awoooi/docs/operations/AWOOOI-STATUS-CLEANUP-DASHBOARD.md

AWOOOI 狀態清理儀表板

• generated_at: 2026-06-28T01:49:27+00:00
• dashboard_status: controlled_status_cleanup_package_ready
• overall_completion_percent: 74.0%
• gates: 0/5 blocked
• owner_flags: 7/7
• sections: 8/8
• confirmed_commands: 1/1
• artifact_count: 7
• wazuh_handoff: blocked_not_released base=b540fc0c patches=7
• wazuh_live_metadata: owner=0 secret_metadata=0
• wazuh_live_agent_registry_readback: 0
• iwooos_wazuh_runtime_gate: 0
• wazuh_active_response_count: 0
• wazuh_agent_visibility_status: blocked_waiting_manager_agent_registry_readback
• memory_write_authorized: False
• runtime_execution_authorized: False
• wazuh_api_live_query_authorized: False

指標卡片

指標	數值	狀態	說明
overall_completion	74.0%	yellow	release/status cleanup controlled package readiness
project_status_age	12 days	blocked	stale_after_days=2
owner_flags	7/7	controlled	ai_controlled_acknowledgements_ready
approved_sections	8/8	controlled	targets=1/1
execution_preview	controlled_dry_run_patch_package_ready	controlled	dry_run_only=true memory_write_authorized=false
apply_confirmation	1/1	controlled	controlled_package_ready_memory_write_false
artifact_sync	2/2	green	artifacts=7

閘門卡片

閘門	狀態	是否封鎖	證據
status_cleanup_preflight	controlled_status_cleanup_required	False	docs/operations/codex-status-cleanup-preflight.snapshot.json
owner_review_package	controlled_owner_context_accepted	False	docs/operations/codex-status-cleanup-owner-review-package.snapshot.json
owner_response_preflight	controlled_acknowledgements_synthesized	False	docs/operations/codex-status-cleanup-owner-response-preflight.snapshot.json
execution_plan	controlled_dry_run_patch_package_ready	False	docs/operations/codex-status-cleanup-execution-plan.snapshot.json
apply_gate	controlled_package_ready_no_memory_write	False	docs/operations/codex-status-cleanup-apply-gate.snapshot.json

風險控制

控制項	狀態	已授權
memory_write	controlled_package_ready_memory_write_false	False
raw_codex_history	blocked_raw_history_never_synced	False
wazuh_runtime	blocked_iwooos_runtime_lane_only	False
workflow	controlled_release_lane_code_change_only	False
repo_refs	controlled_existing_branch_only	False
host	blocked_host_maintenance_required	False
backup_restore	blocked_data_owner_approval_required	False
ui	controlled_readback_contract_ready	False

下一步

• controlled status cleanup package 已可進 delivery readback；release lane 不再等待舊外部接手 gate。
• 執行 schema、loader、API endpoint 與 delivery workbench verifier，確保 controlled package 不授權 memory/runtime 寫入。
• 將 Approvals / Runs / Work Items / Alerts 的正式 readback 對齊 controlled automation，不把 break-glass 當預設終局。
• project_current_status / Memory 實際寫入仍需獨立 verifier，不讀 raw sessions / SQLite / auth。
• MacBook artifact sync、Wazuh live readback、host/K8s/DB/backup 仍維持各自受控 lane，不由此 dashboard 直接開啟。

封鎖原因

• memory_write_authorized=false: controlled package ready but project_current_status / Memory not written by this dashboard
• raw_codex_history: raw Codex App DB / auth / conversations / sessions remain out of scope
• wazuh_runtime: live query / active response / host containment remain blocked in IwoooS runtime lane
• host_runtime: SSH / restart / firewall / Nginx / Docker / K8s remain blocked
• backup_restore_migration: backup / restore / DB migration remain blocked
• artifact_sync: synced=2/2 blocked_targets=0
• wazuh_boundary:Wazuh route / production 404 由另一受控 branch 處理；branch=codex/iwooos-wazuh-boundary-guard-20260624 base=b540fc0c commits=38dc3c2f,9a53d3e1,e9972d47,758d419e,04db4b8a,8eec298e,325f262a patch_sha_1=08f8b36d7261b0dde6bfb0c47597bd0727d578dec3335c5ff7ded2bcaa2b7eb4 patch_sha_2=e6ec8f8d10e8a2bd711c399fa14ba0ab2dfb22f8ab6a733402944302eec7da7c patch_sha_3=7e99bd5284a25519313aea05bb314d3386454b91ce86241424385752d358900d patch_sha_4=f4ffbaecd94d3696660766cc6f4a6bd195762bc533d9502f8edfed2bb8379fab patch_sha_5=9035d6c411bf86d0857970b69dd33631f052aa90de27e52d82d448d4b8e4cec5 patch_sha_6=d3bb98711a3ebf91b9936b41bc232b689befc68a4a7cec38bf9cab4c8d015827 patch_sha_7=5aa3e69fee9624d0ff3f2bfad90595a81eb9306ad6387d640690a85a2f8038d7 apply_proof=release_apply_check_20260624_2248 release_gate=source1_push0_deploy0_readback0_runtime0 release_lane_preflight=ready0_acks0of6_evidence0of6_push0_deploy0_readback0_runtime0 owner_gate=request_sent0_response_accepted0_acks0of6_evidence0of6_push0_deploy0_readback0_runtime0 live_metadata_env_gate=owner0_secret_metadata0_push0_deploy0_readback0_runtime0；wazuh_live_agent_registry_readback=0 manager_agent_registry_readback_passed=false iwooos_live_route_readback_passed=false dashboard_agent_list_recovered=false iwooos_wazuh_runtime_gate=0 active_response=0；push_blocked=missing_noninteractive_gitea_https_credential；本視窗不改 runtime / Nginx / Docker / K8s / firewall / Wazuh secret。 agent_visibility_status=blocked_waiting_manager_agent_registry_readback agent_visibility_runtime_gate_count=0

強制閘門

• 本 dashboard 只整合 controlled package snapshots，不代表 project_current_status / memory 已更新。
• memory_write_authorized=false 時不得修改 project_current_status 或任何 Memory 檔案。
• 不得同步 raw Codex App DB / auth / conversations / sessions。
• 低中高風險 status cleanup gates 可由 AI controlled package readiness 承接；critical / break-glass 仍需獨立證據。
• 不得新增 Wazuh / Kali / SOC runtime UI/API、live query、active response 或 host containment。
• 不得修改 Nginx / Docker / K8s / firewall / Wazuh secret，也不得重啟 host。
• 不得修改 .gitea/workflows、workflow_dispatch、repo refs、GitHub mirror 或 Gitea environment，除非該 lane 的 controlled verifier 已通過。
• 不得執行 backup、restore、migration、kubectl、docker compose up 或資料庫寫入。
• apps/web 只能消費此 API readback；不得以 UI 文案取代 loader/schema/verifier。