9c5acc0360
Some checks failed
Code Review / ai-code-review (push) Successful in 13s
CD Pipeline / tests (push) Successful in 1m51s
CD Pipeline / build-and-deploy (push) Successful in 4m24s
CD Pipeline / post-deploy-checks (push) Failing after 1m36s
Ansible / Reboot Recovery Contract / validate (push) Has been cancelled
122 lines
8.7 KiB
Markdown
122 lines
8.7 KiB
Markdown
# AWOOOI 狀態清理儀表板
|
||
|
||
- generated_at: `2026-06-24T15:39:52+00:00`
|
||
- dashboard_status: `blocked_status_cleanup_apply_not_authorized`
|
||
- overall_completion_percent: `41.9%`
|
||
- gates: `5/5 blocked`
|
||
- owner_flags: `0/6`
|
||
- sections: `0/7`
|
||
- confirmed_commands: `0/1`
|
||
- artifact_count: `47`
|
||
- wazuh_handoff: `blocked_not_released base=b540fc0c patches=7`
|
||
- wazuh_live_metadata: `owner=0 secret_metadata=0`
|
||
- wazuh_live_agent_registry_readback: `0`
|
||
- iwooos_wazuh_runtime_gate: `0`
|
||
- wazuh_active_response_count: `0`
|
||
- wazuh_agent_visibility_status: `blocked_waiting_manager_agent_registry_readback`
|
||
- memory_write_authorized: `False`
|
||
- runtime_execution_authorized: `False`
|
||
- wazuh_api_live_query_authorized: `False`
|
||
|
||
## 指標卡片
|
||
|
||
| 指標 | 數值 | 狀態 | 說明 |
|
||
|--------|-------|--------|---------|
|
||
| `overall_completion` | `41.9%` | `orange` | 產品 Runtime 治理完成度計分卡 |
|
||
| `project_status_age` | `11 days` | `blocked` | stale_after_days=2 |
|
||
| `owner_flags` | `0/6` | `blocked` | pending_owner_response |
|
||
| `approved_sections` | `0/7` | `blocked` | targets=0/1 |
|
||
| `execution_preview` | `blocked_owner_response_preflight_not_ready` | `blocked` | dry_run_only=true |
|
||
| `apply_confirmation` | `0/1` | `blocked` | pending_final_confirmation |
|
||
| `artifact_sync` | `1/2` | `blocked` | artifacts=47 |
|
||
|
||
## 閘門卡片
|
||
|
||
| 閘門 | 狀態 | 是否封鎖 | 證據 |
|
||
|------|------|----------|------|
|
||
| `status_cleanup_preflight` | `blocked_status_cleanup_required` | `True` | `docs/operations/codex-status-cleanup-preflight.snapshot.json` |
|
||
| `owner_review_package` | `owner_decision_required` | `True` | `docs/operations/codex-status-cleanup-owner-review-package.snapshot.json` |
|
||
| `owner_response_preflight` | `blocked_owner_response_required` | `True` | `docs/operations/codex-status-cleanup-owner-response-preflight.snapshot.json` |
|
||
| `execution_plan` | `blocked_owner_response_preflight_not_ready` | `True` | `docs/operations/codex-status-cleanup-execution-plan.snapshot.json` |
|
||
| `apply_gate` | `blocked_status_cleanup_apply_not_authorized` | `True` | `docs/operations/codex-status-cleanup-apply-gate.snapshot.json` |
|
||
|
||
## 風險控制
|
||
|
||
| 控制項 | 狀態 | 已授權 |
|
||
|--------|------|--------|
|
||
| `memory_write` | `blocked_final_apply_gate_required` | `False` |
|
||
| `raw_codex_history` | `blocked_raw_history_never_synced` | `False` |
|
||
| `wazuh_runtime` | `blocked_iwooos_runtime_lane_only` | `False` |
|
||
| `workflow` | `blocked_workflow_authorization_required` | `False` |
|
||
| `repo_refs` | `blocked_source_control_approval_required` | `False` |
|
||
| `host` | `blocked_host_maintenance_required` | `False` |
|
||
| `backup_restore` | `blocked_data_owner_approval_required` | `False` |
|
||
| `ui` | `blocked_apps_web_readiness_required` | `False` |
|
||
|
||
## 下一步
|
||
|
||
- 收齊 owner 旗標：0/6。
|
||
- 收齊已批准章節：0/7。
|
||
- 確認目標路徑：0/1。
|
||
- 確認邊界 acknowledgement：0/5。
|
||
- owner response preflight ready 後，重新產生 dry-run execution plan。
|
||
- apply gate 目前 apply_allowed=False；未變 true 前不得寫 project_current_status。
|
||
|
||
## 封鎖原因
|
||
|
||
- `project_current_status 過期只代表需要狀態清理，不代表可修改 memory / runtime。`
|
||
- `不得把一般『批准繼續』解讀成 force push、workflow copy、workflow trigger、repo creation 或 refs sync 授權。`
|
||
- `不得同步 raw Codex App DB / auth / conversations / sessions。`
|
||
- `不得碰 MacBook Pro MOMO PRO protected legacy paths。`
|
||
- `不得新增 Wazuh / Kali / SOC runtime UI/API 或 live query。`
|
||
- `不得 SSH 修改主機、改 firewall / Nginx / Docker / K8s 或執行 active scan。`
|
||
- `Data / Backup coverage 是治理 evidence，不是 backup / restore / migration executor。`
|
||
- `owner_response_preflight:owner_response_status_not_approved_status_cleanup_preview`
|
||
- `owner_response_preflight:owner_flag_not_accepted:accept_status_cleanup_scope`
|
||
- `owner_response_preflight:owner_flag_not_accepted:approve_project_current_status_update_preview`
|
||
- `owner_response_preflight:owner_flag_not_accepted:confirm_latest_logbook_and_scorecard_as_sources`
|
||
- `owner_response_preflight:owner_flag_not_accepted:confirm_no_runtime_or_host_authorization`
|
||
- `owner_response_preflight:owner_flag_not_accepted:confirm_no_raw_codex_history_sync`
|
||
- `owner_response_preflight:owner_flag_not_accepted:confirm_iwooos_wazuh_boundary_preserved`
|
||
- `owner_response_preflight:update_section_not_approved:artifact_sync_gate`
|
||
- `owner_response_preflight:update_section_not_approved:completion_scorecard`
|
||
- `owner_response_preflight:update_section_not_approved:data_backup_gate`
|
||
- `owner_response_preflight:update_section_not_approved:gitea_warning_gate`
|
||
- `owner_response_preflight:update_section_not_approved:iwooos_wazuh_boundary`
|
||
- `owner_response_preflight:update_section_not_approved:latest_logbook_heading`
|
||
- `owner_response_preflight:update_section_not_approved:operation_boundaries`
|
||
- `owner_response_preflight:target_path_not_approved:awoooi_memory/project_current_status.md`
|
||
- `owner_response_preflight:boundary_not_acknowledged:memory_write_authorized=false`
|
||
- `owner_response_preflight:boundary_not_acknowledged:refs_sync_authorized=false`
|
||
- `owner_response_preflight:boundary_not_acknowledged:repo_creation_authorized=false`
|
||
- `owner_response_preflight:boundary_not_acknowledged:runtime_execution_authorized=false`
|
||
- `owner_response_preflight:boundary_not_acknowledged:wazuh_api_live_query_authorized=false`
|
||
- `execution_plan_blocked_until:owner response preflight ready_for_status_cleanup_apply_gate=true`
|
||
- `execution_plan_blocked_until:all owner flags accepted`
|
||
- `execution_plan_blocked_until:all update sections approved`
|
||
- `execution_plan_blocked_until:target path approved`
|
||
- `execution_plan_blocked_until:all critical false boundaries acknowledged`
|
||
- `execution_plan_blocked_until:final status cleanup apply confirmation accepted`
|
||
- `apply_gate:execution_plan_not_ready_for_final_confirmation`
|
||
- `apply_gate:owner_response_preflight_not_ready`
|
||
- `apply_gate:final_confirmation_status_not_approved_status_cleanup_apply`
|
||
- `apply_gate:final_flag_not_accepted:confirm_status_cleanup_command_preview`
|
||
- `apply_gate:final_flag_not_accepted:confirm_project_current_status_target_path`
|
||
- `apply_gate:final_flag_not_accepted:confirm_post_apply_validation`
|
||
- `apply_gate:final_flag_not_accepted:confirm_no_runtime_or_wazuh_deploy`
|
||
- `apply_gate:command_preview_not_confirmed`
|
||
- `apply_gate:target_path_not_confirmed:awoooi_memory/project_current_status.md`
|
||
- `wazuh_boundary:Wazuh route / production 404 由另一受控 branch 處理；branch=codex/iwooos-wazuh-boundary-guard-20260624 base=b540fc0c commits=38dc3c2f,9a53d3e1,e9972d47,758d419e,04db4b8a,8eec298e,325f262a patch_sha_1=08f8b36d7261b0dde6bfb0c47597bd0727d578dec3335c5ff7ded2bcaa2b7eb4 patch_sha_2=e6ec8f8d10e8a2bd711c399fa14ba0ab2dfb22f8ab6a733402944302eec7da7c patch_sha_3=7e99bd5284a25519313aea05bb314d3386454b91ce86241424385752d358900d patch_sha_4=f4ffbaecd94d3696660766cc6f4a6bd195762bc533d9502f8edfed2bb8379fab patch_sha_5=9035d6c411bf86d0857970b69dd33631f052aa90de27e52d82d448d4b8e4cec5 patch_sha_6=d3bb98711a3ebf91b9936b41bc232b689befc68a4a7cec38bf9cab4c8d015827 patch_sha_7=5aa3e69fee9624d0ff3f2bfad90595a81eb9306ad6387d640690a85a2f8038d7 apply_proof=release_apply_check_20260624_2248 release_gate=source1_push0_deploy0_readback0_runtime0 release_lane_preflight=ready0_acks0of6_evidence0of6_push0_deploy0_readback0_runtime0 owner_gate=request_sent0_response_accepted0_acks0of6_evidence0of6_push0_deploy0_readback0_runtime0 live_metadata_env_gate=owner0_secret_metadata0_push0_deploy0_readback0_runtime0；wazuh_live_agent_registry_readback=0 manager_agent_registry_readback_passed=false iwooos_live_route_readback_passed=false dashboard_agent_list_recovered=false iwooos_wazuh_runtime_gate=0 active_response=0；push_blocked=missing_noninteractive_gitea_https_credential；本視窗不改 runtime / Nginx / Docker / K8s / firewall / Wazuh secret。 agent_visibility_status=blocked_waiting_manager_agent_registry_readback agent_visibility_runtime_gate_count=0`
|
||
|
||
## 強制閘門
|
||
|
||
- 本 dashboard 只整合 read-only snapshots，不代表 project_current_status / memory 已更新。
|
||
- memory_write_authorized=false 時不得修改 project_current_status 或任何 Memory 檔案。
|
||
- 不得同步 raw Codex App DB / auth / conversations / sessions。
|
||
- 不得把一般批准繼續視為 owner response 或 final apply confirmation。
|
||
- 不得新增 Wazuh / Kali / SOC runtime UI/API、live query、active response 或 host containment。
|
||
- 不得修改 Nginx / Docker / K8s / firewall / Wazuh secret，也不得重啟 host。
|
||
- 不得修改 .gitea/workflows、workflow_dispatch、repo refs、GitHub mirror 或 Gitea environment。
|
||
- 不得執行 backup、restore、migration、kubectl、docker compose up 或資料庫寫入。
|
||
- apps/web build/i18n 必要檔案未恢復前，本 dashboard 只可作 page model 資料，不代表 UI 實作授權。
|