From e403d87210b853ee8229f980e6f459843b1cd4d6 Mon Sep 17 00:00:00 2001
From: ogt <ogt@awoooi.local>
Date: Wed, 15 Jul 2026 16:53:18 +0800
Subject: [PATCH] refactor(iwooos): prioritize live security closure

---
 ...wooos_wazuh_controlled_executor_runtime.py | 34 +++++++++++++++++++
 apps/web/src/app/[locale]/iwooos/page.tsx     | 14 +-------
 2 files changed, 35 insertions(+), 13 deletions(-)

diff --git a/apps/api/tests/test_iwooos_wazuh_controlled_executor_runtime.py b/apps/api/tests/test_iwooos_wazuh_controlled_executor_runtime.py
index ef49b528a..0310f7f9c 100644
--- a/apps/api/tests/test_iwooos_wazuh_controlled_executor_runtime.py
+++ b/apps/api/tests/test_iwooos_wazuh_controlled_executor_runtime.py
@@ -861,3 +861,37 @@ def test_wazuh_runtime_api_is_public_safe(monkeypatch: pytest.MonkeyPatch) -> No
     assert "stdout" not in response.text
     assert "ssh_key" not in response.text
     assert "WAZUH_API_PASSWORD" not in response.text
+
+
+def test_iwooos_runtime_workspace_defaults_to_live_closure_without_legacy_text_wall() -> None:
+    repo_root = Path(__file__).resolve().parents[3]
+    source = (
+        repo_root / "apps/web/src/app/[locale]/iwooos/page.tsx"
+    ).read_text(encoding="utf-8")
+
+    assert "useState<IwoooSWorkspaceView>('runtime')" in source
+    runtime_panel = source.split(
+        "<IwoooSWorkspacePanel active={workspaceView === 'runtime'}>", 1
+    )[1].split("</IwoooSWorkspacePanel>", 1)[0]
+    ledger_panel = source.split(
+        "<IwoooSWorkspacePanel active={workspaceView === 'ledger'}>", 1
+    )[1].split("</IwoooSWorkspacePanel>", 1)[0]
+
+    assert "<IwoooSSecurityToolClosureBoard />" in runtime_panel
+    assert "<IwoooSCommandRail />" in runtime_panel
+    legacy_boards = (
+        "<IwoooSAgentBountySecurityOnboardingBoard />",
+        "<IwoooSRolloutRiskReadOnlyBoard />",
+        "<IwoooSWazuhIntrusionReadbackBoard />",
+        "<IwoooSRuntimeSecurityReadbackBoard />",
+        "<IwoooSWazuhLiveRouteReadbackBoard />",
+        "<IwoooSWazuhReleaseGateBoard />",
+        "<IwoooSWazuhManagedHostCoverageBoard />",
+        "<IwoooSWazuhManagerRegistryReviewerValidationBoard />",
+        "<IwoooSWazuhLiveMetadataEnvGateBoard />",
+        "<IwoooSSecurityOperatingSystemBoard />",
+        "<IwoooSSocSiemKaliWazuhIntegrationBoard />",
+        "<IwoooSP0SecurityIncidentConvergenceBoard />",
+    )
+    assert all(board not in runtime_panel for board in legacy_boards)
+    assert all(board in ledger_panel for board in legacy_boards)
diff --git a/apps/web/src/app/[locale]/iwooos/page.tsx b/apps/web/src/app/[locale]/iwooos/page.tsx
index 717406809..d209347c5 100644
--- a/apps/web/src/app/[locale]/iwooos/page.tsx
+++ b/apps/web/src/app/[locale]/iwooos/page.tsx
@@ -25114,7 +25114,7 @@ function HostOwnerDecisionRecordHumanRecordOwnerReviewPreparationChecklistCard({
 export default function IwoooSPage({ params }: { params: { locale: string } }) {
   const t = useTranslations('iwooos')
   const ia = useTranslations('iwooos.informationArchitecture')
-  const [workspaceView, setWorkspaceView] = useState<IwoooSWorkspaceView>('overview')
+  const [workspaceView, setWorkspaceView] = useState<IwoooSWorkspaceView>('runtime')
 
   return (
     <AppLayout locale={params.locale} fullBleed>
@@ -25146,18 +25146,6 @@ export default function IwoooSPage({ params }: { params: { locale: string } }) {
         <IwoooSWorkspacePanel active={workspaceView === 'runtime'}>
           <IwoooSSecurityToolClosureBoard />
           <IwoooSCommandRail />
-          <IwoooSAgentBountySecurityOnboardingBoard />
-          <IwoooSRolloutRiskReadOnlyBoard />
-          <IwoooSWazuhIntrusionReadbackBoard />
-          <IwoooSRuntimeSecurityReadbackBoard />
-          <IwoooSWazuhLiveRouteReadbackBoard />
-          <IwoooSWazuhReleaseGateBoard />
-          <IwoooSWazuhManagedHostCoverageBoard />
-          <IwoooSWazuhManagerRegistryReviewerValidationBoard />
-          <IwoooSWazuhLiveMetadataEnvGateBoard />
-          <IwoooSSecurityOperatingSystemBoard />
-          <IwoooSSocSiemKaliWazuhIntegrationBoard />
-          <IwoooSP0SecurityIncidentConvergenceBoard />
         </IwoooSWorkspacePanel>
 
         <IwoooSWorkspacePanel active={workspaceView === 'evidence'}>