{ "schema_version": "telegram_notification_egress_owner_request_draft_v1", "generated_at": "2026-07-02T14:24:46+08:00", "git_commit": "f9469bcc2", "status": "owner_request_draft_ready_no_dispatch_no_runtime_action", "mode": "metadata_only_no_secret_value_no_telegram_send_no_workflow_change", "source_snapshot": "docs/security/telegram-notification-egress-inventory.snapshot.json", "source_schema_version": "telegram_notification_egress_inventory_v1", "source_status": "inventory_ready_no_runtime_action", "summary": { "source_direct_bot_api_call_count": 5, "source_direct_bot_api_file_count": 5, "request_draft_count": 5, "workflow_request_draft_count": 0, "ops_script_request_draft_count": 4, "ci_script_request_draft_count": 0, "api_direct_request_draft_count": 1, "request_field_count": 27, "required_owner_field_count": 19, "preflight_check_count": 16, "outcome_lane_count": 9, "forbidden_payload_count": 14, "blocked_action_count": 26, "request_sent_count": 0, "recipient_confirmed_count": 0, "audit_event_emitted_count": 0, "owner_response_received_count": 0, "owner_response_accepted_count": 0, "formatter_convergence_accepted_count": 0, "redaction_contract_accepted_count": 0, "delivery_receipt_accepted_count": 0, "break_glass_fallback_accepted_count": 0, "direct_bot_api_migration_authorized_count": 0, "telegram_send_authorized_count": 0, "bot_api_call_authorized_count": 0, "workflow_modification_authorized_count": 0, "script_modification_authorized_count": 0, "api_sender_refactor_authorized_count": 0, "secret_value_collection_allowed_count": 0, "raw_payload_storage_allowed_count": 0, "production_write_authorized_count": 0, "runtime_gate_count": 0, "action_button_count": 0 }, "execution_boundaries": { "runtime_execution_authorized": false, "owner_request_send_authorized": false, "recipient_confirmation_authorized": false, "audit_event_emit_authorized": false, "telegram_send_authorized": false, "bot_api_call_authorized": false, "workflow_modification_authorized": false, "script_modification_authorized": false, "api_sender_refactor_authorized": false, "secret_value_collection_allowed": false, "raw_payload_storage_allowed": false, "production_write_authorized": false, "action_buttons_allowed": false, "not_authorization": true }, "request_drafts": [ { "request_draft_id": "telegram_notification_egress_owner_request:apps_api_src_services_channel_hub_py", "source_inventory_schema_version": "telegram_notification_egress_inventory_v1", "source_path": "apps/api/src/services/channel_hub.py", "surface_kind": "api_direct_bot_api", "direct_call_count": 1, "line_refs": [ 1138 ], "line_hash_refs": [ "9e418fa74c83815a" ], "request_fields": [ "request_draft_id", "source_inventory_schema_version", "source_path", "surface_kind", "direct_call_count", "line_refs", "line_hash_refs", "owner_role_or_team", "routing_purpose", "current_sender", "target_chat_route", "message_shape_contract", "redaction_contract", "formatter_convergence_decision", "gateway_or_alertmanager_target", "break_glass_fallback_decision", "delivery_receipt_ref", "dedup_or_fingerprint_plan", "fallback_or_degraded_mode", "migration_or_exception_reason", "maintenance_window", "rollback_owner", "postcheck_evidence_ref", "no_secret_value_attestation", "no_raw_payload_attestation", "no_false_green_attestation", "not_authorization" ], "required_owner_fields": [ "owner_role_or_team", "routing_purpose", "current_sender", "target_chat_route", "message_shape_contract", "redaction_contract", "formatter_convergence_decision", "gateway_or_alertmanager_target", "break_glass_fallback_decision", "delivery_receipt_ref", "dedup_or_fingerprint_plan", "fallback_or_degraded_mode", "migration_or_exception_reason", "maintenance_window", "rollback_owner", "postcheck_evidence_ref", "no_secret_value_attestation", "no_raw_payload_attestation", "no_false_green_attestation" ], "preflight_checks": [ "source_inventory_current", "owner_role_present", "route_purpose_present", "message_shape_contract_present", "redaction_contract_present", "formatter_convergence_decision_present", "break_glass_fallback_explicit", "delivery_receipt_metadata_present", "dedup_or_fingerprint_present", "maintenance_window_present_for_change", "rollback_owner_present", "postcheck_evidence_present", "no_secret_value_attested", "no_raw_payload_attested", "no_false_green_attested", "runtime_gate_stays_zero" ], "outcome_lanes": [ "draft_waiting_owner_dispatch", "request_owner_route_supplement", "request_formatter_convergence_supplement", "request_break_glass_fallback_supplement", "request_redaction_or_receipt_supplement", "quarantine_secret_or_raw_payload", "reject_false_green_claim", "ready_for_manual_dispatch", "waiting_runtime_gate" ], "forbidden_payloads": [ "bot_token_value", "chat_secret_value", "secret_hash", "partial_token", "masked_token", "authorization_header", "raw_message_payload", "raw_workflow_log", "raw_action_log", "raw_screenshot_with_secret", "internal_work_window_transcript", "private_namespace", "unredacted_internal_path", "unredacted_private_ip" ], "blocked_actions": [ "send_owner_request", "confirm_recipient", "emit_audit_event", "telegram_send", "bot_api_call", "workflow_modification", "script_modification", "api_sender_refactor", "change_chat_route", "change_bot_token", "read_secret_store", "collect_secret_value", "collect_secret_hash", "collect_partial_token", "collect_chat_id_secret", "store_raw_message_payload", "store_unredacted_log", "workflow_dispatch", "production_deploy", "accept_cd_success_as_delivery_receipt", "accept_route_200_as_notification_delivery", "accept_ui_visible_as_notification_acceptance", "skip_formatter_convergence", "skip_redaction_contract", "open_runtime_gate", "add_action_button" ], "request_sent": false, "recipient_confirmed": false, "audit_event_emitted": false, "owner_response_received": false, "owner_response_accepted": false, "formatter_convergence_accepted": false, "redaction_contract_accepted": false, "delivery_receipt_accepted": false, "break_glass_fallback_accepted": false, "direct_bot_api_migration_authorized": false, "telegram_send_authorized": false, "bot_api_call_authorized": false, "workflow_modification_authorized": false, "script_modification_authorized": false, "api_sender_refactor_authorized": false, "secret_value_collection_allowed": false, "raw_payload_storage_allowed": false, "production_write_authorized": false, "runtime_gate": false, "action_buttons_allowed": false, "not_authorization": true }, { "request_draft_id": "telegram_notification_egress_owner_request:scripts_ops_backup_from_110_sh", "source_inventory_schema_version": "telegram_notification_egress_inventory_v1", "source_path": "scripts/ops/backup-from-110.sh", "surface_kind": "ops_script_direct_bot_api", "direct_call_count": 1, "line_refs": [ 64 ], "line_hash_refs": [ "ff5ffbeca44d679b" ], "request_fields": [ "request_draft_id", "source_inventory_schema_version", "source_path", "surface_kind", "direct_call_count", "line_refs", "line_hash_refs", "owner_role_or_team", "routing_purpose", "current_sender", "target_chat_route", "message_shape_contract", "redaction_contract", "formatter_convergence_decision", "gateway_or_alertmanager_target", "break_glass_fallback_decision", "delivery_receipt_ref", "dedup_or_fingerprint_plan", "fallback_or_degraded_mode", "migration_or_exception_reason", "maintenance_window", "rollback_owner", "postcheck_evidence_ref", "no_secret_value_attestation", "no_raw_payload_attestation", "no_false_green_attestation", "not_authorization" ], "required_owner_fields": [ "owner_role_or_team", "routing_purpose", "current_sender", "target_chat_route", "message_shape_contract", "redaction_contract", "formatter_convergence_decision", "gateway_or_alertmanager_target", "break_glass_fallback_decision", "delivery_receipt_ref", "dedup_or_fingerprint_plan", "fallback_or_degraded_mode", "migration_or_exception_reason", "maintenance_window", "rollback_owner", "postcheck_evidence_ref", "no_secret_value_attestation", "no_raw_payload_attestation", "no_false_green_attestation" ], "preflight_checks": [ "source_inventory_current", "owner_role_present", "route_purpose_present", "message_shape_contract_present", "redaction_contract_present", "formatter_convergence_decision_present", "break_glass_fallback_explicit", "delivery_receipt_metadata_present", "dedup_or_fingerprint_present", "maintenance_window_present_for_change", "rollback_owner_present", "postcheck_evidence_present", "no_secret_value_attested", "no_raw_payload_attested", "no_false_green_attested", "runtime_gate_stays_zero" ], "outcome_lanes": [ "draft_waiting_owner_dispatch", "request_owner_route_supplement", "request_formatter_convergence_supplement", "request_break_glass_fallback_supplement", "request_redaction_or_receipt_supplement", "quarantine_secret_or_raw_payload", "reject_false_green_claim", "ready_for_manual_dispatch", "waiting_runtime_gate" ], "forbidden_payloads": [ "bot_token_value", "chat_secret_value", "secret_hash", "partial_token", "masked_token", "authorization_header", "raw_message_payload", "raw_workflow_log", "raw_action_log", "raw_screenshot_with_secret", "internal_work_window_transcript", "private_namespace", "unredacted_internal_path", "unredacted_private_ip" ], "blocked_actions": [ "send_owner_request", "confirm_recipient", "emit_audit_event", "telegram_send", "bot_api_call", "workflow_modification", "script_modification", "api_sender_refactor", "change_chat_route", "change_bot_token", "read_secret_store", "collect_secret_value", "collect_secret_hash", "collect_partial_token", "collect_chat_id_secret", "store_raw_message_payload", "store_unredacted_log", "workflow_dispatch", "production_deploy", "accept_cd_success_as_delivery_receipt", "accept_route_200_as_notification_delivery", "accept_ui_visible_as_notification_acceptance", "skip_formatter_convergence", "skip_redaction_contract", "open_runtime_gate", "add_action_button" ], "request_sent": false, "recipient_confirmed": false, "audit_event_emitted": false, "owner_response_received": false, "owner_response_accepted": false, "formatter_convergence_accepted": false, "redaction_contract_accepted": false, "delivery_receipt_accepted": false, "break_glass_fallback_accepted": false, "direct_bot_api_migration_authorized": false, "telegram_send_authorized": false, "bot_api_call_authorized": false, "workflow_modification_authorized": false, "script_modification_authorized": false, "api_sender_refactor_authorized": false, "secret_value_collection_allowed": false, "raw_payload_storage_allowed": false, "production_write_authorized": false, "runtime_gate": false, "action_buttons_allowed": false, "not_authorization": true }, { "request_draft_id": "telegram_notification_egress_owner_request:scripts_ops_docker_health_monitor_sh", "source_inventory_schema_version": "telegram_notification_egress_inventory_v1", "source_path": "scripts/ops/docker-health-monitor.sh", "surface_kind": "ops_script_direct_bot_api", "direct_call_count": 1, "line_refs": [ 120 ], "line_hash_refs": [ "283499ad28d35d6a" ], "request_fields": [ "request_draft_id", "source_inventory_schema_version", "source_path", "surface_kind", "direct_call_count", "line_refs", "line_hash_refs", "owner_role_or_team", "routing_purpose", "current_sender", "target_chat_route", "message_shape_contract", "redaction_contract", "formatter_convergence_decision", "gateway_or_alertmanager_target", "break_glass_fallback_decision", "delivery_receipt_ref", "dedup_or_fingerprint_plan", "fallback_or_degraded_mode", "migration_or_exception_reason", "maintenance_window", "rollback_owner", "postcheck_evidence_ref", "no_secret_value_attestation", "no_raw_payload_attestation", "no_false_green_attestation", "not_authorization" ], "required_owner_fields": [ "owner_role_or_team", "routing_purpose", "current_sender", "target_chat_route", "message_shape_contract", "redaction_contract", "formatter_convergence_decision", "gateway_or_alertmanager_target", "break_glass_fallback_decision", "delivery_receipt_ref", "dedup_or_fingerprint_plan", "fallback_or_degraded_mode", "migration_or_exception_reason", "maintenance_window", "rollback_owner", "postcheck_evidence_ref", "no_secret_value_attestation", "no_raw_payload_attestation", "no_false_green_attestation" ], "preflight_checks": [ "source_inventory_current", "owner_role_present", "route_purpose_present", "message_shape_contract_present", "redaction_contract_present", "formatter_convergence_decision_present", "break_glass_fallback_explicit", "delivery_receipt_metadata_present", "dedup_or_fingerprint_present", "maintenance_window_present_for_change", "rollback_owner_present", "postcheck_evidence_present", "no_secret_value_attested", "no_raw_payload_attested", "no_false_green_attested", "runtime_gate_stays_zero" ], "outcome_lanes": [ "draft_waiting_owner_dispatch", "request_owner_route_supplement", "request_formatter_convergence_supplement", "request_break_glass_fallback_supplement", "request_redaction_or_receipt_supplement", "quarantine_secret_or_raw_payload", "reject_false_green_claim", "ready_for_manual_dispatch", "waiting_runtime_gate" ], "forbidden_payloads": [ "bot_token_value", "chat_secret_value", "secret_hash", "partial_token", "masked_token", "authorization_header", "raw_message_payload", "raw_workflow_log", "raw_action_log", "raw_screenshot_with_secret", "internal_work_window_transcript", "private_namespace", "unredacted_internal_path", "unredacted_private_ip" ], "blocked_actions": [ "send_owner_request", "confirm_recipient", "emit_audit_event", "telegram_send", "bot_api_call", "workflow_modification", "script_modification", "api_sender_refactor", "change_chat_route", "change_bot_token", "read_secret_store", "collect_secret_value", "collect_secret_hash", "collect_partial_token", "collect_chat_id_secret", "store_raw_message_payload", "store_unredacted_log", "workflow_dispatch", "production_deploy", "accept_cd_success_as_delivery_receipt", "accept_route_200_as_notification_delivery", "accept_ui_visible_as_notification_acceptance", "skip_formatter_convergence", "skip_redaction_contract", "open_runtime_gate", "add_action_button" ], "request_sent": false, "recipient_confirmed": false, "audit_event_emitted": false, "owner_response_received": false, "owner_response_accepted": false, "formatter_convergence_accepted": false, "redaction_contract_accepted": false, "delivery_receipt_accepted": false, "break_glass_fallback_accepted": false, "direct_bot_api_migration_authorized": false, "telegram_send_authorized": false, "bot_api_call_authorized": false, "workflow_modification_authorized": false, "script_modification_authorized": false, "api_sender_refactor_authorized": false, "secret_value_collection_allowed": false, "raw_payload_storage_allowed": false, "production_write_authorized": false, "runtime_gate": false, "action_buttons_allowed": false, "not_authorization": true }, { "request_draft_id": "telegram_notification_egress_owner_request:scripts_ops_dr_drill_sh", "source_inventory_schema_version": "telegram_notification_egress_inventory_v1", "source_path": "scripts/ops/dr-drill.sh", "surface_kind": "ops_script_direct_bot_api", "direct_call_count": 1, "line_refs": [ 63 ], "line_hash_refs": [ "b7cf532f3c5509fc" ], "request_fields": [ "request_draft_id", "source_inventory_schema_version", "source_path", "surface_kind", "direct_call_count", "line_refs", "line_hash_refs", "owner_role_or_team", "routing_purpose", "current_sender", "target_chat_route", "message_shape_contract", "redaction_contract", "formatter_convergence_decision", "gateway_or_alertmanager_target", "break_glass_fallback_decision", "delivery_receipt_ref", "dedup_or_fingerprint_plan", "fallback_or_degraded_mode", "migration_or_exception_reason", "maintenance_window", "rollback_owner", "postcheck_evidence_ref", "no_secret_value_attestation", "no_raw_payload_attestation", "no_false_green_attestation", "not_authorization" ], "required_owner_fields": [ "owner_role_or_team", "routing_purpose", "current_sender", "target_chat_route", "message_shape_contract", "redaction_contract", "formatter_convergence_decision", "gateway_or_alertmanager_target", "break_glass_fallback_decision", "delivery_receipt_ref", "dedup_or_fingerprint_plan", "fallback_or_degraded_mode", "migration_or_exception_reason", "maintenance_window", "rollback_owner", "postcheck_evidence_ref", "no_secret_value_attestation", "no_raw_payload_attestation", "no_false_green_attestation" ], "preflight_checks": [ "source_inventory_current", "owner_role_present", "route_purpose_present", "message_shape_contract_present", "redaction_contract_present", "formatter_convergence_decision_present", "break_glass_fallback_explicit", "delivery_receipt_metadata_present", "dedup_or_fingerprint_present", "maintenance_window_present_for_change", "rollback_owner_present", "postcheck_evidence_present", "no_secret_value_attested", "no_raw_payload_attested", "no_false_green_attested", "runtime_gate_stays_zero" ], "outcome_lanes": [ "draft_waiting_owner_dispatch", "request_owner_route_supplement", "request_formatter_convergence_supplement", "request_break_glass_fallback_supplement", "request_redaction_or_receipt_supplement", "quarantine_secret_or_raw_payload", "reject_false_green_claim", "ready_for_manual_dispatch", "waiting_runtime_gate" ], "forbidden_payloads": [ "bot_token_value", "chat_secret_value", "secret_hash", "partial_token", "masked_token", "authorization_header", "raw_message_payload", "raw_workflow_log", "raw_action_log", "raw_screenshot_with_secret", "internal_work_window_transcript", "private_namespace", "unredacted_internal_path", "unredacted_private_ip" ], "blocked_actions": [ "send_owner_request", "confirm_recipient", "emit_audit_event", "telegram_send", "bot_api_call", "workflow_modification", "script_modification", "api_sender_refactor", "change_chat_route", "change_bot_token", "read_secret_store", "collect_secret_value", "collect_secret_hash", "collect_partial_token", "collect_chat_id_secret", "store_raw_message_payload", "store_unredacted_log", "workflow_dispatch", "production_deploy", "accept_cd_success_as_delivery_receipt", "accept_route_200_as_notification_delivery", "accept_ui_visible_as_notification_acceptance", "skip_formatter_convergence", "skip_redaction_contract", "open_runtime_gate", "add_action_button" ], "request_sent": false, "recipient_confirmed": false, "audit_event_emitted": false, "owner_response_received": false, "owner_response_accepted": false, "formatter_convergence_accepted": false, "redaction_contract_accepted": false, "delivery_receipt_accepted": false, "break_glass_fallback_accepted": false, "direct_bot_api_migration_authorized": false, "telegram_send_authorized": false, "bot_api_call_authorized": false, "workflow_modification_authorized": false, "script_modification_authorized": false, "api_sender_refactor_authorized": false, "secret_value_collection_allowed": false, "raw_payload_storage_allowed": false, "production_write_authorized": false, "runtime_gate": false, "action_buttons_allowed": false, "not_authorization": true }, { "request_draft_id": "telegram_notification_egress_owner_request:scripts_ops_pg_backup_sh", "source_inventory_schema_version": "telegram_notification_egress_inventory_v1", "source_path": "scripts/ops/pg-backup.sh", "surface_kind": "ops_script_direct_bot_api", "direct_call_count": 1, "line_refs": [ 52 ], "line_hash_refs": [ "8268f3d6f14d66a3" ], "request_fields": [ "request_draft_id", "source_inventory_schema_version", "source_path", "surface_kind", "direct_call_count", "line_refs", "line_hash_refs", "owner_role_or_team", "routing_purpose", "current_sender", "target_chat_route", "message_shape_contract", "redaction_contract", "formatter_convergence_decision", "gateway_or_alertmanager_target", "break_glass_fallback_decision", "delivery_receipt_ref", "dedup_or_fingerprint_plan", "fallback_or_degraded_mode", "migration_or_exception_reason", "maintenance_window", "rollback_owner", "postcheck_evidence_ref", "no_secret_value_attestation", "no_raw_payload_attestation", "no_false_green_attestation", "not_authorization" ], "required_owner_fields": [ "owner_role_or_team", "routing_purpose", "current_sender", "target_chat_route", "message_shape_contract", "redaction_contract", "formatter_convergence_decision", "gateway_or_alertmanager_target", "break_glass_fallback_decision", "delivery_receipt_ref", "dedup_or_fingerprint_plan", "fallback_or_degraded_mode", "migration_or_exception_reason", "maintenance_window", "rollback_owner", "postcheck_evidence_ref", "no_secret_value_attestation", "no_raw_payload_attestation", "no_false_green_attestation" ], "preflight_checks": [ "source_inventory_current", "owner_role_present", "route_purpose_present", "message_shape_contract_present", "redaction_contract_present", "formatter_convergence_decision_present", "break_glass_fallback_explicit", "delivery_receipt_metadata_present", "dedup_or_fingerprint_present", "maintenance_window_present_for_change", "rollback_owner_present", "postcheck_evidence_present", "no_secret_value_attested", "no_raw_payload_attested", "no_false_green_attested", "runtime_gate_stays_zero" ], "outcome_lanes": [ "draft_waiting_owner_dispatch", "request_owner_route_supplement", "request_formatter_convergence_supplement", "request_break_glass_fallback_supplement", "request_redaction_or_receipt_supplement", "quarantine_secret_or_raw_payload", "reject_false_green_claim", "ready_for_manual_dispatch", "waiting_runtime_gate" ], "forbidden_payloads": [ "bot_token_value", "chat_secret_value", "secret_hash", "partial_token", "masked_token", "authorization_header", "raw_message_payload", "raw_workflow_log", "raw_action_log", "raw_screenshot_with_secret", "internal_work_window_transcript", "private_namespace", "unredacted_internal_path", "unredacted_private_ip" ], "blocked_actions": [ "send_owner_request", "confirm_recipient", "emit_audit_event", "telegram_send", "bot_api_call", "workflow_modification", "script_modification", "api_sender_refactor", "change_chat_route", "change_bot_token", "read_secret_store", "collect_secret_value", "collect_secret_hash", "collect_partial_token", "collect_chat_id_secret", "store_raw_message_payload", "store_unredacted_log", "workflow_dispatch", "production_deploy", "accept_cd_success_as_delivery_receipt", "accept_route_200_as_notification_delivery", "accept_ui_visible_as_notification_acceptance", "skip_formatter_convergence", "skip_redaction_contract", "open_runtime_gate", "add_action_button" ], "request_sent": false, "recipient_confirmed": false, "audit_event_emitted": false, "owner_response_received": false, "owner_response_accepted": false, "formatter_convergence_accepted": false, "redaction_contract_accepted": false, "delivery_receipt_accepted": false, "break_glass_fallback_accepted": false, "direct_bot_api_migration_authorized": false, "telegram_send_authorized": false, "bot_api_call_authorized": false, "workflow_modification_authorized": false, "script_modification_authorized": false, "api_sender_refactor_authorized": false, "secret_value_collection_allowed": false, "raw_payload_storage_allowed": false, "production_write_authorized": false, "runtime_gate": false, "action_buttons_allowed": false, "not_authorization": true } ], "operator_interpretation": [ "This is a draft packet for manual owner dispatch; request_sent_count remains 0.", "Each file-level draft must decide whether the path converges to TelegramGateway, AWOOI Alertmanager, or a documented break-glass fallback.", "No workflow, script, API, secret, Telegram, or production action is authorized by this snapshot." ] }