# Agent Bounty Dev Baseline Owner Decision

- generated_at: `2026-06-24T13:58:00+08:00`
- product_id: `agent-bounty-protocol`
- local_path: `/Users/ogt/Documents/agent-bounty-protocol`
- status: `medium/high risk, owner decision required`

## Readback

| Gate | Result |
|------|--------|
| local branch | `main` |
| local head | `0601df8bd9c0aaedb9ce3a226a6f1aeca645ca0a` |
| Gitea main | `b7a733f44f4f645dd21a9b4a9075b89c4a324f64` |
| Gitea dev | missing |
| tracked modified | `23` |
| tracked deleted | `0` |
| untracked | `19` |
| diff shortstat | `23 files changed, 2819 insertions(+), 720 deletions(-)` |
| diff check | pass |

## 分類

Tracked modified groups:

- Docs: `A2A_AGENT_INTEGRATION_ROADMAP.md`, `README.md`
- Public agent metadata: `agent-card.json`, `agent.json`, `llms*.txt`, `openapi.yaml`
- Web routes: A2A growth, cron, open tasks, traffic, propose, success, treasury admin
- Libraries / runtime: `a2a-growth.ts`, `traffic-conversion-monitor.ts`, `middleware.ts`, `docker-compose.yml`

Untracked source candidates:

- `agents/connect`
- A2A agents / campaigns / onboarding / proposal handoff / referrals APIs
- affiliate payout / treasury balance APIs
- wallet checkout / wallet actions
- A2A integrations / traffic actor classification / treasury snapshot / USDC verifier libraries

Excluded by default:

- `sync-backup-a2a-campaign-kit-20260611183651.tgz`
- `sync-backup-a2a-onboarding-20260611182353.tgz`

Env paths observed but not read:

- `.env`
- `apps/test-agent/.env`
- `apps/web/.env`

## 判定

不能直接把 Agent Bounty 推成 `dev` baseline。這批變更碰到 A2A、treasury、proposal、middleware、docker-compose，且 local HEAD 與 Gitea main 不同。需要 owner 明確選擇 include / exclude。

## Owner Decision

需要 owner 回覆：

1. 是否以 local head `0601df8bd9c0aaedb9ce3a226a6f1aeca645ca0a` 作為最新產品基準候選。
2. 哪些 tracked modified groups 要保留。
3. 哪些 17 個 untracked source candidates 要納入。
4. 兩個 `sync-backup-*.tgz` 是否明確標成 release artifacts；預設不納入。
5. `.env` 一律不納入，且不得收集 secret value。
6. owner 接受後才可建立 remote `dev` 或 review branch。

## 安全邊界

- 未讀 `.env`。
- 未讀 secret value。
- 未修改 Agent Bounty repo。
- 未建立 branch、commit 或 push。
- 未同步 tgz backup archives。
