docs(github): record backup source readiness readback [skip ci]

docs/LOGBOOK.md

@@ -47354,3 +47354,62 @@ production browser smoke:
 **下一個 P0**：
 - `P0-01` Wazuh manager registry accepted：只讀交叉驗收 expected host / product / agent scope，不把 Dashboard 可開、API 200 或前台 lane 可見當作全主機納管恢復。
 - `P0-02` owner-provided redacted evidence intake reviewer validation：開始把六條 lane 的脫敏 evidence refs 轉成 reviewer validation，但 request / received / accepted / runtime 仍先維持 0。
+
+## 2026-06-27 — 20:31 GitHub backup missing targets source readiness production 讀回完成
+
+**時間與來源**：
+- 2026-06-27 19:24-20:31 Asia/Taipei。
+- 來源：feature branch `codex/github-backup-missing-targets-20260627`、Gitea main、Gitea Actions、production API readback。
+
+**完成內容**：
+- 新增 GitHub missing targets source readiness 分類讀回，將 5 個 GitHub not-found / inaccessible target 拆成 Gitea source candidate、internal remote source candidate、local worktree candidate、canonical source ambiguous、create private repo readiness 與 refs sync readiness。
+- `apps/api/src/services/github_target_private_backup_evidence_gate.py` 已把 `docs/security/github-target-missing-source-readiness.snapshot.json` 併入 `github_target_private_backup_evidence_gate_v1` summary。
+- GitHub backup governance 仍維持只讀；本段沒有建立 GitHub repo、沒有改 visibility、沒有 sync refs、沒有讀 secret / private clone URL。
+
+**版本與 runs**：
+- feature latest：`920bc9b80 Merge remote-tracking branch 'gitea/main' into codex/github-backup-missing-targets-20260627`。
+- main release line：`0e4e0fab3 fix(tests): refresh autonomous runtime deploy marker expectation`。
+- deploy marker：`460b11fdd chore(cd): deploy 0e4e0fa [skip ci]`。
+- code-review run：`3679`，Success。
+- CD run：`3678`，Success。
+
+**本地驗證結果**：
+- `python3 -m json.tool docs/security/github-target-missing-source-readiness.snapshot.json`：通過。
+- `python3 -m py_compile apps/api/src/services/github_target_private_backup_evidence_gate.py scripts/ops/host-runaway-process-exporter.py`：通過。
+- `git diff --check`：通過。
+- `DATABASE_URL=sqlite:///test.db python3.11 -m pytest apps/api/tests/test_github_target_private_backup_evidence_gate.py apps/api/tests/test_github_target_private_backup_evidence_gate_api.py apps/api/tests/test_delivery_closure_workbench_api.py scripts/ops/tests/test_host_runaway_process_exporter.py -q`：`15 passed`。
+- `pnpm --dir apps/web typecheck`：通過。
+
+**production API readback**：
+- `GET https://awoooi.wooo.work/api/v1/agents/github-target-private-backup-evidence-gate`：`200`。
+- `schema_version=github_target_private_backup_evidence_gate_v1`。
+- `approval_required_target_count=9`、`github_connector_readback_count=9`、`github_connector_private_visibility_count=4`、`github_connector_not_found_or_inaccessible_count=5`。
+- `private_backup_verified_count=4`、`private_visibility_verified_count=4`。
+- `github_missing_target_resolution_count=5`、`github_missing_target_gitea_source_candidate_count=3`、`github_missing_target_internal_remote_source_candidate_count=2`、`github_missing_target_local_worktree_candidate_count=5`、`github_missing_target_canonical_source_ambiguous_count=5`。
+- `github_missing_target_create_private_repo_ready_count=0`、`github_missing_target_refs_sync_ready_count=0`。
+- `blocked_target_count=9`、`execution_ready_count=0`、`target_count=10`。
+- operation boundaries：`read_only_api_allowed=true`、`github_api_write_allowed=false`、`repo_creation_allowed=false`、`visibility_change_allowed=false`、`refs_sync_allowed=false`、`workflow_trigger_allowed=false`、`private_clone_url_collection_allowed=false`。
+
+**production delivery / health readback**：
+- `GET https://awoooi.wooo.work/api/v1/health`：`200`，`status=healthy`、`environment=prod`、`mock_mode=false`。
+- `GET https://awoooi.wooo.work/api/v1/agents/delivery-closure-workbench`：`200`，`schema_version=delivery_closure_workbench_v1`。
+- Delivery Workbench GitHub lane：`status=blocked_private_visibility_and_safe_credential_evidence_required`、metric `private_backup_verified=4/9`、`blocker_count=9`。
+
+**完成度與同步狀態**：
+- 本段「GitHub missing targets source readiness API / production 讀回」：`85% -> 100%`。
+- GitHub backup mirror governance：仍為 blocked；本段提升 source-readiness 可解釋性，不代表 private backup gate 已開。
+- Product governance / delivery workbench：GitHub lane 維持 blocked，但 production 已可讀出 5 個 missing target source resolution 分類。
+
+**仍維持 0 / false**：
+- `github_missing_target_create_private_repo_ready_count=0`、`github_missing_target_refs_sync_ready_count=0`、`execution_ready_count=0`。
+- `github_api_write_allowed=false`、`repo_creation_allowed=false`、`visibility_change_allowed=false`、`refs_sync_allowed=false`、`workflow_trigger_allowed=false`、`private_clone_url_collection_allowed=false`、`secret_value_collection_allowed=false`。
+
+**做過的命令類型**：
+- 寫入：repo code / snapshot / test / LOGBOOK，以及正常 Gitea feature / main push。
+- 只讀：Gitea Actions UI readback、production API readback、production health readback、Delivery Workbench API readback。
+- 未做：沒有 GitHub repo creation、visibility change、refs sync、workflow trigger、private clone URL collection、secret value collection；沒有 host / Docker / systemd / Nginx / firewall / K8s / DB / Wazuh runtime 寫操作；沒有 force push。
+
+**下一個 P0**：
+- `P0-01` GitHub private backup evidence acceptance：補 `private_backup_verified_count` 從 `4/9` 往全數 verified 推進，但只接受 safe credential evidence / redacted refs，不收 private clone URL 或 secret value。
+- `P0-02` missing target canonical source owner decision：逐一釐清 `ewoooc`、`bitan-pharmacy`、`tsenyang-website`、`VibeWork`、`agent-bounty-protocol` 的 canonical source before repo creation。
+- `P0-03` refs sync readiness：在 canonical source 與 owner decision 成立前，`refs_sync_ready_count` 必須維持 `0`。