# 2026FIFA Dev Baseline Owner Decision

- generated_at: `2026-06-24T14:04:00+08:00`
- product_id: `2026fifa`
- local_path: `/Users/ogt/Documents/2026FIFAWorldCup`
- status: `high risk, narrow scanner required`

## Readback

| Gate | Result |
|------|--------|
| local branch | `main` |
| local head | `118954e781b97843fe4457731951bc0fcaecd402` |
| Gitea main | `f26def598fe58562067170dc3cc4c2521933846a` |
| Gitea dev | missing |
| normal tracked status | timeout |
| diff shortstat | timeout |
| narrow `git ls-files` retry | interrupted after more than 30s |
| last successful untracked readback | `38` |
| env paths observed but not read | `.env` |

## Known Buckets

Known untracked groups from the last successful readback:

- Docs: crawler source policy, official seed, Gemini audit, production page audit, betting market playbook, realtime scheduler matrix.
- Backend analytics: agent review worker, daily card calendar worker, fixtures worker, localization, news worker, worldcup seed.
- Web routes: agent verification, analytics APIs, market coverage, recommendation performance / readiness, source health, IwoooS Wazuh API route.
- Generated/cache: `__pycache__` files.

## 判定

2026FIFA 不能直接建立 Gitea `dev`。這不是一般 dirty review，而是需要專用窄掃描工具：

- local HEAD 和 Gitea main 不同。
- full status / diff 會 timeout。
- 已知 untracked 同時包含產品 source、docs、generated cache。
- `.env` 存在但不可讀取、不可同步。

## Owner Decision

需要 owner 接受：

1. 先建立 2026FIFA narrow scanner，分桶 docs / backend analytics / web routes / generated cache / env paths。
2. 決定 local head `118954e781b97843fe4457731951bc0fcaecd402` 是否為最新產品基準候選。
3. 決定哪些 docs / analytics / web routes 要納入 source。
4. `__pycache__` 和 `.env` 不納入。
5. scanner + include / exclude list 接受後，才可建立 remote `dev`。

## 安全邊界

- 未讀 `.env`。
- 未讀 secret value。
- 未修改 2026FIFA repo。
- 未建立 branch、commit 或 push。
- 未同步 generated cache。
