docs(security): add owner response audit templates

docs/security/source-control-owner-response-validation-rollup.snapshot.json

@@ -35,6 +35,7 @@
     "owner_response_validation_state_transition_rule_count": 7,
     "owner_response_validation_reviewer_checklist_count": 9,
     "owner_response_validation_reviewer_outcome_lane_count": 7,
+    "owner_response_validation_reviewer_audit_event_template_count": 4,
     "quarantine_required": true,
     "primary_ready_count": 0,
     "runtime_execution_authorized": false,
@@ -833,6 +834,126 @@
       "not_approval": true
     }
   ],
+  "owner_response_validation_reviewer_audit_event_templates": [
+    {
+      "event_template_id": "audit-reviewer-outcome-review-opened",
+      "display_order": 1,
+      "title": "Reviewer 開始檢查 owner response outcome",
+      "event_status": "template_only_not_emitted",
+      "event_trigger": "Reviewer 打開 S4.13 owner response validation rollup 並準備依 checklist / outcome lanes 做只讀分類。",
+      "allowed_metadata": [
+        "reviewer_id_or_role",
+        "lane_id",
+        "template_id",
+        "source_packet_path",
+        "review_started_at_taipei",
+        "redacted_evidence_ref_count"
+      ],
+      "forbidden_payloads": [
+        "raw_owner_response_body",
+        "token_or_secret_value",
+        "private_key_or_deploy_key_material",
+        "cookie_or_session",
+        "authorization_header",
+        "private_url_credential",
+        "unredacted_screenshot"
+      ],
+      "emitted_event_count": 0,
+      "stored_raw_payload_allowed": false,
+      "awooop_display_mode": "display_reviewer_audit_template_only",
+      "execution_authorized": false,
+      "not_approval": true
+    },
+    {
+      "event_template_id": "audit-reviewer-outcome-classified",
+      "display_order": 2,
+      "title": "Reviewer outcome lane 已分類",
+      "event_status": "template_only_not_emitted",
+      "event_trigger": "Reviewer 依 7 條 outcome lanes 將 evidence pointer 分類為等待、補證、隔離、拒收、跨包 review、只讀候選或等待 runtime gate。",
+      "allowed_metadata": [
+        "outcome_lane_id",
+        "classification_reason",
+        "checklist_pass_count",
+        "checklist_fail_count",
+        "redacted_evidence_refs",
+        "reviewed_at_taipei"
+      ],
+      "forbidden_payloads": [
+        "raw_owner_response_body",
+        "token_or_secret_value",
+        "secret_hash_or_masked_token",
+        "partial_credential",
+        "runner_token",
+        "webhook_secret",
+        "deploy_key_value",
+        "private_url_credential"
+      ],
+      "emitted_event_count": 0,
+      "stored_raw_payload_allowed": false,
+      "awooop_display_mode": "display_reviewer_audit_template_only",
+      "execution_authorized": false,
+      "not_approval": true
+    },
+    {
+      "event_template_id": "audit-reviewer-quarantine-or-reject-recorded",
+      "display_order": 3,
+      "title": "隔離或拒收原因已留痕模板",
+      "event_status": "template_only_not_emitted",
+      "event_trigger": "Reviewer 將 response 分類為 mirror quarantine 或 hard rejected execution request。",
+      "allowed_metadata": [
+        "outcome_lane_id",
+        "blocked_reason_code",
+        "redaction_required",
+        "quarantine_pointer",
+        "blocked_action_summary",
+        "reviewed_at_taipei"
+      ],
+      "forbidden_payloads": [
+        "sensitive_payload",
+        "raw_request_body",
+        "raw_response_body",
+        "credential_value",
+        "private_key",
+        "authorization_header",
+        "cookie_or_session",
+        "execution_payload"
+      ],
+      "emitted_event_count": 0,
+      "stored_raw_payload_allowed": false,
+      "awooop_display_mode": "display_reviewer_audit_template_only",
+      "execution_authorized": false,
+      "not_approval": true
+    },
+    {
+      "event_template_id": "audit-reviewer-readonly-update-noted",
+      "display_order": 4,
+      "title": "只讀更新候選已記錄模板",
+      "event_status": "template_only_not_emitted",
+      "event_trigger": "Reviewer 將 response 分類為 read-only update candidate 或 waiting follow-up runtime gate。",
+      "allowed_metadata": [
+        "outcome_lane_id",
+        "read_only_update_targets",
+        "followup_runtime_gate_required",
+        "active_runtime_gate_count",
+        "github_primary_ready_count",
+        "action_buttons_allowed"
+      ],
+      "forbidden_payloads": [
+        "runtime_approval",
+        "execution_command",
+        "repo_write_token",
+        "refs_update_payload",
+        "workflow_secret_value",
+        "runner_registration_token",
+        "github_primary_switch_payload"
+      ],
+      "emitted_event_count": 0,
+      "stored_raw_payload_allowed": false,
+      "awooop_display_mode": "display_reviewer_audit_template_only",
+      "execution_authorized": false,
+      "not_approval": true
+    }
+  ],
   "readiness_effects": [
     {
       "effect_id": "gitea_owner_response_accepted",
@@ -891,6 +1012,7 @@
     "display_owner_response_validation_state_transition_rules",
     "display_owner_response_validation_reviewer_checklist",
     "display_owner_response_validation_reviewer_outcome_lanes",
+    "display_owner_response_validation_reviewer_audit_event_templates",
     "route_invalid_response_to_quarantine",
     "update_read_only_readiness_wording_after_accepted_response"
   ],