wooo/awoooi
1
1
Fork 0
Code Issues 2 Pull Requests 1 Actions 3 Packages Projects Releases Wiki Activity

feat(web): add IwoooS queue review checklist

Browse Source
This commit is contained in:
Your Name
2026-05-20 10:02:22 +08:00
parent 9f740bb0a1
commit 0b8514ef8d
11 changed files with 608 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

113
scripts/security/security-mirror-progress-guard.py
View File

@@ -187,6 +187,7 @@ def validate(root: Path) -> None:
"s2_33_iwooos_host_owner_decision_record_formal_candidate_review_checklist",
"s2_34_iwooos_host_owner_decision_record_formal_candidate_review_outcome_lanes",
"s2_35_iwooos_host_owner_decision_record_formal_record_queue_packets",
"s2_36_iwooos_host_owner_decision_record_formal_record_queue_review_checklist",
]
assert_equal(
"progress_delta_ledger.delta_ids",
@@ -550,6 +551,16 @@ def validate(root: Path) -> None:
"host_decision_record_formal_record_queue_validation_runtime_gate_packet",
"host_decision_record_formal_record_queue_no_execution_attestation_packet",
]
expected_iwooos_host_owner_decision_record_formal_record_queue_review_checklist_item_ids = [
"host_decision_record_formal_record_queue_review_identity_traceable_check",
"host_decision_record_formal_record_queue_review_decision_summary_readable_check",
"host_decision_record_formal_record_queue_review_scope_expiry_fresh_check",
"host_decision_record_formal_record_queue_review_scan_limits_not_authorization_check",
"host_decision_record_formal_record_queue_review_credential_boundary_metadata_only_check",
"host_decision_record_formal_record_queue_review_maintenance_rollback_linked_check",
"host_decision_record_formal_record_queue_review_validation_runtime_gate_separate_check",
"host_decision_record_formal_record_queue_review_no_execution_attestation_present_check",
]
assert_equal(
"iwooos_projection.summary.frontend_surface_coverage_group_count",
iwooos_projection["summary"]["frontend_surface_coverage_group_count"],
@@ -680,6 +691,11 @@ def validate(root: Path) -> None:
iwooos_projection["summary"]["host_owner_decision_record_formal_record_queue_packet_count"],
len(expected_iwooos_host_owner_decision_record_formal_record_queue_packet_ids),
)
assert_equal(
"iwooos_projection.summary.host_owner_decision_record_formal_record_queue_review_checklist_item_count",
iwooos_projection["summary"]["host_owner_decision_record_formal_record_queue_review_checklist_item_count"],
len(expected_iwooos_host_owner_decision_record_formal_record_queue_review_checklist_item_ids),
)
iwooos_progress = iwooos_projection["progress"]
assert_equal("iwooos_projection.progress.overall_percent", iwooos_progress["overall_percent"], progress["overall_percent"])
assert_equal(
@@ -2454,6 +2470,97 @@ def validate(root: Path) -> None:
f"iwooos_projection.host_owner_decision_record_formal_record_queue_packets.{item['packet_id']}.not_authorization",
item["not_authorization"],
)
iwooos_host_owner_decision_record_formal_record_queue_review_checklist_items = iwooos_projection[
"host_owner_decision_record_formal_record_queue_review_checklist_items"
]
assert_equal(
"iwooos_projection.host_owner_decision_record_formal_record_queue_review_checklist_items.ids",
[item["item_id"] for item in iwooos_host_owner_decision_record_formal_record_queue_review_checklist_items],
expected_iwooos_host_owner_decision_record_formal_record_queue_review_checklist_item_ids,
)
assert_equal(
"iwooos_projection.host_owner_decision_record_formal_record_queue_review_checklist_items.display_order",
[item["display_order"] for item in iwooos_host_owner_decision_record_formal_record_queue_review_checklist_items],
list(range(1, len(expected_iwooos_host_owner_decision_record_formal_record_queue_review_checklist_item_ids) + 1)),
)
assert_equal(
"iwooos_projection.host_owner_decision_record_formal_record_queue_review_checklist_items.source_packet_ids",
[item["source_packet_id"] for item in iwooos_host_owner_decision_record_formal_record_queue_review_checklist_items],
expected_iwooos_host_owner_decision_record_formal_record_queue_packet_ids,
)
expected_iwooos_host_owner_decision_record_formal_record_queue_review_conditions = [
"identity_traceable_to_candidate_source",
"decision_summary_readable_without_approval_semantics",
"scope_expiry_current_and_bounded",
"scan_limits_not_authorization",
"credential_boundary_metadata_only",
"maintenance_rollback_pointer_linked",
"validation_runtime_gate_separate",
"no_execution_attestation_present",
]
assert_equal(
"iwooos_projection.host_owner_decision_record_formal_record_queue_review_checklist_items.review_conditions",
[item["review_condition"] for item in iwooos_host_owner_decision_record_formal_record_queue_review_checklist_items],
expected_iwooos_host_owner_decision_record_formal_record_queue_review_conditions,
)
for item in iwooos_host_owner_decision_record_formal_record_queue_review_checklist_items:
assert_equal(
f"iwooos_projection.host_owner_decision_record_formal_record_queue_review_checklist_items.{item['item_id']}.display_mode",
item["display_mode"],
"owner_decision_record_formal_record_queue_review_checklist_only",
)
assert_equal(
f"iwooos_projection.host_owner_decision_record_formal_record_queue_review_checklist_items.{item['item_id']}.formal_record_queue_review_passed_count",
item["formal_record_queue_review_passed_count"],
0,
)
assert_equal(
f"iwooos_projection.host_owner_decision_record_formal_record_queue_review_checklist_items.{item['item_id']}.formal_record_queue_enqueued_count",
item["formal_record_queue_enqueued_count"],
0,
)
assert_false(
f"iwooos_projection.host_owner_decision_record_formal_record_queue_review_checklist_items.{item['item_id']}.decision_record_created",
item["decision_record_created"],
)
assert_equal(
f"iwooos_projection.host_owner_decision_record_formal_record_queue_review_checklist_items.{item['item_id']}.owner_decision_received_count",
item["owner_decision_received_count"],
0,
)
assert_equal(
f"iwooos_projection.host_owner_decision_record_formal_record_queue_review_checklist_items.{item['item_id']}.owner_decision_accepted_count",
item["owner_decision_accepted_count"],
0,
)
assert_false(
f"iwooos_projection.host_owner_decision_record_formal_record_queue_review_checklist_items.{item['item_id']}.owner_approval_record_created",
item["owner_approval_record_created"],
)
assert_false(
f"iwooos_projection.host_owner_decision_record_formal_record_queue_review_checklist_items.{item['item_id']}.runtime_gate_opened",
item["runtime_gate_opened"],
)
assert_false(
f"iwooos_projection.host_owner_decision_record_formal_record_queue_review_checklist_items.{item['item_id']}.raw_payload_allowed",
item["raw_payload_allowed"],
)
assert_false(
f"iwooos_projection.host_owner_decision_record_formal_record_queue_review_checklist_items.{item['item_id']}.secret_value_collection_allowed",
item["secret_value_collection_allowed"],
)
assert_false(
f"iwooos_projection.host_owner_decision_record_formal_record_queue_review_checklist_items.{item['item_id']}.runtime_execution_authorized",
item["runtime_execution_authorized"],
)
assert_false(
f"iwooos_projection.host_owner_decision_record_formal_record_queue_review_checklist_items.{item['item_id']}.action_buttons_allowed",
item["action_buttons_allowed"],
)
assert_true(
f"iwooos_projection.host_owner_decision_record_formal_record_queue_review_checklist_items.{item['item_id']}.not_authorization",
item["not_authorization"],
)
assert_equal(
"iwooos_projection.non_blocking_lane_ids",
iwooos_projection["non_blocking_lane_ids"],
@@ -2498,6 +2605,7 @@ def validate(root: Path) -> None:
"display_host_owner_decision_record_formal_candidate_review_checklist",
"display_host_owner_decision_record_formal_candidate_review_outcome_lanes",
"display_host_owner_decision_record_formal_record_queue_packets",
"display_host_owner_decision_record_formal_record_queue_review_checklist",
"display_evidence_refs",
"display_forbidden_actions",
]:
@@ -2593,6 +2701,11 @@ def validate(root: Path) -> None:
"create_host_owner_decision_record_from_formal_record_queue_packet",
"accept_host_owner_decision_record_from_formal_record_queue_packet",
"open_runtime_gate_from_owner_decision_record_formal_record_queue_packet",
"treat_host_owner_decision_record_formal_record_queue_review_as_approval",
"mark_host_owner_decision_record_formal_record_queue_review_passed",
"enqueue_host_owner_decision_record_from_formal_record_queue_review",
"create_host_owner_decision_record_from_formal_record_queue_review",
"open_runtime_gate_from_formal_record_queue_review",
"apply_runtime_blocking_control",
"switch_github_primary",
"production_deploy",