wooo/awoooi
1
1
Fork 0
Code Issues 2 Pull Requests 1 Actions 2 Packages Projects Releases Wiki Activity
6,523 Commits 208 Branches 2 Tags
f963452b3e52aa09397a314de4024c045807f51b
Commit Graph

100 Commits

Author SHA1 Message Date
ogt
f963452b3e feat(security): ingest gitea backup assets 2026-07-14 16:39:33 +08:00
ogt
69d2e4381d fix(security): reconcile asset coverage and ownership 2026-07-14 16:39:32 +08:00
ogt
76bc953080 feat(automation): reconcile all-asset capability matrix
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 0s
Details
CD Pipeline / cancel-stale-cd (push) Has been skipped
Details
CD Pipeline / tests (push) Successful in 3m1s
Details
CD Pipeline / build-and-deploy (push) Failing after 9m13s
Details
AWOOOI Harbor 110 Local Repair / workflow-shape (push) Successful in 0s
Details
CD Pipeline / post-deploy-checks (push) Has been skipped
Details
AWOOOI Harbor 110 Local Repair / harbor-110-local-repair (push) Successful in 18s
Details
2026-07-14 15:06:29 +08:00
ogt
d734362768 feat(security): expand canonical asset coverage
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 0s
Details
CD Pipeline / cancel-stale-cd (push) Has been skipped
Details
CD Pipeline / tests (push) Successful in 4m3s
Details
CD Pipeline / build-and-deploy (push) Failing after 10m5s
Details
CD Pipeline / post-deploy-checks (push) Has been skipped
Details
2026-07-14 13:17:40 +08:00
ogt
4508d19d4b fix(security): repair canonical asset integrity
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 0s
Details
CD Pipeline / cancel-stale-cd (push) Has been skipped
Details
CD Pipeline / tests (push) Successful in 2m32s
Details
CD Pipeline / build-and-deploy (push) Successful in 7m58s
Details
CD Pipeline / post-deploy-checks (push) Successful in 2m25s
Details
2026-07-14 11:54:02 +08:00
ogt
b6ddee7984 fix(security): reconcile asset control plane truth
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 1s
Details
CD Pipeline / cancel-stale-cd (push) Has been skipped
Details
CD Pipeline / tests (push) Successful in 2m27s
Details
CD Pipeline / build-and-deploy (push) Failing after 3m57s
Details
CD Pipeline / post-deploy-checks (push) Has been skipped
Details
2026-07-14 10:57:30 +08:00
ogt
e800d62682 fix(automation): repair backup database readback 2026-07-14 10:20:39 +08:00
ogt
6cf8429d17 fix(automation): enforce durable alert closure
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 0s
Details
CD Pipeline / cancel-stale-cd (push) Has been skipped
Details
CD Pipeline / tests (push) Successful in 2m32s
Details
CD Pipeline / build-and-deploy (push) Successful in 8m2s
Details
CD Pipeline / post-deploy-checks (push) Successful in 2m22s
Details 
Restore D037 durable incident readback without weakening database failure semantics.

Fence Agent99 dispatch and terminal learning to canonical identities, durable leases, verifier receipts, and reconciler-owned checkpoints.

Drain backup and restore legacy receipts in bounded cohorts with strict transport, claim, projection, and no-false-green controls.

Keep SSH service refusal visible while separating it from broker network-policy reachability.
 2026-07-14 09:40:53 +08:00
ogt
964beb2564 fix(security): restore compliance scanner readback
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 0s
Details
CD Pipeline / cancel-stale-cd (push) Has been skipped
Details
CD Pipeline / tests (push) Successful in 2m36s
Details
CD Pipeline / post-deploy-checks (push) Has been cancelled
Details
CD Pipeline / build-and-deploy (push) Has been cancelled
Details
2026-07-14 08:51:55 +08:00
ogt
0eb003d150 feat(security): inventory database catalog assets 2026-07-14 08:51:55 +08:00
ogt
ad3219c6cf fix(security): restore scoped asset scanner writes 2026-07-14 08:51:55 +08:00
ogt
e793718707 fix(agent): fail closed on incident read drift
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 0s
Details
CD Pipeline / cancel-stale-cd (push) Has been skipped
Details
CD Pipeline / tests (push) Successful in 2m31s
Details
CD Pipeline / post-deploy-checks (push) Has been cancelled
Details
CD Pipeline / build-and-deploy (push) Has been cancelled
Details
2026-07-11 20:34:52 +08:00
ogt
155ea47958 fix(agent): reconcile terminal incident read models
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 0s
Details
CD Pipeline / cancel-stale-cd (push) Has been skipped
Details
CD Pipeline / tests (push) Successful in 2m20s
Details
CD Pipeline / post-deploy-checks (push) Has been cancelled
Details
CD Pipeline / build-and-deploy (push) Has been cancelled
Details
AI 技術雷達監控 / ai-technology-watch (push) Successful in 41s
Details
2026-07-11 19:56:29 +08:00
ogt
bd27d4e759 fix(agent): keep closure lanes moving safely 2026-07-11 16:48:21 +08:00
ogt
47ab6613dd fix(agent): close verified alert lifecycle
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 0s
Details
CD Pipeline / cancel-stale-cd (push) Has been skipped
Details
CD Pipeline / tests (push) Successful in 3m24s
Details
CD Pipeline / build-and-deploy (push) Successful in 6m38s
Details
CD Pipeline / post-deploy-checks (push) Successful in 2m33s
Details
2026-07-11 13:18:24 +08:00
ogt
a8077ca699 fix(iwooos): retry incomplete wazuh closure
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 0s
Details
CD Pipeline / cancel-stale-cd (push) Has been skipped
Details
CD Pipeline / tests (push) Successful in 2m43s
Details
AWOOOI Harbor 110 Local Repair / workflow-shape (push) Successful in 0s
Details
AWOOOI Harbor 110 Local Repair / harbor-110-local-repair (push) Failing after 4m6s
Details
CD Pipeline / build-and-deploy (push) Failing after 17m10s
Details
CD Pipeline / post-deploy-checks (push) Has been skipped
Details
2026-07-11 12:16:42 +08:00
ogt
0fe6bd3ba0 fix(agent): fail closed on incomplete Wazuh context 2026-07-11 11:57:38 +08:00
ogt
39f064ec3c fix(agent): prioritize p0 ansible candidates 2026-07-11 11:26:27 +08:00
ogt
4a4b95e513 fix(iwooos): repair wazuh host trust and retry
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 0s
Details
CD Pipeline / cancel-stale-cd (push) Has been skipped
Details
CD Pipeline / tests (push) Successful in 2m27s
Details
CD Pipeline / build-and-deploy (push) Successful in 6m53s
Details
AWOOOI Harbor 110 Local Repair / workflow-shape (push) Successful in 0s
Details
AWOOOI Harbor 110 Local Repair / harbor-110-local-repair (push) Successful in 1m4s
Details
CD Pipeline / post-deploy-checks (push) Successful in 1m51s
Details
2026-07-11 10:13:02 +08:00
ogt
93510c0703 feat(iwooos): run wazuh posture receipt chain
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 0s
Details
CD Pipeline / cancel-stale-cd (push) Has been skipped
Details
CD Pipeline / tests (push) Failing after 1m38s
Details
CD Pipeline / build-and-deploy (push) Has been skipped
Details
CD Pipeline / post-deploy-checks (push) Has been skipped
Details
2026-07-11 09:29:52 +08:00
ogt
f453359e34 feat(ai): enforce single-writer automation router
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 1s
Details
CD Pipeline / cancel-stale-cd (push) Has been skipped
Details
CD Pipeline / tests (push) Successful in 2m21s
Details
CD Pipeline / build-and-deploy (push) Successful in 6m53s
Details
CD Pipeline / post-deploy-checks (push) Successful in 1m55s
Details
AWOOOI Harbor 110 Local Repair / workflow-shape (push) Successful in 0s
Details
AWOOOI Harbor 110 Local Repair / harbor-110-local-repair (push) Successful in 49s
Details
2026-07-11 05:45:48 +08:00
ogt
17171e1027 fix(agent): stabilize runtime truth and DB boundary
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 1s
Details
CD Pipeline / cancel-stale-cd (push) Has been skipped
Details
CD Pipeline / tests (push) Successful in 2m22s
Details
CD Pipeline / build-and-deploy (push) Successful in 7m12s
Details
CD Pipeline / post-deploy-checks (push) Successful in 3m49s
Details
AWOOOI Harbor 110 Local Repair / workflow-shape (push) Successful in 0s
Details
AWOOOI Harbor 110 Local Repair / harbor-110-local-repair (push) Failing after 1m47s
Details
2026-07-11 03:00:16 +08:00
ogt
7b08df3bdb fix(agent): accept JSON null pre-decision evidence
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 0s
Details
CD Pipeline / cancel-stale-cd (push) Has been skipped
Details
CD Pipeline / tests (push) Failing after 1m38s
Details
CD Pipeline / build-and-deploy (push) Has been skipped
Details
CD Pipeline / post-deploy-checks (push) Has been skipped
Details
2026-07-10 21:51:27 +08:00
ogt
ea4d78088f fix(agent): cast evidence health for durable gate
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 1s
Details
CD Pipeline / cancel-stale-cd (push) Has been skipped
Details
CD Pipeline / tests (push) Successful in 2m41s
Details
CD Pipeline / build-and-deploy (push) Successful in 5m6s
Details
CD Pipeline / post-deploy-checks (push) Has been cancelled
Details
2026-07-10 21:33:17 +08:00
ogt
d26bf5515a fix(agent): require durable tenant evidence before apply
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 0s
Details
CD Pipeline / cancel-stale-cd (push) Has been skipped
Details
CD Pipeline / tests (push) Successful in 2m34s
Details
CD Pipeline / build-and-deploy (push) Successful in 5m24s
Details
AWOOOI Harbor 110 Local Repair / workflow-shape (push) Successful in 1s
Details
AWOOOI Harbor 110 Local Repair / harbor-110-local-repair (push) Successful in 33s
Details
CD Pipeline / post-deploy-checks (push) Successful in 3m1s
Details
2026-07-10 21:12:00 +08:00
ogt
b72b6ee048 fix(agent): bind pre-decision evidence to runtime
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 0s
Details
CD Pipeline / cancel-stale-cd (push) Has been skipped
Details
CD Pipeline / tests (push) Successful in 2m37s
Details
CD Pipeline / build-and-deploy (push) Successful in 5m1s
Details
CD Pipeline / post-deploy-checks (push) Successful in 3m35s
Details
2026-07-10 20:55:32 +08:00
ogt
78eade177d feat(agent): persist failed retry terminal receipt 2026-07-10 19:53:55 +08:00
ogt
bb66db6e57 feat(agent): execute failed apply check-mode replay 2026-07-10 19:51:29 +08:00
Your Name
d7f56351f2 fix(recovery): reopen controlled automation after failclosed regression
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 0s
Details
CD Pipeline / cancel-stale-cd (push) Has been skipped
Details
Code Review / ai-code-review (push) Has been cancelled
Details
CD Pipeline / tests (push) Failing after 14m8s
Details
Type Sync Check / check-type-sync (push) Successful in 42s
Details
CD Pipeline / build-and-deploy (push) Has been cancelled
Details
CD Pipeline / post-deploy-checks (push) Has been cancelled
Details
2026-06-28 16:01:40 +08:00
Your Name
f791107938 fix(api): bound ansible backfill query cost
Some checks failed
Code Review / ai-code-review (push) Successful in 21s
Details
CD Pipeline / build-and-deploy (push) Has been cancelled
Details
CD Pipeline / post-deploy-checks (push) Has been cancelled
Details
CD Pipeline / tests (push) Has been cancelled
Details
2026-06-27 14:10:17 +08:00
Your Name
7a1ad85d64 fix(api): backfill ansible apply repair receipts
Some checks failed
Code Review / ai-code-review (push) Successful in 13s
Details
CD Pipeline / tests (push) Successful in 1m39s
Details
AI 技術雷達監控 / ai-technology-watch (push) Successful in 39s
Details
CD Pipeline / build-and-deploy (push) Failing after 6m15s
Details
CD Pipeline / post-deploy-checks (push) Has been skipped
Details
2026-06-27 13:56:13 +08:00
Your Name
f88d89fc38 fix(api): backfill ansible repair candidates
All checks were successful
Code Review / ai-code-review (push) Successful in 20s
Details
CD Pipeline / tests (push) Successful in 1m45s
Details
CD Pipeline / build-and-deploy (push) Successful in 4m46s
Details
CD Pipeline / post-deploy-checks (push) Successful in 1m43s
Details
2026-06-27 13:36:39 +08:00
Your Name
e0a86b6254 feat(agents): route high risk through controlled automation
Some checks failed
Code Review / ai-code-review (push) Successful in 13s
Details
CD Pipeline / tests (push) Failing after 1m8s
Details
CD Pipeline / build-and-deploy (push) Has been skipped
Details
CD Pipeline / post-deploy-checks (push) Has been skipped
Details
Ansible / Reboot Recovery Contract / validate (push) Has been cancelled
Details
2026-06-26 19:19:40 +08:00
Your Name
ee2cc2bfc3 fix(alerts): 收斂 Telegram 告警到 SRE 戰情室
Some checks failed
CD Pipeline / tests (push) Failing after 1m23s
Details
CD Pipeline / build-and-deploy (push) Has been skipped
Details
CD Pipeline / post-deploy-checks (push) Has been skipped
Details
Code Review / ai-code-review (push) Successful in 15s
Details
2026-06-12 11:06:16 +08:00
Your Name
9886df8785 fix(ai): suppress sealed slo watchdog meta noise
All checks were successful
CD Pipeline / tests (push) Successful in 1m21s
Details
Code Review / ai-code-review (push) Successful in 17s
Details
CD Pipeline / build-and-deploy (push) Successful in 3m48s
Details
CD Pipeline / post-deploy-checks (push) Successful in 2m6s
Details
2026-06-01 18:52:27 +08:00
Your Name
d610c7386e fix(api): explain auto execute slo degradation
All checks were successful
CD Pipeline / tests (push) Successful in 1m20s
Details
Code Review / ai-code-review (push) Successful in 12s
Details
CD Pipeline / build-and-deploy (push) Successful in 7m32s
Details
CD Pipeline / post-deploy-checks (push) Successful in 1m46s
Details
2026-06-01 17:45:13 +08:00
Your Name
9080ba3670 feat(awooop): run ansible check-mode evidence worker
All checks were successful
CD Pipeline / tests (push) Successful in 1m28s
Details
Code Review / ai-code-review (push) Successful in 12s
Details
CD Pipeline / build-and-deploy (push) Successful in 5m9s
Details
CD Pipeline / post-deploy-checks (push) Successful in 1m30s
Details
2026-05-31 12:53:22 +08:00
Your Name
9e093a9525 fix(api): reconcile inactive stale incidents
All checks were successful
CD Pipeline / tests (push) Successful in 1m26s
Details
Code Review / ai-code-review (push) Successful in 11s
Details
CD Pipeline / build-and-deploy (push) Successful in 4m23s
Details
CD Pipeline / post-deploy-checks (push) Successful in 2m17s
Details
2026-05-29 11:43:19 +08:00
Your Name
8342cfa460 fix(governance): stop km healthcheck requeue
All checks were successful
Code Review / ai-code-review (push) Successful in 11s
Details
CD Pipeline / tests (push) Successful in 2m1s
Details
CD Pipeline / build-and-deploy (push) Successful in 4m45s
Details
CD Pipeline / post-deploy-checks (push) Successful in 1m46s
Details
2026-05-19 23:01:03 +08:00
Your Name
edf97ad8ca feat(governance): process hermes km healthchecks
All checks were successful
Code Review / ai-code-review (push) Successful in 10s
Details
CD Pipeline / tests (push) Successful in 2m13s
Details
CD Pipeline / build-and-deploy (push) Successful in 5m14s
Details
CD Pipeline / post-deploy-checks (push) Successful in 1m55s
Details
2026-05-19 22:32:55 +08:00
Your Name
1d285dd9d4 fix(api): suppress batch reconcile postmortems
Some checks failed
Code Review / ai-code-review (push) Successful in 11s
Details
CD Pipeline / tests (push) Successful in 1m18s
Details
CD Pipeline / post-deploy-checks (push) Has been cancelled
Details
CD Pipeline / build-and-deploy (push) Has been cancelled
Details
2026-05-19 12:18:17 +08:00
Your Name
d0835a7be1 fix(api): reconcile completed stuck incidents
All checks were successful
Code Review / ai-code-review (push) Successful in 11s
Details
CD Pipeline / tests (push) Successful in 1m2s
Details
CD Pipeline / build-and-deploy (push) Successful in 3m34s
Details
CD Pipeline / post-deploy-checks (push) Successful in 1m35s
Details
2026-05-19 11:45:15 +08:00
Your Name
ff30c61c4c fix(rls): 收斂 API DB access context
All checks were successful
Code Review / ai-code-review (push) Successful in 21s
Details
CD Pipeline / tests (push) Successful in 1m20s
Details
CD Pipeline / build-and-deploy (push) Successful in 4m15s
Details
CD Pipeline / post-deploy-checks (push) Successful in 1m58s
Details
2026-05-12 19:55:13 +08:00
Your Name
c1ac157aaf fix(km): keep backfill reconciler loop alive
All checks were successful
Code Review / ai-code-review (push) Successful in 11s
Details
CD Pipeline / tests (push) Successful in 1m12s
Details
CD Pipeline / build-and-deploy (push) Successful in 4m2s
Details
CD Pipeline / post-deploy-checks (push) Successful in 1m18s
Details
2026-05-06 17:03:22 +08:00
Your Name
4111ea4f9f fix(ai): remove 188 ollama provider
All checks were successful
Code Review / ai-code-review (push) Successful in 12s
Details
CD Pipeline / tests (push) Successful in 1m13s
Details
CD Pipeline / build-and-deploy (push) Successful in 3m36s
Details
CD Pipeline / post-deploy-checks (push) Successful in 1m20s
Details
2026-05-06 14:34:48 +08:00
Your Name
bf847ad045 fix(ai): stabilize GCP Ollama alert lane
Some checks failed
Code Review / ai-code-review (push) Successful in 10s
Details
CD Pipeline / build-and-deploy (push) Has been cancelled
Details
CD Pipeline / post-deploy-checks (push) Has been cancelled
Details
CD Pipeline / tests (push) Has been cancelled
Details
2026-05-05 22:20:27 +08:00
Your Name
8e22110030 fix(governance): keep trust drift watchdog on governance agent
Some checks failed
CD Pipeline / tests (push) Successful in 2m51s
Details
Code Review / ai-code-review (push) Successful in 24s
Details
CD Pipeline / build-and-deploy (push) Has started running
Details
CD Pipeline / post-deploy-checks (push) Has been cancelled
Details
2026-05-05 14:00:13 +08:00
Your Name
aa4ccec429 fix(watchdog): ADR-092 B4 — 三層修復消除 META SYSTEM 重複告警 + Ollama 路由強化
All checks were successful
Code Review / ai-code-review (push) Successful in 7m16s
Details 
問題根因（debugger 全景徹查）：
1. Prod 仍跑舊版代碼（ec013f66 後的修法未部署 → 告警字串仍含舊格式）
2. replicas=2 時 Pod 間 grace period 不共享 → violation_codes 分歧 → 不同 SHA256 → dedup 失效
3. 新 Pod 啟動立即執行 _check_once() → rollout 時多發一波
4. W6 violation_codes 含動態 low_count → count 微變繞過 dedup

修復（A2/A3/W6/C1/C2）：
- A2：run_ai_slo_watchdog_loop 加 90s leading sleep，避免 rollout 立即觸發
- A3：_grace_active() 改為 Redis cluster-shared（watchdog:cluster_grace, ex=1800s, nx=True）
     消除 Pod 間 grace period 不一致；Redis 故障時 fallback 為 process-local monotonic
- W6：violation_codes 移除動態 low_count，改為穩定 "W6:trust_drift"
- C1：ollama_auto_recovery.py recovered_host 改動態 label（依 URL port 判斷 GCP-A/B/Local）
- C2：ConfigMap OLLAMA_FALLBACK_URL 改走 110:11437 nginx proxy，三層容災統一架構

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-05 10:31:53 +08:00
Your Name
10e665a540 fix(watchdog): 修復 META SYSTEM 重複告警 — violation_codes 穩定 dedup
All checks were successful
Code Review / ai-code-review (push) Successful in 1m3s
Details 
根因：violations 字串含動態浮點數（mean_trust/low_ratio），每次微變 → SHA256 不同 → dedup 失效
修法：新增 violation_codes list（穩定 W-code 格式），dedup 計算只用 violation_codes
     violations 保持含動態值（顯示用），Telegram 通知照常顯示完整資訊

W-6 Trust Drift dedup key: W6:trust_drift:low_count={N}（不含浮點數）

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-05 00:06:38 +08:00
Your Name
ec013f662d fix(watchdog): 修复 Trust Drift 重复告警 + 建立 GCP Ollama nginx proxy
Some checks failed
Code Review / ai-code-review (push) Successful in 45s
Details
Ansible Lint / lint (push) Has been cancelled
Details 
- ai_slo_watchdog_job: 改用 trust_drift_detector 纯统计 lib
  避免与 governance_agent 每小时自检查重复触发 Telegram

- infra/ansible: 建立 110 nginx proxy 转发到 GCP-A/B
  端口 11435 -> 34.143.170.20:11434 (GCP-A)
  端口 11436 -> 34.21.145.224:11434 (GCP-B)

- docs/runbooks: DEPLOY-GCP-OLLAMA-PROXY.md 完整部署指南
- ops/nginx: 手动部署脚本供 110 直接执行

ADR-110 三层容灾启用前提：先部署 proxy，再改 ConfigMap
 2026-05-04 23:12:35 +08:00