1296 lines
43 KiB
JSON
1296 lines
43 KiB
JSON
{
|
|
"schema_version": "iwooos_posture_projection_v1",
|
|
"status": "draft",
|
|
"date": "2026-05-19",
|
|
"product_id": "iwooos",
|
|
"display_name": "IwoooS",
|
|
"mode": "mirror_only",
|
|
"source_paths": [
|
|
"docs/security/security-mirror-status-rollup.snapshot.json",
|
|
"docs/security/security-rollout-policy.snapshot.json",
|
|
"docs/security/source-control-owner-response-validation-rollup.snapshot.json",
|
|
"docs/security/kali-integration-status.snapshot.json",
|
|
"apps/web/src/app/[locale]/iwooos/page.tsx",
|
|
"apps/web/src/app/[locale]/security-compliance/page.tsx",
|
|
"apps/web/src/app/[locale]/security/page.tsx",
|
|
"apps/web/src/app/[locale]/compliance/page.tsx",
|
|
"apps/web/src/app/[locale]/alerts/page.tsx",
|
|
"apps/web/src/app/[locale]/errors/page.tsx",
|
|
"apps/web/src/app/[locale]/authorizations/page.tsx",
|
|
"apps/web/src/app/[locale]/governance/page.tsx",
|
|
"apps/web/src/app/[locale]/alert-operation-logs/page.tsx",
|
|
"apps/web/src/app/[locale]/awooop/approvals/page.tsx",
|
|
"apps/web/src/app/[locale]/code-review/page.tsx"
|
|
],
|
|
"summary": {
|
|
"route_path": "/iwooos",
|
|
"nav_entry_added": true,
|
|
"command_palette_entry_added": true,
|
|
"contract_count": 36,
|
|
"active_runtime_gate_count": 0,
|
|
"approval_queue_total": 8,
|
|
"pending_approval_count": 7,
|
|
"block_candidate_count": 1,
|
|
"owner_response_validation_received_count": 0,
|
|
"owner_response_validation_accepted_count": 0,
|
|
"github_primary_ready_count": 0,
|
|
"action_buttons_allowed": false,
|
|
"existing_frontend_surface_count": 10,
|
|
"frontend_surface_coverage_group_count": 4,
|
|
"frontend_surface_conflict_control_count": 5,
|
|
"operator_journey_step_count": 6,
|
|
"owner_evidence_readiness_item_count": 7,
|
|
"host_coverage_item_count": 3,
|
|
"host_action_gate_item_count": 6,
|
|
"host_evidence_readiness_item_count": 7,
|
|
"host_evidence_collection_step_count": 7,
|
|
"host_evidence_intake_preflight_check_count": 7,
|
|
"host_evidence_review_outcome_lane_count": 7
|
|
},
|
|
"progress": {
|
|
"overall_percent": 58,
|
|
"framework_percent_min": 80,
|
|
"framework_percent_max": 85,
|
|
"runtime_landing_percent_min": 35,
|
|
"runtime_landing_percent_max": 40,
|
|
"headline_status": "holding_until_owner_response_or_runtime_gate",
|
|
"not_authorization": true
|
|
},
|
|
"posture_pillars": [
|
|
{
|
|
"pillar_id": "exposure_posture",
|
|
"display_order": 1,
|
|
"display_state": "waiting_evidence",
|
|
"source_contract": "security_mirror_status_rollup_v1",
|
|
"display_mode": "posture_only",
|
|
"runtime_execution_authorized": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"pillar_id": "source_control_supply_chain",
|
|
"display_order": 2,
|
|
"display_state": "draft_gated",
|
|
"source_contract": "source_control_owner_response_validation_rollup_v1",
|
|
"display_mode": "posture_only",
|
|
"runtime_execution_authorized": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"pillar_id": "kali_112_mesh",
|
|
"display_order": 3,
|
|
"display_state": "observe_only",
|
|
"source_contract": "kali_integration_status_v1",
|
|
"display_mode": "posture_only",
|
|
"runtime_execution_authorized": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"pillar_id": "approval_boundary",
|
|
"display_order": 4,
|
|
"display_state": "locked",
|
|
"source_contract": "security_approval_gate_v1",
|
|
"display_mode": "posture_only",
|
|
"runtime_execution_authorized": false,
|
|
"not_authorization": true
|
|
}
|
|
],
|
|
"non_blocking_lane_ids": [
|
|
"lane-low-medium-observation",
|
|
"lane-owner-response-missing",
|
|
"lane-mirror-data-incomplete",
|
|
"lane-source-control-drift-draft",
|
|
"lane-kali-observe-finding",
|
|
"lane-workflow-secret-name-gap",
|
|
"lane-progress-display-holding"
|
|
],
|
|
"evidence_refs": [
|
|
"docs/security/iwooos-posture-projection.snapshot.json",
|
|
"docs/security/security-rollout-policy.snapshot.json",
|
|
"docs/security/security-mirror-status-rollup.snapshot.json",
|
|
"docs/security/source-control-owner-response-validation-rollup.snapshot.json",
|
|
"docs/security/kali-integration-status.snapshot.json"
|
|
],
|
|
"allowed_frontend_outputs": [
|
|
"display_security_posture",
|
|
"display_progress_estimate",
|
|
"display_non_blocking_lanes",
|
|
"display_existing_frontend_security_surfaces",
|
|
"display_frontend_surface_coverage_matrix",
|
|
"display_frontend_surface_conflict_controls",
|
|
"display_operator_journey_steps",
|
|
"display_owner_evidence_readiness_board",
|
|
"display_host_coverage_view",
|
|
"display_host_action_gate_matrix",
|
|
"display_host_evidence_readiness_board",
|
|
"display_evidence_refs",
|
|
"display_next_gate",
|
|
"display_forbidden_actions",
|
|
"display_host_evidence_collection_order",
|
|
"display_host_evidence_intake_preflight_checks",
|
|
"display_host_evidence_review_outcome_lanes"
|
|
],
|
|
"forbidden_frontend_outputs": [
|
|
"add_scan_button",
|
|
"add_execute_button",
|
|
"add_repair_button",
|
|
"start_kali_scan",
|
|
"call_kali_execute_endpoint",
|
|
"create_github_repo",
|
|
"change_repo_visibility",
|
|
"sync_git_refs",
|
|
"modify_workflow_or_secret",
|
|
"enable_runner",
|
|
"switch_github_primary",
|
|
"ssh_to_host",
|
|
"update_kali_host",
|
|
"credentialed_scan_host",
|
|
"open_ssh_session",
|
|
"auto_update_host",
|
|
"run_host_package_upgrade",
|
|
"apply_runtime_blocking_control",
|
|
"mark_host_evidence_received",
|
|
"mark_host_evidence_accepted",
|
|
"ingest_raw_host_evidence",
|
|
"production_deploy",
|
|
"treat_progress_as_authorization",
|
|
"advance_host_collection_state",
|
|
"skip_host_evidence_dependency",
|
|
"accept_host_evidence_without_preflight",
|
|
"ingest_host_evidence_raw_payload",
|
|
"collect_host_credential_plaintext",
|
|
"advance_host_evidence_counters_from_frontend",
|
|
"create_host_approval_from_review_lane",
|
|
"treat_host_review_lane_as_runtime_gate",
|
|
"mark_host_review_outcome_accepted"
|
|
],
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true,
|
|
"existing_frontend_surfaces": [
|
|
{
|
|
"surface_id": "security_compliance",
|
|
"route_path": "/security-compliance",
|
|
"display_order": 1,
|
|
"source_page": "apps/web/src/app/[locale]/security-compliance/page.tsx",
|
|
"source_components": [
|
|
"SecurityPanel",
|
|
"CompliancePanel"
|
|
],
|
|
"source_api_routes": [
|
|
"/api/v1/errors/stats",
|
|
"/api/v1/errors/issues",
|
|
"/api/v1/stats/incidents/summary",
|
|
"/api/v1/auto-repair/stats"
|
|
],
|
|
"display_mode": "link_only",
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"surface_id": "legacy_security",
|
|
"route_path": "/security",
|
|
"display_order": 2,
|
|
"source_page": "apps/web/src/app/[locale]/security/page.tsx",
|
|
"source_components": [],
|
|
"source_api_routes": [
|
|
"/api/v1/errors/stats",
|
|
"/api/v1/errors/issues"
|
|
],
|
|
"display_mode": "link_only",
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"surface_id": "legacy_compliance",
|
|
"route_path": "/compliance",
|
|
"display_order": 3,
|
|
"source_page": "apps/web/src/app/[locale]/compliance/page.tsx",
|
|
"source_components": [],
|
|
"source_api_routes": [
|
|
"/api/v1/stats/incidents/summary",
|
|
"/api/v1/auto-repair/stats"
|
|
],
|
|
"display_mode": "link_only",
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"surface_id": "alerts",
|
|
"route_path": "/alerts",
|
|
"display_order": 4,
|
|
"source_page": "apps/web/src/app/[locale]/alerts/page.tsx",
|
|
"source_components": [
|
|
"IncidentCard"
|
|
],
|
|
"source_api_routes": [
|
|
"/api/v1/incidents",
|
|
"/api/v1/approvals/pending"
|
|
],
|
|
"display_mode": "link_only",
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"surface_id": "errors",
|
|
"route_path": "/errors",
|
|
"display_order": 5,
|
|
"source_page": "apps/web/src/app/[locale]/errors/page.tsx",
|
|
"source_components": [
|
|
"ErrorsPanel"
|
|
],
|
|
"source_api_routes": [
|
|
"/api/v1/errors/stats",
|
|
"/api/v1/errors/issues",
|
|
"/api/v1/errors/trends",
|
|
"/api/v1/errors/ux-audit"
|
|
],
|
|
"display_mode": "link_only",
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"surface_id": "authorizations",
|
|
"route_path": "/authorizations",
|
|
"display_order": 6,
|
|
"source_page": "apps/web/src/app/[locale]/authorizations/page.tsx",
|
|
"source_components": [
|
|
"LiveApprovalPanel"
|
|
],
|
|
"source_api_routes": [
|
|
"/api/v1/approvals/pending"
|
|
],
|
|
"display_mode": "link_only",
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"surface_id": "governance",
|
|
"route_path": "/governance",
|
|
"display_order": 7,
|
|
"source_page": "apps/web/src/app/[locale]/governance/page.tsx",
|
|
"source_components": [
|
|
"SloTab",
|
|
"EventsTab",
|
|
"QueueTab"
|
|
],
|
|
"source_api_routes": [
|
|
"/api/v1/ai/slo",
|
|
"/api/v1/ai/governance/summary",
|
|
"/api/v1/ai/governance/events",
|
|
"/api/v1/ai/governance/queue",
|
|
"/api/v1/ai/slo/remediation/history"
|
|
],
|
|
"display_mode": "link_only",
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"surface_id": "alert_operation_logs",
|
|
"route_path": "/alert-operation-logs",
|
|
"display_order": 8,
|
|
"source_page": "apps/web/src/app/[locale]/alert-operation-logs/page.tsx",
|
|
"source_components": [],
|
|
"source_api_routes": [
|
|
"/api/v1/alert-operation-logs",
|
|
"/api/v1/alert-operation-logs/stats"
|
|
],
|
|
"display_mode": "link_only",
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"surface_id": "awooop_approvals",
|
|
"route_path": "/awooop/approvals",
|
|
"display_order": 9,
|
|
"source_page": "apps/web/src/app/[locale]/awooop/approvals/page.tsx",
|
|
"source_components": [],
|
|
"source_api_routes": [
|
|
"/api/v1/platform/approvals"
|
|
],
|
|
"display_mode": "link_only",
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"surface_id": "code_review",
|
|
"route_path": "/code-review",
|
|
"display_order": 10,
|
|
"source_page": "apps/web/src/app/[locale]/code-review/page.tsx",
|
|
"source_components": [],
|
|
"source_api_routes": [],
|
|
"display_mode": "link_only",
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
}
|
|
],
|
|
"frontend_surface_coverage_groups": [
|
|
{
|
|
"group_id": "signals_and_exposure",
|
|
"display_order": 1,
|
|
"responsibility_plane": "detect_and_measure",
|
|
"surface_ids": [
|
|
"security_compliance",
|
|
"legacy_security",
|
|
"legacy_compliance",
|
|
"alerts",
|
|
"errors"
|
|
],
|
|
"display_mode": "coverage_only",
|
|
"overlap_control": "original_surface_retains_ownership",
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"group_id": "human_control_boundary",
|
|
"display_order": 2,
|
|
"responsibility_plane": "human_gate_visibility",
|
|
"surface_ids": [
|
|
"authorizations",
|
|
"awooop_approvals"
|
|
],
|
|
"display_mode": "coverage_only",
|
|
"overlap_control": "approval_state_not_runtime_authorization",
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"group_id": "governance_and_audit",
|
|
"display_order": 3,
|
|
"responsibility_plane": "governance_evidence",
|
|
"surface_ids": [
|
|
"governance",
|
|
"alert_operation_logs"
|
|
],
|
|
"display_mode": "coverage_only",
|
|
"overlap_control": "audit_event_not_execution_authorization",
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"group_id": "engineering_review",
|
|
"display_order": 4,
|
|
"responsibility_plane": "code_review_followup",
|
|
"surface_ids": [
|
|
"code_review"
|
|
],
|
|
"display_mode": "coverage_only",
|
|
"overlap_control": "code_review_not_deploy_approval",
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
}
|
|
],
|
|
"frontend_surface_conflict_controls": [
|
|
{
|
|
"control_id": "preserve_original_route_ownership",
|
|
"display_order": 1,
|
|
"control_scope": "route_ownership",
|
|
"blocked_misread": "iwooos_replaces_original_surface_owner",
|
|
"display_mode": "conflict_control_only",
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"control_id": "no_runtime_lift_from_index",
|
|
"display_order": 2,
|
|
"control_scope": "runtime_authority",
|
|
"blocked_misread": "coverage_matrix_creates_runtime_gate",
|
|
"display_mode": "conflict_control_only",
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"control_id": "code_review_not_deploy_gate",
|
|
"display_order": 3,
|
|
"control_scope": "engineering_review",
|
|
"blocked_misread": "code_review_link_is_deploy_approval",
|
|
"display_mode": "conflict_control_only",
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"control_id": "awooop_approval_not_security_approval",
|
|
"display_order": 4,
|
|
"control_scope": "approval_semantics",
|
|
"blocked_misread": "awooop_approval_equals_security_gate_approval",
|
|
"display_mode": "conflict_control_only",
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"control_id": "frontend_index_does_not_call_kali",
|
|
"display_order": 5,
|
|
"control_scope": "kali_boundary",
|
|
"blocked_misread": "frontend_index_authorizes_active_scan_or_execute",
|
|
"display_mode": "conflict_control_only",
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
}
|
|
],
|
|
"operator_journey_steps": [
|
|
{
|
|
"step_id": "read_current_posture",
|
|
"display_order": 1,
|
|
"responsibility_plane": "iwooos_posture",
|
|
"source_refs": [
|
|
"security_mirror_status_rollup_v1",
|
|
"iwooos_posture_projection_v1"
|
|
],
|
|
"display_mode": "journey_only",
|
|
"allowed_outcome": "display_posture_only",
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"step_id": "open_existing_security_surface",
|
|
"display_order": 2,
|
|
"responsibility_plane": "frontend_surface_index",
|
|
"source_refs": [
|
|
"existing_frontend_surfaces",
|
|
"frontend_surface_coverage_groups"
|
|
],
|
|
"display_mode": "journey_only",
|
|
"allowed_outcome": "navigate_to_existing_surface_without_changing_ownership",
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"step_id": "triage_non_blocking_lane",
|
|
"display_order": 3,
|
|
"responsibility_plane": "low_friction_rollout",
|
|
"source_refs": [
|
|
"security_rollout_policy_v1"
|
|
],
|
|
"display_mode": "journey_only",
|
|
"allowed_outcome": "create_followup_without_blocking",
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"step_id": "collect_owner_evidence",
|
|
"display_order": 4,
|
|
"responsibility_plane": "owner_response_validation",
|
|
"source_refs": [
|
|
"source_control_owner_response_validation_rollup_v1"
|
|
],
|
|
"display_mode": "journey_only",
|
|
"allowed_outcome": "update_received_or_accepted_state_after_redacted_review",
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"step_id": "wait_for_human_decision",
|
|
"display_order": 5,
|
|
"responsibility_plane": "security_approval_decision_record",
|
|
"source_refs": [
|
|
"security_approval_gate_v1",
|
|
"security_approval_decision_record_v1"
|
|
],
|
|
"display_mode": "journey_only",
|
|
"allowed_outcome": "record_human_decision_only",
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"step_id": "prepare_followup_runtime_gate",
|
|
"display_order": 6,
|
|
"responsibility_plane": "followup_runtime_gate",
|
|
"source_refs": [
|
|
"security_followup_runtime_gate_v1"
|
|
],
|
|
"display_mode": "journey_only",
|
|
"allowed_outcome": "wait_for_separate_runtime_gate_after_approval",
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
}
|
|
],
|
|
"owner_evidence_readiness_items": [
|
|
{
|
|
"item_id": "s4_9_gitea_owner_attestation_response",
|
|
"display_order": 1,
|
|
"stage_id": "S4.9",
|
|
"source_contract": "source_control_owner_response_validation_rollup_v1",
|
|
"readiness_state": "next_collection_candidate",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"display_mode": "readiness_only",
|
|
"unlock_condition": "redacted_owner_response_received_and_accepted",
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"item_id": "s4_10_github_target_owner_response",
|
|
"display_order": 2,
|
|
"stage_id": "S4.10",
|
|
"source_contract": "source_control_owner_response_validation_rollup_v1",
|
|
"readiness_state": "waiting_owner_response",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"display_mode": "readiness_only",
|
|
"unlock_condition": "github_target_owner_response_accepted",
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"item_id": "s4_11_refs_truth_owner_response",
|
|
"display_order": 3,
|
|
"stage_id": "S4.11",
|
|
"source_contract": "source_control_owner_response_validation_rollup_v1",
|
|
"readiness_state": "waiting_owner_response",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"display_mode": "readiness_only",
|
|
"unlock_condition": "refs_truth_owner_response_accepted",
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"item_id": "s4_12_workflow_secret_owner_response",
|
|
"display_order": 4,
|
|
"stage_id": "S4.12",
|
|
"source_contract": "source_control_owner_response_validation_rollup_v1",
|
|
"readiness_state": "waiting_owner_response",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"display_mode": "readiness_only",
|
|
"unlock_condition": "workflow_secret_name_owner_response_accepted",
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"item_id": "s1_6_redacted_finding_ingestion",
|
|
"display_order": 5,
|
|
"stage_id": "S1.6",
|
|
"source_contract": "security_finding_v1",
|
|
"readiness_state": "approval_required",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"display_mode": "readiness_only",
|
|
"unlock_condition": "human_approved_redacted_finding_ingestion",
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"item_id": "s1_6_kali_scan_scope_approval",
|
|
"display_order": 6,
|
|
"stage_id": "S1.6",
|
|
"source_contract": "kali_scan_scope_approval_v1",
|
|
"readiness_state": "approval_required",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"display_mode": "readiness_only",
|
|
"unlock_condition": "scan_scope_approval_and_followup_runtime_gate",
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"item_id": "s3_4_followup_runtime_gate",
|
|
"display_order": 7,
|
|
"stage_id": "S3.4",
|
|
"source_contract": "security_followup_runtime_gate_v1",
|
|
"readiness_state": "locked_until_human_decision",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"display_mode": "readiness_only",
|
|
"unlock_condition": "decision_record_accepted_then_separate_runtime_gate",
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
}
|
|
],
|
|
"host_coverage_items": [
|
|
{
|
|
"host_id": "kali_112_security_host",
|
|
"display_order": 1,
|
|
"address": "192.168.0.112",
|
|
"role": "kali_security_host",
|
|
"source_contract": "kali_integration_status_v1",
|
|
"coverage_state": "visible_in_iwooos_posture",
|
|
"scan_scope_state": "observe_only_active_scan_requires_approval",
|
|
"display_mode": "coverage_only",
|
|
"active_scan_authorized": false,
|
|
"ssh_change_authorized": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"host_id": "dev_168_development_host",
|
|
"display_order": 2,
|
|
"address": "192.168.0.168",
|
|
"role": "development_host",
|
|
"source_contract": "kali_scan_scope_approval_v1",
|
|
"coverage_state": "declared_in_observe_only_scope",
|
|
"scan_scope_state": "credentialed_scan_not_approved",
|
|
"display_mode": "coverage_only",
|
|
"active_scan_authorized": false,
|
|
"ssh_change_authorized": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"host_id": "dev_111_development_host",
|
|
"display_order": 3,
|
|
"address": "192.168.0.111",
|
|
"role": "development_host",
|
|
"source_contract": "kali_scan_scope_approval_v1",
|
|
"coverage_state": "declared_in_observe_only_scope",
|
|
"scan_scope_state": "credentialed_scan_not_approved",
|
|
"display_mode": "coverage_only",
|
|
"active_scan_authorized": false,
|
|
"ssh_change_authorized": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
}
|
|
],
|
|
"host_action_gate_items": [
|
|
{
|
|
"action_id": "host_active_scan_gate",
|
|
"display_order": 1,
|
|
"related_hosts": [
|
|
"192.168.0.112",
|
|
"192.168.0.168",
|
|
"192.168.0.111"
|
|
],
|
|
"required_gate": "kali_scan_scope_approval_v1",
|
|
"gate_state": "approval_required",
|
|
"display_mode": "gate_only",
|
|
"active_scan_authorized": false,
|
|
"credentialed_scan_authorized": false,
|
|
"ssh_change_authorized": false,
|
|
"host_update_authorized": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"action_id": "host_credentialed_scan_gate",
|
|
"display_order": 2,
|
|
"related_hosts": [
|
|
"192.168.0.112",
|
|
"192.168.0.168",
|
|
"192.168.0.111"
|
|
],
|
|
"required_gate": "kali_scan_scope_approval_v1_and_credential_handling_review",
|
|
"gate_state": "locked_until_scope_and_credential_handling_approved",
|
|
"display_mode": "gate_only",
|
|
"active_scan_authorized": false,
|
|
"credentialed_scan_authorized": false,
|
|
"ssh_change_authorized": false,
|
|
"host_update_authorized": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"action_id": "kali_execute_gate",
|
|
"display_order": 3,
|
|
"related_hosts": [
|
|
"192.168.0.112"
|
|
],
|
|
"required_gate": "security_followup_runtime_gate_v1",
|
|
"gate_state": "block_candidate_until_human_decision",
|
|
"display_mode": "gate_only",
|
|
"active_scan_authorized": false,
|
|
"credentialed_scan_authorized": false,
|
|
"ssh_change_authorized": false,
|
|
"host_update_authorized": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"action_id": "ssh_host_change_gate",
|
|
"display_order": 4,
|
|
"related_hosts": [
|
|
"192.168.0.112",
|
|
"192.168.0.168",
|
|
"192.168.0.111"
|
|
],
|
|
"required_gate": "security_approval_gate_v1_with_change_plan_and_rollback_evidence",
|
|
"gate_state": "approval_required",
|
|
"display_mode": "gate_only",
|
|
"active_scan_authorized": false,
|
|
"credentialed_scan_authorized": false,
|
|
"ssh_change_authorized": false,
|
|
"host_update_authorized": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"action_id": "kali_host_update_gate",
|
|
"display_order": 5,
|
|
"related_hosts": [
|
|
"192.168.0.112"
|
|
],
|
|
"required_gate": "security_approval_gate_v1_with_maintenance_window",
|
|
"gate_state": "approval_required",
|
|
"display_mode": "gate_only",
|
|
"active_scan_authorized": false,
|
|
"credentialed_scan_authorized": false,
|
|
"ssh_change_authorized": false,
|
|
"host_update_authorized": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"action_id": "runtime_blocking_control_gate",
|
|
"display_order": 6,
|
|
"related_hosts": [
|
|
"192.168.0.112",
|
|
"192.168.0.168",
|
|
"192.168.0.111"
|
|
],
|
|
"required_gate": "security_followup_runtime_gate_v1_after_accepted_decision_record",
|
|
"gate_state": "locked_until_human_decision_active_gate_zero",
|
|
"display_mode": "gate_only",
|
|
"active_scan_authorized": false,
|
|
"credentialed_scan_authorized": false,
|
|
"ssh_change_authorized": false,
|
|
"host_update_authorized": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
}
|
|
],
|
|
"host_evidence_readiness_items": [
|
|
{
|
|
"item_id": "host_scope_boundary_evidence",
|
|
"display_order": 1,
|
|
"related_hosts": [
|
|
"192.168.0.112",
|
|
"192.168.0.168",
|
|
"192.168.0.111"
|
|
],
|
|
"required_gate": "kali_scan_scope_approval_v1",
|
|
"evidence_state": "waiting_redacted_scope_approval",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"display_mode": "evidence_readiness_only",
|
|
"active_scan_authorized": false,
|
|
"credentialed_scan_authorized": false,
|
|
"ssh_change_authorized": false,
|
|
"host_update_authorized": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"item_id": "host_owner_decision_record_evidence",
|
|
"display_order": 2,
|
|
"related_hosts": [
|
|
"192.168.0.112",
|
|
"192.168.0.168",
|
|
"192.168.0.111"
|
|
],
|
|
"required_gate": "security_approval_decision_record_v1",
|
|
"evidence_state": "waiting_human_decision_record",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"display_mode": "evidence_readiness_only",
|
|
"active_scan_authorized": false,
|
|
"credentialed_scan_authorized": false,
|
|
"ssh_change_authorized": false,
|
|
"host_update_authorized": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"item_id": "host_credential_handling_evidence",
|
|
"display_order": 3,
|
|
"related_hosts": [
|
|
"192.168.0.112",
|
|
"192.168.0.168",
|
|
"192.168.0.111"
|
|
],
|
|
"required_gate": "credential_handling_review_before_credentialed_scan",
|
|
"evidence_state": "credential_material_collection_forbidden_waiting_policy",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"display_mode": "evidence_readiness_only",
|
|
"active_scan_authorized": false,
|
|
"credentialed_scan_authorized": false,
|
|
"ssh_change_authorized": false,
|
|
"host_update_authorized": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"item_id": "host_maintenance_window_evidence",
|
|
"display_order": 4,
|
|
"related_hosts": [
|
|
"192.168.0.112",
|
|
"192.168.0.168",
|
|
"192.168.0.111"
|
|
],
|
|
"required_gate": "security_approval_gate_v1_with_maintenance_window",
|
|
"evidence_state": "waiting_maintenance_window",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"display_mode": "evidence_readiness_only",
|
|
"active_scan_authorized": false,
|
|
"credentialed_scan_authorized": false,
|
|
"ssh_change_authorized": false,
|
|
"host_update_authorized": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"item_id": "host_rollback_plan_evidence",
|
|
"display_order": 5,
|
|
"related_hosts": [
|
|
"192.168.0.112",
|
|
"192.168.0.168",
|
|
"192.168.0.111"
|
|
],
|
|
"required_gate": "security_approval_gate_v1_with_change_plan_and_rollback_evidence",
|
|
"evidence_state": "waiting_rollback_plan",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"display_mode": "evidence_readiness_only",
|
|
"active_scan_authorized": false,
|
|
"credentialed_scan_authorized": false,
|
|
"ssh_change_authorized": false,
|
|
"host_update_authorized": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"item_id": "host_validation_metrics_evidence",
|
|
"display_order": 6,
|
|
"related_hosts": [
|
|
"192.168.0.112",
|
|
"192.168.0.168",
|
|
"192.168.0.111"
|
|
],
|
|
"required_gate": "security_followup_runtime_gate_v1_post_check",
|
|
"evidence_state": "waiting_post_check_metrics",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"display_mode": "evidence_readiness_only",
|
|
"active_scan_authorized": false,
|
|
"credentialed_scan_authorized": false,
|
|
"ssh_change_authorized": false,
|
|
"host_update_authorized": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"item_id": "host_redacted_ingestion_evidence",
|
|
"display_order": 7,
|
|
"related_hosts": [
|
|
"192.168.0.112",
|
|
"192.168.0.168",
|
|
"192.168.0.111"
|
|
],
|
|
"required_gate": "security_finding_v1_redacted_payload_acceptance",
|
|
"evidence_state": "waiting_redacted_payload_acceptance_payloads_ingested_false",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"display_mode": "evidence_readiness_only",
|
|
"active_scan_authorized": false,
|
|
"credentialed_scan_authorized": false,
|
|
"ssh_change_authorized": false,
|
|
"host_update_authorized": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
}
|
|
],
|
|
"host_evidence_collection_order": [
|
|
{
|
|
"step_id": "collect_scope_boundary_first",
|
|
"display_order": 1,
|
|
"source_item_id": "host_scope_boundary_evidence",
|
|
"depends_on_step_ids": [],
|
|
"collection_state": "next_collection_candidate",
|
|
"display_mode": "collection_order_only",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"step_id": "collect_owner_decision_second",
|
|
"display_order": 2,
|
|
"source_item_id": "host_owner_decision_record_evidence",
|
|
"depends_on_step_ids": [
|
|
"collect_scope_boundary_first"
|
|
],
|
|
"collection_state": "waiting_previous_step",
|
|
"display_mode": "collection_order_only",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"step_id": "collect_credential_handling_third",
|
|
"display_order": 3,
|
|
"source_item_id": "host_credential_handling_evidence",
|
|
"depends_on_step_ids": [
|
|
"collect_owner_decision_second"
|
|
],
|
|
"collection_state": "waiting_previous_step",
|
|
"display_mode": "collection_order_only",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"step_id": "collect_maintenance_window_fourth",
|
|
"display_order": 4,
|
|
"source_item_id": "host_maintenance_window_evidence",
|
|
"depends_on_step_ids": [
|
|
"collect_owner_decision_second"
|
|
],
|
|
"collection_state": "waiting_previous_step",
|
|
"display_mode": "collection_order_only",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"step_id": "collect_rollback_plan_fifth",
|
|
"display_order": 5,
|
|
"source_item_id": "host_rollback_plan_evidence",
|
|
"depends_on_step_ids": [
|
|
"collect_maintenance_window_fourth"
|
|
],
|
|
"collection_state": "waiting_previous_step",
|
|
"display_mode": "collection_order_only",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"step_id": "collect_validation_metrics_sixth",
|
|
"display_order": 6,
|
|
"source_item_id": "host_validation_metrics_evidence",
|
|
"depends_on_step_ids": [
|
|
"collect_rollback_plan_fifth"
|
|
],
|
|
"collection_state": "waiting_previous_step",
|
|
"display_mode": "collection_order_only",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"step_id": "collect_redacted_ingestion_seventh",
|
|
"display_order": 7,
|
|
"source_item_id": "host_redacted_ingestion_evidence",
|
|
"depends_on_step_ids": [
|
|
"collect_validation_metrics_sixth"
|
|
],
|
|
"collection_state": "waiting_previous_step",
|
|
"display_mode": "collection_order_only",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
}
|
|
],
|
|
"host_evidence_intake_preflight_checks": [
|
|
{
|
|
"check_id": "host_metadata_pointer_shape_check",
|
|
"display_order": 1,
|
|
"source_step_ids": [
|
|
"collect_scope_boundary_first"
|
|
],
|
|
"preflight_state": "preflight_ready_not_executed",
|
|
"rejection_lane": "reject_missing_redacted_metadata_pointer",
|
|
"display_mode": "intake_preflight_only",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"check_id": "host_collection_dependency_order_check",
|
|
"display_order": 2,
|
|
"source_step_ids": [
|
|
"collect_scope_boundary_first",
|
|
"collect_owner_decision_second",
|
|
"collect_credential_handling_third",
|
|
"collect_maintenance_window_fourth",
|
|
"collect_rollback_plan_fifth",
|
|
"collect_validation_metrics_sixth",
|
|
"collect_redacted_ingestion_seventh"
|
|
],
|
|
"preflight_state": "dependency_check_waiting_evidence",
|
|
"rejection_lane": "quarantine_dependency_skip",
|
|
"display_mode": "intake_preflight_only",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"check_id": "host_scope_boundary_before_scan_check",
|
|
"display_order": 3,
|
|
"source_step_ids": [
|
|
"collect_scope_boundary_first"
|
|
],
|
|
"preflight_state": "waiting_scope_evidence",
|
|
"rejection_lane": "reject_scan_without_scope",
|
|
"display_mode": "intake_preflight_only",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"check_id": "host_owner_decision_before_change_check",
|
|
"display_order": 4,
|
|
"source_step_ids": [
|
|
"collect_owner_decision_second"
|
|
],
|
|
"preflight_state": "waiting_owner_decision_pointer",
|
|
"rejection_lane": "reject_change_without_owner_decision",
|
|
"display_mode": "intake_preflight_only",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"check_id": "host_credential_plaintext_rejection_check",
|
|
"display_order": 5,
|
|
"source_step_ids": [
|
|
"collect_credential_handling_third"
|
|
],
|
|
"preflight_state": "plaintext_credential_collection_forbidden",
|
|
"rejection_lane": "reject_plaintext_credential_or_secret_value",
|
|
"display_mode": "intake_preflight_only",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"check_id": "host_raw_payload_rejection_check",
|
|
"display_order": 6,
|
|
"source_step_ids": [
|
|
"collect_redacted_ingestion_seventh"
|
|
],
|
|
"preflight_state": "raw_payload_collection_forbidden",
|
|
"rejection_lane": "reject_raw_payload_ingestion",
|
|
"display_mode": "intake_preflight_only",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"check_id": "host_counter_transition_freeze_check",
|
|
"display_order": 7,
|
|
"source_step_ids": [
|
|
"collect_scope_boundary_first",
|
|
"collect_owner_decision_second",
|
|
"collect_credential_handling_third",
|
|
"collect_maintenance_window_fourth",
|
|
"collect_rollback_plan_fifth",
|
|
"collect_validation_metrics_sixth",
|
|
"collect_redacted_ingestion_seventh"
|
|
],
|
|
"preflight_state": "frontend_counter_transition_forbidden",
|
|
"rejection_lane": "reject_frontend_counter_transition",
|
|
"display_mode": "intake_preflight_only",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"raw_payload_allowed": false,
|
|
"secret_value_collection_allowed": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
}
|
|
],
|
|
"host_evidence_review_outcome_lanes": [
|
|
{
|
|
"lane_id": "host_ready_for_human_review_lane",
|
|
"display_order": 1,
|
|
"source_check_ids": [
|
|
"host_metadata_pointer_shape_check",
|
|
"host_collection_dependency_order_check",
|
|
"host_scope_boundary_before_scan_check",
|
|
"host_owner_decision_before_change_check"
|
|
],
|
|
"outcome_state": "candidate_only_not_received",
|
|
"next_human_action": "manual_review_candidate_display_only",
|
|
"display_mode": "review_outcome_only",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"approval_record_created": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"lane_id": "host_needs_scope_evidence_lane",
|
|
"display_order": 2,
|
|
"source_check_ids": [
|
|
"host_scope_boundary_before_scan_check"
|
|
],
|
|
"outcome_state": "needs_scope_evidence",
|
|
"next_human_action": "request_redacted_scope_boundary_pointer",
|
|
"display_mode": "review_outcome_only",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"approval_record_created": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"lane_id": "host_needs_owner_decision_lane",
|
|
"display_order": 3,
|
|
"source_check_ids": [
|
|
"host_owner_decision_before_change_check"
|
|
],
|
|
"outcome_state": "needs_owner_decision_pointer",
|
|
"next_human_action": "request_owner_decision_record_pointer",
|
|
"display_mode": "review_outcome_only",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"approval_record_created": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"lane_id": "host_quarantine_dependency_skip_lane",
|
|
"display_order": 4,
|
|
"source_check_ids": [
|
|
"host_collection_dependency_order_check"
|
|
],
|
|
"outcome_state": "quarantine_dependency_skip",
|
|
"next_human_action": "show_dependency_skip_reason_without_counter_transition",
|
|
"display_mode": "review_outcome_only",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"approval_record_created": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"lane_id": "host_reject_raw_payload_lane",
|
|
"display_order": 5,
|
|
"source_check_ids": [
|
|
"host_raw_payload_rejection_check"
|
|
],
|
|
"outcome_state": "rejected_raw_payload",
|
|
"next_human_action": "request_redacted_summary_instead",
|
|
"display_mode": "review_outcome_only",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"approval_record_created": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"lane_id": "host_reject_credential_plaintext_lane",
|
|
"display_order": 6,
|
|
"source_check_ids": [
|
|
"host_credential_plaintext_rejection_check"
|
|
],
|
|
"outcome_state": "rejected_plaintext_credential",
|
|
"next_human_action": "discard_plaintext_and_request_redacted_metadata_only",
|
|
"display_mode": "review_outcome_only",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"approval_record_created": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"lane_id": "host_waiting_runtime_gate_lane",
|
|
"display_order": 7,
|
|
"source_check_ids": [
|
|
"host_counter_transition_freeze_check",
|
|
"host_owner_decision_before_change_check"
|
|
],
|
|
"outcome_state": "waiting_followup_runtime_gate",
|
|
"next_human_action": "separate_runtime_gate_required_after_accepted_decision",
|
|
"display_mode": "review_outcome_only",
|
|
"received_count": 0,
|
|
"accepted_count": 0,
|
|
"approval_record_created": false,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
}
|
|
]
|
|
}
|