feat(web): add IwoooS review outcomes

apps/web/messages/en.json

@@ -2102,6 +2102,54 @@
           "guard": "active runtime gates=0; action buttons=false"
         }
       }
+    },
+    "hostOwnerDecisionRecordFormalCandidateReviewOutcomes": {
+      "title": "Host Owner Decision Record Formal Candidate Review Outcome Lanes",
+      "subtitle": "Formal candidate review outcome only shows next-step lanes after candidate review. This does not mark review passed, mark finalized, create decision records, mark accepted, create approval records, or open runtime gates.",
+      "laneLabel": "Outcome lane",
+      "nextLabel": "Next remains read-only",
+      "items": {
+        "readyForHumanRecordQueue": {
+          "title": "Ready for human record queue",
+          "body": "When candidate fields are readable, this can only show readiness for a human formal-record queue and does not create decision records.",
+          "next": "queue visible only; record created=false"
+        },
+        "identityNeedsTrace": {
+          "title": "Record identity needs trace",
+          "body": "When candidate record id, version, owner, review scope, or trace source is missing, the item returns to identity trace collection.",
+          "next": "collect identity trace; review passed=0"
+        },
+        "decisionSummaryNeedsClarification": {
+          "title": "Decision summary needs clarification",
+          "body": "When decision summary, risk acceptance boundary, or no-execution statement is unclear, the item remains a candidate.",
+          "next": "clarify decision summary; accepted=0"
+        },
+        "scopeExpiryNeedsRefresh": {
+          "title": "Scope and expiry need refresh",
+          "body": "When host, network, service, exclusion, observation intent, or expiry is inconsistent, the item cannot enter a formal record.",
+          "next": "refresh scope / expiry; finalized=0"
+        },
+        "scanLimitsAmbiguous": {
+          "title": "Scan limits remain ambiguous",
+          "body": "When active scan or credentialed scan limits could be misread, the lane stays locked as not authorized.",
+          "next": "clarify scan limits; scan authorized=false"
+        },
+        "credentialBoundaryFailed": {
+          "title": "Credential boundary failed",
+          "body": "When credential metadata, retention, masking, or forbidden collection boundary is unclear, the lane remains quarantined.",
+          "next": "repair metadata-only boundary; secret collection=false"
+        },
+        "maintenanceRollbackIncomplete": {
+          "title": "Maintenance and rollback incomplete",
+          "body": "When maintenance window, constraints, rollback owner, recovery path, or human contact is not traceable, approval semantics cannot be created.",
+          "next": "collect maintenance / rollback; host update=false"
+        },
+        "runtimeGateStillRequired": {
+          "title": "Runtime gate still required",
+          "body": "Validation evidence or runtime gate pointer still requires a separate follow-up gate and cannot open from the outcome.",
+          "next": "active runtime gates=0; action buttons=false"
+        }
+      }
     }
   },
   "tickets": {

apps/web/messages/zh-TW.json

@@ -2103,6 +2103,54 @@
           "guard": "active runtime gates=0；action buttons=false"
         }
       }
+    },
+    "hostOwnerDecisionRecordFormalCandidateReviewOutcomes": {
+      "title": "主機 Owner Decision Record Formal Candidate Review Outcome Lanes",
+      "subtitle": "Formal candidate review outcome 只呈現候選核對後的下一步分流。這裡不標記 review passed、不標記 finalized、不建立 decision record、不標記 accepted、不建立 approval record、不開 runtime gate。",
+      "laneLabel": "Outcome lane",
+      "nextLabel": "下一步仍只讀",
+      "items": {
+        "readyForHumanRecordQueue": {
+          "title": "Ready for human record queue",
+          "body": "候選欄位可讀時，只能顯示可送人工正式紀錄佇列，不會建立 decision record。",
+          "next": "queue visible only；record created=false"
+        },
+        "identityNeedsTrace": {
+          "title": "Record identity needs trace",
+          "body": "candidate record id、版本、owner、review scope 或 trace source 不足時，回到身份追蹤補件。",
+          "next": "補 identity trace；review passed=0"
+        },
+        "decisionSummaryNeedsClarification": {
+          "title": "Decision summary needs clarification",
+          "body": "decision summary、風險接受邊界或不執行聲明不清楚時，維持候選狀態。",
+          "next": "補 decision summary；accepted=0"
+        },
+        "scopeExpiryNeedsRefresh": {
+          "title": "Scope and expiry need refresh",
+          "body": "host、network、service、exclusion、觀察目的或到期時間不一致時，不進入正式紀錄。",
+          "next": "補 scope / expiry；finalized=0"
+        },
+        "scanLimitsAmbiguous": {
+          "title": "Scan limits remain ambiguous",
+          "body": "active scan 或 credentialed scan limits 可能被誤讀時，仍鎖在不授權狀態。",
+          "next": "補 scan limits；scan authorized=false"
+        },
+        "credentialBoundaryFailed": {
+          "title": "Credential boundary failed",
+          "body": "credential metadata、retention、masking 或 forbidden collection 邊界不清楚時，直接隔離。",
+          "next": "補 metadata-only boundary；secret collection=false"
+        },
+        "maintenanceRollbackIncomplete": {
+          "title": "Maintenance and rollback incomplete",
+          "body": "維護窗口、限制條件、rollback owner、復原路徑或人工聯絡點不可追時，不能建立批准語義。",
+          "next": "補 maintenance / rollback；host update=false"
+        },
+        "runtimeGateStillRequired": {
+          "title": "Runtime gate still required",
+          "body": "validation evidence 或 runtime gate pointer 仍需要獨立 follow-up gate，不能由 outcome 開 gate。",
+          "next": "active runtime gates=0；action buttons=false"
+        }
+      }
     }
   },
   "tickets": {

apps/web/src/app/[locale]/iwooos/page.tsx

@@ -215,6 +215,13 @@ type HostOwnerDecisionRecordFormalCandidateReviewItem = {
   tone: 'steady' | 'warn' | 'locked'
 }
 
+type HostOwnerDecisionRecordFormalCandidateReviewOutcomeLane = {
+  key: string
+  lane: string
+  icon: typeof ShieldCheck
+  tone: 'steady' | 'warn' | 'locked'
+}
+
 const postureMetrics: PostureMetric[] = [
   { key: 'overall', value: '58%', tone: 'warn' },
   { key: 'framework', value: '80-85%', tone: 'steady' },
@@ -506,6 +513,17 @@ const hostOwnerDecisionRecordFormalCandidateReviewItems: HostOwnerDecisionRecord
   { key: 'runtimeGateStillClosed', check: 'FR7', icon: ShieldCheck, tone: 'locked' },
 ]
 
+const hostOwnerDecisionRecordFormalCandidateReviewOutcomeLanes: HostOwnerDecisionRecordFormalCandidateReviewOutcomeLane[] = [
+  { key: 'readyForHumanRecordQueue', lane: 'FV1', icon: CheckCircle2, tone: 'steady' },
+  { key: 'identityNeedsTrace', lane: 'FV2', icon: FileText, tone: 'warn' },
+  { key: 'decisionSummaryNeedsClarification', lane: 'FV3', icon: ClipboardCheck, tone: 'warn' },
+  { key: 'scopeExpiryNeedsRefresh', lane: 'FV4', icon: Radar, tone: 'warn' },
+  { key: 'scanLimitsAmbiguous', lane: 'FV5', icon: Activity, tone: 'locked' },
+  { key: 'credentialBoundaryFailed', lane: 'FV6', icon: Lock, tone: 'locked' },
+  { key: 'maintenanceRollbackIncomplete', lane: 'FV7', icon: Clock3, tone: 'warn' },
+  { key: 'runtimeGateStillRequired', lane: 'FV8', icon: ShieldCheck, tone: 'locked' },
+]
+
 const evidenceItems = [
   'iwooos-posture-projection.snapshot.json',
   'security-rollout-policy.snapshot.json',
@@ -1328,6 +1346,38 @@ function HostOwnerDecisionRecordFormalCandidateReviewCard({
   )
 }
 
+function HostOwnerDecisionRecordFormalCandidateReviewOutcomeCard({
+  item,
+}: {
+  item: HostOwnerDecisionRecordFormalCandidateReviewOutcomeLane
+}) {
+  const t = useTranslations('iwooos.hostOwnerDecisionRecordFormalCandidateReviewOutcomes')
+  const Icon = item.icon
+  return (
+    <div style={{ ...band, minHeight: 190, padding: 16 }}>
+      <div style={{ display: 'flex', alignItems: 'center', justifyContent: 'space-between', gap: 12 }}>
+        <div style={{ display: 'flex', alignItems: 'center', gap: 9 }}>
+          <Icon size={18} color={toneColors[item.tone]} />
+          <span style={{ fontSize: 11, color: '#87867f' }}>{t('laneLabel')}</span>
+        </div>
+        <span style={{ fontSize: 11, color: '#9b978b' }}>{item.lane}</span>
+      </div>
+      <h2 style={{ fontSize: 14, margin: '12px 0 6px', color: '#141413' }}>
+        {t(`items.${item.key}.title` as never)}
+      </h2>
+      <p style={{ fontSize: 12, lineHeight: 1.55, color: '#6f6d66', margin: 0 }}>
+        {t(`items.${item.key}.body` as never)}
+      </p>
+      <div style={{ marginTop: 10, display: 'grid', gap: 5 }}>
+        <div style={{ fontSize: 11, color: '#87867f' }}>{t('nextLabel')}</div>
+        <div style={{ fontSize: 11, color: toneColors[item.tone], lineHeight: 1.45 }}>
+          {t(`items.${item.key}.next` as never)}
+        </div>
+      </div>
+    </div>
+  )
+}
+
 export default function IwoooSPage({ params }: { params: { locale: string } }) {
   const t = useTranslations('iwooos')
 
@@ -1800,6 +1850,26 @@ export default function IwoooSPage({ params }: { params: { locale: string } }) {
           </div>
         </section>
 
+        <section style={{ marginBottom: 14 }}>
+          <div style={{ marginBottom: 14 }}>
+            <h2 style={{ fontSize: 16, margin: 0 }}>{t('hostOwnerDecisionRecordFormalCandidateReviewOutcomes.title')}</h2>
+            <p style={{ fontSize: 12, color: '#6f6d66', margin: '6px 0 0', lineHeight: 1.55 }}>
+              {t('hostOwnerDecisionRecordFormalCandidateReviewOutcomes.subtitle')}
+            </p>
+          </div>
+          <div
+            style={{
+              display: 'grid',
+              gridTemplateColumns: 'repeat(auto-fit, minmax(210px, 1fr))',
+              gap: 12,
+            }}
+          >
+            {hostOwnerDecisionRecordFormalCandidateReviewOutcomeLanes.map(item => (
+              <HostOwnerDecisionRecordFormalCandidateReviewOutcomeCard key={item.key} item={item} />
+            ))}
+          </div>
+        </section>
+
         <section
           style={{
             display: 'grid',