{ "acceptance_candidates": [ { "acceptance_candidate_id": "k8s_argocd_owner_response_acceptance:awoooi_prod", "acceptance_fields": [ "acceptance_candidate_id", "request_id", "group_id", "root", "control_tier", "owner_response_ref", "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "argocd_health_readback_ref", "argocd_sync_revision_ref", "rollback_revision", "rendered_manifest_diff_ref", "maintenance_window", "validation_plan", "reviewer_outcome", "followup_owner", "not_approval" ], "action_buttons_allowed": false, "affected_scope": "pending_owner_response", "argocd_api_read_authorized": false, "argocd_api_read_executed": false, "argocd_health_readback_received": false, "argocd_health_readback_ref": null, "argocd_sync_authorized": false, "argocd_sync_executed": false, "argocd_sync_revision_ref": null, "blocked_actions": [ "argocd_api_read_without_approval", "live_cluster_read_without_approval", "argocd_sync", "kubectl_apply", "kubectl_patch", "kubectl_delete", "helm_upgrade", "secret_value_collection", "live_cluster_write", "manual_pod_restart", "scale_workload", "change_network_policy", "change_rbac", "restore_backup", "render_manifest_diff_from_untrusted_payload", "mark_owner_response_accepted_without_reviewer_record", "open_runtime_gate", "add_action_button" ], "control_tier": "C0", "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "followup_owner": "pending_owner_response", "group_id": "awoooi_prod", "kubectl_action_authorized": false, "kubectl_action_executed": false, "live_cluster_read_authorized": false, "live_cluster_read_executed": false, "maintenance_window": "pending_owner_response", "maintenance_window_accepted": false, "not_approval": true, "outcome_lanes": [ "waiting_owner_response", "quarantine_raw_payload", "reject_secret_or_unredacted_manifest", "request_supplement", "ready_for_rendered_manifest_review", "owner_review_only_update", "waiting_runtime_gate" ], "owner_response_accepted": false, "owner_response_quarantined": false, "owner_response_received": false, "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", "production_write_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], "rendered_manifest_diff_candidate": false, "rendered_manifest_diff_ready": false, "rendered_manifest_diff_ref": null, "request_id": "k8s_argocd_owner_request:awoooi_prod", "request_sent": false, "required_owner_fields": [ "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "argocd_health_readback_ref", "argocd_sync_revision_ref", "rollback_revision", "followup_owner", "maintenance_window", "validation_plan" ], "reviewer_checks": [ "owner_identity_present", "decision_reason_present", "affected_scope_matches_group", "redacted_refs_only", "secret_value_absent", "argocd_health_readback_ref_shape", "argocd_sync_revision_ref_not_execution", "rollback_revision_present", "rendered_manifest_diff_ref_not_payload", "maintenance_window_present", "validation_plan_present", "counts_transition_safe" ], "reviewer_outcome": "waiting_owner_response", "rollback_revision": "pending_owner_response", "rollback_revision_accepted": false, "root": "k8s/awoooi-prod", "runtime_gate": false, "secret_value_collection_allowed": false, "status": "waiting_owner_response", "supplement_requested": false, "validation_plan": "pending_owner_response" }, { "acceptance_candidate_id": "k8s_argocd_owner_response_acceptance:argocd", "acceptance_fields": [ "acceptance_candidate_id", "request_id", "group_id", "root", "control_tier", "owner_response_ref", "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "argocd_health_readback_ref", "argocd_sync_revision_ref", "rollback_revision", "rendered_manifest_diff_ref", "maintenance_window", "validation_plan", "reviewer_outcome", "followup_owner", "not_approval" ], "action_buttons_allowed": false, "affected_scope": "pending_owner_response", "argocd_api_read_authorized": false, "argocd_api_read_executed": false, "argocd_health_readback_received": false, "argocd_health_readback_ref": null, "argocd_sync_authorized": false, "argocd_sync_executed": false, "argocd_sync_revision_ref": null, "blocked_actions": [ "argocd_api_read_without_approval", "live_cluster_read_without_approval", "argocd_sync", "kubectl_apply", "kubectl_patch", "kubectl_delete", "helm_upgrade", "secret_value_collection", "live_cluster_write", "manual_pod_restart", "scale_workload", "change_network_policy", "change_rbac", "restore_backup", "render_manifest_diff_from_untrusted_payload", "mark_owner_response_accepted_without_reviewer_record", "open_runtime_gate", "add_action_button" ], "control_tier": "C0", "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "followup_owner": "pending_owner_response", "group_id": "argocd", "kubectl_action_authorized": false, "kubectl_action_executed": false, "live_cluster_read_authorized": false, "live_cluster_read_executed": false, "maintenance_window": "pending_owner_response", "maintenance_window_accepted": false, "not_approval": true, "outcome_lanes": [ "waiting_owner_response", "quarantine_raw_payload", "reject_secret_or_unredacted_manifest", "request_supplement", "ready_for_rendered_manifest_review", "owner_review_only_update", "waiting_runtime_gate" ], "owner_response_accepted": false, "owner_response_quarantined": false, "owner_response_received": false, "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", "production_write_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], "rendered_manifest_diff_candidate": false, "rendered_manifest_diff_ready": false, "rendered_manifest_diff_ref": null, "request_id": "k8s_argocd_owner_request:argocd", "request_sent": false, "required_owner_fields": [ "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "argocd_health_readback_ref", "argocd_sync_revision_ref", "rollback_revision", "followup_owner", "maintenance_window", "validation_plan" ], "reviewer_checks": [ "owner_identity_present", "decision_reason_present", "affected_scope_matches_group", "redacted_refs_only", "secret_value_absent", "argocd_health_readback_ref_shape", "argocd_sync_revision_ref_not_execution", "rollback_revision_present", "rendered_manifest_diff_ref_not_payload", "maintenance_window_present", "validation_plan_present", "counts_transition_safe" ], "reviewer_outcome": "waiting_owner_response", "rollback_revision": "pending_owner_response", "rollback_revision_accepted": false, "root": "k8s/argocd", "runtime_gate": false, "secret_value_collection_allowed": false, "status": "waiting_owner_response", "supplement_requested": false, "validation_plan": "pending_owner_response" }, { "acceptance_candidate_id": "k8s_argocd_owner_response_acceptance:velero", "acceptance_fields": [ "acceptance_candidate_id", "request_id", "group_id", "root", "control_tier", "owner_response_ref", "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "argocd_health_readback_ref", "argocd_sync_revision_ref", "rollback_revision", "rendered_manifest_diff_ref", "maintenance_window", "validation_plan", "reviewer_outcome", "followup_owner", "not_approval" ], "action_buttons_allowed": false, "affected_scope": "pending_owner_response", "argocd_api_read_authorized": false, "argocd_api_read_executed": false, "argocd_health_readback_received": false, "argocd_health_readback_ref": null, "argocd_sync_authorized": false, "argocd_sync_executed": false, "argocd_sync_revision_ref": null, "blocked_actions": [ "argocd_api_read_without_approval", "live_cluster_read_without_approval", "argocd_sync", "kubectl_apply", "kubectl_patch", "kubectl_delete", "helm_upgrade", "secret_value_collection", "live_cluster_write", "manual_pod_restart", "scale_workload", "change_network_policy", "change_rbac", "restore_backup", "render_manifest_diff_from_untrusted_payload", "mark_owner_response_accepted_without_reviewer_record", "open_runtime_gate", "add_action_button" ], "control_tier": "C0", "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "followup_owner": "pending_owner_response", "group_id": "velero", "kubectl_action_authorized": false, "kubectl_action_executed": false, "live_cluster_read_authorized": false, "live_cluster_read_executed": false, "maintenance_window": "pending_owner_response", "maintenance_window_accepted": false, "not_approval": true, "outcome_lanes": [ "waiting_owner_response", "quarantine_raw_payload", "reject_secret_or_unredacted_manifest", "request_supplement", "ready_for_rendered_manifest_review", "owner_review_only_update", "waiting_runtime_gate" ], "owner_response_accepted": false, "owner_response_quarantined": false, "owner_response_received": false, "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", "production_write_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], "rendered_manifest_diff_candidate": false, "rendered_manifest_diff_ready": false, "rendered_manifest_diff_ref": null, "request_id": "k8s_argocd_owner_request:velero", "request_sent": false, "required_owner_fields": [ "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "argocd_health_readback_ref", "argocd_sync_revision_ref", "rollback_revision", "followup_owner", "maintenance_window", "validation_plan" ], "reviewer_checks": [ "owner_identity_present", "decision_reason_present", "affected_scope_matches_group", "redacted_refs_only", "secret_value_absent", "argocd_health_readback_ref_shape", "argocd_sync_revision_ref_not_execution", "rollback_revision_present", "rendered_manifest_diff_ref_not_payload", "maintenance_window_present", "validation_plan_present", "counts_transition_safe" ], "reviewer_outcome": "waiting_owner_response", "rollback_revision": "pending_owner_response", "rollback_revision_accepted": false, "root": "k8s/velero", "runtime_gate": false, "secret_value_collection_allowed": false, "status": "waiting_owner_response", "supplement_requested": false, "validation_plan": "pending_owner_response" }, { "acceptance_candidate_id": "k8s_argocd_owner_response_acceptance:monitoring", "acceptance_fields": [ "acceptance_candidate_id", "request_id", "group_id", "root", "control_tier", "owner_response_ref", "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "argocd_health_readback_ref", "argocd_sync_revision_ref", "rollback_revision", "rendered_manifest_diff_ref", "maintenance_window", "validation_plan", "reviewer_outcome", "followup_owner", "not_approval" ], "action_buttons_allowed": false, "affected_scope": "pending_owner_response", "argocd_api_read_authorized": false, "argocd_api_read_executed": false, "argocd_health_readback_received": false, "argocd_health_readback_ref": null, "argocd_sync_authorized": false, "argocd_sync_executed": false, "argocd_sync_revision_ref": null, "blocked_actions": [ "argocd_api_read_without_approval", "live_cluster_read_without_approval", "argocd_sync", "kubectl_apply", "kubectl_patch", "kubectl_delete", "helm_upgrade", "secret_value_collection", "live_cluster_write", "manual_pod_restart", "scale_workload", "change_network_policy", "change_rbac", "restore_backup", "render_manifest_diff_from_untrusted_payload", "mark_owner_response_accepted_without_reviewer_record", "open_runtime_gate", "add_action_button" ], "control_tier": "C1", "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "followup_owner": "pending_owner_response", "group_id": "monitoring", "kubectl_action_authorized": false, "kubectl_action_executed": false, "live_cluster_read_authorized": false, "live_cluster_read_executed": false, "maintenance_window": "pending_owner_response", "maintenance_window_accepted": false, "not_approval": true, "outcome_lanes": [ "waiting_owner_response", "quarantine_raw_payload", "reject_secret_or_unredacted_manifest", "request_supplement", "ready_for_rendered_manifest_review", "owner_review_only_update", "waiting_runtime_gate" ], "owner_response_accepted": false, "owner_response_quarantined": false, "owner_response_received": false, "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", "production_write_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], "rendered_manifest_diff_candidate": false, "rendered_manifest_diff_ready": false, "rendered_manifest_diff_ref": null, "request_id": "k8s_argocd_owner_request:monitoring", "request_sent": false, "required_owner_fields": [ "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "argocd_health_readback_ref", "argocd_sync_revision_ref", "rollback_revision", "followup_owner", "maintenance_window", "validation_plan" ], "reviewer_checks": [ "owner_identity_present", "decision_reason_present", "affected_scope_matches_group", "redacted_refs_only", "secret_value_absent", "argocd_health_readback_ref_shape", "argocd_sync_revision_ref_not_execution", "rollback_revision_present", "rendered_manifest_diff_ref_not_payload", "maintenance_window_present", "validation_plan_present", "counts_transition_safe" ], "reviewer_outcome": "waiting_owner_response", "rollback_revision": "pending_owner_response", "rollback_revision_accepted": false, "root": "k8s/monitoring", "runtime_gate": false, "secret_value_collection_allowed": false, "status": "waiting_owner_response", "supplement_requested": false, "validation_plan": "pending_owner_response" } ], "acceptance_fields": [ "acceptance_candidate_id", "request_id", "group_id", "root", "control_tier", "owner_response_ref", "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "argocd_health_readback_ref", "argocd_sync_revision_ref", "rollback_revision", "rendered_manifest_diff_ref", "maintenance_window", "validation_plan", "reviewer_outcome", "followup_owner", "not_approval" ], "blocked_actions": [ "argocd_api_read_without_approval", "live_cluster_read_without_approval", "argocd_sync", "kubectl_apply", "kubectl_patch", "kubectl_delete", "helm_upgrade", "secret_value_collection", "live_cluster_write", "manual_pod_restart", "scale_workload", "change_network_policy", "change_rbac", "restore_backup", "render_manifest_diff_from_untrusted_payload", "mark_owner_response_accepted_without_reviewer_record", "open_runtime_gate", "add_action_button" ], "execution_boundaries": { "action_buttons_allowed": false, "argocd_api_read_authorized": false, "argocd_api_read_executed": false, "argocd_sync_authorized": false, "argocd_sync_executed": false, "kubectl_action_authorized": false, "kubectl_action_executed": false, "live_cluster_read_authorized": false, "live_cluster_read_executed": false, "not_authorization": true, "owner_response_accepted": false, "production_write_authorized": false, "rendered_manifest_diff_ready": false, "request_dispatch_authorized": false, "runtime_execution_authorized": false, "secret_value_collection_allowed": false }, "generated_at": "2026-06-15T00:08:00+08:00", "git_commit": "070e9c56", "next_steps": [ "等待 owner response；未收到前不得更新 accepted count。", "收到回覆後先走 raw payload / secret / scope / rollback / evidence ref 檢查，不合格即隔離、拒收或補件。", "metadata 合格也只能進 rendered manifest diff reviewer review；ArgoCD API read、sync、kubectl action、secret collection 與 production write 仍需獨立人工批准。" ], "outcome_lanes": [ { "lane_id": "waiting_owner_response", "meaning": "尚未收到 owner response；所有 accepted / runtime count 維持 0。" }, { "lane_id": "quarantine_raw_payload", "meaning": "收到 raw manifest、kubeconfig、Secret value 或不可保存內容時只能隔離。" }, { "lane_id": "reject_secret_or_unredacted_manifest", "meaning": "出現 secret value、未脫敏 manifest payload 或 credential derivative 時直接拒收。" }, { "lane_id": "request_supplement", "meaning": "欄位不足、scope 不清、rollback 缺失或 evidence ref 不可追溯時要求補件。" }, { "lane_id": "ready_for_rendered_manifest_review", "meaning": "metadata 合格後，只能進 rendered manifest diff reviewer review。" }, { "lane_id": "owner_review_only_update", "meaning": "只允許更新只讀 owner review ledger，不得改 K8s、ArgoCD、Helm 或 secret。" }, { "lane_id": "waiting_runtime_gate", "meaning": "即使 owner response accepted，runtime gate 仍等待獨立人工批准。" } ], "required_owner_fields": [ "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "argocd_health_readback_ref", "argocd_sync_revision_ref", "rollback_revision", "followup_owner", "maintenance_window", "validation_plan" ], "reviewer_checks": [ { "check_id": "owner_identity_present", "instruction": "owner role / team 必須可追溯，不能只寫聊天同意或模糊職稱。" }, { "check_id": "decision_reason_present", "instruction": "decision 與 decision reason 必須同時存在，且不得包含機敏值。" }, { "check_id": "affected_scope_matches_group", "instruction": "affected scope 必須能對回 committed scan group 與 root path。" }, { "check_id": "redacted_refs_only", "instruction": "evidence 只能是脫敏 ref、hash、ticket、commit 或 artifact pointer。" }, { "check_id": "secret_value_absent", "instruction": "不得出現 Secret value、token、cookie、private key、完整 kubeconfig 或 credential derivative。" }, { "check_id": "argocd_health_readback_ref_shape", "instruction": "ArgoCD health readback 只能是 owner-provided redacted ref，不得觸發 live API read。" }, { "check_id": "argocd_sync_revision_ref_not_execution", "instruction": "sync revision ref 只做 rollback / diff 判讀，不得自動 sync。" }, { "check_id": "rollback_revision_present", "instruction": "C0 / C1 回覆都必須有 rollback revision 或明確禁止窗口。" }, { "check_id": "rendered_manifest_diff_ref_not_payload", "instruction": "rendered manifest diff 只能是 ref，不得把 manifest payload 貼入回覆。" }, { "check_id": "maintenance_window_present", "instruction": "任何未來 ArgoCD sync / kubectl action 都必須另有維護窗口。" }, { "check_id": "validation_plan_present", "instruction": "validation plan 必須列 health、rollout、metric、alert 與 rollback post-check。" }, { "check_id": "counts_transition_safe", "instruction": "只有 reviewer record 可更新 received / accepted / rejected；不得同時開 runtime gate。" } ], "schema_version": "k8s_argocd_owner_response_acceptance_v1", "source_inventory_schema_version": "k8s_argocd_manifest_inventory_v1", "source_inventory_status": "repo_only_inventory_ready_no_live_cluster_read", "source_owner_request_schema_version": "k8s_argocd_owner_request_draft_v1", "source_owner_request_status": "owner_request_draft_ready_not_dispatched", "status": "owner_response_acceptance_ledger_ready_no_runtime_action", "summary": { "acceptance_candidate_count": 4, "acceptance_field_count": 20, "action_button_count": 0, "argocd_api_read_authorized_count": 0, "argocd_api_read_executed_count": 0, "argocd_health_readback_received_count": 0, "argocd_sync_authorized_count": 0, "argocd_sync_executed_count": 0, "blocked_action_count": 18, "c0_acceptance_candidate_count": 3, "c1_acceptance_candidate_count": 1, "kubectl_action_authorized_count": 0, "kubectl_action_executed_count": 0, "live_cluster_read_authorized_count": 0, "live_cluster_read_executed_count": 0, "maintenance_window_accepted_count": 0, "outcome_lane_count": 7, "owner_response_accepted_count": 0, "owner_response_quarantined_count": 0, "owner_response_received_count": 0, "owner_response_rejected_count": 0, "recipient_confirmed_count": 0, "rendered_manifest_diff_candidate_count": 0, "rendered_manifest_diff_ready_count": 0, "request_sent_count": 0, "required_owner_field_count": 11, "reviewer_check_count": 12, "rollback_revision_accepted_count": 0, "runtime_gate_count": 0, "secret_value_collection_allowed_count": 0, "source_request_draft_count": 4, "source_scan_group_count": 4, "supplement_requested_count": 0 } }