{ "schema_version": "telegram_notification_egress_owner_request_draft_v1", "generated_at": "2026-06-18T22:45:00+08:00", "git_commit": "8cbedfe4", "status": "owner_request_draft_ready_no_dispatch_no_runtime_action", "mode": "metadata_only_no_secret_value_no_telegram_send_no_workflow_change", "source_snapshot": "docs/security/telegram-notification-egress-inventory.snapshot.json", "source_schema_version": "telegram_notification_egress_inventory_v1", "source_status": "inventory_ready_no_runtime_action", "summary": { "source_direct_bot_api_call_count": 18, "source_direct_bot_api_file_count": 11, "request_draft_count": 11, "workflow_request_draft_count": 6, "ops_script_request_draft_count": 4, "ci_script_request_draft_count": 0, "api_direct_request_draft_count": 1, "request_field_count": 27, "required_owner_field_count": 19, "preflight_check_count": 16, "outcome_lane_count": 9, "forbidden_payload_count": 14, "blocked_action_count": 26, "request_sent_count": 0, "recipient_confirmed_count": 0, "audit_event_emitted_count": 0, "owner_response_received_count": 0, "owner_response_accepted_count": 0, "formatter_convergence_accepted_count": 0, "redaction_contract_accepted_count": 0, "delivery_receipt_accepted_count": 0, "break_glass_fallback_accepted_count": 0, "direct_bot_api_migration_authorized_count": 0, "telegram_send_authorized_count": 0, "bot_api_call_authorized_count": 0, "workflow_modification_authorized_count": 0, "script_modification_authorized_count": 0, "api_sender_refactor_authorized_count": 0, "secret_value_collection_allowed_count": 0, "raw_payload_storage_allowed_count": 0, "production_write_authorized_count": 0, "runtime_gate_count": 0, "action_button_count": 0 }, "execution_boundaries": { "runtime_execution_authorized": false, "owner_request_send_authorized": false, "recipient_confirmation_authorized": false, "audit_event_emit_authorized": false, "telegram_send_authorized": false, "bot_api_call_authorized": false, "workflow_modification_authorized": false, "script_modification_authorized": false, "api_sender_refactor_authorized": false, "secret_value_collection_allowed": false, "raw_payload_storage_allowed": false, "production_write_authorized": false, "action_buttons_allowed": false, "not_authorization": true }, "request_drafts": [ { "request_draft_id": "telegram_notification_egress_owner_request:_gitea_workflows_cd_dev_yaml", "source_inventory_schema_version": "telegram_notification_egress_inventory_v1", "source_path": ".gitea/workflows/cd-dev.yaml", "surface_kind": "gitea_workflow_direct_bot_api", "direct_call_count": 3, "line_refs": [ 54, 241, 262 ], "line_hash_refs": [ "f503c2c0f61100a9", "c41f88fbca91a4b9", "eaa9a6cb8326dc79" ], "request_fields": [ "request_draft_id", "source_inventory_schema_version", "source_path", "surface_kind", "direct_call_count", "line_refs", "line_hash_refs", "owner_role_or_team", "routing_purpose", "current_sender", "target_chat_route", "message_shape_contract", "redaction_contract", "formatter_convergence_decision", "gateway_or_alertmanager_target", "break_glass_fallback_decision", "delivery_receipt_ref", "dedup_or_fingerprint_plan", "fallback_or_degraded_mode", "migration_or_exception_reason", "maintenance_window", "rollback_owner", "postcheck_evidence_ref", "no_secret_value_attestation", "no_raw_payload_attestation", "no_false_green_attestation", "not_authorization" ], "required_owner_fields": [ "owner_role_or_team", "routing_purpose", "current_sender", "target_chat_route", "message_shape_contract", "redaction_contract", "formatter_convergence_decision", "gateway_or_alertmanager_target", "break_glass_fallback_decision", "delivery_receipt_ref", "dedup_or_fingerprint_plan", "fallback_or_degraded_mode", "migration_or_exception_reason", "maintenance_window", "rollback_owner", "postcheck_evidence_ref", "no_secret_value_attestation", "no_raw_payload_attestation", "no_false_green_attestation" ], "preflight_checks": [ "source_inventory_current", "owner_role_present", "route_purpose_present", "message_shape_contract_present", "redaction_contract_present", "formatter_convergence_decision_present", "break_glass_fallback_explicit", "delivery_receipt_metadata_present", "dedup_or_fingerprint_present", "maintenance_window_present_for_change", "rollback_owner_present", "postcheck_evidence_present", "no_secret_value_attested", "no_raw_payload_attested", "no_false_green_attested", "runtime_gate_stays_zero" ], "outcome_lanes": [ "draft_waiting_owner_dispatch", "request_owner_route_supplement", "request_formatter_convergence_supplement", "request_break_glass_fallback_supplement", "request_redaction_or_receipt_supplement", "quarantine_secret_or_raw_payload", "reject_false_green_claim", "ready_for_manual_dispatch", "waiting_runtime_gate" ], "forbidden_payloads": [ "bot_token_value", "chat_secret_value", "secret_hash", "partial_token", "masked_token", "authorization_header", "raw_message_payload", "raw_workflow_log", "raw_action_log", "raw_screenshot_with_secret", "internal_work_window_transcript", "private_namespace", "unredacted_internal_path", "unredacted_private_ip" ], "blocked_actions": [ "send_owner_request", "confirm_recipient", "emit_audit_event", "telegram_send", "bot_api_call", "workflow_modification", "script_modification", "api_sender_refactor", "change_chat_route", "change_bot_token", "read_secret_store", "collect_secret_value", "collect_secret_hash", "collect_partial_token", "collect_chat_id_secret", "store_raw_message_payload", "store_unredacted_log", "workflow_dispatch", "production_deploy", "accept_cd_success_as_delivery_receipt", "accept_route_200_as_notification_delivery", "accept_ui_visible_as_notification_acceptance", "skip_formatter_convergence", "skip_redaction_contract", "open_runtime_gate", "add_action_button" ], "request_sent": false, "recipient_confirmed": false, "audit_event_emitted": false, "owner_response_received": false, "owner_response_accepted": false, "formatter_convergence_accepted": false, "redaction_contract_accepted": false, "delivery_receipt_accepted": false, "break_glass_fallback_accepted": false, "direct_bot_api_migration_authorized": false, "telegram_send_authorized": false, "bot_api_call_authorized": false, "workflow_modification_authorized": false, "script_modification_authorized": false, "api_sender_refactor_authorized": false, "secret_value_collection_allowed": false, "raw_payload_storage_allowed": false, "production_write_authorized": false, "runtime_gate": false, "action_buttons_allowed": false, "not_authorization": true }, { "request_draft_id": "telegram_notification_egress_owner_request:_gitea_workflows_cd_yaml", "source_inventory_schema_version": "telegram_notification_egress_inventory_v1", "source_path": ".gitea/workflows/cd.yaml", "surface_kind": "gitea_workflow_direct_bot_api", "direct_call_count": 5, "line_refs": [ 113, 305, 1203, 1552, 1575 ], "line_hash_refs": [ "b57e6587a106976b", "19c1de8d67af874a", "6ef020c2b6eac91f", "d029b95242f39c03", "d62c45a8595984fc" ], "request_fields": [ "request_draft_id", "source_inventory_schema_version", "source_path", "surface_kind", "direct_call_count", "line_refs", "line_hash_refs", "owner_role_or_team", "routing_purpose", "current_sender", "target_chat_route", "message_shape_contract", "redaction_contract", "formatter_convergence_decision", "gateway_or_alertmanager_target", "break_glass_fallback_decision", "delivery_receipt_ref", "dedup_or_fingerprint_plan", "fallback_or_degraded_mode", "migration_or_exception_reason", "maintenance_window", "rollback_owner", "postcheck_evidence_ref", "no_secret_value_attestation", "no_raw_payload_attestation", "no_false_green_attestation", "not_authorization" ], "required_owner_fields": [ "owner_role_or_team", "routing_purpose", "current_sender", "target_chat_route", "message_shape_contract", "redaction_contract", "formatter_convergence_decision", "gateway_or_alertmanager_target", "break_glass_fallback_decision", "delivery_receipt_ref", "dedup_or_fingerprint_plan", "fallback_or_degraded_mode", "migration_or_exception_reason", "maintenance_window", "rollback_owner", "postcheck_evidence_ref", "no_secret_value_attestation", "no_raw_payload_attestation", "no_false_green_attestation" ], "preflight_checks": [ "source_inventory_current", "owner_role_present", "route_purpose_present", "message_shape_contract_present", "redaction_contract_present", "formatter_convergence_decision_present", "break_glass_fallback_explicit", "delivery_receipt_metadata_present", "dedup_or_fingerprint_present", "maintenance_window_present_for_change", "rollback_owner_present", "postcheck_evidence_present", "no_secret_value_attested", "no_raw_payload_attested", "no_false_green_attested", "runtime_gate_stays_zero" ], "outcome_lanes": [ "draft_waiting_owner_dispatch", "request_owner_route_supplement", "request_formatter_convergence_supplement", "request_break_glass_fallback_supplement", "request_redaction_or_receipt_supplement", "quarantine_secret_or_raw_payload", "reject_false_green_claim", "ready_for_manual_dispatch", "waiting_runtime_gate" ], "forbidden_payloads": [ "bot_token_value", "chat_secret_value", "secret_hash", "partial_token", "masked_token", "authorization_header", "raw_message_payload", "raw_workflow_log", "raw_action_log", "raw_screenshot_with_secret", "internal_work_window_transcript", "private_namespace", "unredacted_internal_path", "unredacted_private_ip" ], "blocked_actions": [ "send_owner_request", "confirm_recipient", "emit_audit_event", "telegram_send", "bot_api_call", "workflow_modification", "script_modification", "api_sender_refactor", "change_chat_route", "change_bot_token", "read_secret_store", "collect_secret_value", "collect_secret_hash", "collect_partial_token", "collect_chat_id_secret", "store_raw_message_payload", "store_unredacted_log", "workflow_dispatch", "production_deploy", "accept_cd_success_as_delivery_receipt", "accept_route_200_as_notification_delivery", "accept_ui_visible_as_notification_acceptance", "skip_formatter_convergence", "skip_redaction_contract", "open_runtime_gate", "add_action_button" ], "request_sent": false, "recipient_confirmed": false, "audit_event_emitted": false, "owner_response_received": false, "owner_response_accepted": false, "formatter_convergence_accepted": false, "redaction_contract_accepted": false, "delivery_receipt_accepted": false, "break_glass_fallback_accepted": false, "direct_bot_api_migration_authorized": false, "telegram_send_authorized": false, "bot_api_call_authorized": false, "workflow_modification_authorized": false, "script_modification_authorized": false, "api_sender_refactor_authorized": false, "secret_value_collection_allowed": false, "raw_payload_storage_allowed": false, "production_write_authorized": false, "runtime_gate": false, "action_buttons_allowed": false, "not_authorization": true }, { "request_draft_id": "telegram_notification_egress_owner_request:_gitea_workflows_code_review_yaml", "source_inventory_schema_version": "telegram_notification_egress_inventory_v1", "source_path": ".gitea/workflows/code-review.yaml", "surface_kind": "gitea_workflow_direct_bot_api", "direct_call_count": 2, "line_refs": [ 137, 216 ], "line_hash_refs": [ "a7ebbd735dad5ab2", "f10f7782dc7c8125" ], "request_fields": [ "request_draft_id", "source_inventory_schema_version", "source_path", "surface_kind", "direct_call_count", "line_refs", "line_hash_refs", "owner_role_or_team", "routing_purpose", "current_sender", "target_chat_route", "message_shape_contract", "redaction_contract", "formatter_convergence_decision", "gateway_or_alertmanager_target", "break_glass_fallback_decision", "delivery_receipt_ref", "dedup_or_fingerprint_plan", "fallback_or_degraded_mode", "migration_or_exception_reason", "maintenance_window", "rollback_owner", "postcheck_evidence_ref", "no_secret_value_attestation", "no_raw_payload_attestation", "no_false_green_attestation", "not_authorization" ], "required_owner_fields": [ "owner_role_or_team", "routing_purpose", "current_sender", "target_chat_route", "message_shape_contract", "redaction_contract", "formatter_convergence_decision", "gateway_or_alertmanager_target", "break_glass_fallback_decision", "delivery_receipt_ref", "dedup_or_fingerprint_plan", "fallback_or_degraded_mode", "migration_or_exception_reason", "maintenance_window", "rollback_owner", "postcheck_evidence_ref", "no_secret_value_attestation", "no_raw_payload_attestation", "no_false_green_attestation" ], "preflight_checks": [ "source_inventory_current", "owner_role_present", "route_purpose_present", "message_shape_contract_present", "redaction_contract_present", "formatter_convergence_decision_present", "break_glass_fallback_explicit", "delivery_receipt_metadata_present", "dedup_or_fingerprint_present", "maintenance_window_present_for_change", "rollback_owner_present", "postcheck_evidence_present", "no_secret_value_attested", "no_raw_payload_attested", "no_false_green_attested", "runtime_gate_stays_zero" ], "outcome_lanes": [ "draft_waiting_owner_dispatch", "request_owner_route_supplement", "request_formatter_convergence_supplement", "request_break_glass_fallback_supplement", "request_redaction_or_receipt_supplement", "quarantine_secret_or_raw_payload", "reject_false_green_claim", "ready_for_manual_dispatch", "waiting_runtime_gate" ], "forbidden_payloads": [ "bot_token_value", "chat_secret_value", "secret_hash", "partial_token", "masked_token", "authorization_header", "raw_message_payload", "raw_workflow_log", "raw_action_log", "raw_screenshot_with_secret", "internal_work_window_transcript", "private_namespace", "unredacted_internal_path", "unredacted_private_ip" ], "blocked_actions": [ "send_owner_request", "confirm_recipient", "emit_audit_event", "telegram_send", "bot_api_call", "workflow_modification", "script_modification", "api_sender_refactor", "change_chat_route", "change_bot_token", "read_secret_store", "collect_secret_value", "collect_secret_hash", "collect_partial_token", "collect_chat_id_secret", "store_raw_message_payload", "store_unredacted_log", "workflow_dispatch", "production_deploy", "accept_cd_success_as_delivery_receipt", "accept_route_200_as_notification_delivery", "accept_ui_visible_as_notification_acceptance", "skip_formatter_convergence", "skip_redaction_contract", "open_runtime_gate", "add_action_button" ], "request_sent": false, "recipient_confirmed": false, "audit_event_emitted": false, "owner_response_received": false, "owner_response_accepted": false, "formatter_convergence_accepted": false, "redaction_contract_accepted": false, "delivery_receipt_accepted": false, "break_glass_fallback_accepted": false, "direct_bot_api_migration_authorized": false, "telegram_send_authorized": false, "bot_api_call_authorized": false, "workflow_modification_authorized": false, "script_modification_authorized": false, "api_sender_refactor_authorized": false, "secret_value_collection_allowed": false, "raw_payload_storage_allowed": false, "production_write_authorized": false, "runtime_gate": false, "action_buttons_allowed": false, "not_authorization": true }, { "request_draft_id": "telegram_notification_egress_owner_request:_gitea_workflows_deploy_alerts_yaml", "source_inventory_schema_version": "telegram_notification_egress_inventory_v1", "source_path": ".gitea/workflows/deploy-alerts.yaml", "surface_kind": "gitea_workflow_direct_bot_api", "direct_call_count": 1, "line_refs": [ 69 ], "line_hash_refs": [ "79e83190f68f27c9" ], "request_fields": [ "request_draft_id", "source_inventory_schema_version", "source_path", "surface_kind", "direct_call_count", "line_refs", "line_hash_refs", "owner_role_or_team", "routing_purpose", "current_sender", "target_chat_route", "message_shape_contract", "redaction_contract", "formatter_convergence_decision", "gateway_or_alertmanager_target", "break_glass_fallback_decision", "delivery_receipt_ref", "dedup_or_fingerprint_plan", "fallback_or_degraded_mode", "migration_or_exception_reason", "maintenance_window", "rollback_owner", "postcheck_evidence_ref", "no_secret_value_attestation", "no_raw_payload_attestation", "no_false_green_attestation", "not_authorization" ], "required_owner_fields": [ "owner_role_or_team", "routing_purpose", "current_sender", "target_chat_route", "message_shape_contract", "redaction_contract", "formatter_convergence_decision", "gateway_or_alertmanager_target", "break_glass_fallback_decision", "delivery_receipt_ref", "dedup_or_fingerprint_plan", "fallback_or_degraded_mode", "migration_or_exception_reason", "maintenance_window", "rollback_owner", "postcheck_evidence_ref", "no_secret_value_attestation", "no_raw_payload_attestation", "no_false_green_attestation" ], "preflight_checks": [ "source_inventory_current", "owner_role_present", "route_purpose_present", "message_shape_contract_present", "redaction_contract_present", "formatter_convergence_decision_present", "break_glass_fallback_explicit", "delivery_receipt_metadata_present", "dedup_or_fingerprint_present", "maintenance_window_present_for_change", "rollback_owner_present", "postcheck_evidence_present", "no_secret_value_attested", "no_raw_payload_attested", "no_false_green_attested", "runtime_gate_stays_zero" ], "outcome_lanes": [ "draft_waiting_owner_dispatch", "request_owner_route_supplement", "request_formatter_convergence_supplement", "request_break_glass_fallback_supplement", "request_redaction_or_receipt_supplement", "quarantine_secret_or_raw_payload", "reject_false_green_claim", "ready_for_manual_dispatch", "waiting_runtime_gate" ], "forbidden_payloads": [ "bot_token_value", "chat_secret_value", "secret_hash", "partial_token", "masked_token", "authorization_header", "raw_message_payload", "raw_workflow_log", "raw_action_log", "raw_screenshot_with_secret", "internal_work_window_transcript", "private_namespace", "unredacted_internal_path", "unredacted_private_ip" ], "blocked_actions": [ "send_owner_request", "confirm_recipient", "emit_audit_event", "telegram_send", "bot_api_call", "workflow_modification", "script_modification", "api_sender_refactor", "change_chat_route", "change_bot_token", "read_secret_store", "collect_secret_value", "collect_secret_hash", "collect_partial_token", "collect_chat_id_secret", "store_raw_message_payload", "store_unredacted_log", "workflow_dispatch", "production_deploy", "accept_cd_success_as_delivery_receipt", "accept_route_200_as_notification_delivery", "accept_ui_visible_as_notification_acceptance", "skip_formatter_convergence", "skip_redaction_contract", "open_runtime_gate", "add_action_button" ], "request_sent": false, "recipient_confirmed": false, "audit_event_emitted": false, "owner_response_received": false, "owner_response_accepted": false, "formatter_convergence_accepted": false, "redaction_contract_accepted": false, "delivery_receipt_accepted": false, "break_glass_fallback_accepted": false, "direct_bot_api_migration_authorized": false, "telegram_send_authorized": false, "bot_api_call_authorized": false, "workflow_modification_authorized": false, "script_modification_authorized": false, "api_sender_refactor_authorized": false, "secret_value_collection_allowed": false, "raw_payload_storage_allowed": false, "production_write_authorized": false, "runtime_gate": false, "action_buttons_allowed": false, "not_authorization": true }, { "request_draft_id": "telegram_notification_egress_owner_request:_gitea_workflows_e2e_health_yaml", "source_inventory_schema_version": "telegram_notification_egress_inventory_v1", "source_path": ".gitea/workflows/e2e-health.yaml", "surface_kind": "gitea_workflow_direct_bot_api", "direct_call_count": 1, "line_refs": [ 98 ], "line_hash_refs": [ "d73ce94678f970a9" ], "request_fields": [ "request_draft_id", "source_inventory_schema_version", "source_path", "surface_kind", "direct_call_count", "line_refs", "line_hash_refs", "owner_role_or_team", "routing_purpose", "current_sender", "target_chat_route", "message_shape_contract", "redaction_contract", "formatter_convergence_decision", "gateway_or_alertmanager_target", "break_glass_fallback_decision", "delivery_receipt_ref", "dedup_or_fingerprint_plan", "fallback_or_degraded_mode", "migration_or_exception_reason", "maintenance_window", "rollback_owner", "postcheck_evidence_ref", "no_secret_value_attestation", "no_raw_payload_attestation", "no_false_green_attestation", "not_authorization" ], "required_owner_fields": [ "owner_role_or_team", "routing_purpose", "current_sender", "target_chat_route", "message_shape_contract", "redaction_contract", "formatter_convergence_decision", "gateway_or_alertmanager_target", "break_glass_fallback_decision", "delivery_receipt_ref", "dedup_or_fingerprint_plan", "fallback_or_degraded_mode", "migration_or_exception_reason", "maintenance_window", "rollback_owner", "postcheck_evidence_ref", "no_secret_value_attestation", "no_raw_payload_attestation", "no_false_green_attestation" ], "preflight_checks": [ "source_inventory_current", "owner_role_present", "route_purpose_present", "message_shape_contract_present", "redaction_contract_present", "formatter_convergence_decision_present", "break_glass_fallback_explicit", "delivery_receipt_metadata_present", "dedup_or_fingerprint_present", "maintenance_window_present_for_change", "rollback_owner_present", "postcheck_evidence_present", "no_secret_value_attested", "no_raw_payload_attested", "no_false_green_attested", "runtime_gate_stays_zero" ], "outcome_lanes": [ "draft_waiting_owner_dispatch", "request_owner_route_supplement", "request_formatter_convergence_supplement", "request_break_glass_fallback_supplement", "request_redaction_or_receipt_supplement", "quarantine_secret_or_raw_payload", "reject_false_green_claim", "ready_for_manual_dispatch", "waiting_runtime_gate" ], "forbidden_payloads": [ "bot_token_value", "chat_secret_value", "secret_hash", "partial_token", "masked_token", "authorization_header", "raw_message_payload", "raw_workflow_log", "raw_action_log", "raw_screenshot_with_secret", "internal_work_window_transcript", "private_namespace", "unredacted_internal_path", "unredacted_private_ip" ], "blocked_actions": [ "send_owner_request", "confirm_recipient", "emit_audit_event", "telegram_send", "bot_api_call", "workflow_modification", "script_modification", "api_sender_refactor", "change_chat_route", "change_bot_token", "read_secret_store", "collect_secret_value", "collect_secret_hash", "collect_partial_token", "collect_chat_id_secret", "store_raw_message_payload", "store_unredacted_log", "workflow_dispatch", "production_deploy", "accept_cd_success_as_delivery_receipt", "accept_route_200_as_notification_delivery", "accept_ui_visible_as_notification_acceptance", "skip_formatter_convergence", "skip_redaction_contract", "open_runtime_gate", "add_action_button" ], "request_sent": false, "recipient_confirmed": false, "audit_event_emitted": false, "owner_response_received": false, "owner_response_accepted": false, "formatter_convergence_accepted": false, "redaction_contract_accepted": false, "delivery_receipt_accepted": false, "break_glass_fallback_accepted": false, "direct_bot_api_migration_authorized": false, "telegram_send_authorized": false, "bot_api_call_authorized": false, "workflow_modification_authorized": false, "script_modification_authorized": false, "api_sender_refactor_authorized": false, "secret_value_collection_allowed": false, "raw_payload_storage_allowed": false, "production_write_authorized": false, "runtime_gate": false, "action_buttons_allowed": false, "not_authorization": true }, { "request_draft_id": "telegram_notification_egress_owner_request:_gitea_workflows_run_migration_yml", "source_inventory_schema_version": "telegram_notification_egress_inventory_v1", "source_path": ".gitea/workflows/run-migration.yml", "surface_kind": "gitea_workflow_direct_bot_api", "direct_call_count": 1, "line_refs": [ 210 ], "line_hash_refs": [ "934a8dd69fca99b3" ], "request_fields": [ "request_draft_id", "source_inventory_schema_version", "source_path", "surface_kind", "direct_call_count", "line_refs", "line_hash_refs", "owner_role_or_team", "routing_purpose", "current_sender", "target_chat_route", "message_shape_contract", "redaction_contract", "formatter_convergence_decision", "gateway_or_alertmanager_target", "break_glass_fallback_decision", "delivery_receipt_ref", "dedup_or_fingerprint_plan", "fallback_or_degraded_mode", "migration_or_exception_reason", "maintenance_window", "rollback_owner", "postcheck_evidence_ref", "no_secret_value_attestation", "no_raw_payload_attestation", "no_false_green_attestation", "not_authorization" ], "required_owner_fields": [ "owner_role_or_team", "routing_purpose", "current_sender", "target_chat_route", "message_shape_contract", "redaction_contract", "formatter_convergence_decision", "gateway_or_alertmanager_target", "break_glass_fallback_decision", "delivery_receipt_ref", "dedup_or_fingerprint_plan", "fallback_or_degraded_mode", "migration_or_exception_reason", "maintenance_window", "rollback_owner", "postcheck_evidence_ref", "no_secret_value_attestation", "no_raw_payload_attestation", "no_false_green_attestation" ], "preflight_checks": [ "source_inventory_current", "owner_role_present", "route_purpose_present", "message_shape_contract_present", "redaction_contract_present", "formatter_convergence_decision_present", "break_glass_fallback_explicit", "delivery_receipt_metadata_present", "dedup_or_fingerprint_present", "maintenance_window_present_for_change", "rollback_owner_present", "postcheck_evidence_present", "no_secret_value_attested", "no_raw_payload_attested", "no_false_green_attested", "runtime_gate_stays_zero" ], "outcome_lanes": [ "draft_waiting_owner_dispatch", "request_owner_route_supplement", "request_formatter_convergence_supplement", "request_break_glass_fallback_supplement", "request_redaction_or_receipt_supplement", "quarantine_secret_or_raw_payload", "reject_false_green_claim", "ready_for_manual_dispatch", "waiting_runtime_gate" ], "forbidden_payloads": [ "bot_token_value", "chat_secret_value", "secret_hash", "partial_token", "masked_token", "authorization_header", "raw_message_payload", "raw_workflow_log", "raw_action_log", "raw_screenshot_with_secret", "internal_work_window_transcript", "private_namespace", "unredacted_internal_path", "unredacted_private_ip" ], "blocked_actions": [ "send_owner_request", "confirm_recipient", "emit_audit_event", "telegram_send", "bot_api_call", "workflow_modification", "script_modification", "api_sender_refactor", "change_chat_route", "change_bot_token", "read_secret_store", "collect_secret_value", "collect_secret_hash", "collect_partial_token", "collect_chat_id_secret", "store_raw_message_payload", "store_unredacted_log", "workflow_dispatch", "production_deploy", "accept_cd_success_as_delivery_receipt", "accept_route_200_as_notification_delivery", "accept_ui_visible_as_notification_acceptance", "skip_formatter_convergence", "skip_redaction_contract", "open_runtime_gate", "add_action_button" ], "request_sent": false, "recipient_confirmed": false, "audit_event_emitted": false, "owner_response_received": false, "owner_response_accepted": false, "formatter_convergence_accepted": false, "redaction_contract_accepted": false, "delivery_receipt_accepted": false, "break_glass_fallback_accepted": false, "direct_bot_api_migration_authorized": false, "telegram_send_authorized": false, "bot_api_call_authorized": false, "workflow_modification_authorized": false, "script_modification_authorized": false, "api_sender_refactor_authorized": false, "secret_value_collection_allowed": false, "raw_payload_storage_allowed": false, "production_write_authorized": false, "runtime_gate": false, "action_buttons_allowed": false, "not_authorization": true }, { "request_draft_id": "telegram_notification_egress_owner_request:apps_api_src_services_channel_hub_py", "source_inventory_schema_version": "telegram_notification_egress_inventory_v1", "source_path": "apps/api/src/services/channel_hub.py", "surface_kind": "api_direct_bot_api", "direct_call_count": 1, "line_refs": [ 1138 ], "line_hash_refs": [ "9e418fa74c83815a" ], "request_fields": [ "request_draft_id", "source_inventory_schema_version", "source_path", "surface_kind", "direct_call_count", "line_refs", "line_hash_refs", "owner_role_or_team", "routing_purpose", "current_sender", "target_chat_route", "message_shape_contract", "redaction_contract", "formatter_convergence_decision", "gateway_or_alertmanager_target", "break_glass_fallback_decision", "delivery_receipt_ref", "dedup_or_fingerprint_plan", "fallback_or_degraded_mode", "migration_or_exception_reason", "maintenance_window", "rollback_owner", "postcheck_evidence_ref", "no_secret_value_attestation", "no_raw_payload_attestation", "no_false_green_attestation", "not_authorization" ], "required_owner_fields": [ "owner_role_or_team", "routing_purpose", "current_sender", "target_chat_route", "message_shape_contract", "redaction_contract", "formatter_convergence_decision", "gateway_or_alertmanager_target", "break_glass_fallback_decision", "delivery_receipt_ref", "dedup_or_fingerprint_plan", "fallback_or_degraded_mode", "migration_or_exception_reason", "maintenance_window", "rollback_owner", "postcheck_evidence_ref", "no_secret_value_attestation", "no_raw_payload_attestation", "no_false_green_attestation" ], "preflight_checks": [ "source_inventory_current", "owner_role_present", "route_purpose_present", "message_shape_contract_present", "redaction_contract_present", "formatter_convergence_decision_present", "break_glass_fallback_explicit", "delivery_receipt_metadata_present", "dedup_or_fingerprint_present", "maintenance_window_present_for_change", "rollback_owner_present", "postcheck_evidence_present", "no_secret_value_attested", "no_raw_payload_attested", "no_false_green_attested", "runtime_gate_stays_zero" ], "outcome_lanes": [ "draft_waiting_owner_dispatch", "request_owner_route_supplement", "request_formatter_convergence_supplement", "request_break_glass_fallback_supplement", "request_redaction_or_receipt_supplement", "quarantine_secret_or_raw_payload", "reject_false_green_claim", "ready_for_manual_dispatch", "waiting_runtime_gate" ], "forbidden_payloads": [ "bot_token_value", "chat_secret_value", "secret_hash", "partial_token", "masked_token", "authorization_header", "raw_message_payload", "raw_workflow_log", "raw_action_log", "raw_screenshot_with_secret", "internal_work_window_transcript", "private_namespace", "unredacted_internal_path", "unredacted_private_ip" ], "blocked_actions": [ "send_owner_request", "confirm_recipient", "emit_audit_event", "telegram_send", "bot_api_call", "workflow_modification", "script_modification", "api_sender_refactor", "change_chat_route", "change_bot_token", "read_secret_store", "collect_secret_value", "collect_secret_hash", "collect_partial_token", "collect_chat_id_secret", "store_raw_message_payload", "store_unredacted_log", "workflow_dispatch", "production_deploy", "accept_cd_success_as_delivery_receipt", "accept_route_200_as_notification_delivery", "accept_ui_visible_as_notification_acceptance", "skip_formatter_convergence", "skip_redaction_contract", "open_runtime_gate", "add_action_button" ], "request_sent": false, "recipient_confirmed": false, "audit_event_emitted": false, "owner_response_received": false, "owner_response_accepted": false, "formatter_convergence_accepted": false, "redaction_contract_accepted": false, "delivery_receipt_accepted": false, "break_glass_fallback_accepted": false, "direct_bot_api_migration_authorized": false, "telegram_send_authorized": false, "bot_api_call_authorized": false, "workflow_modification_authorized": false, "script_modification_authorized": false, "api_sender_refactor_authorized": false, "secret_value_collection_allowed": false, "raw_payload_storage_allowed": false, "production_write_authorized": false, "runtime_gate": false, "action_buttons_allowed": false, "not_authorization": true }, { "request_draft_id": "telegram_notification_egress_owner_request:scripts_ops_backup_from_110_sh", "source_inventory_schema_version": "telegram_notification_egress_inventory_v1", "source_path": "scripts/ops/backup-from-110.sh", "surface_kind": "ops_script_direct_bot_api", "direct_call_count": 1, "line_refs": [ 64 ], "line_hash_refs": [ "ff5ffbeca44d679b" ], "request_fields": [ "request_draft_id", "source_inventory_schema_version", "source_path", "surface_kind", "direct_call_count", "line_refs", "line_hash_refs", "owner_role_or_team", "routing_purpose", "current_sender", "target_chat_route", "message_shape_contract", "redaction_contract", "formatter_convergence_decision", "gateway_or_alertmanager_target", "break_glass_fallback_decision", "delivery_receipt_ref", "dedup_or_fingerprint_plan", "fallback_or_degraded_mode", "migration_or_exception_reason", "maintenance_window", "rollback_owner", "postcheck_evidence_ref", "no_secret_value_attestation", "no_raw_payload_attestation", "no_false_green_attestation", "not_authorization" ], "required_owner_fields": [ "owner_role_or_team", "routing_purpose", "current_sender", "target_chat_route", "message_shape_contract", "redaction_contract", "formatter_convergence_decision", "gateway_or_alertmanager_target", "break_glass_fallback_decision", "delivery_receipt_ref", "dedup_or_fingerprint_plan", "fallback_or_degraded_mode", "migration_or_exception_reason", "maintenance_window", "rollback_owner", "postcheck_evidence_ref", "no_secret_value_attestation", "no_raw_payload_attestation", "no_false_green_attestation" ], "preflight_checks": [ "source_inventory_current", "owner_role_present", "route_purpose_present", "message_shape_contract_present", "redaction_contract_present", "formatter_convergence_decision_present", "break_glass_fallback_explicit", "delivery_receipt_metadata_present", "dedup_or_fingerprint_present", "maintenance_window_present_for_change", "rollback_owner_present", "postcheck_evidence_present", "no_secret_value_attested", "no_raw_payload_attested", "no_false_green_attested", "runtime_gate_stays_zero" ], "outcome_lanes": [ "draft_waiting_owner_dispatch", "request_owner_route_supplement", "request_formatter_convergence_supplement", "request_break_glass_fallback_supplement", "request_redaction_or_receipt_supplement", "quarantine_secret_or_raw_payload", "reject_false_green_claim", "ready_for_manual_dispatch", "waiting_runtime_gate" ], "forbidden_payloads": [ "bot_token_value", "chat_secret_value", "secret_hash", "partial_token", "masked_token", "authorization_header", "raw_message_payload", "raw_workflow_log", "raw_action_log", "raw_screenshot_with_secret", "internal_work_window_transcript", "private_namespace", "unredacted_internal_path", "unredacted_private_ip" ], "blocked_actions": [ "send_owner_request", "confirm_recipient", "emit_audit_event", "telegram_send", "bot_api_call", "workflow_modification", "script_modification", "api_sender_refactor", "change_chat_route", "change_bot_token", "read_secret_store", "collect_secret_value", "collect_secret_hash", "collect_partial_token", "collect_chat_id_secret", "store_raw_message_payload", "store_unredacted_log", "workflow_dispatch", "production_deploy", "accept_cd_success_as_delivery_receipt", "accept_route_200_as_notification_delivery", "accept_ui_visible_as_notification_acceptance", "skip_formatter_convergence", "skip_redaction_contract", "open_runtime_gate", "add_action_button" ], "request_sent": false, "recipient_confirmed": false, "audit_event_emitted": false, "owner_response_received": false, "owner_response_accepted": false, "formatter_convergence_accepted": false, "redaction_contract_accepted": false, "delivery_receipt_accepted": false, "break_glass_fallback_accepted": false, "direct_bot_api_migration_authorized": false, "telegram_send_authorized": false, "bot_api_call_authorized": false, "workflow_modification_authorized": false, "script_modification_authorized": false, "api_sender_refactor_authorized": false, "secret_value_collection_allowed": false, "raw_payload_storage_allowed": false, "production_write_authorized": false, "runtime_gate": false, "action_buttons_allowed": false, "not_authorization": true }, { "request_draft_id": "telegram_notification_egress_owner_request:scripts_ops_docker_health_monitor_sh", "source_inventory_schema_version": "telegram_notification_egress_inventory_v1", "source_path": "scripts/ops/docker-health-monitor.sh", "surface_kind": "ops_script_direct_bot_api", "direct_call_count": 1, "line_refs": [ 90 ], "line_hash_refs": [ "6611406903bc7d65" ], "request_fields": [ "request_draft_id", "source_inventory_schema_version", "source_path", "surface_kind", "direct_call_count", "line_refs", "line_hash_refs", "owner_role_or_team", "routing_purpose", "current_sender", "target_chat_route", "message_shape_contract", "redaction_contract", "formatter_convergence_decision", "gateway_or_alertmanager_target", "break_glass_fallback_decision", "delivery_receipt_ref", "dedup_or_fingerprint_plan", "fallback_or_degraded_mode", "migration_or_exception_reason", "maintenance_window", "rollback_owner", "postcheck_evidence_ref", "no_secret_value_attestation", "no_raw_payload_attestation", "no_false_green_attestation", "not_authorization" ], "required_owner_fields": [ "owner_role_or_team", "routing_purpose", "current_sender", "target_chat_route", "message_shape_contract", "redaction_contract", "formatter_convergence_decision", "gateway_or_alertmanager_target", "break_glass_fallback_decision", "delivery_receipt_ref", "dedup_or_fingerprint_plan", "fallback_or_degraded_mode", "migration_or_exception_reason", "maintenance_window", "rollback_owner", "postcheck_evidence_ref", "no_secret_value_attestation", "no_raw_payload_attestation", "no_false_green_attestation" ], "preflight_checks": [ "source_inventory_current", "owner_role_present", "route_purpose_present", "message_shape_contract_present", "redaction_contract_present", "formatter_convergence_decision_present", "break_glass_fallback_explicit", "delivery_receipt_metadata_present", "dedup_or_fingerprint_present", "maintenance_window_present_for_change", "rollback_owner_present", "postcheck_evidence_present", "no_secret_value_attested", "no_raw_payload_attested", "no_false_green_attested", "runtime_gate_stays_zero" ], "outcome_lanes": [ "draft_waiting_owner_dispatch", "request_owner_route_supplement", "request_formatter_convergence_supplement", "request_break_glass_fallback_supplement", "request_redaction_or_receipt_supplement", "quarantine_secret_or_raw_payload", "reject_false_green_claim", "ready_for_manual_dispatch", "waiting_runtime_gate" ], "forbidden_payloads": [ "bot_token_value", "chat_secret_value", "secret_hash", "partial_token", "masked_token", "authorization_header", "raw_message_payload", "raw_workflow_log", "raw_action_log", "raw_screenshot_with_secret", "internal_work_window_transcript", "private_namespace", "unredacted_internal_path", "unredacted_private_ip" ], "blocked_actions": [ "send_owner_request", "confirm_recipient", "emit_audit_event", "telegram_send", "bot_api_call", "workflow_modification", "script_modification", "api_sender_refactor", "change_chat_route", "change_bot_token", "read_secret_store", "collect_secret_value", "collect_secret_hash", "collect_partial_token", "collect_chat_id_secret", "store_raw_message_payload", "store_unredacted_log", "workflow_dispatch", "production_deploy", "accept_cd_success_as_delivery_receipt", "accept_route_200_as_notification_delivery", "accept_ui_visible_as_notification_acceptance", "skip_formatter_convergence", "skip_redaction_contract", "open_runtime_gate", "add_action_button" ], "request_sent": false, "recipient_confirmed": false, "audit_event_emitted": false, "owner_response_received": false, "owner_response_accepted": false, "formatter_convergence_accepted": false, "redaction_contract_accepted": false, "delivery_receipt_accepted": false, "break_glass_fallback_accepted": false, "direct_bot_api_migration_authorized": false, "telegram_send_authorized": false, "bot_api_call_authorized": false, "workflow_modification_authorized": false, "script_modification_authorized": false, "api_sender_refactor_authorized": false, "secret_value_collection_allowed": false, "raw_payload_storage_allowed": false, "production_write_authorized": false, "runtime_gate": false, "action_buttons_allowed": false, "not_authorization": true }, { "request_draft_id": "telegram_notification_egress_owner_request:scripts_ops_dr_drill_sh", "source_inventory_schema_version": "telegram_notification_egress_inventory_v1", "source_path": "scripts/ops/dr-drill.sh", "surface_kind": "ops_script_direct_bot_api", "direct_call_count": 1, "line_refs": [ 63 ], "line_hash_refs": [ "b7cf532f3c5509fc" ], "request_fields": [ "request_draft_id", "source_inventory_schema_version", "source_path", "surface_kind", "direct_call_count", "line_refs", "line_hash_refs", "owner_role_or_team", "routing_purpose", "current_sender", "target_chat_route", "message_shape_contract", "redaction_contract", "formatter_convergence_decision", "gateway_or_alertmanager_target", "break_glass_fallback_decision", "delivery_receipt_ref", "dedup_or_fingerprint_plan", "fallback_or_degraded_mode", "migration_or_exception_reason", "maintenance_window", "rollback_owner", "postcheck_evidence_ref", "no_secret_value_attestation", "no_raw_payload_attestation", "no_false_green_attestation", "not_authorization" ], "required_owner_fields": [ "owner_role_or_team", "routing_purpose", "current_sender", "target_chat_route", "message_shape_contract", "redaction_contract", "formatter_convergence_decision", "gateway_or_alertmanager_target", "break_glass_fallback_decision", "delivery_receipt_ref", "dedup_or_fingerprint_plan", "fallback_or_degraded_mode", "migration_or_exception_reason", "maintenance_window", "rollback_owner", "postcheck_evidence_ref", "no_secret_value_attestation", "no_raw_payload_attestation", "no_false_green_attestation" ], "preflight_checks": [ "source_inventory_current", "owner_role_present", "route_purpose_present", "message_shape_contract_present", "redaction_contract_present", "formatter_convergence_decision_present", "break_glass_fallback_explicit", "delivery_receipt_metadata_present", "dedup_or_fingerprint_present", "maintenance_window_present_for_change", "rollback_owner_present", "postcheck_evidence_present", "no_secret_value_attested", "no_raw_payload_attested", "no_false_green_attested", "runtime_gate_stays_zero" ], "outcome_lanes": [ "draft_waiting_owner_dispatch", "request_owner_route_supplement", "request_formatter_convergence_supplement", "request_break_glass_fallback_supplement", "request_redaction_or_receipt_supplement", "quarantine_secret_or_raw_payload", "reject_false_green_claim", "ready_for_manual_dispatch", "waiting_runtime_gate" ], "forbidden_payloads": [ "bot_token_value", "chat_secret_value", "secret_hash", "partial_token", "masked_token", "authorization_header", "raw_message_payload", "raw_workflow_log", "raw_action_log", "raw_screenshot_with_secret", "internal_work_window_transcript", "private_namespace", "unredacted_internal_path", "unredacted_private_ip" ], "blocked_actions": [ "send_owner_request", "confirm_recipient", "emit_audit_event", "telegram_send", "bot_api_call", "workflow_modification", "script_modification", "api_sender_refactor", "change_chat_route", "change_bot_token", "read_secret_store", "collect_secret_value", "collect_secret_hash", "collect_partial_token", "collect_chat_id_secret", "store_raw_message_payload", "store_unredacted_log", "workflow_dispatch", "production_deploy", "accept_cd_success_as_delivery_receipt", "accept_route_200_as_notification_delivery", "accept_ui_visible_as_notification_acceptance", "skip_formatter_convergence", "skip_redaction_contract", "open_runtime_gate", "add_action_button" ], "request_sent": false, "recipient_confirmed": false, "audit_event_emitted": false, "owner_response_received": false, "owner_response_accepted": false, "formatter_convergence_accepted": false, "redaction_contract_accepted": false, "delivery_receipt_accepted": false, "break_glass_fallback_accepted": false, "direct_bot_api_migration_authorized": false, "telegram_send_authorized": false, "bot_api_call_authorized": false, "workflow_modification_authorized": false, "script_modification_authorized": false, "api_sender_refactor_authorized": false, "secret_value_collection_allowed": false, "raw_payload_storage_allowed": false, "production_write_authorized": false, "runtime_gate": false, "action_buttons_allowed": false, "not_authorization": true }, { "request_draft_id": "telegram_notification_egress_owner_request:scripts_ops_pg_backup_sh", "source_inventory_schema_version": "telegram_notification_egress_inventory_v1", "source_path": "scripts/ops/pg-backup.sh", "surface_kind": "ops_script_direct_bot_api", "direct_call_count": 1, "line_refs": [ 52 ], "line_hash_refs": [ "8268f3d6f14d66a3" ], "request_fields": [ "request_draft_id", "source_inventory_schema_version", "source_path", "surface_kind", "direct_call_count", "line_refs", "line_hash_refs", "owner_role_or_team", "routing_purpose", "current_sender", "target_chat_route", "message_shape_contract", "redaction_contract", "formatter_convergence_decision", "gateway_or_alertmanager_target", "break_glass_fallback_decision", "delivery_receipt_ref", "dedup_or_fingerprint_plan", "fallback_or_degraded_mode", "migration_or_exception_reason", "maintenance_window", "rollback_owner", "postcheck_evidence_ref", "no_secret_value_attestation", "no_raw_payload_attestation", "no_false_green_attestation", "not_authorization" ], "required_owner_fields": [ "owner_role_or_team", "routing_purpose", "current_sender", "target_chat_route", "message_shape_contract", "redaction_contract", "formatter_convergence_decision", "gateway_or_alertmanager_target", "break_glass_fallback_decision", "delivery_receipt_ref", "dedup_or_fingerprint_plan", "fallback_or_degraded_mode", "migration_or_exception_reason", "maintenance_window", "rollback_owner", "postcheck_evidence_ref", "no_secret_value_attestation", "no_raw_payload_attestation", "no_false_green_attestation" ], "preflight_checks": [ "source_inventory_current", "owner_role_present", "route_purpose_present", "message_shape_contract_present", "redaction_contract_present", "formatter_convergence_decision_present", "break_glass_fallback_explicit", "delivery_receipt_metadata_present", "dedup_or_fingerprint_present", "maintenance_window_present_for_change", "rollback_owner_present", "postcheck_evidence_present", "no_secret_value_attested", "no_raw_payload_attested", "no_false_green_attested", "runtime_gate_stays_zero" ], "outcome_lanes": [ "draft_waiting_owner_dispatch", "request_owner_route_supplement", "request_formatter_convergence_supplement", "request_break_glass_fallback_supplement", "request_redaction_or_receipt_supplement", "quarantine_secret_or_raw_payload", "reject_false_green_claim", "ready_for_manual_dispatch", "waiting_runtime_gate" ], "forbidden_payloads": [ "bot_token_value", "chat_secret_value", "secret_hash", "partial_token", "masked_token", "authorization_header", "raw_message_payload", "raw_workflow_log", "raw_action_log", "raw_screenshot_with_secret", "internal_work_window_transcript", "private_namespace", "unredacted_internal_path", "unredacted_private_ip" ], "blocked_actions": [ "send_owner_request", "confirm_recipient", "emit_audit_event", "telegram_send", "bot_api_call", "workflow_modification", "script_modification", "api_sender_refactor", "change_chat_route", "change_bot_token", "read_secret_store", "collect_secret_value", "collect_secret_hash", "collect_partial_token", "collect_chat_id_secret", "store_raw_message_payload", "store_unredacted_log", "workflow_dispatch", "production_deploy", "accept_cd_success_as_delivery_receipt", "accept_route_200_as_notification_delivery", "accept_ui_visible_as_notification_acceptance", "skip_formatter_convergence", "skip_redaction_contract", "open_runtime_gate", "add_action_button" ], "request_sent": false, "recipient_confirmed": false, "audit_event_emitted": false, "owner_response_received": false, "owner_response_accepted": false, "formatter_convergence_accepted": false, "redaction_contract_accepted": false, "delivery_receipt_accepted": false, "break_glass_fallback_accepted": false, "direct_bot_api_migration_authorized": false, "telegram_send_authorized": false, "bot_api_call_authorized": false, "workflow_modification_authorized": false, "script_modification_authorized": false, "api_sender_refactor_authorized": false, "secret_value_collection_allowed": false, "raw_payload_storage_allowed": false, "production_write_authorized": false, "runtime_gate": false, "action_buttons_allowed": false, "not_authorization": true } ], "operator_interpretation": [ "This is a draft packet for manual owner dispatch; request_sent_count remains 0.", "Each file-level draft must decide whether the path converges to TelegramGateway, AWOOI Alertmanager, or a documented break-glass fallback.", "No workflow, script, API, secret, Telegram, or production action is authorized by this snapshot." ] }