awoooi/docs/security/port-firewall-change-evidence-acceptance.snapshot.json

{
  "blocked_actions": [
    "ssh_read",
    "ssh_write",
    "live_firewall_read",
    "firewall_change",
    "port_change",
    "port_close",
    "port_open",
    "network_policy_apply",
    "nodeport_change",
    "wireguard_change",
    "sudo_action",
    "deploy_ssh_action",
    "route_smoke",
    "public_gateway_reload",
    "nginx_reload",
    "host_restart",
    "secret_value_collection",
    "ssh_key_collection",
    "raw_firewall_dump_storage",
    "raw_key_material_storage",
    "mark_change_evidence_accepted_without_reviewer_record",
    "mark_incident_resolved_without_health_evidence",
    "hide_cross_project_impact",
    "close_management_port_without_owner",
    "treat_break_glass_as_approval",
    "open_runtime_gate",
    "add_action_button",
    "production_write"
  ],
  "change_evidence_candidates": [
    {
      "action_buttons_allowed": false,
      "actor_identified": false,
      "actor_role_or_team": "pending_change_evidence",
      "affected_host_or_route_aliases": [],
      "affected_ports_or_paths_ref": null,
      "affected_scope": "pending_change_evidence",
      "affected_scope_accepted": false,
      "after_state_accepted": false,
      "after_state_ref": null,
      "allowlist_or_denylist_ref": null,
      "before_state_accepted": false,
      "before_state_ref": null,
      "blocked_actions": [
        "ssh_read",
        "ssh_write",
        "live_firewall_read",
        "firewall_change",
        "port_change",
        "port_close",
        "port_open",
        "network_policy_apply",
        "nodeport_change",
        "wireguard_change",
        "sudo_action",
        "deploy_ssh_action",
        "route_smoke",
        "public_gateway_reload",
        "nginx_reload",
        "host_restart",
        "secret_value_collection",
        "ssh_key_collection",
        "raw_firewall_dump_storage",
        "raw_key_material_storage",
        "mark_change_evidence_accepted_without_reviewer_record",
        "mark_incident_resolved_without_health_evidence",
        "hide_cross_project_impact",
        "close_management_port_without_owner",
        "treat_break_glass_as_approval",
        "open_runtime_gate",
        "add_action_button",
        "production_write"
      ],
      "break_glass_owner": "pending_change_evidence",
      "change_evidence_accepted": false,
      "change_evidence_candidate_id": "port_firewall_change_evidence:ansible_inventory_ssh_targets",
      "change_evidence_fields": [
        "change_evidence_candidate_id",
        "source_acceptance_candidate_id",
        "surface_id",
        "config_kind",
        "control_tier",
        "write_capable_surface",
        "change_or_incident_ref",
        "actor_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "affected_host_or_route_aliases",
        "affected_ports_or_paths_ref",
        "before_state_ref",
        "after_state_ref",
        "firewall_rule_diff_ref",
        "allowlist_or_denylist_ref",
        "service_dependency_ref",
        "customer_impact_ref",
        "monitoring_alert_refs",
        "cross_project_sync_ref",
        "incident_severity",
        "incident_detected_at_ref",
        "restoration_time_ref",
        "service_health_impact_refs",
        "external_route_impact_refs",
        "emergency_change_classification",
        "operator_notification_refs",
        "incident_commander_or_owner",
        "maintenance_window",
        "rollback_owner",
        "rollback_plan_ref",
        "validation_plan",
        "postcheck_evidence_refs",
        "communication_owner",
        "break_glass_owner",
        "change_freeze_rule",
        "reviewer_outcome",
        "followup_owner",
        "not_approval"
      ],
      "change_evidence_quarantined": false,
      "change_evidence_received": false,
      "change_evidence_rejected": false,
      "change_freeze_rule": "pending_change_evidence",
      "change_or_incident_ref": null,
      "communication_owner": "pending_change_evidence",
      "config_kind": "ssh_target_inventory",
      "control_tier": "C1",
      "cross_project_sync_accepted": false,
      "cross_project_sync_ref": null,
      "customer_impact_accepted": false,
      "customer_impact_ref": null,
      "decision": "pending_change_evidence",
      "decision_reason": "pending_change_evidence",
      "deploy_ssh_action_authorized": false,
      "emergency_change_classification": "pending_change_evidence",
      "emergency_change_classification_accepted": false,
      "expected_scope": "110_111_112_120_121_188",
      "external_route_impact_refs": [],
      "firewall_change_authorized": false,
      "firewall_rule_diff_accepted": false,
      "firewall_rule_diff_ref": null,
      "followup_owner": "pending_change_evidence",
      "host_restart_authorized": false,
      "host_write_authorized": false,
      "impact_supplement_requested": false,
      "incident_backfill_only": true,
      "incident_commander_accepted": false,
      "incident_commander_or_owner": "pending_change_evidence",
      "incident_detected_at_ref": null,
      "incident_severity": "pending_change_evidence",
      "incident_severity_accepted": false,
      "live_firewall_read_authorized": false,
      "maintenance_window": "pending_change_evidence",
      "maintenance_window_accepted": false,
      "monitoring_alert_refs": [],
      "network_policy_apply_authorized": false,
      "nginx_reload_authorized": false,
      "nodeport_change_authorized": false,
      "not_approval": true,
      "operator_notification_accepted": false,
      "operator_notification_refs": [],
      "outcome_lanes": [
        "waiting_change_evidence",
        "quarantine_raw_firewall_dump",
        "reject_unattributed_change",
        "request_impact_supplement",
        "ready_for_network_review",
        "incident_backfill_only",
        "emergency_change_backfill_required",
        "owner_review_only_update",
        "waiting_runtime_gate"
      ],
      "port_change_authorized": false,
      "port_close_authorized": false,
      "port_open_authorized": false,
      "port_policy_accepted": false,
      "postcheck_evidence_accepted": false,
      "postcheck_evidence_refs": [],
      "production_write_authorized": false,
      "public_gateway_reload_authorized": false,
      "required_evidence_fields": [
        "change_or_incident_ref",
        "actor_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "affected_ports_or_paths_ref",
        "before_state_ref",
        "after_state_ref",
        "service_dependency_ref",
        "customer_impact_ref",
        "incident_severity",
        "restoration_time_ref",
        "service_health_impact_refs",
        "operator_notification_refs",
        "incident_commander_or_owner",
        "maintenance_window",
        "rollback_owner",
        "rollback_plan_ref",
        "validation_plan",
        "postcheck_evidence_refs",
        "cross_project_sync_ref"
      ],
      "restoration_time_accepted": false,
      "restoration_time_ref": null,
      "reviewer_checks": [
        "change_ref_present",
        "actor_role_traceable",
        "decision_reason_present",
        "affected_scope_matches_surface",
        "ports_or_paths_redacted",
        "before_after_state_refs",
        "firewall_diff_metadata_only",
        "dependency_impact_present",
        "customer_impact_review",
        "cross_project_sync_present",
        "incident_severity_present",
        "service_health_impact_present",
        "restoration_time_present",
        "operator_notification_present",
        "break_glass_classification_present",
        "maintenance_window_present",
        "rollback_owner_present",
        "postcheck_evidence_present",
        "secret_or_key_value_absent",
        "no_runtime_authorization",
        "counts_transition_safe"
      ],
      "reviewer_outcome": "waiting_change_evidence",
      "rollback_owner": "pending_change_evidence",
      "rollback_owner_accepted": false,
      "rollback_plan_accepted": false,
      "rollback_plan_ref": null,
      "route_smoke_authorized": false,
      "runtime_execution_authorized": false,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "service_dependency_accepted": false,
      "service_dependency_ref": null,
      "service_health_impact_accepted": false,
      "service_health_impact_refs": [],
      "source_acceptance_candidate_id": "ssh_network_owner_response_acceptance:ansible_inventory_ssh_targets",
      "ssh_key_collection_allowed": false,
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_change_evidence",
      "sudo_action_authorized": false,
      "surface_id": "ansible_inventory_ssh_targets",
      "validation_plan": "pending_change_evidence",
      "validation_plan_accepted": false,
      "wireguard_change_authorized": false,
      "write_capable_surface": false
    },
    {
      "action_buttons_allowed": false,
      "actor_identified": false,
      "actor_role_or_team": "pending_change_evidence",
      "affected_host_or_route_aliases": [],
      "affected_ports_or_paths_ref": null,
      "affected_scope": "pending_change_evidence",
      "affected_scope_accepted": false,
      "after_state_accepted": false,
      "after_state_ref": null,
      "allowlist_or_denylist_ref": null,
      "before_state_accepted": false,
      "before_state_ref": null,
      "blocked_actions": [
        "ssh_read",
        "ssh_write",
        "live_firewall_read",
        "firewall_change",
        "port_change",
        "port_close",
        "port_open",
        "network_policy_apply",
        "nodeport_change",
        "wireguard_change",
        "sudo_action",
        "deploy_ssh_action",
        "route_smoke",
        "public_gateway_reload",
        "nginx_reload",
        "host_restart",
        "secret_value_collection",
        "ssh_key_collection",
        "raw_firewall_dump_storage",
        "raw_key_material_storage",
        "mark_change_evidence_accepted_without_reviewer_record",
        "mark_incident_resolved_without_health_evidence",
        "hide_cross_project_impact",
        "close_management_port_without_owner",
        "treat_break_glass_as_approval",
        "open_runtime_gate",
        "add_action_button",
        "production_write"
      ],
      "break_glass_owner": "pending_change_evidence",
      "change_evidence_accepted": false,
      "change_evidence_candidate_id": "port_firewall_change_evidence:gitea_cd_deploy_ssh",
      "change_evidence_fields": [
        "change_evidence_candidate_id",
        "source_acceptance_candidate_id",
        "surface_id",
        "config_kind",
        "control_tier",
        "write_capable_surface",
        "change_or_incident_ref",
        "actor_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "affected_host_or_route_aliases",
        "affected_ports_or_paths_ref",
        "before_state_ref",
        "after_state_ref",
        "firewall_rule_diff_ref",
        "allowlist_or_denylist_ref",
        "service_dependency_ref",
        "customer_impact_ref",
        "monitoring_alert_refs",
        "cross_project_sync_ref",
        "incident_severity",
        "incident_detected_at_ref",
        "restoration_time_ref",
        "service_health_impact_refs",
        "external_route_impact_refs",
        "emergency_change_classification",
        "operator_notification_refs",
        "incident_commander_or_owner",
        "maintenance_window",
        "rollback_owner",
        "rollback_plan_ref",
        "validation_plan",
        "postcheck_evidence_refs",
        "communication_owner",
        "break_glass_owner",
        "change_freeze_rule",
        "reviewer_outcome",
        "followup_owner",
        "not_approval"
      ],
      "change_evidence_quarantined": false,
      "change_evidence_received": false,
      "change_evidence_rejected": false,
      "change_freeze_rule": "pending_change_evidence",
      "change_or_incident_ref": null,
      "communication_owner": "pending_change_evidence",
      "config_kind": "ci_deploy_ssh",
      "control_tier": "C1",
      "cross_project_sync_accepted": false,
      "cross_project_sync_ref": null,
      "customer_impact_accepted": false,
      "customer_impact_ref": null,
      "decision": "pending_change_evidence",
      "decision_reason": "pending_change_evidence",
      "deploy_ssh_action_authorized": false,
      "emergency_change_classification": "pending_change_evidence",
      "emergency_change_classification_accepted": false,
      "expected_scope": "k8s_ssh_host",
      "external_route_impact_refs": [],
      "firewall_change_authorized": false,
      "firewall_rule_diff_accepted": false,
      "firewall_rule_diff_ref": null,
      "followup_owner": "pending_change_evidence",
      "host_restart_authorized": false,
      "host_write_authorized": false,
      "impact_supplement_requested": false,
      "incident_backfill_only": true,
      "incident_commander_accepted": false,
      "incident_commander_or_owner": "pending_change_evidence",
      "incident_detected_at_ref": null,
      "incident_severity": "pending_change_evidence",
      "incident_severity_accepted": false,
      "live_firewall_read_authorized": false,
      "maintenance_window": "pending_change_evidence",
      "maintenance_window_accepted": false,
      "monitoring_alert_refs": [],
      "network_policy_apply_authorized": false,
      "nginx_reload_authorized": false,
      "nodeport_change_authorized": false,
      "not_approval": true,
      "operator_notification_accepted": false,
      "operator_notification_refs": [],
      "outcome_lanes": [
        "waiting_change_evidence",
        "quarantine_raw_firewall_dump",
        "reject_unattributed_change",
        "request_impact_supplement",
        "ready_for_network_review",
        "incident_backfill_only",
        "emergency_change_backfill_required",
        "owner_review_only_update",
        "waiting_runtime_gate"
      ],
      "port_change_authorized": false,
      "port_close_authorized": false,
      "port_open_authorized": false,
      "port_policy_accepted": false,
      "postcheck_evidence_accepted": false,
      "postcheck_evidence_refs": [],
      "production_write_authorized": false,
      "public_gateway_reload_authorized": false,
      "required_evidence_fields": [
        "change_or_incident_ref",
        "actor_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "affected_ports_or_paths_ref",
        "before_state_ref",
        "after_state_ref",
        "service_dependency_ref",
        "customer_impact_ref",
        "incident_severity",
        "restoration_time_ref",
        "service_health_impact_refs",
        "operator_notification_refs",
        "incident_commander_or_owner",
        "maintenance_window",
        "rollback_owner",
        "rollback_plan_ref",
        "validation_plan",
        "postcheck_evidence_refs",
        "cross_project_sync_ref"
      ],
      "restoration_time_accepted": false,
      "restoration_time_ref": null,
      "reviewer_checks": [
        "change_ref_present",
        "actor_role_traceable",
        "decision_reason_present",
        "affected_scope_matches_surface",
        "ports_or_paths_redacted",
        "before_after_state_refs",
        "firewall_diff_metadata_only",
        "dependency_impact_present",
        "customer_impact_review",
        "cross_project_sync_present",
        "incident_severity_present",
        "service_health_impact_present",
        "restoration_time_present",
        "operator_notification_present",
        "break_glass_classification_present",
        "maintenance_window_present",
        "rollback_owner_present",
        "postcheck_evidence_present",
        "secret_or_key_value_absent",
        "no_runtime_authorization",
        "counts_transition_safe"
      ],
      "reviewer_outcome": "waiting_change_evidence",
      "rollback_owner": "pending_change_evidence",
      "rollback_owner_accepted": false,
      "rollback_plan_accepted": false,
      "rollback_plan_ref": null,
      "route_smoke_authorized": false,
      "runtime_execution_authorized": false,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "service_dependency_accepted": false,
      "service_dependency_ref": null,
      "service_health_impact_accepted": false,
      "service_health_impact_refs": [],
      "source_acceptance_candidate_id": "ssh_network_owner_response_acceptance:gitea_cd_deploy_ssh",
      "ssh_key_collection_allowed": false,
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_change_evidence",
      "sudo_action_authorized": false,
      "surface_id": "gitea_cd_deploy_ssh",
      "validation_plan": "pending_change_evidence",
      "validation_plan_accepted": false,
      "wireguard_change_authorized": false,
      "write_capable_surface": true
    },
    {
      "action_buttons_allowed": false,
      "actor_identified": false,
      "actor_role_or_team": "pending_change_evidence",
      "affected_host_or_route_aliases": [],
      "affected_ports_or_paths_ref": null,
      "affected_scope": "pending_change_evidence",
      "affected_scope_accepted": false,
      "after_state_accepted": false,
      "after_state_ref": null,
      "allowlist_or_denylist_ref": null,
      "before_state_accepted": false,
      "before_state_ref": null,
      "blocked_actions": [
        "ssh_read",
        "ssh_write",
        "live_firewall_read",
        "firewall_change",
        "port_change",
        "port_close",
        "port_open",
        "network_policy_apply",
        "nodeport_change",
        "wireguard_change",
        "sudo_action",
        "deploy_ssh_action",
        "route_smoke",
        "public_gateway_reload",
        "nginx_reload",
        "host_restart",
        "secret_value_collection",
        "ssh_key_collection",
        "raw_firewall_dump_storage",
        "raw_key_material_storage",
        "mark_change_evidence_accepted_without_reviewer_record",
        "mark_incident_resolved_without_health_evidence",
        "hide_cross_project_impact",
        "close_management_port_without_owner",
        "treat_break_glass_as_approval",
        "open_runtime_gate",
        "add_action_button",
        "production_write"
      ],
      "break_glass_owner": "pending_change_evidence",
      "change_evidence_accepted": false,
      "change_evidence_candidate_id": "port_firewall_change_evidence:gitea_cd_dev_ssh",
      "change_evidence_fields": [
        "change_evidence_candidate_id",
        "source_acceptance_candidate_id",
        "surface_id",
        "config_kind",
        "control_tier",
        "write_capable_surface",
        "change_or_incident_ref",
        "actor_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "affected_host_or_route_aliases",
        "affected_ports_or_paths_ref",
        "before_state_ref",
        "after_state_ref",
        "firewall_rule_diff_ref",
        "allowlist_or_denylist_ref",
        "service_dependency_ref",
        "customer_impact_ref",
        "monitoring_alert_refs",
        "cross_project_sync_ref",
        "incident_severity",
        "incident_detected_at_ref",
        "restoration_time_ref",
        "service_health_impact_refs",
        "external_route_impact_refs",
        "emergency_change_classification",
        "operator_notification_refs",
        "incident_commander_or_owner",
        "maintenance_window",
        "rollback_owner",
        "rollback_plan_ref",
        "validation_plan",
        "postcheck_evidence_refs",
        "communication_owner",
        "break_glass_owner",
        "change_freeze_rule",
        "reviewer_outcome",
        "followup_owner",
        "not_approval"
      ],
      "change_evidence_quarantined": false,
      "change_evidence_received": false,
      "change_evidence_rejected": false,
      "change_freeze_rule": "pending_change_evidence",
      "change_or_incident_ref": null,
      "communication_owner": "pending_change_evidence",
      "config_kind": "ci_deploy_ssh",
      "control_tier": "C1",
      "cross_project_sync_accepted": false,
      "cross_project_sync_ref": null,
      "customer_impact_accepted": false,
      "customer_impact_ref": null,
      "decision": "pending_change_evidence",
      "decision_reason": "pending_change_evidence",
      "deploy_ssh_action_authorized": false,
      "emergency_change_classification": "pending_change_evidence",
      "emergency_change_classification_accepted": false,
      "expected_scope": "192.168.0.120",
      "external_route_impact_refs": [],
      "firewall_change_authorized": false,
      "firewall_rule_diff_accepted": false,
      "firewall_rule_diff_ref": null,
      "followup_owner": "pending_change_evidence",
      "host_restart_authorized": false,
      "host_write_authorized": false,
      "impact_supplement_requested": false,
      "incident_backfill_only": true,
      "incident_commander_accepted": false,
      "incident_commander_or_owner": "pending_change_evidence",
      "incident_detected_at_ref": null,
      "incident_severity": "pending_change_evidence",
      "incident_severity_accepted": false,
      "live_firewall_read_authorized": false,
      "maintenance_window": "pending_change_evidence",
      "maintenance_window_accepted": false,
      "monitoring_alert_refs": [],
      "network_policy_apply_authorized": false,
      "nginx_reload_authorized": false,
      "nodeport_change_authorized": false,
      "not_approval": true,
      "operator_notification_accepted": false,
      "operator_notification_refs": [],
      "outcome_lanes": [
        "waiting_change_evidence",
        "quarantine_raw_firewall_dump",
        "reject_unattributed_change",
        "request_impact_supplement",
        "ready_for_network_review",
        "incident_backfill_only",
        "emergency_change_backfill_required",
        "owner_review_only_update",
        "waiting_runtime_gate"
      ],
      "port_change_authorized": false,
      "port_close_authorized": false,
      "port_open_authorized": false,
      "port_policy_accepted": false,
      "postcheck_evidence_accepted": false,
      "postcheck_evidence_refs": [],
      "production_write_authorized": false,
      "public_gateway_reload_authorized": false,
      "required_evidence_fields": [
        "change_or_incident_ref",
        "actor_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "affected_ports_or_paths_ref",
        "before_state_ref",
        "after_state_ref",
        "service_dependency_ref",
        "customer_impact_ref",
        "incident_severity",
        "restoration_time_ref",
        "service_health_impact_refs",
        "operator_notification_refs",
        "incident_commander_or_owner",
        "maintenance_window",
        "rollback_owner",
        "rollback_plan_ref",
        "validation_plan",
        "postcheck_evidence_refs",
        "cross_project_sync_ref"
      ],
      "restoration_time_accepted": false,
      "restoration_time_ref": null,
      "reviewer_checks": [
        "change_ref_present",
        "actor_role_traceable",
        "decision_reason_present",
        "affected_scope_matches_surface",
        "ports_or_paths_redacted",
        "before_after_state_refs",
        "firewall_diff_metadata_only",
        "dependency_impact_present",
        "customer_impact_review",
        "cross_project_sync_present",
        "incident_severity_present",
        "service_health_impact_present",
        "restoration_time_present",
        "operator_notification_present",
        "break_glass_classification_present",
        "maintenance_window_present",
        "rollback_owner_present",
        "postcheck_evidence_present",
        "secret_or_key_value_absent",
        "no_runtime_authorization",
        "counts_transition_safe"
      ],
      "reviewer_outcome": "waiting_change_evidence",
      "rollback_owner": "pending_change_evidence",
      "rollback_owner_accepted": false,
      "rollback_plan_accepted": false,
      "rollback_plan_ref": null,
      "route_smoke_authorized": false,
      "runtime_execution_authorized": false,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "service_dependency_accepted": false,
      "service_dependency_ref": null,
      "service_health_impact_accepted": false,
      "service_health_impact_refs": [],
      "source_acceptance_candidate_id": "ssh_network_owner_response_acceptance:gitea_cd_dev_ssh",
      "ssh_key_collection_allowed": false,
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_change_evidence",
      "sudo_action_authorized": false,
      "surface_id": "gitea_cd_dev_ssh",
      "validation_plan": "pending_change_evidence",
      "validation_plan_accepted": false,
      "wireguard_change_authorized": false,
      "write_capable_surface": true
    },
    {
      "action_buttons_allowed": false,
      "actor_identified": false,
      "actor_role_or_team": "pending_change_evidence",
      "affected_host_or_route_aliases": [],
      "affected_ports_or_paths_ref": null,
      "affected_scope": "pending_change_evidence",
      "affected_scope_accepted": false,
      "after_state_accepted": false,
      "after_state_ref": null,
      "allowlist_or_denylist_ref": null,
      "before_state_accepted": false,
      "before_state_ref": null,
      "blocked_actions": [
        "ssh_read",
        "ssh_write",
        "live_firewall_read",
        "firewall_change",
        "port_change",
        "port_close",
        "port_open",
        "network_policy_apply",
        "nodeport_change",
        "wireguard_change",
        "sudo_action",
        "deploy_ssh_action",
        "route_smoke",
        "public_gateway_reload",
        "nginx_reload",
        "host_restart",
        "secret_value_collection",
        "ssh_key_collection",
        "raw_firewall_dump_storage",
        "raw_key_material_storage",
        "mark_change_evidence_accepted_without_reviewer_record",
        "mark_incident_resolved_without_health_evidence",
        "hide_cross_project_impact",
        "close_management_port_without_owner",
        "treat_break_glass_as_approval",
        "open_runtime_gate",
        "add_action_button",
        "production_write"
      ],
      "break_glass_owner": "pending_change_evidence",
      "change_evidence_accepted": false,
      "change_evidence_candidate_id": "port_firewall_change_evidence:deploy_alerts_ssh_path",
      "change_evidence_fields": [
        "change_evidence_candidate_id",
        "source_acceptance_candidate_id",
        "surface_id",
        "config_kind",
        "control_tier",
        "write_capable_surface",
        "change_or_incident_ref",
        "actor_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "affected_host_or_route_aliases",
        "affected_ports_or_paths_ref",
        "before_state_ref",
        "after_state_ref",
        "firewall_rule_diff_ref",
        "allowlist_or_denylist_ref",
        "service_dependency_ref",
        "customer_impact_ref",
        "monitoring_alert_refs",
        "cross_project_sync_ref",
        "incident_severity",
        "incident_detected_at_ref",
        "restoration_time_ref",
        "service_health_impact_refs",
        "external_route_impact_refs",
        "emergency_change_classification",
        "operator_notification_refs",
        "incident_commander_or_owner",
        "maintenance_window",
        "rollback_owner",
        "rollback_plan_ref",
        "validation_plan",
        "postcheck_evidence_refs",
        "communication_owner",
        "break_glass_owner",
        "change_freeze_rule",
        "reviewer_outcome",
        "followup_owner",
        "not_approval"
      ],
      "change_evidence_quarantined": false,
      "change_evidence_received": false,
      "change_evidence_rejected": false,
      "change_freeze_rule": "pending_change_evidence",
      "change_or_incident_ref": null,
      "communication_owner": "pending_change_evidence",
      "config_kind": "ci_deploy_ssh",
      "control_tier": "C1",
      "cross_project_sync_accepted": false,
      "cross_project_sync_ref": null,
      "customer_impact_accepted": false,
      "customer_impact_ref": null,
      "decision": "pending_change_evidence",
      "decision_reason": "pending_change_evidence",
      "deploy_ssh_action_authorized": false,
      "emergency_change_classification": "pending_change_evidence",
      "emergency_change_classification_accepted": false,
      "expected_scope": "192.168.0.110",
      "external_route_impact_refs": [],
      "firewall_change_authorized": false,
      "firewall_rule_diff_accepted": false,
      "firewall_rule_diff_ref": null,
      "followup_owner": "pending_change_evidence",
      "host_restart_authorized": false,
      "host_write_authorized": false,
      "impact_supplement_requested": false,
      "incident_backfill_only": true,
      "incident_commander_accepted": false,
      "incident_commander_or_owner": "pending_change_evidence",
      "incident_detected_at_ref": null,
      "incident_severity": "pending_change_evidence",
      "incident_severity_accepted": false,
      "live_firewall_read_authorized": false,
      "maintenance_window": "pending_change_evidence",
      "maintenance_window_accepted": false,
      "monitoring_alert_refs": [],
      "network_policy_apply_authorized": false,
      "nginx_reload_authorized": false,
      "nodeport_change_authorized": false,
      "not_approval": true,
      "operator_notification_accepted": false,
      "operator_notification_refs": [],
      "outcome_lanes": [
        "waiting_change_evidence",
        "quarantine_raw_firewall_dump",
        "reject_unattributed_change",
        "request_impact_supplement",
        "ready_for_network_review",
        "incident_backfill_only",
        "emergency_change_backfill_required",
        "owner_review_only_update",
        "waiting_runtime_gate"
      ],
      "port_change_authorized": false,
      "port_close_authorized": false,
      "port_open_authorized": false,
      "port_policy_accepted": false,
      "postcheck_evidence_accepted": false,
      "postcheck_evidence_refs": [],
      "production_write_authorized": false,
      "public_gateway_reload_authorized": false,
      "required_evidence_fields": [
        "change_or_incident_ref",
        "actor_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "affected_ports_or_paths_ref",
        "before_state_ref",
        "after_state_ref",
        "service_dependency_ref",
        "customer_impact_ref",
        "incident_severity",
        "restoration_time_ref",
        "service_health_impact_refs",
        "operator_notification_refs",
        "incident_commander_or_owner",
        "maintenance_window",
        "rollback_owner",
        "rollback_plan_ref",
        "validation_plan",
        "postcheck_evidence_refs",
        "cross_project_sync_ref"
      ],
      "restoration_time_accepted": false,
      "restoration_time_ref": null,
      "reviewer_checks": [
        "change_ref_present",
        "actor_role_traceable",
        "decision_reason_present",
        "affected_scope_matches_surface",
        "ports_or_paths_redacted",
        "before_after_state_refs",
        "firewall_diff_metadata_only",
        "dependency_impact_present",
        "customer_impact_review",
        "cross_project_sync_present",
        "incident_severity_present",
        "service_health_impact_present",
        "restoration_time_present",
        "operator_notification_present",
        "break_glass_classification_present",
        "maintenance_window_present",
        "rollback_owner_present",
        "postcheck_evidence_present",
        "secret_or_key_value_absent",
        "no_runtime_authorization",
        "counts_transition_safe"
      ],
      "reviewer_outcome": "waiting_change_evidence",
      "rollback_owner": "pending_change_evidence",
      "rollback_owner_accepted": false,
      "rollback_plan_accepted": false,
      "rollback_plan_ref": null,
      "route_smoke_authorized": false,
      "runtime_execution_authorized": false,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "service_dependency_accepted": false,
      "service_dependency_ref": null,
      "service_health_impact_accepted": false,
      "service_health_impact_refs": [],
      "source_acceptance_candidate_id": "ssh_network_owner_response_acceptance:deploy_alerts_ssh_path",
      "ssh_key_collection_allowed": false,
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_change_evidence",
      "sudo_action_authorized": false,
      "surface_id": "deploy_alerts_ssh_path",
      "validation_plan": "pending_change_evidence",
      "validation_plan_accepted": false,
      "wireguard_change_authorized": false,
      "write_capable_surface": true
    },
    {
      "action_buttons_allowed": false,
      "actor_identified": false,
      "actor_role_or_team": "pending_change_evidence",
      "affected_host_or_route_aliases": [],
      "affected_ports_or_paths_ref": null,
      "affected_scope": "pending_change_evidence",
      "affected_scope_accepted": false,
      "after_state_accepted": false,
      "after_state_ref": null,
      "allowlist_or_denylist_ref": null,
      "before_state_accepted": false,
      "before_state_ref": null,
      "blocked_actions": [
        "ssh_read",
        "ssh_write",
        "live_firewall_read",
        "firewall_change",
        "port_change",
        "port_close",
        "port_open",
        "network_policy_apply",
        "nodeport_change",
        "wireguard_change",
        "sudo_action",
        "deploy_ssh_action",
        "route_smoke",
        "public_gateway_reload",
        "nginx_reload",
        "host_restart",
        "secret_value_collection",
        "ssh_key_collection",
        "raw_firewall_dump_storage",
        "raw_key_material_storage",
        "mark_change_evidence_accepted_without_reviewer_record",
        "mark_incident_resolved_without_health_evidence",
        "hide_cross_project_impact",
        "close_management_port_without_owner",
        "treat_break_glass_as_approval",
        "open_runtime_gate",
        "add_action_button",
        "production_write"
      ],
      "break_glass_owner": "pending_change_evidence",
      "change_evidence_accepted": false,
      "change_evidence_candidate_id": "port_firewall_change_evidence:monitoring_discover_docker_ssh",
      "change_evidence_fields": [
        "change_evidence_candidate_id",
        "source_acceptance_candidate_id",
        "surface_id",
        "config_kind",
        "control_tier",
        "write_capable_surface",
        "change_or_incident_ref",
        "actor_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "affected_host_or_route_aliases",
        "affected_ports_or_paths_ref",
        "before_state_ref",
        "after_state_ref",
        "firewall_rule_diff_ref",
        "allowlist_or_denylist_ref",
        "service_dependency_ref",
        "customer_impact_ref",
        "monitoring_alert_refs",
        "cross_project_sync_ref",
        "incident_severity",
        "incident_detected_at_ref",
        "restoration_time_ref",
        "service_health_impact_refs",
        "external_route_impact_refs",
        "emergency_change_classification",
        "operator_notification_refs",
        "incident_commander_or_owner",
        "maintenance_window",
        "rollback_owner",
        "rollback_plan_ref",
        "validation_plan",
        "postcheck_evidence_refs",
        "communication_owner",
        "break_glass_owner",
        "change_freeze_rule",
        "reviewer_outcome",
        "followup_owner",
        "not_approval"
      ],
      "change_evidence_quarantined": false,
      "change_evidence_received": false,
      "change_evidence_rejected": false,
      "change_freeze_rule": "pending_change_evidence",
      "change_or_incident_ref": null,
      "communication_owner": "pending_change_evidence",
      "config_kind": "ssh_discovery_script",
      "control_tier": "C1",
      "cross_project_sync_accepted": false,
      "cross_project_sync_ref": null,
      "customer_impact_accepted": false,
      "customer_impact_ref": null,
      "decision": "pending_change_evidence",
      "decision_reason": "pending_change_evidence",
      "deploy_ssh_action_authorized": false,
      "emergency_change_classification": "pending_change_evidence",
      "emergency_change_classification_accepted": false,
      "expected_scope": "110_188_docker_hosts",
      "external_route_impact_refs": [],
      "firewall_change_authorized": false,
      "firewall_rule_diff_accepted": false,
      "firewall_rule_diff_ref": null,
      "followup_owner": "pending_change_evidence",
      "host_restart_authorized": false,
      "host_write_authorized": false,
      "impact_supplement_requested": false,
      "incident_backfill_only": true,
      "incident_commander_accepted": false,
      "incident_commander_or_owner": "pending_change_evidence",
      "incident_detected_at_ref": null,
      "incident_severity": "pending_change_evidence",
      "incident_severity_accepted": false,
      "live_firewall_read_authorized": false,
      "maintenance_window": "pending_change_evidence",
      "maintenance_window_accepted": false,
      "monitoring_alert_refs": [],
      "network_policy_apply_authorized": false,
      "nginx_reload_authorized": false,
      "nodeport_change_authorized": false,
      "not_approval": true,
      "operator_notification_accepted": false,
      "operator_notification_refs": [],
      "outcome_lanes": [
        "waiting_change_evidence",
        "quarantine_raw_firewall_dump",
        "reject_unattributed_change",
        "request_impact_supplement",
        "ready_for_network_review",
        "incident_backfill_only",
        "emergency_change_backfill_required",
        "owner_review_only_update",
        "waiting_runtime_gate"
      ],
      "port_change_authorized": false,
      "port_close_authorized": false,
      "port_open_authorized": false,
      "port_policy_accepted": false,
      "postcheck_evidence_accepted": false,
      "postcheck_evidence_refs": [],
      "production_write_authorized": false,
      "public_gateway_reload_authorized": false,
      "required_evidence_fields": [
        "change_or_incident_ref",
        "actor_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "affected_ports_or_paths_ref",
        "before_state_ref",
        "after_state_ref",
        "service_dependency_ref",
        "customer_impact_ref",
        "incident_severity",
        "restoration_time_ref",
        "service_health_impact_refs",
        "operator_notification_refs",
        "incident_commander_or_owner",
        "maintenance_window",
        "rollback_owner",
        "rollback_plan_ref",
        "validation_plan",
        "postcheck_evidence_refs",
        "cross_project_sync_ref"
      ],
      "restoration_time_accepted": false,
      "restoration_time_ref": null,
      "reviewer_checks": [
        "change_ref_present",
        "actor_role_traceable",
        "decision_reason_present",
        "affected_scope_matches_surface",
        "ports_or_paths_redacted",
        "before_after_state_refs",
        "firewall_diff_metadata_only",
        "dependency_impact_present",
        "customer_impact_review",
        "cross_project_sync_present",
        "incident_severity_present",
        "service_health_impact_present",
        "restoration_time_present",
        "operator_notification_present",
        "break_glass_classification_present",
        "maintenance_window_present",
        "rollback_owner_present",
        "postcheck_evidence_present",
        "secret_or_key_value_absent",
        "no_runtime_authorization",
        "counts_transition_safe"
      ],
      "reviewer_outcome": "waiting_change_evidence",
      "rollback_owner": "pending_change_evidence",
      "rollback_owner_accepted": false,
      "rollback_plan_accepted": false,
      "rollback_plan_ref": null,
      "route_smoke_authorized": false,
      "runtime_execution_authorized": false,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "service_dependency_accepted": false,
      "service_dependency_ref": null,
      "service_health_impact_accepted": false,
      "service_health_impact_refs": [],
      "source_acceptance_candidate_id": "ssh_network_owner_response_acceptance:monitoring_discover_docker_ssh",
      "ssh_key_collection_allowed": false,
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_change_evidence",
      "sudo_action_authorized": false,
      "surface_id": "monitoring_discover_docker_ssh",
      "validation_plan": "pending_change_evidence",
      "validation_plan_accepted": false,
      "wireguard_change_authorized": false,
      "write_capable_surface": false
    },
    {
      "action_buttons_allowed": false,
      "actor_identified": false,
      "actor_role_or_team": "pending_change_evidence",
      "affected_host_or_route_aliases": [],
      "affected_ports_or_paths_ref": null,
      "affected_scope": "pending_change_evidence",
      "affected_scope_accepted": false,
      "after_state_accepted": false,
      "after_state_ref": null,
      "allowlist_or_denylist_ref": null,
      "before_state_accepted": false,
      "before_state_ref": null,
      "blocked_actions": [
        "ssh_read",
        "ssh_write",
        "live_firewall_read",
        "firewall_change",
        "port_change",
        "port_close",
        "port_open",
        "network_policy_apply",
        "nodeport_change",
        "wireguard_change",
        "sudo_action",
        "deploy_ssh_action",
        "route_smoke",
        "public_gateway_reload",
        "nginx_reload",
        "host_restart",
        "secret_value_collection",
        "ssh_key_collection",
        "raw_firewall_dump_storage",
        "raw_key_material_storage",
        "mark_change_evidence_accepted_without_reviewer_record",
        "mark_incident_resolved_without_health_evidence",
        "hide_cross_project_impact",
        "close_management_port_without_owner",
        "treat_break_glass_as_approval",
        "open_runtime_gate",
        "add_action_button",
        "production_write"
      ],
      "break_glass_owner": "pending_change_evidence",
      "change_evidence_accepted": false,
      "change_evidence_candidate_id": "port_firewall_change_evidence:monitoring_exporter_deploy_ssh",
      "change_evidence_fields": [
        "change_evidence_candidate_id",
        "source_acceptance_candidate_id",
        "surface_id",
        "config_kind",
        "control_tier",
        "write_capable_surface",
        "change_or_incident_ref",
        "actor_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "affected_host_or_route_aliases",
        "affected_ports_or_paths_ref",
        "before_state_ref",
        "after_state_ref",
        "firewall_rule_diff_ref",
        "allowlist_or_denylist_ref",
        "service_dependency_ref",
        "customer_impact_ref",
        "monitoring_alert_refs",
        "cross_project_sync_ref",
        "incident_severity",
        "incident_detected_at_ref",
        "restoration_time_ref",
        "service_health_impact_refs",
        "external_route_impact_refs",
        "emergency_change_classification",
        "operator_notification_refs",
        "incident_commander_or_owner",
        "maintenance_window",
        "rollback_owner",
        "rollback_plan_ref",
        "validation_plan",
        "postcheck_evidence_refs",
        "communication_owner",
        "break_glass_owner",
        "change_freeze_rule",
        "reviewer_outcome",
        "followup_owner",
        "not_approval"
      ],
      "change_evidence_quarantined": false,
      "change_evidence_received": false,
      "change_evidence_rejected": false,
      "change_freeze_rule": "pending_change_evidence",
      "change_or_incident_ref": null,
      "communication_owner": "pending_change_evidence",
      "config_kind": "monitoring_ssh_deploy_script",
      "control_tier": "C1",
      "cross_project_sync_accepted": false,
      "cross_project_sync_ref": null,
      "customer_impact_accepted": false,
      "customer_impact_ref": null,
      "decision": "pending_change_evidence",
      "decision_reason": "pending_change_evidence",
      "deploy_ssh_action_authorized": false,
      "emergency_change_classification": "pending_change_evidence",
      "emergency_change_classification_accepted": false,
      "expected_scope": "192.168.0.188",
      "external_route_impact_refs": [],
      "firewall_change_authorized": false,
      "firewall_rule_diff_accepted": false,
      "firewall_rule_diff_ref": null,
      "followup_owner": "pending_change_evidence",
      "host_restart_authorized": false,
      "host_write_authorized": false,
      "impact_supplement_requested": false,
      "incident_backfill_only": true,
      "incident_commander_accepted": false,
      "incident_commander_or_owner": "pending_change_evidence",
      "incident_detected_at_ref": null,
      "incident_severity": "pending_change_evidence",
      "incident_severity_accepted": false,
      "live_firewall_read_authorized": false,
      "maintenance_window": "pending_change_evidence",
      "maintenance_window_accepted": false,
      "monitoring_alert_refs": [],
      "network_policy_apply_authorized": false,
      "nginx_reload_authorized": false,
      "nodeport_change_authorized": false,
      "not_approval": true,
      "operator_notification_accepted": false,
      "operator_notification_refs": [],
      "outcome_lanes": [
        "waiting_change_evidence",
        "quarantine_raw_firewall_dump",
        "reject_unattributed_change",
        "request_impact_supplement",
        "ready_for_network_review",
        "incident_backfill_only",
        "emergency_change_backfill_required",
        "owner_review_only_update",
        "waiting_runtime_gate"
      ],
      "port_change_authorized": false,
      "port_close_authorized": false,
      "port_open_authorized": false,
      "port_policy_accepted": false,
      "postcheck_evidence_accepted": false,
      "postcheck_evidence_refs": [],
      "production_write_authorized": false,
      "public_gateway_reload_authorized": false,
      "required_evidence_fields": [
        "change_or_incident_ref",
        "actor_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "affected_ports_or_paths_ref",
        "before_state_ref",
        "after_state_ref",
        "service_dependency_ref",
        "customer_impact_ref",
        "incident_severity",
        "restoration_time_ref",
        "service_health_impact_refs",
        "operator_notification_refs",
        "incident_commander_or_owner",
        "maintenance_window",
        "rollback_owner",
        "rollback_plan_ref",
        "validation_plan",
        "postcheck_evidence_refs",
        "cross_project_sync_ref"
      ],
      "restoration_time_accepted": false,
      "restoration_time_ref": null,
      "reviewer_checks": [
        "change_ref_present",
        "actor_role_traceable",
        "decision_reason_present",
        "affected_scope_matches_surface",
        "ports_or_paths_redacted",
        "before_after_state_refs",
        "firewall_diff_metadata_only",
        "dependency_impact_present",
        "customer_impact_review",
        "cross_project_sync_present",
        "incident_severity_present",
        "service_health_impact_present",
        "restoration_time_present",
        "operator_notification_present",
        "break_glass_classification_present",
        "maintenance_window_present",
        "rollback_owner_present",
        "postcheck_evidence_present",
        "secret_or_key_value_absent",
        "no_runtime_authorization",
        "counts_transition_safe"
      ],
      "reviewer_outcome": "waiting_change_evidence",
      "rollback_owner": "pending_change_evidence",
      "rollback_owner_accepted": false,
      "rollback_plan_accepted": false,
      "rollback_plan_ref": null,
      "route_smoke_authorized": false,
      "runtime_execution_authorized": false,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "service_dependency_accepted": false,
      "service_dependency_ref": null,
      "service_health_impact_accepted": false,
      "service_health_impact_refs": [],
      "source_acceptance_candidate_id": "ssh_network_owner_response_acceptance:monitoring_exporter_deploy_ssh",
      "ssh_key_collection_allowed": false,
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_change_evidence",
      "sudo_action_authorized": false,
      "surface_id": "monitoring_exporter_deploy_ssh",
      "validation_plan": "pending_change_evidence",
      "validation_plan_accepted": false,
      "wireguard_change_authorized": false,
      "write_capable_surface": true
    },
    {
      "action_buttons_allowed": false,
      "actor_identified": false,
      "actor_role_or_team": "pending_change_evidence",
      "affected_host_or_route_aliases": [],
      "affected_ports_or_paths_ref": null,
      "affected_scope": "pending_change_evidence",
      "affected_scope_accepted": false,
      "after_state_accepted": false,
      "after_state_ref": null,
      "allowlist_or_denylist_ref": null,
      "before_state_accepted": false,
      "before_state_ref": null,
      "blocked_actions": [
        "ssh_read",
        "ssh_write",
        "live_firewall_read",
        "firewall_change",
        "port_change",
        "port_close",
        "port_open",
        "network_policy_apply",
        "nodeport_change",
        "wireguard_change",
        "sudo_action",
        "deploy_ssh_action",
        "route_smoke",
        "public_gateway_reload",
        "nginx_reload",
        "host_restart",
        "secret_value_collection",
        "ssh_key_collection",
        "raw_firewall_dump_storage",
        "raw_key_material_storage",
        "mark_change_evidence_accepted_without_reviewer_record",
        "mark_incident_resolved_without_health_evidence",
        "hide_cross_project_impact",
        "close_management_port_without_owner",
        "treat_break_glass_as_approval",
        "open_runtime_gate",
        "add_action_button",
        "production_write"
      ],
      "break_glass_owner": "pending_change_evidence",
      "change_evidence_accepted": false,
      "change_evidence_candidate_id": "port_firewall_change_evidence:backup_config_ssh_capture",
      "change_evidence_fields": [
        "change_evidence_candidate_id",
        "source_acceptance_candidate_id",
        "surface_id",
        "config_kind",
        "control_tier",
        "write_capable_surface",
        "change_or_incident_ref",
        "actor_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "affected_host_or_route_aliases",
        "affected_ports_or_paths_ref",
        "before_state_ref",
        "after_state_ref",
        "firewall_rule_diff_ref",
        "allowlist_or_denylist_ref",
        "service_dependency_ref",
        "customer_impact_ref",
        "monitoring_alert_refs",
        "cross_project_sync_ref",
        "incident_severity",
        "incident_detected_at_ref",
        "restoration_time_ref",
        "service_health_impact_refs",
        "external_route_impact_refs",
        "emergency_change_classification",
        "operator_notification_refs",
        "incident_commander_or_owner",
        "maintenance_window",
        "rollback_owner",
        "rollback_plan_ref",
        "validation_plan",
        "postcheck_evidence_refs",
        "communication_owner",
        "break_glass_owner",
        "change_freeze_rule",
        "reviewer_outcome",
        "followup_owner",
        "not_approval"
      ],
      "change_evidence_quarantined": false,
      "change_evidence_received": false,
      "change_evidence_rejected": false,
      "change_freeze_rule": "pending_change_evidence",
      "change_or_incident_ref": null,
      "communication_owner": "pending_change_evidence",
      "config_kind": "ssh_backup_capture",
      "control_tier": "C1",
      "cross_project_sync_accepted": false,
      "cross_project_sync_ref": null,
      "customer_impact_accepted": false,
      "customer_impact_ref": null,
      "decision": "pending_change_evidence",
      "decision_reason": "pending_change_evidence",
      "deploy_ssh_action_authorized": false,
      "emergency_change_classification": "pending_change_evidence",
      "emergency_change_classification_accepted": false,
      "expected_scope": "110_188_120_121_cluster",
      "external_route_impact_refs": [],
      "firewall_change_authorized": false,
      "firewall_rule_diff_accepted": false,
      "firewall_rule_diff_ref": null,
      "followup_owner": "pending_change_evidence",
      "host_restart_authorized": false,
      "host_write_authorized": false,
      "impact_supplement_requested": false,
      "incident_backfill_only": true,
      "incident_commander_accepted": false,
      "incident_commander_or_owner": "pending_change_evidence",
      "incident_detected_at_ref": null,
      "incident_severity": "pending_change_evidence",
      "incident_severity_accepted": false,
      "live_firewall_read_authorized": false,
      "maintenance_window": "pending_change_evidence",
      "maintenance_window_accepted": false,
      "monitoring_alert_refs": [],
      "network_policy_apply_authorized": false,
      "nginx_reload_authorized": false,
      "nodeport_change_authorized": false,
      "not_approval": true,
      "operator_notification_accepted": false,
      "operator_notification_refs": [],
      "outcome_lanes": [
        "waiting_change_evidence",
        "quarantine_raw_firewall_dump",
        "reject_unattributed_change",
        "request_impact_supplement",
        "ready_for_network_review",
        "incident_backfill_only",
        "emergency_change_backfill_required",
        "owner_review_only_update",
        "waiting_runtime_gate"
      ],
      "port_change_authorized": false,
      "port_close_authorized": false,
      "port_open_authorized": false,
      "port_policy_accepted": false,
      "postcheck_evidence_accepted": false,
      "postcheck_evidence_refs": [],
      "production_write_authorized": false,
      "public_gateway_reload_authorized": false,
      "required_evidence_fields": [
        "change_or_incident_ref",
        "actor_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "affected_ports_or_paths_ref",
        "before_state_ref",
        "after_state_ref",
        "service_dependency_ref",
        "customer_impact_ref",
        "incident_severity",
        "restoration_time_ref",
        "service_health_impact_refs",
        "operator_notification_refs",
        "incident_commander_or_owner",
        "maintenance_window",
        "rollback_owner",
        "rollback_plan_ref",
        "validation_plan",
        "postcheck_evidence_refs",
        "cross_project_sync_ref"
      ],
      "restoration_time_accepted": false,
      "restoration_time_ref": null,
      "reviewer_checks": [
        "change_ref_present",
        "actor_role_traceable",
        "decision_reason_present",
        "affected_scope_matches_surface",
        "ports_or_paths_redacted",
        "before_after_state_refs",
        "firewall_diff_metadata_only",
        "dependency_impact_present",
        "customer_impact_review",
        "cross_project_sync_present",
        "incident_severity_present",
        "service_health_impact_present",
        "restoration_time_present",
        "operator_notification_present",
        "break_glass_classification_present",
        "maintenance_window_present",
        "rollback_owner_present",
        "postcheck_evidence_present",
        "secret_or_key_value_absent",
        "no_runtime_authorization",
        "counts_transition_safe"
      ],
      "reviewer_outcome": "waiting_change_evidence",
      "rollback_owner": "pending_change_evidence",
      "rollback_owner_accepted": false,
      "rollback_plan_accepted": false,
      "rollback_plan_ref": null,
      "route_smoke_authorized": false,
      "runtime_execution_authorized": false,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "service_dependency_accepted": false,
      "service_dependency_ref": null,
      "service_health_impact_accepted": false,
      "service_health_impact_refs": [],
      "source_acceptance_candidate_id": "ssh_network_owner_response_acceptance:backup_config_ssh_capture",
      "ssh_key_collection_allowed": false,
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_change_evidence",
      "sudo_action_authorized": false,
      "surface_id": "backup_config_ssh_capture",
      "validation_plan": "pending_change_evidence",
      "validation_plan_accepted": false,
      "wireguard_change_authorized": false,
      "write_capable_surface": false
    },
    {
      "action_buttons_allowed": false,
      "actor_identified": false,
      "actor_role_or_team": "pending_change_evidence",
      "affected_host_or_route_aliases": [],
      "affected_ports_or_paths_ref": null,
      "affected_scope": "pending_change_evidence",
      "affected_scope_accepted": false,
      "after_state_accepted": false,
      "after_state_ref": null,
      "allowlist_or_denylist_ref": null,
      "before_state_accepted": false,
      "before_state_ref": null,
      "blocked_actions": [
        "ssh_read",
        "ssh_write",
        "live_firewall_read",
        "firewall_change",
        "port_change",
        "port_close",
        "port_open",
        "network_policy_apply",
        "nodeport_change",
        "wireguard_change",
        "sudo_action",
        "deploy_ssh_action",
        "route_smoke",
        "public_gateway_reload",
        "nginx_reload",
        "host_restart",
        "secret_value_collection",
        "ssh_key_collection",
        "raw_firewall_dump_storage",
        "raw_key_material_storage",
        "mark_change_evidence_accepted_without_reviewer_record",
        "mark_incident_resolved_without_health_evidence",
        "hide_cross_project_impact",
        "close_management_port_without_owner",
        "treat_break_glass_as_approval",
        "open_runtime_gate",
        "add_action_button",
        "production_write"
      ],
      "break_glass_owner": "pending_change_evidence",
      "change_evidence_accepted": false,
      "change_evidence_candidate_id": "port_firewall_change_evidence:host_ops_sudoers_wrapper",
      "change_evidence_fields": [
        "change_evidence_candidate_id",
        "source_acceptance_candidate_id",
        "surface_id",
        "config_kind",
        "control_tier",
        "write_capable_surface",
        "change_or_incident_ref",
        "actor_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "affected_host_or_route_aliases",
        "affected_ports_or_paths_ref",
        "before_state_ref",
        "after_state_ref",
        "firewall_rule_diff_ref",
        "allowlist_or_denylist_ref",
        "service_dependency_ref",
        "customer_impact_ref",
        "monitoring_alert_refs",
        "cross_project_sync_ref",
        "incident_severity",
        "incident_detected_at_ref",
        "restoration_time_ref",
        "service_health_impact_refs",
        "external_route_impact_refs",
        "emergency_change_classification",
        "operator_notification_refs",
        "incident_commander_or_owner",
        "maintenance_window",
        "rollback_owner",
        "rollback_plan_ref",
        "validation_plan",
        "postcheck_evidence_refs",
        "communication_owner",
        "break_glass_owner",
        "change_freeze_rule",
        "reviewer_outcome",
        "followup_owner",
        "not_approval"
      ],
      "change_evidence_quarantined": false,
      "change_evidence_received": false,
      "change_evidence_rejected": false,
      "change_freeze_rule": "pending_change_evidence",
      "change_or_incident_ref": null,
      "communication_owner": "pending_change_evidence",
      "config_kind": "sudoers_policy",
      "control_tier": "C1",
      "cross_project_sync_accepted": false,
      "cross_project_sync_ref": null,
      "customer_impact_accepted": false,
      "customer_impact_ref": null,
      "decision": "pending_change_evidence",
      "decision_reason": "pending_change_evidence",
      "deploy_ssh_action_authorized": false,
      "emergency_change_classification": "pending_change_evidence",
      "emergency_change_classification_accepted": false,
      "expected_scope": "host_ops_minimal_sudo",
      "external_route_impact_refs": [],
      "firewall_change_authorized": false,
      "firewall_rule_diff_accepted": false,
      "firewall_rule_diff_ref": null,
      "followup_owner": "pending_change_evidence",
      "host_restart_authorized": false,
      "host_write_authorized": false,
      "impact_supplement_requested": false,
      "incident_backfill_only": true,
      "incident_commander_accepted": false,
      "incident_commander_or_owner": "pending_change_evidence",
      "incident_detected_at_ref": null,
      "incident_severity": "pending_change_evidence",
      "incident_severity_accepted": false,
      "live_firewall_read_authorized": false,
      "maintenance_window": "pending_change_evidence",
      "maintenance_window_accepted": false,
      "monitoring_alert_refs": [],
      "network_policy_apply_authorized": false,
      "nginx_reload_authorized": false,
      "nodeport_change_authorized": false,
      "not_approval": true,
      "operator_notification_accepted": false,
      "operator_notification_refs": [],
      "outcome_lanes": [
        "waiting_change_evidence",
        "quarantine_raw_firewall_dump",
        "reject_unattributed_change",
        "request_impact_supplement",
        "ready_for_network_review",
        "incident_backfill_only",
        "emergency_change_backfill_required",
        "owner_review_only_update",
        "waiting_runtime_gate"
      ],
      "port_change_authorized": false,
      "port_close_authorized": false,
      "port_open_authorized": false,
      "port_policy_accepted": false,
      "postcheck_evidence_accepted": false,
      "postcheck_evidence_refs": [],
      "production_write_authorized": false,
      "public_gateway_reload_authorized": false,
      "required_evidence_fields": [
        "change_or_incident_ref",
        "actor_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "affected_ports_or_paths_ref",
        "before_state_ref",
        "after_state_ref",
        "service_dependency_ref",
        "customer_impact_ref",
        "incident_severity",
        "restoration_time_ref",
        "service_health_impact_refs",
        "operator_notification_refs",
        "incident_commander_or_owner",
        "maintenance_window",
        "rollback_owner",
        "rollback_plan_ref",
        "validation_plan",
        "postcheck_evidence_refs",
        "cross_project_sync_ref"
      ],
      "restoration_time_accepted": false,
      "restoration_time_ref": null,
      "reviewer_checks": [
        "change_ref_present",
        "actor_role_traceable",
        "decision_reason_present",
        "affected_scope_matches_surface",
        "ports_or_paths_redacted",
        "before_after_state_refs",
        "firewall_diff_metadata_only",
        "dependency_impact_present",
        "customer_impact_review",
        "cross_project_sync_present",
        "incident_severity_present",
        "service_health_impact_present",
        "restoration_time_present",
        "operator_notification_present",
        "break_glass_classification_present",
        "maintenance_window_present",
        "rollback_owner_present",
        "postcheck_evidence_present",
        "secret_or_key_value_absent",
        "no_runtime_authorization",
        "counts_transition_safe"
      ],
      "reviewer_outcome": "waiting_change_evidence",
      "rollback_owner": "pending_change_evidence",
      "rollback_owner_accepted": false,
      "rollback_plan_accepted": false,
      "rollback_plan_ref": null,
      "route_smoke_authorized": false,
      "runtime_execution_authorized": false,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "service_dependency_accepted": false,
      "service_dependency_ref": null,
      "service_health_impact_accepted": false,
      "service_health_impact_refs": [],
      "source_acceptance_candidate_id": "ssh_network_owner_response_acceptance:host_ops_sudoers_wrapper",
      "ssh_key_collection_allowed": false,
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_change_evidence",
      "sudo_action_authorized": false,
      "surface_id": "host_ops_sudoers_wrapper",
      "validation_plan": "pending_change_evidence",
      "validation_plan_accepted": false,
      "wireguard_change_authorized": false,
      "write_capable_surface": true
    },
    {
      "action_buttons_allowed": false,
      "actor_identified": false,
      "actor_role_or_team": "pending_change_evidence",
      "affected_host_or_route_aliases": [],
      "affected_ports_or_paths_ref": null,
      "affected_scope": "pending_change_evidence",
      "affected_scope_accepted": false,
      "after_state_accepted": false,
      "after_state_ref": null,
      "allowlist_or_denylist_ref": null,
      "before_state_accepted": false,
      "before_state_ref": null,
      "blocked_actions": [
        "ssh_read",
        "ssh_write",
        "live_firewall_read",
        "firewall_change",
        "port_change",
        "port_close",
        "port_open",
        "network_policy_apply",
        "nodeport_change",
        "wireguard_change",
        "sudo_action",
        "deploy_ssh_action",
        "route_smoke",
        "public_gateway_reload",
        "nginx_reload",
        "host_restart",
        "secret_value_collection",
        "ssh_key_collection",
        "raw_firewall_dump_storage",
        "raw_key_material_storage",
        "mark_change_evidence_accepted_without_reviewer_record",
        "mark_incident_resolved_without_health_evidence",
        "hide_cross_project_impact",
        "close_management_port_without_owner",
        "treat_break_glass_as_approval",
        "open_runtime_gate",
        "add_action_button",
        "production_write"
      ],
      "break_glass_owner": "pending_change_evidence",
      "change_evidence_accepted": false,
      "change_evidence_candidate_id": "port_firewall_change_evidence:k8s_prod_network_policy",
      "change_evidence_fields": [
        "change_evidence_candidate_id",
        "source_acceptance_candidate_id",
        "surface_id",
        "config_kind",
        "control_tier",
        "write_capable_surface",
        "change_or_incident_ref",
        "actor_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "affected_host_or_route_aliases",
        "affected_ports_or_paths_ref",
        "before_state_ref",
        "after_state_ref",
        "firewall_rule_diff_ref",
        "allowlist_or_denylist_ref",
        "service_dependency_ref",
        "customer_impact_ref",
        "monitoring_alert_refs",
        "cross_project_sync_ref",
        "incident_severity",
        "incident_detected_at_ref",
        "restoration_time_ref",
        "service_health_impact_refs",
        "external_route_impact_refs",
        "emergency_change_classification",
        "operator_notification_refs",
        "incident_commander_or_owner",
        "maintenance_window",
        "rollback_owner",
        "rollback_plan_ref",
        "validation_plan",
        "postcheck_evidence_refs",
        "communication_owner",
        "break_glass_owner",
        "change_freeze_rule",
        "reviewer_outcome",
        "followup_owner",
        "not_approval"
      ],
      "change_evidence_quarantined": false,
      "change_evidence_received": false,
      "change_evidence_rejected": false,
      "change_freeze_rule": "pending_change_evidence",
      "change_or_incident_ref": null,
      "communication_owner": "pending_change_evidence",
      "config_kind": "k8s_network_policy",
      "control_tier": "C1",
      "cross_project_sync_accepted": false,
      "cross_project_sync_ref": null,
      "customer_impact_accepted": false,
      "customer_impact_ref": null,
      "decision": "pending_change_evidence",
      "decision_reason": "pending_change_evidence",
      "deploy_ssh_action_authorized": false,
      "emergency_change_classification": "pending_change_evidence",
      "emergency_change_classification_accepted": false,
      "expected_scope": "awoooi_prod_namespace",
      "external_route_impact_refs": [],
      "firewall_change_authorized": false,
      "firewall_rule_diff_accepted": false,
      "firewall_rule_diff_ref": null,
      "followup_owner": "pending_change_evidence",
      "host_restart_authorized": false,
      "host_write_authorized": false,
      "impact_supplement_requested": false,
      "incident_backfill_only": true,
      "incident_commander_accepted": false,
      "incident_commander_or_owner": "pending_change_evidence",
      "incident_detected_at_ref": null,
      "incident_severity": "pending_change_evidence",
      "incident_severity_accepted": false,
      "live_firewall_read_authorized": false,
      "maintenance_window": "pending_change_evidence",
      "maintenance_window_accepted": false,
      "monitoring_alert_refs": [],
      "network_policy_apply_authorized": false,
      "nginx_reload_authorized": false,
      "nodeport_change_authorized": false,
      "not_approval": true,
      "operator_notification_accepted": false,
      "operator_notification_refs": [],
      "outcome_lanes": [
        "waiting_change_evidence",
        "quarantine_raw_firewall_dump",
        "reject_unattributed_change",
        "request_impact_supplement",
        "ready_for_network_review",
        "incident_backfill_only",
        "emergency_change_backfill_required",
        "owner_review_only_update",
        "waiting_runtime_gate"
      ],
      "port_change_authorized": false,
      "port_close_authorized": false,
      "port_open_authorized": false,
      "port_policy_accepted": false,
      "postcheck_evidence_accepted": false,
      "postcheck_evidence_refs": [],
      "production_write_authorized": false,
      "public_gateway_reload_authorized": false,
      "required_evidence_fields": [
        "change_or_incident_ref",
        "actor_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "affected_ports_or_paths_ref",
        "before_state_ref",
        "after_state_ref",
        "service_dependency_ref",
        "customer_impact_ref",
        "incident_severity",
        "restoration_time_ref",
        "service_health_impact_refs",
        "operator_notification_refs",
        "incident_commander_or_owner",
        "maintenance_window",
        "rollback_owner",
        "rollback_plan_ref",
        "validation_plan",
        "postcheck_evidence_refs",
        "cross_project_sync_ref"
      ],
      "restoration_time_accepted": false,
      "restoration_time_ref": null,
      "reviewer_checks": [
        "change_ref_present",
        "actor_role_traceable",
        "decision_reason_present",
        "affected_scope_matches_surface",
        "ports_or_paths_redacted",
        "before_after_state_refs",
        "firewall_diff_metadata_only",
        "dependency_impact_present",
        "customer_impact_review",
        "cross_project_sync_present",
        "incident_severity_present",
        "service_health_impact_present",
        "restoration_time_present",
        "operator_notification_present",
        "break_glass_classification_present",
        "maintenance_window_present",
        "rollback_owner_present",
        "postcheck_evidence_present",
        "secret_or_key_value_absent",
        "no_runtime_authorization",
        "counts_transition_safe"
      ],
      "reviewer_outcome": "waiting_change_evidence",
      "rollback_owner": "pending_change_evidence",
      "rollback_owner_accepted": false,
      "rollback_plan_accepted": false,
      "rollback_plan_ref": null,
      "route_smoke_authorized": false,
      "runtime_execution_authorized": false,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "service_dependency_accepted": false,
      "service_dependency_ref": null,
      "service_health_impact_accepted": false,
      "service_health_impact_refs": [],
      "source_acceptance_candidate_id": "ssh_network_owner_response_acceptance:k8s_prod_network_policy",
      "ssh_key_collection_allowed": false,
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_change_evidence",
      "sudo_action_authorized": false,
      "surface_id": "k8s_prod_network_policy",
      "validation_plan": "pending_change_evidence",
      "validation_plan_accepted": false,
      "wireguard_change_authorized": false,
      "write_capable_surface": false
    },
    {
      "action_buttons_allowed": false,
      "actor_identified": false,
      "actor_role_or_team": "pending_change_evidence",
      "affected_host_or_route_aliases": [],
      "affected_ports_or_paths_ref": null,
      "affected_scope": "pending_change_evidence",
      "affected_scope_accepted": false,
      "after_state_accepted": false,
      "after_state_ref": null,
      "allowlist_or_denylist_ref": null,
      "before_state_accepted": false,
      "before_state_ref": null,
      "blocked_actions": [
        "ssh_read",
        "ssh_write",
        "live_firewall_read",
        "firewall_change",
        "port_change",
        "port_close",
        "port_open",
        "network_policy_apply",
        "nodeport_change",
        "wireguard_change",
        "sudo_action",
        "deploy_ssh_action",
        "route_smoke",
        "public_gateway_reload",
        "nginx_reload",
        "host_restart",
        "secret_value_collection",
        "ssh_key_collection",
        "raw_firewall_dump_storage",
        "raw_key_material_storage",
        "mark_change_evidence_accepted_without_reviewer_record",
        "mark_incident_resolved_without_health_evidence",
        "hide_cross_project_impact",
        "close_management_port_without_owner",
        "treat_break_glass_as_approval",
        "open_runtime_gate",
        "add_action_button",
        "production_write"
      ],
      "break_glass_owner": "pending_change_evidence",
      "change_evidence_accepted": false,
      "change_evidence_candidate_id": "port_firewall_change_evidence:argocd_metrics_network_policy",
      "change_evidence_fields": [
        "change_evidence_candidate_id",
        "source_acceptance_candidate_id",
        "surface_id",
        "config_kind",
        "control_tier",
        "write_capable_surface",
        "change_or_incident_ref",
        "actor_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "affected_host_or_route_aliases",
        "affected_ports_or_paths_ref",
        "before_state_ref",
        "after_state_ref",
        "firewall_rule_diff_ref",
        "allowlist_or_denylist_ref",
        "service_dependency_ref",
        "customer_impact_ref",
        "monitoring_alert_refs",
        "cross_project_sync_ref",
        "incident_severity",
        "incident_detected_at_ref",
        "restoration_time_ref",
        "service_health_impact_refs",
        "external_route_impact_refs",
        "emergency_change_classification",
        "operator_notification_refs",
        "incident_commander_or_owner",
        "maintenance_window",
        "rollback_owner",
        "rollback_plan_ref",
        "validation_plan",
        "postcheck_evidence_refs",
        "communication_owner",
        "break_glass_owner",
        "change_freeze_rule",
        "reviewer_outcome",
        "followup_owner",
        "not_approval"
      ],
      "change_evidence_quarantined": false,
      "change_evidence_received": false,
      "change_evidence_rejected": false,
      "change_freeze_rule": "pending_change_evidence",
      "change_or_incident_ref": null,
      "communication_owner": "pending_change_evidence",
      "config_kind": "k8s_network_policy",
      "control_tier": "C1",
      "cross_project_sync_accepted": false,
      "cross_project_sync_ref": null,
      "customer_impact_accepted": false,
      "customer_impact_ref": null,
      "decision": "pending_change_evidence",
      "decision_reason": "pending_change_evidence",
      "deploy_ssh_action_authorized": false,
      "emergency_change_classification": "pending_change_evidence",
      "emergency_change_classification_accepted": false,
      "expected_scope": "argocd_namespace",
      "external_route_impact_refs": [],
      "firewall_change_authorized": false,
      "firewall_rule_diff_accepted": false,
      "firewall_rule_diff_ref": null,
      "followup_owner": "pending_change_evidence",
      "host_restart_authorized": false,
      "host_write_authorized": false,
      "impact_supplement_requested": false,
      "incident_backfill_only": true,
      "incident_commander_accepted": false,
      "incident_commander_or_owner": "pending_change_evidence",
      "incident_detected_at_ref": null,
      "incident_severity": "pending_change_evidence",
      "incident_severity_accepted": false,
      "live_firewall_read_authorized": false,
      "maintenance_window": "pending_change_evidence",
      "maintenance_window_accepted": false,
      "monitoring_alert_refs": [],
      "network_policy_apply_authorized": false,
      "nginx_reload_authorized": false,
      "nodeport_change_authorized": false,
      "not_approval": true,
      "operator_notification_accepted": false,
      "operator_notification_refs": [],
      "outcome_lanes": [
        "waiting_change_evidence",
        "quarantine_raw_firewall_dump",
        "reject_unattributed_change",
        "request_impact_supplement",
        "ready_for_network_review",
        "incident_backfill_only",
        "emergency_change_backfill_required",
        "owner_review_only_update",
        "waiting_runtime_gate"
      ],
      "port_change_authorized": false,
      "port_close_authorized": false,
      "port_open_authorized": false,
      "port_policy_accepted": false,
      "postcheck_evidence_accepted": false,
      "postcheck_evidence_refs": [],
      "production_write_authorized": false,
      "public_gateway_reload_authorized": false,
      "required_evidence_fields": [
        "change_or_incident_ref",
        "actor_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "affected_ports_or_paths_ref",
        "before_state_ref",
        "after_state_ref",
        "service_dependency_ref",
        "customer_impact_ref",
        "incident_severity",
        "restoration_time_ref",
        "service_health_impact_refs",
        "operator_notification_refs",
        "incident_commander_or_owner",
        "maintenance_window",
        "rollback_owner",
        "rollback_plan_ref",
        "validation_plan",
        "postcheck_evidence_refs",
        "cross_project_sync_ref"
      ],
      "restoration_time_accepted": false,
      "restoration_time_ref": null,
      "reviewer_checks": [
        "change_ref_present",
        "actor_role_traceable",
        "decision_reason_present",
        "affected_scope_matches_surface",
        "ports_or_paths_redacted",
        "before_after_state_refs",
        "firewall_diff_metadata_only",
        "dependency_impact_present",
        "customer_impact_review",
        "cross_project_sync_present",
        "incident_severity_present",
        "service_health_impact_present",
        "restoration_time_present",
        "operator_notification_present",
        "break_glass_classification_present",
        "maintenance_window_present",
        "rollback_owner_present",
        "postcheck_evidence_present",
        "secret_or_key_value_absent",
        "no_runtime_authorization",
        "counts_transition_safe"
      ],
      "reviewer_outcome": "waiting_change_evidence",
      "rollback_owner": "pending_change_evidence",
      "rollback_owner_accepted": false,
      "rollback_plan_accepted": false,
      "rollback_plan_ref": null,
      "route_smoke_authorized": false,
      "runtime_execution_authorized": false,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "service_dependency_accepted": false,
      "service_dependency_ref": null,
      "service_health_impact_accepted": false,
      "service_health_impact_refs": [],
      "source_acceptance_candidate_id": "ssh_network_owner_response_acceptance:argocd_metrics_network_policy",
      "ssh_key_collection_allowed": false,
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_change_evidence",
      "sudo_action_authorized": false,
      "surface_id": "argocd_metrics_network_policy",
      "validation_plan": "pending_change_evidence",
      "validation_plan_accepted": false,
      "wireguard_change_authorized": false,
      "write_capable_surface": false
    },
    {
      "action_buttons_allowed": false,
      "actor_identified": false,
      "actor_role_or_team": "pending_change_evidence",
      "affected_host_or_route_aliases": [],
      "affected_ports_or_paths_ref": null,
      "affected_scope": "pending_change_evidence",
      "affected_scope_accepted": false,
      "after_state_accepted": false,
      "after_state_ref": null,
      "allowlist_or_denylist_ref": null,
      "before_state_accepted": false,
      "before_state_ref": null,
      "blocked_actions": [
        "ssh_read",
        "ssh_write",
        "live_firewall_read",
        "firewall_change",
        "port_change",
        "port_close",
        "port_open",
        "network_policy_apply",
        "nodeport_change",
        "wireguard_change",
        "sudo_action",
        "deploy_ssh_action",
        "route_smoke",
        "public_gateway_reload",
        "nginx_reload",
        "host_restart",
        "secret_value_collection",
        "ssh_key_collection",
        "raw_firewall_dump_storage",
        "raw_key_material_storage",
        "mark_change_evidence_accepted_without_reviewer_record",
        "mark_incident_resolved_without_health_evidence",
        "hide_cross_project_impact",
        "close_management_port_without_owner",
        "treat_break_glass_as_approval",
        "open_runtime_gate",
        "add_action_button",
        "production_write"
      ],
      "break_glass_owner": "pending_change_evidence",
      "change_evidence_accepted": false,
      "change_evidence_candidate_id": "port_firewall_change_evidence:argocd_metrics_nodeport",
      "change_evidence_fields": [
        "change_evidence_candidate_id",
        "source_acceptance_candidate_id",
        "surface_id",
        "config_kind",
        "control_tier",
        "write_capable_surface",
        "change_or_incident_ref",
        "actor_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "affected_host_or_route_aliases",
        "affected_ports_or_paths_ref",
        "before_state_ref",
        "after_state_ref",
        "firewall_rule_diff_ref",
        "allowlist_or_denylist_ref",
        "service_dependency_ref",
        "customer_impact_ref",
        "monitoring_alert_refs",
        "cross_project_sync_ref",
        "incident_severity",
        "incident_detected_at_ref",
        "restoration_time_ref",
        "service_health_impact_refs",
        "external_route_impact_refs",
        "emergency_change_classification",
        "operator_notification_refs",
        "incident_commander_or_owner",
        "maintenance_window",
        "rollback_owner",
        "rollback_plan_ref",
        "validation_plan",
        "postcheck_evidence_refs",
        "communication_owner",
        "break_glass_owner",
        "change_freeze_rule",
        "reviewer_outcome",
        "followup_owner",
        "not_approval"
      ],
      "change_evidence_quarantined": false,
      "change_evidence_received": false,
      "change_evidence_rejected": false,
      "change_freeze_rule": "pending_change_evidence",
      "change_or_incident_ref": null,
      "communication_owner": "pending_change_evidence",
      "config_kind": "k8s_nodeport_service",
      "control_tier": "C1",
      "cross_project_sync_accepted": false,
      "cross_project_sync_ref": null,
      "customer_impact_accepted": false,
      "customer_impact_ref": null,
      "decision": "pending_change_evidence",
      "decision_reason": "pending_change_evidence",
      "deploy_ssh_action_authorized": false,
      "emergency_change_classification": "pending_change_evidence",
      "emergency_change_classification_accepted": false,
      "expected_scope": "argocd_nodeport_30882_30883",
      "external_route_impact_refs": [],
      "firewall_change_authorized": false,
      "firewall_rule_diff_accepted": false,
      "firewall_rule_diff_ref": null,
      "followup_owner": "pending_change_evidence",
      "host_restart_authorized": false,
      "host_write_authorized": false,
      "impact_supplement_requested": false,
      "incident_backfill_only": true,
      "incident_commander_accepted": false,
      "incident_commander_or_owner": "pending_change_evidence",
      "incident_detected_at_ref": null,
      "incident_severity": "pending_change_evidence",
      "incident_severity_accepted": false,
      "live_firewall_read_authorized": false,
      "maintenance_window": "pending_change_evidence",
      "maintenance_window_accepted": false,
      "monitoring_alert_refs": [],
      "network_policy_apply_authorized": false,
      "nginx_reload_authorized": false,
      "nodeport_change_authorized": false,
      "not_approval": true,
      "operator_notification_accepted": false,
      "operator_notification_refs": [],
      "outcome_lanes": [
        "waiting_change_evidence",
        "quarantine_raw_firewall_dump",
        "reject_unattributed_change",
        "request_impact_supplement",
        "ready_for_network_review",
        "incident_backfill_only",
        "emergency_change_backfill_required",
        "owner_review_only_update",
        "waiting_runtime_gate"
      ],
      "port_change_authorized": false,
      "port_close_authorized": false,
      "port_open_authorized": false,
      "port_policy_accepted": false,
      "postcheck_evidence_accepted": false,
      "postcheck_evidence_refs": [],
      "production_write_authorized": false,
      "public_gateway_reload_authorized": false,
      "required_evidence_fields": [
        "change_or_incident_ref",
        "actor_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "affected_ports_or_paths_ref",
        "before_state_ref",
        "after_state_ref",
        "service_dependency_ref",
        "customer_impact_ref",
        "incident_severity",
        "restoration_time_ref",
        "service_health_impact_refs",
        "operator_notification_refs",
        "incident_commander_or_owner",
        "maintenance_window",
        "rollback_owner",
        "rollback_plan_ref",
        "validation_plan",
        "postcheck_evidence_refs",
        "cross_project_sync_ref"
      ],
      "restoration_time_accepted": false,
      "restoration_time_ref": null,
      "reviewer_checks": [
        "change_ref_present",
        "actor_role_traceable",
        "decision_reason_present",
        "affected_scope_matches_surface",
        "ports_or_paths_redacted",
        "before_after_state_refs",
        "firewall_diff_metadata_only",
        "dependency_impact_present",
        "customer_impact_review",
        "cross_project_sync_present",
        "incident_severity_present",
        "service_health_impact_present",
        "restoration_time_present",
        "operator_notification_present",
        "break_glass_classification_present",
        "maintenance_window_present",
        "rollback_owner_present",
        "postcheck_evidence_present",
        "secret_or_key_value_absent",
        "no_runtime_authorization",
        "counts_transition_safe"
      ],
      "reviewer_outcome": "waiting_change_evidence",
      "rollback_owner": "pending_change_evidence",
      "rollback_owner_accepted": false,
      "rollback_plan_accepted": false,
      "rollback_plan_ref": null,
      "route_smoke_authorized": false,
      "runtime_execution_authorized": false,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "service_dependency_accepted": false,
      "service_dependency_ref": null,
      "service_health_impact_accepted": false,
      "service_health_impact_refs": [],
      "source_acceptance_candidate_id": "ssh_network_owner_response_acceptance:argocd_metrics_nodeport",
      "ssh_key_collection_allowed": false,
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_change_evidence",
      "sudo_action_authorized": false,
      "surface_id": "argocd_metrics_nodeport",
      "validation_plan": "pending_change_evidence",
      "validation_plan_accepted": false,
      "wireguard_change_authorized": false,
      "write_capable_surface": false
    },
    {
      "action_buttons_allowed": false,
      "actor_identified": false,
      "actor_role_or_team": "pending_change_evidence",
      "affected_host_or_route_aliases": [],
      "affected_ports_or_paths_ref": null,
      "affected_scope": "pending_change_evidence",
      "affected_scope_accepted": false,
      "after_state_accepted": false,
      "after_state_ref": null,
      "allowlist_or_denylist_ref": null,
      "before_state_accepted": false,
      "before_state_ref": null,
      "blocked_actions": [
        "ssh_read",
        "ssh_write",
        "live_firewall_read",
        "firewall_change",
        "port_change",
        "port_close",
        "port_open",
        "network_policy_apply",
        "nodeport_change",
        "wireguard_change",
        "sudo_action",
        "deploy_ssh_action",
        "route_smoke",
        "public_gateway_reload",
        "nginx_reload",
        "host_restart",
        "secret_value_collection",
        "ssh_key_collection",
        "raw_firewall_dump_storage",
        "raw_key_material_storage",
        "mark_change_evidence_accepted_without_reviewer_record",
        "mark_incident_resolved_without_health_evidence",
        "hide_cross_project_impact",
        "close_management_port_without_owner",
        "treat_break_glass_as_approval",
        "open_runtime_gate",
        "add_action_button",
        "production_write"
      ],
      "break_glass_owner": "pending_change_evidence",
      "change_evidence_accepted": false,
      "change_evidence_candidate_id": "port_firewall_change_evidence:velero_metrics_nodeport",
      "change_evidence_fields": [
        "change_evidence_candidate_id",
        "source_acceptance_candidate_id",
        "surface_id",
        "config_kind",
        "control_tier",
        "write_capable_surface",
        "change_or_incident_ref",
        "actor_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "affected_host_or_route_aliases",
        "affected_ports_or_paths_ref",
        "before_state_ref",
        "after_state_ref",
        "firewall_rule_diff_ref",
        "allowlist_or_denylist_ref",
        "service_dependency_ref",
        "customer_impact_ref",
        "monitoring_alert_refs",
        "cross_project_sync_ref",
        "incident_severity",
        "incident_detected_at_ref",
        "restoration_time_ref",
        "service_health_impact_refs",
        "external_route_impact_refs",
        "emergency_change_classification",
        "operator_notification_refs",
        "incident_commander_or_owner",
        "maintenance_window",
        "rollback_owner",
        "rollback_plan_ref",
        "validation_plan",
        "postcheck_evidence_refs",
        "communication_owner",
        "break_glass_owner",
        "change_freeze_rule",
        "reviewer_outcome",
        "followup_owner",
        "not_approval"
      ],
      "change_evidence_quarantined": false,
      "change_evidence_received": false,
      "change_evidence_rejected": false,
      "change_freeze_rule": "pending_change_evidence",
      "change_or_incident_ref": null,
      "communication_owner": "pending_change_evidence",
      "config_kind": "k8s_nodeport_service",
      "control_tier": "C1",
      "cross_project_sync_accepted": false,
      "cross_project_sync_ref": null,
      "customer_impact_accepted": false,
      "customer_impact_ref": null,
      "decision": "pending_change_evidence",
      "decision_reason": "pending_change_evidence",
      "deploy_ssh_action_authorized": false,
      "emergency_change_classification": "pending_change_evidence",
      "emergency_change_classification_accepted": false,
      "expected_scope": "velero_nodeport_30885",
      "external_route_impact_refs": [],
      "firewall_change_authorized": false,
      "firewall_rule_diff_accepted": false,
      "firewall_rule_diff_ref": null,
      "followup_owner": "pending_change_evidence",
      "host_restart_authorized": false,
      "host_write_authorized": false,
      "impact_supplement_requested": false,
      "incident_backfill_only": true,
      "incident_commander_accepted": false,
      "incident_commander_or_owner": "pending_change_evidence",
      "incident_detected_at_ref": null,
      "incident_severity": "pending_change_evidence",
      "incident_severity_accepted": false,
      "live_firewall_read_authorized": false,
      "maintenance_window": "pending_change_evidence",
      "maintenance_window_accepted": false,
      "monitoring_alert_refs": [],
      "network_policy_apply_authorized": false,
      "nginx_reload_authorized": false,
      "nodeport_change_authorized": false,
      "not_approval": true,
      "operator_notification_accepted": false,
      "operator_notification_refs": [],
      "outcome_lanes": [
        "waiting_change_evidence",
        "quarantine_raw_firewall_dump",
        "reject_unattributed_change",
        "request_impact_supplement",
        "ready_for_network_review",
        "incident_backfill_only",
        "emergency_change_backfill_required",
        "owner_review_only_update",
        "waiting_runtime_gate"
      ],
      "port_change_authorized": false,
      "port_close_authorized": false,
      "port_open_authorized": false,
      "port_policy_accepted": false,
      "postcheck_evidence_accepted": false,
      "postcheck_evidence_refs": [],
      "production_write_authorized": false,
      "public_gateway_reload_authorized": false,
      "required_evidence_fields": [
        "change_or_incident_ref",
        "actor_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "affected_ports_or_paths_ref",
        "before_state_ref",
        "after_state_ref",
        "service_dependency_ref",
        "customer_impact_ref",
        "incident_severity",
        "restoration_time_ref",
        "service_health_impact_refs",
        "operator_notification_refs",
        "incident_commander_or_owner",
        "maintenance_window",
        "rollback_owner",
        "rollback_plan_ref",
        "validation_plan",
        "postcheck_evidence_refs",
        "cross_project_sync_ref"
      ],
      "restoration_time_accepted": false,
      "restoration_time_ref": null,
      "reviewer_checks": [
        "change_ref_present",
        "actor_role_traceable",
        "decision_reason_present",
        "affected_scope_matches_surface",
        "ports_or_paths_redacted",
        "before_after_state_refs",
        "firewall_diff_metadata_only",
        "dependency_impact_present",
        "customer_impact_review",
        "cross_project_sync_present",
        "incident_severity_present",
        "service_health_impact_present",
        "restoration_time_present",
        "operator_notification_present",
        "break_glass_classification_present",
        "maintenance_window_present",
        "rollback_owner_present",
        "postcheck_evidence_present",
        "secret_or_key_value_absent",
        "no_runtime_authorization",
        "counts_transition_safe"
      ],
      "reviewer_outcome": "waiting_change_evidence",
      "rollback_owner": "pending_change_evidence",
      "rollback_owner_accepted": false,
      "rollback_plan_accepted": false,
      "rollback_plan_ref": null,
      "route_smoke_authorized": false,
      "runtime_execution_authorized": false,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "service_dependency_accepted": false,
      "service_dependency_ref": null,
      "service_health_impact_accepted": false,
      "service_health_impact_refs": [],
      "source_acceptance_candidate_id": "ssh_network_owner_response_acceptance:velero_metrics_nodeport",
      "ssh_key_collection_allowed": false,
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_change_evidence",
      "sudo_action_authorized": false,
      "surface_id": "velero_metrics_nodeport",
      "validation_plan": "pending_change_evidence",
      "validation_plan_accepted": false,
      "wireguard_change_authorized": false,
      "write_capable_surface": false
    },
    {
      "action_buttons_allowed": false,
      "actor_identified": false,
      "actor_role_or_team": "pending_change_evidence",
      "affected_host_or_route_aliases": [],
      "affected_ports_or_paths_ref": null,
      "affected_scope": "pending_change_evidence",
      "affected_scope_accepted": false,
      "after_state_accepted": false,
      "after_state_ref": null,
      "allowlist_or_denylist_ref": null,
      "before_state_accepted": false,
      "before_state_ref": null,
      "blocked_actions": [
        "ssh_read",
        "ssh_write",
        "live_firewall_read",
        "firewall_change",
        "port_change",
        "port_close",
        "port_open",
        "network_policy_apply",
        "nodeport_change",
        "wireguard_change",
        "sudo_action",
        "deploy_ssh_action",
        "route_smoke",
        "public_gateway_reload",
        "nginx_reload",
        "host_restart",
        "secret_value_collection",
        "ssh_key_collection",
        "raw_firewall_dump_storage",
        "raw_key_material_storage",
        "mark_change_evidence_accepted_without_reviewer_record",
        "mark_incident_resolved_without_health_evidence",
        "hide_cross_project_impact",
        "close_management_port_without_owner",
        "treat_break_glass_as_approval",
        "open_runtime_gate",
        "add_action_button",
        "production_write"
      ],
      "break_glass_owner": "pending_change_evidence",
      "change_evidence_accepted": false,
      "change_evidence_candidate_id": "port_firewall_change_evidence:wireguard_mesh_runbook",
      "change_evidence_fields": [
        "change_evidence_candidate_id",
        "source_acceptance_candidate_id",
        "surface_id",
        "config_kind",
        "control_tier",
        "write_capable_surface",
        "change_or_incident_ref",
        "actor_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "affected_host_or_route_aliases",
        "affected_ports_or_paths_ref",
        "before_state_ref",
        "after_state_ref",
        "firewall_rule_diff_ref",
        "allowlist_or_denylist_ref",
        "service_dependency_ref",
        "customer_impact_ref",
        "monitoring_alert_refs",
        "cross_project_sync_ref",
        "incident_severity",
        "incident_detected_at_ref",
        "restoration_time_ref",
        "service_health_impact_refs",
        "external_route_impact_refs",
        "emergency_change_classification",
        "operator_notification_refs",
        "incident_commander_or_owner",
        "maintenance_window",
        "rollback_owner",
        "rollback_plan_ref",
        "validation_plan",
        "postcheck_evidence_refs",
        "communication_owner",
        "break_glass_owner",
        "change_freeze_rule",
        "reviewer_outcome",
        "followup_owner",
        "not_approval"
      ],
      "change_evidence_quarantined": false,
      "change_evidence_received": false,
      "change_evidence_rejected": false,
      "change_freeze_rule": "pending_change_evidence",
      "change_or_incident_ref": null,
      "communication_owner": "pending_change_evidence",
      "config_kind": "wireguard_runbook",
      "control_tier": "C1",
      "cross_project_sync_accepted": false,
      "cross_project_sync_ref": null,
      "customer_impact_accepted": false,
      "customer_impact_ref": null,
      "decision": "pending_change_evidence",
      "decision_reason": "pending_change_evidence",
      "deploy_ssh_action_authorized": false,
      "emergency_change_classification": "pending_change_evidence",
      "emergency_change_classification_accepted": false,
      "expected_scope": "110_111_120_121_gcp_a_gcp_b",
      "external_route_impact_refs": [],
      "firewall_change_authorized": false,
      "firewall_rule_diff_accepted": false,
      "firewall_rule_diff_ref": null,
      "followup_owner": "pending_change_evidence",
      "host_restart_authorized": false,
      "host_write_authorized": false,
      "impact_supplement_requested": false,
      "incident_backfill_only": true,
      "incident_commander_accepted": false,
      "incident_commander_or_owner": "pending_change_evidence",
      "incident_detected_at_ref": null,
      "incident_severity": "pending_change_evidence",
      "incident_severity_accepted": false,
      "live_firewall_read_authorized": false,
      "maintenance_window": "pending_change_evidence",
      "maintenance_window_accepted": false,
      "monitoring_alert_refs": [],
      "network_policy_apply_authorized": false,
      "nginx_reload_authorized": false,
      "nodeport_change_authorized": false,
      "not_approval": true,
      "operator_notification_accepted": false,
      "operator_notification_refs": [],
      "outcome_lanes": [
        "waiting_change_evidence",
        "quarantine_raw_firewall_dump",
        "reject_unattributed_change",
        "request_impact_supplement",
        "ready_for_network_review",
        "incident_backfill_only",
        "emergency_change_backfill_required",
        "owner_review_only_update",
        "waiting_runtime_gate"
      ],
      "port_change_authorized": false,
      "port_close_authorized": false,
      "port_open_authorized": false,
      "port_policy_accepted": false,
      "postcheck_evidence_accepted": false,
      "postcheck_evidence_refs": [],
      "production_write_authorized": false,
      "public_gateway_reload_authorized": false,
      "required_evidence_fields": [
        "change_or_incident_ref",
        "actor_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "affected_ports_or_paths_ref",
        "before_state_ref",
        "after_state_ref",
        "service_dependency_ref",
        "customer_impact_ref",
        "incident_severity",
        "restoration_time_ref",
        "service_health_impact_refs",
        "operator_notification_refs",
        "incident_commander_or_owner",
        "maintenance_window",
        "rollback_owner",
        "rollback_plan_ref",
        "validation_plan",
        "postcheck_evidence_refs",
        "cross_project_sync_ref"
      ],
      "restoration_time_accepted": false,
      "restoration_time_ref": null,
      "reviewer_checks": [
        "change_ref_present",
        "actor_role_traceable",
        "decision_reason_present",
        "affected_scope_matches_surface",
        "ports_or_paths_redacted",
        "before_after_state_refs",
        "firewall_diff_metadata_only",
        "dependency_impact_present",
        "customer_impact_review",
        "cross_project_sync_present",
        "incident_severity_present",
        "service_health_impact_present",
        "restoration_time_present",
        "operator_notification_present",
        "break_glass_classification_present",
        "maintenance_window_present",
        "rollback_owner_present",
        "postcheck_evidence_present",
        "secret_or_key_value_absent",
        "no_runtime_authorization",
        "counts_transition_safe"
      ],
      "reviewer_outcome": "waiting_change_evidence",
      "rollback_owner": "pending_change_evidence",
      "rollback_owner_accepted": false,
      "rollback_plan_accepted": false,
      "rollback_plan_ref": null,
      "route_smoke_authorized": false,
      "runtime_execution_authorized": false,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "service_dependency_accepted": false,
      "service_dependency_ref": null,
      "service_health_impact_accepted": false,
      "service_health_impact_refs": [],
      "source_acceptance_candidate_id": "ssh_network_owner_response_acceptance:wireguard_mesh_runbook",
      "ssh_key_collection_allowed": false,
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_change_evidence",
      "sudo_action_authorized": false,
      "surface_id": "wireguard_mesh_runbook",
      "validation_plan": "pending_change_evidence",
      "validation_plan_accepted": false,
      "wireguard_change_authorized": false,
      "write_capable_surface": false
    },
    {
      "action_buttons_allowed": false,
      "actor_identified": false,
      "actor_role_or_team": "pending_change_evidence",
      "affected_host_or_route_aliases": [],
      "affected_ports_or_paths_ref": null,
      "affected_scope": "pending_change_evidence",
      "affected_scope_accepted": false,
      "after_state_accepted": false,
      "after_state_ref": null,
      "allowlist_or_denylist_ref": null,
      "before_state_accepted": false,
      "before_state_ref": null,
      "blocked_actions": [
        "ssh_read",
        "ssh_write",
        "live_firewall_read",
        "firewall_change",
        "port_change",
        "port_close",
        "port_open",
        "network_policy_apply",
        "nodeport_change",
        "wireguard_change",
        "sudo_action",
        "deploy_ssh_action",
        "route_smoke",
        "public_gateway_reload",
        "nginx_reload",
        "host_restart",
        "secret_value_collection",
        "ssh_key_collection",
        "raw_firewall_dump_storage",
        "raw_key_material_storage",
        "mark_change_evidence_accepted_without_reviewer_record",
        "mark_incident_resolved_without_health_evidence",
        "hide_cross_project_impact",
        "close_management_port_without_owner",
        "treat_break_glass_as_approval",
        "open_runtime_gate",
        "add_action_button",
        "production_write"
      ],
      "break_glass_owner": "pending_change_evidence",
      "change_evidence_accepted": false,
      "change_evidence_candidate_id": "port_firewall_change_evidence:alert_rules_ssh_actions",
      "change_evidence_fields": [
        "change_evidence_candidate_id",
        "source_acceptance_candidate_id",
        "surface_id",
        "config_kind",
        "control_tier",
        "write_capable_surface",
        "change_or_incident_ref",
        "actor_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "affected_host_or_route_aliases",
        "affected_ports_or_paths_ref",
        "before_state_ref",
        "after_state_ref",
        "firewall_rule_diff_ref",
        "allowlist_or_denylist_ref",
        "service_dependency_ref",
        "customer_impact_ref",
        "monitoring_alert_refs",
        "cross_project_sync_ref",
        "incident_severity",
        "incident_detected_at_ref",
        "restoration_time_ref",
        "service_health_impact_refs",
        "external_route_impact_refs",
        "emergency_change_classification",
        "operator_notification_refs",
        "incident_commander_or_owner",
        "maintenance_window",
        "rollback_owner",
        "rollback_plan_ref",
        "validation_plan",
        "postcheck_evidence_refs",
        "communication_owner",
        "break_glass_owner",
        "change_freeze_rule",
        "reviewer_outcome",
        "followup_owner",
        "not_approval"
      ],
      "change_evidence_quarantined": false,
      "change_evidence_received": false,
      "change_evidence_rejected": false,
      "change_freeze_rule": "pending_change_evidence",
      "change_or_incident_ref": null,
      "communication_owner": "pending_change_evidence",
      "config_kind": "alert_ssh_action_rules",
      "control_tier": "C1",
      "cross_project_sync_accepted": false,
      "cross_project_sync_ref": null,
      "customer_impact_accepted": false,
      "customer_impact_ref": null,
      "decision": "pending_change_evidence",
      "decision_reason": "pending_change_evidence",
      "deploy_ssh_action_authorized": false,
      "emergency_change_classification": "pending_change_evidence",
      "emergency_change_classification_accepted": false,
      "expected_scope": "ssh_mcp_action_catalog",
      "external_route_impact_refs": [],
      "firewall_change_authorized": false,
      "firewall_rule_diff_accepted": false,
      "firewall_rule_diff_ref": null,
      "followup_owner": "pending_change_evidence",
      "host_restart_authorized": false,
      "host_write_authorized": false,
      "impact_supplement_requested": false,
      "incident_backfill_only": true,
      "incident_commander_accepted": false,
      "incident_commander_or_owner": "pending_change_evidence",
      "incident_detected_at_ref": null,
      "incident_severity": "pending_change_evidence",
      "incident_severity_accepted": false,
      "live_firewall_read_authorized": false,
      "maintenance_window": "pending_change_evidence",
      "maintenance_window_accepted": false,
      "monitoring_alert_refs": [],
      "network_policy_apply_authorized": false,
      "nginx_reload_authorized": false,
      "nodeport_change_authorized": false,
      "not_approval": true,
      "operator_notification_accepted": false,
      "operator_notification_refs": [],
      "outcome_lanes": [
        "waiting_change_evidence",
        "quarantine_raw_firewall_dump",
        "reject_unattributed_change",
        "request_impact_supplement",
        "ready_for_network_review",
        "incident_backfill_only",
        "emergency_change_backfill_required",
        "owner_review_only_update",
        "waiting_runtime_gate"
      ],
      "port_change_authorized": false,
      "port_close_authorized": false,
      "port_open_authorized": false,
      "port_policy_accepted": false,
      "postcheck_evidence_accepted": false,
      "postcheck_evidence_refs": [],
      "production_write_authorized": false,
      "public_gateway_reload_authorized": false,
      "required_evidence_fields": [
        "change_or_incident_ref",
        "actor_role_or_team",
        "decision",
        "decision_reason",
        "affected_scope",
        "affected_ports_or_paths_ref",
        "before_state_ref",
        "after_state_ref",
        "service_dependency_ref",
        "customer_impact_ref",
        "incident_severity",
        "restoration_time_ref",
        "service_health_impact_refs",
        "operator_notification_refs",
        "incident_commander_or_owner",
        "maintenance_window",
        "rollback_owner",
        "rollback_plan_ref",
        "validation_plan",
        "postcheck_evidence_refs",
        "cross_project_sync_ref"
      ],
      "restoration_time_accepted": false,
      "restoration_time_ref": null,
      "reviewer_checks": [
        "change_ref_present",
        "actor_role_traceable",
        "decision_reason_present",
        "affected_scope_matches_surface",
        "ports_or_paths_redacted",
        "before_after_state_refs",
        "firewall_diff_metadata_only",
        "dependency_impact_present",
        "customer_impact_review",
        "cross_project_sync_present",
        "incident_severity_present",
        "service_health_impact_present",
        "restoration_time_present",
        "operator_notification_present",
        "break_glass_classification_present",
        "maintenance_window_present",
        "rollback_owner_present",
        "postcheck_evidence_present",
        "secret_or_key_value_absent",
        "no_runtime_authorization",
        "counts_transition_safe"
      ],
      "reviewer_outcome": "waiting_change_evidence",
      "rollback_owner": "pending_change_evidence",
      "rollback_owner_accepted": false,
      "rollback_plan_accepted": false,
      "rollback_plan_ref": null,
      "route_smoke_authorized": false,
      "runtime_execution_authorized": false,
      "runtime_gate": false,
      "secret_value_collection_allowed": false,
      "service_dependency_accepted": false,
      "service_dependency_ref": null,
      "service_health_impact_accepted": false,
      "service_health_impact_refs": [],
      "source_acceptance_candidate_id": "ssh_network_owner_response_acceptance:alert_rules_ssh_actions",
      "ssh_key_collection_allowed": false,
      "ssh_read_authorized": false,
      "ssh_write_authorized": false,
      "status": "waiting_change_evidence",
      "sudo_action_authorized": false,
      "surface_id": "alert_rules_ssh_actions",
      "validation_plan": "pending_change_evidence",
      "validation_plan_accepted": false,
      "wireguard_change_authorized": false,
      "write_capable_surface": true
    }
  ],
  "change_evidence_fields": [
    "change_evidence_candidate_id",
    "source_acceptance_candidate_id",
    "surface_id",
    "config_kind",
    "control_tier",
    "write_capable_surface",
    "change_or_incident_ref",
    "actor_role_or_team",
    "decision",
    "decision_reason",
    "affected_scope",
    "affected_host_or_route_aliases",
    "affected_ports_or_paths_ref",
    "before_state_ref",
    "after_state_ref",
    "firewall_rule_diff_ref",
    "allowlist_or_denylist_ref",
    "service_dependency_ref",
    "customer_impact_ref",
    "monitoring_alert_refs",
    "cross_project_sync_ref",
    "incident_severity",
    "incident_detected_at_ref",
    "restoration_time_ref",
    "service_health_impact_refs",
    "external_route_impact_refs",
    "emergency_change_classification",
    "operator_notification_refs",
    "incident_commander_or_owner",
    "maintenance_window",
    "rollback_owner",
    "rollback_plan_ref",
    "validation_plan",
    "postcheck_evidence_refs",
    "communication_owner",
    "break_glass_owner",
    "change_freeze_rule",
    "reviewer_outcome",
    "followup_owner",
    "not_approval"
  ],
  "execution_boundaries": {
    "action_buttons_allowed": false,
    "change_evidence_acceptance_authorized": false,
    "deploy_ssh_action_authorized": false,
    "firewall_change_authorized": false,
    "host_restart_authorized": false,
    "host_write_authorized": false,
    "live_firewall_read_authorized": false,
    "live_host_read_authorized": false,
    "network_policy_apply_authorized": false,
    "nginx_reload_authorized": false,
    "nodeport_change_authorized": false,
    "not_authorization": true,
    "port_change_authorized": false,
    "port_close_authorized": false,
    "port_open_authorized": false,
    "production_write_authorized": false,
    "public_gateway_reload_authorized": false,
    "route_smoke_authorized": false,
    "runtime_execution_authorized": false,
    "secret_value_collection_allowed": false,
    "ssh_key_collection_allowed": false,
    "ssh_read_authorized": false,
    "ssh_write_authorized": false,
    "sudo_action_authorized": false,
    "wireguard_change_authorized": false
  },
  "generated_at": "2026-06-15T10:05:00+08:00",
  "git_commit": "952c9288",
  "next_steps": [
    "等待 owner-provided change / incident evidence；未收到前不得更新 accepted count。",
    "收到證據後先檢查 actor、affected scope、before / after state、impact、rollback、post-check 與 cross-project sync。",
    "metadata 合格也只能進 network / firewall reviewer review；端口、防火牆、NetworkPolicy、NodePort、WireGuard 與 route smoke 仍需獨立人工批准。"
  ],
  "outcome_lanes": [
    {
      "lane_id": "waiting_change_evidence",
      "meaning": "尚未收到端口 / 防火牆變更證據；所有 accepted / runtime count 維持 0。"
    },
    {
      "lane_id": "quarantine_raw_firewall_dump",
      "meaning": "收到 raw firewall dump、secret 或 key material 時只能隔離。"
    },
    {
      "lane_id": "reject_unattributed_change",
      "meaning": "無 actor、無 owner、無 affected scope 或無 rollback 的變更不得驗收。"
    },
    {
      "lane_id": "request_impact_supplement",
      "meaning": "缺 before/after、impact、dependency、post-check 或 cross-project sync 時要求補件。"
    },
    {
      "lane_id": "ready_for_network_review",
      "meaning": "metadata 合格後，只能進 network / firewall reviewer review。"
    },
    {
      "lane_id": "incident_backfill_only",
      "meaning": "事故回補只能更新只讀 ledger，不得反向視為已批准操作。"
    },
    {
      "lane_id": "emergency_change_backfill_required",
      "meaning": "緊急端口 / 防火牆變更需補 actor、severity、health impact、通知、恢復與 rollback evidence。"
    },
    {
      "lane_id": "owner_review_only_update",
      "meaning": "只允許更新 reviewer ledger，不改 firewall、port、route 或 host。"
    },
    {
      "lane_id": "waiting_runtime_gate",
      "meaning": "即使證據 accepted，runtime gate 仍需獨立人工批准。"
    }
  ],
  "required_evidence_fields": [
    "change_or_incident_ref",
    "actor_role_or_team",
    "decision",
    "decision_reason",
    "affected_scope",
    "affected_ports_or_paths_ref",
    "before_state_ref",
    "after_state_ref",
    "service_dependency_ref",
    "customer_impact_ref",
    "incident_severity",
    "restoration_time_ref",
    "service_health_impact_refs",
    "operator_notification_refs",
    "incident_commander_or_owner",
    "maintenance_window",
    "rollback_owner",
    "rollback_plan_ref",
    "validation_plan",
    "postcheck_evidence_refs",
    "cross_project_sync_ref"
  ],
  "reviewer_checks": [
    {
      "check_id": "change_ref_present",
      "instruction": "必須有可追溯的 change / incident ref。"
    },
    {
      "check_id": "actor_role_traceable",
      "instruction": "必須標示 actor role / team，不接受匿名端口變更。"
    },
    {
      "check_id": "decision_reason_present",
      "instruction": "decision 與 decision reason 必須同時存在。"
    },
    {
      "check_id": "affected_scope_matches_surface",
      "instruction": "affected scope 必須能對回既有 SSH / network surface。"
    },
    {
      "check_id": "ports_or_paths_redacted",
      "instruction": "端口、路徑、host alias 只能收脫敏摘要或 owner-provided ref。"
    },
    {
      "check_id": "before_after_state_refs",
      "instruction": "需有變更前後狀態 ref，不能只有口頭說明。"
    },
    {
      "check_id": "firewall_diff_metadata_only",
      "instruction": "firewall diff 僅收 metadata ref，不保存 raw firewall dump。"
    },
    {
      "check_id": "dependency_impact_present",
      "instruction": "必須列出受影響服務、agent、監控、公開入口或後台路徑。"
    },
    {
      "check_id": "customer_impact_review",
      "instruction": "若造成服務異常，需有 customer / product impact ref。"
    },
    {
      "check_id": "cross_project_sync_present",
      "instruction": "需標示已同步受影響產品 / Session / owner，不得單點改動。"
    },
    {
      "check_id": "incident_severity_present",
      "instruction": "事故型端口變更需標示嚴重度與判定依據。"
    },
    {
      "check_id": "service_health_impact_present",
      "instruction": "需列出受影響健康檢查、agent provider、public route 或 monitoring evidence ref。"
    },
    {
      "check_id": "restoration_time_present",
      "instruction": "已恢復事故需提供恢復時間或 still-degraded ref；不可只寫已處理。"
    },
    {
      "check_id": "operator_notification_present",
      "instruction": "需提供已通知受影響產品 / owner / Session 的脫敏 ref。"
    },
    {
      "check_id": "break_glass_classification_present",
      "instruction": "若為緊急變更，必須標示 break-glass 分類與回補責任。"
    },
    {
      "check_id": "maintenance_window_present",
      "instruction": "未來變更需有維護窗口；事故回補也需標記 break-glass。"
    },
    {
      "check_id": "rollback_owner_present",
      "instruction": "rollback owner 與 rollback plan 必須同時存在。"
    },
    {
      "check_id": "postcheck_evidence_present",
      "instruction": "post-check evidence 必須覆蓋 API / route / agent / monitoring。"
    },
    {
      "check_id": "secret_or_key_value_absent",
      "instruction": "不得包含 secret、SSH key、token、cookie 或私鑰內容。"
    },
    {
      "check_id": "no_runtime_authorization",
      "instruction": "驗收證據不等於允許 firewall / port / route 變更。"
    },
    {
      "check_id": "counts_transition_safe",
      "instruction": "只有 reviewer record 能更新 accepted count，且不得同時開 runtime gate。"
    }
  ],
  "schema_version": "port_firewall_change_evidence_acceptance_v1",
  "source_acceptance_schema_version": "ssh_network_owner_response_acceptance_v1",
  "source_acceptance_status": "owner_response_acceptance_ledger_ready_no_runtime_action",
  "status": "change_evidence_acceptance_ready_no_runtime_action",
  "summary": {
    "action_button_count": 0,
    "actor_identified_count": 0,
    "affected_scope_accepted_count": 0,
    "after_state_accepted_count": 0,
    "before_state_accepted_count": 0,
    "blocked_action_count": 28,
    "change_evidence_accepted_count": 0,
    "change_evidence_candidate_count": 14,
    "change_evidence_field_count": 40,
    "change_evidence_quarantined_count": 0,
    "change_evidence_received_count": 0,
    "change_evidence_rejected_count": 0,
    "cross_project_sync_accepted_count": 0,
    "customer_impact_accepted_count": 0,
    "deploy_ssh_action_authorized_count": 0,
    "emergency_change_classification_accepted_count": 0,
    "firewall_change_authorized_count": 0,
    "firewall_rule_diff_accepted_count": 0,
    "host_restart_authorized_count": 0,
    "host_write_authorized_count": 0,
    "impact_supplement_requested_count": 0,
    "incident_commander_accepted_count": 0,
    "incident_severity_accepted_count": 0,
    "live_firewall_read_authorized_count": 0,
    "maintenance_window_accepted_count": 0,
    "network_policy_apply_authorized_count": 0,
    "nginx_reload_authorized_count": 0,
    "nodeport_change_authorized_count": 0,
    "operator_notification_accepted_count": 0,
    "outcome_lane_count": 9,
    "policy_or_exposure_candidate_count": 5,
    "port_change_authorized_count": 0,
    "port_close_authorized_count": 0,
    "port_open_authorized_count": 0,
    "port_policy_accepted_count": 0,
    "postcheck_evidence_accepted_count": 0,
    "public_gateway_reload_authorized_count": 0,
    "required_evidence_field_count": 21,
    "restoration_time_accepted_count": 0,
    "reviewer_check_count": 21,
    "rollback_owner_accepted_count": 0,
    "rollback_plan_accepted_count": 0,
    "route_smoke_authorized_count": 0,
    "runtime_gate_count": 0,
    "secret_value_collection_allowed_count": 0,
    "service_dependency_accepted_count": 0,
    "service_health_impact_accepted_count": 0,
    "source_acceptance_candidate_count": 16,
    "ssh_key_collection_allowed_count": 0,
    "ssh_read_authorized_count": 0,
    "ssh_write_authorized_count": 0,
    "sudo_action_authorized_count": 0,
    "validation_plan_accepted_count": 0,
    "wireguard_change_authorized_count": 0,
    "write_capable_change_evidence_candidate_count": 6
  }
}