204 lines
8.6 KiB
JSON
204 lines
8.6 KiB
JSON
{
|
||
"schema_version": "github_target_decision_v1",
|
||
"status": "draft",
|
||
"decision_count": 10,
|
||
"approval_required_count": 9,
|
||
"decisions": [
|
||
{
|
||
"github_repo": "owenhytsai/awoooi",
|
||
"source_key": "wooo/awoooi",
|
||
"probe_status": "exists",
|
||
"target_state": "exists_refs_blocked",
|
||
"recommended_action": "hold_refs_reconcile",
|
||
"risk": "HIGH",
|
||
"approval_required": true,
|
||
"blocked_until": [
|
||
"Gitea/GitHub main SHA 對齊或人工指定真相來源",
|
||
"branches/tags/workflows/webhooks/secrets 名稱 inventory 完成",
|
||
"GitHub primary ADR 完成"
|
||
],
|
||
"evidence_refs": [
|
||
"docs/security/GITEA-GITHUB-MIGRATION-SNAPSHOT.md",
|
||
"docs/security/github-target-probe.snapshot.json",
|
||
"docs/security/github-target-owner-decision-response.snapshot.json"
|
||
],
|
||
"notes": "GitHub repo 可讀，但 refs blocked，不可切 primary。"
|
||
},
|
||
{
|
||
"github_repo": "owenhytsai/clawbot-v5",
|
||
"source_key": "wooo/clawbot-v5",
|
||
"probe_status": "exists",
|
||
"target_state": "exists_refs_blocked",
|
||
"recommended_action": "hold_refs_reconcile",
|
||
"risk": "MEDIUM",
|
||
"approval_required": true,
|
||
"blocked_until": [
|
||
"Gitea/GitHub main SHA 對齊或人工指定真相來源",
|
||
"GitHub 缺 Gitea tag 的處理方式已決定"
|
||
],
|
||
"evidence_refs": [
|
||
"docs/security/SOURCE-CONTROL-CLAWBOT-V5-SNAPSHOT.md",
|
||
"docs/security/github-target-probe.snapshot.json",
|
||
"docs/security/github-target-owner-decision-response.snapshot.json"
|
||
],
|
||
"notes": "GitHub repo 可讀，但 main SHA 與 tag 不一致。"
|
||
},
|
||
{
|
||
"github_repo": "owenhytsai/wooo-aiops",
|
||
"source_key": "wooo/wooo-aiops",
|
||
"probe_status": "exists",
|
||
"target_state": "exists_refs_blocked",
|
||
"recommended_action": "hold_refs_reconcile",
|
||
"risk": "MEDIUM",
|
||
"approval_required": true,
|
||
"blocked_until": [
|
||
"Gitea/GitHub main SHA 對齊或人工指定真相來源",
|
||
"GitHub-only branch 與 tags 的來源已釐清"
|
||
],
|
||
"evidence_refs": [
|
||
"docs/security/SOURCE-CONTROL-WOOO-AIOPS-SNAPSHOT.md",
|
||
"docs/security/github-target-probe.snapshot.json",
|
||
"docs/security/github-target-owner-decision-response.snapshot.json"
|
||
],
|
||
"notes": "GitHub repo 可讀，但 GitHub tags 比 Gitea 多，需釐清真相來源。"
|
||
},
|
||
{
|
||
"github_repo": "owenhytsai/wooo-infra-config",
|
||
"source_key": "wooo/wooo-infra-config",
|
||
"probe_status": "exists",
|
||
"target_state": "exists_aligned",
|
||
"recommended_action": "confirm_internal_remote_purpose",
|
||
"risk": "MEDIUM",
|
||
"approval_required": true,
|
||
"blocked_until": [
|
||
"110 internal remote 用途已確認",
|
||
"若 110 remote 為舊主控，已降級或移除",
|
||
"infra secrets 名稱 inventory 完成"
|
||
],
|
||
"evidence_refs": [
|
||
"docs/security/GIT-REMOTE-REFS-WOOO-INFRA-CONFIG-SNAPSHOT.md",
|
||
"docs/security/github-target-probe.snapshot.json",
|
||
"docs/security/github-target-owner-decision-response.snapshot.json"
|
||
],
|
||
"notes": "GitHub 與本機 main 對齊；110 internal remote 不可讀，需判斷用途。"
|
||
},
|
||
{
|
||
"github_repo": "owenhytsai/ewoooc",
|
||
"source_key": "wooo/ewoooc / root/momo-pro-system / momo working trees",
|
||
"probe_status": "not_found_or_private",
|
||
"target_state": "not_found_or_private",
|
||
"recommended_action": "create_or_grant_access_after_approval",
|
||
"risk": "HIGH",
|
||
"approval_required": true,
|
||
"blocked_until": [
|
||
"ewoooc/momo-pro-system canonical 關係人工確認",
|
||
"server-side refs diff 完成",
|
||
"GitHub repo visibility 與 owner 決策完成"
|
||
],
|
||
"evidence_refs": [
|
||
"docs/security/GITEA-PUBLIC-REPO-SEARCH-SNAPSHOT.md",
|
||
"docs/security/LOCAL-REPO-CANONICAL-EWOOOC-MOMO-SNAPSHOT.md",
|
||
"docs/security/github-target-probe.snapshot.json",
|
||
"docs/security/github-target-owner-decision-response.snapshot.json"
|
||
],
|
||
"notes": "GitHub target 未授權 probe 看不到，且 momo/ewoooc lineage unrelated，不可自動建立 mirror。"
|
||
},
|
||
{
|
||
"github_repo": "owenhytsai/bitan-pharmacy",
|
||
"source_key": "bitan-pharmacy",
|
||
"probe_status": "not_found_or_private",
|
||
"target_state": "not_found_or_private",
|
||
"recommended_action": "create_or_grant_access_after_approval",
|
||
"risk": "MEDIUM",
|
||
"approval_required": true,
|
||
"blocked_until": [
|
||
"確認 repo 是否仍 active",
|
||
"GitHub repo visibility 與 owner 決策完成"
|
||
],
|
||
"evidence_refs": [
|
||
"docs/security/GIT-REMOTE-REFS-BITAN-TSENYANG-SNAPSHOT.md",
|
||
"docs/security/github-target-probe.snapshot.json",
|
||
"docs/security/github-target-owner-decision-response.snapshot.json"
|
||
],
|
||
"notes": "110 remote 與本機 main 對齊，可作 source candidate；GitHub target 未確認。"
|
||
},
|
||
{
|
||
"github_repo": "owenhytsai/tsenyang-website",
|
||
"source_key": "tsenyang-website",
|
||
"probe_status": "not_found_or_private",
|
||
"target_state": "not_found_or_private",
|
||
"recommended_action": "create_or_grant_access_after_approval",
|
||
"risk": "MEDIUM",
|
||
"approval_required": true,
|
||
"blocked_until": [
|
||
"確認 repo 是否仍 active",
|
||
"GitHub repo visibility 與 owner 決策完成"
|
||
],
|
||
"evidence_refs": [
|
||
"docs/security/GIT-REMOTE-REFS-BITAN-TSENYANG-SNAPSHOT.md",
|
||
"docs/security/github-target-probe.snapshot.json",
|
||
"docs/security/github-target-owner-decision-response.snapshot.json"
|
||
],
|
||
"notes": "110 remote 與本機 main 對齊，可作 source candidate；GitHub target 未確認。"
|
||
},
|
||
{
|
||
"github_repo": "nexu-io/open-design",
|
||
"source_key": "open-design",
|
||
"probe_status": "exists",
|
||
"target_state": "external_scope",
|
||
"recommended_action": "scope_review_only",
|
||
"risk": "LOW",
|
||
"approval_required": false,
|
||
"blocked_until": [
|
||
"確認是否屬於 AWOOOI 資安網範圍"
|
||
],
|
||
"evidence_refs": [
|
||
"docs/security/github-target-probe.snapshot.json"
|
||
],
|
||
"notes": "外部/設計 repo，先做 scope review，不納入主控切換。"
|
||
},
|
||
{
|
||
"github_repo": "owenhytsai/VibeWork",
|
||
"source_key": "vibework",
|
||
"probe_status": "not_found_or_private",
|
||
"target_state": "not_found_or_private",
|
||
"recommended_action": "create_or_grant_access_after_approval",
|
||
"risk": "HIGH",
|
||
"approval_required": true,
|
||
"blocked_until": [
|
||
"VibeWork 產品 / repo / surface owner 與 canonical source 決策完成",
|
||
"確認是否存在 private GitHub target 或需要建立候選 repo",
|
||
"保留 VibeWork 獨立產品邊界，不得由 AWOOOI primary readiness 直接併入",
|
||
"workflow / CODEOWNERS / deploy key / repository secret name parity owner response 完成"
|
||
],
|
||
"evidence_refs": [
|
||
"docs/security/source-control-workflow-secret-name-local-evidence.snapshot.json",
|
||
"docs/security/source-control-primary-readiness-gate.snapshot.json",
|
||
"docs/security/github-target-owner-decision-response.snapshot.json"
|
||
],
|
||
"notes": "GitHub unauthenticated probe 為 not_found_or_private；只能代表公開未授權看不到，不得視為 repo 不存在或可直接建立。VibeWork 仍維持獨立產品邊界。"
|
||
},
|
||
{
|
||
"github_repo": "owenhytsai/agent-bounty-protocol",
|
||
"source_key": "agent-bounty-protocol",
|
||
"probe_status": "not_found_or_private",
|
||
"target_state": "not_found_or_private",
|
||
"recommended_action": "create_or_grant_access_after_approval",
|
||
"risk": "HIGH",
|
||
"approval_required": true,
|
||
"blocked_until": [
|
||
"agent-bounty-protocol repo / deployment / external agent / treasury owner 決策完成",
|
||
"確認是否存在 private GitHub target 或需要建立候選 repo",
|
||
"A2A / MCP / bounty / treasury / payout / withdrawal runtime gate 維持 0",
|
||
"branch protection / CODEOWNERS / repository secret name parity owner response 完成"
|
||
],
|
||
"evidence_refs": [
|
||
"docs/security/source-control-workflow-secret-name-local-evidence.snapshot.json",
|
||
"docs/security/source-control-primary-readiness-gate.snapshot.json",
|
||
"docs/security/github-target-owner-decision-response.snapshot.json"
|
||
],
|
||
"notes": "GitHub unauthenticated probe 為 not_found_or_private；只能代表公開未授權看不到，不得視為 repo 不存在或可直接建立。agent / bounty / treasury / execution surface 仍需 owner response。"
|
||
}
|
||
]
|
||
}
|