + "actor_attribution_accepted": false, + "actor_attribution_ref": null, + "after_alert_state_ref": null, + "alert_chain_health_readback_accepted": false, + "alert_chain_health_readback_ref": null, + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "before_after_alert_state_accepted": false, + "before_alert_state_ref": null, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", + "add_action_button", + "store_raw_live_config", + "store_full_receiver_payload", + "collect_bot_token", + "collect_dsn_secret", + "collect_webhook_secret", + "change_alert_rule", + "change_scrape_config", + "change_dashboard", + "change_notification_policy", + "change_silence", + "change_inhibit_rule", + "accept_dashboard_up_as_alert_chain_healthy", + "skip_receiver_receipt", + "skip_stale_review", + "skip_silence_review", + "skip_rollback_validation", + "skip_post_change_monitoring", + "skip_cross_project_sync", + "live_receiver_probe" + ], + "change_intent_or_break_glass_ref": null, + "change_or_outage_time_window_accepted": false, + "change_or_outage_time_window_ref": null, + "config_kind": "notification_policy_snapshot", + "control_tier": "C1", + "cross_project_sync_accepted": false, + "cross_project_sync_ref": null, + "dashboard_trace_log_freshness_accepted": false, + "dashboard_trace_log_freshness_ref": null, + "expected_scope": "service_health_failure_notification_policy", + "exporter_deploy_authorized": false, + "followup_owner": "pending_post_incident_readback", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "intent_or_break_glass_accepted": false, + "kubectl_action_authorized": false, + "label": "Service health failure notification policy", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "maintenance_window": "pending_post_incident_readback", + "monitoring_incident_or_change_ref": null, + "no_false_green_accepted": false, + "not_approval": true, + "notification_delivery_metadata_accepted": false, + "notification_delivery_metadata_ref": null, + "notification_route_change_authorized": false, + "observability_scope": [ + "failure-only notification", + "redaction contract" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_post_incident_readback", + "request_actor_or_time_supplement", + "request_alert_state_supplement", + "request_receiver_receipt_supplement", + "request_stale_silence_supplement", + "request_freshness_or_alert_chain_supplement", + "quarantine_raw_payload", + "reject_false_green_claim", + "ready_for_monitoring_post_incident_review", + "recurrence_guard_backfill_required", + "waiting_runtime_gate" + ], + "post_change_monitoring_accepted": false, + "post_change_monitoring_ref": null, + "post_incident_readback_accepted": false, + "post_incident_readback_candidate_id": "monitoring_post_incident_readback:service_health_failure_policy_snapshot", + "post_incident_readback_received": false, + "postcheck_readback_accepted": false, + "postcheck_readback_ref": null, + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "readback_fields": [ + "post_incident_readback_candidate_id", + "source_acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "receiver_receipt_readback_accepted": false, + "receiver_receipt_readback_ref": null, + "receiver_route_change_authorized": false, + "receiver_route_state_accepted": false, + "receiver_route_state_ref": null, + "recurrence_guard_accepted": false, + "recurrence_guard_ref": null, + "reload_or_no_reload_accepted": false, + "reload_or_no_reload_ref": null, + "remote_write_change_authorized": false, + "repo_sha256": "210a35e3e122d4311d5d25585c0d88b46206da87baa39a3f712fba291fea6ea3", + "repo_source_path": "docs/evaluations/service_health_failure_notification_policy_2026-06-05.json", + "request_id": "monitoring_owner_request:service_health_failure_policy_snapshot", + "required_readback_fields": [ + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "followup_owner", + "redacted_evidence_refs", + "no_secret_value_attestation", + "no_raw_payload_attestation", + "no_false_green_attestation", + "receipt_not_route_only_attestation", + "independent_postcheck_attestation", + "noise_budget_or_silence_owner_attestation" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "source_owner_response_acceptance_current", + "incident_or_change_ref_present", + "actor_attribution_present", + "change_or_outage_time_window_present", + "intent_or_break_glass_present", + "before_after_alert_state_present", + "rule_datasource_scrape_state_present", + "receiver_route_state_present", + "reload_or_no_reload_called_out", + "receiver_receipt_readback_present", + "stale_pending_resolved_review_present", + "silence_mute_dedup_inhibit_review_present", + "dashboard_trace_log_freshness_present", + "notification_delivery_metadata_present", + "alert_chain_health_not_route_only", + "cross_project_sync_present", + "rollback_or_disable_validation_present", + "post_change_monitoring_present", + "postcheck_independent", + "recurrence_guard_present", + "maintenance_window_present", + "noise_budget_owner_present", + "redacted_refs_only", + "secret_value_absent", + "raw_payload_absent", + "no_false_green", + "runtime_stays_zero", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_post_incident_readback", + "rollback_or_disable_validation_accepted": false, + "rollback_or_disable_validation_ref": null, + "rollback_owner": "pending_post_incident_readback", + "rule_datasource_scrape_state_accepted": false, + "rule_datasource_scrape_state_ref": null, + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_mute_dedup_inhibit_review_accepted": false, + "silence_mute_dedup_inhibit_review_ref": null, + "silence_policy_change_authorized": false, + "source_acceptance_candidate_id": "monitoring_owner_response_acceptance:service_health_failure_policy_snapshot", + "source_line_count": 303, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "stale_pending_resolved_review_accepted": false, + "stale_pending_resolved_review_ref": null, + "status": "waiting_post_incident_readback", + "surface_id": "service_health_failure_policy_snapshot", + "telegram_send_authorized": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "action_buttons_allowed": false, + "active_scan_authorized": false, + "actor_attribution_accepted": false, + "actor_attribution_ref": null, + "after_alert_state_ref": null, + "alert_chain_health_readback_accepted": false, + "alert_chain_health_readback_ref": null, + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "before_after_alert_state_accepted": false, + "before_alert_state_ref": null, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", + "add_action_button", + "store_raw_live_config", + "store_full_receiver_payload", + "collect_bot_token", + "collect_dsn_secret", + "collect_webhook_secret", + "change_alert_rule", + "change_scrape_config", + "change_dashboard", + "change_notification_policy", + "change_silence", + "change_inhibit_rule", + "accept_dashboard_up_as_alert_chain_healthy", + "skip_receiver_receipt", + "skip_stale_review", + "skip_silence_review", + "skip_rollback_validation", + "skip_post_change_monitoring", + "skip_cross_project_sync", + "live_receiver_probe" + ], + "change_intent_or_break_glass_ref": null, + "change_or_outage_time_window_accepted": false, + "change_or_outage_time_window_ref": null, + "config_kind": "notification_policy_snapshot", + "control_tier": "C1", + "cross_project_sync_accepted": false, + "cross_project_sync_ref": null, + "dashboard_trace_log_freshness_accepted": false, + "dashboard_trace_log_freshness_ref": null, + "expected_scope": "backup_notification_policy", + "exporter_deploy_authorized": false, + "followup_owner": "pending_post_incident_readback", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "intent_or_break_glass_accepted": false, + "kubectl_action_authorized": false, + "label": "Backup notification policy", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "maintenance_window": "pending_post_incident_readback", + "monitoring_incident_or_change_ref": null, + "no_false_green_accepted": false, + "not_approval": true, + "notification_delivery_metadata_accepted": false, + "notification_delivery_metadata_ref": null, + "notification_route_change_authorized": false, + "observability_scope": [ + "backup failure notification", + "restore / offsite alerting" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_post_incident_readback", + "request_actor_or_time_supplement", + "request_alert_state_supplement", + "request_receiver_receipt_supplement", + "request_stale_silence_supplement", + "request_freshness_or_alert_chain_supplement", + "quarantine_raw_payload", + "reject_false_green_claim", + "ready_for_monitoring_post_incident_review", + "recurrence_guard_backfill_required", + "waiting_runtime_gate" + ], + "post_change_monitoring_accepted": false, + "post_change_monitoring_ref": null, + "post_incident_readback_accepted": false, + "post_incident_readback_candidate_id": "monitoring_post_incident_readback:backup_notification_policy_snapshot", + "post_incident_readback_received": false, + "postcheck_readback_accepted": false, + "postcheck_readback_ref": null, + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "readback_fields": [ + "post_incident_readback_candidate_id", + "source_acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "receiver_receipt_readback_accepted": false, + "receiver_receipt_readback_ref": null, + "receiver_route_change_authorized": false, + "receiver_route_state_accepted": false, + "receiver_route_state_ref": null, + "recurrence_guard_accepted": false, + "recurrence_guard_ref": null, + "reload_or_no_reload_accepted": false, + "reload_or_no_reload_ref": null, + "remote_write_change_authorized": false, + "repo_sha256": "0b282dc88bbe140871d9e232de5ebce97168b1a38b16e46b2e90c62fea6d6c8d", + "repo_source_path": "docs/evaluations/backup_notification_policy_2026-06-04.json", + "request_id": "monitoring_owner_request:backup_notification_policy_snapshot", + "required_readback_fields": [ + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "followup_owner", + "redacted_evidence_refs", + "no_secret_value_attestation", + "no_raw_payload_attestation", + "no_false_green_attestation", + "receipt_not_route_only_attestation", + "independent_postcheck_attestation", + "noise_budget_or_silence_owner_attestation" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "source_owner_response_acceptance_current", + "incident_or_change_ref_present", + "actor_attribution_present", + "change_or_outage_time_window_present", + "intent_or_break_glass_present", + "before_after_alert_state_present", + "rule_datasource_scrape_state_present", + "receiver_route_state_present", + "reload_or_no_reload_called_out", + "receiver_receipt_readback_present", + "stale_pending_resolved_review_present", + "silence_mute_dedup_inhibit_review_present", + "dashboard_trace_log_freshness_present", + "notification_delivery_metadata_present", + "alert_chain_health_not_route_only", + "cross_project_sync_present", + "rollback_or_disable_validation_present", + "post_change_monitoring_present", + "postcheck_independent", + "recurrence_guard_present", + "maintenance_window_present", + "noise_budget_owner_present", + "redacted_refs_only", + "secret_value_absent", + "raw_payload_absent", + "no_false_green", + "runtime_stays_zero", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_post_incident_readback", + "rollback_or_disable_validation_accepted": false, + "rollback_or_disable_validation_ref": null, + "rollback_owner": "pending_post_incident_readback", + "rule_datasource_scrape_state_accepted": false, + "rule_datasource_scrape_state_ref": null, + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_mute_dedup_inhibit_review_accepted": false, + "silence_mute_dedup_inhibit_review_ref": null, + "silence_policy_change_authorized": false, + "source_acceptance_candidate_id": "monitoring_owner_response_acceptance:backup_notification_policy_snapshot", + "source_line_count": 276, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "stale_pending_resolved_review_accepted": false, + "stale_pending_resolved_review_ref": null, + "status": "waiting_post_incident_readback", + "surface_id": "backup_notification_policy_snapshot", + "telegram_send_authorized": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "action_buttons_allowed": false, + "active_scan_authorized": false, + "actor_attribution_accepted": false, + "actor_attribution_ref": null, + "after_alert_state_ref": null, + "alert_chain_health_readback_accepted": false, + "alert_chain_health_readback_ref": null, + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "before_after_alert_state_accepted": false, + "before_alert_state_ref": null, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", + "add_action_button", + "store_raw_live_config", + "store_full_receiver_payload", + "collect_bot_token", + "collect_dsn_secret", + "collect_webhook_secret", + "change_alert_rule", + "change_scrape_config", + "change_dashboard", + "change_notification_policy", + "change_silence", + "change_inhibit_rule", + "accept_dashboard_up_as_alert_chain_healthy", + "skip_receiver_receipt", + "skip_stale_review", + "skip_silence_review", + "skip_rollback_validation", + "skip_post_change_monitoring", + "skip_cross_project_sync", + "live_receiver_probe" + ], + "change_intent_or_break_glass_ref": null, + "change_or_outage_time_window_accepted": false, + "change_or_outage_time_window_ref": null, + "config_kind": "observability_contract_snapshot", + "control_tier": "C1", + "cross_project_sync_accepted": false, + "cross_project_sync_ref": null, + "dashboard_trace_log_freshness_accepted": false, + "dashboard_trace_log_freshness_ref": null, + "expected_scope": "observability_contract_matrix", + "exporter_deploy_authorized": false, + "followup_owner": "pending_post_incident_readback", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "intent_or_break_glass_accepted": false, + "kubectl_action_authorized": false, + "label": "Observability contract matrix", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "maintenance_window": "pending_post_incident_readback", + "monitoring_incident_or_change_ref": null, + "no_false_green_accepted": false, + "not_approval": true, + "notification_delivery_metadata_accepted": false, + "notification_delivery_metadata_ref": null, + "notification_route_change_authorized": false, + "observability_scope": [ + "observability contract", + "source coverage", + "runtime evidence" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_post_incident_readback", + "request_actor_or_time_supplement", + "request_alert_state_supplement", + "request_receiver_receipt_supplement", + "request_stale_silence_supplement", + "request_freshness_or_alert_chain_supplement", + "quarantine_raw_payload", + "reject_false_green_claim", + "ready_for_monitoring_post_incident_review", + "recurrence_guard_backfill_required", + "waiting_runtime_gate" + ], + "post_change_monitoring_accepted": false, + "post_change_monitoring_ref": null, + "post_incident_readback_accepted": false, + "post_incident_readback_candidate_id": "monitoring_post_incident_readback:observability_contract_matrix_snapshot", + "post_incident_readback_received": false, + "postcheck_readback_accepted": false, + "postcheck_readback_ref": null, + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "readback_fields": [ + "post_incident_readback_candidate_id", + "source_acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "receiver_receipt_readback_accepted": false, + "receiver_receipt_readback_ref": null, + "receiver_route_change_authorized": false, + "receiver_route_state_accepted": false, + "receiver_route_state_ref": null, + "recurrence_guard_accepted": false, + "recurrence_guard_ref": null, + "reload_or_no_reload_accepted": false, + "reload_or_no_reload_ref": null, + "remote_write_change_authorized": false, + "repo_sha256": "b274f086080a4ac8d6e1786fa8d44a585ce92aadb1f6608dfb891cef7b1f05a1", + "repo_source_path": "docs/evaluations/observability_contract_matrix_2026-06-05.json", + "request_id": "monitoring_owner_request:observability_contract_matrix_snapshot", + "required_readback_fields": [ + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "followup_owner", + "redacted_evidence_refs", + "no_secret_value_attestation", + "no_raw_payload_attestation", + "no_false_green_attestation", + "receipt_not_route_only_attestation", + "independent_postcheck_attestation", + "noise_budget_or_silence_owner_attestation" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "source_owner_response_acceptance_current", + "incident_or_change_ref_present", + "actor_attribution_present", + "change_or_outage_time_window_present", + "intent_or_break_glass_present", + "before_after_alert_state_present", + "rule_datasource_scrape_state_present", + "receiver_route_state_present", + "reload_or_no_reload_called_out", + "receiver_receipt_readback_present", + "stale_pending_resolved_review_present", + "silence_mute_dedup_inhibit_review_present", + "dashboard_trace_log_freshness_present", + "notification_delivery_metadata_present", + "alert_chain_health_not_route_only", + "cross_project_sync_present", + "rollback_or_disable_validation_present", + "post_change_monitoring_present", + "postcheck_independent", + "recurrence_guard_present", + "maintenance_window_present", + "noise_budget_owner_present", + "redacted_refs_only", + "secret_value_absent", + "raw_payload_absent", + "no_false_green", + "runtime_stays_zero", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_post_incident_readback", + "rollback_or_disable_validation_accepted": false, + "rollback_or_disable_validation_ref": null, + "rollback_owner": "pending_post_incident_readback", + "rule_datasource_scrape_state_accepted": false, + "rule_datasource_scrape_state_ref": null, + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_mute_dedup_inhibit_review_accepted": false, + "silence_mute_dedup_inhibit_review_ref": null, + "silence_policy_change_authorized": false, + "source_acceptance_candidate_id": "monitoring_owner_response_acceptance:observability_contract_matrix_snapshot", + "source_line_count": 391, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "stale_pending_resolved_review_accepted": false, + "stale_pending_resolved_review_ref": null, + "status": "waiting_post_incident_readback", + "surface_id": "observability_contract_matrix_snapshot", + "telegram_send_authorized": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "action_buttons_allowed": false, + "active_scan_authorized": false, + "actor_attribution_accepted": false, + "actor_attribution_ref": null, + "after_alert_state_ref": null, + "alert_chain_health_readback_accepted": false, + "alert_chain_health_readback_ref": null, + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "before_after_alert_state_accepted": false, + "before_alert_state_ref": null, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", + "add_action_button", + "store_raw_live_config", + "store_full_receiver_payload", + "collect_bot_token", + "collect_dsn_secret", + "collect_webhook_secret", + "change_alert_rule", + "change_scrape_config", + "change_dashboard", + "change_notification_policy", + "change_silence", + "change_inhibit_rule", + "accept_dashboard_up_as_alert_chain_healthy", + "skip_receiver_receipt", + "skip_stale_review", + "skip_silence_review", + "skip_rollback_validation", + "skip_post_change_monitoring", + "skip_cross_project_sync", + "live_receiver_probe" + ], + "change_intent_or_break_glass_ref": null, + "change_or_outage_time_window_accepted": false, + "change_or_outage_time_window_ref": null, + "config_kind": "telegram_policy_snapshot", + "control_tier": "C1", + "cross_project_sync_accepted": false, + "cross_project_sync_ref": null, + "dashboard_trace_log_freshness_accepted": false, + "dashboard_trace_log_freshness_ref": null, + "expected_scope": "ai_agent_telegram_digest_policy", + "exporter_deploy_authorized": false, + "followup_owner": "pending_post_incident_readback", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "intent_or_break_glass_accepted": false, + "kubectl_action_authorized": false, + "label": "Telegram action required digest policy", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "maintenance_window": "pending_post_incident_readback", + "monitoring_incident_or_change_ref": null, + "no_false_green_accepted": false, + "not_approval": true, + "notification_delivery_metadata_accepted": false, + "notification_delivery_metadata_ref": null, + "notification_route_change_authorized": false, + "observability_scope": [ + "Telegram digest", + "action required routing" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_post_incident_readback", + "request_actor_or_time_supplement", + "request_alert_state_supplement", + "request_receiver_receipt_supplement", + "request_stale_silence_supplement", + "request_freshness_or_alert_chain_supplement", + "quarantine_raw_payload", + "reject_false_green_claim", + "ready_for_monitoring_post_incident_review", + "recurrence_guard_backfill_required", + "waiting_runtime_gate" + ], + "post_change_monitoring_accepted": false, + "post_change_monitoring_ref": null, + "post_incident_readback_accepted": false, + "post_incident_readback_candidate_id": "monitoring_post_incident_readback:telegram_action_required_digest_snapshot", + "post_incident_readback_received": false, + "postcheck_readback_accepted": false, + "postcheck_readback_ref": null, + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "readback_fields": [ + "post_incident_readback_candidate_id", + "source_acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "receiver_receipt_readback_accepted": false, + "receiver_receipt_readback_ref": null, + "receiver_route_change_authorized": false, + "receiver_route_state_accepted": false, + "receiver_route_state_ref": null, + "recurrence_guard_accepted": false, + "recurrence_guard_ref": null, + "reload_or_no_reload_accepted": false, + "reload_or_no_reload_ref": null, + "remote_write_change_authorized": false, + "repo_sha256": "2f8d00a8d697720e3198678dbaecca9fc618aa7957a348d89fd1bce250be842e", + "repo_source_path": "docs/evaluations/ai_agent_telegram_action_required_digest_policy_2026-06-11.json", + "request_id": "monitoring_owner_request:telegram_action_required_digest_snapshot", + "required_readback_fields": [ + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "followup_owner", + "redacted_evidence_refs", + "no_secret_value_attestation", + "no_raw_payload_attestation", + "no_false_green_attestation", + "receipt_not_route_only_attestation", + "independent_postcheck_attestation", + "noise_budget_or_silence_owner_attestation" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "source_owner_response_acceptance_current", + "incident_or_change_ref_present", + "actor_attribution_present", + "change_or_outage_time_window_present", + "intent_or_break_glass_present", + "before_after_alert_state_present", + "rule_datasource_scrape_state_present", + "receiver_route_state_present", + "reload_or_no_reload_called_out", + "receiver_receipt_readback_present", + "stale_pending_resolved_review_present", + "silence_mute_dedup_inhibit_review_present", + "dashboard_trace_log_freshness_present", + "notification_delivery_metadata_present", + "alert_chain_health_not_route_only", + "cross_project_sync_present", + "rollback_or_disable_validation_present", + "post_change_monitoring_present", + "postcheck_independent", + "recurrence_guard_present", + "maintenance_window_present", + "noise_budget_owner_present", + "redacted_refs_only", + "secret_value_absent", + "raw_payload_absent", + "no_false_green", + "runtime_stays_zero", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_post_incident_readback", + "rollback_or_disable_validation_accepted": false, + "rollback_or_disable_validation_ref": null, + "rollback_owner": "pending_post_incident_readback", + "rule_datasource_scrape_state_accepted": false, + "rule_datasource_scrape_state_ref": null, + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_mute_dedup_inhibit_review_accepted": false, + "silence_mute_dedup_inhibit_review_ref": null, + "silence_policy_change_authorized": false, + "source_acceptance_candidate_id": "monitoring_owner_response_acceptance:telegram_action_required_digest_snapshot", + "source_line_count": 405, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "stale_pending_resolved_review_accepted": false, + "stale_pending_resolved_review_ref": null, + "status": "waiting_post_incident_readback", + "surface_id": "telegram_action_required_digest_snapshot", + "telegram_send_authorized": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "action_buttons_allowed": false, + "active_scan_authorized": false, + "actor_attribution_accepted": false, + "actor_attribution_ref": null, + "after_alert_state_ref": null, + "alert_chain_health_readback_accepted": false, + "alert_chain_health_readback_ref": null, + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "before_after_alert_state_accepted": false, + "before_alert_state_ref": null, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", + "add_action_button", + "store_raw_live_config", + "store_full_receiver_payload", + "collect_bot_token", + "collect_dsn_secret", + "collect_webhook_secret", + "change_alert_rule", + "change_scrape_config", + "change_dashboard", + "change_notification_policy", + "change_silence", + "change_inhibit_rule", + "accept_dashboard_up_as_alert_chain_healthy", + "skip_receiver_receipt", + "skip_stale_review", + "skip_silence_review", + "skip_rollback_validation", + "skip_post_change_monitoring", + "skip_cross_project_sync", + "live_receiver_probe" + ], + "change_intent_or_break_glass_ref": null, + "change_or_outage_time_window_accepted": false, + "change_or_outage_time_window_ref": null, + "config_kind": "telegram_policy_snapshot", + "control_tier": "C1", + "cross_project_sync_accepted": false, + "cross_project_sync_ref": null, + "dashboard_trace_log_freshness_accepted": false, + "dashboard_trace_log_freshness_ref": null, + "expected_scope": "ai_agent_telegram_receipt_policy", + "exporter_deploy_authorized": false, + "followup_owner": "pending_post_incident_readback", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "intent_or_break_glass_accepted": false, + "kubectl_action_authorized": false, + "label": "Telegram receipt approval package", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "maintenance_window": "pending_post_incident_readback", + "monitoring_incident_or_change_ref": null, + "no_false_green_accepted": false, + "not_approval": true, + "notification_delivery_metadata_accepted": false, + "notification_delivery_metadata_ref": null, + "notification_route_change_authorized": false, + "observability_scope": [ + "delivery receipt", + "ack / retry policy" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_post_incident_readback", + "request_actor_or_time_supplement", + "request_alert_state_supplement", + "request_receiver_receipt_supplement", + "request_stale_silence_supplement", + "request_freshness_or_alert_chain_supplement", + "quarantine_raw_payload", + "reject_false_green_claim", + "ready_for_monitoring_post_incident_review", + "recurrence_guard_backfill_required", + "waiting_runtime_gate" + ], + "post_change_monitoring_accepted": false, + "post_change_monitoring_ref": null, + "post_incident_readback_accepted": false, + "post_incident_readback_candidate_id": "monitoring_post_incident_readback:telegram_receipt_approval_snapshot", + "post_incident_readback_received": false, + "postcheck_readback_accepted": false, + "postcheck_readback_ref": null, + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "readback_fields": [ + "post_incident_readback_candidate_id", + "source_acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "receiver_receipt_readback_accepted": false, + "receiver_receipt_readback_ref": null, + "receiver_route_change_authorized": false, + "receiver_route_state_accepted": false, + "receiver_route_state_ref": null, + "recurrence_guard_accepted": false, + "recurrence_guard_ref": null, + "reload_or_no_reload_accepted": false, + "reload_or_no_reload_ref": null, + "remote_write_change_authorized": false, + "repo_sha256": "4fcb0f5a9ab809df3ea2ea1e384aa1f9c09544af0a12274029fc52c21c15e857", + "repo_source_path": "docs/evaluations/ai_agent_telegram_receipt_approval_package_2026-06-11.json", + "request_id": "monitoring_owner_request:telegram_receipt_approval_snapshot", + "required_readback_fields": [ + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "followup_owner", + "redacted_evidence_refs", + "no_secret_value_attestation", + "no_raw_payload_attestation", + "no_false_green_attestation", + "receipt_not_route_only_attestation", + "independent_postcheck_attestation", + "noise_budget_or_silence_owner_attestation" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "source_owner_response_acceptance_current", + "incident_or_change_ref_present", + "actor_attribution_present", + "change_or_outage_time_window_present", + "intent_or_break_glass_present", + "before_after_alert_state_present", + "rule_datasource_scrape_state_present", + "receiver_route_state_present", + "reload_or_no_reload_called_out", + "receiver_receipt_readback_present", + "stale_pending_resolved_review_present", + "silence_mute_dedup_inhibit_review_present", + "dashboard_trace_log_freshness_present", + "notification_delivery_metadata_present", + "alert_chain_health_not_route_only", + "cross_project_sync_present", + "rollback_or_disable_validation_present", + "post_change_monitoring_present", + "postcheck_independent", + "recurrence_guard_present", + "maintenance_window_present", + "noise_budget_owner_present", + "redacted_refs_only", + "secret_value_absent", + "raw_payload_absent", + "no_false_green", + "runtime_stays_zero", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_post_incident_readback", + "rollback_or_disable_validation_accepted": false, + "rollback_or_disable_validation_ref": null, + "rollback_owner": "pending_post_incident_readback", + "rule_datasource_scrape_state_accepted": false, + "rule_datasource_scrape_state_ref": null, + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_mute_dedup_inhibit_review_accepted": false, + "silence_mute_dedup_inhibit_review_ref": null, + "silence_policy_change_authorized": false, + "source_acceptance_candidate_id": "monitoring_owner_response_acceptance:telegram_receipt_approval_snapshot", + "source_line_count": 179, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "stale_pending_resolved_review_accepted": false, + "stale_pending_resolved_review_ref": null, + "status": "waiting_post_incident_readback", + "surface_id": "telegram_receipt_approval_snapshot", + "telegram_send_authorized": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "action_buttons_allowed": false, + "active_scan_authorized": false, + "actor_attribution_accepted": false, + "actor_attribution_ref": null, + "after_alert_state_ref": null, + "alert_chain_health_readback_accepted": false, + "alert_chain_health_readback_ref": null, + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "before_after_alert_state_accepted": false, + "before_alert_state_ref": null, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", + "add_action_button", + "store_raw_live_config", + "store_full_receiver_payload", + "collect_bot_token", + "collect_dsn_secret", + "collect_webhook_secret", + "change_alert_rule", + "change_scrape_config", + "change_dashboard", + "change_notification_policy", + "change_silence", + "change_inhibit_rule", + "accept_dashboard_up_as_alert_chain_healthy", + "skip_receiver_receipt", + "skip_stale_review", + "skip_silence_review", + "skip_rollback_validation", + "skip_post_change_monitoring", + "skip_cross_project_sync", + "live_receiver_probe" + ], + "change_intent_or_break_glass_ref": null, + "change_or_outage_time_window_accepted": false, + "change_or_outage_time_window_ref": null, + "config_kind": "telegram_runtime_sender", + "control_tier": "C1", + "cross_project_sync_accepted": false, + "cross_project_sync_ref": null, + "dashboard_trace_log_freshness_accepted": false, + "dashboard_trace_log_freshness_ref": null, + "expected_scope": "telegram_gateway_runtime_sender", + "exporter_deploy_authorized": false, + "followup_owner": "pending_post_incident_readback", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "intent_or_break_glass_accepted": false, + "kubectl_action_authorized": false, + "label": "Telegram gateway service", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "maintenance_window": "pending_post_incident_readback", + "monitoring_incident_or_change_ref": null, + "no_false_green_accepted": false, + "not_approval": true, + "notification_delivery_metadata_accepted": false, + "notification_delivery_metadata_ref": null, + "notification_route_change_authorized": false, + "observability_scope": [ + "Telegram Bot API", + "dedup", + "delivery queue" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_post_incident_readback", + "request_actor_or_time_supplement", + "request_alert_state_supplement", + "request_receiver_receipt_supplement", + "request_stale_silence_supplement", + "request_freshness_or_alert_chain_supplement", + "quarantine_raw_payload", + "reject_false_green_claim", + "ready_for_monitoring_post_incident_review", + "recurrence_guard_backfill_required", + "waiting_runtime_gate" + ], + "post_change_monitoring_accepted": false, + "post_change_monitoring_ref": null, + "post_incident_readback_accepted": false, + "post_incident_readback_candidate_id": "monitoring_post_incident_readback:telegram_gateway_service", + "post_incident_readback_received": false, + "postcheck_readback_accepted": false, + "postcheck_readback_ref": null, + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "readback_fields": [ + "post_incident_readback_candidate_id", + "source_acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "receiver_receipt_readback_accepted": false, + "receiver_receipt_readback_ref": null, + "receiver_route_change_authorized": false, + "receiver_route_state_accepted": false, + "receiver_route_state_ref": null, + "recurrence_guard_accepted": false, + "recurrence_guard_ref": null, + "reload_or_no_reload_accepted": false, + "reload_or_no_reload_ref": null, + "remote_write_change_authorized": false, + "repo_sha256": "bf8727f1fcb8cfbdda0997dbd6e1d5f9298a09d10bebf719a3d3b70a23e3633c", + "repo_source_path": "apps/api/src/services/telegram_gateway.py", + "request_id": "monitoring_owner_request:telegram_gateway_service", + "required_readback_fields": [ + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "followup_owner", + "redacted_evidence_refs", + "no_secret_value_attestation", + "no_raw_payload_attestation", + "no_false_green_attestation", + "receipt_not_route_only_attestation", + "independent_postcheck_attestation", + "noise_budget_or_silence_owner_attestation" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "source_owner_response_acceptance_current", + "incident_or_change_ref_present", + "actor_attribution_present", + "change_or_outage_time_window_present", + "intent_or_break_glass_present", + "before_after_alert_state_present", + "rule_datasource_scrape_state_present", + "receiver_route_state_present", + "reload_or_no_reload_called_out", + "receiver_receipt_readback_present", + "stale_pending_resolved_review_present", + "silence_mute_dedup_inhibit_review_present", + "dashboard_trace_log_freshness_present", + "notification_delivery_metadata_present", + "alert_chain_health_not_route_only", + "cross_project_sync_present", + "rollback_or_disable_validation_present", + "post_change_monitoring_present", + "postcheck_independent", + "recurrence_guard_present", + "maintenance_window_present", + "noise_budget_owner_present", + "redacted_refs_only", + "secret_value_absent", + "raw_payload_absent", + "no_false_green", + "runtime_stays_zero", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_post_incident_readback", + "rollback_or_disable_validation_accepted": false, + "rollback_or_disable_validation_ref": null, + "rollback_owner": "pending_post_incident_readback", + "rule_datasource_scrape_state_accepted": false, + "rule_datasource_scrape_state_ref": null, + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_mute_dedup_inhibit_review_accepted": false, + "silence_mute_dedup_inhibit_review_ref": null, + "silence_policy_change_authorized": false, + "source_acceptance_candidate_id": "monitoring_owner_response_acceptance:telegram_gateway_service", + "source_line_count": 9452, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "stale_pending_resolved_review_accepted": false, + "stale_pending_resolved_review_ref": null, + "status": "waiting_post_incident_readback", + "surface_id": "telegram_gateway_service", + "telegram_send_authorized": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": true + }, + { + "action_buttons_allowed": false, + "active_scan_authorized": false, + "actor_attribution_accepted": false, + "actor_attribution_ref": null, + "after_alert_state_ref": null, + "alert_chain_health_readback_accepted": false, + "alert_chain_health_readback_ref": null, + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "before_after_alert_state_accepted": false, + "before_alert_state_ref": null, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", + "add_action_button", + "store_raw_live_config", + "store_full_receiver_payload", + "collect_bot_token", + "collect_dsn_secret", + "collect_webhook_secret", + "change_alert_rule", + "change_scrape_config", + "change_dashboard", + "change_notification_policy", + "change_silence", + "change_inhibit_rule", + "accept_dashboard_up_as_alert_chain_healthy", + "skip_receiver_receipt", + "skip_stale_review", + "skip_silence_review", + "skip_rollback_validation", + "skip_post_change_monitoring", + "skip_cross_project_sync", + "live_receiver_probe" + ], + "change_intent_or_break_glass_ref": null, + "change_or_outage_time_window_accepted": false, + "change_or_outage_time_window_ref": null, + "config_kind": "notification_runtime_router", + "control_tier": "C1", + "cross_project_sync_accepted": false, + "cross_project_sync_ref": null, + "dashboard_trace_log_freshness_accepted": false, + "dashboard_trace_log_freshness_ref": null, + "expected_scope": "notification_runtime_routing", + "exporter_deploy_authorized": false, + "followup_owner": "pending_post_incident_readback", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "intent_or_break_glass_accepted": false, + "kubectl_action_authorized": false, + "label": "Notification manager", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "maintenance_window": "pending_post_incident_readback", + "monitoring_incident_or_change_ref": null, + "no_false_green_accepted": false, + "not_approval": true, + "notification_delivery_metadata_accepted": false, + "notification_delivery_metadata_ref": null, + "notification_route_change_authorized": false, + "observability_scope": [ + "notification channel routing", + "Telegram / Discord manager" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_post_incident_readback", + "request_actor_or_time_supplement", + "request_alert_state_supplement", + "request_receiver_receipt_supplement", + "request_stale_silence_supplement", + "request_freshness_or_alert_chain_supplement", + "quarantine_raw_payload", + "reject_false_green_claim", + "ready_for_monitoring_post_incident_review", + "recurrence_guard_backfill_required", + "waiting_runtime_gate" + ], + "post_change_monitoring_accepted": false, + "post_change_monitoring_ref": null, + "post_incident_readback_accepted": false, + "post_incident_readback_candidate_id": "monitoring_post_incident_readback:notification_manager_service", + "post_incident_readback_received": false, + "postcheck_readback_accepted": false, + "postcheck_readback_ref": null, + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "readback_fields": [ + "post_incident_readback_candidate_id", + "source_acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "receiver_receipt_readback_accepted": false, + "receiver_receipt_readback_ref": null, + "receiver_route_change_authorized": false, + "receiver_route_state_accepted": false, + "receiver_route_state_ref": null, + "recurrence_guard_accepted": false, + "recurrence_guard_ref": null, + "reload_or_no_reload_accepted": false, + "reload_or_no_reload_ref": null, + "remote_write_change_authorized": false, + "repo_sha256": "f3b61e55dba30aca4be16282681445671559467ddc21b946f76762ad829cfeb2", + "repo_source_path": "apps/api/src/services/notifications/manager.py", + "request_id": "monitoring_owner_request:notification_manager_service", + "required_readback_fields": [ + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "followup_owner", + "redacted_evidence_refs", + "no_secret_value_attestation", + "no_raw_payload_attestation", + "no_false_green_attestation", + "receipt_not_route_only_attestation", + "independent_postcheck_attestation", + "noise_budget_or_silence_owner_attestation" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "source_owner_response_acceptance_current", + "incident_or_change_ref_present", + "actor_attribution_present", + "change_or_outage_time_window_present", + "intent_or_break_glass_present", + "before_after_alert_state_present", + "rule_datasource_scrape_state_present", + "receiver_route_state_present", + "reload_or_no_reload_called_out", + "receiver_receipt_readback_present", + "stale_pending_resolved_review_present", + "silence_mute_dedup_inhibit_review_present", + "dashboard_trace_log_freshness_present", + "notification_delivery_metadata_present", + "alert_chain_health_not_route_only", + "cross_project_sync_present", + "rollback_or_disable_validation_present", + "post_change_monitoring_present", + "postcheck_independent", + "recurrence_guard_present", + "maintenance_window_present", + "noise_budget_owner_present", + "redacted_refs_only", + "secret_value_absent", + "raw_payload_absent", + "no_false_green", + "runtime_stays_zero", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_post_incident_readback", + "rollback_or_disable_validation_accepted": false, + "rollback_or_disable_validation_ref": null, + "rollback_owner": "pending_post_incident_readback", + "rule_datasource_scrape_state_accepted": false, + "rule_datasource_scrape_state_ref": null, + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_mute_dedup_inhibit_review_accepted": false, + "silence_mute_dedup_inhibit_review_ref": null, + "silence_policy_change_authorized": false, + "source_acceptance_candidate_id": "monitoring_owner_response_acceptance:notification_manager_service", + "source_line_count": 172, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "stale_pending_resolved_review_accepted": false, + "stale_pending_resolved_review_ref": null, + "status": "waiting_post_incident_readback", + "surface_id": "notification_manager_service", + "telegram_send_authorized": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": true + }, + { + "action_buttons_allowed": false, + "active_scan_authorized": false, + "actor_attribution_accepted": false, + "actor_attribution_ref": null, + "after_alert_state_ref": null, + "alert_chain_health_readback_accepted": false, + "alert_chain_health_readback_ref": null, + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "before_after_alert_state_accepted": false, + "before_alert_state_ref": null, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", + "add_action_button", + "store_raw_live_config", + "store_full_receiver_payload", + "collect_bot_token", + "collect_dsn_secret", + "collect_webhook_secret", + "change_alert_rule", + "change_scrape_config", + "change_dashboard", + "change_notification_policy", + "change_silence", + "change_inhibit_rule", + "accept_dashboard_up_as_alert_chain_healthy", + "skip_receiver_receipt", + "skip_stale_review", + "skip_silence_review", + "skip_rollback_validation", + "skip_post_change_monitoring", + "skip_cross_project_sync", + "live_receiver_probe" + ], + "change_intent_or_break_glass_ref": null, + "change_or_outage_time_window_accepted": false, + "change_or_outage_time_window_ref": null, + "config_kind": "notification_policy_code", + "control_tier": "C1", + "cross_project_sync_accepted": false, + "cross_project_sync_ref": null, + "dashboard_trace_log_freshness_accepted": false, + "dashboard_trace_log_freshness_ref": null, + "expected_scope": "notification_matrix_policy", + "exporter_deploy_authorized": false, + "followup_owner": "pending_post_incident_readback", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "intent_or_break_glass_accepted": false, + "kubectl_action_authorized": false, + "label": "Notification matrix", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "maintenance_window": "pending_post_incident_readback", + "monitoring_incident_or_change_ref": null, + "no_false_green_accepted": false, + "not_approval": true, + "notification_delivery_metadata_accepted": false, + "notification_delivery_metadata_ref": null, + "notification_route_change_authorized": false, + "observability_scope": [ + "notification policy", + "recipient / channel mapping" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_post_incident_readback", + "request_actor_or_time_supplement", + "request_alert_state_supplement", + "request_receiver_receipt_supplement", + "request_stale_silence_supplement", + "request_freshness_or_alert_chain_supplement", + "quarantine_raw_payload", + "reject_false_green_claim", + "ready_for_monitoring_post_incident_review", + "recurrence_guard_backfill_required", + "waiting_runtime_gate" + ], + "post_change_monitoring_accepted": false, + "post_change_monitoring_ref": null, + "post_incident_readback_accepted": false, + "post_incident_readback_candidate_id": "monitoring_post_incident_readback:notification_matrix_service", + "post_incident_readback_received": false, + "postcheck_readback_accepted": false, + "postcheck_readback_ref": null, + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "readback_fields": [ + "post_incident_readback_candidate_id", + "source_acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "receiver_receipt_readback_accepted": false, + "receiver_receipt_readback_ref": null, + "receiver_route_change_authorized": false, + "receiver_route_state_accepted": false, + "receiver_route_state_ref": null, + "recurrence_guard_accepted": false, + "recurrence_guard_ref": null, + "reload_or_no_reload_accepted": false, + "reload_or_no_reload_ref": null, + "remote_write_change_authorized": false, + "repo_sha256": "5881a477e7fe6b7f60af9ad1e880197b01474bc08749977d46fd541764d81442", + "repo_source_path": "apps/api/src/services/notification_matrix.py", + "request_id": "monitoring_owner_request:notification_matrix_service", + "required_readback_fields": [ + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "followup_owner", + "redacted_evidence_refs", + "no_secret_value_attestation", + "no_raw_payload_attestation", + "no_false_green_attestation", + "receipt_not_route_only_attestation", + "independent_postcheck_attestation", + "noise_budget_or_silence_owner_attestation" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "source_owner_response_acceptance_current", + "incident_or_change_ref_present", + "actor_attribution_present", + "change_or_outage_time_window_present", + "intent_or_break_glass_present", + "before_after_alert_state_present", + "rule_datasource_scrape_state_present", + "receiver_route_state_present", + "reload_or_no_reload_called_out", + "receiver_receipt_readback_present", + "stale_pending_resolved_review_present", + "silence_mute_dedup_inhibit_review_present", + "dashboard_trace_log_freshness_present", + "notification_delivery_metadata_present", + "alert_chain_health_not_route_only", + "cross_project_sync_present", + "rollback_or_disable_validation_present", + "post_change_monitoring_present", + "postcheck_independent", + "recurrence_guard_present", + "maintenance_window_present", + "noise_budget_owner_present", + "redacted_refs_only", + "secret_value_absent", + "raw_payload_absent", + "no_false_green", + "runtime_stays_zero", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_post_incident_readback", + "rollback_or_disable_validation_accepted": false, + "rollback_or_disable_validation_ref": null, + "rollback_owner": "pending_post_incident_readback", + "rule_datasource_scrape_state_accepted": false, + "rule_datasource_scrape_state_ref": null, + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_mute_dedup_inhibit_review_accepted": false, + "silence_mute_dedup_inhibit_review_ref": null, + "silence_policy_change_authorized": false, + "source_acceptance_candidate_id": "monitoring_owner_response_acceptance:notification_matrix_service", + "source_line_count": 66, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "stale_pending_resolved_review_accepted": false, + "stale_pending_resolved_review_ref": null, + "status": "waiting_post_incident_readback", + "surface_id": "notification_matrix_service", + "telegram_send_authorized": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "action_buttons_allowed": false, + "active_scan_authorized": false, + "actor_attribution_accepted": false, + "actor_attribution_ref": null, + "after_alert_state_ref": null, + "alert_chain_health_readback_accepted": false, + "alert_chain_health_readback_ref": null, + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "before_after_alert_state_accepted": false, + "before_alert_state_ref": null, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", + "add_action_button", + "store_raw_live_config", + "store_full_receiver_payload", + "collect_bot_token", + "collect_dsn_secret", + "collect_webhook_secret", + "change_alert_rule", + "change_scrape_config", + "change_dashboard", + "change_notification_policy", + "change_silence", + "change_inhibit_rule", + "accept_dashboard_up_as_alert_chain_healthy", + "skip_receiver_receipt", + "skip_stale_review", + "skip_silence_review", + "skip_rollback_validation", + "skip_post_change_monitoring", + "skip_cross_project_sync", + "live_receiver_probe" + ], + "change_intent_or_break_glass_ref": null, + "change_or_outage_time_window_accepted": false, + "change_or_outage_time_window_ref": null, + "config_kind": "alert_metrics_service", + "control_tier": "C1", + "cross_project_sync_accepted": false, + "cross_project_sync_ref": null, + "dashboard_trace_log_freshness_accepted": false, + "dashboard_trace_log_freshness_ref": null, + "expected_scope": "alert_chain_metrics", + "exporter_deploy_authorized": false, + "followup_owner": "pending_post_incident_readback", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "intent_or_break_glass_accepted": false, + "kubectl_action_authorized": false, + "label": "Alert chain metrics service", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "maintenance_window": "pending_post_incident_readback", + "monitoring_incident_or_change_ref": null, + "no_false_green_accepted": false, + "not_approval": true, + "notification_delivery_metadata_accepted": false, + "notification_delivery_metadata_ref": null, + "notification_route_change_authorized": false, + "observability_scope": [ + "alert chain metrics", + "delivery visibility" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_post_incident_readback", + "request_actor_or_time_supplement", + "request_alert_state_supplement", + "request_receiver_receipt_supplement", + "request_stale_silence_supplement", + "request_freshness_or_alert_chain_supplement", + "quarantine_raw_payload", + "reject_false_green_claim", + "ready_for_monitoring_post_incident_review", + "recurrence_guard_backfill_required", + "waiting_runtime_gate" + ], + "post_change_monitoring_accepted": false, + "post_change_monitoring_ref": null, + "post_incident_readback_accepted": false, + "post_incident_readback_candidate_id": "monitoring_post_incident_readback:alert_chain_metrics_service", + "post_incident_readback_received": false, + "postcheck_readback_accepted": false, + "postcheck_readback_ref": null, + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "readback_fields": [ + "post_incident_readback_candidate_id", + "source_acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "receiver_receipt_readback_accepted": false, + "receiver_receipt_readback_ref": null, + "receiver_route_change_authorized": false, + "receiver_route_state_accepted": false, + "receiver_route_state_ref": null, + "recurrence_guard_accepted": false, + "recurrence_guard_ref": null, + "reload_or_no_reload_accepted": false, + "reload_or_no_reload_ref": null, + "remote_write_change_authorized": false, + "repo_sha256": "4eee6ac9e7228183a6fbc05179b85c0d8aca001bf7cc15736d480b3dd1d6f96d", + "repo_source_path": "apps/api/src/services/alert_chain_metrics_service.py", + "request_id": "monitoring_owner_request:alert_chain_metrics_service", + "required_readback_fields": [ + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "followup_owner", + "redacted_evidence_refs", + "no_secret_value_attestation", + "no_raw_payload_attestation", + "no_false_green_attestation", + "receipt_not_route_only_attestation", + "independent_postcheck_attestation", + "noise_budget_or_silence_owner_attestation" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "source_owner_response_acceptance_current", + "incident_or_change_ref_present", + "actor_attribution_present", + "change_or_outage_time_window_present", + "intent_or_break_glass_present", + "before_after_alert_state_present", + "rule_datasource_scrape_state_present", + "receiver_route_state_present", + "reload_or_no_reload_called_out", + "receiver_receipt_readback_present", + "stale_pending_resolved_review_present", + "silence_mute_dedup_inhibit_review_present", + "dashboard_trace_log_freshness_present", + "notification_delivery_metadata_present", + "alert_chain_health_not_route_only", + "cross_project_sync_present", + "rollback_or_disable_validation_present", + "post_change_monitoring_present", + "postcheck_independent", + "recurrence_guard_present", + "maintenance_window_present", + "noise_budget_owner_present", + "redacted_refs_only", + "secret_value_absent", + "raw_payload_absent", + "no_false_green", + "runtime_stays_zero", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_post_incident_readback", + "rollback_or_disable_validation_accepted": false, + "rollback_or_disable_validation_ref": null, + "rollback_owner": "pending_post_incident_readback", + "rule_datasource_scrape_state_accepted": false, + "rule_datasource_scrape_state_ref": null, + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_mute_dedup_inhibit_review_accepted": false, + "silence_mute_dedup_inhibit_review_ref": null, + "silence_policy_change_authorized": false, + "source_acceptance_candidate_id": "monitoring_owner_response_acceptance:alert_chain_metrics_service", + "source_line_count": 160, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "stale_pending_resolved_review_accepted": false, + "stale_pending_resolved_review_ref": null, + "status": "waiting_post_incident_readback", + "surface_id": "alert_chain_metrics_service", + "telegram_send_authorized": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "action_buttons_allowed": false, + "active_scan_authorized": false, + "actor_attribution_accepted": false, + "actor_attribution_ref": null, + "after_alert_state_ref": null, + "alert_chain_health_readback_accepted": false, + "alert_chain_health_readback_ref": null, + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "before_after_alert_state_accepted": false, + "before_alert_state_ref": null, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", + "add_action_button", + "store_raw_live_config", + "store_full_receiver_payload", + "collect_bot_token", + "collect_dsn_secret", + "collect_webhook_secret", + "change_alert_rule", + "change_scrape_config", + "change_dashboard", + "change_notification_policy", + "change_silence", + "change_inhibit_rule", + "accept_dashboard_up_as_alert_chain_healthy", + "skip_receiver_receipt", + "skip_stale_review", + "skip_silence_review", + "skip_rollback_validation", + "skip_post_change_monitoring", + "skip_cross_project_sync", + "live_receiver_probe" + ], + "change_intent_or_break_glass_ref": null, + "change_or_outage_time_window_accepted": false, + "change_or_outage_time_window_ref": null, + "config_kind": "notification_runtime_router", + "control_tier": "C1", + "cross_project_sync_accepted": false, + "cross_project_sync_ref": null, + "dashboard_trace_log_freshness_accepted": false, + "dashboard_trace_log_freshness_ref": null, + "expected_scope": "recurrence_notification_runtime", + "exporter_deploy_authorized": false, + "followup_owner": "pending_post_incident_readback", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "intent_or_break_glass_accepted": false, + "kubectl_action_authorized": false, + "label": "Converged alert recurrence notifier", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "maintenance_window": "pending_post_incident_readback", + "monitoring_incident_or_change_ref": null, + "no_false_green_accepted": false, + "not_approval": true, + "notification_delivery_metadata_accepted": false, + "notification_delivery_metadata_ref": null, + "notification_route_change_authorized": false, + "observability_scope": [ + "recurrence notification", + "dedup", + "escalation routing" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_post_incident_readback", + "request_actor_or_time_supplement", + "request_alert_state_supplement", + "request_receiver_receipt_supplement", + "request_stale_silence_supplement", + "request_freshness_or_alert_chain_supplement", + "quarantine_raw_payload", + "reject_false_green_claim", + "ready_for_monitoring_post_incident_review", + "recurrence_guard_backfill_required", + "waiting_runtime_gate" + ], + "post_change_monitoring_accepted": false, + "post_change_monitoring_ref": null, + "post_incident_readback_accepted": false, + "post_incident_readback_candidate_id": "monitoring_post_incident_readback:converged_alert_recurrence_notifier", + "post_incident_readback_received": false, + "postcheck_readback_accepted": false, + "postcheck_readback_ref": null, + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "readback_fields": [ + "post_incident_readback_candidate_id", + "source_acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "receiver_receipt_readback_accepted": false, + "receiver_receipt_readback_ref": null, + "receiver_route_change_authorized": false, + "receiver_route_state_accepted": false, + "receiver_route_state_ref": null, + "recurrence_guard_accepted": false, + "recurrence_guard_ref": null, + "reload_or_no_reload_accepted": false, + "reload_or_no_reload_ref": null, + "remote_write_change_authorized": false, + "repo_sha256": "66e7026bd8b6662c6daaaeb004cb5b58a9ffe81b705b227e2ad1f50e84bc6856", + "repo_source_path": "apps/api/src/services/converged_alert_recurrence_notifier.py", + "request_id": "monitoring_owner_request:converged_alert_recurrence_notifier", + "required_readback_fields": [ + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "followup_owner", + "redacted_evidence_refs", + "no_secret_value_attestation", + "no_raw_payload_attestation", + "no_false_green_attestation", + "receipt_not_route_only_attestation", + "independent_postcheck_attestation", + "noise_budget_or_silence_owner_attestation" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "source_owner_response_acceptance_current", + "incident_or_change_ref_present", + "actor_attribution_present", + "change_or_outage_time_window_present", + "intent_or_break_glass_present", + "before_after_alert_state_present", + "rule_datasource_scrape_state_present", + "receiver_route_state_present", + "reload_or_no_reload_called_out", + "receiver_receipt_readback_present", + "stale_pending_resolved_review_present", + "silence_mute_dedup_inhibit_review_present", + "dashboard_trace_log_freshness_present", + "notification_delivery_metadata_present", + "alert_chain_health_not_route_only", + "cross_project_sync_present", + "rollback_or_disable_validation_present", + "post_change_monitoring_present", + "postcheck_independent", + "recurrence_guard_present", + "maintenance_window_present", + "noise_budget_owner_present", + "redacted_refs_only", + "secret_value_absent", + "raw_payload_absent", + "no_false_green", + "runtime_stays_zero", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_post_incident_readback", + "rollback_or_disable_validation_accepted": false, + "rollback_or_disable_validation_ref": null, + "rollback_owner": "pending_post_incident_readback", + "rule_datasource_scrape_state_accepted": false, + "rule_datasource_scrape_state_ref": null, + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_mute_dedup_inhibit_review_accepted": false, + "silence_mute_dedup_inhibit_review_ref": null, + "silence_policy_change_authorized": false, + "source_acceptance_candidate_id": "monitoring_owner_response_acceptance:converged_alert_recurrence_notifier", + "source_line_count": 215, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "stale_pending_resolved_review_accepted": false, + "stale_pending_resolved_review_ref": null, + "status": "waiting_post_incident_readback", + "surface_id": "converged_alert_recurrence_notifier", + "telegram_send_authorized": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": true + }, + { + "action_buttons_allowed": false, + "active_scan_authorized": false, + "actor_attribution_accepted": false, + "actor_attribution_ref": null, + "after_alert_state_ref": null, + "alert_chain_health_readback_accepted": false, + "alert_chain_health_readback_ref": null, + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "before_after_alert_state_accepted": false, + "before_alert_state_ref": null, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", + "add_action_button", + "store_raw_live_config", + "store_full_receiver_payload", + "collect_bot_token", + "collect_dsn_secret", + "collect_webhook_secret", + "change_alert_rule", + "change_scrape_config", + "change_dashboard", + "change_notification_policy", + "change_silence", + "change_inhibit_rule", + "accept_dashboard_up_as_alert_chain_healthy", + "skip_receiver_receipt", + "skip_stale_review", + "skip_silence_review", + "skip_rollback_validation", + "skip_post_change_monitoring", + "skip_cross_project_sync", + "live_receiver_probe" + ], + "change_intent_or_break_glass_ref": null, + "change_or_outage_time_window_accepted": false, + "change_or_outage_time_window_ref": null, + "config_kind": "webhook_receiver", + "control_tier": "C1", + "cross_project_sync_accepted": false, + "cross_project_sync_ref": null, + "dashboard_trace_log_freshness_accepted": false, + "dashboard_trace_log_freshness_ref": null, + "expected_scope": "sentry_webhook_receiver", + "exporter_deploy_authorized": false, + "followup_owner": "pending_post_incident_readback", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "intent_or_break_glass_accepted": false, + "kubectl_action_authorized": false, + "label": "Sentry webhook service", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "maintenance_window": "pending_post_incident_readback", + "monitoring_incident_or_change_ref": null, + "no_false_green_accepted": false, + "not_approval": true, + "notification_delivery_metadata_accepted": false, + "notification_delivery_metadata_ref": null, + "notification_route_change_authorized": false, + "observability_scope": [ + "Sentry webhook", + "signature validation", + "triage route" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_post_incident_readback", + "request_actor_or_time_supplement", + "request_alert_state_supplement", + "request_receiver_receipt_supplement", + "request_stale_silence_supplement", + "request_freshness_or_alert_chain_supplement", + "quarantine_raw_payload", + "reject_false_green_claim", + "ready_for_monitoring_post_incident_review", + "recurrence_guard_backfill_required", + "waiting_runtime_gate" + ], + "post_change_monitoring_accepted": false, + "post_change_monitoring_ref": null, + "post_incident_readback_accepted": false, + "post_incident_readback_candidate_id": "monitoring_post_incident_readback:sentry_webhook_service", + "post_incident_readback_received": false, + "postcheck_readback_accepted": false, + "postcheck_readback_ref": null, + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "readback_fields": [ + "post_incident_readback_candidate_id", + "source_acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "receiver_receipt_readback_accepted": false, + "receiver_receipt_readback_ref": null, + "receiver_route_change_authorized": false, + "receiver_route_state_accepted": false, + "receiver_route_state_ref": null, + "recurrence_guard_accepted": false, + "recurrence_guard_ref": null, + "reload_or_no_reload_accepted": false, + "reload_or_no_reload_ref": null, + "remote_write_change_authorized": false, + "repo_sha256": "00c192d55a56f4dafd4e11a4fa7d3950a8938ab158f066bb7d49ab70c4c19d06", + "repo_source_path": "apps/api/src/services/sentry_webhook_service.py", + "request_id": "monitoring_owner_request:sentry_webhook_service", + "required_readback_fields": [ + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "followup_owner", + "redacted_evidence_refs", + "no_secret_value_attestation", + "no_raw_payload_attestation", + "no_false_green_attestation", + "receipt_not_route_only_attestation", + "independent_postcheck_attestation", + "noise_budget_or_silence_owner_attestation" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "source_owner_response_acceptance_current", + "incident_or_change_ref_present", + "actor_attribution_present", + "change_or_outage_time_window_present", + "intent_or_break_glass_present", + "before_after_alert_state_present", + "rule_datasource_scrape_state_present", + "receiver_route_state_present", + "reload_or_no_reload_called_out", + "receiver_receipt_readback_present", + "stale_pending_resolved_review_present", + "silence_mute_dedup_inhibit_review_present", + "dashboard_trace_log_freshness_present", + "notification_delivery_metadata_present", + "alert_chain_health_not_route_only", + "cross_project_sync_present", + "rollback_or_disable_validation_present", + "post_change_monitoring_present", + "postcheck_independent", + "recurrence_guard_present", + "maintenance_window_present", + "noise_budget_owner_present", + "redacted_refs_only", + "secret_value_absent", + "raw_payload_absent", + "no_false_green", + "runtime_stays_zero", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_post_incident_readback", + "rollback_or_disable_validation_accepted": false, + "rollback_or_disable_validation_ref": null, + "rollback_owner": "pending_post_incident_readback", + "rule_datasource_scrape_state_accepted": false, + "rule_datasource_scrape_state_ref": null, + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_mute_dedup_inhibit_review_accepted": false, + "silence_mute_dedup_inhibit_review_ref": null, + "silence_policy_change_authorized": false, + "source_acceptance_candidate_id": "monitoring_owner_response_acceptance:sentry_webhook_service", + "source_line_count": 452, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "stale_pending_resolved_review_accepted": false, + "stale_pending_resolved_review_ref": null, + "status": "waiting_post_incident_readback", + "surface_id": "sentry_webhook_service", + "telegram_send_authorized": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "action_buttons_allowed": false, + "active_scan_authorized": false, + "actor_attribution_accepted": false, + "actor_attribution_ref": null, + "after_alert_state_ref": null, + "alert_chain_health_readback_accepted": false, + "alert_chain_health_readback_ref": null, + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "before_after_alert_state_accepted": false, + "before_alert_state_ref": null, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", + "add_action_button", + "store_raw_live_config", + "store_full_receiver_payload", + "collect_bot_token", + "collect_dsn_secret", + "collect_webhook_secret", + "change_alert_rule", + "change_scrape_config", + "change_dashboard", + "change_notification_policy", + "change_silence", + "change_inhibit_rule", + "accept_dashboard_up_as_alert_chain_healthy", + "skip_receiver_receipt", + "skip_stale_review", + "skip_silence_review", + "skip_rollback_validation", + "skip_post_change_monitoring", + "skip_cross_project_sync", + "live_receiver_probe" + ], + "change_intent_or_break_glass_ref": null, + "change_or_outage_time_window_accepted": false, + "change_or_outage_time_window_ref": null, + "config_kind": "signoz_observability_client", + "control_tier": "C1", + "cross_project_sync_accepted": false, + "cross_project_sync_ref": null, + "dashboard_trace_log_freshness_accepted": false, + "dashboard_trace_log_freshness_ref": null, + "expected_scope": "signoz_api_client", + "exporter_deploy_authorized": false, + "followup_owner": "pending_post_incident_readback", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "intent_or_break_glass_accepted": false, + "kubectl_action_authorized": false, + "label": "SigNoz client service", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "maintenance_window": "pending_post_incident_readback", + "monitoring_incident_or_change_ref": null, + "no_false_green_accepted": false, + "not_approval": true, + "notification_delivery_metadata_accepted": false, + "notification_delivery_metadata_ref": null, + "notification_route_change_authorized": false, + "observability_scope": [ + "SigNoz API", + "log query", + "trace query" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_post_incident_readback", + "request_actor_or_time_supplement", + "request_alert_state_supplement", + "request_receiver_receipt_supplement", + "request_stale_silence_supplement", + "request_freshness_or_alert_chain_supplement", + "quarantine_raw_payload", + "reject_false_green_claim", + "ready_for_monitoring_post_incident_review", + "recurrence_guard_backfill_required", + "waiting_runtime_gate" + ], + "post_change_monitoring_accepted": false, + "post_change_monitoring_ref": null, + "post_incident_readback_accepted": false, + "post_incident_readback_candidate_id": "monitoring_post_incident_readback:signoz_client_service", + "post_incident_readback_received": false, + "postcheck_readback_accepted": false, + "postcheck_readback_ref": null, + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "readback_fields": [ + "post_incident_readback_candidate_id", + "source_acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "receiver_receipt_readback_accepted": false, + "receiver_receipt_readback_ref": null, + "receiver_route_change_authorized": false, + "receiver_route_state_accepted": false, + "receiver_route_state_ref": null, + "recurrence_guard_accepted": false, + "recurrence_guard_ref": null, + "reload_or_no_reload_accepted": false, + "reload_or_no_reload_ref": null, + "remote_write_change_authorized": false, + "repo_sha256": "3eceb5f6d2a611390024215e12c8ff634b1eafc7ee9ca697dcde81cf7927de5c", + "repo_source_path": "apps/api/src/services/signoz_client.py", + "request_id": "monitoring_owner_request:signoz_client_service", + "required_readback_fields": [ + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "followup_owner", + "redacted_evidence_refs", + "no_secret_value_attestation", + "no_raw_payload_attestation", + "no_false_green_attestation", + "receipt_not_route_only_attestation", + "independent_postcheck_attestation", + "noise_budget_or_silence_owner_attestation" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "source_owner_response_acceptance_current", + "incident_or_change_ref_present", + "actor_attribution_present", + "change_or_outage_time_window_present", + "intent_or_break_glass_present", + "before_after_alert_state_present", + "rule_datasource_scrape_state_present", + "receiver_route_state_present", + "reload_or_no_reload_called_out", + "receiver_receipt_readback_present", + "stale_pending_resolved_review_present", + "silence_mute_dedup_inhibit_review_present", + "dashboard_trace_log_freshness_present", + "notification_delivery_metadata_present", + "alert_chain_health_not_route_only", + "cross_project_sync_present", + "rollback_or_disable_validation_present", + "post_change_monitoring_present", + "postcheck_independent", + "recurrence_guard_present", + "maintenance_window_present", + "noise_budget_owner_present", + "redacted_refs_only", + "secret_value_absent", + "raw_payload_absent", + "no_false_green", + "runtime_stays_zero", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_post_incident_readback", + "rollback_or_disable_validation_accepted": false, + "rollback_or_disable_validation_ref": null, + "rollback_owner": "pending_post_incident_readback", + "rule_datasource_scrape_state_accepted": false, + "rule_datasource_scrape_state_ref": null, + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_mute_dedup_inhibit_review_accepted": false, + "silence_mute_dedup_inhibit_review_ref": null, + "silence_policy_change_authorized": false, + "source_acceptance_candidate_id": "monitoring_owner_response_acceptance:signoz_client_service", + "source_line_count": 577, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "stale_pending_resolved_review_accepted": false, + "stale_pending_resolved_review_ref": null, + "status": "waiting_post_incident_readback", + "surface_id": "signoz_client_service", + "telegram_send_authorized": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "action_buttons_allowed": false, + "active_scan_authorized": false, + "actor_attribution_accepted": false, + "actor_attribution_ref": null, + "after_alert_state_ref": null, + "alert_chain_health_readback_accepted": false, + "alert_chain_health_readback_ref": null, + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "before_after_alert_state_accepted": false, + "before_alert_state_ref": null, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", + "add_action_button", + "store_raw_live_config", + "store_full_receiver_payload", + "collect_bot_token", + "collect_dsn_secret", + "collect_webhook_secret", + "change_alert_rule", + "change_scrape_config", + "change_dashboard", + "change_notification_policy", + "change_silence", + "change_inhibit_rule", + "accept_dashboard_up_as_alert_chain_healthy", + "skip_receiver_receipt", + "skip_stale_review", + "skip_silence_review", + "skip_rollback_validation", + "skip_post_change_monitoring", + "skip_cross_project_sync", + "live_receiver_probe" + ], + "change_intent_or_break_glass_ref": null, + "change_or_outage_time_window_accepted": false, + "change_or_outage_time_window_ref": null, + "config_kind": "sentry_observability_client", + "control_tier": "C1", + "cross_project_sync_accepted": false, + "cross_project_sync_ref": null, + "dashboard_trace_log_freshness_accepted": false, + "dashboard_trace_log_freshness_ref": null, + "expected_scope": "sentry_api_client", + "exporter_deploy_authorized": false, + "followup_owner": "pending_post_incident_readback", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "intent_or_break_glass_accepted": false, + "kubectl_action_authorized": false, + "label": "Sentry service client", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "maintenance_window": "pending_post_incident_readback", + "monitoring_incident_or_change_ref": null, + "no_false_green_accepted": false, + "not_approval": true, + "notification_delivery_metadata_accepted": false, + "notification_delivery_metadata_ref": null, + "notification_route_change_authorized": false, + "observability_scope": [ + "Sentry API", + "issue query", + "AI triage" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_post_incident_readback", + "request_actor_or_time_supplement", + "request_alert_state_supplement", + "request_receiver_receipt_supplement", + "request_stale_silence_supplement", + "request_freshness_or_alert_chain_supplement", + "quarantine_raw_payload", + "reject_false_green_claim", + "ready_for_monitoring_post_incident_review", + "recurrence_guard_backfill_required", + "waiting_runtime_gate" + ], + "post_change_monitoring_accepted": false, + "post_change_monitoring_ref": null, + "post_incident_readback_accepted": false, + "post_incident_readback_candidate_id": "monitoring_post_incident_readback:sentry_service_client", + "post_incident_readback_received": false, + "postcheck_readback_accepted": false, + "postcheck_readback_ref": null, + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "readback_fields": [ + "post_incident_readback_candidate_id", + "source_acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "receiver_receipt_readback_accepted": false, + "receiver_receipt_readback_ref": null, + "receiver_route_change_authorized": false, + "receiver_route_state_accepted": false, + "receiver_route_state_ref": null, + "recurrence_guard_accepted": false, + "recurrence_guard_ref": null, + "reload_or_no_reload_accepted": false, + "reload_or_no_reload_ref": null, + "remote_write_change_authorized": false, + "repo_sha256": "8287af9f12a5fbc991f2a8e369559075d863f4d36e4384a0616dc06e0919c05f", + "repo_source_path": "apps/api/src/services/sentry_service.py", + "request_id": "monitoring_owner_request:sentry_service_client", + "required_readback_fields": [ + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "followup_owner", + "redacted_evidence_refs", + "no_secret_value_attestation", + "no_raw_payload_attestation", + "no_false_green_attestation", + "receipt_not_route_only_attestation", + "independent_postcheck_attestation", + "noise_budget_or_silence_owner_attestation" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "source_owner_response_acceptance_current", + "incident_or_change_ref_present", + "actor_attribution_present", + "change_or_outage_time_window_present", + "intent_or_break_glass_present", + "before_after_alert_state_present", + "rule_datasource_scrape_state_present", + "receiver_route_state_present", + "reload_or_no_reload_called_out", + "receiver_receipt_readback_present", + "stale_pending_resolved_review_present", + "silence_mute_dedup_inhibit_review_present", + "dashboard_trace_log_freshness_present", + "notification_delivery_metadata_present", + "alert_chain_health_not_route_only", + "cross_project_sync_present", + "rollback_or_disable_validation_present", + "post_change_monitoring_present", + "postcheck_independent", + "recurrence_guard_present", + "maintenance_window_present", + "noise_budget_owner_present", + "redacted_refs_only", + "secret_value_absent", + "raw_payload_absent", + "no_false_green", + "runtime_stays_zero", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_post_incident_readback", + "rollback_or_disable_validation_accepted": false, + "rollback_or_disable_validation_ref": null, + "rollback_owner": "pending_post_incident_readback", + "rule_datasource_scrape_state_accepted": false, + "rule_datasource_scrape_state_ref": null, + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_mute_dedup_inhibit_review_accepted": false, + "silence_mute_dedup_inhibit_review_ref": null, + "silence_policy_change_authorized": false, + "source_acceptance_candidate_id": "monitoring_owner_response_acceptance:sentry_service_client", + "source_line_count": 464, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "stale_pending_resolved_review_accepted": false, + "stale_pending_resolved_review_ref": null, + "status": "waiting_post_incident_readback", + "surface_id": "sentry_service_client", + "telegram_send_authorized": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "action_buttons_allowed": false, + "active_scan_authorized": false, + "actor_attribution_accepted": false, + "actor_attribution_ref": null, + "after_alert_state_ref": null, + "alert_chain_health_readback_accepted": false, + "alert_chain_health_readback_ref": null, + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "before_after_alert_state_accepted": false, + "before_alert_state_ref": null, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", + "add_action_button", + "store_raw_live_config", + "store_full_receiver_payload", + "collect_bot_token", + "collect_dsn_secret", + "collect_webhook_secret", + "change_alert_rule", + "change_scrape_config", + "change_dashboard", + "change_notification_policy", + "change_silence", + "change_inhibit_rule", + "accept_dashboard_up_as_alert_chain_healthy", + "skip_receiver_receipt", + "skip_stale_review", + "skip_silence_review", + "skip_rollback_validation", + "skip_post_change_monitoring", + "skip_cross_project_sync", + "live_receiver_probe" + ], + "change_intent_or_break_glass_ref": null, + "change_or_outage_time_window_accepted": false, + "change_or_outage_time_window_ref": null, + "config_kind": "langfuse_observability_client", + "control_tier": "C1", + "cross_project_sync_accepted": false, + "cross_project_sync_ref": null, + "dashboard_trace_log_freshness_accepted": false, + "dashboard_trace_log_freshness_ref": null, + "expected_scope": "langfuse_api_client", + "exporter_deploy_authorized": false, + "followup_owner": "pending_post_incident_readback", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "intent_or_break_glass_accepted": false, + "kubectl_action_authorized": false, + "label": "Langfuse client service", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "maintenance_window": "pending_post_incident_readback", + "monitoring_incident_or_change_ref": null, + "no_false_green_accepted": false, + "not_approval": true, + "notification_delivery_metadata_accepted": false, + "notification_delivery_metadata_ref": null, + "notification_route_change_authorized": false, + "observability_scope": [ + "Langfuse API", + "AI trace", + "prompt / output privacy" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_post_incident_readback", + "request_actor_or_time_supplement", + "request_alert_state_supplement", + "request_receiver_receipt_supplement", + "request_stale_silence_supplement", + "request_freshness_or_alert_chain_supplement", + "quarantine_raw_payload", + "reject_false_green_claim", + "ready_for_monitoring_post_incident_review", + "recurrence_guard_backfill_required", + "waiting_runtime_gate" + ], + "post_change_monitoring_accepted": false, + "post_change_monitoring_ref": null, + "post_incident_readback_accepted": false, + "post_incident_readback_candidate_id": "monitoring_post_incident_readback:langfuse_client_service", + "post_incident_readback_received": false, + "postcheck_readback_accepted": false, + "postcheck_readback_ref": null, + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "readback_fields": [ + "post_incident_readback_candidate_id", + "source_acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "receiver_receipt_readback_accepted": false, + "receiver_receipt_readback_ref": null, + "receiver_route_change_authorized": false, + "receiver_route_state_accepted": false, + "receiver_route_state_ref": null, + "recurrence_guard_accepted": false, + "recurrence_guard_ref": null, + "reload_or_no_reload_accepted": false, + "reload_or_no_reload_ref": null, + "remote_write_change_authorized": false, + "repo_sha256": "fdd232688d58d31d38d1c8545b75a34f3afc53076c5c13bfe318d4d13cffc7cb", + "repo_source_path": "apps/api/src/services/langfuse_client.py", + "request_id": "monitoring_owner_request:langfuse_client_service", + "required_readback_fields": [ + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "followup_owner", + "redacted_evidence_refs", + "no_secret_value_attestation", + "no_raw_payload_attestation", + "no_false_green_attestation", + "receipt_not_route_only_attestation", + "independent_postcheck_attestation", + "noise_budget_or_silence_owner_attestation" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "source_owner_response_acceptance_current", + "incident_or_change_ref_present", + "actor_attribution_present", + "change_or_outage_time_window_present", + "intent_or_break_glass_present", + "before_after_alert_state_present", + "rule_datasource_scrape_state_present", + "receiver_route_state_present", + "reload_or_no_reload_called_out", + "receiver_receipt_readback_present", + "stale_pending_resolved_review_present", + "silence_mute_dedup_inhibit_review_present", + "dashboard_trace_log_freshness_present", + "notification_delivery_metadata_present", + "alert_chain_health_not_route_only", + "cross_project_sync_present", + "rollback_or_disable_validation_present", + "post_change_monitoring_present", + "postcheck_independent", + "recurrence_guard_present", + "maintenance_window_present", + "noise_budget_owner_present", + "redacted_refs_only", + "secret_value_absent", + "raw_payload_absent", + "no_false_green", + "runtime_stays_zero", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_post_incident_readback", + "rollback_or_disable_validation_accepted": false, + "rollback_or_disable_validation_ref": null, + "rollback_owner": "pending_post_incident_readback", + "rule_datasource_scrape_state_accepted": false, + "rule_datasource_scrape_state_ref": null, + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_mute_dedup_inhibit_review_accepted": false, + "silence_mute_dedup_inhibit_review_ref": null, + "silence_policy_change_authorized": false, + "source_acceptance_candidate_id": "monitoring_owner_response_acceptance:langfuse_client_service", + "source_line_count": 347, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "stale_pending_resolved_review_accepted": false, + "stale_pending_resolved_review_ref": null, + "status": "waiting_post_incident_readback", + "surface_id": "langfuse_client_service", + "telegram_send_authorized": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "action_buttons_allowed": false, + "active_scan_authorized": false, + "actor_attribution_accepted": false, + "actor_attribution_ref": null, + "after_alert_state_ref": null, + "alert_chain_health_readback_accepted": false, + "alert_chain_health_readback_ref": null, + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "before_after_alert_state_accepted": false, + "before_alert_state_ref": null, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", + "add_action_button", + "store_raw_live_config", + "store_full_receiver_payload", + "collect_bot_token", + "collect_dsn_secret", + "collect_webhook_secret", + "change_alert_rule", + "change_scrape_config", + "change_dashboard", + "change_notification_policy", + "change_silence", + "change_inhibit_rule", + "accept_dashboard_up_as_alert_chain_healthy", + "skip_receiver_receipt", + "skip_stale_review", + "skip_silence_review", + "skip_rollback_validation", + "skip_post_change_monitoring", + "skip_cross_project_sync", + "live_receiver_probe" + ], + "change_intent_or_break_glass_ref": null, + "change_or_outage_time_window_accepted": false, + "change_or_outage_time_window_ref": null, + "config_kind": "reload_capable_script", + "control_tier": "C1", + "cross_project_sync_accepted": false, + "cross_project_sync_ref": null, + "dashboard_trace_log_freshness_accepted": false, + "dashboard_trace_log_freshness_ref": null, + "expected_scope": "alertmanager_config_deploy", + "exporter_deploy_authorized": false, + "followup_owner": "pending_post_incident_readback", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "intent_or_break_glass_accepted": false, + "kubectl_action_authorized": false, + "label": "Alertmanager config deploy script", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "maintenance_window": "pending_post_incident_readback", + "monitoring_incident_or_change_ref": null, + "no_false_green_accepted": false, + "not_approval": true, + "notification_delivery_metadata_accepted": false, + "notification_delivery_metadata_ref": null, + "notification_route_change_authorized": false, + "observability_scope": [ + "Alertmanager config copy", + "reload" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_post_incident_readback", + "request_actor_or_time_supplement", + "request_alert_state_supplement", + "request_receiver_receipt_supplement", + "request_stale_silence_supplement", + "request_freshness_or_alert_chain_supplement", + "quarantine_raw_payload", + "reject_false_green_claim", + "ready_for_monitoring_post_incident_review", + "recurrence_guard_backfill_required", + "waiting_runtime_gate" + ], + "post_change_monitoring_accepted": false, + "post_change_monitoring_ref": null, + "post_incident_readback_accepted": false, + "post_incident_readback_candidate_id": "monitoring_post_incident_readback:deploy_alertmanager_config_script", + "post_incident_readback_received": false, + "postcheck_readback_accepted": false, + "postcheck_readback_ref": null, + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "readback_fields": [ + "post_incident_readback_candidate_id", + "source_acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "receiver_receipt_readback_accepted": false, + "receiver_receipt_readback_ref": null, + "receiver_route_change_authorized": false, + "receiver_route_state_accepted": false, + "receiver_route_state_ref": null, + "recurrence_guard_accepted": false, + "recurrence_guard_ref": null, + "reload_or_no_reload_accepted": false, + "reload_or_no_reload_ref": null, + "remote_write_change_authorized": false, + "repo_sha256": "861ce84b7abea40d279e9c346baa4388b6962416914ad39fbd388ef0613c2c30", + "repo_source_path": "scripts/ops/deploy-alertmanager-config.sh", + "request_id": "monitoring_owner_request:deploy_alertmanager_config_script", + "required_readback_fields": [ + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "followup_owner", + "redacted_evidence_refs", + "no_secret_value_attestation", + "no_raw_payload_attestation", + "no_false_green_attestation", + "receipt_not_route_only_attestation", + "independent_postcheck_attestation", + "noise_budget_or_silence_owner_attestation" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "source_owner_response_acceptance_current", + "incident_or_change_ref_present", + "actor_attribution_present", + "change_or_outage_time_window_present", + "intent_or_break_glass_present", + "before_after_alert_state_present", + "rule_datasource_scrape_state_present", + "receiver_route_state_present", + "reload_or_no_reload_called_out", + "receiver_receipt_readback_present", + "stale_pending_resolved_review_present", + "silence_mute_dedup_inhibit_review_present", + "dashboard_trace_log_freshness_present", + "notification_delivery_metadata_present", + "alert_chain_health_not_route_only", + "cross_project_sync_present", + "rollback_or_disable_validation_present", + "post_change_monitoring_present", + "postcheck_independent", + "recurrence_guard_present", + "maintenance_window_present", + "noise_budget_owner_present", + "redacted_refs_only", + "secret_value_absent", + "raw_payload_absent", + "no_false_green", + "runtime_stays_zero", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_post_incident_readback", + "rollback_or_disable_validation_accepted": false, + "rollback_or_disable_validation_ref": null, + "rollback_owner": "pending_post_incident_readback", + "rule_datasource_scrape_state_accepted": false, + "rule_datasource_scrape_state_ref": null, + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_mute_dedup_inhibit_review_accepted": false, + "silence_mute_dedup_inhibit_review_ref": null, + "silence_policy_change_authorized": false, + "source_acceptance_candidate_id": "monitoring_owner_response_acceptance:deploy_alertmanager_config_script", + "source_line_count": 145, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "stale_pending_resolved_review_accepted": false, + "stale_pending_resolved_review_ref": null, + "status": "waiting_post_incident_readback", + "surface_id": "deploy_alertmanager_config_script", + "telegram_send_authorized": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": true + }, + { + "action_buttons_allowed": false, + "active_scan_authorized": false, + "actor_attribution_accepted": false, + "actor_attribution_ref": null, + "after_alert_state_ref": null, + "alert_chain_health_readback_accepted": false, + "alert_chain_health_readback_ref": null, + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "before_after_alert_state_accepted": false, + "before_alert_state_ref": null, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", + "add_action_button", + "store_raw_live_config", + "store_full_receiver_payload", + "collect_bot_token", + "collect_dsn_secret", + "collect_webhook_secret", + "change_alert_rule", + "change_scrape_config", + "change_dashboard", + "change_notification_policy", + "change_silence", + "change_inhibit_rule", + "accept_dashboard_up_as_alert_chain_healthy", + "skip_receiver_receipt", + "skip_stale_review", + "skip_silence_review", + "skip_rollback_validation", + "skip_post_change_monitoring", + "skip_cross_project_sync", + "live_receiver_probe" + ], + "change_intent_or_break_glass_ref": null, + "change_or_outage_time_window_accepted": false, + "change_or_outage_time_window_ref": null, + "config_kind": "reload_capable_script", + "control_tier": "C1", + "cross_project_sync_accepted": false, + "cross_project_sync_ref": null, + "dashboard_trace_log_freshness_accepted": false, + "dashboard_trace_log_freshness_ref": null, + "expected_scope": "prometheus_alerts_deploy", + "exporter_deploy_authorized": false, + "followup_owner": "pending_post_incident_readback", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "intent_or_break_glass_accepted": false, + "kubectl_action_authorized": false, + "label": "Prometheus alerts deploy script", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "maintenance_window": "pending_post_incident_readback", + "monitoring_incident_or_change_ref": null, + "no_false_green_accepted": false, + "not_approval": true, + "notification_delivery_metadata_accepted": false, + "notification_delivery_metadata_ref": null, + "notification_route_change_authorized": false, + "observability_scope": [ + "Prometheus alert rule deploy", + "reload" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_post_incident_readback", + "request_actor_or_time_supplement", + "request_alert_state_supplement", + "request_receiver_receipt_supplement", + "request_stale_silence_supplement", + "request_freshness_or_alert_chain_supplement", + "quarantine_raw_payload", + "reject_false_green_claim", + "ready_for_monitoring_post_incident_review", + "recurrence_guard_backfill_required", + "waiting_runtime_gate" + ], + "post_change_monitoring_accepted": false, + "post_change_monitoring_ref": null, + "post_incident_readback_accepted": false, + "post_incident_readback_candidate_id": "monitoring_post_incident_readback:deploy_prometheus_alerts_script", + "post_incident_readback_received": false, + "postcheck_readback_accepted": false, + "postcheck_readback_ref": null, + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "readback_fields": [ + "post_incident_readback_candidate_id", + "source_acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "receiver_receipt_readback_accepted": false, + "receiver_receipt_readback_ref": null, + "receiver_route_change_authorized": false, + "receiver_route_state_accepted": false, + "receiver_route_state_ref": null, + "recurrence_guard_accepted": false, + "recurrence_guard_ref": null, + "reload_or_no_reload_accepted": false, + "reload_or_no_reload_ref": null, + "remote_write_change_authorized": false, + "repo_sha256": "302df2ac135a8b360684797cc6210584120f115896859435ddd15a0d3c1cf883", + "repo_source_path": "scripts/ops/deploy-alerts.sh", + "request_id": "monitoring_owner_request:deploy_prometheus_alerts_script", + "required_readback_fields": [ + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "followup_owner", + "redacted_evidence_refs", + "no_secret_value_attestation", + "no_raw_payload_attestation", + "no_false_green_attestation", + "receipt_not_route_only_attestation", + "independent_postcheck_attestation", + "noise_budget_or_silence_owner_attestation" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "source_owner_response_acceptance_current", + "incident_or_change_ref_present", + "actor_attribution_present", + "change_or_outage_time_window_present", + "intent_or_break_glass_present", + "before_after_alert_state_present", + "rule_datasource_scrape_state_present", + "receiver_route_state_present", + "reload_or_no_reload_called_out", + "receiver_receipt_readback_present", + "stale_pending_resolved_review_present", + "silence_mute_dedup_inhibit_review_present", + "dashboard_trace_log_freshness_present", + "notification_delivery_metadata_present", + "alert_chain_health_not_route_only", + "cross_project_sync_present", + "rollback_or_disable_validation_present", + "post_change_monitoring_present", + "postcheck_independent", + "recurrence_guard_present", + "maintenance_window_present", + "noise_budget_owner_present", + "redacted_refs_only", + "secret_value_absent", + "raw_payload_absent", + "no_false_green", + "runtime_stays_zero", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_post_incident_readback", + "rollback_or_disable_validation_accepted": false, + "rollback_or_disable_validation_ref": null, + "rollback_owner": "pending_post_incident_readback", + "rule_datasource_scrape_state_accepted": false, + "rule_datasource_scrape_state_ref": null, + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_mute_dedup_inhibit_review_accepted": false, + "silence_mute_dedup_inhibit_review_ref": null, + "silence_policy_change_authorized": false, + "source_acceptance_candidate_id": "monitoring_owner_response_acceptance:deploy_prometheus_alerts_script", + "source_line_count": 164, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "stale_pending_resolved_review_accepted": false, + "stale_pending_resolved_review_ref": null, + "status": "waiting_post_incident_readback", + "surface_id": "deploy_prometheus_alerts_script", + "telegram_send_authorized": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": true + }, + { + "action_buttons_allowed": false, + "active_scan_authorized": false, + "actor_attribution_accepted": false, + "actor_attribution_ref": null, + "after_alert_state_ref": null, + "alert_chain_health_readback_accepted": false, + "alert_chain_health_readback_ref": null, + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "before_after_alert_state_accepted": false, + "before_alert_state_ref": null, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", + "add_action_button", + "store_raw_live_config", + "store_full_receiver_payload", + "collect_bot_token", + "collect_dsn_secret", + "collect_webhook_secret", + "change_alert_rule", + "change_scrape_config", + "change_dashboard", + "change_notification_policy", + "change_silence", + "change_inhibit_rule", + "accept_dashboard_up_as_alert_chain_healthy", + "skip_receiver_receipt", + "skip_stale_review", + "skip_silence_review", + "skip_rollback_validation", + "skip_post_change_monitoring", + "skip_cross_project_sync", + "live_receiver_probe" + ], + "change_intent_or_break_glass_ref": null, + "change_or_outage_time_window_accepted": false, + "change_or_outage_time_window_ref": null, + "config_kind": "drift_guard_script", + "control_tier": "C1", + "cross_project_sync_accepted": false, + "cross_project_sync_ref": null, + "dashboard_trace_log_freshness_accepted": false, + "dashboard_trace_log_freshness_ref": null, + "expected_scope": "prometheus_rule_drift_guard", + "exporter_deploy_authorized": false, + "followup_owner": "pending_post_incident_readback", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "intent_or_break_glass_accepted": false, + "kubectl_action_authorized": false, + "label": "Prometheus rule drift guard", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "maintenance_window": "pending_post_incident_readback", + "monitoring_incident_or_change_ref": null, + "no_false_green_accepted": false, + "not_approval": true, + "notification_delivery_metadata_accepted": false, + "notification_delivery_metadata_ref": null, + "notification_route_change_authorized": false, + "observability_scope": [ + "rule diff", + "drift evidence", + "reload guard" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_post_incident_readback", + "request_actor_or_time_supplement", + "request_alert_state_supplement", + "request_receiver_receipt_supplement", + "request_stale_silence_supplement", + "request_freshness_or_alert_chain_supplement", + "quarantine_raw_payload", + "reject_false_green_claim", + "ready_for_monitoring_post_incident_review", + "recurrence_guard_backfill_required", + "waiting_runtime_gate" + ], + "post_change_monitoring_accepted": false, + "post_change_monitoring_ref": null, + "post_incident_readback_accepted": false, + "post_incident_readback_candidate_id": "monitoring_post_incident_readback:prometheus_rule_drift_guard_script", + "post_incident_readback_received": false, + "postcheck_readback_accepted": false, + "postcheck_readback_ref": null, + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "readback_fields": [ + "post_incident_readback_candidate_id", + "source_acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "receiver_receipt_readback_accepted": false, + "receiver_receipt_readback_ref": null, + "receiver_route_change_authorized": false, + "receiver_route_state_accepted": false, + "receiver_route_state_ref": null, + "recurrence_guard_accepted": false, + "recurrence_guard_ref": null, + "reload_or_no_reload_accepted": false, + "reload_or_no_reload_ref": null, + "remote_write_change_authorized": false, + "repo_sha256": "c284f7abe4f511f4670f03f78b945f4506d277fe8a9c382e1bfedae48dfde61a", + "repo_source_path": "scripts/ops/prometheus-rule-drift-guard.sh", + "request_id": "monitoring_owner_request:prometheus_rule_drift_guard_script", + "required_readback_fields": [ + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "followup_owner", + "redacted_evidence_refs", + "no_secret_value_attestation", + "no_raw_payload_attestation", + "no_false_green_attestation", + "receipt_not_route_only_attestation", + "independent_postcheck_attestation", + "noise_budget_or_silence_owner_attestation" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "source_owner_response_acceptance_current", + "incident_or_change_ref_present", + "actor_attribution_present", + "change_or_outage_time_window_present", + "intent_or_break_glass_present", + "before_after_alert_state_present", + "rule_datasource_scrape_state_present", + "receiver_route_state_present", + "reload_or_no_reload_called_out", + "receiver_receipt_readback_present", + "stale_pending_resolved_review_present", + "silence_mute_dedup_inhibit_review_present", + "dashboard_trace_log_freshness_present", + "notification_delivery_metadata_present", + "alert_chain_health_not_route_only", + "cross_project_sync_present", + "rollback_or_disable_validation_present", + "post_change_monitoring_present", + "postcheck_independent", + "recurrence_guard_present", + "maintenance_window_present", + "noise_budget_owner_present", + "redacted_refs_only", + "secret_value_absent", + "raw_payload_absent", + "no_false_green", + "runtime_stays_zero", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_post_incident_readback", + "rollback_or_disable_validation_accepted": false, + "rollback_or_disable_validation_ref": null, + "rollback_owner": "pending_post_incident_readback", + "rule_datasource_scrape_state_accepted": false, + "rule_datasource_scrape_state_ref": null, + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_mute_dedup_inhibit_review_accepted": false, + "silence_mute_dedup_inhibit_review_ref": null, + "silence_policy_change_authorized": false, + "source_acceptance_candidate_id": "monitoring_owner_response_acceptance:prometheus_rule_drift_guard_script", + "source_line_count": 149, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "stale_pending_resolved_review_accepted": false, + "stale_pending_resolved_review_ref": null, + "status": "waiting_post_incident_readback", + "surface_id": "prometheus_rule_drift_guard_script", + "telegram_send_authorized": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "action_buttons_allowed": false, + "active_scan_authorized": false, + "actor_attribution_accepted": false, + "actor_attribution_ref": null, + "after_alert_state_ref": null, + "alert_chain_health_readback_accepted": false, + "alert_chain_health_readback_ref": null, + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "before_after_alert_state_accepted": false, + "before_alert_state_ref": null, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", + "add_action_button", + "store_raw_live_config", + "store_full_receiver_payload", + "collect_bot_token", + "collect_dsn_secret", + "collect_webhook_secret", + "change_alert_rule", + "change_scrape_config", + "change_dashboard", + "change_notification_policy", + "change_silence", + "change_inhibit_rule", + "accept_dashboard_up_as_alert_chain_healthy", + "skip_receiver_receipt", + "skip_stale_review", + "skip_silence_review", + "skip_rollback_validation", + "skip_post_change_monitoring", + "skip_cross_project_sync", + "live_receiver_probe" + ], + "change_intent_or_break_glass_ref": null, + "change_or_outage_time_window_accepted": false, + "change_or_outage_time_window_ref": null, + "config_kind": "reload_capable_script", + "control_tier": "C1", + "cross_project_sync_accepted": false, + "cross_project_sync_ref": null, + "dashboard_trace_log_freshness_accepted": false, + "dashboard_trace_log_freshness_ref": null, + "expected_scope": "k8s_prometheus_config_deploy", + "exporter_deploy_authorized": false, + "followup_owner": "pending_post_incident_readback", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "intent_or_break_glass_accepted": false, + "kubectl_action_authorized": false, + "label": "K8s Prometheus config deploy script", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "maintenance_window": "pending_post_incident_readback", + "monitoring_incident_or_change_ref": null, + "no_false_green_accepted": false, + "not_approval": true, + "notification_delivery_metadata_accepted": false, + "notification_delivery_metadata_ref": null, + "notification_route_change_authorized": false, + "observability_scope": [ + "K8s config apply", + "Prometheus reload" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_post_incident_readback", + "request_actor_or_time_supplement", + "request_alert_state_supplement", + "request_receiver_receipt_supplement", + "request_stale_silence_supplement", + "request_freshness_or_alert_chain_supplement", + "quarantine_raw_payload", + "reject_false_green_claim", + "ready_for_monitoring_post_incident_review", + "recurrence_guard_backfill_required", + "waiting_runtime_gate" + ], + "post_change_monitoring_accepted": false, + "post_change_monitoring_ref": null, + "post_incident_readback_accepted": false, + "post_incident_readback_candidate_id": "monitoring_post_incident_readback:k8s_deploy_prometheus_config_script", + "post_incident_readback_received": false, + "postcheck_readback_accepted": false, + "postcheck_readback_ref": null, + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "readback_fields": [ + "post_incident_readback_candidate_id", + "source_acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "receiver_receipt_readback_accepted": false, + "receiver_receipt_readback_ref": null, + "receiver_route_change_authorized": false, + "receiver_route_state_accepted": false, + "receiver_route_state_ref": null, + "recurrence_guard_accepted": false, + "recurrence_guard_ref": null, + "reload_or_no_reload_accepted": false, + "reload_or_no_reload_ref": null, + "remote_write_change_authorized": false, + "repo_sha256": "5511681efdd5563aa980396b2ebb37b7d28e43092feda48f3cba014a4b863adf", + "repo_source_path": "k8s/monitoring/deploy-prometheus-config.sh", + "request_id": "monitoring_owner_request:k8s_deploy_prometheus_config_script", + "required_readback_fields": [ + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "followup_owner", + "redacted_evidence_refs", + "no_secret_value_attestation", + "no_raw_payload_attestation", + "no_false_green_attestation", + "receipt_not_route_only_attestation", + "independent_postcheck_attestation", + "noise_budget_or_silence_owner_attestation" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "source_owner_response_acceptance_current", + "incident_or_change_ref_present", + "actor_attribution_present", + "change_or_outage_time_window_present", + "intent_or_break_glass_present", + "before_after_alert_state_present", + "rule_datasource_scrape_state_present", + "receiver_route_state_present", + "reload_or_no_reload_called_out", + "receiver_receipt_readback_present", + "stale_pending_resolved_review_present", + "silence_mute_dedup_inhibit_review_present", + "dashboard_trace_log_freshness_present", + "notification_delivery_metadata_present", + "alert_chain_health_not_route_only", + "cross_project_sync_present", + "rollback_or_disable_validation_present", + "post_change_monitoring_present", + "postcheck_independent", + "recurrence_guard_present", + "maintenance_window_present", + "noise_budget_owner_present", + "redacted_refs_only", + "secret_value_absent", + "raw_payload_absent", + "no_false_green", + "runtime_stays_zero", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_post_incident_readback", + "rollback_or_disable_validation_accepted": false, + "rollback_or_disable_validation_ref": null, + "rollback_owner": "pending_post_incident_readback", + "rule_datasource_scrape_state_accepted": false, + "rule_datasource_scrape_state_ref": null, + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_mute_dedup_inhibit_review_accepted": false, + "silence_mute_dedup_inhibit_review_ref": null, + "silence_policy_change_authorized": false, + "source_acceptance_candidate_id": "monitoring_owner_response_acceptance:k8s_deploy_prometheus_config_script", + "source_line_count": 118, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "stale_pending_resolved_review_accepted": false, + "stale_pending_resolved_review_ref": null, + "status": "waiting_post_incident_readback", + "surface_id": "k8s_deploy_prometheus_config_script", + "telegram_send_authorized": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": true + }, + { + "action_buttons_allowed": false, + "active_scan_authorized": false, + "actor_attribution_accepted": false, + "actor_attribution_ref": null, + "after_alert_state_ref": null, + "alert_chain_health_readback_accepted": false, + "alert_chain_health_readback_ref": null, + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "before_after_alert_state_accepted": false, + "before_alert_state_ref": null, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", + "add_action_button", + "store_raw_live_config", + "store_full_receiver_payload", + "collect_bot_token", + "collect_dsn_secret", + "collect_webhook_secret", + "change_alert_rule", + "change_scrape_config", + "change_dashboard", + "change_notification_policy", + "change_silence", + "change_inhibit_rule", + "accept_dashboard_up_as_alert_chain_healthy", + "skip_receiver_receipt", + "skip_stale_review", + "skip_silence_review", + "skip_rollback_validation", + "skip_post_change_monitoring", + "skip_cross_project_sync", + "live_receiver_probe" + ], + "change_intent_or_break_glass_ref": null, + "change_or_outage_time_window_accepted": false, + "change_or_outage_time_window_ref": null, + "config_kind": "reload_capable_script", + "control_tier": "C1", + "cross_project_sync_accepted": false, + "cross_project_sync_ref": null, + "dashboard_trace_log_freshness_accepted": false, + "dashboard_trace_log_freshness_ref": null, + "expected_scope": "api_prometheus_config_apply", + "exporter_deploy_authorized": false, + "followup_owner": "pending_post_incident_readback", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "intent_or_break_glass_accepted": false, + "kubectl_action_authorized": false, + "label": "API Prometheus config apply script", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "maintenance_window": "pending_post_incident_readback", + "monitoring_incident_or_change_ref": null, + "no_false_green_accepted": false, + "not_approval": true, + "notification_delivery_metadata_accepted": false, + "notification_delivery_metadata_ref": null, + "notification_route_change_authorized": false, + "observability_scope": [ + "Prometheus config apply", + "API-owned alert deploy" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_post_incident_readback", + "request_actor_or_time_supplement", + "request_alert_state_supplement", + "request_receiver_receipt_supplement", + "request_stale_silence_supplement", + "request_freshness_or_alert_chain_supplement", + "quarantine_raw_payload", + "reject_false_green_claim", + "ready_for_monitoring_post_incident_review", + "recurrence_guard_backfill_required", + "waiting_runtime_gate" + ], + "post_change_monitoring_accepted": false, + "post_change_monitoring_ref": null, + "post_incident_readback_accepted": false, + "post_incident_readback_candidate_id": "monitoring_post_incident_readback:api_apply_prometheus_config_script", + "post_incident_readback_received": false, + "postcheck_readback_accepted": false, + "postcheck_readback_ref": null, + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "readback_fields": [ + "post_incident_readback_candidate_id", + "source_acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "receiver_receipt_readback_accepted": false, + "receiver_receipt_readback_ref": null, + "receiver_route_change_authorized": false, + "receiver_route_state_accepted": false, + "receiver_route_state_ref": null, + "recurrence_guard_accepted": false, + "recurrence_guard_ref": null, + "reload_or_no_reload_accepted": false, + "reload_or_no_reload_ref": null, + "remote_write_change_authorized": false, + "repo_sha256": "dfc154732a7858116fab423655eff8bc0b6e36f135cbd7f5e5f23745c7402aef", + "repo_source_path": "apps/api/scripts/apply_prometheus_config.sh", + "request_id": "monitoring_owner_request:api_apply_prometheus_config_script", + "required_readback_fields": [ + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "followup_owner", + "redacted_evidence_refs", + "no_secret_value_attestation", + "no_raw_payload_attestation", + "no_false_green_attestation", + "receipt_not_route_only_attestation", + "independent_postcheck_attestation", + "noise_budget_or_silence_owner_attestation" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "source_owner_response_acceptance_current", + "incident_or_change_ref_present", + "actor_attribution_present", + "change_or_outage_time_window_present", + "intent_or_break_glass_present", + "before_after_alert_state_present", + "rule_datasource_scrape_state_present", + "receiver_route_state_present", + "reload_or_no_reload_called_out", + "receiver_receipt_readback_present", + "stale_pending_resolved_review_present", + "silence_mute_dedup_inhibit_review_present", + "dashboard_trace_log_freshness_present", + "notification_delivery_metadata_present", + "alert_chain_health_not_route_only", + "cross_project_sync_present", + "rollback_or_disable_validation_present", + "post_change_monitoring_present", + "postcheck_independent", + "recurrence_guard_present", + "maintenance_window_present", + "noise_budget_owner_present", + "redacted_refs_only", + "secret_value_absent", + "raw_payload_absent", + "no_false_green", + "runtime_stays_zero", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_post_incident_readback", + "rollback_or_disable_validation_accepted": false, + "rollback_or_disable_validation_ref": null, + "rollback_owner": "pending_post_incident_readback", + "rule_datasource_scrape_state_accepted": false, + "rule_datasource_scrape_state_ref": null, + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_mute_dedup_inhibit_review_accepted": false, + "silence_mute_dedup_inhibit_review_ref": null, + "silence_policy_change_authorized": false, + "source_acceptance_candidate_id": "monitoring_owner_response_acceptance:api_apply_prometheus_config_script", + "source_line_count": 198, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "stale_pending_resolved_review_accepted": false, + "stale_pending_resolved_review_ref": null, + "status": "waiting_post_incident_readback", + "surface_id": "api_apply_prometheus_config_script", + "telegram_send_authorized": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": true + }, + { + "action_buttons_allowed": false, + "active_scan_authorized": false, + "actor_attribution_accepted": false, + "actor_attribution_ref": null, + "after_alert_state_ref": null, + "alert_chain_health_readback_accepted": false, + "alert_chain_health_readback_ref": null, + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "before_after_alert_state_accepted": false, + "before_alert_state_ref": null, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", + "add_action_button", + "store_raw_live_config", + "store_full_receiver_payload", + "collect_bot_token", + "collect_dsn_secret", + "collect_webhook_secret", + "change_alert_rule", + "change_scrape_config", + "change_dashboard", + "change_notification_policy", + "change_silence", + "change_inhibit_rule", + "accept_dashboard_up_as_alert_chain_healthy", + "skip_receiver_receipt", + "skip_stale_review", + "skip_silence_review", + "skip_rollback_validation", + "skip_post_change_monitoring", + "skip_cross_project_sync", + "live_receiver_probe" + ], + "change_intent_or_break_glass_ref": null, + "change_or_outage_time_window_accepted": false, + "change_or_outage_time_window_ref": null, + "config_kind": "host_deploy_script", + "control_tier": "C1", + "cross_project_sync_accepted": false, + "cross_project_sync_ref": null, + "dashboard_trace_log_freshness_accepted": false, + "dashboard_trace_log_freshness_ref": null, + "expected_scope": "monitoring_exporter_deploy", + "exporter_deploy_authorized": false, + "followup_owner": "pending_post_incident_readback", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "intent_or_break_glass_accepted": false, + "kubectl_action_authorized": false, + "label": "Monitoring exporter deploy script", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "maintenance_window": "pending_post_incident_readback", + "monitoring_incident_or_change_ref": null, + "no_false_green_accepted": false, + "not_approval": true, + "notification_delivery_metadata_accepted": false, + "notification_delivery_metadata_ref": null, + "notification_route_change_authorized": false, + "observability_scope": [ + "exporter deploy", + "host service restart" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_post_incident_readback", + "request_actor_or_time_supplement", + "request_alert_state_supplement", + "request_receiver_receipt_supplement", + "request_stale_silence_supplement", + "request_freshness_or_alert_chain_supplement", + "quarantine_raw_payload", + "reject_false_green_claim", + "ready_for_monitoring_post_incident_review", + "recurrence_guard_backfill_required", + "waiting_runtime_gate" + ], + "post_change_monitoring_accepted": false, + "post_change_monitoring_ref": null, + "post_incident_readback_accepted": false, + "post_incident_readback_candidate_id": "monitoring_post_incident_readback:monitoring_exporter_deploy_script", + "post_incident_readback_received": false, + "postcheck_readback_accepted": false, + "postcheck_readback_ref": null, + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "readback_fields": [ + "post_incident_readback_candidate_id", + "source_acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "receiver_receipt_readback_accepted": false, + "receiver_receipt_readback_ref": null, + "receiver_route_change_authorized": false, + "receiver_route_state_accepted": false, + "receiver_route_state_ref": null, + "recurrence_guard_accepted": false, + "recurrence_guard_ref": null, + "reload_or_no_reload_accepted": false, + "reload_or_no_reload_ref": null, + "remote_write_change_authorized": false, + "repo_sha256": "dbcbca21cf6fd5083177cb8a12c008c1aefed8e6ed05b70d738b3db37699cef3", + "repo_source_path": "ops/monitoring/deploy-exporters.sh", + "request_id": "monitoring_owner_request:monitoring_exporter_deploy_script", + "required_readback_fields": [ + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "followup_owner", + "redacted_evidence_refs", + "no_secret_value_attestation", + "no_raw_payload_attestation", + "no_false_green_attestation", + "receipt_not_route_only_attestation", + "independent_postcheck_attestation", + "noise_budget_or_silence_owner_attestation" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "source_owner_response_acceptance_current", + "incident_or_change_ref_present", + "actor_attribution_present", + "change_or_outage_time_window_present", + "intent_or_break_glass_present", + "before_after_alert_state_present", + "rule_datasource_scrape_state_present", + "receiver_route_state_present", + "reload_or_no_reload_called_out", + "receiver_receipt_readback_present", + "stale_pending_resolved_review_present", + "silence_mute_dedup_inhibit_review_present", + "dashboard_trace_log_freshness_present", + "notification_delivery_metadata_present", + "alert_chain_health_not_route_only", + "cross_project_sync_present", + "rollback_or_disable_validation_present", + "post_change_monitoring_present", + "postcheck_independent", + "recurrence_guard_present", + "maintenance_window_present", + "noise_budget_owner_present", + "redacted_refs_only", + "secret_value_absent", + "raw_payload_absent", + "no_false_green", + "runtime_stays_zero", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_post_incident_readback", + "rollback_or_disable_validation_accepted": false, + "rollback_or_disable_validation_ref": null, + "rollback_owner": "pending_post_incident_readback", + "rule_datasource_scrape_state_accepted": false, + "rule_datasource_scrape_state_ref": null, + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_mute_dedup_inhibit_review_accepted": false, + "silence_mute_dedup_inhibit_review_ref": null, + "silence_policy_change_authorized": false, + "source_acceptance_candidate_id": "monitoring_owner_response_acceptance:monitoring_exporter_deploy_script", + "source_line_count": 76, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "stale_pending_resolved_review_accepted": false, + "stale_pending_resolved_review_ref": null, + "status": "waiting_post_incident_readback", + "surface_id": "monitoring_exporter_deploy_script", + "telegram_send_authorized": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": true + }, + { + "action_buttons_allowed": false, + "active_scan_authorized": false, + "actor_attribution_accepted": false, + "actor_attribution_ref": null, + "after_alert_state_ref": null, + "alert_chain_health_readback_accepted": false, + "alert_chain_health_readback_ref": null, + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "before_after_alert_state_accepted": false, + "before_alert_state_ref": null, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", + "add_action_button", + "store_raw_live_config", + "store_full_receiver_payload", + "collect_bot_token", + "collect_dsn_secret", + "collect_webhook_secret", + "change_alert_rule", + "change_scrape_config", + "change_dashboard", + "change_notification_policy", + "change_silence", + "change_inhibit_rule", + "accept_dashboard_up_as_alert_chain_healthy", + "skip_receiver_receipt", + "skip_stale_review", + "skip_silence_review", + "skip_rollback_validation", + "skip_post_change_monitoring", + "skip_cross_project_sync", + "live_receiver_probe" + ], + "change_intent_or_break_glass_ref": null, + "change_or_outage_time_window_accepted": false, + "change_or_outage_time_window_ref": null, + "config_kind": "live_alert_sender", + "control_tier": "C1", + "cross_project_sync_accepted": false, + "cross_project_sync_ref": null, + "dashboard_trace_log_freshness_accepted": false, + "dashboard_trace_log_freshness_ref": null, + "expected_scope": "live_alert_fire_script", + "exporter_deploy_authorized": false, + "followup_owner": "pending_post_incident_readback", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "intent_or_break_glass_accepted": false, + "kubectl_action_authorized": false, + "label": "Live alert firing script", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "maintenance_window": "pending_post_incident_readback", + "monitoring_incident_or_change_ref": null, + "no_false_green_accepted": false, + "not_approval": true, + "notification_delivery_metadata_accepted": false, + "notification_delivery_metadata_ref": null, + "notification_route_change_authorized": false, + "observability_scope": [ + "live alert", + "Alertmanager ingestion", + "notification route" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_post_incident_readback", + "request_actor_or_time_supplement", + "request_alert_state_supplement", + "request_receiver_receipt_supplement", + "request_stale_silence_supplement", + "request_freshness_or_alert_chain_supplement", + "quarantine_raw_payload", + "reject_false_green_claim", + "ready_for_monitoring_post_incident_review", + "recurrence_guard_backfill_required", + "waiting_runtime_gate" + ], + "post_change_monitoring_accepted": false, + "post_change_monitoring_ref": null, + "post_incident_readback_accepted": false, + "post_incident_readback_candidate_id": "monitoring_post_incident_readback:fire_live_alert_script", + "post_incident_readback_received": false, + "postcheck_readback_accepted": false, + "postcheck_readback_ref": null, + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "readback_fields": [ + "post_incident_readback_candidate_id", + "source_acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "receiver_receipt_readback_accepted": false, + "receiver_receipt_readback_ref": null, + "receiver_route_change_authorized": false, + "receiver_route_state_accepted": false, + "receiver_route_state_ref": null, + "recurrence_guard_accepted": false, + "recurrence_guard_ref": null, + "reload_or_no_reload_accepted": false, + "reload_or_no_reload_ref": null, + "remote_write_change_authorized": false, + "repo_sha256": "ec79532dd23559103c8e436b73311d4a2b04be8655c1a804787da6e18c510acf", + "repo_source_path": "apps/api/scripts/fire_live_alert.py", + "request_id": "monitoring_owner_request:fire_live_alert_script", + "required_readback_fields": [ + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "followup_owner", + "redacted_evidence_refs", + "no_secret_value_attestation", + "no_raw_payload_attestation", + "no_false_green_attestation", + "receipt_not_route_only_attestation", + "independent_postcheck_attestation", + "noise_budget_or_silence_owner_attestation" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "source_owner_response_acceptance_current", + "incident_or_change_ref_present", + "actor_attribution_present", + "change_or_outage_time_window_present", + "intent_or_break_glass_present", + "before_after_alert_state_present", + "rule_datasource_scrape_state_present", + "receiver_route_state_present", + "reload_or_no_reload_called_out", + "receiver_receipt_readback_present", + "stale_pending_resolved_review_present", + "silence_mute_dedup_inhibit_review_present", + "dashboard_trace_log_freshness_present", + "notification_delivery_metadata_present", + "alert_chain_health_not_route_only", + "cross_project_sync_present", + "rollback_or_disable_validation_present", + "post_change_monitoring_present", + "postcheck_independent", + "recurrence_guard_present", + "maintenance_window_present", + "noise_budget_owner_present", + "redacted_refs_only", + "secret_value_absent", + "raw_payload_absent", + "no_false_green", + "runtime_stays_zero", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_post_incident_readback", + "rollback_or_disable_validation_accepted": false, + "rollback_or_disable_validation_ref": null, + "rollback_owner": "pending_post_incident_readback", + "rule_datasource_scrape_state_accepted": false, + "rule_datasource_scrape_state_ref": null, + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_mute_dedup_inhibit_review_accepted": false, + "silence_mute_dedup_inhibit_review_ref": null, + "silence_policy_change_authorized": false, + "source_acceptance_candidate_id": "monitoring_owner_response_acceptance:fire_live_alert_script", + "source_line_count": 369, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "stale_pending_resolved_review_accepted": false, + "stale_pending_resolved_review_ref": null, + "status": "waiting_post_incident_readback", + "surface_id": "fire_live_alert_script", + "telegram_send_authorized": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": true + }, + { + "action_buttons_allowed": false, + "active_scan_authorized": false, + "actor_attribution_accepted": false, + "actor_attribution_ref": null, + "after_alert_state_ref": null, + "alert_chain_health_readback_accepted": false, + "alert_chain_health_readback_ref": null, + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "before_after_alert_state_accepted": false, + "before_alert_state_ref": null, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", + "add_action_button", + "store_raw_live_config", + "store_full_receiver_payload", + "collect_bot_token", + "collect_dsn_secret", + "collect_webhook_secret", + "change_alert_rule", + "change_scrape_config", + "change_dashboard", + "change_notification_policy", + "change_silence", + "change_inhibit_rule", + "accept_dashboard_up_as_alert_chain_healthy", + "skip_receiver_receipt", + "skip_stale_review", + "skip_silence_review", + "skip_rollback_validation", + "skip_post_change_monitoring", + "skip_cross_project_sync", + "live_receiver_probe" + ], + "change_intent_or_break_glass_ref": null, + "change_or_outage_time_window_accepted": false, + "change_or_outage_time_window_ref": null, + "config_kind": "live_alert_sender", + "control_tier": "C1", + "cross_project_sync_accepted": false, + "cross_project_sync_ref": null, + "dashboard_trace_log_freshness_accepted": false, + "dashboard_trace_log_freshness_ref": null, + "expected_scope": "test_alert_fire_script", + "exporter_deploy_authorized": false, + "followup_owner": "pending_post_incident_readback", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "intent_or_break_glass_accepted": false, + "kubectl_action_authorized": false, + "label": "Test alert firing script", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "maintenance_window": "pending_post_incident_readback", + "monitoring_incident_or_change_ref": null, + "no_false_green_accepted": false, + "not_approval": true, + "notification_delivery_metadata_accepted": false, + "notification_delivery_metadata_ref": null, + "notification_route_change_authorized": false, + "observability_scope": [ + "test alert", + "notification chain smoke" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_post_incident_readback", + "request_actor_or_time_supplement", + "request_alert_state_supplement", + "request_receiver_receipt_supplement", + "request_stale_silence_supplement", + "request_freshness_or_alert_chain_supplement", + "quarantine_raw_payload", + "reject_false_green_claim", + "ready_for_monitoring_post_incident_review", + "recurrence_guard_backfill_required", + "waiting_runtime_gate" + ], + "post_change_monitoring_accepted": false, + "post_change_monitoring_ref": null, + "post_incident_readback_accepted": false, + "post_incident_readback_candidate_id": "monitoring_post_incident_readback:fire_test_alert_script", + "post_incident_readback_received": false, + "postcheck_readback_accepted": false, + "postcheck_readback_ref": null, + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "readback_fields": [ + "post_incident_readback_candidate_id", + "source_acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "receiver_receipt_readback_accepted": false, + "receiver_receipt_readback_ref": null, + "receiver_route_change_authorized": false, + "receiver_route_state_accepted": false, + "receiver_route_state_ref": null, + "recurrence_guard_accepted": false, + "recurrence_guard_ref": null, + "reload_or_no_reload_accepted": false, + "reload_or_no_reload_ref": null, + "remote_write_change_authorized": false, + "repo_sha256": "62623a452644aaad1b0997d59f7b120839a1e3605e4cbd0b58bbab2dcb727fe6", + "repo_source_path": "apps/api/scripts/fire_test_alert.py", + "request_id": "monitoring_owner_request:fire_test_alert_script", + "required_readback_fields": [ + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "followup_owner", + "redacted_evidence_refs", + "no_secret_value_attestation", + "no_raw_payload_attestation", + "no_false_green_attestation", + "receipt_not_route_only_attestation", + "independent_postcheck_attestation", + "noise_budget_or_silence_owner_attestation" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "source_owner_response_acceptance_current", + "incident_or_change_ref_present", + "actor_attribution_present", + "change_or_outage_time_window_present", + "intent_or_break_glass_present", + "before_after_alert_state_present", + "rule_datasource_scrape_state_present", + "receiver_route_state_present", + "reload_or_no_reload_called_out", + "receiver_receipt_readback_present", + "stale_pending_resolved_review_present", + "silence_mute_dedup_inhibit_review_present", + "dashboard_trace_log_freshness_present", + "notification_delivery_metadata_present", + "alert_chain_health_not_route_only", + "cross_project_sync_present", + "rollback_or_disable_validation_present", + "post_change_monitoring_present", + "postcheck_independent", + "recurrence_guard_present", + "maintenance_window_present", + "noise_budget_owner_present", + "redacted_refs_only", + "secret_value_absent", + "raw_payload_absent", + "no_false_green", + "runtime_stays_zero", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_post_incident_readback", + "rollback_or_disable_validation_accepted": false, + "rollback_or_disable_validation_ref": null, + "rollback_owner": "pending_post_incident_readback", + "rule_datasource_scrape_state_accepted": false, + "rule_datasource_scrape_state_ref": null, + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_mute_dedup_inhibit_review_accepted": false, + "silence_mute_dedup_inhibit_review_ref": null, + "silence_policy_change_authorized": false, + "source_acceptance_candidate_id": "monitoring_owner_response_acceptance:fire_test_alert_script", + "source_line_count": 318, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "stale_pending_resolved_review_accepted": false, + "stale_pending_resolved_review_ref": null, + "status": "waiting_post_incident_readback", + "surface_id": "fire_test_alert_script", + "telegram_send_authorized": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": true + }, + { + "action_buttons_allowed": false, + "active_scan_authorized": false, + "actor_attribution_accepted": false, + "actor_attribution_ref": null, + "after_alert_state_ref": null, + "alert_chain_health_readback_accepted": false, + "alert_chain_health_readback_ref": null, + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "before_after_alert_state_accepted": false, + "before_alert_state_ref": null, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", + "add_action_button", + "store_raw_live_config", + "store_full_receiver_payload", + "collect_bot_token", + "collect_dsn_secret", + "collect_webhook_secret", + "change_alert_rule", + "change_scrape_config", + "change_dashboard", + "change_notification_policy", + "change_silence", + "change_inhibit_rule", + "accept_dashboard_up_as_alert_chain_healthy", + "skip_receiver_receipt", + "skip_stale_review", + "skip_silence_review", + "skip_rollback_validation", + "skip_post_change_monitoring", + "skip_cross_project_sync", + "live_receiver_probe" + ], + "change_intent_or_break_glass_ref": null, + "change_or_outage_time_window_accepted": false, + "change_or_outage_time_window_ref": null, + "config_kind": "smoke_script", + "control_tier": "C1", + "cross_project_sync_accepted": false, + "cross_project_sync_ref": null, + "dashboard_trace_log_freshness_accepted": false, + "dashboard_trace_log_freshness_ref": null, + "expected_scope": "alert_chain_smoke", + "exporter_deploy_authorized": false, + "followup_owner": "pending_post_incident_readback", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "intent_or_break_glass_accepted": false, + "kubectl_action_authorized": false, + "label": "Alert chain smoke script", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "maintenance_window": "pending_post_incident_readback", + "monitoring_incident_or_change_ref": null, + "no_false_green_accepted": false, + "not_approval": true, + "notification_delivery_metadata_accepted": false, + "notification_delivery_metadata_ref": null, + "notification_route_change_authorized": false, + "observability_scope": [ + "alert chain E2E", + "notification delivery" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_post_incident_readback", + "request_actor_or_time_supplement", + "request_alert_state_supplement", + "request_receiver_receipt_supplement", + "request_stale_silence_supplement", + "request_freshness_or_alert_chain_supplement", + "quarantine_raw_payload", + "reject_false_green_claim", + "ready_for_monitoring_post_incident_review", + "recurrence_guard_backfill_required", + "waiting_runtime_gate" + ], + "post_change_monitoring_accepted": false, + "post_change_monitoring_ref": null, + "post_incident_readback_accepted": false, + "post_incident_readback_candidate_id": "monitoring_post_incident_readback:alert_chain_smoke_script", + "post_incident_readback_received": false, + "postcheck_readback_accepted": false, + "postcheck_readback_ref": null, + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "readback_fields": [ + "post_incident_readback_candidate_id", + "source_acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "receiver_receipt_readback_accepted": false, + "receiver_receipt_readback_ref": null, + "receiver_route_change_authorized": false, + "receiver_route_state_accepted": false, + "receiver_route_state_ref": null, + "recurrence_guard_accepted": false, + "recurrence_guard_ref": null, + "reload_or_no_reload_accepted": false, + "reload_or_no_reload_ref": null, + "remote_write_change_authorized": false, + "repo_sha256": "033506075fbdad8cb6b712712fb9af28f2c03fd676889597353f2827cfb5b9d9", + "repo_source_path": "scripts/alert_chain_smoke_test.py", + "request_id": "monitoring_owner_request:alert_chain_smoke_script", + "required_readback_fields": [ + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "followup_owner", + "redacted_evidence_refs", + "no_secret_value_attestation", + "no_raw_payload_attestation", + "no_false_green_attestation", + "receipt_not_route_only_attestation", + "independent_postcheck_attestation", + "noise_budget_or_silence_owner_attestation" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "source_owner_response_acceptance_current", + "incident_or_change_ref_present", + "actor_attribution_present", + "change_or_outage_time_window_present", + "intent_or_break_glass_present", + "before_after_alert_state_present", + "rule_datasource_scrape_state_present", + "receiver_route_state_present", + "reload_or_no_reload_called_out", + "receiver_receipt_readback_present", + "stale_pending_resolved_review_present", + "silence_mute_dedup_inhibit_review_present", + "dashboard_trace_log_freshness_present", + "notification_delivery_metadata_present", + "alert_chain_health_not_route_only", + "cross_project_sync_present", + "rollback_or_disable_validation_present", + "post_change_monitoring_present", + "postcheck_independent", + "recurrence_guard_present", + "maintenance_window_present", + "noise_budget_owner_present", + "redacted_refs_only", + "secret_value_absent", + "raw_payload_absent", + "no_false_green", + "runtime_stays_zero", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_post_incident_readback", + "rollback_or_disable_validation_accepted": false, + "rollback_or_disable_validation_ref": null, + "rollback_owner": "pending_post_incident_readback", + "rule_datasource_scrape_state_accepted": false, + "rule_datasource_scrape_state_ref": null, + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_mute_dedup_inhibit_review_accepted": false, + "silence_mute_dedup_inhibit_review_ref": null, + "silence_policy_change_authorized": false, + "source_acceptance_candidate_id": "monitoring_owner_response_acceptance:alert_chain_smoke_script", + "source_line_count": 1245, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "stale_pending_resolved_review_accepted": false, + "stale_pending_resolved_review_ref": null, + "status": "waiting_post_incident_readback", + "surface_id": "alert_chain_smoke_script", + "telegram_send_authorized": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + }, + { + "action_buttons_allowed": false, + "active_scan_authorized": false, + "actor_attribution_accepted": false, + "actor_attribution_ref": null, + "after_alert_state_ref": null, + "alert_chain_health_readback_accepted": false, + "alert_chain_health_readback_ref": null, + "alert_chain_smoke_authorized": false, + "alertmanager_reload_authorized": false, + "before_after_alert_state_accepted": false, + "before_alert_state_ref": null, + "blocked_actions": [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", + "add_action_button", + "store_raw_live_config", + "store_full_receiver_payload", + "collect_bot_token", + "collect_dsn_secret", + "collect_webhook_secret", + "change_alert_rule", + "change_scrape_config", + "change_dashboard", + "change_notification_policy", + "change_silence", + "change_inhibit_rule", + "accept_dashboard_up_as_alert_chain_healthy", + "skip_receiver_receipt", + "skip_stale_review", + "skip_silence_review", + "skip_rollback_validation", + "skip_post_change_monitoring", + "skip_cross_project_sync", + "live_receiver_probe" + ], + "change_intent_or_break_glass_ref": null, + "change_or_outage_time_window_accepted": false, + "change_or_outage_time_window_ref": null, + "config_kind": "smoke_script", + "control_tier": "C1", + "cross_project_sync_accepted": false, + "cross_project_sync_ref": null, + "dashboard_trace_log_freshness_accepted": false, + "dashboard_trace_log_freshness_ref": null, + "expected_scope": "ops_alert_chain_smoke", + "exporter_deploy_authorized": false, + "followup_owner": "pending_post_incident_readback", + "grafana_dashboard_apply_authorized": false, + "host_write_authorized": false, + "intent_or_break_glass_accepted": false, + "kubectl_action_authorized": false, + "label": "Ops alert chain smoke script", + "langfuse_config_change_authorized": false, + "live_alert_fire_authorized": false, + "maintenance_window": "pending_post_incident_readback", + "monitoring_incident_or_change_ref": null, + "no_false_green_accepted": false, + "not_approval": true, + "notification_delivery_metadata_accepted": false, + "notification_delivery_metadata_ref": null, + "notification_route_change_authorized": false, + "observability_scope": [ + "ops alert chain", + "Alertmanager / Telegram smoke" + ], + "otel_collector_reload_authorized": false, + "outcome_lanes": [ + "waiting_post_incident_readback", + "request_actor_or_time_supplement", + "request_alert_state_supplement", + "request_receiver_receipt_supplement", + "request_stale_silence_supplement", + "request_freshness_or_alert_chain_supplement", + "quarantine_raw_payload", + "reject_false_green_claim", + "ready_for_monitoring_post_incident_review", + "recurrence_guard_backfill_required", + "waiting_runtime_gate" + ], + "post_change_monitoring_accepted": false, + "post_change_monitoring_ref": null, + "post_incident_readback_accepted": false, + "post_incident_readback_candidate_id": "monitoring_post_incident_readback:ops_alert_chain_smoke_script", + "post_incident_readback_received": false, + "postcheck_readback_accepted": false, + "postcheck_readback_ref": null, + "production_write_authorized": false, + "prometheus_reload_authorized": false, + "readback_fields": [ + "post_incident_readback_candidate_id", + "source_acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "reviewer_outcome", + "followup_owner", + "not_approval" + ], + "receiver_receipt_readback_accepted": false, + "receiver_receipt_readback_ref": null, + "receiver_route_change_authorized": false, + "receiver_route_state_accepted": false, + "receiver_route_state_ref": null, + "recurrence_guard_accepted": false, + "recurrence_guard_ref": null, + "reload_or_no_reload_accepted": false, + "reload_or_no_reload_ref": null, + "remote_write_change_authorized": false, + "repo_sha256": "473189af791d6df3dfa75c00b3702b7179a5db0bd61692250bcaa79e25f1bc35", + "repo_source_path": "ops/scripts/alert_chain_smoke_test.py", + "request_id": "monitoring_owner_request:ops_alert_chain_smoke_script", + "required_readback_fields": [ + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "followup_owner", + "redacted_evidence_refs", + "no_secret_value_attestation", + "no_raw_payload_attestation", + "no_false_green_attestation", + "receipt_not_route_only_attestation", + "independent_postcheck_attestation", + "noise_budget_or_silence_owner_attestation" + ], + "requires_live_evidence": true, + "reviewer_checks": [ + "source_owner_response_acceptance_current", + "incident_or_change_ref_present", + "actor_attribution_present", + "change_or_outage_time_window_present", + "intent_or_break_glass_present", + "before_after_alert_state_present", + "rule_datasource_scrape_state_present", + "receiver_route_state_present", + "reload_or_no_reload_called_out", + "receiver_receipt_readback_present", + "stale_pending_resolved_review_present", + "silence_mute_dedup_inhibit_review_present", + "dashboard_trace_log_freshness_present", + "notification_delivery_metadata_present", + "alert_chain_health_not_route_only", + "cross_project_sync_present", + "rollback_or_disable_validation_present", + "post_change_monitoring_present", + "postcheck_independent", + "recurrence_guard_present", + "maintenance_window_present", + "noise_budget_owner_present", + "redacted_refs_only", + "secret_value_absent", + "raw_payload_absent", + "no_false_green", + "runtime_stays_zero", + "counts_transition_safe" + ], + "reviewer_outcome": "waiting_post_incident_readback", + "rollback_or_disable_validation_accepted": false, + "rollback_or_disable_validation_ref": null, + "rollback_owner": "pending_post_incident_readback", + "rule_datasource_scrape_state_accepted": false, + "rule_datasource_scrape_state_ref": null, + "runtime_gate": false, + "secret_value_collection_allowed": false, + "sentry_deploy_authorized": false, + "signoz_rule_apply_authorized": false, + "silence_mute_dedup_inhibit_review_accepted": false, + "silence_mute_dedup_inhibit_review_ref": null, + "silence_policy_change_authorized": false, + "source_acceptance_candidate_id": "monitoring_owner_response_acceptance:ops_alert_chain_smoke_script", + "source_line_count": 267, + "ssh_read_authorized": false, + "ssh_write_authorized": false, + "stale_pending_resolved_review_accepted": false, + "stale_pending_resolved_review_ref": null, + "status": "waiting_post_incident_readback", + "surface_id": "ops_alert_chain_smoke_script", + "telegram_send_authorized": false, + "webhook_receiver_change_authorized": false, + "write_capable_surface": false + } + ], + "required_readback_fields": [ + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "followup_owner", + "redacted_evidence_refs", + "no_secret_value_attestation", + "no_raw_payload_attestation", + "no_false_green_attestation", + "receipt_not_route_only_attestation", + "independent_postcheck_attestation", + "noise_budget_or_silence_owner_attestation" + ], + "reviewer_checks": [ + { + "check_id": "source_owner_response_acceptance_current", + "instruction": "來源 owner response acceptance snapshot 必須是目前版本。" + }, + { + "check_id": "incident_or_change_ref_present", + "instruction": "必須有 incident、change、outage、ticket 或 maintenance ref，不能只寫 dashboard 已恢復。" + }, + { + "check_id": "actor_attribution_present", + "instruction": "必須標示 actor role / team，不接受匿名 reload、silence、rule apply 或 receiver route change。" + }, + { + "check_id": "change_or_outage_time_window_present", + "instruction": "必須有變更 / 異常時間窗，供 alert state、receiver receipt 與跨專案同步對齊。" + }, + { + "check_id": "intent_or_break_glass_present", + "instruction": "正常變更需有 change intent；緊急變更需有 break-glass reason，但 break-glass 不等於事前批准。" + }, + { + "check_id": "before_after_alert_state_present", + "instruction": "必須有 before / after alert state ref，不得只看目前 resolved。" + }, + { + "check_id": "rule_datasource_scrape_state_present", + "instruction": "必須回讀 rule、datasource、scrape、remote write 或 exporter state；不能只看 UI up。" + }, + { + "check_id": "receiver_route_state_present", + "instruction": "必須回讀 receiver route、notification policy、webhook 或 Telegram route state。" + }, + { + "check_id": "reload_or_no_reload_called_out", + "instruction": "需明確標示是否 reload / deploy；若未 reload 也需列原因與風險。" + }, + { + "check_id": "receiver_receipt_readback_present", + "instruction": "必須提供 receiver receipt readback ref；不得用 receiver route 200 取代 receipt。" + }, + { + "check_id": "stale_pending_resolved_review_present", + "instruction": "必須檢查 stale、pending、resolved 未清、資料來源停止更新或 silent failure。" + }, + { + "check_id": "silence_mute_dedup_inhibit_review_present", + "instruction": "必須檢查 silence、mute、dedup、inhibit 或 maintenance rule 是否造成 false green。" + }, + { + "check_id": "dashboard_trace_log_freshness_present", + "instruction": "Grafana / SigNoz / Sentry / Langfuse freshness 必須有 query / trace / log metadata ref。" + }, + { + "check_id": "notification_delivery_metadata_present", + "instruction": "notification delivery 只能收脫敏 metadata ref、message id、hash 或 ticket。" + }, + { + "check_id": "alert_chain_health_not_route_only", + "instruction": "告警鏈路健康不得只用 public route 200、dashboard up、container up、CD success 或 UI 可見判定。" + }, + { + "check_id": "cross_project_sync_present", + "instruction": "若影響 AwoooP、IwoooS、agent-bounty、StockPlatform、公開網站或監控，需有跨專案同步 ref。" + }, + { + "check_id": "rollback_or_disable_validation_present", + "instruction": "必須提供 rollback / disable validation ref，包含 rollback owner 與停損條件。" + }, + { + "check_id": "post_change_monitoring_present", + "instruction": "必須有 post-change monitoring window，觀察 alert state、receipt、error、metrics 與 upstream。" + }, + { + "check_id": "postcheck_independent", + "instruction": "post-check 必須獨立於原操作人、dashboard 卡片與 UI 顯示。" + }, + { + "check_id": "recurrence_guard_present", + "instruction": "必須提出防再發 guard、owner review、change freeze 或 automation block。" + }, + { + "check_id": "maintenance_window_present", + "instruction": "後續任何 reload、deploy、rule apply、silence 或 notification send 都需維護窗口。" + }, + { + "check_id": "noise_budget_owner_present", + "instruction": "測試通知、silence、dedup、inhibit 與 alert noise 必須有 noise budget owner。" + }, + { + "check_id": "redacted_refs_only", + "instruction": "evidence 只能是脫敏 ref、hash、ticket、commit 或 artifact pointer。" + }, + { + "check_id": "secret_value_absent", + "instruction": "不得出現 token、Bot token、DSN secret、webhook secret、cookie、private key、env dump 或 partial secret。" + }, + { + "check_id": "raw_payload_absent", + "instruction": "不得保存 raw alert payload、raw receiver payload、raw config、raw log、未脫敏 screenshot 或完整 notification body。" + }, + { + "check_id": "no_false_green", + "instruction": "不得只用 route 200、dashboard up、container up、receiver reachable、CD success 或 UI 可見當告警鏈路驗收。" + }, + { + "check_id": "runtime_stays_zero", + "instruction": "readback plan 不得觸發 reload、receiver route change、silence、Telegram send、alert fire、alert chain smoke、SSH、kubectl 或 production write。" + }, + { + "check_id": "counts_transition_safe", + "instruction": "只有 reviewer record 能更新 accepted count，且不得同時開 runtime gate。" + } + ], + "schema_version": "monitoring_post_incident_readback_plan_v1", + "source_paths": [ + "docs/security/MONITORING-ALERTING-OBSERVABILITY-INVENTORY.md", + "docs/security/monitoring-alerting-observability-inventory.snapshot.json", + "docs/security/MONITORING-OWNER-REQUEST-DRAFT.md", + "docs/security/monitoring-owner-request-draft.snapshot.json", + "docs/security/MONITORING-OWNER-RESPONSE-ACCEPTANCE.md", + "docs/security/monitoring-owner-response-acceptance.snapshot.json" + ], + "source_schema_version": "monitoring_owner_response_acceptance_v1", + "source_status": "owner_response_acceptance_ledger_ready_no_runtime_action", + "status": "post_incident_readback_plan_ready_no_runtime_action", + "summary": { + "action_button_count": 0, + "active_scan_authorized_count": 0, + "actor_attribution_accepted_count": 0, + "alert_chain_health_readback_accepted_count": 0, + "alert_chain_smoke_authorized_count": 0, + "alert_rule_readback_candidate_count": 13, + "alertmanager_reload_authorized_count": 0, + "before_after_alert_state_accepted_count": 0, + "blocked_action_count": 53, + "change_or_outage_time_window_accepted_count": 0, + "coverage_percent_after_readback_plan": 70, + "cross_project_sync_accepted_count": 0, + "dashboard_trace_log_freshness_accepted_count": 0, + "deploy_or_reload_readback_candidate_count": 6, + "exporter_deploy_authorized_count": 0, + "freshness_alert_chain_review_required_candidate_count": 60, + "grafana_dashboard_apply_authorized_count": 0, + "host_write_authorized_count": 0, + "intent_or_break_glass_accepted_count": 0, + "langfuse_config_change_authorized_count": 0, + "live_alert_fire_authorized_count": 0, + "live_evidence_required_readback_candidate_count": 60, + "no_false_green_accepted_count": 0, + "no_false_green_required_candidate_count": 60, + "notification_delivery_metadata_accepted_count": 0, + "notification_route_change_authorized_count": 0, + "otel_collector_reload_authorized_count": 0, + "outcome_lane_count": 11, + "post_change_monitoring_accepted_count": 0, + "post_incident_readback_accepted_count": 0, + "post_incident_readback_received_count": 0, + "postcheck_readback_accepted_count": 0, + "production_write_authorized_count": 0, + "prometheus_reload_authorized_count": 0, + "readback_candidate_count": 60, + "readback_field_count": 39, + "receiver_receipt_readback_accepted_count": 0, + "receiver_receipt_review_required_candidate_count": 60, + "receiver_route_change_authorized_count": 0, + "receiver_route_state_accepted_count": 0, + "recurrence_guard_accepted_count": 0, + "reload_or_no_reload_accepted_count": 0, + "remote_write_change_authorized_count": 0, + "required_readback_field_count": 30, + "reviewer_check_count": 28, + "rollback_or_disable_validation_accepted_count": 0, + "rule_datasource_scrape_state_accepted_count": 0, + "runtime_gate_count": 0, + "secret_value_collection_allowed_count": 0, + "sentry_deploy_authorized_count": 0, + "signoz_rule_apply_authorized_count": 0, + "silence_mute_dedup_inhibit_review_accepted_count": 0, + "silence_policy_change_authorized_count": 0, + "source_acceptance_candidate_count": 60, + "source_acceptance_field_count": 38, + "source_alert_chain_health_accepted_count": 0, + "source_blocked_action_count": 34, + "source_live_evidence_required_candidate_count": 60, + "source_outcome_lane_count": 12, + "source_owner_response_accepted_count": 0, + "source_receiver_receipt_proof_accepted_count": 0, + "source_required_owner_field_count": 14, + "source_reviewer_check_count": 23, + "source_runtime_gate_count": 0, + "source_write_capable_acceptance_candidate_count": 11, + "stale_pending_resolved_review_accepted_count": 0, + "stale_silence_review_required_candidate_count": 60, + "telegram_send_authorized_count": 0, + "webhook_receiver_change_authorized_count": 0, + "write_capable_readback_candidate_count": 11 + } +} diff --git a/scripts/security/high-value-config-control-coverage.py b/scripts/security/high-value-config-control-coverage.py index e98298e00..f45e10f96 100644 --- a/scripts/security/high-value-config-control-coverage.py +++ b/scripts/security/high-value-config-control-coverage.py @@ -145,8 +145,8 @@ CONTROL_STATUS_BY_CATEGORY = { "next_owner_action": "補 repo owner、external agent owner、treasury owner、runtime gate owner、maintenance window、rollback owner 與 validation plan。", }, "monitoring_alerting_observability": { - "coverage_status": "alert_chain_no_false_green_backfill_ready_needs_live_evidence_receipt", - "coverage_percent": 68, + "coverage_status": "post_incident_readback_plan_ready_needs_monitoring_owner_evidence", + "coverage_percent": 70, "evidence_refs": [ "docs/security/IWOOOS-CONFIG-CONTROL-INVENTORY.md", "docs/security/MONITORING-ALERTING-OBSERVABILITY-INVENTORY.md", @@ -155,10 +155,12 @@ CONTROL_STATUS_BY_CATEGORY = { "docs/security/monitoring-owner-request-draft.snapshot.json", "docs/security/MONITORING-OWNER-RESPONSE-ACCEPTANCE.md", "docs/security/monitoring-owner-response-acceptance.snapshot.json", + "docs/security/MONITORING-POST-INCIDENT-READBACK-PLAN.md", + "docs/security/monitoring-post-incident-readback-plan.snapshot.json", "docs/schemas/monitoring_alerting_observability_inventory_v1.schema.json", ], - "current_gap": "已固定 60 份 monitoring / alerting / observability owner response acceptance candidate，並新增告警鏈路 no-false-green 回補欄位；仍缺 owner response、live config hash、rule diff、receiver diff、receipt proof、stale / silence review、post-reload readback、noise budget owner 與 maintenance window。", - "next_owner_action": "補 Prometheus / Alertmanager / Grafana / SigNoz / Sentry / Langfuse / Telegram owner、live drift evidence、reload window、receiver owner、receipt proof、stale alert review、silence / dedup review、route smoke plan、noise budget、rollback owner 與 no-secret-value evidence。", + "current_gap": "已固定 60 份 monitoring / alerting / observability owner response acceptance candidate，並新增事故後回讀計畫；actor、時間窗、改前改後 alert state、rule / datasource / scrape、receiver route、reload / no-reload、receiver receipt、stale / silence、dashboard / trace / log freshness、notification delivery、alert chain health、cross-project sync、rollback、post-change monitoring、防再發與 no-false-green 已納入只讀帳本；仍缺 owner response、事故回讀包、live config hash、rule diff、receiver diff、receipt proof、stale / silence review、post-reload readback、noise budget owner 與 maintenance window。", + "next_owner_action": "補 Prometheus / Alertmanager / Grafana / SigNoz / Sentry / Langfuse / Telegram 事故回讀包：owner、actor role / team、change / outage time window、before / after alert state、rule / datasource / scrape state、receiver route state、reload / no-reload、receiver receipt、stale alert review、silence / dedup / inhibit review、dashboard / trace / log freshness、notification metadata、alert chain health、cross-project sync、rollback owner、post-change monitoring、recurrence guard、noise budget 與 no-secret-value evidence。", }, "docker_compose_systemd_host_config": { "coverage_status": "post_incident_readback_plan_ready_needs_host_service_owner_evidence", @@ -397,6 +399,7 @@ def build_report(root: Path, generated_at: str | None) -> dict[str, Any]: "owner_response_acceptance_ledger_ready_needs_network_owner", "owner_response_acceptance_ledger_ready_needs_live_route_evidence", "alert_chain_no_false_green_backfill_ready_needs_live_evidence_receipt", + "post_incident_readback_plan_ready_needs_monitoring_owner_evidence", "change_evidence_acceptance_ready_needs_network_owner_evidence", "incident_change_evidence_acceptance_ready_needs_network_owner_evidence", "post_incident_readback_plan_ready_needs_network_owner_evidence", diff --git a/scripts/security/iwooos-config-control-guard.py b/scripts/security/iwooos-config-control-guard.py index 5a9ae79f8..33f042d69 100644 --- a/scripts/security/iwooos-config-control-guard.py +++ b/scripts/security/iwooos-config-control-guard.py @@ -25,7 +25,7 @@ EXPECTED_CATEGORIES = { "public_admin_api_runtime_config": 66, "backup_restore_credential": 64, "agent_bounty_protocol_runtime": 68, - "monitoring_alerting_observability": 68, + "monitoring_alerting_observability": 70, "docker_compose_systemd_host_config": 64, "ssh_firewall_network_access": 64, "ai_provider_model_routing": 64, @@ -65,6 +65,7 @@ REQUIRED_CONTROL_DOCS = [ "docs/security/CD-RUNNER-SECRET-INJECTION-CHANGE-EVIDENCE-ACCEPTANCE.md", "docs/security/PUBLIC-RUNTIME-CONFIG-CHANGE-EVIDENCE-ACCEPTANCE.md", "docs/security/MONITORING-OWNER-REQUEST-DRAFT.md", + "docs/security/MONITORING-POST-INCIDENT-READBACK-PLAN.md", "docs/security/AI-PROVIDER-OWNER-RESPONSE-ACCEPTANCE.md", "docs/security/AGENT-BOUNTY-OWNER-REQUEST-DRAFT.md", "docs/security/SECURITY-SUPPLY-CHAIN-CONTRACT-MANIFEST.md", @@ -662,6 +663,55 @@ ARTIFACT_SPECS = [ "runtime_gate_count": 0, }, }, + { + "label": "monitoring post incident readback plan", + "path": "docs/security/monitoring-post-incident-readback-plan.snapshot.json", + "schema": "monitoring_post_incident_readback_plan_v1", + "status": "post_incident_readback_plan_ready_no_runtime_action", + "list_counts": { + "readback_candidates": 60, + "blocked_actions": 53, + "reviewer_checks": 28, + "outcome_lanes": 11, + "required_readback_fields": 30, + }, + "summary_counts": { + "source_acceptance_candidate_count": 60, + "source_write_capable_acceptance_candidate_count": 11, + "source_live_evidence_required_candidate_count": 60, + "source_acceptance_field_count": 38, + "source_required_owner_field_count": 14, + "source_reviewer_check_count": 23, + "source_outcome_lane_count": 12, + "source_blocked_action_count": 34, + "source_owner_response_accepted_count": 0, + "source_alert_chain_health_accepted_count": 0, + "source_receiver_receipt_proof_accepted_count": 0, + "source_runtime_gate_count": 0, + "readback_candidate_count": 60, + "write_capable_readback_candidate_count": 11, + "live_evidence_required_readback_candidate_count": 60, + "alert_rule_readback_candidate_count": 13, + "deploy_or_reload_readback_candidate_count": 6, + "receiver_receipt_review_required_candidate_count": 60, + "stale_silence_review_required_candidate_count": 60, + "freshness_alert_chain_review_required_candidate_count": 60, + "no_false_green_required_candidate_count": 60, + "readback_field_count": 39, + "required_readback_field_count": 30, + "reviewer_check_count": 28, + "outcome_lane_count": 11, + "blocked_action_count": 53, + "post_incident_readback_received_count": 0, + "post_incident_readback_accepted_count": 0, + "receiver_receipt_readback_accepted_count": 0, + "stale_pending_resolved_review_accepted_count": 0, + "silence_mute_dedup_inhibit_review_accepted_count": 0, + "alert_chain_health_readback_accepted_count": 0, + "runtime_gate_count": 0, + "coverage_percent_after_readback_plan": 70, + }, + }, { "label": "ai provider owner response acceptance", "path": "docs/security/ai-provider-owner-response-acceptance.snapshot.json", diff --git a/scripts/security/monitoring-post-incident-readback-plan.py b/scripts/security/monitoring-post-incident-readback-plan.py new file mode 100644 index 000000000..6d2f93a97 --- /dev/null +++ b/scripts/security/monitoring-post-incident-readback-plan.py @@ -0,0 +1,514 @@ +#!/usr/bin/env python3 +""" +IwoooS Monitoring / Alerting / Observability post-incident readback 只讀計畫產生器。 + +本工具讀取 monitoring owner response acceptance snapshot，建立事故後回讀 +計畫：誰改了告警 / receiver / silence、何時異常、改前改後 alert state、 +receiver 是否收到、stale / silence 是否造成 false green、如何 rollback 與防再發。 +它不連 live Prometheus、不 reload Alertmanager、不套用 Grafana / SigNoz / +Sentry / Langfuse、不 reload OTEL、不改 receiver route、不建立 silence、 +不送 Telegram、不 fire live alert、不跑 alert chain smoke、不 SSH、不 kubectl、 +不讀 secret value、不保存 raw alert payload、不寫 production。 +""" + +from __future__ import annotations + +import argparse +import json +import subprocess +import sys +from datetime import datetime, timedelta, timezone +from pathlib import Path +from typing import Any + + +TAIPEI = timezone(timedelta(hours=8)) + +READBACK_FIELDS = [ + "post_incident_readback_candidate_id", + "source_acceptance_candidate_id", + "request_id", + "surface_id", + "label", + "expected_scope", + "config_kind", + "observability_scope", + "control_tier", + "repo_source_path", + "repo_sha256", + "source_line_count", + "write_capable_surface", + "requires_live_evidence", + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "reviewer_outcome", + "followup_owner", + "not_approval", +] + +REQUIRED_READBACK_FIELDS = [ + "monitoring_incident_or_change_ref", + "actor_attribution_ref", + "change_or_outage_time_window_ref", + "change_intent_or_break_glass_ref", + "before_alert_state_ref", + "after_alert_state_ref", + "rule_datasource_scrape_state_ref", + "receiver_route_state_ref", + "reload_or_no_reload_ref", + "receiver_receipt_readback_ref", + "stale_pending_resolved_review_ref", + "silence_mute_dedup_inhibit_review_ref", + "dashboard_trace_log_freshness_ref", + "notification_delivery_metadata_ref", + "alert_chain_health_readback_ref", + "cross_project_sync_ref", + "rollback_or_disable_validation_ref", + "post_change_monitoring_ref", + "postcheck_readback_ref", + "recurrence_guard_ref", + "maintenance_window", + "rollback_owner", + "followup_owner", + "redacted_evidence_refs", + "no_secret_value_attestation", + "no_raw_payload_attestation", + "no_false_green_attestation", + "receipt_not_route_only_attestation", + "independent_postcheck_attestation", + "noise_budget_or_silence_owner_attestation", +] + +REVIEWER_CHECKS = [ + {"check_id": "source_owner_response_acceptance_current", "instruction": "來源 owner response acceptance snapshot 必須是目前版本。"}, + {"check_id": "incident_or_change_ref_present", "instruction": "必須有 incident、change、outage、ticket 或 maintenance ref，不能只寫 dashboard 已恢復。"}, + {"check_id": "actor_attribution_present", "instruction": "必須標示 actor role / team，不接受匿名 reload、silence、rule apply 或 receiver route change。"}, + {"check_id": "change_or_outage_time_window_present", "instruction": "必須有變更 / 異常時間窗，供 alert state、receiver receipt 與跨專案同步對齊。"}, + {"check_id": "intent_or_break_glass_present", "instruction": "正常變更需有 change intent；緊急變更需有 break-glass reason，但 break-glass 不等於事前批准。"}, + {"check_id": "before_after_alert_state_present", "instruction": "必須有 before / after alert state ref，不得只看目前 resolved。"}, + {"check_id": "rule_datasource_scrape_state_present", "instruction": "必須回讀 rule、datasource、scrape、remote write 或 exporter state；不能只看 UI up。"}, + {"check_id": "receiver_route_state_present", "instruction": "必須回讀 receiver route、notification policy、webhook 或 Telegram route state。"}, + {"check_id": "reload_or_no_reload_called_out", "instruction": "需明確標示是否 reload / deploy；若未 reload 也需列原因與風險。"}, + {"check_id": "receiver_receipt_readback_present", "instruction": "必須提供 receiver receipt readback ref；不得用 receiver route 200 取代 receipt。"}, + {"check_id": "stale_pending_resolved_review_present", "instruction": "必須檢查 stale、pending、resolved 未清、資料來源停止更新或 silent failure。"}, + {"check_id": "silence_mute_dedup_inhibit_review_present", "instruction": "必須檢查 silence、mute、dedup、inhibit 或 maintenance rule 是否造成 false green。"}, + {"check_id": "dashboard_trace_log_freshness_present", "instruction": "Grafana / SigNoz / Sentry / Langfuse freshness 必須有 query / trace / log metadata ref。"}, + {"check_id": "notification_delivery_metadata_present", "instruction": "notification delivery 只能收脫敏 metadata ref、message id、hash 或 ticket。"}, + {"check_id": "alert_chain_health_not_route_only", "instruction": "告警鏈路健康不得只用 public route 200、dashboard up、container up、CD success 或 UI 可見判定。"}, + {"check_id": "cross_project_sync_present", "instruction": "若影響 AwoooP、IwoooS、agent-bounty、StockPlatform、公開網站或監控，需有跨專案同步 ref。"}, + {"check_id": "rollback_or_disable_validation_present", "instruction": "必須提供 rollback / disable validation ref，包含 rollback owner 與停損條件。"}, + {"check_id": "post_change_monitoring_present", "instruction": "必須有 post-change monitoring window，觀察 alert state、receipt、error、metrics 與 upstream。"}, + {"check_id": "postcheck_independent", "instruction": "post-check 必須獨立於原操作人、dashboard 卡片與 UI 顯示。"}, + {"check_id": "recurrence_guard_present", "instruction": "必須提出防再發 guard、owner review、change freeze 或 automation block。"}, + {"check_id": "maintenance_window_present", "instruction": "後續任何 reload、deploy、rule apply、silence 或 notification send 都需維護窗口。"}, + {"check_id": "noise_budget_owner_present", "instruction": "測試通知、silence、dedup、inhibit 與 alert noise 必須有 noise budget owner。"}, + {"check_id": "redacted_refs_only", "instruction": "evidence 只能是脫敏 ref、hash、ticket、commit 或 artifact pointer。"}, + {"check_id": "secret_value_absent", "instruction": "不得出現 token、Bot token、DSN secret、webhook secret、cookie、private key、env dump 或 partial secret。"}, + {"check_id": "raw_payload_absent", "instruction": "不得保存 raw alert payload、raw receiver payload、raw config、raw log、未脫敏 screenshot 或完整 notification body。"}, + {"check_id": "no_false_green", "instruction": "不得只用 route 200、dashboard up、container up、receiver reachable、CD success 或 UI 可見當告警鏈路驗收。"}, + {"check_id": "runtime_stays_zero", "instruction": "readback plan 不得觸發 reload、receiver route change、silence、Telegram send、alert fire、alert chain smoke、SSH、kubectl 或 production write。"}, + {"check_id": "counts_transition_safe", "instruction": "只有 reviewer record 能更新 accepted count，且不得同時開 runtime gate。"}, +] + +OUTCOME_LANES = [ + {"lane_id": "waiting_post_incident_readback", "meaning": "尚未收到監控 / 告警事故回讀包；所有 accepted / runtime count 維持 0。"}, + {"lane_id": "request_actor_or_time_supplement", "meaning": "缺 actor、change / outage time window、intent 或 break-glass reason 時要求補件。"}, + {"lane_id": "request_alert_state_supplement", "meaning": "缺 before / after alert state、rule、datasource、scrape、remote write 或 exporter state 時要求補件。"}, + {"lane_id": "request_receiver_receipt_supplement", "meaning": "缺 receiver route state、receipt proof、delivery metadata 或 notification owner 時要求補件。"}, + {"lane_id": "request_stale_silence_supplement", "meaning": "缺 stale / pending / resolved、silence、mute、dedup、inhibit 或 maintenance rule review 時要求補件。"}, + {"lane_id": "request_freshness_or_alert_chain_supplement", "meaning": "缺 dashboard / trace / log freshness、alert chain health、post-change monitoring 或 rollback validation 時要求補件。"}, + {"lane_id": "quarantine_raw_payload", "meaning": "收到 secret、raw config、raw alert payload、raw receiver payload、未脫敏 log 或截圖時只能隔離。"}, + {"lane_id": "reject_false_green_claim", "meaning": "把 route 200、dashboard up、container up、receiver reachable、CD success 或 UI 可見當驗收時拒收。"}, + {"lane_id": "ready_for_monitoring_post_incident_review", "meaning": "metadata 合格後，只能進 monitoring post-incident reviewer review。"}, + {"lane_id": "recurrence_guard_backfill_required", "meaning": "需補防再發 guard、owner review、change freeze、automation block 或 noise budget owner。"}, + {"lane_id": "waiting_runtime_gate", "meaning": "即使 readback accepted，runtime gate 仍需獨立人工批准。"}, +] + +BLOCKED_ACTIONS = [ + "prometheus_reload", + "alertmanager_reload", + "grafana_dashboard_apply", + "signoz_rule_apply", + "sentry_deploy", + "langfuse_config_change", + "otel_collector_reload", + "receiver_route_change", + "silence_policy_change", + "telegram_send", + "notification_route_change", + "webhook_receiver_change", + "remote_write_change", + "exporter_deploy", + "live_alert_fire", + "alert_chain_smoke", + "ssh_read", + "ssh_write", + "kubectl_action", + "secret_value_collection", + "host_write", + "active_scan", + "production_write", + "runtime_gate_open", + "raw_monitoring_payload_storage", + "accept_secret_value_evidence", + "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", + "add_action_button", + "store_raw_live_config", + "store_full_receiver_payload", + "collect_bot_token", + "collect_dsn_secret", + "collect_webhook_secret", + "change_alert_rule", + "change_scrape_config", + "change_dashboard", + "change_notification_policy", + "change_silence", + "change_inhibit_rule", + "accept_dashboard_up_as_alert_chain_healthy", + "skip_receiver_receipt", + "skip_stale_review", + "skip_silence_review", + "skip_rollback_validation", + "skip_post_change_monitoring", + "skip_cross_project_sync", + "live_receiver_probe", +] + + +def git_short_sha(root: Path) -> str: + try: + result = subprocess.run( + ["git", "rev-parse", "--short", "HEAD"], + cwd=root, + check=True, + capture_output=True, + text=True, + ) + return result.stdout.strip() + except Exception: + return "unknown" + + +def load_json(path: Path) -> dict[str, Any]: + return json.loads(path.read_text(encoding="utf-8")) + + +def build_candidate(source: dict[str, Any]) -> dict[str, Any]: + surface_id = source["surface_id"] + return { + "post_incident_readback_candidate_id": f"monitoring_post_incident_readback:{surface_id}", + "status": "waiting_post_incident_readback", + "source_acceptance_candidate_id": source["acceptance_candidate_id"], + "request_id": source["request_id"], + "surface_id": surface_id, + "label": source["label"], + "expected_scope": source["expected_scope"], + "config_kind": source["config_kind"], + "observability_scope": source["observability_scope"], + "control_tier": source["control_tier"], + "repo_source_path": source["repo_source_path"], + "repo_sha256": source["repo_sha256"], + "source_line_count": source["source_line_count"], + "write_capable_surface": source["write_capable_surface"], + "requires_live_evidence": source["requires_live_evidence"], + "monitoring_incident_or_change_ref": None, + "actor_attribution_ref": None, + "change_or_outage_time_window_ref": None, + "change_intent_or_break_glass_ref": None, + "before_alert_state_ref": None, + "after_alert_state_ref": None, + "rule_datasource_scrape_state_ref": None, + "receiver_route_state_ref": None, + "reload_or_no_reload_ref": None, + "receiver_receipt_readback_ref": None, + "stale_pending_resolved_review_ref": None, + "silence_mute_dedup_inhibit_review_ref": None, + "dashboard_trace_log_freshness_ref": None, + "notification_delivery_metadata_ref": None, + "alert_chain_health_readback_ref": None, + "cross_project_sync_ref": None, + "rollback_or_disable_validation_ref": None, + "post_change_monitoring_ref": None, + "postcheck_readback_ref": None, + "recurrence_guard_ref": None, + "maintenance_window": "pending_post_incident_readback", + "rollback_owner": "pending_post_incident_readback", + "reviewer_outcome": "waiting_post_incident_readback", + "followup_owner": "pending_post_incident_readback", + "readback_fields": READBACK_FIELDS, + "required_readback_fields": REQUIRED_READBACK_FIELDS, + "reviewer_checks": [item["check_id"] for item in REVIEWER_CHECKS], + "outcome_lanes": [item["lane_id"] for item in OUTCOME_LANES], + "blocked_actions": BLOCKED_ACTIONS, + "not_approval": True, + "post_incident_readback_received": False, + "post_incident_readback_accepted": False, + "actor_attribution_accepted": False, + "change_or_outage_time_window_accepted": False, + "intent_or_break_glass_accepted": False, + "before_after_alert_state_accepted": False, + "rule_datasource_scrape_state_accepted": False, + "receiver_route_state_accepted": False, + "reload_or_no_reload_accepted": False, + "receiver_receipt_readback_accepted": False, + "stale_pending_resolved_review_accepted": False, + "silence_mute_dedup_inhibit_review_accepted": False, + "dashboard_trace_log_freshness_accepted": False, + "notification_delivery_metadata_accepted": False, + "alert_chain_health_readback_accepted": False, + "cross_project_sync_accepted": False, + "rollback_or_disable_validation_accepted": False, + "post_change_monitoring_accepted": False, + "postcheck_readback_accepted": False, + "recurrence_guard_accepted": False, + "no_false_green_accepted": False, + "prometheus_reload_authorized": False, + "alertmanager_reload_authorized": False, + "grafana_dashboard_apply_authorized": False, + "signoz_rule_apply_authorized": False, + "sentry_deploy_authorized": False, + "langfuse_config_change_authorized": False, + "otel_collector_reload_authorized": False, + "receiver_route_change_authorized": False, + "silence_policy_change_authorized": False, + "telegram_send_authorized": False, + "notification_route_change_authorized": False, + "webhook_receiver_change_authorized": False, + "remote_write_change_authorized": False, + "exporter_deploy_authorized": False, + "live_alert_fire_authorized": False, + "alert_chain_smoke_authorized": False, + "ssh_read_authorized": False, + "ssh_write_authorized": False, + "kubectl_action_authorized": False, + "secret_value_collection_allowed": False, + "host_write_authorized": False, + "active_scan_authorized": False, + "production_write_authorized": False, + "runtime_gate": False, + "action_buttons_allowed": False, + } + + +def build_report(root: Path, source_report: dict[str, Any], generated_at: str | None) -> dict[str, Any]: + report_time = generated_at or datetime.now(TAIPEI).isoformat(timespec="seconds") + candidates = [build_candidate(item) for item in source_report.get("acceptance_candidates", [])] + write_capable = [item for item in candidates if item["write_capable_surface"]] + live_evidence = [item for item in candidates if item["requires_live_evidence"]] + alert_rule = [ + item + for item in candidates + if item["config_kind"] in {"prometheus_alert_rules", "grafana_alert_rules", "signoz_alert_rules"} + ] + deploy_or_reload = [ + item + for item in candidates + if item["config_kind"] in {"reload_capable_script", "sentry_deploy_script", "host_deploy_script"} + ] + source_summary = source_report.get("summary", {}) + + return { + "schema_version": "monitoring_post_incident_readback_plan_v1", + "generated_at": report_time, + "git_commit": git_short_sha(root), + "source_schema_version": source_report.get("schema_version"), + "source_status": source_report.get("status"), + "status": "post_incident_readback_plan_ready_no_runtime_action", + "summary": { + "source_acceptance_candidate_count": source_summary.get("acceptance_candidate_count", 0), + "source_write_capable_acceptance_candidate_count": source_summary.get( + "write_capable_acceptance_candidate_count", 0 + ), + "source_live_evidence_required_candidate_count": source_summary.get( + "live_evidence_required_candidate_count", 0 + ), + "source_acceptance_field_count": source_summary.get("acceptance_field_count", 0), + "source_required_owner_field_count": source_summary.get("required_owner_field_count", 0), + "source_reviewer_check_count": source_summary.get("reviewer_check_count", 0), + "source_outcome_lane_count": source_summary.get("outcome_lane_count", 0), + "source_blocked_action_count": source_summary.get("blocked_action_count", 0), + "source_owner_response_accepted_count": source_summary.get("owner_response_accepted_count", 0), + "source_alert_chain_health_accepted_count": source_summary.get( + "alert_chain_health_accepted_count", 0 + ), + "source_receiver_receipt_proof_accepted_count": source_summary.get( + "receiver_receipt_proof_accepted_count", 0 + ), + "source_runtime_gate_count": source_summary.get("runtime_gate_count", 0), + "readback_candidate_count": len(candidates), + "write_capable_readback_candidate_count": len(write_capable), + "live_evidence_required_readback_candidate_count": len(live_evidence), + "alert_rule_readback_candidate_count": len(alert_rule), + "deploy_or_reload_readback_candidate_count": len(deploy_or_reload), + "receiver_receipt_review_required_candidate_count": len(candidates), + "stale_silence_review_required_candidate_count": len(candidates), + "freshness_alert_chain_review_required_candidate_count": len(candidates), + "no_false_green_required_candidate_count": len(candidates), + "readback_field_count": len(READBACK_FIELDS), + "required_readback_field_count": len(REQUIRED_READBACK_FIELDS), + "reviewer_check_count": len(REVIEWER_CHECKS), + "outcome_lane_count": len(OUTCOME_LANES), + "blocked_action_count": len(BLOCKED_ACTIONS), + "post_incident_readback_received_count": 0, + "post_incident_readback_accepted_count": 0, + "actor_attribution_accepted_count": 0, + "change_or_outage_time_window_accepted_count": 0, + "intent_or_break_glass_accepted_count": 0, + "before_after_alert_state_accepted_count": 0, + "rule_datasource_scrape_state_accepted_count": 0, + "receiver_route_state_accepted_count": 0, + "reload_or_no_reload_accepted_count": 0, + "receiver_receipt_readback_accepted_count": 0, + "stale_pending_resolved_review_accepted_count": 0, + "silence_mute_dedup_inhibit_review_accepted_count": 0, + "dashboard_trace_log_freshness_accepted_count": 0, + "notification_delivery_metadata_accepted_count": 0, + "alert_chain_health_readback_accepted_count": 0, + "cross_project_sync_accepted_count": 0, + "rollback_or_disable_validation_accepted_count": 0, + "post_change_monitoring_accepted_count": 0, + "postcheck_readback_accepted_count": 0, + "recurrence_guard_accepted_count": 0, + "no_false_green_accepted_count": 0, + "prometheus_reload_authorized_count": 0, + "alertmanager_reload_authorized_count": 0, + "grafana_dashboard_apply_authorized_count": 0, + "signoz_rule_apply_authorized_count": 0, + "sentry_deploy_authorized_count": 0, + "langfuse_config_change_authorized_count": 0, + "otel_collector_reload_authorized_count": 0, + "receiver_route_change_authorized_count": 0, + "silence_policy_change_authorized_count": 0, + "telegram_send_authorized_count": 0, + "notification_route_change_authorized_count": 0, + "webhook_receiver_change_authorized_count": 0, + "remote_write_change_authorized_count": 0, + "exporter_deploy_authorized_count": 0, + "live_alert_fire_authorized_count": 0, + "alert_chain_smoke_authorized_count": 0, + "secret_value_collection_allowed_count": 0, + "host_write_authorized_count": 0, + "active_scan_authorized_count": 0, + "production_write_authorized_count": 0, + "runtime_gate_count": 0, + "action_button_count": 0, + "coverage_percent_after_readback_plan": 70, + }, + "readback_candidates": candidates, + "required_readback_fields": REQUIRED_READBACK_FIELDS, + "reviewer_checks": REVIEWER_CHECKS, + "outcome_lanes": OUTCOME_LANES, + "blocked_actions": BLOCKED_ACTIONS, + "execution_boundaries": { + "not_authorization": True, + "prometheus_reload_authorized": False, + "alertmanager_reload_authorized": False, + "grafana_dashboard_apply_authorized": False, + "signoz_rule_apply_authorized": False, + "sentry_deploy_authorized": False, + "langfuse_config_change_authorized": False, + "otel_collector_reload_authorized": False, + "receiver_route_change_authorized": False, + "silence_policy_change_authorized": False, + "telegram_send_authorized": False, + "notification_route_change_authorized": False, + "webhook_receiver_change_authorized": False, + "remote_write_change_authorized": False, + "exporter_deploy_authorized": False, + "live_alert_fire_authorized": False, + "alert_chain_smoke_authorized": False, + "ssh_read_authorized": False, + "ssh_write_authorized": False, + "kubectl_action_authorized": False, + "secret_value_collection_allowed": False, + "host_write_authorized": False, + "active_scan_authorized": False, + "production_write_authorized": False, + "runtime_gate": False, + "action_buttons_allowed": False, + "raw_alert_payload_storage_allowed": False, + "false_green_acceptance_authorized": False, + }, + "source_paths": [ + "docs/security/MONITORING-ALERTING-OBSERVABILITY-INVENTORY.md", + "docs/security/monitoring-alerting-observability-inventory.snapshot.json", + "docs/security/MONITORING-OWNER-REQUEST-DRAFT.md", + "docs/security/monitoring-owner-request-draft.snapshot.json", + "docs/security/MONITORING-OWNER-RESPONSE-ACCEPTANCE.md", + "docs/security/monitoring-owner-response-acceptance.snapshot.json", + ], + "mode": "metadata_only_no_live_monitoring_no_reload_no_alert_send", + "operator_interpretation": [ + "此計畫只定義 Monitoring / Alerting / Observability 事故後回讀欄位，不代表 live monitoring 已讀取或可讀取。", + "route 200、dashboard up、container up、receiver reachable、CD success、UI 可見都不能單獨當成告警鏈路事故驗收。", + "未來若要 reload、rule apply、receiver route change、silence、Telegram send、alert fire 或 alert chain smoke，必須另有維護窗口、rollback owner 與人工批准。", + ], + } + + +def main() -> int: + parser = argparse.ArgumentParser(description="IwoooS Monitoring / Alerting 事故後回讀只讀計畫產生器") + parser.add_argument("--root", default=".", help="repo root") + parser.add_argument( + "--source-report", + default="docs/security/monitoring-owner-response-acceptance.snapshot.json", + help="monitoring-owner-response-acceptance.py 輸出的 JSON", + ) + parser.add_argument("--output", help="寫出 JSON 報告") + parser.add_argument("--generated-at", help="固定報告時間，供 committed snapshot 使用") + args = parser.parse_args() + + root = Path(args.root).resolve() + source_report = load_json(root / args.source_report) + report = build_report(root, source_report, args.generated_at) + payload = json.dumps(report, ensure_ascii=False, indent=2, sort_keys=True) + + if args.output: + output = Path(args.output) + output.parent.mkdir(parents=True, exist_ok=True) + output.write_text(payload + "\n", encoding="utf-8") + else: + print(payload) + + summary = report["summary"] + print( + "MONITORING_POST_INCIDENT_READBACK_PLAN_OK " + f"candidates={summary['readback_candidate_count']} " + f"write_capable={summary['write_capable_readback_candidate_count']} " + f"checks={summary['reviewer_check_count']} " + f"lanes={summary['outcome_lane_count']} " + f"accepted={summary['post_incident_readback_accepted_count']} " + f"runtime_gate={summary['runtime_gate_count']}", + file=sys.stderr, + ) + return 0 + + +if __name__ == "__main__": + raise SystemExit(main()) diff --git a/scripts/security/security-mirror-progress-guard.py b/scripts/security/security-mirror-progress-guard.py index 3a505f901..1f6b2496e 100755 --- a/scripts/security/security-mirror-progress-guard.py +++ b/scripts/security/security-mirror-progress-guard.py @@ -185,6 +185,9 @@ def validate(root: Path) -> None: monitoring_owner_response_acceptance = load_json( security_dir / "monitoring-owner-response-acceptance.snapshot.json" ) + monitoring_post_incident_readback_plan = load_json( + security_dir / "monitoring-post-incident-readback-plan.snapshot.json" + ) ai_provider_owner_response_acceptance = load_json( security_dir / "ai-provider-owner-response-acceptance.snapshot.json" ) @@ -3306,12 +3309,12 @@ def validate(root: Path) -> None: assert_equal( "high_value_config_coverage.coverage_categories.monitoring.coverage_percent", monitoring_category["coverage_percent"], - 68, + 70, ) assert_equal( "high_value_config_coverage.coverage_categories.monitoring.coverage_status", monitoring_category["coverage_status"], - "alert_chain_no_false_green_backfill_ready_needs_live_evidence_receipt", + "post_incident_readback_plan_ready_needs_monitoring_owner_evidence", ) for evidence_ref in [ "docs/security/MONITORING-ALERTING-OBSERVABILITY-INVENTORY.md", @@ -3320,6 +3323,8 @@ def validate(root: Path) -> None: "docs/security/monitoring-owner-request-draft.snapshot.json", "docs/security/MONITORING-OWNER-RESPONSE-ACCEPTANCE.md", "docs/security/monitoring-owner-response-acceptance.snapshot.json", + "docs/security/MONITORING-POST-INCIDENT-READBACK-PLAN.md", + "docs/security/monitoring-post-incident-readback-plan.snapshot.json", "docs/schemas/monitoring_alerting_observability_inventory_v1.schema.json", ]: assert_contains( @@ -5979,6 +5984,241 @@ def validate(root: Path) -> None: f"monitoring_owner_response_acceptance.{item['acceptance_candidate_id']}.{false_key}", item[false_key], ) + assert_equal( + "monitoring_post_incident_readback_plan.schema", + monitoring_post_incident_readback_plan["schema_version"], + "monitoring_post_incident_readback_plan_v1", + ) + assert_equal( + "monitoring_post_incident_readback_plan.status", + monitoring_post_incident_readback_plan["status"], + "post_incident_readback_plan_ready_no_runtime_action", + ) + assert_equal( + "monitoring_post_incident_readback_plan.source_schema_version", + monitoring_post_incident_readback_plan["source_schema_version"], + "monitoring_owner_response_acceptance_v1", + ) + assert_equal( + "monitoring_post_incident_readback_plan.source_status", + monitoring_post_incident_readback_plan["source_status"], + "owner_response_acceptance_ledger_ready_no_runtime_action", + ) + for source_path in [ + "docs/security/MONITORING-ALERTING-OBSERVABILITY-INVENTORY.md", + "docs/security/monitoring-alerting-observability-inventory.snapshot.json", + "docs/security/MONITORING-OWNER-REQUEST-DRAFT.md", + "docs/security/monitoring-owner-request-draft.snapshot.json", + "docs/security/MONITORING-OWNER-RESPONSE-ACCEPTANCE.md", + "docs/security/monitoring-owner-response-acceptance.snapshot.json", + ]: + assert_contains( + "monitoring_post_incident_readback_plan.source_paths", + monitoring_post_incident_readback_plan["source_paths"], + source_path, + ) + expected_monitoring_post_incident_summary = { + "source_acceptance_candidate_count": 60, + "source_write_capable_acceptance_candidate_count": 11, + "source_live_evidence_required_candidate_count": 60, + "source_acceptance_field_count": 38, + "source_required_owner_field_count": 14, + "source_reviewer_check_count": 23, + "source_outcome_lane_count": 12, + "source_blocked_action_count": 34, + "source_owner_response_accepted_count": 0, + "source_alert_chain_health_accepted_count": 0, + "source_receiver_receipt_proof_accepted_count": 0, + "source_runtime_gate_count": 0, + "readback_candidate_count": 60, + "write_capable_readback_candidate_count": 11, + "live_evidence_required_readback_candidate_count": 60, + "alert_rule_readback_candidate_count": 13, + "deploy_or_reload_readback_candidate_count": 6, + "receiver_receipt_review_required_candidate_count": 60, + "stale_silence_review_required_candidate_count": 60, + "freshness_alert_chain_review_required_candidate_count": 60, + "no_false_green_required_candidate_count": 60, + "readback_field_count": 39, + "required_readback_field_count": 30, + "reviewer_check_count": 28, + "outcome_lane_count": 11, + "blocked_action_count": 53, + "post_incident_readback_received_count": 0, + "post_incident_readback_accepted_count": 0, + "actor_attribution_accepted_count": 0, + "change_or_outage_time_window_accepted_count": 0, + "intent_or_break_glass_accepted_count": 0, + "before_after_alert_state_accepted_count": 0, + "rule_datasource_scrape_state_accepted_count": 0, + "receiver_route_state_accepted_count": 0, + "reload_or_no_reload_accepted_count": 0, + "receiver_receipt_readback_accepted_count": 0, + "stale_pending_resolved_review_accepted_count": 0, + "silence_mute_dedup_inhibit_review_accepted_count": 0, + "dashboard_trace_log_freshness_accepted_count": 0, + "notification_delivery_metadata_accepted_count": 0, + "alert_chain_health_readback_accepted_count": 0, + "cross_project_sync_accepted_count": 0, + "rollback_or_disable_validation_accepted_count": 0, + "post_change_monitoring_accepted_count": 0, + "postcheck_readback_accepted_count": 0, + "recurrence_guard_accepted_count": 0, + "no_false_green_accepted_count": 0, + "prometheus_reload_authorized_count": 0, + "alertmanager_reload_authorized_count": 0, + "grafana_dashboard_apply_authorized_count": 0, + "signoz_rule_apply_authorized_count": 0, + "sentry_deploy_authorized_count": 0, + "langfuse_config_change_authorized_count": 0, + "otel_collector_reload_authorized_count": 0, + "receiver_route_change_authorized_count": 0, + "silence_policy_change_authorized_count": 0, + "telegram_send_authorized_count": 0, + "notification_route_change_authorized_count": 0, + "webhook_receiver_change_authorized_count": 0, + "remote_write_change_authorized_count": 0, + "exporter_deploy_authorized_count": 0, + "live_alert_fire_authorized_count": 0, + "alert_chain_smoke_authorized_count": 0, + "secret_value_collection_allowed_count": 0, + "host_write_authorized_count": 0, + "active_scan_authorized_count": 0, + "production_write_authorized_count": 0, + "runtime_gate_count": 0, + "action_button_count": 0, + "coverage_percent_after_readback_plan": 70, + } + for key, expected in expected_monitoring_post_incident_summary.items(): + assert_equal( + f"monitoring_post_incident_readback_plan.summary.{key}", + monitoring_post_incident_readback_plan["summary"][key], + expected, + ) + for key, value in monitoring_post_incident_readback_plan["execution_boundaries"].items(): + if key == "not_authorization": + assert_true(f"monitoring_post_incident_readback_plan.execution_boundaries.{key}", value) + else: + assert_false(f"monitoring_post_incident_readback_plan.execution_boundaries.{key}", value) + assert_equal( + "monitoring_post_incident_readback_plan.readback_candidates.count", + len(monitoring_post_incident_readback_plan["readback_candidates"]), + 60, + ) + monitoring_post_incident_ids = [ + item["post_incident_readback_candidate_id"] + for item in monitoring_post_incident_readback_plan["readback_candidates"] + ] + for post_incident_readback_candidate_id in [ + "monitoring_post_incident_readback:alertmanager_receiver_config", + "monitoring_post_incident_readback:deploy_alertmanager_config_script", + "monitoring_post_incident_readback:telegram_gateway_service", + "monitoring_post_incident_readback:fire_live_alert_script", + "monitoring_post_incident_readback:sentry_self_hosted_deploy", + "monitoring_post_incident_readback:langfuse_compose", + ]: + assert_contains( + "monitoring_post_incident_readback_plan.readback_candidates", + monitoring_post_incident_ids, + post_incident_readback_candidate_id, + ) + assert_equal( + "monitoring_post_incident_readback_plan.reviewer_checks.count", + len(monitoring_post_incident_readback_plan["reviewer_checks"]), + 28, + ) + assert_equal( + "monitoring_post_incident_readback_plan.outcome_lanes.count", + len(monitoring_post_incident_readback_plan["outcome_lanes"]), + 11, + ) + assert_equal( + "monitoring_post_incident_readback_plan.blocked_actions.count", + len(monitoring_post_incident_readback_plan["blocked_actions"]), + 53, + ) + for item in monitoring_post_incident_readback_plan["readback_candidates"]: + assert_equal( + f"monitoring_post_incident_readback_plan.{item['post_incident_readback_candidate_id']}.readback_fields", + len(item["readback_fields"]), + 39, + ) + assert_equal( + f"monitoring_post_incident_readback_plan.{item['post_incident_readback_candidate_id']}.required_readback_fields", + len(item["required_readback_fields"]), + 30, + ) + assert_equal( + f"monitoring_post_incident_readback_plan.{item['post_incident_readback_candidate_id']}.reviewer_checks", + len(item["reviewer_checks"]), + 28, + ) + assert_equal( + f"monitoring_post_incident_readback_plan.{item['post_incident_readback_candidate_id']}.outcome_lanes", + len(item["outcome_lanes"]), + 11, + ) + assert_equal( + f"monitoring_post_incident_readback_plan.{item['post_incident_readback_candidate_id']}.blocked_actions", + len(item["blocked_actions"]), + 53, + ) + assert_true( + f"monitoring_post_incident_readback_plan.{item['post_incident_readback_candidate_id']}.not_approval", + item["not_approval"], + ) + for false_key in [ + "post_incident_readback_received", + "post_incident_readback_accepted", + "actor_attribution_accepted", + "change_or_outage_time_window_accepted", + "intent_or_break_glass_accepted", + "before_after_alert_state_accepted", + "rule_datasource_scrape_state_accepted", + "receiver_route_state_accepted", + "reload_or_no_reload_accepted", + "receiver_receipt_readback_accepted", + "stale_pending_resolved_review_accepted", + "silence_mute_dedup_inhibit_review_accepted", + "dashboard_trace_log_freshness_accepted", + "notification_delivery_metadata_accepted", + "alert_chain_health_readback_accepted", + "cross_project_sync_accepted", + "rollback_or_disable_validation_accepted", + "post_change_monitoring_accepted", + "postcheck_readback_accepted", + "recurrence_guard_accepted", + "no_false_green_accepted", + "prometheus_reload_authorized", + "alertmanager_reload_authorized", + "grafana_dashboard_apply_authorized", + "signoz_rule_apply_authorized", + "sentry_deploy_authorized", + "langfuse_config_change_authorized", + "otel_collector_reload_authorized", + "receiver_route_change_authorized", + "silence_policy_change_authorized", + "telegram_send_authorized", + "notification_route_change_authorized", + "webhook_receiver_change_authorized", + "remote_write_change_authorized", + "exporter_deploy_authorized", + "live_alert_fire_authorized", + "alert_chain_smoke_authorized", + "ssh_read_authorized", + "ssh_write_authorized", + "kubectl_action_authorized", + "secret_value_collection_allowed", + "host_write_authorized", + "active_scan_authorized", + "production_write_authorized", + "runtime_gate", + "action_buttons_allowed", + ]: + assert_false( + f"monitoring_post_incident_readback_plan.{item['post_incident_readback_candidate_id']}.{false_key}", + item[false_key], + ) assert_equal( "ai_provider_owner_response_acceptance.schema", ai_provider_owner_response_acceptance["schema_version"], @@ -7442,6 +7682,8 @@ def validate(root: Path) -> None: "docs/schemas/backup_restore_escrow_inventory_v1.schema.json", "docs/security/monitoring-alerting-observability-inventory.snapshot.json", "docs/security/MONITORING-ALERTING-OBSERVABILITY-INVENTORY.md", + "docs/security/monitoring-post-incident-readback-plan.snapshot.json", + "docs/security/MONITORING-POST-INCIDENT-READBACK-PLAN.md", "docs/schemas/monitoring_alerting_observability_inventory_v1.schema.json", "docs/security/public-runtime-config-change-evidence-acceptance.snapshot.json", "docs/security/PUBLIC-RUNTIME-CONFIG-CHANGE-EVIDENCE-ACCEPTANCE.md", @@ -7922,6 +8164,24 @@ def validate(root: Path) -> None: "monitoring_owner_response_acceptance_cross_project_notification_accepted_count": 0, "monitoring_owner_response_acceptance_runtime_gate_count": 0, "monitoring_owner_response_acceptance_coverage_percent_after_backfill": 68, + "monitoring_post_incident_readback_plan_candidate_count": 60, + "monitoring_post_incident_readback_plan_write_capable_candidate_count": 11, + "monitoring_post_incident_readback_plan_live_evidence_required_candidate_count": 60, + "monitoring_post_incident_readback_plan_alert_rule_candidate_count": 13, + "monitoring_post_incident_readback_plan_deploy_or_reload_candidate_count": 6, + "monitoring_post_incident_readback_plan_required_readback_field_count": 30, + "monitoring_post_incident_readback_plan_reviewer_check_count": 28, + "monitoring_post_incident_readback_plan_outcome_lane_count": 11, + "monitoring_post_incident_readback_plan_blocked_action_count": 53, + "monitoring_post_incident_readback_plan_post_incident_readback_received_count": 0, + "monitoring_post_incident_readback_plan_post_incident_readback_accepted_count": 0, + "monitoring_post_incident_readback_plan_receiver_receipt_readback_accepted_count": 0, + "monitoring_post_incident_readback_plan_stale_pending_resolved_review_accepted_count": 0, + "monitoring_post_incident_readback_plan_silence_mute_dedup_inhibit_review_accepted_count": 0, + "monitoring_post_incident_readback_plan_alert_chain_health_readback_accepted_count": 0, + "monitoring_post_incident_readback_plan_runtime_gate_count": 0, + "monitoring_post_incident_readback_plan_action_button_count": 0, + "monitoring_post_incident_readback_plan_coverage_percent_after_readback_plan": 70, } for key, expected in expected_monitoring_alerting_observability_projection_summary.items(): assert_equal( @@ -17874,7 +18134,7 @@ def validate(root: Path) -> None: "monitoring_alerting_observability_inventory_reload_owner_accepted_count=0", "monitoring_alerting_observability_inventory_receiver_owner_accepted_count=0", "monitoring_alerting_observability_inventory_route_smoke_accepted_count=0", - "monitoring_alerting_observability_coverage_percent=68", + "monitoring_alerting_observability_coverage_percent=70", "monitoring_owner_response_acceptance_reviewer_check_count=23", "monitoring_owner_response_acceptance_outcome_lane_count=12", "monitoring_owner_response_acceptance_blocked_action_count=34", @@ -17884,6 +18144,22 @@ def validate(root: Path) -> None: "monitoring_owner_response_acceptance_silence_or_dedup_review_accepted_count=0", "monitoring_owner_response_acceptance_post_reload_readback_plan_accepted_count=0", "monitoring_owner_response_acceptance_runtime_gate_count=0", + "monitoring_post_incident_readback_plan_candidate_count=60", + "monitoring_post_incident_readback_plan_write_capable_candidate_count=11", + "monitoring_post_incident_readback_plan_live_evidence_required_candidate_count=60", + "monitoring_post_incident_readback_plan_alert_rule_candidate_count=13", + "monitoring_post_incident_readback_plan_deploy_or_reload_candidate_count=6", + "monitoring_post_incident_readback_plan_required_readback_field_count=30", + "monitoring_post_incident_readback_plan_reviewer_check_count=28", + "monitoring_post_incident_readback_plan_outcome_lane_count=11", + "monitoring_post_incident_readback_plan_blocked_action_count=53", + "monitoring_post_incident_readback_plan_post_incident_readback_received_count=0", + "monitoring_post_incident_readback_plan_post_incident_readback_accepted_count=0", + "monitoring_post_incident_readback_plan_receiver_receipt_readback_accepted_count=0", + "monitoring_post_incident_readback_plan_stale_pending_resolved_review_accepted_count=0", + "monitoring_post_incident_readback_plan_silence_mute_dedup_inhibit_review_accepted_count=0", + "monitoring_post_incident_readback_plan_alert_chain_health_readback_accepted_count=0", + "monitoring_post_incident_readback_plan_runtime_gate_count=0", "docker_compose_action_authorized=false", "systemctl_action_authorized=false", "repair_bot_execution_authorized=false", @@ -18179,7 +18455,7 @@ def validate(root: Path) -> None: assert_text_contains( f"web_messages.{locale}.iwooos.criticalConfigPriority.items.publicRuntime.body.redaction", public_runtime_body, - "不得暴露 raw namespace", + "不得暴露原始命名空間", ) assert_contains( "web_messages.zh-TW.iwooos.highValueConfigControlCoverage",