3839 lines
152 KiB
JSON
3839 lines
152 KiB
JSON
{
|
|
"schema_version": "iwooos_posture_projection_v1",
|
|
"status": "draft",
|
|
"date": "2026-05-19",
|
|
"product_id": "iwooos",
|
|
"display_name": "IwoooS",
|
|
"mode": "mirror_only",
|
|
"source_paths": [
|
|
"docs/security/security-mirror-status-rollup.snapshot.json",
|
|
"docs/security/security-rollout-policy.snapshot.json",
|
|
"docs/security/source-control-owner-response-validation-rollup.snapshot.json",
|
|
"docs/security/kali-integration-status.snapshot.json",
|
|
"apps/web/src/app/[locale]/iwooos/page.tsx",
|
|
"apps/web/src/app/[locale]/security-compliance/page.tsx",
|
|
"apps/web/src/app/[locale]/security/page.tsx",
|
|
"apps/web/src/app/[locale]/compliance/page.tsx",
|
|
"apps/web/src/app/[locale]/alerts/page.tsx",
|
|
"apps/web/src/app/[locale]/errors/page.tsx",
|
|
"apps/web/src/app/[locale]/authorizations/page.tsx",
|
|
"apps/web/src/app/[locale]/governance/page.tsx",
|
|
"apps/web/src/app/[locale]/alert-operation-logs/page.tsx",
|
|
"apps/web/src/app/[locale]/awooop/approvals/page.tsx",
|
|
"apps/web/src/app/[locale]/code-review/page.tsx"
|
|
],
|
|
"summary": {
|
|
"route_path": "/iwooos",
|
|
"nav_entry_added": true,
|
|
"command_palette_entry_added": true,
|
|
"contract_count": 36,
|
|
"active_runtime_gate_count": 0,
|
|
"approval_queue_total": 8,
|
|
"pending_approval_count": 7,
|
|
"block_candidate_count": 1,
|
|
"owner_response_validation_received_count": 0,
|
|
"owner_response_validation_accepted_count": 0,
|
|
"github_primary_ready_count": 0,
|
|
"action_buttons_allowed": false,
|
|
"existing_frontend_surface_count": 10,
|
|
"frontend_surface_coverage_group_count": 4,
|
|
"frontend_surface_conflict_control_count": 5,
|
|
"operator_journey_step_count": 6,
|
|
"owner_evidence_readiness_item_count": 7,
|
|
"host_coverage_item_count": 3,
|
|
"host_action_gate_item_count": 6,
|
|
"host_evidence_readiness_item_count": 7,
|
|
"host_evidence_collection_step_count": 7,
|
|
"host_evidence_intake_preflight_check_count": 7,
|
|
"host_evidence_review_outcome_lane_count": 7,
|
|
"host_evidence_review_handoff_packet_count": 7,
|
|
"host_evidence_reviewer_checklist_item_count": 7,
|
|
"host_evidence_reviewer_outcome_lane_count": 7,
|
|
"host_owner_decision_candidate_packet_count": 7,
|
|
"host_owner_decision_review_checklist_item_count": 7,
|
|
"host_owner_decision_review_outcome_lane_count": 7,
|
|
"host_owner_decision_record_draft_packet_count": 7,
|
|
"host_owner_decision_record_draft_review_checklist_item_count": 7,
|
|
"host_owner_decision_record_draft_review_outcome_lane_count": 7,
|
|
"host_owner_decision_record_writeup_packet_count": 7,
|
|
"host_owner_decision_record_writeup_review_checklist_item_count": 7,
|
|
"host_owner_decision_record_writeup_review_outcome_lane_count": 7,
|
|
"host_owner_decision_record_formal_candidate_packet_count": 7,
|
|
"host_owner_decision_record_formal_candidate_review_checklist_item_count": 7,
|
|
"host_owner_decision_record_formal_candidate_review_outcome_lane_count": 8,
|
|
"host_owner_decision_record_formal_record_queue_packet_count": 8,
|
|
"host_owner_decision_record_formal_record_queue_review_checklist_item_count": 8
|
|
},
|
|
"progress": {
|
|
"overall_percent": 58,
|
|
"framework_percent_min": 80,
|
|
"framework_percent_max": 85,
|
|
"runtime_landing_percent_min": 35,
|
|
"runtime_landing_percent_max": 40,
|
|
"headline_status": "holding_until_owner_response_or_runtime_gate",
|
|
"not_authorization": true
|
|
},
|
|
"posture_pillars": [
|
|
{
|
|
"pillar_id": "exposure_posture",
|
|
"display_order": 1,
|
|
"display_state": "waiting_evidence",
|
|
"source_contract": "security_mirror_status_rollup_v1",
|
|
"display_mode": "posture_only",
|
|
"runtime_execution_authorized": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"pillar_id": "source_control_supply_chain",
|
|
"display_order": 2,
|
|
"display_state": "draft_gated",
|
|
"source_contract": "source_control_owner_response_validation_rollup_v1",
|
|
"display_mode": "posture_only",
|
|
"runtime_execution_authorized": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"pillar_id": "kali_112_mesh",
|
|
"display_order": 3,
|
|
"display_state": "observe_only",
|
|
"source_contract": "kali_integration_status_v1",
|
|
"display_mode": "posture_only",
|
|
"runtime_execution_authorized": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"pillar_id": "approval_boundary",
|
|
"display_order": 4,
|
|
"display_state": "locked",
|
|
"source_contract": "security_approval_gate_v1",
|
|
"display_mode": "posture_only",
|
|
"runtime_execution_authorized": false,
|
|
"not_authorization": true
|
|
}
|
|
],
|
|
"non_blocking_lane_ids": [
|
|
"lane-low-medium-observation",
|
|
"lane-owner-response-missing",
|
|
"lane-mirror-data-incomplete",
|
|
"lane-source-control-drift-draft",
|
|
"lane-kali-observe-finding",
|
|
"lane-workflow-secret-name-gap",
|
|
"lane-progress-display-holding"
|
|
],
|
|
"evidence_refs": [
|
|
"docs/security/iwooos-posture-projection.snapshot.json",
|
|
"docs/security/security-rollout-policy.snapshot.json",
|
|
"docs/security/security-mirror-status-rollup.snapshot.json",
|
|
"docs/security/source-control-owner-response-validation-rollup.snapshot.json",
|
|
"docs/security/kali-integration-status.snapshot.json"
|
|
],
|
|
"allowed_frontend_outputs": [
|
|
"display_security_posture",
|
|
"display_progress_estimate",
|
|
"display_non_blocking_lanes",
|
|
"display_existing_frontend_security_surfaces",
|
|
"display_frontend_surface_coverage_matrix",
|
|
"display_frontend_surface_conflict_controls",
|
|
"display_operator_journey_steps",
|
|
"display_owner_evidence_readiness_board",
|
|
"display_host_coverage_view",
|
|
"display_host_action_gate_matrix",
|
|
"display_host_evidence_readiness_board",
|
|
"display_evidence_refs",
|
|
"display_next_gate",
|
|
"display_forbidden_actions",
|
|
"display_host_evidence_collection_order",
|
|
"display_host_evidence_intake_preflight_checks",
|
|
"display_host_evidence_review_outcome_lanes",
|
|
"display_host_evidence_review_handoff_packets",
|
|
"display_host_evidence_reviewer_checklist",
|
|
"display_host_evidence_reviewer_outcome_lanes",
|
|
"display_host_owner_decision_candidate_packets",
|
|
"display_host_owner_decision_review_checklist",
|
|
"display_host_owner_decision_review_outcome_lanes",
|
|
"display_host_owner_decision_record_draft_packets",
|
|
"display_host_owner_decision_record_draft_review_checklist",
|
|
"display_host_owner_decision_record_draft_review_outcome_lanes",
|
|
"display_host_owner_decision_record_writeup_packets",
|
|
"display_host_owner_decision_record_writeup_review_checklist",
|
|
"display_host_owner_decision_record_writeup_review_outcome_lanes",
|
|
"display_host_owner_decision_record_formal_candidate_packets",
|
|
"display_host_owner_decision_record_formal_candidate_review_checklist",
|
|
"display_host_owner_decision_record_formal_candidate_review_outcome_lanes",
|
|
"display_host_owner_decision_record_formal_record_queue_packets",
|
|
"display_host_owner_decision_record_formal_record_queue_review_checklist"
|
|
],
|
|
"forbidden_frontend_outputs": [
|
|
"add_scan_button",
|
|
"add_execute_button",
|
|
"add_repair_button",
|
|
"start_kali_scan",
|
|
"call_kali_execute_endpoint",
|
|
"create_github_repo",
|
|
"change_repo_visibility",
|
|
"sync_git_refs",
|
|
"modify_workflow_or_secret",
|
|
"enable_runner",
|
|
"switch_github_primary",
|
|
"ssh_to_host",
|
|
"update_kali_host",
|
|
"credentialed_scan_host",
|
|
"open_ssh_session",
|
|
"auto_update_host",
|
|
"run_host_package_upgrade",
|
|
"apply_runtime_blocking_control",
|
|
"mark_host_evidence_received",
|
|
"mark_host_evidence_accepted",
|
|
"ingest_raw_host_evidence",
|
|
"production_deploy",
|
|
"treat_progress_as_authorization",
|
|
"advance_host_collection_state",
|
|
"skip_host_evidence_dependency",
|
|
"accept_host_evidence_without_preflight",
|
|
"ingest_host_evidence_raw_payload",
|
|
"collect_host_credential_plaintext",
|
|
"advance_host_evidence_counters_from_frontend",
|
|
"create_host_approval_from_review_lane",
|
|
"treat_host_review_lane_as_runtime_gate",
|
|
"mark_host_review_outcome_accepted",
|
|
"treat_host_handoff_packet_as_approval",
|
|
"mark_host_handoff_packet_received",
|
|
"store_host_handoff_sensitive_payload",
|
|
"treat_host_reviewer_check_as_approval",
|
|
"mark_host_reviewer_check_passed_from_frontend",
|
|
"open_runtime_gate_from_reviewer_check",
|
|
"treat_host_reviewer_outcome_as_approval",
|
|
"mark_host_reviewer_outcome_passed",
|
|
"open_runtime_gate_from_reviewer_outcome",
|
|
"treat_host_owner_decision_candidate_as_approval",
|
|
"mark_host_owner_decision_approved",
|
|
"open_runtime_gate_from_owner_decision_candidate",
|
|
"treat_host_owner_decision_review_check_as_approval",
|
|
"mark_host_owner_decision_review_passed",
|
|
"open_runtime_gate_from_owner_decision_review_check",
|
|
"treat_host_owner_decision_review_outcome_as_approval",
|
|
"mark_host_owner_decision_review_outcome_passed",
|
|
"open_runtime_gate_from_owner_decision_review_outcome",
|
|
"create_host_owner_decision_record_from_draft",
|
|
"mark_host_owner_decision_record_created",
|
|
"open_runtime_gate_from_owner_decision_record_draft",
|
|
"treat_host_owner_decision_record_draft_review_as_approval",
|
|
"mark_host_owner_decision_record_draft_review_passed",
|
|
"create_host_owner_decision_record_from_draft_review",
|
|
"open_runtime_gate_from_owner_decision_record_draft_review",
|
|
"treat_host_owner_decision_record_draft_review_outcome_as_approval",
|
|
"mark_host_owner_decision_record_draft_review_outcome_passed",
|
|
"create_host_owner_decision_record_from_draft_review_outcome",
|
|
"open_runtime_gate_from_owner_decision_record_draft_review_outcome",
|
|
"create_host_owner_decision_record_from_writeup",
|
|
"mark_host_owner_decision_record_writeup_completed",
|
|
"mark_host_owner_decision_record_accepted_from_writeup",
|
|
"open_runtime_gate_from_owner_decision_record_writeup",
|
|
"treat_host_owner_decision_record_writeup_review_as_approval",
|
|
"mark_host_owner_decision_record_writeup_review_passed",
|
|
"mark_host_owner_decision_record_writeup_review_completed",
|
|
"create_host_owner_decision_record_from_writeup_review",
|
|
"open_runtime_gate_from_owner_decision_record_writeup_review",
|
|
"treat_host_owner_decision_record_writeup_review_outcome_as_approval",
|
|
"mark_host_owner_decision_record_writeup_review_outcome_passed",
|
|
"mark_host_owner_decision_record_writeup_review_outcome_completed",
|
|
"create_host_owner_decision_record_from_writeup_review_outcome",
|
|
"open_runtime_gate_from_owner_decision_record_writeup_review_outcome",
|
|
"treat_host_owner_decision_record_formal_candidate_as_approval",
|
|
"mark_host_owner_decision_record_formal_candidate_finalized",
|
|
"create_host_owner_decision_record_from_formal_candidate",
|
|
"accept_host_owner_decision_record_from_formal_candidate",
|
|
"open_runtime_gate_from_owner_decision_record_formal_candidate",
|
|
"treat_host_owner_decision_record_formal_candidate_review_as_approval",
|
|
"mark_host_owner_decision_record_formal_candidate_review_passed",
|
|
"mark_host_owner_decision_record_formal_candidate_review_finalized",
|
|
"create_host_owner_decision_record_from_formal_candidate_review",
|
|
"open_runtime_gate_from_owner_decision_record_formal_candidate_review",
|
|
"treat_host_owner_decision_record_formal_candidate_review_outcome_as_approval",
|
|
"mark_host_owner_decision_record_formal_candidate_review_outcome_passed",
|
|
"mark_host_owner_decision_record_formal_candidate_review_outcome_finalized",
|
|
"create_host_owner_decision_record_from_formal_candidate_review_outcome",
|
|
"open_runtime_gate_from_owner_decision_record_formal_candidate_review_outcome",
|
|
"treat_host_owner_decision_record_formal_record_queue_packet_as_approval",
|
|
"enqueue_host_owner_decision_record_formal_record_queue_from_frontend",
|
|
"create_host_owner_decision_record_from_formal_record_queue_packet",
|
|
"accept_host_owner_decision_record_from_formal_record_queue_packet",
|
|
"open_runtime_gate_from_owner_decision_record_formal_record_queue_packet",
|
|
"treat_host_owner_decision_record_formal_record_queue_review_as_approval",
|
|
"mark_host_owner_decision_record_formal_record_queue_review_passed",
|
|
"enqueue_host_owner_decision_record_from_formal_record_queue_review",
|
|
"create_host_owner_decision_record_from_formal_record_queue_review",
|
|
"open_runtime_gate_from_formal_record_queue_review"
|
|
],
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true,
|
|
"existing_frontend_surfaces": [
|
|
{
|
|
"surface_id": "security_compliance",
|
|
"route_path": "/security-compliance",
|
|
"display_order": 1,
|
|
"source_page": "apps/web/src/app/[locale]/security-compliance/page.tsx",
|
|
"source_components": [
|
|
"SecurityPanel",
|
|
"CompliancePanel"
|
|
],
|
|
"source_api_routes": [
|
|
"/api/v1/errors/stats",
|
|
"/api/v1/errors/issues",
|
|
"/api/v1/stats/incidents/summary",
|
|
"/api/v1/auto-repair/stats"
|
|
],
|
|
"display_mode": "link_only",
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"surface_id": "legacy_security",
|
|
"route_path": "/security",
|
|
"display_order": 2,
|
|
"source_page": "apps/web/src/app/[locale]/security/page.tsx",
|
|
"source_components": [],
|
|
"source_api_routes": [
|
|
"/api/v1/errors/stats",
|
|
"/api/v1/errors/issues"
|
|
],
|
|
"display_mode": "link_only",
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"surface_id": "legacy_compliance",
|
|
"route_path": "/compliance",
|
|
"display_order": 3,
|
|
"source_page": "apps/web/src/app/[locale]/compliance/page.tsx",
|
|
"source_components": [],
|
|
"source_api_routes": [
|
|
"/api/v1/stats/incidents/summary",
|
|
"/api/v1/auto-repair/stats"
|
|
],
|
|
"display_mode": "link_only",
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"surface_id": "alerts",
|
|
"route_path": "/alerts",
|
|
"display_order": 4,
|
|
"source_page": "apps/web/src/app/[locale]/alerts/page.tsx",
|
|
"source_components": [
|
|
"IncidentCard"
|
|
],
|
|
"source_api_routes": [
|
|
"/api/v1/incidents",
|
|
"/api/v1/approvals/pending"
|
|
],
|
|
"display_mode": "link_only",
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"surface_id": "errors",
|
|
"route_path": "/errors",
|
|
"display_order": 5,
|
|
"source_page": "apps/web/src/app/[locale]/errors/page.tsx",
|
|
"source_components": [
|
|
"ErrorsPanel"
|
|
],
|
|
"source_api_routes": [
|
|
"/api/v1/errors/stats",
|
|
"/api/v1/errors/issues",
|
|
"/api/v1/errors/trends",
|
|
"/api/v1/errors/ux-audit"
|
|
],
|
|
"display_mode": "link_only",
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"surface_id": "authorizations",
|
|
"route_path": "/authorizations",
|
|
"display_order": 6,
|
|
"source_page": "apps/web/src/app/[locale]/authorizations/page.tsx",
|
|
"source_components": [
|
|
"LiveApprovalPanel"
|
|
],
|
|
"source_api_routes": [
|
|
"/api/v1/approvals/pending"
|
|
],
|
|
"display_mode": "link_only",
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"surface_id": "governance",
|
|
"route_path": "/governance",
|
|
"display_order": 7,
|
|
"source_page": "apps/web/src/app/[locale]/governance/page.tsx",
|
|
"source_components": [
|
|
"SloTab",
|
|
"EventsTab",
|
|
"QueueTab"
|
|
],
|
|
"source_api_routes": [
|
|
"/api/v1/ai/slo",
|
|
"/api/v1/ai/governance/summary",
|
|
"/api/v1/ai/governance/events",
|
|
"/api/v1/ai/governance/queue",
|
|
"/api/v1/ai/slo/remediation/history"
|
|
],
|
|
"display_mode": "link_only",
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"surface_id": "alert_operation_logs",
|
|
"route_path": "/alert-operation-logs",
|
|
"display_order": 8,
|
|
"source_page": "apps/web/src/app/[locale]/alert-operation-logs/page.tsx",
|
|
"source_components": [],
|
|
"source_api_routes": [
|
|
"/api/v1/alert-operation-logs",
|
|
"/api/v1/alert-operation-logs/stats"
|
|
],
|
|
"display_mode": "link_only",
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"surface_id": "awooop_approvals",
|
|
"route_path": "/awooop/approvals",
|
|
"display_order": 9,
|
|
"source_page": "apps/web/src/app/[locale]/awooop/approvals/page.tsx",
|
|
"source_components": [],
|
|
"source_api_routes": [
|
|
"/api/v1/platform/approvals"
|
|
],
|
|
"display_mode": "link_only",
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"surface_id": "code_review",
|
|
"route_path": "/code-review",
|
|
"display_order": 10,
|
|
"source_page": "apps/web/src/app/[locale]/code-review/page.tsx",
|
|
"source_components": [],
|
|
"source_api_routes": [],
|
|
"display_mode": "link_only",
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
}
|
|
],
|
|
"frontend_surface_coverage_groups": [
|
|
{
|
|
"group_id": "signals_and_exposure",
|
|
"display_order": 1,
|
|
"responsibility_plane": "detect_and_measure",
|
|
"surface_ids": [
|
|
"security_compliance",
|
|
"legacy_security",
|
|
"legacy_compliance",
|
|
"alerts",
|
|
"errors"
|
|
],
|
|
"display_mode": "coverage_only",
|
|
"overlap_control": "original_surface_retains_ownership",
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"group_id": "human_control_boundary",
|
|
"display_order": 2,
|
|
"responsibility_plane": "human_gate_visibility",
|
|
"surface_ids": [
|
|
"authorizations",
|
|
"awooop_approvals"
|
|
],
|
|
"display_mode": "coverage_only",
|
|
"overlap_control": "approval_state_not_runtime_authorization",
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"group_id": "governance_and_audit",
|
|
"display_order": 3,
|
|
"responsibility_plane": "governance_evidence",
|
|
"surface_ids": [
|
|
"governance",
|
|
"alert_operation_logs"
|
|
],
|
|
"display_mode": "coverage_only",
|
|
"overlap_control": "audit_event_not_execution_authorization",
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"group_id": "engineering_review",
|
|
"display_order": 4,
|
|
"responsibility_plane": "code_review_followup",
|
|
"surface_ids": [
|
|
"code_review"
|
|
],
|
|
"display_mode": "coverage_only",
|
|
"overlap_control": "code_review_not_deploy_approval",
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
}
|
|
],
|
|
"frontend_surface_conflict_controls": [
|
|
{
|
|
"control_id": "preserve_original_route_ownership",
|
|
"display_order": 1,
|
|
"control_scope": "route_ownership",
|
|
"blocked_misread": "iwooos_replaces_original_surface_owner",
|
|
"display_mode": "conflict_control_only",
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"control_id": "no_runtime_lift_from_index",
|
|
"display_order": 2,
|
|
"control_scope": "runtime_authority",
|
|
"blocked_misread": "coverage_matrix_creates_runtime_gate",
|
|
"display_mode": "conflict_control_only",
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"control_id": "code_review_not_deploy_gate",
|
|
"display_order": 3,
|
|
"control_scope": "engineering_review",
|
|
"blocked_misread": "code_review_link_is_deploy_approval",
|
|
"display_mode": "conflict_control_only",
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"control_id": "awooop_approval_not_security_approval",
|
|
"display_order": 4,
|
|
"control_scope": "approval_semantics",
|
|
"blocked_misread": "awooop_approval_equals_security_gate_approval",
|
|
"display_mode": "conflict_control_only",
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"control_id": "frontend_index_does_not_call_kali",
|
|
"display_order": 5,
|
|
"control_scope": "kali_boundary",
|
|
"blocked_misread": "frontend_index_authorizes_active_scan_or_execute",
|
|
"display_mode": "conflict_control_only",
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
}
|
|
],
|
|
"operator_journey_steps": [
|
|
{
|
|
"step_id": "read_current_posture",
|
|
"display_order": 1,
|
|
"responsibility_plane": "iwooos_posture",
|
|
"source_refs": [
|
|
"security_mirror_status_rollup_v1",
|
|
"iwooos_posture_projection_v1"
|
|
],
|
|
"display_mode": "journey_only",
|
|
"allowed_outcome": "display_posture_only",
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"step_id": "open_existing_security_surface",
|
|
"display_order": 2,
|
|
"responsibility_plane": "frontend_surface_index",
|
|
"source_refs": [
|
|
"existing_frontend_surfaces",
|
|
"frontend_surface_coverage_groups"
|
|
],
|
|
"display_mode": "journey_only",
|
|
"allowed_outcome": "navigate_to_existing_surface_without_changing_ownership",
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"step_id": "triage_non_blocking_lane",
|
|
"display_order": 3,
|
|
"responsibility_plane": "low_friction_rollout",
|
|
"source_refs": [
|
|
"security_rollout_policy_v1"
|
|
],
|
|
"display_mode": "journey_only",
|
|
"allowed_outcome": "create_followup_without_blocking",
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"step_id": "collect_owner_evidence",
|
|
"display_order": 4,
|
|
"responsibility_plane": "owner_response_validation",
|
|
"source_refs": [
|
|
"source_control_owner_response_validation_rollup_v1"
|
|
],
|
|
"display_mode": "journey_only",
|
|
"allowed_outcome": "update_received_or_accepted_state_after_redacted_review",
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"step_id": "wait_for_human_decision",
|
|
"display_order": 5,
|
|
"responsibility_plane": "security_approval_decision_record",
|
|
"source_refs": [
|
|
"security_approval_gate_v1",
|
|
"security_approval_decision_record_v1"
|
|
],
|
|
"display_mode": "journey_only",
|
|
"allowed_outcome": "record_human_decision_only",
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"step_id": "prepare_followup_runtime_gate",
|
|
"display_order": 6,
|
|
"responsibility_plane": "followup_runtime_gate",
|
|
"source_refs": [
|
|
"security_followup_runtime_gate_v1"
|
|
],
|
|
"display_mode": "journey_only",
|
|
"allowed_outcome": "wait_for_separate_runtime_gate_after_approval",
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
}
|
|
],
|
|
"owner_evidence_readiness_items": [
|
|
{
|
|
"item_id": "s4_9_gitea_owner_attestation_response",
|
|
"display_order": 1,
|
|
"stage_id": "S4.9",
|
|
"source_contract": "source_control_owner_response_validation_rollup_v1",
|
|
"readiness_state": "next_collection_candidate",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"display_mode": "readiness_only",
|
|
"unlock_condition": "redacted_owner_response_received_and_accepted",
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"item_id": "s4_10_github_target_owner_response",
|
|
"display_order": 2,
|
|
"stage_id": "S4.10",
|
|
"source_contract": "source_control_owner_response_validation_rollup_v1",
|
|
"readiness_state": "waiting_owner_response",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"display_mode": "readiness_only",
|
|
"unlock_condition": "github_target_owner_response_accepted",
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"item_id": "s4_11_refs_truth_owner_response",
|
|
"display_order": 3,
|
|
"stage_id": "S4.11",
|
|
"source_contract": "source_control_owner_response_validation_rollup_v1",
|
|
"readiness_state": "waiting_owner_response",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"display_mode": "readiness_only",
|
|
"unlock_condition": "refs_truth_owner_response_accepted",
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"item_id": "s4_12_workflow_secret_owner_response",
|
|
"display_order": 4,
|
|
"stage_id": "S4.12",
|
|
"source_contract": "source_control_owner_response_validation_rollup_v1",
|
|
"readiness_state": "waiting_owner_response",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"display_mode": "readiness_only",
|
|
"unlock_condition": "workflow_secret_name_owner_response_accepted",
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"item_id": "s1_6_redacted_finding_ingestion",
|
|
"display_order": 5,
|
|
"stage_id": "S1.6",
|
|
"source_contract": "security_finding_v1",
|
|
"readiness_state": "approval_required",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"display_mode": "readiness_only",
|
|
"unlock_condition": "human_approved_redacted_finding_ingestion",
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"item_id": "s1_6_kali_scan_scope_approval",
|
|
"display_order": 6,
|
|
"stage_id": "S1.6",
|
|
"source_contract": "kali_scan_scope_approval_v1",
|
|
"readiness_state": "approval_required",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"display_mode": "readiness_only",
|
|
"unlock_condition": "scan_scope_approval_and_followup_runtime_gate",
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"item_id": "s3_4_followup_runtime_gate",
|
|
"display_order": 7,
|
|
"stage_id": "S3.4",
|
|
"source_contract": "security_followup_runtime_gate_v1",
|
|
"readiness_state": "locked_until_human_decision",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"display_mode": "readiness_only",
|
|
"unlock_condition": "decision_record_accepted_then_separate_runtime_gate",
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
}
|
|
],
|
|
"host_coverage_items": [
|
|
{
|
|
"host_id": "kali_112_security_host",
|
|
"display_order": 1,
|
|
"address": "192.168.0.112",
|
|
"role": "kali_security_host",
|
|
"source_contract": "kali_integration_status_v1",
|
|
"coverage_state": "visible_in_iwooos_posture",
|
|
"scan_scope_state": "observe_only_active_scan_requires_approval",
|
|
"display_mode": "coverage_only",
|
|
"active_scan_authorized": false,
|
|
"ssh_change_authorized": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"host_id": "dev_168_development_host",
|
|
"display_order": 2,
|
|
"address": "192.168.0.168",
|
|
"role": "development_host",
|
|
"source_contract": "kali_scan_scope_approval_v1",
|
|
"coverage_state": "declared_in_observe_only_scope",
|
|
"scan_scope_state": "credentialed_scan_not_approved",
|
|
"display_mode": "coverage_only",
|
|
"active_scan_authorized": false,
|
|
"ssh_change_authorized": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"host_id": "dev_111_development_host",
|
|
"display_order": 3,
|
|
"address": "192.168.0.111",
|
|
"role": "development_host",
|
|
"source_contract": "kali_scan_scope_approval_v1",
|
|
"coverage_state": "declared_in_observe_only_scope",
|
|
"scan_scope_state": "credentialed_scan_not_approved",
|
|
"display_mode": "coverage_only",
|
|
"active_scan_authorized": false,
|
|
"ssh_change_authorized": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
}
|
|
],
|
|
"host_action_gate_items": [
|
|
{
|
|
"action_id": "host_active_scan_gate",
|
|
"display_order": 1,
|
|
"related_hosts": [
|
|
"192.168.0.112",
|
|
"192.168.0.168",
|
|
"192.168.0.111"
|
|
],
|
|
"required_gate": "kali_scan_scope_approval_v1",
|
|
"gate_state": "approval_required",
|
|
"display_mode": "gate_only",
|
|
"active_scan_authorized": false,
|
|
"credentialed_scan_authorized": false,
|
|
"ssh_change_authorized": false,
|
|
"host_update_authorized": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"action_id": "host_credentialed_scan_gate",
|
|
"display_order": 2,
|
|
"related_hosts": [
|
|
"192.168.0.112",
|
|
"192.168.0.168",
|
|
"192.168.0.111"
|
|
],
|
|
"required_gate": "kali_scan_scope_approval_v1_and_credential_handling_review",
|
|
"gate_state": "locked_until_scope_and_credential_handling_approved",
|
|
"display_mode": "gate_only",
|
|
"active_scan_authorized": false,
|
|
"credentialed_scan_authorized": false,
|
|
"ssh_change_authorized": false,
|
|
"host_update_authorized": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"action_id": "kali_execute_gate",
|
|
"display_order": 3,
|
|
"related_hosts": [
|
|
"192.168.0.112"
|
|
],
|
|
"required_gate": "security_followup_runtime_gate_v1",
|
|
"gate_state": "block_candidate_until_human_decision",
|
|
"display_mode": "gate_only",
|
|
"active_scan_authorized": false,
|
|
"credentialed_scan_authorized": false,
|
|
"ssh_change_authorized": false,
|
|
"host_update_authorized": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"action_id": "ssh_host_change_gate",
|
|
"display_order": 4,
|
|
"related_hosts": [
|
|
"192.168.0.112",
|
|
"192.168.0.168",
|
|
"192.168.0.111"
|
|
],
|
|
"required_gate": "security_approval_gate_v1_with_change_plan_and_rollback_evidence",
|
|
"gate_state": "approval_required",
|
|
"display_mode": "gate_only",
|
|
"active_scan_authorized": false,
|
|
"credentialed_scan_authorized": false,
|
|
"ssh_change_authorized": false,
|
|
"host_update_authorized": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"action_id": "kali_host_update_gate",
|
|
"display_order": 5,
|
|
"related_hosts": [
|
|
"192.168.0.112"
|
|
],
|
|
"required_gate": "security_approval_gate_v1_with_maintenance_window",
|
|
"gate_state": "approval_required",
|
|
"display_mode": "gate_only",
|
|
"active_scan_authorized": false,
|
|
"credentialed_scan_authorized": false,
|
|
"ssh_change_authorized": false,
|
|
"host_update_authorized": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"action_id": "runtime_blocking_control_gate",
|
|
"display_order": 6,
|
|
"related_hosts": [
|
|
"192.168.0.112",
|
|
"192.168.0.168",
|
|
"192.168.0.111"
|
|
],
|
|
"required_gate": "security_followup_runtime_gate_v1_after_accepted_decision_record",
|
|
"gate_state": "locked_until_human_decision_active_gate_zero",
|
|
"display_mode": "gate_only",
|
|
"active_scan_authorized": false,
|
|
"credentialed_scan_authorized": false,
|
|
"ssh_change_authorized": false,
|
|
"host_update_authorized": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
}
|
|
],
|
|
"host_evidence_readiness_items": [
|
|
{
|
|
"item_id": "host_scope_boundary_evidence",
|
|
"display_order": 1,
|
|
"related_hosts": [
|
|
"192.168.0.112",
|
|
"192.168.0.168",
|
|
"192.168.0.111"
|
|
],
|
|
"required_gate": "kali_scan_scope_approval_v1",
|
|
"evidence_state": "waiting_redacted_scope_approval",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"display_mode": "evidence_readiness_only",
|
|
"active_scan_authorized": false,
|
|
"credentialed_scan_authorized": false,
|
|
"ssh_change_authorized": false,
|
|
"host_update_authorized": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"item_id": "host_owner_decision_record_evidence",
|
|
"display_order": 2,
|
|
"related_hosts": [
|
|
"192.168.0.112",
|
|
"192.168.0.168",
|
|
"192.168.0.111"
|
|
],
|
|
"required_gate": "security_approval_decision_record_v1",
|
|
"evidence_state": "waiting_human_decision_record",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"display_mode": "evidence_readiness_only",
|
|
"active_scan_authorized": false,
|
|
"credentialed_scan_authorized": false,
|
|
"ssh_change_authorized": false,
|
|
"host_update_authorized": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"item_id": "host_credential_handling_evidence",
|
|
"display_order": 3,
|
|
"related_hosts": [
|
|
"192.168.0.112",
|
|
"192.168.0.168",
|
|
"192.168.0.111"
|
|
],
|
|
"required_gate": "credential_handling_review_before_credentialed_scan",
|
|
"evidence_state": "credential_material_collection_forbidden_waiting_policy",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"display_mode": "evidence_readiness_only",
|
|
"active_scan_authorized": false,
|
|
"credentialed_scan_authorized": false,
|
|
"ssh_change_authorized": false,
|
|
"host_update_authorized": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"item_id": "host_maintenance_window_evidence",
|
|
"display_order": 4,
|
|
"related_hosts": [
|
|
"192.168.0.112",
|
|
"192.168.0.168",
|
|
"192.168.0.111"
|
|
],
|
|
"required_gate": "security_approval_gate_v1_with_maintenance_window",
|
|
"evidence_state": "waiting_maintenance_window",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"display_mode": "evidence_readiness_only",
|
|
"active_scan_authorized": false,
|
|
"credentialed_scan_authorized": false,
|
|
"ssh_change_authorized": false,
|
|
"host_update_authorized": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"item_id": "host_rollback_plan_evidence",
|
|
"display_order": 5,
|
|
"related_hosts": [
|
|
"192.168.0.112",
|
|
"192.168.0.168",
|
|
"192.168.0.111"
|
|
],
|
|
"required_gate": "security_approval_gate_v1_with_change_plan_and_rollback_evidence",
|
|
"evidence_state": "waiting_rollback_plan",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"display_mode": "evidence_readiness_only",
|
|
"active_scan_authorized": false,
|
|
"credentialed_scan_authorized": false,
|
|
"ssh_change_authorized": false,
|
|
"host_update_authorized": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"item_id": "host_validation_metrics_evidence",
|
|
"display_order": 6,
|
|
"related_hosts": [
|
|
"192.168.0.112",
|
|
"192.168.0.168",
|
|
"192.168.0.111"
|
|
],
|
|
"required_gate": "security_followup_runtime_gate_v1_post_check",
|
|
"evidence_state": "waiting_post_check_metrics",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"display_mode": "evidence_readiness_only",
|
|
"active_scan_authorized": false,
|
|
"credentialed_scan_authorized": false,
|
|
"ssh_change_authorized": false,
|
|
"host_update_authorized": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"item_id": "host_redacted_ingestion_evidence",
|
|
"display_order": 7,
|
|
"related_hosts": [
|
|
"192.168.0.112",
|
|
"192.168.0.168",
|
|
"192.168.0.111"
|
|
],
|
|
"required_gate": "security_finding_v1_redacted_payload_acceptance",
|
|
"evidence_state": "waiting_redacted_payload_acceptance_payloads_ingested_false",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"display_mode": "evidence_readiness_only",
|
|
"active_scan_authorized": false,
|
|
"credentialed_scan_authorized": false,
|
|
"ssh_change_authorized": false,
|
|
"host_update_authorized": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
}
|
|
],
|
|
"host_evidence_collection_order": [
|
|
{
|
|
"step_id": "collect_scope_boundary_first",
|
|
"display_order": 1,
|
|
"source_item_id": "host_scope_boundary_evidence",
|
|
"depends_on_step_ids": [],
|
|
"collection_state": "next_collection_candidate",
|
|
"display_mode": "collection_order_only",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"step_id": "collect_owner_decision_second",
|
|
"display_order": 2,
|
|
"source_item_id": "host_owner_decision_record_evidence",
|
|
"depends_on_step_ids": [
|
|
"collect_scope_boundary_first"
|
|
],
|
|
"collection_state": "waiting_previous_step",
|
|
"display_mode": "collection_order_only",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"step_id": "collect_credential_handling_third",
|
|
"display_order": 3,
|
|
"source_item_id": "host_credential_handling_evidence",
|
|
"depends_on_step_ids": [
|
|
"collect_owner_decision_second"
|
|
],
|
|
"collection_state": "waiting_previous_step",
|
|
"display_mode": "collection_order_only",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"step_id": "collect_maintenance_window_fourth",
|
|
"display_order": 4,
|
|
"source_item_id": "host_maintenance_window_evidence",
|
|
"depends_on_step_ids": [
|
|
"collect_owner_decision_second"
|
|
],
|
|
"collection_state": "waiting_previous_step",
|
|
"display_mode": "collection_order_only",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"step_id": "collect_rollback_plan_fifth",
|
|
"display_order": 5,
|
|
"source_item_id": "host_rollback_plan_evidence",
|
|
"depends_on_step_ids": [
|
|
"collect_maintenance_window_fourth"
|
|
],
|
|
"collection_state": "waiting_previous_step",
|
|
"display_mode": "collection_order_only",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"step_id": "collect_validation_metrics_sixth",
|
|
"display_order": 6,
|
|
"source_item_id": "host_validation_metrics_evidence",
|
|
"depends_on_step_ids": [
|
|
"collect_rollback_plan_fifth"
|
|
],
|
|
"collection_state": "waiting_previous_step",
|
|
"display_mode": "collection_order_only",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"step_id": "collect_redacted_ingestion_seventh",
|
|
"display_order": 7,
|
|
"source_item_id": "host_redacted_ingestion_evidence",
|
|
"depends_on_step_ids": [
|
|
"collect_validation_metrics_sixth"
|
|
],
|
|
"collection_state": "waiting_previous_step",
|
|
"display_mode": "collection_order_only",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
}
|
|
],
|
|
"host_evidence_intake_preflight_checks": [
|
|
{
|
|
"check_id": "host_metadata_pointer_shape_check",
|
|
"display_order": 1,
|
|
"source_step_ids": [
|
|
"collect_scope_boundary_first"
|
|
],
|
|
"preflight_state": "preflight_ready_not_executed",
|
|
"rejection_lane": "reject_missing_redacted_metadata_pointer",
|
|
"display_mode": "intake_preflight_only",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"check_id": "host_collection_dependency_order_check",
|
|
"display_order": 2,
|
|
"source_step_ids": [
|
|
"collect_scope_boundary_first",
|
|
"collect_owner_decision_second",
|
|
"collect_credential_handling_third",
|
|
"collect_maintenance_window_fourth",
|
|
"collect_rollback_plan_fifth",
|
|
"collect_validation_metrics_sixth",
|
|
"collect_redacted_ingestion_seventh"
|
|
],
|
|
"preflight_state": "dependency_check_waiting_evidence",
|
|
"rejection_lane": "quarantine_dependency_skip",
|
|
"display_mode": "intake_preflight_only",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"check_id": "host_scope_boundary_before_scan_check",
|
|
"display_order": 3,
|
|
"source_step_ids": [
|
|
"collect_scope_boundary_first"
|
|
],
|
|
"preflight_state": "waiting_scope_evidence",
|
|
"rejection_lane": "reject_scan_without_scope",
|
|
"display_mode": "intake_preflight_only",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"check_id": "host_owner_decision_before_change_check",
|
|
"display_order": 4,
|
|
"source_step_ids": [
|
|
"collect_owner_decision_second"
|
|
],
|
|
"preflight_state": "waiting_owner_decision_pointer",
|
|
"rejection_lane": "reject_change_without_owner_decision",
|
|
"display_mode": "intake_preflight_only",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"check_id": "host_credential_plaintext_rejection_check",
|
|
"display_order": 5,
|
|
"source_step_ids": [
|
|
"collect_credential_handling_third"
|
|
],
|
|
"preflight_state": "plaintext_credential_collection_forbidden",
|
|
"rejection_lane": "reject_plaintext_credential_or_secret_value",
|
|
"display_mode": "intake_preflight_only",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"check_id": "host_raw_payload_rejection_check",
|
|
"display_order": 6,
|
|
"source_step_ids": [
|
|
"collect_redacted_ingestion_seventh"
|
|
],
|
|
"preflight_state": "raw_payload_collection_forbidden",
|
|
"rejection_lane": "reject_raw_payload_ingestion",
|
|
"display_mode": "intake_preflight_only",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"check_id": "host_counter_transition_freeze_check",
|
|
"display_order": 7,
|
|
"source_step_ids": [
|
|
"collect_scope_boundary_first",
|
|
"collect_owner_decision_second",
|
|
"collect_credential_handling_third",
|
|
"collect_maintenance_window_fourth",
|
|
"collect_rollback_plan_fifth",
|
|
"collect_validation_metrics_sixth",
|
|
"collect_redacted_ingestion_seventh"
|
|
],
|
|
"preflight_state": "frontend_counter_transition_forbidden",
|
|
"rejection_lane": "reject_frontend_counter_transition",
|
|
"display_mode": "intake_preflight_only",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
}
|
|
],
|
|
"host_evidence_review_outcome_lanes": [
|
|
{
|
|
"lane_id": "host_ready_for_human_review_lane",
|
|
"display_order": 1,
|
|
"source_check_ids": [
|
|
"host_metadata_pointer_shape_check",
|
|
"host_collection_dependency_order_check",
|
|
"host_scope_boundary_before_scan_check",
|
|
"host_owner_decision_before_change_check"
|
|
],
|
|
"outcome_state": "candidate_only_not_received",
|
|
"next_human_action": "manual_review_candidate_display_only",
|
|
"display_mode": "review_outcome_only",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"approval_record_created": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"lane_id": "host_needs_scope_evidence_lane",
|
|
"display_order": 2,
|
|
"source_check_ids": [
|
|
"host_scope_boundary_before_scan_check"
|
|
],
|
|
"outcome_state": "needs_scope_evidence",
|
|
"next_human_action": "request_redacted_scope_boundary_pointer",
|
|
"display_mode": "review_outcome_only",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"approval_record_created": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"lane_id": "host_needs_owner_decision_lane",
|
|
"display_order": 3,
|
|
"source_check_ids": [
|
|
"host_owner_decision_before_change_check"
|
|
],
|
|
"outcome_state": "needs_owner_decision_pointer",
|
|
"next_human_action": "request_owner_decision_record_pointer",
|
|
"display_mode": "review_outcome_only",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"approval_record_created": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"lane_id": "host_quarantine_dependency_skip_lane",
|
|
"display_order": 4,
|
|
"source_check_ids": [
|
|
"host_collection_dependency_order_check"
|
|
],
|
|
"outcome_state": "quarantine_dependency_skip",
|
|
"next_human_action": "show_dependency_skip_reason_without_counter_transition",
|
|
"display_mode": "review_outcome_only",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"approval_record_created": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"lane_id": "host_reject_raw_payload_lane",
|
|
"display_order": 5,
|
|
"source_check_ids": [
|
|
"host_raw_payload_rejection_check"
|
|
],
|
|
"outcome_state": "rejected_raw_payload",
|
|
"next_human_action": "request_redacted_summary_instead",
|
|
"display_mode": "review_outcome_only",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"approval_record_created": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"lane_id": "host_reject_credential_plaintext_lane",
|
|
"display_order": 6,
|
|
"source_check_ids": [
|
|
"host_credential_plaintext_rejection_check"
|
|
],
|
|
"outcome_state": "rejected_plaintext_credential",
|
|
"next_human_action": "discard_plaintext_and_request_redacted_metadata_only",
|
|
"display_mode": "review_outcome_only",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"approval_record_created": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"lane_id": "host_waiting_runtime_gate_lane",
|
|
"display_order": 7,
|
|
"source_check_ids": [
|
|
"host_counter_transition_freeze_check",
|
|
"host_owner_decision_before_change_check"
|
|
],
|
|
"outcome_state": "waiting_followup_runtime_gate",
|
|
"next_human_action": "separate_runtime_gate_required_after_accepted_decision",
|
|
"display_mode": "review_outcome_only",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"approval_record_created": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
}
|
|
],
|
|
"host_evidence_review_handoff_packets": [
|
|
{
|
|
"packet_id": "host_scope_summary_handoff_packet",
|
|
"display_order": 1,
|
|
"source_lane_ids": [
|
|
"host_ready_for_human_review_lane",
|
|
"host_needs_scope_evidence_lane"
|
|
],
|
|
"packet_requirement": "redacted_scope_boundary_summary",
|
|
"reviewer_action": "confirm_scope_pointer_before_review",
|
|
"display_mode": "review_handoff_only",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"approval_record_created": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"packet_id": "host_owner_decision_handoff_packet",
|
|
"display_order": 2,
|
|
"source_lane_ids": [
|
|
"host_ready_for_human_review_lane",
|
|
"host_needs_owner_decision_lane"
|
|
],
|
|
"packet_requirement": "owner_decision_record_pointer",
|
|
"reviewer_action": "verify_owner_scope_and_expiry_without_expanding_authority",
|
|
"display_mode": "review_handoff_only",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"approval_record_created": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"packet_id": "host_credential_handling_handoff_packet",
|
|
"display_order": 3,
|
|
"source_lane_ids": [
|
|
"host_ready_for_human_review_lane",
|
|
"host_reject_credential_plaintext_lane"
|
|
],
|
|
"packet_requirement": "credential_handling_metadata_only_statement",
|
|
"reviewer_action": "confirm_no_plaintext_secret_value_is_present",
|
|
"display_mode": "review_handoff_only",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"approval_record_created": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"packet_id": "host_maintenance_rollback_handoff_packet",
|
|
"display_order": 4,
|
|
"source_lane_ids": [
|
|
"host_waiting_runtime_gate_lane",
|
|
"host_needs_owner_decision_lane"
|
|
],
|
|
"packet_requirement": "maintenance_window_and_rollback_pointer",
|
|
"reviewer_action": "check_future_change_has_window_owner_and_recovery_method",
|
|
"display_mode": "review_handoff_only",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"approval_record_created": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"packet_id": "host_validation_metrics_handoff_packet",
|
|
"display_order": 5,
|
|
"source_lane_ids": [
|
|
"host_ready_for_human_review_lane",
|
|
"host_waiting_runtime_gate_lane"
|
|
],
|
|
"packet_requirement": "post_review_validation_metrics_pointer",
|
|
"reviewer_action": "confirm_followup_metrics_before_any_runtime_gate",
|
|
"display_mode": "review_handoff_only",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"approval_record_created": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"packet_id": "host_redaction_attestation_handoff_packet",
|
|
"display_order": 6,
|
|
"source_lane_ids": [
|
|
"host_reject_raw_payload_lane",
|
|
"host_reject_credential_plaintext_lane"
|
|
],
|
|
"packet_requirement": "redaction_attestation_metadata_only",
|
|
"reviewer_action": "confirm_raw_logs_dumps_credentials_and_unredacted_screenshots_are_absent",
|
|
"display_mode": "review_handoff_only",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"approval_record_created": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"packet_id": "host_runtime_gate_pointer_handoff_packet",
|
|
"display_order": 7,
|
|
"source_lane_ids": [
|
|
"host_waiting_runtime_gate_lane"
|
|
],
|
|
"packet_requirement": "followup_runtime_gate_pointer_only",
|
|
"reviewer_action": "route_possible_action_to_separate_runtime_gate",
|
|
"display_mode": "review_handoff_only",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"approval_record_created": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
}
|
|
],
|
|
"host_evidence_reviewer_checklist_items": [
|
|
{
|
|
"check_id": "host_scope_boundary_match_check",
|
|
"display_order": 1,
|
|
"source_packet_ids": [
|
|
"host_scope_summary_handoff_packet"
|
|
],
|
|
"reviewer_check": "scope_boundary_matches_host_coverage_and_exclusions",
|
|
"pass_condition": "redacted_scope_pointer_only_no_scan_started",
|
|
"display_mode": "reviewer_checklist_only",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"check_id": "host_owner_decision_scope_expiry_check",
|
|
"display_order": 2,
|
|
"source_packet_ids": [
|
|
"host_owner_decision_handoff_packet"
|
|
],
|
|
"reviewer_check": "owner_decision_scope_constraints_and_expiry_are_readable",
|
|
"pass_condition": "decision_pointer_only_no_approval_record_created",
|
|
"display_mode": "reviewer_checklist_only",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"check_id": "host_credential_handling_metadata_only_check",
|
|
"display_order": 3,
|
|
"source_packet_ids": [
|
|
"host_credential_handling_handoff_packet"
|
|
],
|
|
"reviewer_check": "credential_handling_statement_is_metadata_only",
|
|
"pass_condition": "secret_value_collection_false",
|
|
"display_mode": "reviewer_checklist_only",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"check_id": "host_redaction_attestation_pass_check",
|
|
"display_order": 4,
|
|
"source_packet_ids": [
|
|
"host_redaction_attestation_handoff_packet"
|
|
],
|
|
"reviewer_check": "raw_logs_dumps_private_url_credentials_and_sensitive_payloads_absent",
|
|
"pass_condition": "raw_payload_allowed_false",
|
|
"display_mode": "reviewer_checklist_only",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"check_id": "host_maintenance_rollback_complete_check",
|
|
"display_order": 5,
|
|
"source_packet_ids": [
|
|
"host_maintenance_rollback_handoff_packet"
|
|
],
|
|
"reviewer_check": "future_change_has_window_owner_rollback_and_recovery_metrics",
|
|
"pass_condition": "future_change_conditions_only_no_change_execution",
|
|
"display_mode": "reviewer_checklist_only",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"check_id": "host_validation_metrics_linked_check",
|
|
"display_order": 6,
|
|
"source_packet_ids": [
|
|
"host_validation_metrics_handoff_packet"
|
|
],
|
|
"reviewer_check": "post_check_metrics_baseline_logs_or_followup_pointer_readable",
|
|
"pass_condition": "validation_pointer_only_runtime_gate_closed",
|
|
"display_mode": "reviewer_checklist_only",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"check_id": "host_runtime_gate_separated_check",
|
|
"display_order": 7,
|
|
"source_packet_ids": [
|
|
"host_runtime_gate_pointer_handoff_packet"
|
|
],
|
|
"reviewer_check": "reviewer_check_result_cannot_become_runtime_action",
|
|
"pass_condition": "active_runtime_gates_zero_action_buttons_false",
|
|
"display_mode": "reviewer_checklist_only",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
}
|
|
],
|
|
"host_evidence_reviewer_outcome_lanes": [
|
|
{
|
|
"lane_id": "host_ready_for_owner_decision_outcome_lane",
|
|
"display_order": 1,
|
|
"source_check_ids": [
|
|
"host_scope_boundary_match_check",
|
|
"host_owner_decision_scope_expiry_check",
|
|
"host_redaction_attestation_pass_check",
|
|
"host_runtime_gate_separated_check"
|
|
],
|
|
"outcome_state": "candidate_only_not_accepted",
|
|
"next_human_action": "display_owner_decision_candidate_only",
|
|
"display_mode": "reviewer_outcome_only",
|
|
"checklist_passed_count": 0,
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"lane_id": "host_scope_mismatch_outcome_lane",
|
|
"display_order": 2,
|
|
"source_check_ids": [
|
|
"host_scope_boundary_match_check"
|
|
],
|
|
"outcome_state": "needs_scope_rework",
|
|
"next_human_action": "request_scope_boundary_pointer_refresh",
|
|
"display_mode": "reviewer_outcome_only",
|
|
"checklist_passed_count": 0,
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"lane_id": "host_owner_decision_expired_outcome_lane",
|
|
"display_order": 3,
|
|
"source_check_ids": [
|
|
"host_owner_decision_scope_expiry_check"
|
|
],
|
|
"outcome_state": "needs_owner_decision_refresh",
|
|
"next_human_action": "request_owner_decision_scope_or_expiry_refresh",
|
|
"display_mode": "reviewer_outcome_only",
|
|
"checklist_passed_count": 0,
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"lane_id": "host_credential_metadata_failed_outcome_lane",
|
|
"display_order": 4,
|
|
"source_check_ids": [
|
|
"host_credential_handling_metadata_only_check"
|
|
],
|
|
"outcome_state": "quarantine_credential_metadata_gap",
|
|
"next_human_action": "request_metadata_only_credential_handling_statement",
|
|
"display_mode": "reviewer_outcome_only",
|
|
"checklist_passed_count": 0,
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"lane_id": "host_redaction_failed_outcome_lane",
|
|
"display_order": 5,
|
|
"source_check_ids": [
|
|
"host_redaction_attestation_pass_check"
|
|
],
|
|
"outcome_state": "rejected_redaction_failed",
|
|
"next_human_action": "request_redaction_attestation_refresh",
|
|
"display_mode": "reviewer_outcome_only",
|
|
"checklist_passed_count": 0,
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"lane_id": "host_rollback_missing_outcome_lane",
|
|
"display_order": 6,
|
|
"source_check_ids": [
|
|
"host_maintenance_rollback_complete_check"
|
|
],
|
|
"outcome_state": "needs_rollback_evidence",
|
|
"next_human_action": "request_maintenance_window_and_rollback_pointer",
|
|
"display_mode": "reviewer_outcome_only",
|
|
"checklist_passed_count": 0,
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"lane_id": "host_runtime_gate_required_outcome_lane",
|
|
"display_order": 7,
|
|
"source_check_ids": [
|
|
"host_validation_metrics_linked_check",
|
|
"host_runtime_gate_separated_check"
|
|
],
|
|
"outcome_state": "waiting_separate_runtime_gate",
|
|
"next_human_action": "keep_runtime_gate_separate_and_closed",
|
|
"display_mode": "reviewer_outcome_only",
|
|
"checklist_passed_count": 0,
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
}
|
|
],
|
|
"host_owner_decision_candidate_packets": [
|
|
{
|
|
"packet_id": "host_scope_approval_candidate_packet",
|
|
"display_order": 1,
|
|
"source_lane_ids": [
|
|
"host_ready_for_owner_decision_outcome_lane"
|
|
],
|
|
"decision_scope": "scope_boundary_hosts_networks_services_exclusions",
|
|
"required_owner_input": "owner_confirms_readable_scope_and_exclusions",
|
|
"display_mode": "owner_decision_candidate_only",
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"packet_id": "host_scan_mode_candidate_packet",
|
|
"display_order": 2,
|
|
"source_lane_ids": [
|
|
"host_ready_for_owner_decision_outcome_lane"
|
|
],
|
|
"decision_scope": "observe_only_future_active_or_credentialed_scan_mode",
|
|
"required_owner_input": "owner_selects_future_scan_mode_for_review_only",
|
|
"display_mode": "owner_decision_candidate_only",
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"packet_id": "host_credential_handling_candidate_packet",
|
|
"display_order": 3,
|
|
"source_lane_ids": [
|
|
"host_ready_for_owner_decision_outcome_lane",
|
|
"host_credential_metadata_failed_outcome_lane"
|
|
],
|
|
"decision_scope": "metadata_only_credential_handling_boundary",
|
|
"required_owner_input": "owner_confirms_no_sensitive_material_collection",
|
|
"display_mode": "owner_decision_candidate_only",
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"packet_id": "host_maintenance_window_candidate_packet",
|
|
"display_order": 4,
|
|
"source_lane_ids": [
|
|
"host_ready_for_owner_decision_outcome_lane",
|
|
"host_rollback_missing_outcome_lane"
|
|
],
|
|
"decision_scope": "future_maintenance_window_constraints",
|
|
"required_owner_input": "owner_provides_candidate_window_without_execution",
|
|
"display_mode": "owner_decision_candidate_only",
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"packet_id": "host_rollback_owner_candidate_packet",
|
|
"display_order": 5,
|
|
"source_lane_ids": [
|
|
"host_ready_for_owner_decision_outcome_lane",
|
|
"host_rollback_missing_outcome_lane"
|
|
],
|
|
"decision_scope": "rollback_owner_and_recovery_path",
|
|
"required_owner_input": "owner_names_rollback_contact_and_recovery_pointer",
|
|
"display_mode": "owner_decision_candidate_only",
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"packet_id": "host_validation_metrics_candidate_packet",
|
|
"display_order": 6,
|
|
"source_lane_ids": [
|
|
"host_ready_for_owner_decision_outcome_lane",
|
|
"host_runtime_gate_required_outcome_lane"
|
|
],
|
|
"decision_scope": "post_check_metrics_and_baseline_pointer",
|
|
"required_owner_input": "owner_confirms_validation_metrics_for_later_gate",
|
|
"display_mode": "owner_decision_candidate_only",
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"packet_id": "host_runtime_gate_candidate_packet",
|
|
"display_order": 7,
|
|
"source_lane_ids": [
|
|
"host_runtime_gate_required_outcome_lane"
|
|
],
|
|
"decision_scope": "separate_runtime_gate_requirement",
|
|
"required_owner_input": "owner_acknowledges_runtime_gate_stays_separate",
|
|
"display_mode": "owner_decision_candidate_only",
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
}
|
|
],
|
|
"host_owner_decision_review_checklist_items": [
|
|
{
|
|
"check_id": "host_scope_boundary_readable_review_check",
|
|
"display_order": 1,
|
|
"source_packet_ids": [
|
|
"host_scope_approval_candidate_packet"
|
|
],
|
|
"review_check": "owner_can_read_scope_hosts_networks_services_exclusions",
|
|
"guard_condition": "scope_review_only_owner_decision_received_zero",
|
|
"display_mode": "owner_decision_review_checklist_only",
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"check_id": "host_scan_mode_not_authorization_review_check",
|
|
"display_order": 2,
|
|
"source_packet_ids": [
|
|
"host_scan_mode_candidate_packet"
|
|
],
|
|
"review_check": "scan_modes_are_descriptive_not_authorization",
|
|
"guard_condition": "active_scan_and_credentialed_scan_authorized_false",
|
|
"display_mode": "owner_decision_review_checklist_only",
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"check_id": "host_credential_boundary_metadata_only_review_check",
|
|
"display_order": 3,
|
|
"source_packet_ids": [
|
|
"host_credential_handling_candidate_packet"
|
|
],
|
|
"review_check": "credential_boundary_metadata_only_no_sensitive_material",
|
|
"guard_condition": "secret_value_collection_allowed_false",
|
|
"display_mode": "owner_decision_review_checklist_only",
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"check_id": "host_maintenance_window_not_change_review_check",
|
|
"display_order": 4,
|
|
"source_packet_ids": [
|
|
"host_maintenance_window_candidate_packet"
|
|
],
|
|
"review_check": "maintenance_window_candidate_not_host_update",
|
|
"guard_condition": "host_update_authorized_false",
|
|
"display_mode": "owner_decision_review_checklist_only",
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"check_id": "host_rollback_owner_readable_review_check",
|
|
"display_order": 5,
|
|
"source_packet_ids": [
|
|
"host_rollback_owner_candidate_packet"
|
|
],
|
|
"review_check": "rollback_owner_and_recovery_path_readable",
|
|
"guard_condition": "owner_approval_record_created_false",
|
|
"display_mode": "owner_decision_review_checklist_only",
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"check_id": "host_validation_metrics_predefined_review_check",
|
|
"display_order": 6,
|
|
"source_packet_ids": [
|
|
"host_validation_metrics_candidate_packet"
|
|
],
|
|
"review_check": "post_check_metrics_baseline_pointer_predefined",
|
|
"guard_condition": "runtime_gate_opened_false",
|
|
"display_mode": "owner_decision_review_checklist_only",
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"check_id": "host_runtime_gate_still_separate_review_check",
|
|
"display_order": 7,
|
|
"source_packet_ids": [
|
|
"host_runtime_gate_candidate_packet"
|
|
],
|
|
"review_check": "owner_decision_checklist_cannot_execute_host_action",
|
|
"guard_condition": "action_buttons_allowed_false_runtime_gate_separate",
|
|
"display_mode": "owner_decision_review_checklist_only",
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
}
|
|
],
|
|
"host_owner_decision_review_outcome_lanes": [
|
|
{
|
|
"lane_id": "host_ready_for_decision_record_outcome_lane",
|
|
"display_order": 1,
|
|
"source_check_ids": [
|
|
"host_scope_boundary_readable_review_check",
|
|
"host_scan_mode_not_authorization_review_check",
|
|
"host_runtime_gate_still_separate_review_check"
|
|
],
|
|
"outcome_state": "candidate_decision_record_only",
|
|
"next_human_action": "display_formal_decision_record_candidate_only",
|
|
"display_mode": "owner_decision_review_outcome_only",
|
|
"owner_decision_review_passed_count": 0,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"lane_id": "host_scope_refresh_required_decision_outcome_lane",
|
|
"display_order": 2,
|
|
"source_check_ids": [
|
|
"host_scope_boundary_readable_review_check"
|
|
],
|
|
"outcome_state": "needs_scope_refresh",
|
|
"next_human_action": "request_scope_boundary_pointer_refresh",
|
|
"display_mode": "owner_decision_review_outcome_only",
|
|
"owner_decision_review_passed_count": 0,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"lane_id": "host_scan_mode_scope_required_decision_outcome_lane",
|
|
"display_order": 3,
|
|
"source_check_ids": [
|
|
"host_scan_mode_not_authorization_review_check"
|
|
],
|
|
"outcome_state": "needs_scan_mode_scope_review",
|
|
"next_human_action": "request_scan_mode_scope_statement_refresh",
|
|
"display_mode": "owner_decision_review_outcome_only",
|
|
"owner_decision_review_passed_count": 0,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"lane_id": "host_credential_boundary_failed_decision_outcome_lane",
|
|
"display_order": 4,
|
|
"source_check_ids": [
|
|
"host_credential_boundary_metadata_only_review_check"
|
|
],
|
|
"outcome_state": "quarantine_credential_boundary_gap",
|
|
"next_human_action": "request_metadata_only_credential_boundary_refresh",
|
|
"display_mode": "owner_decision_review_outcome_only",
|
|
"owner_decision_review_passed_count": 0,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"lane_id": "host_maintenance_window_required_decision_outcome_lane",
|
|
"display_order": 5,
|
|
"source_check_ids": [
|
|
"host_maintenance_window_not_change_review_check"
|
|
],
|
|
"outcome_state": "needs_maintenance_window",
|
|
"next_human_action": "request_maintenance_window_constraints_pointer",
|
|
"display_mode": "owner_decision_review_outcome_only",
|
|
"owner_decision_review_passed_count": 0,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"lane_id": "host_rollback_owner_required_decision_outcome_lane",
|
|
"display_order": 6,
|
|
"source_check_ids": [
|
|
"host_rollback_owner_readable_review_check"
|
|
],
|
|
"outcome_state": "needs_rollback_owner",
|
|
"next_human_action": "request_rollback_owner_and_recovery_pointer",
|
|
"display_mode": "owner_decision_review_outcome_only",
|
|
"owner_decision_review_passed_count": 0,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"lane_id": "host_runtime_gate_required_decision_outcome_lane",
|
|
"display_order": 7,
|
|
"source_check_ids": [
|
|
"host_validation_metrics_predefined_review_check",
|
|
"host_runtime_gate_still_separate_review_check"
|
|
],
|
|
"outcome_state": "waiting_separate_runtime_gate",
|
|
"next_human_action": "keep_runtime_gate_separate_and_closed",
|
|
"display_mode": "owner_decision_review_outcome_only",
|
|
"owner_decision_review_passed_count": 0,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
}
|
|
],
|
|
"host_owner_decision_record_draft_packets": [
|
|
{
|
|
"packet_id": "host_decision_record_scope_draft_packet",
|
|
"display_order": 1,
|
|
"source_lane_id": "host_ready_for_decision_record_outcome_lane",
|
|
"draft_field": "scope_statement",
|
|
"required_metadata": "host_network_service_exclusion_and_observation_intent",
|
|
"display_mode": "owner_decision_record_draft_only",
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"packet_id": "host_decision_record_scan_mode_draft_packet",
|
|
"display_order": 2,
|
|
"source_lane_id": "host_scan_mode_scope_required_decision_outcome_lane",
|
|
"draft_field": "scan_mode_statement",
|
|
"required_metadata": "observe_only_future_active_or_credentialed_scan_candidate_mode",
|
|
"display_mode": "owner_decision_record_draft_only",
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"packet_id": "host_decision_record_credential_boundary_draft_packet",
|
|
"display_order": 3,
|
|
"source_lane_id": "host_credential_boundary_failed_decision_outcome_lane",
|
|
"draft_field": "credential_boundary_statement",
|
|
"required_metadata": "metadata_only_credential_owner_and_retention_boundary",
|
|
"display_mode": "owner_decision_record_draft_only",
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"packet_id": "host_decision_record_maintenance_constraints_draft_packet",
|
|
"display_order": 4,
|
|
"source_lane_id": "host_maintenance_window_required_decision_outcome_lane",
|
|
"draft_field": "maintenance_constraints_statement",
|
|
"required_metadata": "window_constraints_impact_boundary_and_no_change_statement",
|
|
"display_mode": "owner_decision_record_draft_only",
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"packet_id": "host_decision_record_rollback_owner_draft_packet",
|
|
"display_order": 5,
|
|
"source_lane_id": "host_rollback_owner_required_decision_outcome_lane",
|
|
"draft_field": "rollback_owner_statement",
|
|
"required_metadata": "rollback_owner_recovery_path_and_human_contact_pointer",
|
|
"display_mode": "owner_decision_record_draft_only",
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"packet_id": "host_decision_record_validation_metrics_draft_packet",
|
|
"display_order": 6,
|
|
"source_lane_id": "host_runtime_gate_required_decision_outcome_lane",
|
|
"draft_field": "validation_metrics_statement",
|
|
"required_metadata": "post_check_metrics_baseline_and_evidence_pointer",
|
|
"display_mode": "owner_decision_record_draft_only",
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"packet_id": "host_decision_record_runtime_gate_draft_packet",
|
|
"display_order": 7,
|
|
"source_lane_id": "host_runtime_gate_required_decision_outcome_lane",
|
|
"draft_field": "runtime_gate_pointer_statement",
|
|
"required_metadata": "separate_followup_runtime_gate_pointer_with_active_gate_zero",
|
|
"display_mode": "owner_decision_record_draft_only",
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
}
|
|
],
|
|
"host_owner_decision_record_draft_review_checklist_items": [
|
|
{
|
|
"check_id": "host_decision_record_scope_statement_review_check",
|
|
"display_order": 1,
|
|
"source_packet_id": "host_decision_record_scope_draft_packet",
|
|
"review_condition": "scope_statement_metadata_complete",
|
|
"display_mode": "owner_decision_record_draft_review_checklist_only",
|
|
"decision_record_review_passed_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"check_id": "host_decision_record_scan_mode_review_check",
|
|
"display_order": 2,
|
|
"source_packet_id": "host_decision_record_scan_mode_draft_packet",
|
|
"review_condition": "scan_mode_not_authorization_confirmed",
|
|
"display_mode": "owner_decision_record_draft_review_checklist_only",
|
|
"decision_record_review_passed_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"check_id": "host_decision_record_credential_boundary_review_check",
|
|
"display_order": 3,
|
|
"source_packet_id": "host_decision_record_credential_boundary_draft_packet",
|
|
"review_condition": "credential_boundary_metadata_only_confirmed",
|
|
"display_mode": "owner_decision_record_draft_review_checklist_only",
|
|
"decision_record_review_passed_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"check_id": "host_decision_record_maintenance_constraints_review_check",
|
|
"display_order": 4,
|
|
"source_packet_id": "host_decision_record_maintenance_constraints_draft_packet",
|
|
"review_condition": "maintenance_constraints_no_change_confirmed",
|
|
"display_mode": "owner_decision_record_draft_review_checklist_only",
|
|
"decision_record_review_passed_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"check_id": "host_decision_record_rollback_owner_review_check",
|
|
"display_order": 5,
|
|
"source_packet_id": "host_decision_record_rollback_owner_draft_packet",
|
|
"review_condition": "rollback_owner_recovery_pointer_readable",
|
|
"display_mode": "owner_decision_record_draft_review_checklist_only",
|
|
"decision_record_review_passed_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"check_id": "host_decision_record_validation_metrics_review_check",
|
|
"display_order": 6,
|
|
"source_packet_id": "host_decision_record_validation_metrics_draft_packet",
|
|
"review_condition": "validation_metrics_baseline_linked",
|
|
"display_mode": "owner_decision_record_draft_review_checklist_only",
|
|
"decision_record_review_passed_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"check_id": "host_decision_record_runtime_gate_review_check",
|
|
"display_order": 7,
|
|
"source_packet_id": "host_decision_record_runtime_gate_draft_packet",
|
|
"review_condition": "runtime_gate_separate_and_closed",
|
|
"display_mode": "owner_decision_record_draft_review_checklist_only",
|
|
"decision_record_review_passed_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
}
|
|
],
|
|
"host_owner_decision_record_draft_review_outcome_lanes": [
|
|
{
|
|
"lane_id": "host_decision_record_ready_for_writeup_outcome_lane",
|
|
"display_order": 1,
|
|
"source_check_ids": [
|
|
"host_decision_record_scope_statement_review_check",
|
|
"host_decision_record_scan_mode_review_check",
|
|
"host_decision_record_runtime_gate_review_check"
|
|
],
|
|
"outcome_state": "candidate_decision_record_writeup_only",
|
|
"next_human_action": "display_formal_decision_record_writeup_candidate_only",
|
|
"display_mode": "owner_decision_record_draft_review_outcome_only",
|
|
"decision_record_review_passed_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"lane_id": "host_decision_record_scope_draft_incomplete_outcome_lane",
|
|
"display_order": 2,
|
|
"source_check_ids": [
|
|
"host_decision_record_scope_statement_review_check"
|
|
],
|
|
"outcome_state": "needs_scope_statement_refresh",
|
|
"next_human_action": "request_scope_statement_draft_refresh",
|
|
"display_mode": "owner_decision_record_draft_review_outcome_only",
|
|
"decision_record_review_passed_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"lane_id": "host_decision_record_scan_mode_ambiguous_outcome_lane",
|
|
"display_order": 3,
|
|
"source_check_ids": [
|
|
"host_decision_record_scan_mode_review_check"
|
|
],
|
|
"outcome_state": "needs_scan_mode_wording_refresh",
|
|
"next_human_action": "request_scan_mode_not_authorization_wording",
|
|
"display_mode": "owner_decision_record_draft_review_outcome_only",
|
|
"decision_record_review_passed_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"lane_id": "host_decision_record_credential_boundary_incomplete_outcome_lane",
|
|
"display_order": 4,
|
|
"source_check_ids": [
|
|
"host_decision_record_credential_boundary_review_check"
|
|
],
|
|
"outcome_state": "needs_credential_boundary_metadata_refresh",
|
|
"next_human_action": "request_metadata_only_credential_boundary_draft_refresh",
|
|
"display_mode": "owner_decision_record_draft_review_outcome_only",
|
|
"decision_record_review_passed_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"lane_id": "host_decision_record_maintenance_constraints_incomplete_outcome_lane",
|
|
"display_order": 5,
|
|
"source_check_ids": [
|
|
"host_decision_record_maintenance_constraints_review_check"
|
|
],
|
|
"outcome_state": "needs_maintenance_constraints_refresh",
|
|
"next_human_action": "request_maintenance_constraints_draft_refresh",
|
|
"display_mode": "owner_decision_record_draft_review_outcome_only",
|
|
"decision_record_review_passed_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"lane_id": "host_decision_record_rollback_owner_incomplete_outcome_lane",
|
|
"display_order": 6,
|
|
"source_check_ids": [
|
|
"host_decision_record_rollback_owner_review_check"
|
|
],
|
|
"outcome_state": "needs_rollback_owner_refresh",
|
|
"next_human_action": "request_rollback_owner_recovery_pointer_refresh",
|
|
"display_mode": "owner_decision_record_draft_review_outcome_only",
|
|
"decision_record_review_passed_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"lane_id": "host_decision_record_runtime_gate_required_outcome_lane",
|
|
"display_order": 7,
|
|
"source_check_ids": [
|
|
"host_decision_record_validation_metrics_review_check",
|
|
"host_decision_record_runtime_gate_review_check"
|
|
],
|
|
"outcome_state": "waiting_separate_runtime_gate",
|
|
"next_human_action": "keep_runtime_gate_separate_and_closed",
|
|
"display_mode": "owner_decision_record_draft_review_outcome_only",
|
|
"decision_record_review_passed_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
}
|
|
],
|
|
"host_owner_decision_record_writeup_packets": [
|
|
{
|
|
"packet_id": "host_decision_record_summary_writeup_packet",
|
|
"display_order": 1,
|
|
"source_lane_id": "host_decision_record_ready_for_writeup_outcome_lane",
|
|
"writeup_field": "decision_summary",
|
|
"required_decision_metadata": "human_decision_summary_risk_acceptance_boundary_and_no_execution_statement",
|
|
"display_mode": "owner_decision_record_writeup_only",
|
|
"decision_record_writeup_completed_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"packet_id": "host_decision_record_scope_writeup_packet",
|
|
"display_order": 2,
|
|
"source_lane_id": "host_decision_record_ready_for_writeup_outcome_lane",
|
|
"writeup_field": "approved_scope_statement",
|
|
"required_decision_metadata": "host_network_service_exclusion_observation_intent_and_expiry",
|
|
"display_mode": "owner_decision_record_writeup_only",
|
|
"decision_record_writeup_completed_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"packet_id": "host_decision_record_scan_mode_limits_writeup_packet",
|
|
"display_order": 3,
|
|
"source_lane_id": "host_decision_record_scan_mode_ambiguous_outcome_lane",
|
|
"writeup_field": "scan_mode_limits_statement",
|
|
"required_decision_metadata": "observe_only_future_active_or_credentialed_scan_limits",
|
|
"display_mode": "owner_decision_record_writeup_only",
|
|
"decision_record_writeup_completed_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"packet_id": "host_decision_record_credential_boundary_writeup_packet",
|
|
"display_order": 4,
|
|
"source_lane_id": "host_decision_record_credential_boundary_incomplete_outcome_lane",
|
|
"writeup_field": "credential_boundary_statement",
|
|
"required_decision_metadata": "metadata_only_credential_owner_retention_boundary_and_forbidden_collection",
|
|
"display_mode": "owner_decision_record_writeup_only",
|
|
"decision_record_writeup_completed_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"packet_id": "host_decision_record_maintenance_rollback_writeup_packet",
|
|
"display_order": 5,
|
|
"source_lane_id": "host_decision_record_maintenance_constraints_incomplete_outcome_lane",
|
|
"writeup_field": "maintenance_and_rollback_statement",
|
|
"required_decision_metadata": "maintenance_window_constraints_rollback_owner_recovery_path_and_human_contact",
|
|
"display_mode": "owner_decision_record_writeup_only",
|
|
"decision_record_writeup_completed_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"packet_id": "host_decision_record_validation_evidence_writeup_packet",
|
|
"display_order": 6,
|
|
"source_lane_id": "host_decision_record_runtime_gate_required_outcome_lane",
|
|
"writeup_field": "validation_evidence_statement",
|
|
"required_decision_metadata": "post_check_metrics_baseline_evidence_pointer_and_human_acceptance_condition",
|
|
"display_mode": "owner_decision_record_writeup_only",
|
|
"decision_record_writeup_completed_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"packet_id": "host_decision_record_runtime_gate_pointer_writeup_packet",
|
|
"display_order": 7,
|
|
"source_lane_id": "host_decision_record_runtime_gate_required_outcome_lane",
|
|
"writeup_field": "runtime_gate_pointer_statement",
|
|
"required_decision_metadata": "separate_followup_runtime_gate_pointer_with_active_gate_zero",
|
|
"display_mode": "owner_decision_record_writeup_only",
|
|
"decision_record_writeup_completed_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
}
|
|
],
|
|
"host_owner_decision_record_writeup_review_checklist_items": [
|
|
{
|
|
"check_id": "host_decision_record_summary_writeup_review_check",
|
|
"display_order": 1,
|
|
"source_packet_id": "host_decision_record_summary_writeup_packet",
|
|
"review_condition": "decision_summary_risk_acceptance_and_no_execution_statement_readable",
|
|
"display_mode": "owner_decision_record_writeup_review_checklist_only",
|
|
"decision_record_writeup_review_passed_count": 0,
|
|
"decision_record_writeup_completed_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"check_id": "host_decision_record_scope_writeup_review_check",
|
|
"display_order": 2,
|
|
"source_packet_id": "host_decision_record_scope_writeup_packet",
|
|
"review_condition": "scope_exclusion_observation_intent_and_expiry_complete",
|
|
"display_mode": "owner_decision_record_writeup_review_checklist_only",
|
|
"decision_record_writeup_review_passed_count": 0,
|
|
"decision_record_writeup_completed_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"check_id": "host_decision_record_scan_mode_limits_writeup_review_check",
|
|
"display_order": 3,
|
|
"source_packet_id": "host_decision_record_scan_mode_limits_writeup_packet",
|
|
"review_condition": "scan_mode_limits_explicit_and_not_authorization",
|
|
"display_mode": "owner_decision_record_writeup_review_checklist_only",
|
|
"decision_record_writeup_review_passed_count": 0,
|
|
"decision_record_writeup_completed_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"check_id": "host_decision_record_credential_boundary_writeup_review_check",
|
|
"display_order": 4,
|
|
"source_packet_id": "host_decision_record_credential_boundary_writeup_packet",
|
|
"review_condition": "credential_boundary_metadata_only_and_no_secret_collection",
|
|
"display_mode": "owner_decision_record_writeup_review_checklist_only",
|
|
"decision_record_writeup_review_passed_count": 0,
|
|
"decision_record_writeup_completed_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"check_id": "host_decision_record_maintenance_rollback_writeup_review_check",
|
|
"display_order": 5,
|
|
"source_packet_id": "host_decision_record_maintenance_rollback_writeup_packet",
|
|
"review_condition": "maintenance_window_constraints_rollback_and_human_contact_linked",
|
|
"display_mode": "owner_decision_record_writeup_review_checklist_only",
|
|
"decision_record_writeup_review_passed_count": 0,
|
|
"decision_record_writeup_completed_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"check_id": "host_decision_record_validation_evidence_writeup_review_check",
|
|
"display_order": 6,
|
|
"source_packet_id": "host_decision_record_validation_evidence_writeup_packet",
|
|
"review_condition": "validation_metrics_baseline_evidence_and_acceptance_condition_linked",
|
|
"display_mode": "owner_decision_record_writeup_review_checklist_only",
|
|
"decision_record_writeup_review_passed_count": 0,
|
|
"decision_record_writeup_completed_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"check_id": "host_decision_record_runtime_gate_writeup_review_check",
|
|
"display_order": 7,
|
|
"source_packet_id": "host_decision_record_runtime_gate_pointer_writeup_packet",
|
|
"review_condition": "runtime_gate_pointer_separate_and_closed",
|
|
"display_mode": "owner_decision_record_writeup_review_checklist_only",
|
|
"decision_record_writeup_review_passed_count": 0,
|
|
"decision_record_writeup_completed_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
}
|
|
],
|
|
"host_owner_decision_record_writeup_review_outcome_lanes": [
|
|
{
|
|
"lane_id": "host_decision_record_writeup_review_ready_for_formal_record_outcome_lane",
|
|
"display_order": 1,
|
|
"source_check_ids": [
|
|
"host_decision_record_summary_writeup_review_check",
|
|
"host_decision_record_scope_writeup_review_check",
|
|
"host_decision_record_runtime_gate_writeup_review_check"
|
|
],
|
|
"outcome_state": "candidate_formal_decision_record_only",
|
|
"next_human_action": "display_formal_decision_record_candidate_only",
|
|
"display_mode": "owner_decision_record_writeup_review_outcome_only",
|
|
"decision_record_writeup_review_passed_count": 0,
|
|
"decision_record_writeup_completed_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"lane_id": "host_decision_record_writeup_summary_needs_clarification_outcome_lane",
|
|
"display_order": 2,
|
|
"source_check_ids": [
|
|
"host_decision_record_summary_writeup_review_check"
|
|
],
|
|
"outcome_state": "needs_decision_summary_clarification",
|
|
"next_human_action": "request_decision_summary_writeup_refresh",
|
|
"display_mode": "owner_decision_record_writeup_review_outcome_only",
|
|
"decision_record_writeup_review_passed_count": 0,
|
|
"decision_record_writeup_completed_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"lane_id": "host_decision_record_writeup_scope_expiry_needs_refresh_outcome_lane",
|
|
"display_order": 3,
|
|
"source_check_ids": [
|
|
"host_decision_record_scope_writeup_review_check"
|
|
],
|
|
"outcome_state": "needs_scope_and_expiry_refresh",
|
|
"next_human_action": "request_scope_expiry_writeup_refresh",
|
|
"display_mode": "owner_decision_record_writeup_review_outcome_only",
|
|
"decision_record_writeup_review_passed_count": 0,
|
|
"decision_record_writeup_completed_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"lane_id": "host_decision_record_writeup_scan_mode_ambiguous_outcome_lane",
|
|
"display_order": 4,
|
|
"source_check_ids": [
|
|
"host_decision_record_scan_mode_limits_writeup_review_check"
|
|
],
|
|
"outcome_state": "needs_scan_mode_limit_wording_refresh",
|
|
"next_human_action": "request_scan_mode_limits_not_authorization_wording",
|
|
"display_mode": "owner_decision_record_writeup_review_outcome_only",
|
|
"decision_record_writeup_review_passed_count": 0,
|
|
"decision_record_writeup_completed_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"lane_id": "host_decision_record_writeup_credential_boundary_failed_outcome_lane",
|
|
"display_order": 5,
|
|
"source_check_ids": [
|
|
"host_decision_record_credential_boundary_writeup_review_check"
|
|
],
|
|
"outcome_state": "needs_credential_boundary_metadata_refresh",
|
|
"next_human_action": "request_metadata_only_credential_boundary_writeup_refresh",
|
|
"display_mode": "owner_decision_record_writeup_review_outcome_only",
|
|
"decision_record_writeup_review_passed_count": 0,
|
|
"decision_record_writeup_completed_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"lane_id": "host_decision_record_writeup_maintenance_rollback_incomplete_outcome_lane",
|
|
"display_order": 6,
|
|
"source_check_ids": [
|
|
"host_decision_record_maintenance_rollback_writeup_review_check"
|
|
],
|
|
"outcome_state": "needs_maintenance_rollback_refresh",
|
|
"next_human_action": "request_maintenance_rollback_writeup_refresh",
|
|
"display_mode": "owner_decision_record_writeup_review_outcome_only",
|
|
"decision_record_writeup_review_passed_count": 0,
|
|
"decision_record_writeup_completed_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"lane_id": "host_decision_record_writeup_runtime_gate_required_outcome_lane",
|
|
"display_order": 7,
|
|
"source_check_ids": [
|
|
"host_decision_record_validation_evidence_writeup_review_check",
|
|
"host_decision_record_runtime_gate_writeup_review_check"
|
|
],
|
|
"outcome_state": "waiting_separate_runtime_gate",
|
|
"next_human_action": "keep_runtime_gate_separate_and_closed",
|
|
"display_mode": "owner_decision_record_writeup_review_outcome_only",
|
|
"decision_record_writeup_review_passed_count": 0,
|
|
"decision_record_writeup_completed_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
}
|
|
],
|
|
"host_owner_decision_record_formal_candidate_packets": [
|
|
{
|
|
"packet_id": "host_decision_record_formal_candidate_identity_packet",
|
|
"display_order": 1,
|
|
"source_lane_id": "host_decision_record_writeup_review_ready_for_formal_record_outcome_lane",
|
|
"candidate_field": "record_identity_and_version",
|
|
"required_metadata": "record_id_candidate_version_owner_review_scope_and_trace_source",
|
|
"display_mode": "owner_decision_record_formal_candidate_only",
|
|
"formal_record_candidate_finalized_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"packet_id": "host_decision_record_formal_candidate_decision_summary_packet",
|
|
"display_order": 2,
|
|
"source_lane_id": "host_decision_record_writeup_review_ready_for_formal_record_outcome_lane",
|
|
"candidate_field": "decision_summary",
|
|
"required_metadata": "human_decision_summary_risk_acceptance_boundary_and_no_execution_statement",
|
|
"display_mode": "owner_decision_record_formal_candidate_only",
|
|
"formal_record_candidate_finalized_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"packet_id": "host_decision_record_formal_candidate_approved_scope_packet",
|
|
"display_order": 3,
|
|
"source_lane_id": "host_decision_record_writeup_review_ready_for_formal_record_outcome_lane",
|
|
"candidate_field": "approved_scope_statement",
|
|
"required_metadata": "host_network_service_exclusion_observation_intent_and_expiry",
|
|
"display_mode": "owner_decision_record_formal_candidate_only",
|
|
"formal_record_candidate_finalized_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"packet_id": "host_decision_record_formal_candidate_scan_mode_limits_packet",
|
|
"display_order": 4,
|
|
"source_lane_id": "host_decision_record_writeup_review_ready_for_formal_record_outcome_lane",
|
|
"candidate_field": "scan_mode_limits_statement",
|
|
"required_metadata": "observe_only_future_active_scan_and_credentialed_scan_limits",
|
|
"display_mode": "owner_decision_record_formal_candidate_only",
|
|
"formal_record_candidate_finalized_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"packet_id": "host_decision_record_formal_candidate_credential_boundary_packet",
|
|
"display_order": 5,
|
|
"source_lane_id": "host_decision_record_writeup_review_ready_for_formal_record_outcome_lane",
|
|
"candidate_field": "credential_boundary_statement",
|
|
"required_metadata": "metadata_only_credential_owner_retention_masking_and_forbidden_collection",
|
|
"display_mode": "owner_decision_record_formal_candidate_only",
|
|
"formal_record_candidate_finalized_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"packet_id": "host_decision_record_formal_candidate_maintenance_rollback_packet",
|
|
"display_order": 6,
|
|
"source_lane_id": "host_decision_record_writeup_review_ready_for_formal_record_outcome_lane",
|
|
"candidate_field": "maintenance_and_rollback_statement",
|
|
"required_metadata": "maintenance_window_constraints_rollback_owner_recovery_path_and_human_contact",
|
|
"display_mode": "owner_decision_record_formal_candidate_only",
|
|
"formal_record_candidate_finalized_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"packet_id": "host_decision_record_formal_candidate_validation_runtime_gate_packet",
|
|
"display_order": 7,
|
|
"source_lane_id": "host_decision_record_writeup_review_ready_for_formal_record_outcome_lane",
|
|
"candidate_field": "validation_and_runtime_gate_statement",
|
|
"required_metadata": "validation_evidence_post_check_metrics_baseline_pointer_and_separate_runtime_gate_requirement",
|
|
"display_mode": "owner_decision_record_formal_candidate_only",
|
|
"formal_record_candidate_finalized_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
}
|
|
],
|
|
"host_owner_decision_record_formal_candidate_review_checklist_items": [
|
|
{
|
|
"check_id": "host_decision_record_formal_candidate_identity_review_check",
|
|
"display_order": 1,
|
|
"source_packet_id": "host_decision_record_formal_candidate_identity_packet",
|
|
"review_condition": "record_identity_version_owner_scope_and_trace_source_readable",
|
|
"display_mode": "owner_decision_record_formal_candidate_review_checklist_only",
|
|
"formal_record_candidate_review_passed_count": 0,
|
|
"formal_record_candidate_finalized_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"check_id": "host_decision_record_formal_candidate_summary_review_check",
|
|
"display_order": 2,
|
|
"source_packet_id": "host_decision_record_formal_candidate_decision_summary_packet",
|
|
"review_condition": "decision_summary_risk_acceptance_and_no_execution_statement_readable",
|
|
"display_mode": "owner_decision_record_formal_candidate_review_checklist_only",
|
|
"formal_record_candidate_review_passed_count": 0,
|
|
"formal_record_candidate_finalized_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"check_id": "host_decision_record_formal_candidate_scope_review_check",
|
|
"display_order": 3,
|
|
"source_packet_id": "host_decision_record_formal_candidate_approved_scope_packet",
|
|
"review_condition": "scope_exclusion_observation_intent_and_expiry_consistent",
|
|
"display_mode": "owner_decision_record_formal_candidate_review_checklist_only",
|
|
"formal_record_candidate_review_passed_count": 0,
|
|
"formal_record_candidate_finalized_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"check_id": "host_decision_record_formal_candidate_scan_limits_review_check",
|
|
"display_order": 4,
|
|
"source_packet_id": "host_decision_record_formal_candidate_scan_mode_limits_packet",
|
|
"review_condition": "scan_limits_explicit_and_not_authorization",
|
|
"display_mode": "owner_decision_record_formal_candidate_review_checklist_only",
|
|
"formal_record_candidate_review_passed_count": 0,
|
|
"formal_record_candidate_finalized_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"check_id": "host_decision_record_formal_candidate_credential_boundary_review_check",
|
|
"display_order": 5,
|
|
"source_packet_id": "host_decision_record_formal_candidate_credential_boundary_packet",
|
|
"review_condition": "credential_boundary_metadata_only_masked_and_no_secret_collection",
|
|
"display_mode": "owner_decision_record_formal_candidate_review_checklist_only",
|
|
"formal_record_candidate_review_passed_count": 0,
|
|
"formal_record_candidate_finalized_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"check_id": "host_decision_record_formal_candidate_maintenance_rollback_review_check",
|
|
"display_order": 6,
|
|
"source_packet_id": "host_decision_record_formal_candidate_maintenance_rollback_packet",
|
|
"review_condition": "maintenance_window_constraints_rollback_and_human_contact_traceable",
|
|
"display_mode": "owner_decision_record_formal_candidate_review_checklist_only",
|
|
"formal_record_candidate_review_passed_count": 0,
|
|
"formal_record_candidate_finalized_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"check_id": "host_decision_record_formal_candidate_runtime_gate_review_check",
|
|
"display_order": 7,
|
|
"source_packet_id": "host_decision_record_formal_candidate_validation_runtime_gate_packet",
|
|
"review_condition": "validation_evidence_linked_and_runtime_gate_separate_closed",
|
|
"display_mode": "owner_decision_record_formal_candidate_review_checklist_only",
|
|
"formal_record_candidate_review_passed_count": 0,
|
|
"formal_record_candidate_finalized_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
}
|
|
],
|
|
"host_owner_decision_record_formal_candidate_review_outcome_lanes": [
|
|
{
|
|
"lane_id": "host_decision_record_formal_candidate_review_ready_for_record_queue_outcome_lane",
|
|
"display_order": 1,
|
|
"source_check_ids": [
|
|
"host_decision_record_formal_candidate_identity_review_check",
|
|
"host_decision_record_formal_candidate_summary_review_check",
|
|
"host_decision_record_formal_candidate_scope_review_check",
|
|
"host_decision_record_formal_candidate_scan_limits_review_check",
|
|
"host_decision_record_formal_candidate_credential_boundary_review_check",
|
|
"host_decision_record_formal_candidate_maintenance_rollback_review_check",
|
|
"host_decision_record_formal_candidate_runtime_gate_review_check"
|
|
],
|
|
"outcome_state": "ready_for_separate_human_record_queue",
|
|
"next_human_action": "queue_for_human_record_decision_without_creating_record",
|
|
"display_mode": "owner_decision_record_formal_candidate_review_outcome_only",
|
|
"formal_record_candidate_review_passed_count": 0,
|
|
"formal_record_candidate_finalized_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"lane_id": "host_decision_record_formal_candidate_review_identity_needs_trace_outcome_lane",
|
|
"display_order": 2,
|
|
"source_check_ids": [
|
|
"host_decision_record_formal_candidate_identity_review_check"
|
|
],
|
|
"outcome_state": "record_identity_trace_missing",
|
|
"next_human_action": "collect_record_identity_trace_metadata",
|
|
"display_mode": "owner_decision_record_formal_candidate_review_outcome_only",
|
|
"formal_record_candidate_review_passed_count": 0,
|
|
"formal_record_candidate_finalized_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"lane_id": "host_decision_record_formal_candidate_review_summary_needs_clarification_outcome_lane",
|
|
"display_order": 3,
|
|
"source_check_ids": [
|
|
"host_decision_record_formal_candidate_summary_review_check"
|
|
],
|
|
"outcome_state": "decision_summary_needs_clarification",
|
|
"next_human_action": "clarify_decision_summary_and_risk_boundary",
|
|
"display_mode": "owner_decision_record_formal_candidate_review_outcome_only",
|
|
"formal_record_candidate_review_passed_count": 0,
|
|
"formal_record_candidate_finalized_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"lane_id": "host_decision_record_formal_candidate_review_scope_expiry_needs_refresh_outcome_lane",
|
|
"display_order": 4,
|
|
"source_check_ids": [
|
|
"host_decision_record_formal_candidate_scope_review_check"
|
|
],
|
|
"outcome_state": "scope_expiry_needs_refresh",
|
|
"next_human_action": "refresh_scope_exclusions_and_expiry",
|
|
"display_mode": "owner_decision_record_formal_candidate_review_outcome_only",
|
|
"formal_record_candidate_review_passed_count": 0,
|
|
"formal_record_candidate_finalized_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"lane_id": "host_decision_record_formal_candidate_review_scan_limits_ambiguous_outcome_lane",
|
|
"display_order": 5,
|
|
"source_check_ids": [
|
|
"host_decision_record_formal_candidate_scan_limits_review_check"
|
|
],
|
|
"outcome_state": "scan_limits_ambiguous_not_authorization",
|
|
"next_human_action": "clarify_scan_limits_without_authorizing_scan",
|
|
"display_mode": "owner_decision_record_formal_candidate_review_outcome_only",
|
|
"formal_record_candidate_review_passed_count": 0,
|
|
"formal_record_candidate_finalized_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"lane_id": "host_decision_record_formal_candidate_review_credential_boundary_failed_outcome_lane",
|
|
"display_order": 6,
|
|
"source_check_ids": [
|
|
"host_decision_record_formal_candidate_credential_boundary_review_check"
|
|
],
|
|
"outcome_state": "credential_boundary_failed",
|
|
"next_human_action": "repair_metadata_only_credential_boundary",
|
|
"display_mode": "owner_decision_record_formal_candidate_review_outcome_only",
|
|
"formal_record_candidate_review_passed_count": 0,
|
|
"formal_record_candidate_finalized_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"lane_id": "host_decision_record_formal_candidate_review_maintenance_rollback_incomplete_outcome_lane",
|
|
"display_order": 7,
|
|
"source_check_ids": [
|
|
"host_decision_record_formal_candidate_maintenance_rollback_review_check"
|
|
],
|
|
"outcome_state": "maintenance_rollback_incomplete",
|
|
"next_human_action": "collect_maintenance_rollback_and_human_contact",
|
|
"display_mode": "owner_decision_record_formal_candidate_review_outcome_only",
|
|
"formal_record_candidate_review_passed_count": 0,
|
|
"formal_record_candidate_finalized_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"lane_id": "host_decision_record_formal_candidate_review_runtime_gate_required_outcome_lane",
|
|
"display_order": 8,
|
|
"source_check_ids": [
|
|
"host_decision_record_formal_candidate_runtime_gate_review_check"
|
|
],
|
|
"outcome_state": "waiting_separate_runtime_gate",
|
|
"next_human_action": "keep_runtime_gate_separate_and_closed",
|
|
"display_mode": "owner_decision_record_formal_candidate_review_outcome_only",
|
|
"formal_record_candidate_review_passed_count": 0,
|
|
"formal_record_candidate_finalized_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
}
|
|
],
|
|
"host_owner_decision_record_formal_record_queue_packets": [
|
|
{
|
|
"packet_id": "host_decision_record_formal_record_queue_identity_packet",
|
|
"display_order": 1,
|
|
"source_lane_id": "host_decision_record_formal_candidate_review_ready_for_record_queue_outcome_lane",
|
|
"queue_field": "record_identity_queue_packet",
|
|
"required_metadata": "candidate_record_id_version_owner_review_scope_and_trace_source",
|
|
"display_mode": "owner_decision_record_formal_record_queue_packet_only",
|
|
"formal_record_queue_enqueued_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"packet_id": "host_decision_record_formal_record_queue_decision_summary_packet",
|
|
"display_order": 2,
|
|
"source_lane_id": "host_decision_record_formal_candidate_review_ready_for_record_queue_outcome_lane",
|
|
"queue_field": "decision_summary_queue_packet",
|
|
"required_metadata": "decision_summary_risk_acceptance_boundary_and_no_execution_statement",
|
|
"display_mode": "owner_decision_record_formal_record_queue_packet_only",
|
|
"formal_record_queue_enqueued_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"packet_id": "host_decision_record_formal_record_queue_scope_expiry_packet",
|
|
"display_order": 3,
|
|
"source_lane_id": "host_decision_record_formal_candidate_review_ready_for_record_queue_outcome_lane",
|
|
"queue_field": "scope_expiry_queue_packet",
|
|
"required_metadata": "host_network_service_exclusion_observation_intent_and_expiry",
|
|
"display_mode": "owner_decision_record_formal_record_queue_packet_only",
|
|
"formal_record_queue_enqueued_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"packet_id": "host_decision_record_formal_record_queue_scan_limits_packet",
|
|
"display_order": 4,
|
|
"source_lane_id": "host_decision_record_formal_candidate_review_ready_for_record_queue_outcome_lane",
|
|
"queue_field": "scan_limits_queue_packet",
|
|
"required_metadata": "observe_only_future_active_scan_and_credentialed_scan_limits",
|
|
"display_mode": "owner_decision_record_formal_record_queue_packet_only",
|
|
"formal_record_queue_enqueued_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"packet_id": "host_decision_record_formal_record_queue_credential_boundary_packet",
|
|
"display_order": 5,
|
|
"source_lane_id": "host_decision_record_formal_candidate_review_ready_for_record_queue_outcome_lane",
|
|
"queue_field": "credential_boundary_queue_packet",
|
|
"required_metadata": "metadata_only_credential_owner_retention_masking_and_forbidden_collection",
|
|
"display_mode": "owner_decision_record_formal_record_queue_packet_only",
|
|
"formal_record_queue_enqueued_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"packet_id": "host_decision_record_formal_record_queue_maintenance_rollback_packet",
|
|
"display_order": 6,
|
|
"source_lane_id": "host_decision_record_formal_candidate_review_ready_for_record_queue_outcome_lane",
|
|
"queue_field": "maintenance_rollback_queue_packet",
|
|
"required_metadata": "maintenance_window_constraints_rollback_owner_recovery_path_and_human_contact",
|
|
"display_mode": "owner_decision_record_formal_record_queue_packet_only",
|
|
"formal_record_queue_enqueued_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"packet_id": "host_decision_record_formal_record_queue_validation_runtime_gate_packet",
|
|
"display_order": 7,
|
|
"source_lane_id": "host_decision_record_formal_candidate_review_ready_for_record_queue_outcome_lane",
|
|
"queue_field": "validation_runtime_gate_queue_packet",
|
|
"required_metadata": "validation_evidence_post_check_metrics_baseline_pointer_and_separate_runtime_gate_requirement",
|
|
"display_mode": "owner_decision_record_formal_record_queue_packet_only",
|
|
"formal_record_queue_enqueued_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"packet_id": "host_decision_record_formal_record_queue_no_execution_attestation_packet",
|
|
"display_order": 8,
|
|
"source_lane_id": "host_decision_record_formal_candidate_review_ready_for_record_queue_outcome_lane",
|
|
"queue_field": "no_execution_attestation_queue_packet",
|
|
"required_metadata": "not_authorization_no_execution_no_approval_no_runtime_gate_statement",
|
|
"display_mode": "owner_decision_record_formal_record_queue_packet_only",
|
|
"formal_record_queue_enqueued_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
}
|
|
],
|
|
"host_owner_decision_record_formal_record_queue_review_checklist_items": [
|
|
{
|
|
"item_id": "host_decision_record_formal_record_queue_review_identity_traceable_check",
|
|
"display_order": 1,
|
|
"source_packet_id": "host_decision_record_formal_record_queue_identity_packet",
|
|
"review_condition": "identity_traceable_to_candidate_source",
|
|
"guardrail": "do_not_enqueue_without_human_record_owner",
|
|
"display_mode": "owner_decision_record_formal_record_queue_review_checklist_only",
|
|
"formal_record_queue_review_passed_count": 0,
|
|
"formal_record_queue_enqueued_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"item_id": "host_decision_record_formal_record_queue_review_decision_summary_readable_check",
|
|
"display_order": 2,
|
|
"source_packet_id": "host_decision_record_formal_record_queue_decision_summary_packet",
|
|
"review_condition": "decision_summary_readable_without_approval_semantics",
|
|
"guardrail": "do_not_create_decision_record_from_summary",
|
|
"display_mode": "owner_decision_record_formal_record_queue_review_checklist_only",
|
|
"formal_record_queue_review_passed_count": 0,
|
|
"formal_record_queue_enqueued_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"item_id": "host_decision_record_formal_record_queue_review_scope_expiry_fresh_check",
|
|
"display_order": 3,
|
|
"source_packet_id": "host_decision_record_formal_record_queue_scope_expiry_packet",
|
|
"review_condition": "scope_expiry_current_and_bounded",
|
|
"guardrail": "do_not_finalize_scope_from_queue_review",
|
|
"display_mode": "owner_decision_record_formal_record_queue_review_checklist_only",
|
|
"formal_record_queue_review_passed_count": 0,
|
|
"formal_record_queue_enqueued_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"item_id": "host_decision_record_formal_record_queue_review_scan_limits_not_authorization_check",
|
|
"display_order": 4,
|
|
"source_packet_id": "host_decision_record_formal_record_queue_scan_limits_packet",
|
|
"review_condition": "scan_limits_not_authorization",
|
|
"guardrail": "do_not_authorize_active_or_credentialed_scan",
|
|
"display_mode": "owner_decision_record_formal_record_queue_review_checklist_only",
|
|
"formal_record_queue_review_passed_count": 0,
|
|
"formal_record_queue_enqueued_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"item_id": "host_decision_record_formal_record_queue_review_credential_boundary_metadata_only_check",
|
|
"display_order": 5,
|
|
"source_packet_id": "host_decision_record_formal_record_queue_credential_boundary_packet",
|
|
"review_condition": "credential_boundary_metadata_only",
|
|
"guardrail": "do_not_collect_secret_values",
|
|
"display_mode": "owner_decision_record_formal_record_queue_review_checklist_only",
|
|
"formal_record_queue_review_passed_count": 0,
|
|
"formal_record_queue_enqueued_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"item_id": "host_decision_record_formal_record_queue_review_maintenance_rollback_linked_check",
|
|
"display_order": 6,
|
|
"source_packet_id": "host_decision_record_formal_record_queue_maintenance_rollback_packet",
|
|
"review_condition": "maintenance_rollback_pointer_linked",
|
|
"guardrail": "do_not_execute_host_update_or_tuning",
|
|
"display_mode": "owner_decision_record_formal_record_queue_review_checklist_only",
|
|
"formal_record_queue_review_passed_count": 0,
|
|
"formal_record_queue_enqueued_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"item_id": "host_decision_record_formal_record_queue_review_validation_runtime_gate_separate_check",
|
|
"display_order": 7,
|
|
"source_packet_id": "host_decision_record_formal_record_queue_validation_runtime_gate_packet",
|
|
"review_condition": "validation_runtime_gate_separate",
|
|
"guardrail": "do_not_open_runtime_gate_from_queue_review",
|
|
"display_mode": "owner_decision_record_formal_record_queue_review_checklist_only",
|
|
"formal_record_queue_review_passed_count": 0,
|
|
"formal_record_queue_enqueued_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"item_id": "host_decision_record_formal_record_queue_review_no_execution_attestation_present_check",
|
|
"display_order": 8,
|
|
"source_packet_id": "host_decision_record_formal_record_queue_no_execution_attestation_packet",
|
|
"review_condition": "no_execution_attestation_present",
|
|
"guardrail": "do_not_create_action_button_or_approval",
|
|
"display_mode": "owner_decision_record_formal_record_queue_review_checklist_only",
|
|
"formal_record_queue_review_passed_count": 0,
|
|
"formal_record_queue_enqueued_count": 0,
|
|
"decision_record_created": false,
|
|
"owner_decision_received_count": 0,
|
|
"owner_decision_accepted_count": 0,
|
|
"owner_approval_record_created": false,
|
|
"runtime_gate_opened": false,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
}
|
|
]
|
|
}
|