diff --git a/apps/web/messages/en.json b/apps/web/messages/en.json index 16af755f..c625c073 100644 --- a/apps/web/messages/en.json +++ b/apps/web/messages/en.json @@ -2390,6 +2390,59 @@ "guard": "active runtime gates=0; action buttons=false" } } + }, + "hostOwnerDecisionRecordHumanHandoffReadinessReviewOutcomes": { + "title": "Host Owner Decision Record Human Handoff Readiness Review Outcome Lanes", + "subtitle": "Human handoff readiness review outcome lanes only show next-step routing after checklist review. They do not mark review passed, start handoff, mark handoff ready, create decision records, accept owner decisions, create approval records, or open runtime gates.", + "laneLabel": "Handoff review outcome", + "nextLabel": "Next step", + "items": { + "readyForHumanRecordOwnerReviewCandidate": { + "title": "Ready for human record owner review candidate", + "body": "When all readiness review conditions are readable, this can only display a future candidate state for human record owner review.", + "next": "display review candidate; review passed=0, handoff started=0" + }, + "identityTraceNeedsRefresh": { + "title": "Identity trace needs refresh", + "body": "When candidate record id, version, source outcome lane, source queue review, or trace pointer is unclear, route back to the identity packet.", + "next": "refresh identity trace; handoff ready=0" + }, + "ownerBoundaryNeedsClarification": { + "title": "Owner boundary needs clarification", + "body": "When record owner, backup owner, contact point, or responsibility boundary is unreadable, route back to the owner boundary packet.", + "next": "clarify owner boundary; decision received=0" + }, + "decisionSummaryNeedsClarification": { + "title": "Decision summary needs clarification", + "body": "When decision summary, candidate conclusion, or no-execution statement is unreadable, route back to the decision summary packet.", + "next": "clarify decision summary; record created=false" + }, + "scopeExpiryNeedsRefresh": { + "title": "Scope and expiry need refresh", + "body": "When host, network, service, exclusion, observation intent, or expiry is stale or out of scope, route back to the scope packet.", + "next": "refresh scope / expiry; review passed=0" + }, + "scanLimitsRemainAmbiguous": { + "title": "Scan limits remain ambiguous", + "body": "If observe-only, future active scan, or credentialed scan limits can still be mistaken for authorization, route back to the scan limits packet.", + "next": "clarify scan limits; scan authorized=false" + }, + "credentialBoundaryFailed": { + "title": "Credential boundary failed", + "body": "If credential boundary is not metadata-only or plaintext, token value, and raw secret boundaries are unclear, quarantine and request evidence refresh.", + "next": "refresh credential boundary; secret collection=false" + }, + "maintenanceRollbackIncomplete": { + "title": "Maintenance and rollback incomplete", + "body": "If maintenance window, constraints, rollback owner, recovery path, or human contact is missing, it cannot enter human record owner review semantics.", + "next": "refresh maintenance / rollback; host change=false" + }, + "runtimeGateStillRequired": { + "title": "Runtime gate still required", + "body": "Validation evidence or follow-up runtime gate pointer still requires a separate gate and cannot open from readiness review outcome.", + "next": "active runtime gates=0; action buttons=false" + } + } } }, "tickets": { diff --git a/apps/web/messages/zh-TW.json b/apps/web/messages/zh-TW.json index 8c74a4f1..1b02818b 100644 --- a/apps/web/messages/zh-TW.json +++ b/apps/web/messages/zh-TW.json @@ -2391,6 +2391,59 @@ "guard": "active runtime gates=0；action buttons=false" } } + }, + "hostOwnerDecisionRecordHumanHandoffReadinessReviewOutcomes": { + "title": "主機 Owner Decision Record Human Handoff Readiness Review Outcome Lanes", + "subtitle": "Human handoff readiness review outcome lanes 只顯示 checklist 後的下一步分流。不代表 review passed、不開始 handoff、不標記 handoff ready、不建立 decision record、不接受 owner decision、不建立 approval record、不開 runtime gate。", + "laneLabel": "Handoff review outcome", + "nextLabel": "下一步", + "items": { + "readyForHumanRecordOwnerReviewCandidate": { + "title": "Ready for human record owner review candidate", + "body": "所有 readiness review 條件都可讀時，只能顯示未來交給人工 record owner 看看的候選狀態。", + "next": "顯示 review candidate；review passed=0、handoff started=0" + }, + "identityTraceNeedsRefresh": { + "title": "Identity trace needs refresh", + "body": "candidate record id、版本、來源 outcome lane、source queue review 或 trace pointer 不清楚時，回到 identity packet 補證。", + "next": "補 identity trace；handoff ready=0" + }, + "ownerBoundaryNeedsClarification": { + "title": "Owner boundary needs clarification", + "body": "record owner、backup owner、聯絡窗口或責任邊界不可讀時，回到 owner boundary packet 補文字。", + "next": "補 owner boundary；decision received=0" + }, + "decisionSummaryNeedsClarification": { + "title": "Decision summary needs clarification", + "body": "decision summary、候選結論或 no-execution statement 不可讀時，回到 decision summary packet。", + "next": "補 decision summary；record created=false" + }, + "scopeExpiryNeedsRefresh": { + "title": "Scope and expiry need refresh", + "body": "host、network、service、exclusion、觀察目的或 expiry 過期或越界時，回到 scope packet。", + "next": "補 scope / expiry；review passed=0" + }, + "scanLimitsRemainAmbiguous": { + "title": "Scan limits remain ambiguous", + "body": "observe-only、future active scan 或 credentialed scan limits 仍可能被誤讀成授權時，回到 scan limits packet。", + "next": "補 scan limits；scan authorized=false" + }, + "credentialBoundaryFailed": { + "title": "Credential boundary failed", + "body": "credential boundary 若不是 metadata-only，或 plaintext、token value、raw secret 邊界不清楚，必須隔離補證。", + "next": "補 credential boundary；secret collection=false" + }, + "maintenanceRollbackIncomplete": { + "title": "Maintenance and rollback incomplete", + "body": "維護窗口、限制條件、rollback owner、復原路徑或人工聯絡點缺漏時，不能進入人工 record owner review 語義。", + "next": "補 maintenance / rollback；host change=false" + }, + "runtimeGateStillRequired": { + "title": "Runtime gate still required", + "body": "validation evidence 或 follow-up runtime gate pointer 仍需要獨立 gate，不能由 readiness review outcome 開 gate。", + "next": "active runtime gates=0；action buttons=false" + } + } } }, "tickets": { diff --git a/apps/web/src/app/[locale]/iwooos/page.tsx b/apps/web/src/app/[locale]/iwooos/page.tsx index 6f87eac3..0e1d3d9f 100644 --- a/apps/web/src/app/[locale]/iwooos/page.tsx +++ b/apps/web/src/app/[locale]/iwooos/page.tsx @@ -257,6 +257,13 @@ type HostOwnerDecisionRecordHumanHandoffReadinessReviewItem = { tone: 'steady' | 'warn' | 'locked' } +type HostOwnerDecisionRecordHumanHandoffReadinessReviewOutcomeLane = { + key: string + lane: string + icon: typeof ShieldCheck + tone: 'steady' | 'warn' | 'locked' +} + const postureMetrics: PostureMetric[] = [ { key: 'overall', value: '58%', tone: 'warn' }, { key: 'framework', value: '80-85%', tone: 'steady' }, @@ -614,6 +621,18 @@ const hostOwnerDecisionRecordHumanHandoffReadinessReviewItems: HostOwnerDecision { key: 'runtimeGateSeparate', check: 'FHC8', icon: ShieldCheck, tone: 'locked' }, ] +const hostOwnerDecisionRecordHumanHandoffReadinessReviewOutcomeLanes: HostOwnerDecisionRecordHumanHandoffReadinessReviewOutcomeLane[] = [ + { key: 'readyForHumanRecordOwnerReviewCandidate', lane: 'FHV1', icon: CheckCircle2, tone: 'steady' }, + { key: 'identityTraceNeedsRefresh', lane: 'FHV2', icon: FileText, tone: 'warn' }, + { key: 'ownerBoundaryNeedsClarification', lane: 'FHV3', icon: Bell, tone: 'warn' }, + { key: 'decisionSummaryNeedsClarification', lane: 'FHV4', icon: ClipboardCheck, tone: 'warn' }, + { key: 'scopeExpiryNeedsRefresh', lane: 'FHV5', icon: Radar, tone: 'warn' }, + { key: 'scanLimitsRemainAmbiguous', lane: 'FHV6', icon: Activity, tone: 'locked' }, + { key: 'credentialBoundaryFailed', lane: 'FHV7', icon: Lock, tone: 'locked' }, + { key: 'maintenanceRollbackIncomplete', lane: 'FHV8', icon: Clock3, tone: 'warn' }, + { key: 'runtimeGateStillRequired', lane: 'FHV9', icon: ShieldCheck, tone: 'locked' }, +] + const evidenceItems = [ 'iwooos-posture-projection.snapshot.json', 'security-rollout-policy.snapshot.json', @@ -1628,6 +1647,38 @@ function HostOwnerDecisionRecordHumanHandoffReadinessReviewCard({ ) } +function HostOwnerDecisionRecordHumanHandoffReadinessReviewOutcomeCard({ + item, +}: { + item: HostOwnerDecisionRecordHumanHandoffReadinessReviewOutcomeLane +}) { + const t = useTranslations('iwooos.hostOwnerDecisionRecordHumanHandoffReadinessReviewOutcomes') + const Icon = item.icon + return ( +
+
+
+ + {t('laneLabel')} +
+ {item.lane} +
+

+ {t(`items.${item.key}.title` as never)} +

+

+ {t(`items.${item.key}.body` as never)} +

+
+
{t('nextLabel')}
+
+ {t(`items.${item.key}.next` as never)} +
+
+
+ ) +} + export default function IwoooSPage({ params }: { params: { locale: string } }) { const t = useTranslations('iwooos') @@ -2220,6 +2271,28 @@ export default function IwoooSPage({ params }: { params: { locale: string } }) { +
+
+

+ {t('hostOwnerDecisionRecordHumanHandoffReadinessReviewOutcomes.title')} +

+

+ {t('hostOwnerDecisionRecordHumanHandoffReadinessReviewOutcomes.subtitle')} +

+
+
+ {hostOwnerDecisionRecordHumanHandoffReadinessReviewOutcomeLanes.map(item => ( + + ))} +
+
+
None: "s2_37_iwooos_host_owner_decision_record_formal_record_queue_review_outcome_lanes", "s2_38_iwooos_host_owner_decision_record_human_handoff_readiness_packets", "s2_39_iwooos_host_owner_decision_record_human_handoff_readiness_review_checklist", + "s2_40_iwooos_host_owner_decision_record_human_handoff_readiness_review_outcome_lanes", ] assert_equal( "progress_delta_ledger.delta_ids", @@ -594,6 +595,17 @@ def validate(root: Path) -> None: "host_decision_record_handoff_readiness_review_maintenance_rollback_traceable_check", "host_decision_record_handoff_readiness_review_runtime_gate_separate_check", ] + expected_iwooos_host_owner_decision_record_human_handoff_readiness_review_outcome_lane_ids = [ + "host_decision_record_handoff_readiness_review_ready_for_human_record_owner_review_candidate_outcome_lane", + "host_decision_record_handoff_readiness_review_identity_trace_needs_refresh_outcome_lane", + "host_decision_record_handoff_readiness_review_owner_boundary_needs_clarification_outcome_lane", + "host_decision_record_handoff_readiness_review_decision_summary_needs_clarification_outcome_lane", + "host_decision_record_handoff_readiness_review_scope_expiry_needs_refresh_outcome_lane", + "host_decision_record_handoff_readiness_review_scan_limits_ambiguous_outcome_lane", + "host_decision_record_handoff_readiness_review_credential_boundary_failed_outcome_lane", + "host_decision_record_handoff_readiness_review_maintenance_rollback_incomplete_outcome_lane", + "host_decision_record_handoff_readiness_review_runtime_gate_required_outcome_lane", + ] assert_equal( "iwooos_projection.summary.frontend_surface_coverage_group_count", iwooos_projection["summary"]["frontend_surface_coverage_group_count"], @@ -744,6 +756,11 @@ def validate(root: Path) -> None: iwooos_projection["summary"]["host_owner_decision_record_human_handoff_readiness_review_checklist_item_count"], len(expected_iwooos_host_owner_decision_record_human_handoff_readiness_review_checklist_item_ids), ) + assert_equal( + "iwooos_projection.summary.host_owner_decision_record_human_handoff_readiness_review_outcome_lane_count", + iwooos_projection["summary"]["host_owner_decision_record_human_handoff_readiness_review_outcome_lane_count"], + len(expected_iwooos_host_owner_decision_record_human_handoff_readiness_review_outcome_lane_ids), + ) iwooos_progress = iwooos_projection["progress"] assert_equal("iwooos_projection.progress.overall_percent", iwooos_progress["overall_percent"], progress["overall_percent"]) assert_equal( @@ -2905,6 +2922,113 @@ def validate(root: Path) -> None: f"iwooos_projection.host_owner_decision_record_human_handoff_readiness_review_checklist_items.{item['item_id']}.not_authorization", item["not_authorization"], ) + iwooos_host_owner_decision_record_human_handoff_readiness_review_outcome_lanes = iwooos_projection[ + "host_owner_decision_record_human_handoff_readiness_review_outcome_lanes" + ] + assert_equal( + "iwooos_projection.host_owner_decision_record_human_handoff_readiness_review_outcome_lanes.ids", + [item["lane_id"] for item in iwooos_host_owner_decision_record_human_handoff_readiness_review_outcome_lanes], + expected_iwooos_host_owner_decision_record_human_handoff_readiness_review_outcome_lane_ids, + ) + assert_equal( + "iwooos_projection.host_owner_decision_record_human_handoff_readiness_review_outcome_lanes.display_order", + [item["display_order"] for item in iwooos_host_owner_decision_record_human_handoff_readiness_review_outcome_lanes], + list( + range( + 1, + len(expected_iwooos_host_owner_decision_record_human_handoff_readiness_review_outcome_lane_ids) + 1, + ) + ), + ) + expected_iwooos_host_owner_decision_record_human_handoff_readiness_review_outcome_states = [ + "ready_for_human_record_owner_review_candidate", + "identity_trace_needs_refresh", + "owner_boundary_needs_clarification", + "decision_summary_needs_clarification", + "scope_expiry_needs_refresh", + "scan_limits_remain_ambiguous", + "credential_boundary_failed", + "maintenance_rollback_incomplete", + "runtime_gate_still_required", + ] + assert_equal( + "iwooos_projection.host_owner_decision_record_human_handoff_readiness_review_outcome_lanes.outcome_states", + [item["outcome_state"] for item in iwooos_host_owner_decision_record_human_handoff_readiness_review_outcome_lanes], + expected_iwooos_host_owner_decision_record_human_handoff_readiness_review_outcome_states, + ) + for item in iwooos_host_owner_decision_record_human_handoff_readiness_review_outcome_lanes: + assert_equal( + f"iwooos_projection.host_owner_decision_record_human_handoff_readiness_review_outcome_lanes.{item['lane_id']}.display_mode", + item["display_mode"], + "owner_decision_record_human_handoff_readiness_review_outcome_only", + ) + assert_equal( + f"iwooos_projection.host_owner_decision_record_human_handoff_readiness_review_outcome_lanes.{item['lane_id']}.human_record_owner_handoff_review_passed_count", + item["human_record_owner_handoff_review_passed_count"], + 0, + ) + assert_equal( + f"iwooos_projection.host_owner_decision_record_human_handoff_readiness_review_outcome_lanes.{item['lane_id']}.human_record_owner_handoff_started_count", + item["human_record_owner_handoff_started_count"], + 0, + ) + assert_equal( + f"iwooos_projection.host_owner_decision_record_human_handoff_readiness_review_outcome_lanes.{item['lane_id']}.human_record_owner_handoff_ready_count", + item["human_record_owner_handoff_ready_count"], + 0, + ) + assert_equal( + f"iwooos_projection.host_owner_decision_record_human_handoff_readiness_review_outcome_lanes.{item['lane_id']}.formal_record_queue_review_passed_count", + item["formal_record_queue_review_passed_count"], + 0, + ) + assert_equal( + f"iwooos_projection.host_owner_decision_record_human_handoff_readiness_review_outcome_lanes.{item['lane_id']}.formal_record_queue_enqueued_count", + item["formal_record_queue_enqueued_count"], + 0, + ) + assert_false( + f"iwooos_projection.host_owner_decision_record_human_handoff_readiness_review_outcome_lanes.{item['lane_id']}.decision_record_created", + item["decision_record_created"], + ) + assert_equal( + f"iwooos_projection.host_owner_decision_record_human_handoff_readiness_review_outcome_lanes.{item['lane_id']}.owner_decision_received_count", + item["owner_decision_received_count"], + 0, + ) + assert_equal( + f"iwooos_projection.host_owner_decision_record_human_handoff_readiness_review_outcome_lanes.{item['lane_id']}.owner_decision_accepted_count", + item["owner_decision_accepted_count"], + 0, + ) + assert_false( + f"iwooos_projection.host_owner_decision_record_human_handoff_readiness_review_outcome_lanes.{item['lane_id']}.owner_approval_record_created", + item["owner_approval_record_created"], + ) + assert_false( + f"iwooos_projection.host_owner_decision_record_human_handoff_readiness_review_outcome_lanes.{item['lane_id']}.runtime_gate_opened", + item["runtime_gate_opened"], + ) + assert_false( + f"iwooos_projection.host_owner_decision_record_human_handoff_readiness_review_outcome_lanes.{item['lane_id']}.raw_payload_allowed", + item["raw_payload_allowed"], + ) + assert_false( + f"iwooos_projection.host_owner_decision_record_human_handoff_readiness_review_outcome_lanes.{item['lane_id']}.secret_value_collection_allowed", + item["secret_value_collection_allowed"], + ) + assert_false( + f"iwooos_projection.host_owner_decision_record_human_handoff_readiness_review_outcome_lanes.{item['lane_id']}.runtime_execution_authorized", + item["runtime_execution_authorized"], + ) + assert_false( + f"iwooos_projection.host_owner_decision_record_human_handoff_readiness_review_outcome_lanes.{item['lane_id']}.action_buttons_allowed", + item["action_buttons_allowed"], + ) + assert_true( + f"iwooos_projection.host_owner_decision_record_human_handoff_readiness_review_outcome_lanes.{item['lane_id']}.not_authorization", + item["not_authorization"], + ) assert_equal( "iwooos_projection.non_blocking_lane_ids", iwooos_projection["non_blocking_lane_ids"], @@ -2953,6 +3077,7 @@ def validate(root: Path) -> None: "display_host_owner_decision_record_formal_record_queue_review_outcome_lanes", "display_host_owner_decision_record_human_handoff_readiness_packets", "display_host_owner_decision_record_human_handoff_readiness_review_checklist", + "display_host_owner_decision_record_human_handoff_readiness_review_outcome_lanes", "display_evidence_refs", "display_forbidden_actions", ]: @@ -3068,6 +3193,11 @@ def validate(root: Path) -> None: "start_human_record_owner_handoff_from_readiness_review", "create_host_owner_decision_record_from_handoff_readiness_review", "open_runtime_gate_from_handoff_readiness_review", + "treat_host_owner_decision_record_handoff_readiness_review_outcome_as_approval", + "mark_human_record_owner_handoff_readiness_review_outcome_passed", + "start_human_record_owner_handoff_from_readiness_review_outcome", + "create_host_owner_decision_record_from_handoff_readiness_review_outcome", + "open_runtime_gate_from_handoff_readiness_review_outcome", "apply_runtime_blocking_control", "switch_github_primary", "production_deploy",