docs(security): add ref truth owner response intake [skip ci]

This commit is contained in:
Your Name
2026-05-17 22:26:41 +08:00
parent d87880a6ef
commit e00282908f
29 changed files with 949 additions and 59 deletions

View File

@@ -163,7 +163,7 @@
"risk": "HIGH",
"state": "pending_approval",
"recommended_awooop_mode": "approve_required",
"requested_decision": "是否逐 repo / 單 ref 判定真相來源、deprecated 候選、release tag 與 GitHub-only refs分類結果不得自動執行。",
"requested_decision": "是否逐 repo / 單 ref 判定真相來源、deprecated 候選、release tag 與 GitHub-only refs先依 S4.11 驗收 owner response分類結果不得自動執行。",
"blocked_until_approved": true,
"required_reviewers": [
"migration-engineer",
@@ -173,14 +173,18 @@
"evidence_refs": [
"docs/security/SOURCE-CONTROL-REF-TRUTH-CLASSIFICATION.md",
"docs/security/source-control-ref-truth-classification.snapshot.json",
"docs/security/SOURCE-CONTROL-REF-TRUTH-OWNER-RESPONSE.md",
"docs/security/source-control-ref-truth-owner-response.snapshot.json",
"docs/security/SOURCE-CONTROL-REF-DETAIL-DIFF.md"
],
"allowed_after_approval": [
"標記單 ref 真相來源",
"依 S4.11 驗收 owner response",
"標記單 ref 真相來源候選",
"更新 source control reconcile plan",
"產生人工 review checklist"
],
"still_forbidden": [
"把 S4.11 response packet 當成 refs sync/delete/force push approval",
"push refs",
"delete refs",
"force push",