{ "schema_version": "gitea_inventory_owner_attestation_response_v1", "status": "draft_waiting_owner_response", "date": "2026-06-04", "mode": "owner_response_intake_only", "runtime_execution_authorized": false, "source_contract": "gitea_inventory_coverage_attestation_v1", "target_contract": "gitea_repo_inventory_v1", "source_indexes": [ "docs/security/gitea-inventory-coverage-attestation.snapshot.json", "docs/security/GITEA-INVENTORY-COVERAGE-ATTESTATION.md", "docs/security/gitea-authenticated-inventory-export-request.snapshot.json", "docs/security/gitea-authenticated-inventory-import-acceptance.snapshot.json", "docs/security/source-control-primary-readiness-gate.snapshot.json", "docs/security/security-approval-review-packet.snapshot.json", "docs/security/security-followup-runtime-gate.snapshot.json" ], "summary": { "owner_response_status": "waiting_owner_response", "required_response_item_count": 5, "received_response_count": 0, "accepted_response_count": 0, "rejected_response_count": 0, "response_template_count": 5, "owner_response_template_status_count": 5, "owner_response_audit_event_template_count": 3, "owner_response_redaction_example_count": 5, "owner_response_display_section_count": 8, "owner_response_request_packet_count": 1, "owner_response_collection_check_count": 6, "owner_response_intake_handoff_queue_count": 5, "owner_response_intake_handoff_queue_ready_count": 0, "owner_response_intake_handoff_queue_received_count": 0, "owner_response_intake_handoff_queue_accepted_count": 0, "owner_response_intake_handoff_queue_runtime_gate_count": 0, "owner_response_intake_handoff_queue_raw_payload_allowed": false, "owner_response_intake_handoff_queue_action_buttons_allowed": false, "owner_response_metadata_intake_field_count": 6, "owner_response_metadata_intake_required_count": 6, "owner_response_metadata_intake_filled_count": 0, "owner_response_metadata_intake_received_count": 0, "owner_response_metadata_intake_accepted_count": 0, "owner_response_metadata_intake_runtime_gate_count": 0, "owner_response_metadata_intake_redacted_ref_required": true, "owner_response_metadata_intake_raw_payload_allowed": false, "owner_response_metadata_intake_secret_plaintext_allowed": false, "owner_response_metadata_intake_action_buttons_allowed": false, "intake_preflight_check_count": 6, "intake_outcome_lane_count": 5, "acceptance_check_count": 8, "rejection_rule_count": 10, "token_value_collection_allowed": false, "raw_secret_allowed": false, "repo_write_allowed": false, "refs_sync_allowed": false, "github_primary_switch_authorized": false, "action_buttons_allowed": false }, "response_templates": [ { "template_id": "response-public-only-vs-local-gitea-gap", "attestation_item_id": "public_only_vs_local_gitea_gap", "title": "public-only 與本機 Gitea remote 覆蓋缺口回覆", "required_owner_fields": [ "owner_role_or_team", "decision", "decision_reason", "affected_repos", "evidence_refs", "followup_owner" ], "acceptable_decisions": [ "in_scope", "out_of_scope", "legacy_archived", "external_system", "inaccessible_requires_followup", "unknown_requires_more_evidence" ], "minimum_evidence_refs": [ "docs/security/gitea-repo-inventory.snapshot.json", "docs/security/local-git-remote-inventory.snapshot.json" ], "acceptance_criteria": [ "必須逐項說明 `wooo/clawbot-v5` 與 `wooo/wooo-aiops` 是否屬本輪 inventory / migration scope", "若標示 out_of_scope、legacy_archived 或 external_system，必須附 owner 理由", "若標示 in_scope，必須指定後續 repo owner 與 GitHub target review owner" ], "rejection_conditions": [ "只回覆整體同意但沒有逐 repo decision", "要求直接建立 GitHub repo、sync refs 或切 GitHub primary", "貼出 token、credential、私有 clone URL 或未脫敏截圖" ], "allowed_outputs": [ "更新 attestation snapshot 的 read-only decision 欄位", "更新 migration matrix 與 decision table 的 scope 欄位", "維持 gitea_repo_inventory_v1.status=partial" ], "execution_authorized": false }, { "template_id": "response-org-user-endpoint-identity", "attestation_item_id": "org_user_endpoint_identity", "title": "Gitea `wooo` org/user endpoint 身分回覆", "required_owner_fields": [ "owner_role_or_team", "decision", "decision_reason", "canonical_namespace", "evidence_refs", "followup_owner" ], "acceptable_decisions": [ "in_scope", "out_of_scope", "inaccessible_requires_followup", "unknown_requires_more_evidence" ], "minimum_evidence_refs": [ "docs/security/gitea-org-repo-inventory-blocked.snapshot.json", "docs/security/gitea-authenticated-inventory-export-request.snapshot.json" ], "acceptance_criteria": [ "必須說明 `wooo` 在 Gitea 中應以 user、org 或兩者盤點", "必須標示 canonical endpoint 或要求管理者補脫敏 evidence", "不得把 org endpoint 404 自動解釋為不存在 private/internal repos" ], "rejection_conditions": [ "只說 public API 查不到就當完成", "要求使用 write/admin token", "提供未脫敏 API response 或 token value" ], "allowed_outputs": [ "更新 Gitea inventory query mode 的待判定說明", "更新 AwoooP review lane 的 endpoint scope 顯示", "維持 read-only / approval-only 狀態" ], "execution_authorized": false }, { "template_id": "response-internal-110-adjacent-scope", "attestation_item_id": "internal_110_adjacent_scope", "title": "110 內部相鄰來源 scope 回覆", "required_owner_fields": [ "owner_role_or_team", "decision", "decision_reason", "affected_sources", "evidence_refs", "followup_owner" ], "acceptable_decisions": [ "in_scope", "out_of_scope", "legacy_archived", "external_system", "inaccessible_requires_followup", "unknown_requires_more_evidence" ], "minimum_evidence_refs": [ "docs/security/git-remote-refs-bitan-tsenyang.snapshot.json", "docs/security/git-remote-refs-wooo-infra-config.snapshot.json", "docs/security/local-git-remote-inventory.snapshot.json" ], "acceptance_criteria": [ "必須逐項說明 `bitan-pharmacy`、`root/momo-pro-system`、`tsenyang-website`、`wooo/wooo-infra-config` 是否納入本輪 scope", "若屬外部或 legacy，必須指定後續 owner 或排除理由", "若屬 in_scope，必須標示是否需要後續 refs truth / workflow-secret parity" ], "rejection_conditions": [ "用單一句話排除所有 110 adjacent sources", "把內部相鄰來源直接推到 GitHub primary readiness", "要求 fetch/push/delete refs" ], "allowed_outputs": [ "更新 source-control migration matrix 的 scope 欄位", "更新 primary readiness blocker 說明", "建立 request_more_evidence lane" ], "execution_authorized": false }, { "template_id": "response-repo-owner-canonical-scope", "attestation_item_id": "repo_owner_canonical_scope", "title": "repo owner / canonical / GitHub target scope 回覆", "required_owner_fields": [ "owner_role_or_team", "decision", "decision_reason", "repo_owner", "canonical_source", "github_target_candidate", "visibility_review_owner", "evidence_refs" ], "acceptable_decisions": [ "in_scope", "out_of_scope", "external_system", "unknown_requires_more_evidence" ], "minimum_evidence_refs": [ "docs/security/github-target-decision.snapshot.json", "docs/security/source-control-approval-board.snapshot.json", "docs/security/local-repo-canonical-ewoooc-momo.snapshot.json" ], "acceptance_criteria": [ "每個 in-scope repo 必須有 owner、canonical source、GitHub target candidate 與 visibility review owner", "若 GitHub target 目前 not_found_or_private，必須維持 pending approval，不得自動建立", "若 canonical 關係未定，必須標示 unknown_requires_more_evidence" ], "rejection_conditions": [ "把 not_found_or_private 當成可建立 repo 的批准", "沒有 visibility / owner 責任人", "要求修改 repo visibility 或建立 GitHub repo" ], "allowed_outputs": [ "更新 canonical decision table", "更新 GitHub target review package", "更新 primary readiness gate 的 owner/canonical blocker" ], "execution_authorized": false }, { "template_id": "response-legacy-or-inaccessible-disposition", "attestation_item_id": "legacy_or_inaccessible_repo_disposition", "title": "legacy / inaccessible repo disposition 回覆", "required_owner_fields": [ "owner_role_or_team", "decision", "decision_reason", "affected_repos_or_sources", "disposition", "evidence_refs", "followup_owner" ], "acceptable_decisions": [ "out_of_scope", "legacy_archived", "external_system", "inaccessible_requires_followup", "unknown_requires_more_evidence" ], "minimum_evidence_refs": [ "docs/security/gitea-authenticated-inventory-import-acceptance.snapshot.json", "docs/security/source-control-primary-readiness-gate.snapshot.json" ], "acceptance_criteria": [ "每個 legacy / inaccessible / external repo 必須有 disposition 與 owner 理由", "inaccessible_requires_followup 必須指定下一個 evidence owner", "unknown_requires_more_evidence 必須維持 blocker，不得進 primary readiness" ], "rejection_conditions": [ "沒有列出受影響 repo 或 source", "把未出現在 payload 的 repo 自動視為已完成 inventory", "要求 archive/delete/disable Gitea repo" ], "allowed_outputs": [ "更新 legacy / inaccessible review lane", "更新 status rollup 的 blocked reason", "維持 source-control primary readiness blocker" ], "execution_authorized": false } ], "owner_response_template_statuses": [ { "template_id": "response-public-only-vs-local-gitea-gap", "attestation_item_id": "public_only_vs_local_gitea_gap", "display_order": 1, "collection_status": "waiting_owner_response", "request_status": "request_ready_not_sent", "received_response_count": 0, "accepted_response_count": 0, "rejected_response_count": 0, "latest_outcome_lane": "keep_waiting_owner_response", "next_owner_action": "Owner 需逐項判定 `wooo/clawbot-v5` 與 `wooo/wooo-aiops` 是否屬本輪 inventory / migration scope，並只引用脫敏 evidence refs。", "awooop_display_mode": "display_template_status_only", "execution_authorized": false, "not_approval": true, "still_forbidden": [ "mark_received_without_owner_response", "mark_accepted_without_acceptance_checks", "execute_inventory", "create_github_repo", "sync_refs", "switch_github_primary" ] }, { "template_id": "response-org-user-endpoint-identity", "attestation_item_id": "org_user_endpoint_identity", "display_order": 2, "collection_status": "waiting_owner_response", "request_status": "request_ready_not_sent", "received_response_count": 0, "accepted_response_count": 0, "rejected_response_count": 0, "latest_outcome_lane": "keep_waiting_owner_response", "next_owner_action": "Owner 需說明 `wooo` 在 Gitea 中應以 user、org 或兩者盤點，且不得把 404 當成 private/internal repo 不存在。", "awooop_display_mode": "display_template_status_only", "execution_authorized": false, "not_approval": true, "still_forbidden": [ "mark_received_without_owner_response", "mark_accepted_without_acceptance_checks", "store_token_value", "write_gitea_repo", "sync_refs", "switch_github_primary" ] }, { "template_id": "response-internal-110-adjacent-scope", "attestation_item_id": "internal_110_adjacent_scope", "display_order": 3, "collection_status": "waiting_owner_response", "request_status": "request_ready_not_sent", "received_response_count": 0, "accepted_response_count": 0, "rejected_response_count": 0, "latest_outcome_lane": "keep_waiting_owner_response", "next_owner_action": "Owner 需逐項判定 `bitan-pharmacy`、`root/momo-pro-system`、`tsenyang-website`、`wooo/wooo-infra-config` 是否納入本輪 scope。", "awooop_display_mode": "display_template_status_only", "execution_authorized": false, "not_approval": true, "still_forbidden": [ "mark_received_without_owner_response", "mark_accepted_without_acceptance_checks", "create_github_repo", "sync_refs", "delete_refs", "switch_github_primary" ] }, { "template_id": "response-repo-owner-canonical-scope", "attestation_item_id": "repo_owner_canonical_scope", "display_order": 4, "collection_status": "waiting_owner_response", "request_status": "request_ready_not_sent", "received_response_count": 0, "accepted_response_count": 0, "rejected_response_count": 0, "latest_outcome_lane": "keep_waiting_owner_response", "next_owner_action": "Owner 需為 in-scope repo 指定 owner、canonical source、GitHub target candidate 與 visibility review owner。", "awooop_display_mode": "display_template_status_only", "execution_authorized": false, "not_approval": true, "still_forbidden": [ "mark_received_without_owner_response", "mark_accepted_without_acceptance_checks", "create_github_repo", "change_visibility", "sync_refs", "switch_github_primary" ] }, { "template_id": "response-legacy-or-inaccessible-disposition", "attestation_item_id": "legacy_or_inaccessible_repo_disposition", "display_order": 5, "collection_status": "waiting_owner_response", "request_status": "request_ready_not_sent", "received_response_count": 0, "accepted_response_count": 0, "rejected_response_count": 0, "latest_outcome_lane": "keep_waiting_owner_response", "next_owner_action": "Owner 需對 legacy、inaccessible 或 external repo 留下 disposition、理由與後續 owner。", "awooop_display_mode": "display_template_status_only", "execution_authorized": false, "not_approval": true, "still_forbidden": [ "mark_received_without_owner_response", "mark_accepted_without_acceptance_checks", "archive_repo", "delete_repo", "disable_gitea_repo", "switch_github_primary" ] } ], "owner_response_intake_handoff_queue": [ { "handoff_lane_id": "publicGap", "display_order": 1, "source_template_id": "response-public-only-vs-local-gitea-gap", "template_label": "D1", "handoff_status": "waiting_owner_response_metadata", "required_owner_field_count": 6, "required_owner_fields": [ "owner_role_or_team", "decision", "decision_reason", "affected_repos", "evidence_refs", "followup_owner" ], "current_blocker": "缺少 public-only / local gap 的逐 repo owner 判定。", "next_safe_step": "只等待負責人提供脫敏 metadata pointer；不得收 raw response 或啟動 repo / refs 動作。", "received_response_count": 0, "accepted_response_count": 0, "runtime_gate_count": 0, "raw_payload_allowed": false, "secret_plaintext_allowed": false, "action_buttons_allowed": false, "execution_authorized": false, "not_approval": true, "still_forbidden": [ "mark_received_from_handoff_queue", "mark_accepted_from_handoff_queue", "store_owner_response_raw_body", "create_github_repo", "sync_refs", "switch_github_primary" ] }, { "handoff_lane_id": "namespaceIdentity", "display_order": 2, "source_template_id": "response-org-user-endpoint-identity", "template_label": "D2", "handoff_status": "waiting_owner_response_metadata", "required_owner_field_count": 6, "required_owner_fields": [ "owner_role_or_team", "decision", "decision_reason", "canonical_namespace", "evidence_refs", "followup_owner" ], "current_blocker": "缺少 Gitea `wooo` user / org canonical namespace 判定。", "next_safe_step": "只等待負責人提供 canonical namespace 與脫敏 evidence ref；不得使用 write/admin token。", "received_response_count": 0, "accepted_response_count": 0, "runtime_gate_count": 0, "raw_payload_allowed": false, "secret_plaintext_allowed": false, "action_buttons_allowed": false, "execution_authorized": false, "not_approval": true, "still_forbidden": [ "mark_received_from_handoff_queue", "mark_accepted_from_handoff_queue", "store_owner_response_raw_body", "store_token_value", "write_gitea_repo", "switch_github_primary" ] }, { "handoff_lane_id": "adjacentScope", "display_order": 3, "source_template_id": "response-internal-110-adjacent-scope", "template_label": "D3", "handoff_status": "waiting_owner_response_metadata", "required_owner_field_count": 6, "required_owner_fields": [ "owner_role_or_team", "decision", "decision_reason", "affected_sources", "evidence_refs", "followup_owner" ], "current_blocker": "缺少 110 相鄰來源逐項 scope 判定。", "next_safe_step": "只等待 owner 標示來源是否 in-scope、legacy、external 或需補證；不得 fetch、push 或刪 refs。", "received_response_count": 0, "accepted_response_count": 0, "runtime_gate_count": 0, "raw_payload_allowed": false, "secret_plaintext_allowed": false, "action_buttons_allowed": false, "execution_authorized": false, "not_approval": true, "still_forbidden": [ "mark_received_from_handoff_queue", "mark_accepted_from_handoff_queue", "store_owner_response_raw_body", "fetch_refs", "delete_refs", "switch_github_primary" ] }, { "handoff_lane_id": "canonicalOwner", "display_order": 4, "source_template_id": "response-repo-owner-canonical-scope", "template_label": "D4", "handoff_status": "waiting_owner_response_metadata", "required_owner_field_count": 8, "required_owner_fields": [ "owner_role_or_team", "decision", "decision_reason", "repo_owner", "canonical_source", "github_target_candidate", "visibility_review_owner", "evidence_refs" ], "current_blocker": "缺少 repo owner、canonical source、GitHub target candidate 與 visibility review owner。", "next_safe_step": "只等待負責人補齊 owner / canonical / visibility metadata；不得建立 GitHub repo 或改 visibility。", "received_response_count": 0, "accepted_response_count": 0, "runtime_gate_count": 0, "raw_payload_allowed": false, "secret_plaintext_allowed": false, "action_buttons_allowed": false, "execution_authorized": false, "not_approval": true, "still_forbidden": [ "mark_received_from_handoff_queue", "mark_accepted_from_handoff_queue", "store_owner_response_raw_body", "create_github_repo", "change_repo_visibility", "switch_github_primary" ] }, { "handoff_lane_id": "legacyDisposition", "display_order": 5, "source_template_id": "response-legacy-or-inaccessible-disposition", "template_label": "D5", "handoff_status": "waiting_owner_response_metadata", "required_owner_field_count": 7, "required_owner_fields": [ "owner_role_or_team", "decision", "decision_reason", "affected_repos_or_sources", "disposition", "evidence_refs", "followup_owner" ], "current_blocker": "缺少 legacy、inaccessible 或 external repo disposition 與後續 owner。", "next_safe_step": "只等待負責人補 disposition metadata；不得 archive、delete 或停用 Gitea repo。", "received_response_count": 0, "accepted_response_count": 0, "runtime_gate_count": 0, "raw_payload_allowed": false, "secret_plaintext_allowed": false, "action_buttons_allowed": false, "execution_authorized": false, "not_approval": true, "still_forbidden": [ "mark_received_from_handoff_queue", "mark_accepted_from_handoff_queue", "store_owner_response_raw_body", "archive_repo", "delete_repo", "disable_gitea_repo" ] } ], "owner_response_metadata_intake_envelope": [ { "field_id": "ownerRoleTeam", "display_order": 1, "source_required_field": "owner_role_or_team", "field_label": "負責人角色 / 團隊", "field_status": "waiting_owner_response_metadata", "intake_mode": "redacted_metadata_only", "required": true, "filled_count": 0, "received_response_count": 0, "accepted_response_count": 0, "runtime_gate_count": 0, "redacted_reference_required": true, "raw_payload_allowed": false, "secret_plaintext_allowed": false, "action_buttons_allowed": false, "execution_authorized": false, "not_approval": true, "still_forbidden": [ "mark_received_from_metadata_envelope", "mark_accepted_from_metadata_envelope", "store_owner_response_raw_body", "store_secret_value" ] }, { "field_id": "decision", "display_order": 2, "source_required_field": "decision", "field_label": "判定", "field_status": "waiting_owner_response_metadata", "intake_mode": "controlled_value_only", "required": true, "filled_count": 0, "received_response_count": 0, "accepted_response_count": 0, "runtime_gate_count": 0, "redacted_reference_required": true, "raw_payload_allowed": false, "secret_plaintext_allowed": false, "action_buttons_allowed": false, "execution_authorized": false, "not_approval": true, "still_forbidden": [ "mark_received_from_metadata_envelope", "mark_accepted_from_metadata_envelope", "override_allowed_decisions", "open_runtime_gate" ] }, { "field_id": "decisionReason", "display_order": 3, "source_required_field": "decision_reason", "field_label": "判定理由", "field_status": "waiting_owner_response_metadata", "intake_mode": "redacted_metadata_only", "required": true, "filled_count": 0, "received_response_count": 0, "accepted_response_count": 0, "runtime_gate_count": 0, "redacted_reference_required": true, "raw_payload_allowed": false, "secret_plaintext_allowed": false, "action_buttons_allowed": false, "execution_authorized": false, "not_approval": true, "still_forbidden": [ "mark_received_from_metadata_envelope", "mark_accepted_from_metadata_envelope", "store_owner_response_raw_body", "treat_reason_as_approval" ] }, { "field_id": "affectedScope", "display_order": 4, "source_required_field": "affected_scope", "field_label": "受影響範圍", "field_status": "waiting_owner_response_metadata", "intake_mode": "scope_pointer_only", "required": true, "filled_count": 0, "received_response_count": 0, "accepted_response_count": 0, "runtime_gate_count": 0, "redacted_reference_required": true, "raw_payload_allowed": false, "secret_plaintext_allowed": false, "action_buttons_allowed": false, "execution_authorized": false, "not_approval": true, "still_forbidden": [ "mark_received_from_metadata_envelope", "mark_accepted_from_metadata_envelope", "create_or_delete_repo", "sync_refs" ] }, { "field_id": "redactedEvidenceRefs", "display_order": 5, "source_required_field": "evidence_refs", "field_label": "脫敏證據參照", "field_status": "waiting_owner_response_metadata", "intake_mode": "redacted_reference_only", "required": true, "filled_count": 0, "received_response_count": 0, "accepted_response_count": 0, "runtime_gate_count": 0, "redacted_reference_required": true, "raw_payload_allowed": false, "secret_plaintext_allowed": false, "action_buttons_allowed": false, "execution_authorized": false, "not_approval": true, "still_forbidden": [ "mark_received_from_metadata_envelope", "mark_accepted_from_metadata_envelope", "store_unredacted_evidence", "store_secret_value" ] }, { "field_id": "followupOwner", "display_order": 6, "source_required_field": "followup_owner", "field_label": "後續負責人", "field_status": "waiting_owner_response_metadata", "intake_mode": "owner_pointer_only", "required": true, "filled_count": 0, "received_response_count": 0, "accepted_response_count": 0, "runtime_gate_count": 0, "redacted_reference_required": true, "raw_payload_allowed": false, "secret_plaintext_allowed": false, "action_buttons_allowed": false, "execution_authorized": false, "not_approval": true, "still_forbidden": [ "mark_received_from_metadata_envelope", "mark_accepted_from_metadata_envelope", "assign_runtime_owner_without_review", "open_runtime_gate" ] } ], "owner_response_audit_event_templates": [ { "event_template_id": "audit-owner-response-request-shown", "display_order": 1, "event_status": "template_only_not_emitted", "trigger": "AwoooP 顯示 S4.9 owner response request packet 時。", "purpose": "只記錄 request packet 已可顯示或已顯示的 metadata，不代表 owner response 已收到。", "allowed_metadata_fields": [ "event_template_id", "request_id", "requested_template_ids", "target_contract", "displayed_by_role", "displayed_at_taipei", "source_document_ref" ], "forbidden_payloads": [ "owner_response_raw_body", "token_value", "secret_value", "private_key", "cookie_or_session", "db_dump", "git_object_pack", "repo_archive", "execution_request_payload" ], "emitted_event_count": 0, "stored_raw_payload_allowed": false, "awooop_display_mode": "display_audit_template_only", "execution_authorized": false, "not_approval": true }, { "event_template_id": "audit-owner-response-received-metadata", "display_order": 2, "event_status": "template_only_not_emitted", "trigger": "Owner 提供 S4.9 response metadata pointer 時。", "purpose": "只記錄 response 已收到的脫敏 metadata pointer；不得保存 response 原文或敏感 payload。", "allowed_metadata_fields": [ "event_template_id", "template_id", "attestation_item_id", "owner_role_or_team", "received_at_taipei", "redacted_evidence_refs", "source_document_ref" ], "forbidden_payloads": [ "owner_response_raw_body", "token_value", "secret_value", "private_key", "cookie_or_session", "private_clone_url_credential", "db_dump", "git_object_pack", "repo_archive", "execution_request_payload" ], "emitted_event_count": 0, "stored_raw_payload_allowed": false, "awooop_display_mode": "display_audit_template_only", "execution_authorized": false, "not_approval": true }, { "event_template_id": "audit-owner-response-outcome-classified", "display_order": 3, "event_status": "template_only_not_emitted", "trigger": "AwoooP 依 collection checks、preflight checks 與 outcome lanes 分類 S4.9 response 時。", "purpose": "只記錄分類結果與下一步提示；不得把 outcome lane 當成 approval 或 execution authorization。", "allowed_metadata_fields": [ "event_template_id", "template_id", "collection_status", "latest_outcome_lane", "next_owner_action", "classified_at_taipei", "classified_by_role" ], "forbidden_payloads": [ "owner_response_raw_body", "token_value", "secret_value", "private_key", "cookie_or_session", "db_dump", "git_object_pack", "repo_archive", "repo_or_refs_execution_request", "workflow_secret_runner_execution_request" ], "emitted_event_count": 0, "stored_raw_payload_allowed": false, "awooop_display_mode": "display_audit_template_only", "execution_authorized": false, "not_approval": true } ], "owner_response_redaction_examples": [ { "example_id": "redaction-existing-doc-ref", "display_order": 1, "example_status": "template_example_only", "category": "repo_existing_document_reference", "safe_response_shape": [ "template_id=response-public-only-vs-local-gitea-gap", "decision=in_scope", "evidence_refs=[docs/security/gitea-repo-inventory.snapshot.json, docs/security/local-git-remote-inventory.snapshot.json]", "decision_reason=引用既有 snapshot 的 repo slug 與 coverage gap，不貼 API raw body" ], "required_redactions": [ "外部 evidence 只保留 repo 內文件路徑或 snapshot 路徑", "若引用外部清冊，先轉為 redacted metadata pointer", "不得貼完整 API response body" ], "forbidden_raw_values": [ "token_value", "secret_value", "private_clone_url_credential", "api_response_raw_body" ], "stored_raw_payload_allowed": false, "awooop_display_mode": "display_redaction_example_only", "execution_authorized": false, "not_approval": true }, { "example_id": "redaction-owner-decision-metadata", "display_order": 2, "example_status": "template_example_only", "category": "owner_decision_metadata", "safe_response_shape": [ "owner_role_or_team=migration-owner", "decision=unknown_requires_more_evidence", "followup_owner=security-commander", "evidence_refs=[docs/security/GITEA-AUTHENTICATED-INVENTORY-EXPORT-REQUEST.md]" ], "required_redactions": [ "只寫角色或團隊，不寫個人密碼、session 或 API token", "decision_reason 不得包含可重播操作步驟或憑證", "followup_owner 只代表責任人，不代表 approval" ], "forbidden_raw_values": [ "password", "cookie", "session", "one_time_code", "approval_phrase_as_execution_authorization" ], "stored_raw_payload_allowed": false, "awooop_display_mode": "display_redaction_example_only", "execution_authorized": false, "not_approval": true }, { "example_id": "redaction-private-url-metadata", "display_order": 3, "example_status": "template_example_only", "category": "private_url_or_remote_metadata", "safe_response_shape": [ "affected_repos_or_sources=[wooo/clawbot-v5]", "source_host=gitea-local", "credential_present=true", "credential_value_stored=false" ], "required_redactions": [ "完整 clone URL 只能保留 host、namespace、repo slug 與 credential_present=true/false", "若 URL 含 userinfo、query token 或 header，必須移除值", "不得把 private URL 當成可 fetch 或可 push 指令" ], "forbidden_raw_values": [ "https_userinfo_credential", "query_token", "authorization_header", "ssh_private_key", "git_remote_with_secret" ], "stored_raw_payload_allowed": false, "awooop_display_mode": "display_redaction_example_only", "execution_authorized": false, "not_approval": true }, { "example_id": "redaction-api-export-summary", "display_order": 4, "example_status": "template_example_only", "category": "api_or_admin_export_summary", "safe_response_shape": [ "export_source=read_only_token_api_or_redacted_admin_export", "repo_count_observed=number_only", "token_present=true", "token_value_stored=false" ], "required_redactions": [ "只保留 count、source type、redaction status 與 evidence ref", "API request/response header、body 與 token value 不得保存", "DB dump、git object pack 與 repo archive 必須拒收或隔離" ], "forbidden_raw_values": [ "api_request_header", "api_response_raw_body", "db_dump", "git_object_pack", "repo_archive" ], "stored_raw_payload_allowed": false, "awooop_display_mode": "display_redaction_example_only", "execution_authorized": false, "not_approval": true }, { "example_id": "redaction-quarantine-pointer", "display_order": 5, "example_status": "template_example_only", "category": "uncertain_sensitive_payload", "safe_response_shape": [ "collection_status=quarantine_sensitive_payload", "quarantine_reason=疑似含敏感值，尚未人工脫敏", "raw_payload_stored_in_repo=false", "next_owner_action=request_redacted_metadata_pointer" ], "required_redactions": [ "不確定是否含敏感值時先產生 quarantine pointer", "只留下原因、來源類型、責任 owner 與下一步，不留下原文", "解除 quarantine 前不得更新 received / accepted count" ], "forbidden_raw_values": [ "owner_response_raw_body", "secret_screenshot", "credential_file", "execution_request_payload", "unredacted_export" ], "stored_raw_payload_allowed": false, "awooop_display_mode": "display_redaction_example_only", "execution_authorized": false, "not_approval": true } ], "owner_response_display_sections": [ { "section_id": "display-owner-response-summary", "display_order": 1, "section_status": "display_contract_only", "source_field": "summary", "purpose": "顯示 owner response 仍為 waiting、received/accepted/rejected 皆為 0，以及所有 write / primary / action button flags 皆為 false。", "allowed_ui_actions": [ "display_counts", "display_false_flags", "display_waiting_state" ], "forbidden_ui_actions": [ "mark_received", "mark_accepted", "enable_action_button" ], "execution_authorized": false, "not_approval": true }, { "section_id": "display-owner-response-request-packet", "display_order": 2, "section_status": "display_contract_only", "source_field": "owner_response_request_packet", "purpose": "顯示 owner 需要回覆的五個 templates、允許欄位、evidence ref rules 與 forbidden payloads。", "allowed_ui_actions": [ "display_requested_templates", "display_allowed_fields", "display_forbidden_payloads" ], "forbidden_ui_actions": [ "send_request_as_approval", "start_inventory", "sync_refs" ], "execution_authorized": false, "not_approval": true }, { "section_id": "display-template-status-ledger", "display_order": 3, "section_status": "display_contract_only", "source_field": "owner_response_template_statuses", "purpose": "逐 template 顯示 waiting_owner_response、request_ready_not_sent 與 0/0/0 計數。", "allowed_ui_actions": [ "display_per_template_status", "display_next_owner_action", "display_zero_counts" ], "forbidden_ui_actions": [ "treat_request_ready_as_sent", "accept_partial_template_response", "advance_s4_13_candidate" ], "execution_authorized": false, "not_approval": true }, { "section_id": "display-audit-event-templates", "display_order": 4, "section_status": "display_contract_only", "source_field": "owner_response_audit_event_templates", "purpose": "顯示 request shown、response metadata received 與 outcome classified 的脫敏 audit template，且 emitted count 仍為 0。", "allowed_ui_actions": [ "display_audit_template_ids", "display_allowed_metadata_fields", "display_emitted_count_zero" ], "forbidden_ui_actions": [ "store_raw_payload", "emit_production_audit_event", "treat_audit_template_as_response" ], "execution_authorized": false, "not_approval": true }, { "section_id": "display-redaction-examples", "display_order": 5, "section_status": "display_contract_only", "source_field": "owner_response_redaction_examples", "purpose": "顯示 owner 回覆時可用的脫敏 evidence 形狀與 forbidden raw values。", "allowed_ui_actions": [ "display_safe_response_shape", "display_required_redactions", "display_forbidden_raw_values" ], "forbidden_ui_actions": [ "store_example_as_response", "store_raw_payload", "treat_example_as_ingestion" ], "execution_authorized": false, "not_approval": true }, { "section_id": "display-collection-checks", "display_order": 6, "section_status": "display_contract_only", "source_field": "owner_response_collection_checks", "purpose": "顯示 request / received / accepted 必須分離，以及只收 read-only markdown、redacted metadata pointer 或補證請求。", "allowed_ui_actions": [ "display_collection_checklist", "display_failure_lane", "display_not_approval" ], "forbidden_ui_actions": [ "treat_request_sent_as_received", "treat_owner_wording_as_approval", "enable_runtime_gate" ], "execution_authorized": false, "not_approval": true }, { "section_id": "display-preflight-and-outcome-lanes", "display_order": 7, "section_status": "display_contract_only", "source_field": "intake_preflight_checks,intake_outcome_lanes", "purpose": "顯示可審、補證、隔離、拒收或等待的只讀分類結果，不變更 response count。", "allowed_ui_actions": [ "display_preflight_checks", "display_outcome_lanes", "display_waiting_state" ], "forbidden_ui_actions": [ "mark_preflight_pass_as_accepted", "execute_inventory", "switch_github_primary" ], "execution_authorized": false, "not_approval": true }, { "section_id": "display-acceptance-and-rejection-rules", "display_order": 8, "section_status": "display_contract_only", "source_field": "acceptance_checks,rejection_rules,forbidden_actions", "purpose": "顯示接受前需要通過的規則、拒收條件與仍禁止事項。", "allowed_ui_actions": [ "display_acceptance_checks", "display_rejection_rules", "display_forbidden_actions" ], "forbidden_ui_actions": [ "auto_accept_response", "write_gitea_repo", "create_github_repo" ], "execution_authorized": false, "not_approval": true } ], "owner_response_request_packet": { "request_id": "s4_9_gitea_owner_attestation_response_request", "display_status": "ready_to_request_owner_response", "requested_packet": "docs/security/GITEA-INVENTORY-OWNER-ATTESTATION-RESPONSE.md", "required_response_item_count": 5, "requested_template_ids": [ "response-public-only-vs-local-gitea-gap", "response-org-user-endpoint-identity", "response-internal-110-adjacent-scope", "response-repo-owner-canonical-scope", "response-legacy-or-inaccessible-disposition" ], "owner_instruction_summary": "請 owner 只依 S4.9 五個 templates 回覆 scope / canonical / disposition 判定，並只引用脫敏 evidence refs；不要貼 token、secret、DB dump、git object 或任何可執行 payload。", "allowed_response_fields": [ "owner_role_or_team", "decision", "decision_reason", "affected_repos_or_sources_or_namespace", "canonical_source_or_namespace", "github_target_candidate", "visibility_review_owner", "evidence_refs", "followup_owner" ], "evidence_ref_rules": [ "只允許 repo 內既有文件或 snapshot 路徑", "owner 外部 evidence 必須先脫敏並只提供 metadata pointer", "不得提供 token value、secret value、private clone URL credential、cookie、session 或截圖中的敏感值", "不確定是否含敏感值時先走 quarantine，不得直接貼入 response" ], "forbidden_payloads": [ "token_value", "secret_value", "private_key", "cookie_or_session", "db_dump", "git_object_pack", "repo_archive", "write_or_admin_api_request", "repo_or_refs_execution_request", "workflow_secret_runner_execution_request" ], "allowed_submission_modes": [ "read_only_markdown_response", "redacted_metadata_pointer", "request_more_evidence" ], "awooop_display_mode": "display_owner_response_request_only", "execution_authorized": false, "not_approval": true, "still_forbidden": [ "store_token_value", "write_gitea_repo", "create_github_repo", "sync_refs", "switch_github_primary" ] }, "owner_response_collection_checks": [ { "check_id": "collection-request-packet-displayed", "display_order": 1, "title": "已顯示 owner response request packet", "required": true, "pass_condition": "AwoooP 必須只顯示 `owner_response_request_packet` 的 5 個 template、允許欄位、脫敏 evidence 規則與禁止 payload，不得附加執行要求。", "failure_lane": "keep_waiting_owner_response", "awooop_display": "display_request_packet_only", "execution_authorized": false, "not_approval": true }, { "check_id": "collection-read-only-submission-mode", "display_order": 2, "title": "收件模式維持 read-only", "required": true, "pass_condition": "owner 只能用 read-only markdown response、redacted metadata pointer 或 request_more_evidence；不得提交 token、repo archive、git object pack、DB dump 或 API execution request。", "failure_lane": "quarantine_sensitive_payload", "awooop_display": "display_read_only_submission_only", "execution_authorized": false, "not_approval": true }, { "check_id": "collection-five-template-tracking", "display_order": 3, "title": "五個 templates 分開追蹤", "required": true, "pass_condition": "S4.9 五個 requested_template_ids 必須逐項追蹤 received / accepted 狀態；不可用單一整體同意取代逐項 response。", "failure_lane": "request_more_evidence", "awooop_display": "display_per_template_tracking", "execution_authorized": false, "not_approval": true }, { "check_id": "collection-redacted-evidence-only", "display_order": 4, "title": "只收脫敏 evidence refs", "required": true, "pass_condition": "收件內容只能包含 repo 內路徑或脫敏 metadata pointer；任何不確定是否含敏感值的資料都先進 quarantine。", "failure_lane": "quarantine_sensitive_payload", "awooop_display": "display_redacted_evidence_only", "execution_authorized": false, "not_approval": true }, { "check_id": "collection-no-approval-language", "display_order": 5, "title": "不得把回覆語意升級成批准", "required": true, "pass_condition": "即使 owner response 文字包含同意、OK 或可進行，也只能視為 scope / canonical / disposition response，不得視為 inventory、migration、refs sync 或 GitHub primary approval。", "failure_lane": "reject_execution_request", "awooop_display": "display_scope_response_only", "execution_authorized": false, "not_approval": true }, { "check_id": "collection-audit-metadata-only", "display_order": 6, "title": "只記錄 audit metadata", "required": true, "pass_condition": "AwoooP 只能記錄 request shown、response received、template id、owner role/team、redacted evidence refs 與 outcome lane；不得保存 token value、secret value 或可還原 credential 的內容。", "failure_lane": "quarantine_sensitive_payload", "awooop_display": "display_audit_metadata_only", "execution_authorized": false, "not_approval": true } ], "intake_preflight_checks": [ { "check_id": "preflight-known-attestation-item", "display_order": 1, "title": "回覆必須對應 S4.7 已知 item", "required": true, "pass_condition": "`attestation_item_id` 必須是 S4.7 五個 coverage attestation items 之一。", "failure_lane": "request_owner_correction", "awooop_display": "request_more_evidence", "execution_authorized": false }, { "check_id": "preflight-required-owner-fields", "display_order": 2, "title": "必填欄位完整", "required": true, "pass_condition": "每筆 response 必須有 owner role/team、decision、decision_reason、受影響 scope、evidence_refs 與 followup_owner。", "failure_lane": "request_more_evidence", "awooop_display": "request_more_evidence", "execution_authorized": false }, { "check_id": "preflight-allowed-decision", "display_order": 3, "title": "decision 在模板允許值內", "required": true, "pass_condition": "`decision` 必須落在對應 response template 的 acceptable_decisions。", "failure_lane": "request_owner_correction", "awooop_display": "request_more_evidence", "execution_authorized": false }, { "check_id": "preflight-redacted-evidence-only", "display_order": 4, "title": "只接受脫敏 evidence refs", "required": true, "pass_condition": "`evidence_refs` 只能指向 repo 內文件、snapshot 或 owner 提供的脫敏 metadata，不得含 token、secret、cookie、session、private key 或私有 URL 憑證。", "failure_lane": "quarantine_sensitive_payload", "awooop_display": "quarantine_sensitive_payload", "execution_authorized": false }, { "check_id": "preflight-no-execution-request", "display_order": 5, "title": "不得夾帶執行要求", "required": true, "pass_condition": "response 不得要求 Gitea/GitHub repo 寫入、repo 建立、visibility 修改、refs sync/delete/force-push、workflow/secret/runner 變更、scan 或 runtime action。", "failure_lane": "reject_execution_request", "awooop_display": "reject_execution_request", "execution_authorized": false }, { "check_id": "preflight-all-five-items-before-accepted", "display_order": 6, "title": "接受前需覆蓋五個 items", "required": true, "pass_condition": "S4.9 要被標示 accepted 前，五個 response templates 都必須收到可驗收 owner response；部分回覆只能維持 waiting 或 request_more_evidence。", "failure_lane": "keep_waiting_owner_response", "awooop_display": "ready_for_owner_review", "execution_authorized": false } ], "intake_outcome_lanes": [ { "lane_id": "ready_for_owner_review", "display_order": 1, "title": "可進 owner review", "when": "response 對應已知 S4.7 item、必填欄位完整、decision 在允許值內、evidence refs 已脫敏，且沒有執行要求。", "awooop_action": "display_ready_for_owner_review", "allowed_outputs": [ "顯示 ready for owner review", "把 response 保持在 review packet", "等待 reviewer 判斷是否進入 acceptance checks" ], "still_forbidden": [ "mark_response_accepted_without_acceptance_checks", "execute_inventory", "create_github_repo", "sync_refs", "switch_github_primary" ], "execution_authorized": false, "not_approval": true }, { "lane_id": "request_more_evidence", "display_order": 2, "title": "要求補證", "when": "response 缺必填欄位、decision 不在允許值內、scope 不明確，或只提供口頭同意 / 不完整 metadata。", "awooop_action": "display_request_more_evidence", "allowed_outputs": [ "顯示 request more evidence", "列出缺少欄位或需修正 decision", "維持 received / accepted response count 不變" ], "still_forbidden": [ "accept_partial_response", "execute_inventory", "create_github_repo", "sync_refs", "switch_github_primary" ], "execution_authorized": false, "not_approval": true }, { "lane_id": "quarantine_sensitive_payload", "display_order": 3, "title": "隔離敏感 payload", "when": "response 或 evidence refs 含 token、secret、cookie、session、private key、DB dump、git object pack、私有 URL 憑證或未脫敏截圖。", "awooop_action": "route_to_mirror_quarantine", "allowed_outputs": [ "顯示 quarantine required", "只保存隔離 metadata 與 redacted reason", "要求 owner 重新提供脫敏 evidence" ], "still_forbidden": [ "store_sensitive_value", "sanitize_and_accept_in_place", "execute_inventory", "sync_refs", "switch_github_primary" ], "execution_authorized": false, "not_approval": true }, { "lane_id": "reject_execution_request", "display_order": 4, "title": "拒收執行要求", "when": "response 要求 Gitea/GitHub 寫入、repo 建立、visibility 修改、refs sync/delete/force-push、workflow/secret/runner 變更、scan 或 runtime action。", "awooop_action": "reject_execution_request", "allowed_outputs": [ "顯示 rejected execution request", "保留拒收原因", "要求 owner 改交只讀 scope / evidence response" ], "still_forbidden": [ "run_requested_action", "create_github_repo", "write_gitea_repo", "sync_refs", "switch_github_primary" ], "execution_authorized": false, "not_approval": true }, { "lane_id": "keep_waiting_owner_response", "display_order": 5, "title": "維持等待 owner response", "when": "五個 response templates 尚未全部收到可驗收 response，或部分 response 仍在補證 / 隔離 / 拒收狀態。", "awooop_action": "keep_waiting_owner_response", "allowed_outputs": [ "顯示 waiting owner response", "顯示尚未覆蓋的 S4.7 items", "維持 S4.13 next_collection_candidate 指向 S4.9" ], "still_forbidden": [ "mark_s4_9_complete", "advance_s4_10_acceptance", "execute_inventory", "sync_refs", "switch_github_primary" ], "execution_authorized": false, "not_approval": true } ], "acceptance_checks": [ { "check_id": "maps_to_known_s4_7_item", "title": "回覆對應既有 S4.7 item", "required": true, "pass_condition": "`attestation_item_id` 必須對應 S4.7 的 5 個 item 之一", "failure_lane": "reject_unknown_attestation_item", "execution_authorized": false }, { "check_id": "decision_value_allowed", "title": "決策值在允許範圍內", "required": true, "pass_condition": "`decision` 必須是該 item 的 acceptable_decisions 之一", "failure_lane": "request_owner_correction", "execution_authorized": false }, { "check_id": "owner_reason_present", "title": "owner 理由存在", "required": true, "pass_condition": "每筆回覆都必須有 `decision_reason`，且能說明 scope 或 disposition", "failure_lane": "request_more_evidence", "execution_authorized": false }, { "check_id": "evidence_refs_redacted", "title": "evidence refs 已脫敏", "required": true, "pass_condition": "`evidence_refs` 只能指向 repo 內文件、snapshot 或 owner 提供的脫敏 metadata，不得含 secret value", "failure_lane": "quarantine_sensitive_payload", "execution_authorized": false }, { "check_id": "affected_scope_explicit", "title": "受影響 repo / namespace / source 明確", "required": true, "pass_condition": "回覆必須列出受影響 repo、namespace 或 110 adjacent source，不接受只寫整體同意", "failure_lane": "request_more_evidence", "execution_authorized": false }, { "check_id": "no_runtime_or_source_control_action", "title": "不含 runtime 或 source-control 執行要求", "required": true, "pass_condition": "回覆只允許更新文件、snapshot、matrix、decision table 與 readiness gate", "failure_lane": "reject_runtime_or_source_control_action", "execution_authorized": false }, { "check_id": "all_required_items_before_acceptance", "title": "接受前需覆蓋 5 個 items", "required": true, "pass_condition": "要把 S4.7 標示為 accepted 前，5 個 required response items 都必須有可驗收 owner response", "failure_lane": "keep_waiting_owner_response", "execution_authorized": false }, { "check_id": "primary_readiness_still_blocked", "title": "GitHub primary readiness 仍維持 blocked", "required": true, "pass_condition": "即使 owner response 通過，也只能更新 readiness blocker 說明，不得將 primary_ready_count 改為大於 0", "failure_lane": "reject_primary_cutover_approval", "execution_authorized": false } ], "rejection_rules": [ "回覆含 token value、PAT、cookie、session、CSRF token 或 partial token 時必須拒收。", "回覆含 webhook secret、repository secret value、runner registration token 或 deploy key private key 時必須拒收。", "回覆含 private key、DB dump、git object pack、裸 repo tarball 或可還原 credential 的 artifact 時必須拒收。", "回覆要求使用 write-capable token、admin token 或 secret scope token 時必須拒收。", "回覆要求建立、刪除、封存或修改 Gitea repo 時必須拒收。", "回覆要求建立 GitHub repo、修改 visibility、sync refs、delete refs 或 force push 時必須拒收。", "回覆未逐項對應 S4.7 attestation item 時不得標記 attestation accepted。", "回覆只提供口頭同意、截圖或不完整 repo metadata 時必須要求補 evidence。", "回覆把 owner attestation 當成 repo migration approval 或 GitHub primary approval 時必須拒收。", "任何不確定是否含敏感值的回覆必須先進 mirror quarantine，不得人工手改後直接入庫。" ], "allowed_outputs": [ "更新 `gitea-inventory-coverage-attestation.snapshot.json` 的 read-only owner response 欄位", "更新 `GITEA-INVENTORY-COVERAGE-ATTESTATION.md` 的已收 / 未收 decision table", "更新 source-control migration matrix、canonical decision table、primary readiness gate 與 status rollup 的 read-only 欄位", "把缺口顯示到 AwoooP approval / review lane", "維持 `gitea_repo_inventory_v1.status=partial`，直到 S4.6 payload 通過且 S4.7 owner response 全部接受" ], "forbidden_actions": [ "store_token_value", "store_raw_secret", "store_cookie_or_session", "import_gitea_db_dump", "import_git_object_pack", "use_write_capable_token", "write_to_gitea", "create_gitea_repo", "delete_or_archive_gitea_repo", "create_github_repo", "change_repo_visibility", "sync_git_refs", "delete_git_refs", "force_push", "switch_github_primary", "disable_gitea", "add_action_button", "execute_scan_or_runtime_change" ] }