a4233017ad
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 1s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 16s
CD Pipeline / build-and-deploy (push) Successful in 4m55s
CD Pipeline / post-deploy-checks (push) Successful in 55s
171 lines
7.0 KiB
JSON
171 lines
7.0 KiB
JSON
{
|
|
"schema_version": "awoooi_priority_work_order_readback_v1",
|
|
"generated_at": "2026-06-29T13:28:25+08:00",
|
|
"status": "p0_product_governance_readback_green_next_blocker_credential_escrow",
|
|
"source_refs": {
|
|
"global_scorecard": "~/.codex/product-runtime-governance-completion-scorecard.snapshot.json",
|
|
"workstation_dashboard": "~/.codex/codex-workstation-sync-dashboard.snapshot.json",
|
|
"post_reboot_summary": "/tmp/awoooi-post-reboot-readiness-20260629-115730/summary.txt",
|
|
"full_stack_cold_start_check": "scripts/reboot-recovery/full-stack-cold-start-check.sh --monitor-read-only --no-color",
|
|
"delivery_closure_workbench": "https://awoooi.wooo.work/api/v1/agents/delivery-closure-workbench",
|
|
"public_gitea_queue_readback": "ops/runner/read-public-gitea-actions-queue.py --json",
|
|
"credential_escrow_scorecard": "/tmp/awoooi-credential-escrow-intake-scorecard-20260629-1200-priority.json"
|
|
},
|
|
"current_head": {
|
|
"gitea_main_sha": "780587810c8b241ae60a153bdea1e557ba06218f",
|
|
"latest_successful_deploy_marker": "780587810 chore(cd): deploy a19b659 [skip ci]",
|
|
"latest_successful_deployed_source_sha": "a19b659f07c8f212a0514bf4af1affe657fa0fe1",
|
|
"latest_source_readiness_commit_sha": "0c8d4e88c39157b92322fa41a92e6b15c317ac49",
|
|
"latest_source_readiness_cd_run_id": "3882",
|
|
"latest_source_readiness_cd_run_status": "Success",
|
|
"source_readiness_ci_fix_required": false,
|
|
"no_matching_runner_visible": false
|
|
},
|
|
"completed_in_priority_order": [
|
|
{
|
|
"workplan_id": "P0-001",
|
|
"title": "建立主機 runtime inventory 權威資料",
|
|
"status": "core_green_with_warnings",
|
|
"evidence": {
|
|
"hosts_checked": [
|
|
"192.168.0.110",
|
|
"192.168.0.120",
|
|
"192.168.0.121",
|
|
"192.168.0.188"
|
|
],
|
|
"full_stack_pass": 91,
|
|
"full_stack_warn": 2,
|
|
"full_stack_blocked": 0,
|
|
"post_start_pass": 43,
|
|
"post_start_warn": 5,
|
|
"post_start_blocked": 0,
|
|
"service_green": true,
|
|
"host_188_hygiene_blocked": false,
|
|
"wazuh_manager_registry_accepted": 6,
|
|
"runtime_action_authorized": false
|
|
},
|
|
"warnings_kept_visible": [
|
|
"110 systemd failed units remain",
|
|
"188 momo daily sales stale but source preflight has no hard blocker"
|
|
]
|
|
},
|
|
{
|
|
"workplan_id": "P0-004",
|
|
"title": "補 dev / prod CI/CD baseline",
|
|
"status": "production_deploy_closure_verified",
|
|
"evidence": {
|
|
"non110_runner_ready": true,
|
|
"latest_cd_run_id": "3868",
|
|
"latest_cd_run_status": "Success",
|
|
"production_deploy_status": "closure_verified",
|
|
"production_image_tag_matches_main": true,
|
|
"production_governance_fields_present": true,
|
|
"runner_pressure_guard_ok": true
|
|
}
|
|
},
|
|
{
|
|
"workplan_id": "P0-004-source-readiness",
|
|
"title": "P0-004 CI/CD baseline source readiness",
|
|
"status": "ready_for_template_copy_apply_gate",
|
|
"evidence": {
|
|
"required_source_count": 11,
|
|
"present_required_source_count": 11,
|
|
"missing_required_source_count": 0,
|
|
"source_readiness_percent": 100,
|
|
"blocked_source_ids": []
|
|
},
|
|
"safe_next_step": "open_template_copy_apply_gate_after_source_readiness_green"
|
|
},
|
|
{
|
|
"workplan_id": "P0-002",
|
|
"title": "建立 product.awoooi.yaml 產品 manifest 標準",
|
|
"status": "ready_for_product_manifest_adoption",
|
|
"evidence": {
|
|
"manifest_present": true,
|
|
"manifest_schema_present": true,
|
|
"manifest_schema_version": "product_awoooi_manifest_v1",
|
|
"product_id": "awoooi",
|
|
"source_control_authority": "gitea",
|
|
"github_status": "stopped_retired_do_not_use",
|
|
"required_section_count": 5,
|
|
"present_required_section_count": 5,
|
|
"missing_required_section_count": 0,
|
|
"required_contract_ref_count": 3,
|
|
"present_contract_ref_count": 3,
|
|
"missing_contract_ref_count": 0,
|
|
"source_readiness_percent": 100
|
|
},
|
|
"safe_next_step": "adopt_product_manifest_schema_for_remaining_products_without_repo_creation_or_secret_read"
|
|
}
|
|
],
|
|
"in_progress_or_blocked_in_priority_order": [
|
|
{
|
|
"workplan_id": "P0-005",
|
|
"title": "產品資料與備份 contract",
|
|
"status": "blocked_waiting_non_secret_credential_escrow_evidence",
|
|
"reason": "Backup core and product freshness are green, but DR completion still requires five non-secret credential escrow evidence markers.",
|
|
"evidence": {
|
|
"product_data_green": true,
|
|
"stock_freshness_status": "ok",
|
|
"stock_latest_trading_date": "2026-06-26",
|
|
"backup_core_green": true,
|
|
"dr_escrow_blocked": true,
|
|
"summary_escrow_missing_count": 5,
|
|
"offsite_configured": true,
|
|
"rclone_configured": true,
|
|
"script_missing_count": 0,
|
|
"credential_marker_write_authorized_count": 0,
|
|
"secret_value_collection_allowed": false
|
|
},
|
|
"missing_items": [
|
|
"restic_repository_password",
|
|
"offsite_provider_credentials",
|
|
"break_glass_admin_credentials",
|
|
"dns_registrar_recovery",
|
|
"oauth_ai_provider_recovery"
|
|
],
|
|
"safe_next_step": "collect_redacted_non_secret_evidence_refs_then_rerun_preflight"
|
|
},
|
|
{
|
|
"workplan_id": "P0-003",
|
|
"title": "取得 Gitea private inventory 權限",
|
|
"status": "blocked_external_or_authenticated_inventory_required",
|
|
"reason": "Global scorecard still reports private/internal inventory incomplete; GitHub remains stopped and must not be used as a fallback."
|
|
},
|
|
{
|
|
"workplan_id": "P0-006",
|
|
"title": "清理 source-to-runtime drift 與 stale routes",
|
|
"status": "pending_after_p0_005_and_p0_003",
|
|
"reason": "P0-004 source readiness and P0-002 product manifest are green; keep drift cleanup after credential escrow and authenticated Gitea inventory readback."
|
|
}
|
|
],
|
|
"stopped_or_do_not_use": [
|
|
{
|
|
"workplan_id": "P0-003A",
|
|
"title": "GitHub 全產品備援鏡像",
|
|
"status": "removed_deleted_do_not_use",
|
|
"allowed_actions": 0
|
|
}
|
|
],
|
|
"operation_boundaries": {
|
|
"github_api_used": false,
|
|
"github_cli_used": false,
|
|
"workflow_dispatch_performed": false,
|
|
"runner_registration_performed": false,
|
|
"secret_or_runner_token_read": false,
|
|
"credential_secret_value_read": false,
|
|
"credential_marker_written": false,
|
|
"host_write_performed": false,
|
|
"docker_restart_performed": false,
|
|
"nginx_restart_performed": false,
|
|
"firewall_change_performed": false,
|
|
"k3s_restart_or_node_drain_performed": false,
|
|
"database_write_or_restore_performed": false
|
|
},
|
|
"next_execution_order": [
|
|
"P0-005: keep credential_escrow_evidence blocked until real redacted non-secret evidence refs exist; do not read or write secrets.",
|
|
"P0-003: continue Gitea-only private/internal inventory readback when authorized source exists; do not use GitHub.",
|
|
"P0-006: source-to-runtime drift cleanup after P0-005/P0-003 blockers are stable."
|
|
]
|
|
}
|