{ "schema_version": "telegram_notification_egress_owner_response_acceptance_v1", "generated_at": "2026-06-19T02:05:13+08:00", "git_commit": "1eaa51e6", "status": "owner_response_acceptance_ledger_ready_no_runtime_action", "mode": "metadata_only_no_secret_value_no_telegram_send_no_workflow_script_api_change", "source_owner_request_snapshot": "docs/security/telegram-notification-egress-owner-request-draft.snapshot.json", "source_owner_request_schema_version": "telegram_notification_egress_owner_request_draft_v1", "source_owner_request_status": "owner_request_draft_ready_no_dispatch_no_runtime_action", "source_migration_plan_snapshot": "docs/security/telegram-notification-egress-migration-plan-draft.snapshot.json", "source_migration_plan_schema_version": "telegram_notification_egress_migration_plan_draft_v1", "source_migration_plan_status": "migration_plan_draft_ready_no_runtime_action", "message_readability_guard_snapshot": "docs/security/telegram-alert-readability-guard.snapshot.json", "summary": { "source_request_draft_count": 11, "source_migration_candidate_count": 11, "source_direct_bot_api_call_count": 18, "acceptance_candidate_count": 11, "workflow_acceptance_candidate_count": 6, "ops_script_acceptance_candidate_count": 4, "api_direct_acceptance_candidate_count": 1, "acceptance_field_count": 33, "required_owner_field_count": 19, "reviewer_check_count": 23, "outcome_lane_count": 10, "forbidden_payload_count": 14, "blocked_action_count": 35, "request_sent_count": 0, "recipient_confirmed_count": 0, "audit_event_emitted_count": 0, "owner_response_received_count": 0, "owner_response_accepted_count": 0, "owner_response_rejected_count": 0, "owner_response_quarantined_count": 0, "supplement_requested_count": 0, "formatter_convergence_accepted_count": 0, "redaction_contract_accepted_count": 0, "delivery_receipt_accepted_count": 0, "break_glass_fallback_accepted_count": 0, "maintenance_window_accepted_count": 0, "rollback_owner_accepted_count": 0, "postcheck_evidence_accepted_count": 0, "dedup_or_fingerprint_accepted_count": 0, "no_false_green_accepted_count": 0, "direct_bot_api_migration_authorized_count": 0, "workflow_modification_authorized_count": 0, "script_modification_authorized_count": 0, "api_sender_refactor_authorized_count": 0, "telegram_send_authorized_count": 0, "bot_api_call_authorized_count": 0, "workflow_dispatch_authorized_count": 0, "production_deploy_authorized_count": 0, "secret_value_collection_allowed_count": 0, "raw_payload_storage_allowed_count": 0, "production_write_authorized_count": 0, "runtime_gate_count": 0, "action_button_count": 0 }, "execution_boundaries": { "runtime_execution_authorized": false, "owner_response_mark_received_authorized": false, "owner_response_mark_accepted_authorized": false, "direct_bot_api_migration_authorized": false, "workflow_modification_authorized": false, "script_modification_authorized": false, "api_sender_refactor_authorized": false, "telegram_send_authorized": false, "bot_api_call_authorized": false, "workflow_dispatch_authorized": false, "production_deploy_authorized": false, "secret_value_collection_allowed": false, "raw_payload_storage_allowed": false, "production_write_authorized": false, "action_buttons_allowed": false, "not_authorization": true }, "acceptance_candidates": [ { "acceptance_candidate_id": "telegram_notification_egress_owner_response_acceptance:.gitea/workflows/cd-dev.yaml", "status": "waiting_owner_response", "source_request_draft_id": "telegram_notification_egress_owner_request:_gitea_workflows_cd_dev_yaml", "source_migration_candidate_id": "telegram_notification_egress_migration:.gitea/workflows/cd-dev.yaml", "source_path": ".gitea/workflows/cd-dev.yaml", "surface_kind": "gitea_workflow_direct_bot_api", "direct_call_count": 3, "line_refs": [ 54, 241, 262 ], "line_hash_refs": [ "f503c2c0f61100a9", "c41f88fbca91a4b9", "eaa9a6cb8326dc79" ], "proposed_wave": "wave_1_workflow_notification_wrapper", "proposed_target": "scripts/ci/notify-awoooi-cicd.sh or AWOOI Alertmanager webhook", "proposed_change_summary": "Replace direct workflow Bot API send with normalized CI/CD notification wrapper after owner approval.", "owner_response_ref": null, "owner_role_or_team": "pending_owner_response", "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "affected_scope": "pending_owner_response", "redacted_evidence_refs": [], "message_shape_contract_ref": null, "message_readability_guard_ref": "docs/security/telegram-alert-readability-guard.snapshot.json", "redaction_contract_ref": null, "formatter_convergence_decision": "pending_owner_response", "gateway_or_alertmanager_target": "pending_owner_response", "break_glass_fallback_decision": "pending_owner_response", "delivery_receipt_ref": null, "dedup_or_fingerprint_plan": "pending_owner_response", "fallback_or_degraded_mode": "pending_owner_response", "migration_or_exception_reason": "pending_owner_response", "maintenance_window": "pending_owner_response", "rollback_owner": "pending_owner_response", "postcheck_evidence_ref": null, "no_secret_value_attestation": "pending_owner_response", "no_raw_payload_attestation": "pending_owner_response", "no_false_green_attestation": "pending_owner_response", "reviewer_outcome": "waiting_owner_response", "followup_owner": "pending_owner_response", "acceptance_fields": [ "acceptance_candidate_id", "source_request_draft_id", "source_migration_candidate_id", "source_path", "surface_kind", "direct_call_count", "proposed_wave", "proposed_target", "owner_response_ref", "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "message_shape_contract_ref", "message_readability_guard_ref", "redaction_contract_ref", "formatter_convergence_decision", "gateway_or_alertmanager_target", "break_glass_fallback_decision", "delivery_receipt_ref", "dedup_or_fingerprint_plan", "fallback_or_degraded_mode", "migration_or_exception_reason", "maintenance_window", "rollback_owner", "postcheck_evidence_ref", "no_secret_value_attestation", "no_raw_payload_attestation", "no_false_green_attestation", "reviewer_outcome", "followup_owner", "not_authorization" ], "required_owner_fields": [ "owner_role_or_team", "routing_purpose", "current_sender", "target_chat_route", "message_shape_contract", "redaction_contract", "formatter_convergence_decision", "gateway_or_alertmanager_target", "break_glass_fallback_decision", "delivery_receipt_ref", "dedup_or_fingerprint_plan", "fallback_or_degraded_mode", "migration_or_exception_reason", "maintenance_window", "rollback_owner", "postcheck_evidence_ref", "no_secret_value_attestation", "no_raw_payload_attestation", "no_false_green_attestation" ], "reviewer_checks": [ "source_owner_request_current", "source_migration_plan_current", "owner_identity_present", "decision_reason_present", "affected_scope_matches_source", "redacted_refs_only", "no_secret_or_token_value", "no_raw_message_payload", "message_shape_contract_present", "message_readability_guard_present", "redaction_contract_present", "formatter_convergence_explicit", "gateway_or_alertmanager_target_valid", "break_glass_fallback_explicit", "delivery_receipt_metadata_only", "dedup_or_fingerprint_present", "maintenance_window_present", "rollback_owner_present", "postcheck_evidence_present", "no_false_green_attested", "migration_authorization_separate", "counts_transition_safe", "runtime_gate_stays_zero" ], "outcome_lanes": [ "waiting_owner_response", "quarantine_secret_or_raw_payload", "reject_execution_request", "request_owner_route_supplement", "request_formatter_convergence_supplement", "request_redaction_or_receipt_supplement", "request_maintenance_or_rollback_supplement", "ready_for_migration_review", "owner_review_only_update", "waiting_runtime_gate" ], "forbidden_payloads": [ "bot_token_value", "chat_secret_value", "secret_hash", "partial_token", "masked_token", "authorization_header", "raw_message_payload", "raw_workflow_log", "raw_action_log", "raw_screenshot_with_secret", "internal_work_window_transcript", "private_namespace", "unredacted_internal_path", "unredacted_private_ip" ], "blocked_actions": [ "mark_owner_response_received_without_record", "mark_owner_response_accepted_without_reviewer_record", "send_telegram", "call_bot_api", "modify_workflow", "modify_ops_script", "refactor_api_sender", "dispatch_workflow", "trigger_cd", "deploy_production", "change_chat_route", "change_bot_token", "rotate_secret", "read_secret_store", "collect_secret_value", "collect_secret_hash", "collect_partial_token", "collect_chat_id_secret", "store_raw_message_payload", "store_unredacted_log", "store_internal_work_window_transcript", "accept_cd_success_as_delivery_receipt", "accept_route_200_as_notification_delivery", "accept_ui_visible_as_notification_acceptance", "accept_telegram_sent_without_delivery_receipt", "skip_formatter_convergence", "skip_redaction_contract", "skip_dedup_or_fingerprint_review", "skip_break_glass_fallback_review", "authorize_migration", "authorize_workflow_modification", "authorize_script_modification", "authorize_api_sender_refactor", "open_runtime_gate", "add_action_button" ], "not_authorization": true, "request_sent": false, "recipient_confirmed": false, "audit_event_emitted": false, "owner_response_received": false, "owner_response_accepted": false, "owner_response_rejected": false, "owner_response_quarantined": false, "supplement_requested": false, "formatter_convergence_accepted": false, "redaction_contract_accepted": false, "delivery_receipt_accepted": false, "break_glass_fallback_accepted": false, "maintenance_window_accepted": false, "rollback_owner_accepted": false, "postcheck_evidence_accepted": false, "dedup_or_fingerprint_accepted": false, "no_false_green_accepted": false, "direct_bot_api_migration_authorized": false, "workflow_modification_authorized": false, "script_modification_authorized": false, "api_sender_refactor_authorized": false, "telegram_send_authorized": false, "bot_api_call_authorized": false, "workflow_dispatch_authorized": false, "production_deploy_authorized": false, "secret_value_collection_allowed": false, "raw_payload_storage_allowed": false, "production_write_authorized": false, "runtime_gate": false, "action_buttons_allowed": false }, { "acceptance_candidate_id": "telegram_notification_egress_owner_response_acceptance:.gitea/workflows/cd.yaml", "status": "waiting_owner_response", "source_request_draft_id": "telegram_notification_egress_owner_request:_gitea_workflows_cd_yaml", "source_migration_candidate_id": "telegram_notification_egress_migration:.gitea/workflows/cd.yaml", "source_path": ".gitea/workflows/cd.yaml", "surface_kind": "gitea_workflow_direct_bot_api", "direct_call_count": 5, "line_refs": [ 113, 305, 1203, 1552, 1575 ], "line_hash_refs": [ "b57e6587a106976b", "19c1de8d67af874a", "6ef020c2b6eac91f", "d029b95242f39c03", "d62c45a8595984fc" ], "proposed_wave": "wave_1_workflow_notification_wrapper", "proposed_target": "scripts/ci/notify-awoooi-cicd.sh or AWOOI Alertmanager webhook", "proposed_change_summary": "Replace direct workflow Bot API send with normalized CI/CD notification wrapper after owner approval.", "owner_response_ref": null, "owner_role_or_team": "pending_owner_response", "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "affected_scope": "pending_owner_response", "redacted_evidence_refs": [], "message_shape_contract_ref": null, "message_readability_guard_ref": "docs/security/telegram-alert-readability-guard.snapshot.json", "redaction_contract_ref": null, "formatter_convergence_decision": "pending_owner_response", "gateway_or_alertmanager_target": "pending_owner_response", "break_glass_fallback_decision": "pending_owner_response", "delivery_receipt_ref": null, "dedup_or_fingerprint_plan": "pending_owner_response", "fallback_or_degraded_mode": "pending_owner_response", "migration_or_exception_reason": "pending_owner_response", "maintenance_window": "pending_owner_response", "rollback_owner": "pending_owner_response", "postcheck_evidence_ref": null, "no_secret_value_attestation": "pending_owner_response", "no_raw_payload_attestation": "pending_owner_response", "no_false_green_attestation": "pending_owner_response", "reviewer_outcome": "waiting_owner_response", "followup_owner": "pending_owner_response", "acceptance_fields": [ "acceptance_candidate_id", "source_request_draft_id", "source_migration_candidate_id", "source_path", "surface_kind", "direct_call_count", "proposed_wave", "proposed_target", "owner_response_ref", "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "message_shape_contract_ref", "message_readability_guard_ref", "redaction_contract_ref", "formatter_convergence_decision", "gateway_or_alertmanager_target", "break_glass_fallback_decision", "delivery_receipt_ref", "dedup_or_fingerprint_plan", "fallback_or_degraded_mode", "migration_or_exception_reason", "maintenance_window", "rollback_owner", "postcheck_evidence_ref", "no_secret_value_attestation", "no_raw_payload_attestation", "no_false_green_attestation", "reviewer_outcome", "followup_owner", "not_authorization" ], "required_owner_fields": [ "owner_role_or_team", "routing_purpose", "current_sender", "target_chat_route", "message_shape_contract", "redaction_contract", "formatter_convergence_decision", "gateway_or_alertmanager_target", "break_glass_fallback_decision", "delivery_receipt_ref", "dedup_or_fingerprint_plan", "fallback_or_degraded_mode", "migration_or_exception_reason", "maintenance_window", "rollback_owner", "postcheck_evidence_ref", "no_secret_value_attestation", "no_raw_payload_attestation", "no_false_green_attestation" ], "reviewer_checks": [ "source_owner_request_current", "source_migration_plan_current", "owner_identity_present", "decision_reason_present", "affected_scope_matches_source", "redacted_refs_only", "no_secret_or_token_value", "no_raw_message_payload", "message_shape_contract_present", "message_readability_guard_present", "redaction_contract_present", "formatter_convergence_explicit", "gateway_or_alertmanager_target_valid", "break_glass_fallback_explicit", "delivery_receipt_metadata_only", "dedup_or_fingerprint_present", "maintenance_window_present", "rollback_owner_present", "postcheck_evidence_present", "no_false_green_attested", "migration_authorization_separate", "counts_transition_safe", "runtime_gate_stays_zero" ], "outcome_lanes": [ "waiting_owner_response", "quarantine_secret_or_raw_payload", "reject_execution_request", "request_owner_route_supplement", "request_formatter_convergence_supplement", "request_redaction_or_receipt_supplement", "request_maintenance_or_rollback_supplement", "ready_for_migration_review", "owner_review_only_update", "waiting_runtime_gate" ], "forbidden_payloads": [ "bot_token_value", "chat_secret_value", "secret_hash", "partial_token", "masked_token", "authorization_header", "raw_message_payload", "raw_workflow_log", "raw_action_log", "raw_screenshot_with_secret", "internal_work_window_transcript", "private_namespace", "unredacted_internal_path", "unredacted_private_ip" ], "blocked_actions": [ "mark_owner_response_received_without_record", "mark_owner_response_accepted_without_reviewer_record", "send_telegram", "call_bot_api", "modify_workflow", "modify_ops_script", "refactor_api_sender", "dispatch_workflow", "trigger_cd", "deploy_production", "change_chat_route", "change_bot_token", "rotate_secret", "read_secret_store", "collect_secret_value", "collect_secret_hash", "collect_partial_token", "collect_chat_id_secret", "store_raw_message_payload", "store_unredacted_log", "store_internal_work_window_transcript", "accept_cd_success_as_delivery_receipt", "accept_route_200_as_notification_delivery", "accept_ui_visible_as_notification_acceptance", "accept_telegram_sent_without_delivery_receipt", "skip_formatter_convergence", "skip_redaction_contract", "skip_dedup_or_fingerprint_review", "skip_break_glass_fallback_review", "authorize_migration", "authorize_workflow_modification", "authorize_script_modification", "authorize_api_sender_refactor", "open_runtime_gate", "add_action_button" ], "not_authorization": true, "request_sent": false, "recipient_confirmed": false, "audit_event_emitted": false, "owner_response_received": false, "owner_response_accepted": false, "owner_response_rejected": false, "owner_response_quarantined": false, "supplement_requested": false, "formatter_convergence_accepted": false, "redaction_contract_accepted": false, "delivery_receipt_accepted": false, "break_glass_fallback_accepted": false, "maintenance_window_accepted": false, "rollback_owner_accepted": false, "postcheck_evidence_accepted": false, "dedup_or_fingerprint_accepted": false, "no_false_green_accepted": false, "direct_bot_api_migration_authorized": false, "workflow_modification_authorized": false, "script_modification_authorized": false, "api_sender_refactor_authorized": false, "telegram_send_authorized": false, "bot_api_call_authorized": false, "workflow_dispatch_authorized": false, "production_deploy_authorized": false, "secret_value_collection_allowed": false, "raw_payload_storage_allowed": false, "production_write_authorized": false, "runtime_gate": false, "action_buttons_allowed": false }, { "acceptance_candidate_id": "telegram_notification_egress_owner_response_acceptance:.gitea/workflows/code-review.yaml", "status": "waiting_owner_response", "source_request_draft_id": "telegram_notification_egress_owner_request:_gitea_workflows_code_review_yaml", "source_migration_candidate_id": "telegram_notification_egress_migration:.gitea/workflows/code-review.yaml", "source_path": ".gitea/workflows/code-review.yaml", "surface_kind": "gitea_workflow_direct_bot_api", "direct_call_count": 2, "line_refs": [ 137, 216 ], "line_hash_refs": [ "a7ebbd735dad5ab2", "f10f7782dc7c8125" ], "proposed_wave": "wave_1_workflow_notification_wrapper", "proposed_target": "scripts/ci/notify-awoooi-cicd.sh or AWOOI Alertmanager webhook", "proposed_change_summary": "Replace direct workflow Bot API send with normalized CI/CD notification wrapper after owner approval.", "owner_response_ref": null, "owner_role_or_team": "pending_owner_response", "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "affected_scope": "pending_owner_response", "redacted_evidence_refs": [], "message_shape_contract_ref": null, "message_readability_guard_ref": "docs/security/telegram-alert-readability-guard.snapshot.json", "redaction_contract_ref": null, "formatter_convergence_decision": "pending_owner_response", "gateway_or_alertmanager_target": "pending_owner_response", "break_glass_fallback_decision": "pending_owner_response", "delivery_receipt_ref": null, "dedup_or_fingerprint_plan": "pending_owner_response", "fallback_or_degraded_mode": "pending_owner_response", "migration_or_exception_reason": "pending_owner_response", "maintenance_window": "pending_owner_response", "rollback_owner": "pending_owner_response", "postcheck_evidence_ref": null, "no_secret_value_attestation": "pending_owner_response", "no_raw_payload_attestation": "pending_owner_response", "no_false_green_attestation": "pending_owner_response", "reviewer_outcome": "waiting_owner_response", "followup_owner": "pending_owner_response", "acceptance_fields": [ "acceptance_candidate_id", "source_request_draft_id", "source_migration_candidate_id", "source_path", "surface_kind", "direct_call_count", "proposed_wave", "proposed_target", "owner_response_ref", "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "message_shape_contract_ref", "message_readability_guard_ref", "redaction_contract_ref", "formatter_convergence_decision", "gateway_or_alertmanager_target", "break_glass_fallback_decision", "delivery_receipt_ref", "dedup_or_fingerprint_plan", "fallback_or_degraded_mode", "migration_or_exception_reason", "maintenance_window", "rollback_owner", "postcheck_evidence_ref", "no_secret_value_attestation", "no_raw_payload_attestation", "no_false_green_attestation", "reviewer_outcome", "followup_owner", "not_authorization" ], "required_owner_fields": [ "owner_role_or_team", "routing_purpose", "current_sender", "target_chat_route", "message_shape_contract", "redaction_contract", "formatter_convergence_decision", "gateway_or_alertmanager_target", "break_glass_fallback_decision", "delivery_receipt_ref", "dedup_or_fingerprint_plan", "fallback_or_degraded_mode", "migration_or_exception_reason", "maintenance_window", "rollback_owner", "postcheck_evidence_ref", "no_secret_value_attestation", "no_raw_payload_attestation", "no_false_green_attestation" ], "reviewer_checks": [ "source_owner_request_current", "source_migration_plan_current", "owner_identity_present", "decision_reason_present", "affected_scope_matches_source", "redacted_refs_only", "no_secret_or_token_value", "no_raw_message_payload", "message_shape_contract_present", "message_readability_guard_present", "redaction_contract_present", "formatter_convergence_explicit", "gateway_or_alertmanager_target_valid", "break_glass_fallback_explicit", "delivery_receipt_metadata_only", "dedup_or_fingerprint_present", "maintenance_window_present", "rollback_owner_present", "postcheck_evidence_present", "no_false_green_attested", "migration_authorization_separate", "counts_transition_safe", "runtime_gate_stays_zero" ], "outcome_lanes": [ "waiting_owner_response", "quarantine_secret_or_raw_payload", "reject_execution_request", "request_owner_route_supplement", "request_formatter_convergence_supplement", "request_redaction_or_receipt_supplement", "request_maintenance_or_rollback_supplement", "ready_for_migration_review", "owner_review_only_update", "waiting_runtime_gate" ], "forbidden_payloads": [ "bot_token_value", "chat_secret_value", "secret_hash", "partial_token", "masked_token", "authorization_header", "raw_message_payload", "raw_workflow_log", "raw_action_log", "raw_screenshot_with_secret", "internal_work_window_transcript", "private_namespace", "unredacted_internal_path", "unredacted_private_ip" ], "blocked_actions": [ "mark_owner_response_received_without_record", "mark_owner_response_accepted_without_reviewer_record", "send_telegram", "call_bot_api", "modify_workflow", "modify_ops_script", "refactor_api_sender", "dispatch_workflow", "trigger_cd", "deploy_production", "change_chat_route", "change_bot_token", "rotate_secret", "read_secret_store", "collect_secret_value", "collect_secret_hash", "collect_partial_token", "collect_chat_id_secret", "store_raw_message_payload", "store_unredacted_log", "store_internal_work_window_transcript", "accept_cd_success_as_delivery_receipt", "accept_route_200_as_notification_delivery", "accept_ui_visible_as_notification_acceptance", "accept_telegram_sent_without_delivery_receipt", "skip_formatter_convergence", "skip_redaction_contract", "skip_dedup_or_fingerprint_review", "skip_break_glass_fallback_review", "authorize_migration", "authorize_workflow_modification", "authorize_script_modification", "authorize_api_sender_refactor", "open_runtime_gate", "add_action_button" ], "not_authorization": true, "request_sent": false, "recipient_confirmed": false, "audit_event_emitted": false, "owner_response_received": false, "owner_response_accepted": false, "owner_response_rejected": false, "owner_response_quarantined": false, "supplement_requested": false, "formatter_convergence_accepted": false, "redaction_contract_accepted": false, "delivery_receipt_accepted": false, "break_glass_fallback_accepted": false, "maintenance_window_accepted": false, "rollback_owner_accepted": false, "postcheck_evidence_accepted": false, "dedup_or_fingerprint_accepted": false, "no_false_green_accepted": false, "direct_bot_api_migration_authorized": false, "workflow_modification_authorized": false, "script_modification_authorized": false, "api_sender_refactor_authorized": false, "telegram_send_authorized": false, "bot_api_call_authorized": false, "workflow_dispatch_authorized": false, "production_deploy_authorized": false, "secret_value_collection_allowed": false, "raw_payload_storage_allowed": false, "production_write_authorized": false, "runtime_gate": false, "action_buttons_allowed": false }, { "acceptance_candidate_id": "telegram_notification_egress_owner_response_acceptance:.gitea/workflows/deploy-alerts.yaml", "status": "waiting_owner_response", "source_request_draft_id": "telegram_notification_egress_owner_request:_gitea_workflows_deploy_alerts_yaml", "source_migration_candidate_id": "telegram_notification_egress_migration:.gitea/workflows/deploy-alerts.yaml", "source_path": ".gitea/workflows/deploy-alerts.yaml", "surface_kind": "gitea_workflow_direct_bot_api", "direct_call_count": 1, "line_refs": [ 69 ], "line_hash_refs": [ "79e83190f68f27c9" ], "proposed_wave": "wave_1_workflow_notification_wrapper", "proposed_target": "scripts/ci/notify-awoooi-cicd.sh or AWOOI Alertmanager webhook", "proposed_change_summary": "Replace direct workflow Bot API send with normalized CI/CD notification wrapper after owner approval.", "owner_response_ref": null, "owner_role_or_team": "pending_owner_response", "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "affected_scope": "pending_owner_response", "redacted_evidence_refs": [], "message_shape_contract_ref": null, "message_readability_guard_ref": "docs/security/telegram-alert-readability-guard.snapshot.json", "redaction_contract_ref": null, "formatter_convergence_decision": "pending_owner_response", "gateway_or_alertmanager_target": "pending_owner_response", "break_glass_fallback_decision": "pending_owner_response", "delivery_receipt_ref": null, "dedup_or_fingerprint_plan": "pending_owner_response", "fallback_or_degraded_mode": "pending_owner_response", "migration_or_exception_reason": "pending_owner_response", "maintenance_window": "pending_owner_response", "rollback_owner": "pending_owner_response", "postcheck_evidence_ref": null, "no_secret_value_attestation": "pending_owner_response", "no_raw_payload_attestation": "pending_owner_response", "no_false_green_attestation": "pending_owner_response", "reviewer_outcome": "waiting_owner_response", "followup_owner": "pending_owner_response", "acceptance_fields": [ "acceptance_candidate_id", "source_request_draft_id", "source_migration_candidate_id", "source_path", "surface_kind", "direct_call_count", "proposed_wave", "proposed_target", "owner_response_ref", "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "message_shape_contract_ref", "message_readability_guard_ref", "redaction_contract_ref", "formatter_convergence_decision", "gateway_or_alertmanager_target", "break_glass_fallback_decision", "delivery_receipt_ref", "dedup_or_fingerprint_plan", "fallback_or_degraded_mode", "migration_or_exception_reason", "maintenance_window", "rollback_owner", "postcheck_evidence_ref", "no_secret_value_attestation", "no_raw_payload_attestation", "no_false_green_attestation", "reviewer_outcome", "followup_owner", "not_authorization" ], "required_owner_fields": [ "owner_role_or_team", "routing_purpose", "current_sender", "target_chat_route", "message_shape_contract", "redaction_contract", "formatter_convergence_decision", "gateway_or_alertmanager_target", "break_glass_fallback_decision", "delivery_receipt_ref", "dedup_or_fingerprint_plan", "fallback_or_degraded_mode", "migration_or_exception_reason", "maintenance_window", "rollback_owner", "postcheck_evidence_ref", "no_secret_value_attestation", "no_raw_payload_attestation", "no_false_green_attestation" ], "reviewer_checks": [ "source_owner_request_current", "source_migration_plan_current", "owner_identity_present", "decision_reason_present", "affected_scope_matches_source", "redacted_refs_only", "no_secret_or_token_value", "no_raw_message_payload", "message_shape_contract_present", "message_readability_guard_present", "redaction_contract_present", "formatter_convergence_explicit", "gateway_or_alertmanager_target_valid", "break_glass_fallback_explicit", "delivery_receipt_metadata_only", "dedup_or_fingerprint_present", "maintenance_window_present", "rollback_owner_present", "postcheck_evidence_present", "no_false_green_attested", "migration_authorization_separate", "counts_transition_safe", "runtime_gate_stays_zero" ], "outcome_lanes": [ "waiting_owner_response", "quarantine_secret_or_raw_payload", "reject_execution_request", "request_owner_route_supplement", "request_formatter_convergence_supplement", "request_redaction_or_receipt_supplement", "request_maintenance_or_rollback_supplement", "ready_for_migration_review", "owner_review_only_update", "waiting_runtime_gate" ], "forbidden_payloads": [ "bot_token_value", "chat_secret_value", "secret_hash", "partial_token", "masked_token", "authorization_header", "raw_message_payload", "raw_workflow_log", "raw_action_log", "raw_screenshot_with_secret", "internal_work_window_transcript", "private_namespace", "unredacted_internal_path", "unredacted_private_ip" ], "blocked_actions": [ "mark_owner_response_received_without_record", "mark_owner_response_accepted_without_reviewer_record", "send_telegram", "call_bot_api", "modify_workflow", "modify_ops_script", "refactor_api_sender", "dispatch_workflow", "trigger_cd", "deploy_production", "change_chat_route", "change_bot_token", "rotate_secret", "read_secret_store", "collect_secret_value", "collect_secret_hash", "collect_partial_token", "collect_chat_id_secret", "store_raw_message_payload", "store_unredacted_log", "store_internal_work_window_transcript", "accept_cd_success_as_delivery_receipt", "accept_route_200_as_notification_delivery", "accept_ui_visible_as_notification_acceptance", "accept_telegram_sent_without_delivery_receipt", "skip_formatter_convergence", "skip_redaction_contract", "skip_dedup_or_fingerprint_review", "skip_break_glass_fallback_review", "authorize_migration", "authorize_workflow_modification", "authorize_script_modification", "authorize_api_sender_refactor", "open_runtime_gate", "add_action_button" ], "not_authorization": true, "request_sent": false, "recipient_confirmed": false, "audit_event_emitted": false, "owner_response_received": false, "owner_response_accepted": false, "owner_response_rejected": false, "owner_response_quarantined": false, "supplement_requested": false, "formatter_convergence_accepted": false, "redaction_contract_accepted": false, "delivery_receipt_accepted": false, "break_glass_fallback_accepted": false, "maintenance_window_accepted": false, "rollback_owner_accepted": false, "postcheck_evidence_accepted": false, "dedup_or_fingerprint_accepted": false, "no_false_green_accepted": false, "direct_bot_api_migration_authorized": false, "workflow_modification_authorized": false, "script_modification_authorized": false, "api_sender_refactor_authorized": false, "telegram_send_authorized": false, "bot_api_call_authorized": false, "workflow_dispatch_authorized": false, "production_deploy_authorized": false, "secret_value_collection_allowed": false, "raw_payload_storage_allowed": false, "production_write_authorized": false, "runtime_gate": false, "action_buttons_allowed": false }, { "acceptance_candidate_id": "telegram_notification_egress_owner_response_acceptance:.gitea/workflows/e2e-health.yaml", "status": "waiting_owner_response", "source_request_draft_id": "telegram_notification_egress_owner_request:_gitea_workflows_e2e_health_yaml", "source_migration_candidate_id": "telegram_notification_egress_migration:.gitea/workflows/e2e-health.yaml", "source_path": ".gitea/workflows/e2e-health.yaml", "surface_kind": "gitea_workflow_direct_bot_api", "direct_call_count": 1, "line_refs": [ 98 ], "line_hash_refs": [ "d73ce94678f970a9" ], "proposed_wave": "wave_1_workflow_notification_wrapper", "proposed_target": "scripts/ci/notify-awoooi-cicd.sh or AWOOI Alertmanager webhook", "proposed_change_summary": "Replace direct workflow Bot API send with normalized CI/CD notification wrapper after owner approval.", "owner_response_ref": null, "owner_role_or_team": "pending_owner_response", "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "affected_scope": "pending_owner_response", "redacted_evidence_refs": [], "message_shape_contract_ref": null, "message_readability_guard_ref": "docs/security/telegram-alert-readability-guard.snapshot.json", "redaction_contract_ref": null, "formatter_convergence_decision": "pending_owner_response", "gateway_or_alertmanager_target": "pending_owner_response", "break_glass_fallback_decision": "pending_owner_response", "delivery_receipt_ref": null, "dedup_or_fingerprint_plan": "pending_owner_response", "fallback_or_degraded_mode": "pending_owner_response", "migration_or_exception_reason": "pending_owner_response", "maintenance_window": "pending_owner_response", "rollback_owner": "pending_owner_response", "postcheck_evidence_ref": null, "no_secret_value_attestation": "pending_owner_response", "no_raw_payload_attestation": "pending_owner_response", "no_false_green_attestation": "pending_owner_response", "reviewer_outcome": "waiting_owner_response", "followup_owner": "pending_owner_response", "acceptance_fields": [ "acceptance_candidate_id", "source_request_draft_id", "source_migration_candidate_id", "source_path", "surface_kind", "direct_call_count", "proposed_wave", "proposed_target", "owner_response_ref", "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "message_shape_contract_ref", "message_readability_guard_ref", "redaction_contract_ref", "formatter_convergence_decision", "gateway_or_alertmanager_target", "break_glass_fallback_decision", "delivery_receipt_ref", "dedup_or_fingerprint_plan", "fallback_or_degraded_mode", "migration_or_exception_reason", "maintenance_window", "rollback_owner", "postcheck_evidence_ref", "no_secret_value_attestation", "no_raw_payload_attestation", "no_false_green_attestation", "reviewer_outcome", "followup_owner", "not_authorization" ], "required_owner_fields": [ "owner_role_or_team", "routing_purpose", "current_sender", "target_chat_route", "message_shape_contract", "redaction_contract", "formatter_convergence_decision", "gateway_or_alertmanager_target", "break_glass_fallback_decision", "delivery_receipt_ref", "dedup_or_fingerprint_plan", "fallback_or_degraded_mode", "migration_or_exception_reason", "maintenance_window", "rollback_owner", "postcheck_evidence_ref", "no_secret_value_attestation", "no_raw_payload_attestation", "no_false_green_attestation" ], "reviewer_checks": [ "source_owner_request_current", "source_migration_plan_current", "owner_identity_present", "decision_reason_present", "affected_scope_matches_source", "redacted_refs_only", "no_secret_or_token_value", "no_raw_message_payload", "message_shape_contract_present", "message_readability_guard_present", "redaction_contract_present", "formatter_convergence_explicit", "gateway_or_alertmanager_target_valid", "break_glass_fallback_explicit", "delivery_receipt_metadata_only", "dedup_or_fingerprint_present", "maintenance_window_present", "rollback_owner_present", "postcheck_evidence_present", "no_false_green_attested", "migration_authorization_separate", "counts_transition_safe", "runtime_gate_stays_zero" ], "outcome_lanes": [ "waiting_owner_response", "quarantine_secret_or_raw_payload", "reject_execution_request", "request_owner_route_supplement", "request_formatter_convergence_supplement", "request_redaction_or_receipt_supplement", "request_maintenance_or_rollback_supplement", "ready_for_migration_review", "owner_review_only_update", "waiting_runtime_gate" ], "forbidden_payloads": [ "bot_token_value", "chat_secret_value", "secret_hash", "partial_token", "masked_token", "authorization_header", "raw_message_payload", "raw_workflow_log", "raw_action_log", "raw_screenshot_with_secret", "internal_work_window_transcript", "private_namespace", "unredacted_internal_path", "unredacted_private_ip" ], "blocked_actions": [ "mark_owner_response_received_without_record", "mark_owner_response_accepted_without_reviewer_record", "send_telegram", "call_bot_api", "modify_workflow", "modify_ops_script", "refactor_api_sender", "dispatch_workflow", "trigger_cd", "deploy_production", "change_chat_route", "change_bot_token", "rotate_secret", "read_secret_store", "collect_secret_value", "collect_secret_hash", "collect_partial_token", "collect_chat_id_secret", "store_raw_message_payload", "store_unredacted_log", "store_internal_work_window_transcript", "accept_cd_success_as_delivery_receipt", "accept_route_200_as_notification_delivery", "accept_ui_visible_as_notification_acceptance", "accept_telegram_sent_without_delivery_receipt", "skip_formatter_convergence", "skip_redaction_contract", "skip_dedup_or_fingerprint_review", "skip_break_glass_fallback_review", "authorize_migration", "authorize_workflow_modification", "authorize_script_modification", "authorize_api_sender_refactor", "open_runtime_gate", "add_action_button" ], "not_authorization": true, "request_sent": false, "recipient_confirmed": false, "audit_event_emitted": false, "owner_response_received": false, "owner_response_accepted": false, "owner_response_rejected": false, "owner_response_quarantined": false, "supplement_requested": false, "formatter_convergence_accepted": false, "redaction_contract_accepted": false, "delivery_receipt_accepted": false, "break_glass_fallback_accepted": false, "maintenance_window_accepted": false, "rollback_owner_accepted": false, "postcheck_evidence_accepted": false, "dedup_or_fingerprint_accepted": false, "no_false_green_accepted": false, "direct_bot_api_migration_authorized": false, "workflow_modification_authorized": false, "script_modification_authorized": false, "api_sender_refactor_authorized": false, "telegram_send_authorized": false, "bot_api_call_authorized": false, "workflow_dispatch_authorized": false, "production_deploy_authorized": false, "secret_value_collection_allowed": false, "raw_payload_storage_allowed": false, "production_write_authorized": false, "runtime_gate": false, "action_buttons_allowed": false }, { "acceptance_candidate_id": "telegram_notification_egress_owner_response_acceptance:.gitea/workflows/run-migration.yml", "status": "waiting_owner_response", "source_request_draft_id": "telegram_notification_egress_owner_request:_gitea_workflows_run_migration_yml", "source_migration_candidate_id": "telegram_notification_egress_migration:.gitea/workflows/run-migration.yml", "source_path": ".gitea/workflows/run-migration.yml", "surface_kind": "gitea_workflow_direct_bot_api", "direct_call_count": 1, "line_refs": [ 210 ], "line_hash_refs": [ "934a8dd69fca99b3" ], "proposed_wave": "wave_1_workflow_notification_wrapper", "proposed_target": "scripts/ci/notify-awoooi-cicd.sh or AWOOI Alertmanager webhook", "proposed_change_summary": "Replace direct workflow Bot API send with normalized CI/CD notification wrapper after owner approval.", "owner_response_ref": null, "owner_role_or_team": "pending_owner_response", "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "affected_scope": "pending_owner_response", "redacted_evidence_refs": [], "message_shape_contract_ref": null, "message_readability_guard_ref": "docs/security/telegram-alert-readability-guard.snapshot.json", "redaction_contract_ref": null, "formatter_convergence_decision": "pending_owner_response", "gateway_or_alertmanager_target": "pending_owner_response", "break_glass_fallback_decision": "pending_owner_response", "delivery_receipt_ref": null, "dedup_or_fingerprint_plan": "pending_owner_response", "fallback_or_degraded_mode": "pending_owner_response", "migration_or_exception_reason": "pending_owner_response", "maintenance_window": "pending_owner_response", "rollback_owner": "pending_owner_response", "postcheck_evidence_ref": null, "no_secret_value_attestation": "pending_owner_response", "no_raw_payload_attestation": "pending_owner_response", "no_false_green_attestation": "pending_owner_response", "reviewer_outcome": "waiting_owner_response", "followup_owner": "pending_owner_response", "acceptance_fields": [ "acceptance_candidate_id", "source_request_draft_id", "source_migration_candidate_id", "source_path", "surface_kind", "direct_call_count", "proposed_wave", "proposed_target", "owner_response_ref", "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "message_shape_contract_ref", "message_readability_guard_ref", "redaction_contract_ref", "formatter_convergence_decision", "gateway_or_alertmanager_target", "break_glass_fallback_decision", "delivery_receipt_ref", "dedup_or_fingerprint_plan", "fallback_or_degraded_mode", "migration_or_exception_reason", "maintenance_window", "rollback_owner", "postcheck_evidence_ref", "no_secret_value_attestation", "no_raw_payload_attestation", "no_false_green_attestation", "reviewer_outcome", "followup_owner", "not_authorization" ], "required_owner_fields": [ "owner_role_or_team", "routing_purpose", "current_sender", "target_chat_route", "message_shape_contract", "redaction_contract", "formatter_convergence_decision", "gateway_or_alertmanager_target", "break_glass_fallback_decision", "delivery_receipt_ref", "dedup_or_fingerprint_plan", "fallback_or_degraded_mode", "migration_or_exception_reason", "maintenance_window", "rollback_owner", "postcheck_evidence_ref", "no_secret_value_attestation", "no_raw_payload_attestation", "no_false_green_attestation" ], "reviewer_checks": [ "source_owner_request_current", "source_migration_plan_current", "owner_identity_present", "decision_reason_present", "affected_scope_matches_source", "redacted_refs_only", "no_secret_or_token_value", "no_raw_message_payload", "message_shape_contract_present", "message_readability_guard_present", "redaction_contract_present", "formatter_convergence_explicit", "gateway_or_alertmanager_target_valid", "break_glass_fallback_explicit", "delivery_receipt_metadata_only", "dedup_or_fingerprint_present", "maintenance_window_present", "rollback_owner_present", "postcheck_evidence_present", "no_false_green_attested", "migration_authorization_separate", "counts_transition_safe", "runtime_gate_stays_zero" ], "outcome_lanes": [ "waiting_owner_response", "quarantine_secret_or_raw_payload", "reject_execution_request", "request_owner_route_supplement", "request_formatter_convergence_supplement", "request_redaction_or_receipt_supplement", "request_maintenance_or_rollback_supplement", "ready_for_migration_review", "owner_review_only_update", "waiting_runtime_gate" ], "forbidden_payloads": [ "bot_token_value", "chat_secret_value", "secret_hash", "partial_token", "masked_token", "authorization_header", "raw_message_payload", "raw_workflow_log", "raw_action_log", "raw_screenshot_with_secret", "internal_work_window_transcript", "private_namespace", "unredacted_internal_path", "unredacted_private_ip" ], "blocked_actions": [ "mark_owner_response_received_without_record", "mark_owner_response_accepted_without_reviewer_record", "send_telegram", "call_bot_api", "modify_workflow", "modify_ops_script", "refactor_api_sender", "dispatch_workflow", "trigger_cd", "deploy_production", "change_chat_route", "change_bot_token", "rotate_secret", "read_secret_store", "collect_secret_value", "collect_secret_hash", "collect_partial_token", "collect_chat_id_secret", "store_raw_message_payload", "store_unredacted_log", "store_internal_work_window_transcript", "accept_cd_success_as_delivery_receipt", "accept_route_200_as_notification_delivery", "accept_ui_visible_as_notification_acceptance", "accept_telegram_sent_without_delivery_receipt", "skip_formatter_convergence", "skip_redaction_contract", "skip_dedup_or_fingerprint_review", "skip_break_glass_fallback_review", "authorize_migration", "authorize_workflow_modification", "authorize_script_modification", "authorize_api_sender_refactor", "open_runtime_gate", "add_action_button" ], "not_authorization": true, "request_sent": false, "recipient_confirmed": false, "audit_event_emitted": false, "owner_response_received": false, "owner_response_accepted": false, "owner_response_rejected": false, "owner_response_quarantined": false, "supplement_requested": false, "formatter_convergence_accepted": false, "redaction_contract_accepted": false, "delivery_receipt_accepted": false, "break_glass_fallback_accepted": false, "maintenance_window_accepted": false, "rollback_owner_accepted": false, "postcheck_evidence_accepted": false, "dedup_or_fingerprint_accepted": false, "no_false_green_accepted": false, "direct_bot_api_migration_authorized": false, "workflow_modification_authorized": false, "script_modification_authorized": false, "api_sender_refactor_authorized": false, "telegram_send_authorized": false, "bot_api_call_authorized": false, "workflow_dispatch_authorized": false, "production_deploy_authorized": false, "secret_value_collection_allowed": false, "raw_payload_storage_allowed": false, "production_write_authorized": false, "runtime_gate": false, "action_buttons_allowed": false }, { "acceptance_candidate_id": "telegram_notification_egress_owner_response_acceptance:apps/api/src/services/channel_hub.py", "status": "waiting_owner_response", "source_request_draft_id": "telegram_notification_egress_owner_request:apps_api_src_services_channel_hub_py", "source_migration_candidate_id": "telegram_notification_egress_migration:apps/api/src/services/channel_hub.py", "source_path": "apps/api/src/services/channel_hub.py", "surface_kind": "api_direct_bot_api", "direct_call_count": 1, "line_refs": [ 1138 ], "line_hash_refs": [ "9e418fa74c83815a" ], "proposed_wave": "wave_3_api_sender_gateway", "proposed_target": "TelegramGateway final-exit formatter", "proposed_change_summary": "Route API interim sender through TelegramGateway or equivalent final-exit normalization and mirror contract.", "owner_response_ref": null, "owner_role_or_team": "pending_owner_response", "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "affected_scope": "pending_owner_response", "redacted_evidence_refs": [], "message_shape_contract_ref": null, "message_readability_guard_ref": "docs/security/telegram-alert-readability-guard.snapshot.json", "redaction_contract_ref": null, "formatter_convergence_decision": "pending_owner_response", "gateway_or_alertmanager_target": "pending_owner_response", "break_glass_fallback_decision": "pending_owner_response", "delivery_receipt_ref": null, "dedup_or_fingerprint_plan": "pending_owner_response", "fallback_or_degraded_mode": "pending_owner_response", "migration_or_exception_reason": "pending_owner_response", "maintenance_window": "pending_owner_response", "rollback_owner": "pending_owner_response", "postcheck_evidence_ref": null, "no_secret_value_attestation": "pending_owner_response", "no_raw_payload_attestation": "pending_owner_response", "no_false_green_attestation": "pending_owner_response", "reviewer_outcome": "waiting_owner_response", "followup_owner": "pending_owner_response", "acceptance_fields": [ "acceptance_candidate_id", "source_request_draft_id", "source_migration_candidate_id", "source_path", "surface_kind", "direct_call_count", "proposed_wave", "proposed_target", "owner_response_ref", "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "message_shape_contract_ref", "message_readability_guard_ref", "redaction_contract_ref", "formatter_convergence_decision", "gateway_or_alertmanager_target", "break_glass_fallback_decision", "delivery_receipt_ref", "dedup_or_fingerprint_plan", "fallback_or_degraded_mode", "migration_or_exception_reason", "maintenance_window", "rollback_owner", "postcheck_evidence_ref", "no_secret_value_attestation", "no_raw_payload_attestation", "no_false_green_attestation", "reviewer_outcome", "followup_owner", "not_authorization" ], "required_owner_fields": [ "owner_role_or_team", "routing_purpose", "current_sender", "target_chat_route", "message_shape_contract", "redaction_contract", "formatter_convergence_decision", "gateway_or_alertmanager_target", "break_glass_fallback_decision", "delivery_receipt_ref", "dedup_or_fingerprint_plan", "fallback_or_degraded_mode", "migration_or_exception_reason", "maintenance_window", "rollback_owner", "postcheck_evidence_ref", "no_secret_value_attestation", "no_raw_payload_attestation", "no_false_green_attestation" ], "reviewer_checks": [ "source_owner_request_current", "source_migration_plan_current", "owner_identity_present", "decision_reason_present", "affected_scope_matches_source", "redacted_refs_only", "no_secret_or_token_value", "no_raw_message_payload", "message_shape_contract_present", "message_readability_guard_present", "redaction_contract_present", "formatter_convergence_explicit", "gateway_or_alertmanager_target_valid", "break_glass_fallback_explicit", "delivery_receipt_metadata_only", "dedup_or_fingerprint_present", "maintenance_window_present", "rollback_owner_present", "postcheck_evidence_present", "no_false_green_attested", "migration_authorization_separate", "counts_transition_safe", "runtime_gate_stays_zero" ], "outcome_lanes": [ "waiting_owner_response", "quarantine_secret_or_raw_payload", "reject_execution_request", "request_owner_route_supplement", "request_formatter_convergence_supplement", "request_redaction_or_receipt_supplement", "request_maintenance_or_rollback_supplement", "ready_for_migration_review", "owner_review_only_update", "waiting_runtime_gate" ], "forbidden_payloads": [ "bot_token_value", "chat_secret_value", "secret_hash", "partial_token", "masked_token", "authorization_header", "raw_message_payload", "raw_workflow_log", "raw_action_log", "raw_screenshot_with_secret", "internal_work_window_transcript", "private_namespace", "unredacted_internal_path", "unredacted_private_ip" ], "blocked_actions": [ "mark_owner_response_received_without_record", "mark_owner_response_accepted_without_reviewer_record", "send_telegram", "call_bot_api", "modify_workflow", "modify_ops_script", "refactor_api_sender", "dispatch_workflow", "trigger_cd", "deploy_production", "change_chat_route", "change_bot_token", "rotate_secret", "read_secret_store", "collect_secret_value", "collect_secret_hash", "collect_partial_token", "collect_chat_id_secret", "store_raw_message_payload", "store_unredacted_log", "store_internal_work_window_transcript", "accept_cd_success_as_delivery_receipt", "accept_route_200_as_notification_delivery", "accept_ui_visible_as_notification_acceptance", "accept_telegram_sent_without_delivery_receipt", "skip_formatter_convergence", "skip_redaction_contract", "skip_dedup_or_fingerprint_review", "skip_break_glass_fallback_review", "authorize_migration", "authorize_workflow_modification", "authorize_script_modification", "authorize_api_sender_refactor", "open_runtime_gate", "add_action_button" ], "not_authorization": true, "request_sent": false, "recipient_confirmed": false, "audit_event_emitted": false, "owner_response_received": false, "owner_response_accepted": false, "owner_response_rejected": false, "owner_response_quarantined": false, "supplement_requested": false, "formatter_convergence_accepted": false, "redaction_contract_accepted": false, "delivery_receipt_accepted": false, "break_glass_fallback_accepted": false, "maintenance_window_accepted": false, "rollback_owner_accepted": false, "postcheck_evidence_accepted": false, "dedup_or_fingerprint_accepted": false, "no_false_green_accepted": false, "direct_bot_api_migration_authorized": false, "workflow_modification_authorized": false, "script_modification_authorized": false, "api_sender_refactor_authorized": false, "telegram_send_authorized": false, "bot_api_call_authorized": false, "workflow_dispatch_authorized": false, "production_deploy_authorized": false, "secret_value_collection_allowed": false, "raw_payload_storage_allowed": false, "production_write_authorized": false, "runtime_gate": false, "action_buttons_allowed": false }, { "acceptance_candidate_id": "telegram_notification_egress_owner_response_acceptance:scripts/ops/backup-from-110.sh", "status": "waiting_owner_response", "source_request_draft_id": "telegram_notification_egress_owner_request:scripts_ops_backup_from_110_sh", "source_migration_candidate_id": "telegram_notification_egress_migration:scripts/ops/backup-from-110.sh", "source_path": "scripts/ops/backup-from-110.sh", "surface_kind": "ops_script_direct_bot_api", "direct_call_count": 1, "line_refs": [ 64 ], "line_hash_refs": [ "ff5ffbeca44d679b" ], "proposed_wave": "wave_2_ops_notification_wrapper", "proposed_target": "scripts/ops/notify-awoooi-ops.sh or AWOOI Alertmanager webhook", "proposed_change_summary": "Replace direct ops fallback send with normalized ops notification wrapper or documented break-glass fallback.", "owner_response_ref": null, "owner_role_or_team": "pending_owner_response", "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "affected_scope": "pending_owner_response", "redacted_evidence_refs": [], "message_shape_contract_ref": null, "message_readability_guard_ref": "docs/security/telegram-alert-readability-guard.snapshot.json", "redaction_contract_ref": null, "formatter_convergence_decision": "pending_owner_response", "gateway_or_alertmanager_target": "pending_owner_response", "break_glass_fallback_decision": "pending_owner_response", "delivery_receipt_ref": null, "dedup_or_fingerprint_plan": "pending_owner_response", "fallback_or_degraded_mode": "pending_owner_response", "migration_or_exception_reason": "pending_owner_response", "maintenance_window": "pending_owner_response", "rollback_owner": "pending_owner_response", "postcheck_evidence_ref": null, "no_secret_value_attestation": "pending_owner_response", "no_raw_payload_attestation": "pending_owner_response", "no_false_green_attestation": "pending_owner_response", "reviewer_outcome": "waiting_owner_response", "followup_owner": "pending_owner_response", "acceptance_fields": [ "acceptance_candidate_id", "source_request_draft_id", "source_migration_candidate_id", "source_path", "surface_kind", "direct_call_count", "proposed_wave", "proposed_target", "owner_response_ref", "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "message_shape_contract_ref", "message_readability_guard_ref", "redaction_contract_ref", "formatter_convergence_decision", "gateway_or_alertmanager_target", "break_glass_fallback_decision", "delivery_receipt_ref", "dedup_or_fingerprint_plan", "fallback_or_degraded_mode", "migration_or_exception_reason", "maintenance_window", "rollback_owner", "postcheck_evidence_ref", "no_secret_value_attestation", "no_raw_payload_attestation", "no_false_green_attestation", "reviewer_outcome", "followup_owner", "not_authorization" ], "required_owner_fields": [ "owner_role_or_team", "routing_purpose", "current_sender", "target_chat_route", "message_shape_contract", "redaction_contract", "formatter_convergence_decision", "gateway_or_alertmanager_target", "break_glass_fallback_decision", "delivery_receipt_ref", "dedup_or_fingerprint_plan", "fallback_or_degraded_mode", "migration_or_exception_reason", "maintenance_window", "rollback_owner", "postcheck_evidence_ref", "no_secret_value_attestation", "no_raw_payload_attestation", "no_false_green_attestation" ], "reviewer_checks": [ "source_owner_request_current", "source_migration_plan_current", "owner_identity_present", "decision_reason_present", "affected_scope_matches_source", "redacted_refs_only", "no_secret_or_token_value", "no_raw_message_payload", "message_shape_contract_present", "message_readability_guard_present", "redaction_contract_present", "formatter_convergence_explicit", "gateway_or_alertmanager_target_valid", "break_glass_fallback_explicit", "delivery_receipt_metadata_only", "dedup_or_fingerprint_present", "maintenance_window_present", "rollback_owner_present", "postcheck_evidence_present", "no_false_green_attested", "migration_authorization_separate", "counts_transition_safe", "runtime_gate_stays_zero" ], "outcome_lanes": [ "waiting_owner_response", "quarantine_secret_or_raw_payload", "reject_execution_request", "request_owner_route_supplement", "request_formatter_convergence_supplement", "request_redaction_or_receipt_supplement", "request_maintenance_or_rollback_supplement", "ready_for_migration_review", "owner_review_only_update", "waiting_runtime_gate" ], "forbidden_payloads": [ "bot_token_value", "chat_secret_value", "secret_hash", "partial_token", "masked_token", "authorization_header", "raw_message_payload", "raw_workflow_log", "raw_action_log", "raw_screenshot_with_secret", "internal_work_window_transcript", "private_namespace", "unredacted_internal_path", "unredacted_private_ip" ], "blocked_actions": [ "mark_owner_response_received_without_record", "mark_owner_response_accepted_without_reviewer_record", "send_telegram", "call_bot_api", "modify_workflow", "modify_ops_script", "refactor_api_sender", "dispatch_workflow", "trigger_cd", "deploy_production", "change_chat_route", "change_bot_token", "rotate_secret", "read_secret_store", "collect_secret_value", "collect_secret_hash", "collect_partial_token", "collect_chat_id_secret", "store_raw_message_payload", "store_unredacted_log", "store_internal_work_window_transcript", "accept_cd_success_as_delivery_receipt", "accept_route_200_as_notification_delivery", "accept_ui_visible_as_notification_acceptance", "accept_telegram_sent_without_delivery_receipt", "skip_formatter_convergence", "skip_redaction_contract", "skip_dedup_or_fingerprint_review", "skip_break_glass_fallback_review", "authorize_migration", "authorize_workflow_modification", "authorize_script_modification", "authorize_api_sender_refactor", "open_runtime_gate", "add_action_button" ], "not_authorization": true, "request_sent": false, "recipient_confirmed": false, "audit_event_emitted": false, "owner_response_received": false, "owner_response_accepted": false, "owner_response_rejected": false, "owner_response_quarantined": false, "supplement_requested": false, "formatter_convergence_accepted": false, "redaction_contract_accepted": false, "delivery_receipt_accepted": false, "break_glass_fallback_accepted": false, "maintenance_window_accepted": false, "rollback_owner_accepted": false, "postcheck_evidence_accepted": false, "dedup_or_fingerprint_accepted": false, "no_false_green_accepted": false, "direct_bot_api_migration_authorized": false, "workflow_modification_authorized": false, "script_modification_authorized": false, "api_sender_refactor_authorized": false, "telegram_send_authorized": false, "bot_api_call_authorized": false, "workflow_dispatch_authorized": false, "production_deploy_authorized": false, "secret_value_collection_allowed": false, "raw_payload_storage_allowed": false, "production_write_authorized": false, "runtime_gate": false, "action_buttons_allowed": false }, { "acceptance_candidate_id": "telegram_notification_egress_owner_response_acceptance:scripts/ops/docker-health-monitor.sh", "status": "waiting_owner_response", "source_request_draft_id": "telegram_notification_egress_owner_request:scripts_ops_docker_health_monitor_sh", "source_migration_candidate_id": "telegram_notification_egress_migration:scripts/ops/docker-health-monitor.sh", "source_path": "scripts/ops/docker-health-monitor.sh", "surface_kind": "ops_script_direct_bot_api", "direct_call_count": 1, "line_refs": [ 90 ], "line_hash_refs": [ "6611406903bc7d65" ], "proposed_wave": "wave_2_ops_notification_wrapper", "proposed_target": "scripts/ops/notify-awoooi-ops.sh or AWOOI Alertmanager webhook", "proposed_change_summary": "Replace direct ops fallback send with normalized ops notification wrapper or documented break-glass fallback.", "owner_response_ref": null, "owner_role_or_team": "pending_owner_response", "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "affected_scope": "pending_owner_response", "redacted_evidence_refs": [], "message_shape_contract_ref": null, "message_readability_guard_ref": "docs/security/telegram-alert-readability-guard.snapshot.json", "redaction_contract_ref": null, "formatter_convergence_decision": "pending_owner_response", "gateway_or_alertmanager_target": "pending_owner_response", "break_glass_fallback_decision": "pending_owner_response", "delivery_receipt_ref": null, "dedup_or_fingerprint_plan": "pending_owner_response", "fallback_or_degraded_mode": "pending_owner_response", "migration_or_exception_reason": "pending_owner_response", "maintenance_window": "pending_owner_response", "rollback_owner": "pending_owner_response", "postcheck_evidence_ref": null, "no_secret_value_attestation": "pending_owner_response", "no_raw_payload_attestation": "pending_owner_response", "no_false_green_attestation": "pending_owner_response", "reviewer_outcome": "waiting_owner_response", "followup_owner": "pending_owner_response", "acceptance_fields": [ "acceptance_candidate_id", "source_request_draft_id", "source_migration_candidate_id", "source_path", "surface_kind", "direct_call_count", "proposed_wave", "proposed_target", "owner_response_ref", "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "message_shape_contract_ref", "message_readability_guard_ref", "redaction_contract_ref", "formatter_convergence_decision", "gateway_or_alertmanager_target", "break_glass_fallback_decision", "delivery_receipt_ref", "dedup_or_fingerprint_plan", "fallback_or_degraded_mode", "migration_or_exception_reason", "maintenance_window", "rollback_owner", "postcheck_evidence_ref", "no_secret_value_attestation", "no_raw_payload_attestation", "no_false_green_attestation", "reviewer_outcome", "followup_owner", "not_authorization" ], "required_owner_fields": [ "owner_role_or_team", "routing_purpose", "current_sender", "target_chat_route", "message_shape_contract", "redaction_contract", "formatter_convergence_decision", "gateway_or_alertmanager_target", "break_glass_fallback_decision", "delivery_receipt_ref", "dedup_or_fingerprint_plan", "fallback_or_degraded_mode", "migration_or_exception_reason", "maintenance_window", "rollback_owner", "postcheck_evidence_ref", "no_secret_value_attestation", "no_raw_payload_attestation", "no_false_green_attestation" ], "reviewer_checks": [ "source_owner_request_current", "source_migration_plan_current", "owner_identity_present", "decision_reason_present", "affected_scope_matches_source", "redacted_refs_only", "no_secret_or_token_value", "no_raw_message_payload", "message_shape_contract_present", "message_readability_guard_present", "redaction_contract_present", "formatter_convergence_explicit", "gateway_or_alertmanager_target_valid", "break_glass_fallback_explicit", "delivery_receipt_metadata_only", "dedup_or_fingerprint_present", "maintenance_window_present", "rollback_owner_present", "postcheck_evidence_present", "no_false_green_attested", "migration_authorization_separate", "counts_transition_safe", "runtime_gate_stays_zero" ], "outcome_lanes": [ "waiting_owner_response", "quarantine_secret_or_raw_payload", "reject_execution_request", "request_owner_route_supplement", "request_formatter_convergence_supplement", "request_redaction_or_receipt_supplement", "request_maintenance_or_rollback_supplement", "ready_for_migration_review", "owner_review_only_update", "waiting_runtime_gate" ], "forbidden_payloads": [ "bot_token_value", "chat_secret_value", "secret_hash", "partial_token", "masked_token", "authorization_header", "raw_message_payload", "raw_workflow_log", "raw_action_log", "raw_screenshot_with_secret", "internal_work_window_transcript", "private_namespace", "unredacted_internal_path", "unredacted_private_ip" ], "blocked_actions": [ "mark_owner_response_received_without_record", "mark_owner_response_accepted_without_reviewer_record", "send_telegram", "call_bot_api", "modify_workflow", "modify_ops_script", "refactor_api_sender", "dispatch_workflow", "trigger_cd", "deploy_production", "change_chat_route", "change_bot_token", "rotate_secret", "read_secret_store", "collect_secret_value", "collect_secret_hash", "collect_partial_token", "collect_chat_id_secret", "store_raw_message_payload", "store_unredacted_log", "store_internal_work_window_transcript", "accept_cd_success_as_delivery_receipt", "accept_route_200_as_notification_delivery", "accept_ui_visible_as_notification_acceptance", "accept_telegram_sent_without_delivery_receipt", "skip_formatter_convergence", "skip_redaction_contract", "skip_dedup_or_fingerprint_review", "skip_break_glass_fallback_review", "authorize_migration", "authorize_workflow_modification", "authorize_script_modification", "authorize_api_sender_refactor", "open_runtime_gate", "add_action_button" ], "not_authorization": true, "request_sent": false, "recipient_confirmed": false, "audit_event_emitted": false, "owner_response_received": false, "owner_response_accepted": false, "owner_response_rejected": false, "owner_response_quarantined": false, "supplement_requested": false, "formatter_convergence_accepted": false, "redaction_contract_accepted": false, "delivery_receipt_accepted": false, "break_glass_fallback_accepted": false, "maintenance_window_accepted": false, "rollback_owner_accepted": false, "postcheck_evidence_accepted": false, "dedup_or_fingerprint_accepted": false, "no_false_green_accepted": false, "direct_bot_api_migration_authorized": false, "workflow_modification_authorized": false, "script_modification_authorized": false, "api_sender_refactor_authorized": false, "telegram_send_authorized": false, "bot_api_call_authorized": false, "workflow_dispatch_authorized": false, "production_deploy_authorized": false, "secret_value_collection_allowed": false, "raw_payload_storage_allowed": false, "production_write_authorized": false, "runtime_gate": false, "action_buttons_allowed": false }, { "acceptance_candidate_id": "telegram_notification_egress_owner_response_acceptance:scripts/ops/dr-drill.sh", "status": "waiting_owner_response", "source_request_draft_id": "telegram_notification_egress_owner_request:scripts_ops_dr_drill_sh", "source_migration_candidate_id": "telegram_notification_egress_migration:scripts/ops/dr-drill.sh", "source_path": "scripts/ops/dr-drill.sh", "surface_kind": "ops_script_direct_bot_api", "direct_call_count": 1, "line_refs": [ 63 ], "line_hash_refs": [ "b7cf532f3c5509fc" ], "proposed_wave": "wave_2_ops_notification_wrapper", "proposed_target": "scripts/ops/notify-awoooi-ops.sh or AWOOI Alertmanager webhook", "proposed_change_summary": "Replace direct ops fallback send with normalized ops notification wrapper or documented break-glass fallback.", "owner_response_ref": null, "owner_role_or_team": "pending_owner_response", "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "affected_scope": "pending_owner_response", "redacted_evidence_refs": [], "message_shape_contract_ref": null, "message_readability_guard_ref": "docs/security/telegram-alert-readability-guard.snapshot.json", "redaction_contract_ref": null, "formatter_convergence_decision": "pending_owner_response", "gateway_or_alertmanager_target": "pending_owner_response", "break_glass_fallback_decision": "pending_owner_response", "delivery_receipt_ref": null, "dedup_or_fingerprint_plan": "pending_owner_response", "fallback_or_degraded_mode": "pending_owner_response", "migration_or_exception_reason": "pending_owner_response", "maintenance_window": "pending_owner_response", "rollback_owner": "pending_owner_response", "postcheck_evidence_ref": null, "no_secret_value_attestation": "pending_owner_response", "no_raw_payload_attestation": "pending_owner_response", "no_false_green_attestation": "pending_owner_response", "reviewer_outcome": "waiting_owner_response", "followup_owner": "pending_owner_response", "acceptance_fields": [ "acceptance_candidate_id", "source_request_draft_id", "source_migration_candidate_id", "source_path", "surface_kind", "direct_call_count", "proposed_wave", "proposed_target", "owner_response_ref", "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "message_shape_contract_ref", "message_readability_guard_ref", "redaction_contract_ref", "formatter_convergence_decision", "gateway_or_alertmanager_target", "break_glass_fallback_decision", "delivery_receipt_ref", "dedup_or_fingerprint_plan", "fallback_or_degraded_mode", "migration_or_exception_reason", "maintenance_window", "rollback_owner", "postcheck_evidence_ref", "no_secret_value_attestation", "no_raw_payload_attestation", "no_false_green_attestation", "reviewer_outcome", "followup_owner", "not_authorization" ], "required_owner_fields": [ "owner_role_or_team", "routing_purpose", "current_sender", "target_chat_route", "message_shape_contract", "redaction_contract", "formatter_convergence_decision", "gateway_or_alertmanager_target", "break_glass_fallback_decision", "delivery_receipt_ref", "dedup_or_fingerprint_plan", "fallback_or_degraded_mode", "migration_or_exception_reason", "maintenance_window", "rollback_owner", "postcheck_evidence_ref", "no_secret_value_attestation", "no_raw_payload_attestation", "no_false_green_attestation" ], "reviewer_checks": [ "source_owner_request_current", "source_migration_plan_current", "owner_identity_present", "decision_reason_present", "affected_scope_matches_source", "redacted_refs_only", "no_secret_or_token_value", "no_raw_message_payload", "message_shape_contract_present", "message_readability_guard_present", "redaction_contract_present", "formatter_convergence_explicit", "gateway_or_alertmanager_target_valid", "break_glass_fallback_explicit", "delivery_receipt_metadata_only", "dedup_or_fingerprint_present", "maintenance_window_present", "rollback_owner_present", "postcheck_evidence_present", "no_false_green_attested", "migration_authorization_separate", "counts_transition_safe", "runtime_gate_stays_zero" ], "outcome_lanes": [ "waiting_owner_response", "quarantine_secret_or_raw_payload", "reject_execution_request", "request_owner_route_supplement", "request_formatter_convergence_supplement", "request_redaction_or_receipt_supplement", "request_maintenance_or_rollback_supplement", "ready_for_migration_review", "owner_review_only_update", "waiting_runtime_gate" ], "forbidden_payloads": [ "bot_token_value", "chat_secret_value", "secret_hash", "partial_token", "masked_token", "authorization_header", "raw_message_payload", "raw_workflow_log", "raw_action_log", "raw_screenshot_with_secret", "internal_work_window_transcript", "private_namespace", "unredacted_internal_path", "unredacted_private_ip" ], "blocked_actions": [ "mark_owner_response_received_without_record", "mark_owner_response_accepted_without_reviewer_record", "send_telegram", "call_bot_api", "modify_workflow", "modify_ops_script", "refactor_api_sender", "dispatch_workflow", "trigger_cd", "deploy_production", "change_chat_route", "change_bot_token", "rotate_secret", "read_secret_store", "collect_secret_value", "collect_secret_hash", "collect_partial_token", "collect_chat_id_secret", "store_raw_message_payload", "store_unredacted_log", "store_internal_work_window_transcript", "accept_cd_success_as_delivery_receipt", "accept_route_200_as_notification_delivery", "accept_ui_visible_as_notification_acceptance", "accept_telegram_sent_without_delivery_receipt", "skip_formatter_convergence", "skip_redaction_contract", "skip_dedup_or_fingerprint_review", "skip_break_glass_fallback_review", "authorize_migration", "authorize_workflow_modification", "authorize_script_modification", "authorize_api_sender_refactor", "open_runtime_gate", "add_action_button" ], "not_authorization": true, "request_sent": false, "recipient_confirmed": false, "audit_event_emitted": false, "owner_response_received": false, "owner_response_accepted": false, "owner_response_rejected": false, "owner_response_quarantined": false, "supplement_requested": false, "formatter_convergence_accepted": false, "redaction_contract_accepted": false, "delivery_receipt_accepted": false, "break_glass_fallback_accepted": false, "maintenance_window_accepted": false, "rollback_owner_accepted": false, "postcheck_evidence_accepted": false, "dedup_or_fingerprint_accepted": false, "no_false_green_accepted": false, "direct_bot_api_migration_authorized": false, "workflow_modification_authorized": false, "script_modification_authorized": false, "api_sender_refactor_authorized": false, "telegram_send_authorized": false, "bot_api_call_authorized": false, "workflow_dispatch_authorized": false, "production_deploy_authorized": false, "secret_value_collection_allowed": false, "raw_payload_storage_allowed": false, "production_write_authorized": false, "runtime_gate": false, "action_buttons_allowed": false }, { "acceptance_candidate_id": "telegram_notification_egress_owner_response_acceptance:scripts/ops/pg-backup.sh", "status": "waiting_owner_response", "source_request_draft_id": "telegram_notification_egress_owner_request:scripts_ops_pg_backup_sh", "source_migration_candidate_id": "telegram_notification_egress_migration:scripts/ops/pg-backup.sh", "source_path": "scripts/ops/pg-backup.sh", "surface_kind": "ops_script_direct_bot_api", "direct_call_count": 1, "line_refs": [ 52 ], "line_hash_refs": [ "8268f3d6f14d66a3" ], "proposed_wave": "wave_2_ops_notification_wrapper", "proposed_target": "scripts/ops/notify-awoooi-ops.sh or AWOOI Alertmanager webhook", "proposed_change_summary": "Replace direct ops fallback send with normalized ops notification wrapper or documented break-glass fallback.", "owner_response_ref": null, "owner_role_or_team": "pending_owner_response", "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "affected_scope": "pending_owner_response", "redacted_evidence_refs": [], "message_shape_contract_ref": null, "message_readability_guard_ref": "docs/security/telegram-alert-readability-guard.snapshot.json", "redaction_contract_ref": null, "formatter_convergence_decision": "pending_owner_response", "gateway_or_alertmanager_target": "pending_owner_response", "break_glass_fallback_decision": "pending_owner_response", "delivery_receipt_ref": null, "dedup_or_fingerprint_plan": "pending_owner_response", "fallback_or_degraded_mode": "pending_owner_response", "migration_or_exception_reason": "pending_owner_response", "maintenance_window": "pending_owner_response", "rollback_owner": "pending_owner_response", "postcheck_evidence_ref": null, "no_secret_value_attestation": "pending_owner_response", "no_raw_payload_attestation": "pending_owner_response", "no_false_green_attestation": "pending_owner_response", "reviewer_outcome": "waiting_owner_response", "followup_owner": "pending_owner_response", "acceptance_fields": [ "acceptance_candidate_id", "source_request_draft_id", "source_migration_candidate_id", "source_path", "surface_kind", "direct_call_count", "proposed_wave", "proposed_target", "owner_response_ref", "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "message_shape_contract_ref", "message_readability_guard_ref", "redaction_contract_ref", "formatter_convergence_decision", "gateway_or_alertmanager_target", "break_glass_fallback_decision", "delivery_receipt_ref", "dedup_or_fingerprint_plan", "fallback_or_degraded_mode", "migration_or_exception_reason", "maintenance_window", "rollback_owner", "postcheck_evidence_ref", "no_secret_value_attestation", "no_raw_payload_attestation", "no_false_green_attestation", "reviewer_outcome", "followup_owner", "not_authorization" ], "required_owner_fields": [ "owner_role_or_team", "routing_purpose", "current_sender", "target_chat_route", "message_shape_contract", "redaction_contract", "formatter_convergence_decision", "gateway_or_alertmanager_target", "break_glass_fallback_decision", "delivery_receipt_ref", "dedup_or_fingerprint_plan", "fallback_or_degraded_mode", "migration_or_exception_reason", "maintenance_window", "rollback_owner", "postcheck_evidence_ref", "no_secret_value_attestation", "no_raw_payload_attestation", "no_false_green_attestation" ], "reviewer_checks": [ "source_owner_request_current", "source_migration_plan_current", "owner_identity_present", "decision_reason_present", "affected_scope_matches_source", "redacted_refs_only", "no_secret_or_token_value", "no_raw_message_payload", "message_shape_contract_present", "message_readability_guard_present", "redaction_contract_present", "formatter_convergence_explicit", "gateway_or_alertmanager_target_valid", "break_glass_fallback_explicit", "delivery_receipt_metadata_only", "dedup_or_fingerprint_present", "maintenance_window_present", "rollback_owner_present", "postcheck_evidence_present", "no_false_green_attested", "migration_authorization_separate", "counts_transition_safe", "runtime_gate_stays_zero" ], "outcome_lanes": [ "waiting_owner_response", "quarantine_secret_or_raw_payload", "reject_execution_request", "request_owner_route_supplement", "request_formatter_convergence_supplement", "request_redaction_or_receipt_supplement", "request_maintenance_or_rollback_supplement", "ready_for_migration_review", "owner_review_only_update", "waiting_runtime_gate" ], "forbidden_payloads": [ "bot_token_value", "chat_secret_value", "secret_hash", "partial_token", "masked_token", "authorization_header", "raw_message_payload", "raw_workflow_log", "raw_action_log", "raw_screenshot_with_secret", "internal_work_window_transcript", "private_namespace", "unredacted_internal_path", "unredacted_private_ip" ], "blocked_actions": [ "mark_owner_response_received_without_record", "mark_owner_response_accepted_without_reviewer_record", "send_telegram", "call_bot_api", "modify_workflow", "modify_ops_script", "refactor_api_sender", "dispatch_workflow", "trigger_cd", "deploy_production", "change_chat_route", "change_bot_token", "rotate_secret", "read_secret_store", "collect_secret_value", "collect_secret_hash", "collect_partial_token", "collect_chat_id_secret", "store_raw_message_payload", "store_unredacted_log", "store_internal_work_window_transcript", "accept_cd_success_as_delivery_receipt", "accept_route_200_as_notification_delivery", "accept_ui_visible_as_notification_acceptance", "accept_telegram_sent_without_delivery_receipt", "skip_formatter_convergence", "skip_redaction_contract", "skip_dedup_or_fingerprint_review", "skip_break_glass_fallback_review", "authorize_migration", "authorize_workflow_modification", "authorize_script_modification", "authorize_api_sender_refactor", "open_runtime_gate", "add_action_button" ], "not_authorization": true, "request_sent": false, "recipient_confirmed": false, "audit_event_emitted": false, "owner_response_received": false, "owner_response_accepted": false, "owner_response_rejected": false, "owner_response_quarantined": false, "supplement_requested": false, "formatter_convergence_accepted": false, "redaction_contract_accepted": false, "delivery_receipt_accepted": false, "break_glass_fallback_accepted": false, "maintenance_window_accepted": false, "rollback_owner_accepted": false, "postcheck_evidence_accepted": false, "dedup_or_fingerprint_accepted": false, "no_false_green_accepted": false, "direct_bot_api_migration_authorized": false, "workflow_modification_authorized": false, "script_modification_authorized": false, "api_sender_refactor_authorized": false, "telegram_send_authorized": false, "bot_api_call_authorized": false, "workflow_dispatch_authorized": false, "production_deploy_authorized": false, "secret_value_collection_allowed": false, "raw_payload_storage_allowed": false, "production_write_authorized": false, "runtime_gate": false, "action_buttons_allowed": false } ], "operator_interpretation": [ "此帳本只是 reviewer 驗收模板；owner response received / accepted 仍維持 0。", "每個 direct egress candidate 都必須引用 Telegram 告警可讀性 guard，migration review 不得繞過卡片化、脫敏與 runtime_write_gate=0。", "CD success、route 200、UI 可見或 Telegram sent 狀態本身都不是 delivery receipt。", "workflow、script 與 API sender 收斂仍需獨立 runtime approval 與 change evidence。" ] }