From e090cb21e90c2846170631fdb864e92773018a79 Mon Sep 17 00:00:00 2001 From: Your Name Date: Sun, 28 Jun 2026 03:26:24 +0800 Subject: [PATCH] docs(logbook): record wazuh acceptance validation rollout [skip ci] --- docs/LOGBOOK.md | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/docs/LOGBOOK.md b/docs/LOGBOOK.md index b9f0c8a11..2a2cc90a2 100644 --- a/docs/LOGBOOK.md +++ b/docs/LOGBOOK.md @@ -1,3 +1,14 @@ +## 2026-06-28 — 03:28 Wazuh manager registry acceptance 收件驗證 production 收斂 + +**完成內容**： +- Gitea main：`15b02cb6e fix(iwooos): remove public runtime boundary phrases [skip ci]` 移除 `/zh-TW/iwooos` 可見敏感 runtime 邊界英文文案；`1f94124d9 chore(cd): deploy 3a52813 [skip ci]` 將 API / Web / Worker / Canary 部署到 `3a528138829701a1dafb2a21003ed014c9f9383b`。 +- Production K8s：`awoooi-api`、`awoooi-web`、`awoooi-worker`、`awoooi-auto-repair-canary` 全部 Ready，image tag 全部讀回 `3a528138829701a1dafb2a21003ed014c9f9383b`；Argo App `Synced / Healthy`，revision `1f94124d9f2454568612d37a4e5a9cfde0aa1d15`。 +- Production API：`GET /api/v1/iwooos/wazuh-manager-registry-reviewer-validation` 回 `200`，schema `iwooos_wazuh_manager_registry_reviewer_validation_readback_v1`；`POST /validate-manager-registry-acceptance` 對脫敏 sample 回 `accepted_for_manager_registry_acceptance_review_only`。 +- POST 後再次 GET：`manager_registry_acceptance_evidence_received_count=0`、`manager_registry_acceptance_evidence_review_ready_count=0`、`manager_registry_accepted_count=0`、`runtime_gate_count=0`、`host_write_authorized_count=0`、`active_response_authorized_count=0`、`secret_value_collection_allowed_count=0`；POST boundary `payload_persisted=false`、`manager_registry_accepted_updated=false`、`runtime_execution_authorized=false`。 +- 前台 smoke：desktop / mobile `/zh-TW/iwooos` 都是 HTTP `200`、console error `0`、page error `0`、水平溢出 `false`、forbidden text hits `0`。 + +**邊界**：本段只完成 owner-provided redacted manager registry acceptance evidence 的 no-persist reviewer validation；沒有查 live Wazuh、沒有 runtime action、沒有 host write、沒有讀 secret、沒有 force push。 + ## 2026-06-28 — 03:05 CD 非 critical guard 轉 commander controlled automation **背景**：統帥全面授權打開非 critical hard gate / guard，要求實作快速推進，不接受只改文件。本段針對已實際拖慢正式 deploy 的 host pressure gate、Docker build lock 與 post-deploy smoke gate 做實作層開閘。