fix(ci): make MCP audit writeback repeatable

This commit is contained in:
ogt
2026-07-15 11:27:36 +08:00
parent 5eb46f9421
commit dd32cbf9cd
8 changed files with 539 additions and 69 deletions

View File

@@ -30,6 +30,7 @@
"docs/evaluations/ai_agent_version_lifecycle_update_proposal_2026-07-10.json",
"scripts/ci/check-gitea-step-env-secrets.js",
"scripts/ci/cleanup-host-runner-workspace.sh",
"scripts/ci/write-gitea-audit-receipts.sh",
"scripts/ci/wait-host-web-build-pressure.sh",
"scripts/ci/notify-awoooi-cicd.sh",
"scripts/setup-runner-watchdog.sh",
@@ -367,6 +368,7 @@
"config/mcp/playwright-mcp-artifact-policy.json",
"scripts/security/external_mcp_artifact_controller.py",
"scripts/security/verify_external_mcp_artifact_receipt.py",
"scripts/ci/write-gitea-audit-receipts.sh",
"scripts/ci/wait-host-web-build-pressure.sh"
],
"next_action": "維持 bounded capacity wait、獨立 verifier 與 mcp-artifact-receipts audit branch不得啟動 artifact、寫 RAG、切 production route 或推回 deploy main。"
@@ -397,6 +399,7 @@
"config/mcp/playwright-mcp-replay-policy.json",
"scripts/security/external_mcp_replay_controller.py",
"scripts/security/verify_external_mcp_replay_receipt.py",
"scripts/ci/write-gitea-audit-receipts.sh",
"scripts/ci/wait-host-web-build-pressure.sh"
],
"next_action": "先取得 mcp-replay-receipts 獨立 verifier receiptbrowser runtime、public-origin egress proxy、shadow、canary、Gateway adapter registration、RAG 與 production route 仍保持停用。"