awoooi/docs/operations/AWOOOI-STATUS-CLEANUP-DASHBOARD.md

AWOOOI 狀態清理儀表板

• generated_at: 2026-06-24T15:39:52+00:00
• dashboard_status: blocked_status_cleanup_apply_not_authorized
• overall_completion_percent: 41.9%
• gates: 5/5 blocked
• owner_flags: 0/6
• sections: 0/7
• confirmed_commands: 0/1
• artifact_count: 47
• wazuh_handoff: blocked_not_released base=b540fc0c patches=7
• wazuh_live_metadata: owner=0 secret_metadata=0
• wazuh_live_agent_registry_readback: 0
• iwooos_wazuh_runtime_gate: 0
• wazuh_active_response_count: 0
• wazuh_agent_visibility_status: blocked_waiting_manager_agent_registry_readback
• memory_write_authorized: False
• runtime_execution_authorized: False
• wazuh_api_live_query_authorized: False

指標卡片

指標	數值	狀態	說明
overall_completion	41.9%	orange	產品 Runtime 治理完成度計分卡
project_status_age	11 days	blocked	stale_after_days=2
owner_flags	0/6	blocked	pending_owner_response
approved_sections	0/7	blocked	targets=0/1
execution_preview	blocked_owner_response_preflight_not_ready	blocked	dry_run_only=true
apply_confirmation	0/1	blocked	pending_final_confirmation
artifact_sync	1/2	blocked	artifacts=47

閘門卡片

閘門	狀態	是否封鎖	證據
status_cleanup_preflight	blocked_status_cleanup_required	True	docs/operations/codex-status-cleanup-preflight.snapshot.json
owner_review_package	owner_decision_required	True	docs/operations/codex-status-cleanup-owner-review-package.snapshot.json
owner_response_preflight	blocked_owner_response_required	True	docs/operations/codex-status-cleanup-owner-response-preflight.snapshot.json
execution_plan	blocked_owner_response_preflight_not_ready	True	docs/operations/codex-status-cleanup-execution-plan.snapshot.json
apply_gate	blocked_status_cleanup_apply_not_authorized	True	docs/operations/codex-status-cleanup-apply-gate.snapshot.json

風險控制

控制項	狀態	已授權
memory_write	blocked_final_apply_gate_required	False
raw_codex_history	blocked_raw_history_never_synced	False
wazuh_runtime	blocked_iwooos_runtime_lane_only	False
workflow	blocked_workflow_authorization_required	False
repo_refs	blocked_source_control_approval_required	False
host	blocked_host_maintenance_required	False
backup_restore	blocked_data_owner_approval_required	False
ui	blocked_apps_web_readiness_required	False

下一步

• 收齊 owner 旗標：0/6。
• 收齊已批准章節：0/7。
• 確認目標路徑：0/1。
• 確認邊界 acknowledgement：0/5。
• owner response preflight ready 後，重新產生 dry-run execution plan。
• apply gate 目前 apply_allowed=False；未變 true 前不得寫 project_current_status。

封鎖原因

• project_current_status 過期只代表需要狀態清理，不代表可修改 memory / runtime。
• 不得把一般『批准繼續』解讀成 force push、workflow copy、workflow trigger、repo creation 或 refs sync 授權。
• 不得同步 raw Codex App DB / auth / conversations / sessions。
• 不得碰 MacBook Pro MOMO PRO protected legacy paths。
• 不得新增 Wazuh / Kali / SOC runtime UI/API 或 live query。
• 不得 SSH 修改主機、改 firewall / Nginx / Docker / K8s 或執行 active scan。
• Data / Backup coverage 是治理 evidence，不是 backup / restore / migration executor。
• owner_response_preflight:owner_response_status_not_approved_status_cleanup_preview
• owner_response_preflight:owner_flag_not_accepted:accept_status_cleanup_scope
• owner_response_preflight:owner_flag_not_accepted:approve_project_current_status_update_preview
• owner_response_preflight:owner_flag_not_accepted:confirm_latest_logbook_and_scorecard_as_sources
• owner_response_preflight:owner_flag_not_accepted:confirm_no_runtime_or_host_authorization
• owner_response_preflight:owner_flag_not_accepted:confirm_no_raw_codex_history_sync
• owner_response_preflight:owner_flag_not_accepted:confirm_iwooos_wazuh_boundary_preserved
• owner_response_preflight:update_section_not_approved:artifact_sync_gate
• owner_response_preflight:update_section_not_approved:completion_scorecard
• owner_response_preflight:update_section_not_approved:data_backup_gate
• owner_response_preflight:update_section_not_approved:gitea_warning_gate
• owner_response_preflight:update_section_not_approved:iwooos_wazuh_boundary
• owner_response_preflight:update_section_not_approved:latest_logbook_heading
• owner_response_preflight:update_section_not_approved:operation_boundaries
• owner_response_preflight:target_path_not_approved:awoooi_memory/project_current_status.md
• owner_response_preflight:boundary_not_acknowledged:memory_write_authorized=false
• owner_response_preflight:boundary_not_acknowledged:refs_sync_authorized=false
• owner_response_preflight:boundary_not_acknowledged:repo_creation_authorized=false
• owner_response_preflight:boundary_not_acknowledged:runtime_execution_authorized=false
• owner_response_preflight:boundary_not_acknowledged:wazuh_api_live_query_authorized=false
• execution_plan_blocked_until:owner response preflight ready_for_status_cleanup_apply_gate=true
• execution_plan_blocked_until:all owner flags accepted
• execution_plan_blocked_until:all update sections approved
• execution_plan_blocked_until:target path approved
• execution_plan_blocked_until:all critical false boundaries acknowledged
• execution_plan_blocked_until:final status cleanup apply confirmation accepted
• apply_gate:execution_plan_not_ready_for_final_confirmation
• apply_gate:owner_response_preflight_not_ready
• apply_gate:final_confirmation_status_not_approved_status_cleanup_apply
• apply_gate:final_flag_not_accepted:confirm_status_cleanup_command_preview
• apply_gate:final_flag_not_accepted:confirm_project_current_status_target_path
• apply_gate:final_flag_not_accepted:confirm_post_apply_validation
• apply_gate:final_flag_not_accepted:confirm_no_runtime_or_wazuh_deploy
• apply_gate:command_preview_not_confirmed
• apply_gate:target_path_not_confirmed:awoooi_memory/project_current_status.md
• wazuh_boundary:Wazuh route / production 404 由另一受控 branch 處理；branch=codex/iwooos-wazuh-boundary-guard-20260624 base=b540fc0c commits=38dc3c2f,9a53d3e1,e9972d47,758d419e,04db4b8a,8eec298e,325f262a patch_sha_1=08f8b36d7261b0dde6bfb0c47597bd0727d578dec3335c5ff7ded2bcaa2b7eb4 patch_sha_2=e6ec8f8d10e8a2bd711c399fa14ba0ab2dfb22f8ab6a733402944302eec7da7c patch_sha_3=7e99bd5284a25519313aea05bb314d3386454b91ce86241424385752d358900d patch_sha_4=f4ffbaecd94d3696660766cc6f4a6bd195762bc533d9502f8edfed2bb8379fab patch_sha_5=9035d6c411bf86d0857970b69dd33631f052aa90de27e52d82d448d4b8e4cec5 patch_sha_6=d3bb98711a3ebf91b9936b41bc232b689befc68a4a7cec38bf9cab4c8d015827 patch_sha_7=5aa3e69fee9624d0ff3f2bfad90595a81eb9306ad6387d640690a85a2f8038d7 apply_proof=release_apply_check_20260624_2248 release_gate=source1_push0_deploy0_readback0_runtime0 release_lane_preflight=ready0_acks0of6_evidence0of6_push0_deploy0_readback0_runtime0 owner_gate=request_sent0_response_accepted0_acks0of6_evidence0of6_push0_deploy0_readback0_runtime0 live_metadata_env_gate=owner0_secret_metadata0_push0_deploy0_readback0_runtime0；wazuh_live_agent_registry_readback=0 manager_agent_registry_readback_passed=false iwooos_live_route_readback_passed=false dashboard_agent_list_recovered=false iwooos_wazuh_runtime_gate=0 active_response=0；push_blocked=missing_noninteractive_gitea_https_credential；本視窗不改 runtime / Nginx / Docker / K8s / firewall / Wazuh secret。 agent_visibility_status=blocked_waiting_manager_agent_registry_readback agent_visibility_runtime_gate_count=0

強制閘門

• 本 dashboard 只整合 read-only snapshots，不代表 project_current_status / memory 已更新。
• memory_write_authorized=false 時不得修改 project_current_status 或任何 Memory 檔案。
• 不得同步 raw Codex App DB / auth / conversations / sessions。
• 不得把一般批准繼續視為 owner response 或 final apply confirmation。
• 不得新增 Wazuh / Kali / SOC runtime UI/API、live query、active response 或 host containment。
• 不得修改 Nginx / Docker / K8s / firewall / Wazuh secret，也不得重啟 host。
• 不得修改 .gitea/workflows、workflow_dispatch、repo refs、GitHub mirror 或 Gitea environment。
• 不得執行 backup、restore、migration、kubectl、docker compose up 或資料庫寫入。
• apps/web build/i18n 必要檔案未恢復前，本 dashboard 只可作 page model 資料，不代表 UI 實作授權。