awoooi/docs/operations/AWOOOI-STATUS-CLEANUP-DASHBOARD.md

# AWOOOI 狀態清理儀表板

- generated_at: `2026-06-28T01:49:27+00:00`
- dashboard_status: `controlled_status_cleanup_package_ready`
- overall_completion_percent: `74.0%`
- gates: `0/5 blocked`
- owner_flags: `7/7`
- sections: `8/8`
- confirmed_commands: `1/1`
- artifact_count: `7`
- wazuh_handoff: `blocked_not_released base=b540fc0c patches=7`
- wazuh_live_metadata: `owner=0 secret_metadata=0`
- wazuh_live_agent_registry_readback: `0`
- iwooos_wazuh_runtime_gate: `0`
- wazuh_active_response_count: `0`
- wazuh_agent_visibility_status: `blocked_waiting_manager_agent_registry_readback`
- memory_write_authorized: `False`
- runtime_execution_authorized: `False`
- wazuh_api_live_query_authorized: `False`

## 指標卡片

| 指標 | 數值 | 狀態 | 說明 |
|--------|-------|--------|---------|
| `overall_completion` | `74.0%` | `yellow` | release/status cleanup controlled package readiness |
| `project_status_age` | `12 days` | `blocked` | stale_after_days=2 |
| `owner_flags` | `7/7` | `controlled` | ai_controlled_acknowledgements_ready |
| `approved_sections` | `8/8` | `controlled` | targets=1/1 |
| `execution_preview` | `controlled_dry_run_patch_package_ready` | `controlled` | dry_run_only=true memory_write_authorized=false |
| `apply_confirmation` | `1/1` | `controlled` | controlled_package_ready_memory_write_false |
| `artifact_sync` | `2/2` | `green` | artifacts=7 |

## 閘門卡片

| 閘門 | 狀態 | 是否封鎖 | 證據 |
|------|------|----------|------|
| `status_cleanup_preflight` | `controlled_status_cleanup_required` | `False` | `docs/operations/codex-status-cleanup-preflight.snapshot.json` |
| `owner_review_package` | `controlled_owner_context_accepted` | `False` | `docs/operations/codex-status-cleanup-owner-review-package.snapshot.json` |
| `owner_response_preflight` | `controlled_acknowledgements_synthesized` | `False` | `docs/operations/codex-status-cleanup-owner-response-preflight.snapshot.json` |
| `execution_plan` | `controlled_dry_run_patch_package_ready` | `False` | `docs/operations/codex-status-cleanup-execution-plan.snapshot.json` |
| `apply_gate` | `controlled_package_ready_no_memory_write` | `False` | `docs/operations/codex-status-cleanup-apply-gate.snapshot.json` |

## 風險控制

| 控制項 | 狀態 | 已授權 |
|--------|------|--------|
| `memory_write` | `controlled_package_ready_memory_write_false` | `False` |
| `raw_codex_history` | `blocked_raw_history_never_synced` | `False` |
| `wazuh_runtime` | `blocked_iwooos_runtime_lane_only` | `False` |
| `workflow` | `controlled_release_lane_code_change_only` | `False` |
| `repo_refs` | `controlled_existing_branch_only` | `False` |
| `host` | `blocked_host_maintenance_required` | `False` |
| `backup_restore` | `blocked_data_owner_approval_required` | `False` |
| `ui` | `controlled_readback_contract_ready` | `False` |

## 下一步

- controlled status cleanup package 已可進 delivery readback；release lane 不再等待舊外部接手 gate。
- 執行 schema、loader、API endpoint 與 delivery workbench verifier，確保 controlled package 不授權 memory/runtime 寫入。
- 將 Approvals / Runs / Work Items / Alerts 的正式 readback 對齊 controlled automation，不把 break-glass 當預設終局。
- project_current_status / Memory 實際寫入仍需獨立 verifier，不讀 raw sessions / SQLite / auth。
- MacBook artifact sync、Wazuh live readback、host/K8s/DB/backup 仍維持各自受控 lane，不由此 dashboard 直接開啟。

## 封鎖原因

- `memory_write_authorized=false: controlled package ready but project_current_status / Memory not written by this dashboard`
- `raw_codex_history: raw Codex App DB / auth / conversations / sessions remain out of scope`
- `wazuh_runtime: live query / active response / host containment remain blocked in IwoooS runtime lane`
- `host_runtime: SSH / restart / firewall / Nginx / Docker / K8s remain blocked`
- `backup_restore_migration: backup / restore / DB migration remain blocked`
- `artifact_sync: synced=2/2 blocked_targets=0`
- `wazuh_boundary:Wazuh route / production 404 由另一受控 branch 處理；branch=codex/iwooos-wazuh-boundary-guard-20260624 base=b540fc0c commits=38dc3c2f,9a53d3e1,e9972d47,758d419e,04db4b8a,8eec298e,325f262a patch_sha_1=08f8b36d7261b0dde6bfb0c47597bd0727d578dec3335c5ff7ded2bcaa2b7eb4 patch_sha_2=e6ec8f8d10e8a2bd711c399fa14ba0ab2dfb22f8ab6a733402944302eec7da7c patch_sha_3=7e99bd5284a25519313aea05bb314d3386454b91ce86241424385752d358900d patch_sha_4=f4ffbaecd94d3696660766cc6f4a6bd195762bc533d9502f8edfed2bb8379fab patch_sha_5=9035d6c411bf86d0857970b69dd33631f052aa90de27e52d82d448d4b8e4cec5 patch_sha_6=d3bb98711a3ebf91b9936b41bc232b689befc68a4a7cec38bf9cab4c8d015827 patch_sha_7=5aa3e69fee9624d0ff3f2bfad90595a81eb9306ad6387d640690a85a2f8038d7 apply_proof=release_apply_check_20260624_2248 release_gate=source1_push0_deploy0_readback0_runtime0 release_lane_preflight=ready0_acks0of6_evidence0of6_push0_deploy0_readback0_runtime0 owner_gate=request_sent0_response_accepted0_acks0of6_evidence0of6_push0_deploy0_readback0_runtime0 live_metadata_env_gate=owner0_secret_metadata0_push0_deploy0_readback0_runtime0；wazuh_live_agent_registry_readback=0 manager_agent_registry_readback_passed=false iwooos_live_route_readback_passed=false dashboard_agent_list_recovered=false iwooos_wazuh_runtime_gate=0 active_response=0；push_blocked=missing_noninteractive_gitea_https_credential；本視窗不改 runtime / Nginx / Docker / K8s / firewall / Wazuh secret。 agent_visibility_status=blocked_waiting_manager_agent_registry_readback agent_visibility_runtime_gate_count=0`

## 強制閘門

- 本 dashboard 只整合 controlled package snapshots，不代表 project_current_status / memory 已更新。
- memory_write_authorized=false 時不得修改 project_current_status 或任何 Memory 檔案。
- 不得同步 raw Codex App DB / auth / conversations / sessions。
- 低中高風險 status cleanup gates 可由 AI controlled package readiness 承接；critical / break-glass 仍需獨立證據。
- 不得新增 Wazuh / Kali / SOC runtime UI/API、live query、active response 或 host containment。
- 不得修改 Nginx / Docker / K8s / firewall / Wazuh secret，也不得重啟 host。
- 不得修改 .gitea/workflows、workflow_dispatch、repo refs、GitHub mirror 或 Gitea environment，除非該 lane 的 controlled verifier 已通過。
- 不得執行 backup、restore、migration、kubectl、docker compose up 或資料庫寫入。
- apps/web 只能消費此 API readback；不得以 UI 文案取代 loader/schema/verifier。