feat(web): add IwoooS review outcomes

docs/security/IWOOOS-POSTURE-PROJECTION.md

@@ -61,6 +61,7 @@ IwoooS 首版只讀取或對齊以下已提交 evidence：
 29. 7 個 host owner decision record write-up review outcome lanes，顯示 write-up review 後的只讀結果分流與下一步。
 30. 7 個 host owner decision record formal candidate packets，顯示 formal record candidate 需要的候選欄位，但不建立 decision record、不標記 finalized / accepted、不開 runtime gate。
 31. 7 個 host owner decision record formal candidate review checklist items，顯示 formal candidate packets 進入後續人工紀錄前仍需只讀核對的條件。
+32. 8 個 host owner decision record formal candidate review outcome lanes，顯示 candidate review 後的只讀結果分流與下一步。
 
 ## 3.1 既有前端資安頁面整合
 
@@ -480,6 +481,25 @@ S2.33 將 formal candidate packets 後的只讀核對條件拆成七個 review c
 
 這個 review checklist 不代表 formal candidate review 已通過、formal decision record 已 finalized、decision record 已建立、owner decision 已接受、資安批准已完成或 runtime gate 已開啟。它只讓 IwoooS 把 candidate review 的人工核對點顯示清楚，避免把欄位可讀性誤解成正式批准。
 
+## 3.25 Host Owner Decision Record Formal Candidate Review Outcome Lanes
+
+S2.34 將 formal candidate review checklist 後的可能結果拆成八個只讀 outcome lanes。這一層只回答「候選核對後下一步要補什麼或顯示哪個分流」，不標記 review passed、不標記 finalized、不建立 decision record、不標記 accepted、不建立 approval record、不開 runtime gate。
+
+| 順序 | Review outcome | 來源 check | 下一步 |
+|------|----------------|------------|--------|
+| 1 | Ready for human record queue | all review checks | 顯示可進人工正式紀錄佇列；record created=false |
+| 2 | Record identity needs trace | identity check | 補 identity trace；review passed=0 |
+| 3 | Decision summary needs clarification | summary check | 補 decision summary；accepted=0 |
+| 4 | Scope and expiry need refresh | scope check | 補 scope / expiry；finalized=0 |
+| 5 | Scan limits remain ambiguous | scan limits check | 補 scan limits；scan authorized=false |
+| 6 | Credential boundary failed | credential boundary check | 補 metadata-only boundary；secret collection=false |
+| 7 | Maintenance and rollback incomplete | maintenance / rollback check | 補 maintenance / rollback；host update=false |
+| 8 | Runtime gate still required | runtime gate check | active runtime gates=0；action buttons=false |
+
+每個 outcome lane 都固定 `display_mode=owner_decision_record_formal_candidate_review_outcome_only`、`formal_record_candidate_review_passed_count=0`、`formal_record_candidate_finalized_count=0`、`decision_record_created=false`、`owner_decision_received_count=0`、`owner_decision_accepted_count=0`、`owner_approval_record_created=false`、`runtime_gate_opened=false`、`raw_payload_allowed=false`、`secret_value_collection_allowed=false`、`runtime_execution_authorized=false`、`action_buttons_allowed=false`、`not_authorization=true`。
+
+這個 outcome board 不代表 formal candidate review 已通過、formal decision record 已 finalized、decision record 已建立、owner decision 已接受、資安批准已完成或 runtime gate 已開啟。它只讓 IwoooS 把候選核對後的補件、佇列與 runtime gate 分離狀態顯示清楚。
+
 ## 4. 仍禁止
 
 IwoooS 不得提供下列輸出：
@@ -510,7 +530,8 @@ IwoooS 不得提供下列輸出：
 24. 把 owner decision record write-up review outcome 當成 approval、標記 write-up review outcome passed / completed、從 write-up review outcome 建立 decision record，或從 write-up review outcome 開 runtime gate。
 25. 把 owner decision record formal candidate 當成 approval、標記 formal candidate finalized、從 formal candidate 建立或接受 decision record，或從 formal candidate 開 runtime gate。
 26. 把 owner decision record formal candidate review 當成 approval、標記 formal candidate review passed / finalized、從 formal candidate review 建立 decision record，或從 formal candidate review 開 runtime gate。
-27. 把 58% progress、contract count、mirror readiness 或前端可見狀態當成授權。
+27. 把 owner decision record formal candidate review outcome 當成 approval、標記 formal candidate review outcome passed / finalized、從 formal candidate review outcome 建立 decision record，或從 formal candidate review outcome 開 runtime gate。
+28. 把 58% progress、contract count、mirror readiness 或前端可見狀態當成授權。
 
 ## 5. 驗證