wooo/awoooi
1
1
Fork 0
Code Issues 2 Pull Requests 1 Actions 2 Packages Projects Releases Wiki Activity

feat(iwooos): 新增監控告警事故回讀 gate
All checks were successful
Code Review / ai-code-review (push) Successful in 12s
Details
CD Pipeline / tests (push) Successful in 1m45s
Details
CD Pipeline / build-and-deploy (push) Successful in 4m41s
Details
CD Pipeline / post-deploy-checks (push) Successful in 1m45s
Details

Browse Source
This commit is contained in:
Your Name
2026-06-16 11:07:34 +08:00
parent dfee85c034
commit d89f271af3
16 changed files with 17430 additions and 232 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
scripts/security/high-value-config-control-coverage.py
View File

@@ -145,8 +145,8 @@ CONTROL_STATUS_BY_CATEGORY = {
"next_owner_action": "補 repo owner、external agent owner、treasury owner、runtime gate owner、maintenance window、rollback owner 與 validation plan。",
},
"monitoring_alerting_observability": {
"coverage_status": "alert_chain_no_false_green_backfill_ready_needs_live_evidence_receipt",
"coverage_percent": 68,
"coverage_status": "post_incident_readback_plan_ready_needs_monitoring_owner_evidence",
"coverage_percent": 70,
"evidence_refs": [
"docs/security/IWOOOS-CONFIG-CONTROL-INVENTORY.md",
"docs/security/MONITORING-ALERTING-OBSERVABILITY-INVENTORY.md",
@@ -155,10 +155,12 @@ CONTROL_STATUS_BY_CATEGORY = {
"docs/security/monitoring-owner-request-draft.snapshot.json",
"docs/security/MONITORING-OWNER-RESPONSE-ACCEPTANCE.md",
"docs/security/monitoring-owner-response-acceptance.snapshot.json",
"docs/security/MONITORING-POST-INCIDENT-READBACK-PLAN.md",
"docs/security/monitoring-post-incident-readback-plan.snapshot.json",
"docs/schemas/monitoring_alerting_observability_inventory_v1.schema.json",
],
"current_gap": "已固定 60 份 monitoring / alerting / observability owner response acceptance candidate，並新增告警鏈路 no-false-green 回補欄位；仍缺 owner response、live config hash、rule diff、receiver diff、receipt proof、stale / silence review、post-reload readback、noise budget owner 與 maintenance window。",
"next_owner_action": "補 Prometheus / Alertmanager / Grafana / SigNoz / Sentry / Langfuse / Telegram owner、live drift evidence、reload window、receiver owner、receipt proof、stale alert review、silence / dedup review、route smoke plan、noise budget、rollback owner 與 no-secret-value evidence。",
"current_gap": "已固定 60 份 monitoring / alerting / observability owner response acceptance candidate，並新增事故後回讀計畫；actor、時間窗、改前改後 alert state、rule / datasource / scrape、receiver route、reload / no-reload、receiver receipt、stale / silence、dashboard / trace / log freshness、notification delivery、alert chain health、cross-project sync、rollback、post-change monitoring、防再發與 no-false-green 已納入只讀帳本；仍缺 owner response、事故回讀包、live config hash、rule diff、receiver diff、receipt proof、stale / silence review、post-reload readback、noise budget owner 與 maintenance window。",
"next_owner_action": "補 Prometheus / Alertmanager / Grafana / SigNoz / Sentry / Langfuse / Telegram 事故回讀包：owner、actor role / team、change / outage time window、before / after alert state、rule / datasource / scrape state、receiver route state、reload / no-reload、receiver receipt、stale alert review、silence / dedup / inhibit review、dashboard / trace / log freshness、notification metadata、alert chain health、cross-project sync、rollback owner、post-change monitoring、recurrence guard、noise budget 與 no-secret-value evidence。",
},
"docker_compose_systemd_host_config": {
"coverage_status": "post_incident_readback_plan_ready_needs_host_service_owner_evidence",
@@ -397,6 +399,7 @@ def build_report(root: Path, generated_at: str | None) -> dict[str, Any]:
"owner_response_acceptance_ledger_ready_needs_network_owner",
"owner_response_acceptance_ledger_ready_needs_live_route_evidence",
"alert_chain_no_false_green_backfill_ready_needs_live_evidence_receipt",
"post_incident_readback_plan_ready_needs_monitoring_owner_evidence",
"change_evidence_acceptance_ready_needs_network_owner_evidence",
"incident_change_evidence_acceptance_ready_needs_network_owner_evidence",
"post_incident_readback_plan_ready_needs_network_owner_evidence",