# Codex Gitea Blocked Products Owner Response Templates

- generated_at: `2026-06-24T14:20:00+08:00`
- scope: 8 個 blocked products 的 owner response 固定格式
- owner_response_received: `0 / 8`
- owner_response_accepted: `0 / 8`
- remote_dev_branch_ready: `0 / 8`
- runtime_write_allowed: `0`

## 使用方式

每個產品必須用自己的區塊回覆，不能只寫「批准繼續」。owner response 必須明確列出：

- 要接受哪個 baseline source。
- 要納入哪些 tracked / untracked groups。
- 要排除哪些 generated outputs、logs、backup archives、env 類檔案或暫存產物。
- 是否允許建立 review branch。
- 是否允許建立 remote `dev` branch。
- runtime write 是否允許；本模板階段預設必須是 `false`。

禁止在回覆中放入 secret value、token、private key、password、cookie、session、authorization header、secret hash、partial token、raw `.env`、raw `.git`、runtime volume 或 raw Codex / ChatGPT conversations。

## Global Response Fields

每個產品回覆都必填：

| Field | Required value |
|-------|----------------|
| `owner_role_or_team` | owner 角色或 team，不放個人 secret |
| `decision` | `accept_with_scope` / `reject` / `needs_more_evidence` |
| `decision_reason` | 為什麼接受或拒絕 |
| `accepted_baseline_source` | local head / Gitea main / new bootstrap / other repo |
| `include_groups` | 明確列 group id，不可寫 all |
| `exclude_groups` | 明確列 group id |
| `quarantined_paths_ack` | 已確認隔離路徑不納入 |
| `env_secret_policy_ack` | 確認不讀 / 不收 secret value |
| `generated_artifact_policy_ack` | 確認 generated outputs / logs / archives 處理方式 |
| `review_branch_allowed` | true / false |
| `remote_dev_branch_allowed` | true / false |
| `runtime_write_allowed` | 必須是 false |
| `followup_owner` | 後續負責角色 |
| `evidence_refs` | 脫敏 evidence ref，不含密碼/token |

## P1-1 ClawBot / OpenClaw

Decision package: `docs/operations/CLAWBOT-OPENCLAW-DEV-BASELINE-OWNER-DECISION-2026-06-24.md`

```yaml
product_id: clawbot-openclaw
owner_role_or_team:
decision:
decision_reason:
accepted_baseline_source: local_head | gitea_main | reject
include_groups:
  docker_compose_yml: undecided
  main_py: undecided
exclude_groups: []
standby_mode_policy:
telegram_polling_owner_boundary:
review_branch_allowed: false
remote_dev_branch_allowed: false
runtime_write_allowed: false
followup_owner:
evidence_refs: []
```

Acceptance blockers until resolved:

- `docker-compose.yml` include / exclude 未定。
- `main.py` include / exclude 未定。
- `STANDBY_MODE` 與 Telegram polling owner boundary 未確認。

## P1-2 Tsenyang Website

Decision package: `docs/operations/TSENYANG-WEBSITE-DEV-BASELINE-OWNER-DECISION-2026-06-24.md`

```yaml
product_id: tsenyang-website
owner_role_or_team:
decision:
decision_reason:
accepted_baseline_source: local_head | internal_remote_main | reject
include_groups:
  og_assets: undecided
  presentation_outputs: undecided
exclude_groups: []
internal_repo_inventory_ack: false
presentation_output_policy:
review_branch_allowed: false
remote_dev_branch_allowed: false
runtime_write_allowed: false
followup_owner:
evidence_refs: []
```

Acceptance blockers until resolved:

- OG assets 是否為 source 未確認。
- presentation outputs 是否要排除未確認。
- internal repo inventory / export 未正式標記 accepted。

## P1-3 Agent Bounty

Decision package: `docs/operations/AGENT-BOUNTY-DEV-BASELINE-OWNER-DECISION-2026-06-24.md`

```yaml
product_id: agent-bounty-protocol
owner_role_or_team:
decision:
decision_reason:
accepted_baseline_source: local_head | gitea_main | reject
include_tracked_groups: []
include_untracked_source_candidates: []
exclude_groups:
  - sync_backup_archives
sync_backup_archives_policy: exclude_by_default
a2a_treasury_release_scope:
env_secret_policy_ack: false
review_branch_allowed: false
remote_dev_branch_allowed: false
runtime_write_allowed: false
followup_owner:
evidence_refs: []
```

Acceptance blockers until resolved:

- A2A / treasury / propose / middleware / docker-compose 是否同一 release scope 未定。
- `sync-backup-*.tgz` 預設排除，除非 owner 明確改為 sanitized release artifact。
- env 檔不得讀取或納入。

## P1-4 2026FIFA

Decision package: `docs/operations/2026FIFA-DEV-BASELINE-OWNER-DECISION-2026-06-24.md`

```yaml
product_id: 2026fifa
owner_role_or_team:
decision:
decision_reason:
accepted_baseline_source: local_head | gitea_main | reject
narrow_scanner_required_ack: true
include_groups:
  analytics_workers: undecided
  web_routes: undecided
  docs: undecided
exclude_groups:
  generated_cache: true
env_secret_policy_ack: false
review_branch_allowed: false
remote_dev_branch_allowed: false
runtime_write_allowed: false
followup_owner:
evidence_refs: []
```

Acceptance blockers until resolved:

- narrow scanner 未完成前不得接受完整 local tree。
- analytics / web routes 必須 path-based include。
- generated cache / env paths 預設排除。

## P1-5 VibeWork

Decision package: `docs/operations/VIBEWORK-DEV-BASELINE-OWNER-DECISION-2026-06-24.md`

```yaml
product_id: vibework
owner_role_or_team:
decision:
decision_reason:
accepted_baseline_source: local_head | gitea_main | reject
include_tracked_groups: []
include_untracked_groups: []
workspace_packages_policy:
stripe_mcp_nginx_docker_prisma_scope:
env_example_policy_ack: false
whitespace_cleanup_policy:
review_branch_allowed: false
remote_dev_branch_allowed: false
runtime_write_allowed: false
followup_owner:
evidence_refs: []
```

Acceptance blockers until resolved:

- tracked `105` 與 untracked `97` 必須分桶接受。
- Stripe webhook / MCP route / Nginx / Docker / Prisma 是否同一 release scope 未定。
- `docs/PHASE_0_IMPLEMENTATION_PLAN.md` trailing whitespace debt 必須清理或明確 defer。

## P1-6 StockPlatform v2

Decision package: `docs/operations/STOCKPLATFORM-V2-DEV-BASELINE-OWNER-DECISION-2026-06-24.md`

```yaml
product_id: stockplatform-v2
owner_role_or_team:
decision:
decision_reason:
accepted_baseline_source: local_head_equals_gitea_main
tmp_generated_outputs_exclude: true
include_tracked_groups: []
include_source_candidates: []
nginx_docker_ingestion_scope:
env_secret_policy_ack: false
whitespace_cleanup_policy:
review_branch_allowed: false
remote_dev_branch_allowed: false
runtime_write_allowed: false
followup_owner:
evidence_refs: []
```

Acceptance blockers until resolved:

- `tmp/**` generated outputs 必須排除。
- `58` 個 source candidates 必須 source-only include。
- Nginx / Docker compose / ingestion cron / official source registry 是否同 scope 未確認。
- frontend trailing whitespace debt 必須清理或明確 defer。

## P1-7 Bitan Pharmacy

Decision package: `docs/operations/BITAN-PHARMACY-DEV-BASELINE-OWNER-DECISION-2026-06-24.md`

```yaml
product_id: bitan-pharmacy
owner_role_or_team:
decision:
decision_reason:
accepted_baseline_source: owner_export | internal_remote_main | reject
internal_inventory_or_owner_export: false
include_tracked_groups: []
include_untracked_groups: []
npmrc_quarantine_policy: quarantine_until_sanitized
public_content_cleanliness_evidence_policy:
supabase_migration_owner:
env_secret_policy_ack: false
review_branch_allowed: false
remote_dev_branch_allowed: false
runtime_write_allowed: false
followup_owner:
evidence_refs: []
```

Acceptance blockers until resolved:

- internal repo inventory / owner export 缺失。
- `.npmrc` 未確認前 quarantine。
- `logs/public-content-cleanliness.latest.json` 是 evidence/log，預設不納入 source baseline。
- Supabase migrations 需要 DB owner review。

## P1-8 VTuber

Decision package: `docs/operations/VTUBER-DEV-BASELINE-OWNER-DECISION-2026-06-24.md`

```yaml
product_id: vtuber
owner_role_or_team:
decision:
decision_reason:
repository_identity_decision: new_repo_bootstrap | map_existing_repo | repair_local_history | reject
gitea_repo_create_or_map:
staged_gitkeep_policy:
env_prod_exclude: true
model_asset_policy:
nginx_compose_deploy_scope:
initial_baseline_allowed: false
review_branch_allowed: false
remote_dev_branch_allowed: false
runtime_write_allowed: false
followup_owner:
evidence_refs: []
```

Acceptance blockers until resolved:

- local HEAD invalid。
- `wooo/vtuber` remote repo not found。
- `deploy/.env.prod` 必須排除且不得讀取。
- VRM / GLB model assets 是否 source artifact 未定。
- staged `.gitkeep` 處理方式未定。

## Acceptance Rule

以上模板只建立 owner response 格式。任何產品在 `remote_dev_branch_allowed=true` 前，都必須先有完整、具體、無 secret 的 owner response，並經 review accepted。到那一步之前，所有產品仍維持 blocked。
