From f318fd3a894245c654e67bd753b521f08d00527b Mon Sep 17 00:00:00 2001 From: Your Name Date: Tue, 12 May 2026 23:29:17 +0800 Subject: [PATCH 1/3] fix(ci): harden migration workflow audit --- .gitea/workflows/run-migration.yml | 13 +++++++++---- docs/LOGBOOK.md | 23 +++++++++++++++++++++++ 2 files changed, 32 insertions(+), 4 deletions(-) diff --git a/.gitea/workflows/run-migration.yml b/.gitea/workflows/run-migration.yml index 38c9ba3f..3ed3ad85 100644 --- a/.gitea/workflows/run-migration.yml +++ b/.gitea/workflows/run-migration.yml @@ -57,12 +57,18 @@ jobs: - name: Identify new migrations id: diff run: | - NEW_FILES=$(git diff --name-only --diff-filter=A HEAD~1 HEAD -- 'apps/api/migrations/*.sql' || true) + ALL_NEW_FILES=$(git diff --name-only --diff-filter=A HEAD~1 HEAD -- 'apps/api/migrations/*.sql' || true) + NEW_FILES=$(echo "$ALL_NEW_FILES" | grep -Ev '(_down|rollback)\.sql$' || true) + SKIPPED_ROLLBACK_FILES=$(echo "$ALL_NEW_FILES" | grep -E '(_down|rollback)\.sql$' || true) echo "new_files<> $GITHUB_OUTPUT echo "$NEW_FILES" >> $GITHUB_OUTPUT echo "EOF" >> $GITHUB_OUTPUT echo "=== New migration files ===" echo "$NEW_FILES" + if [ -n "$SKIPPED_ROLLBACK_FILES" ]; then + echo "=== Rollback/down migrations skipped by design ===" + echo "$SKIPPED_ROLLBACK_FILES" + fi - name: Apply new migrations if: steps.diff.outputs.new_files != '' @@ -133,8 +139,7 @@ jobs: psql "$url" \ -v ON_ERROR_STOP=1 \ -v commit_sha="${{ github.sha }}" \ - -v files_json="$FILES_JSON" \ - -c " + -v files_json="$FILES_JSON" <<'SQL' INSERT INTO asset_discovery_run ( run_id, triggered_by, scope, scan_depth, status, started_at, ended_at, tools_used, summary @@ -153,7 +158,7 @@ jobs: 'files', :'files_json'::jsonb ) ); - " + SQL } audit_err="$(mktemp)" diff --git a/docs/LOGBOOK.md b/docs/LOGBOOK.md index ad134a99..600b8e1d 100644 --- a/docs/LOGBOOK.md +++ b/docs/LOGBOOK.md @@ -6307,6 +6307,29 @@ RLS app context: project_context=awoooi total=312 redacted_total=0 envelope_total=0 ``` +**Migration CI 紅燈修正**： + +- 首次推版後 `run-migration.yml` run `1914` 失敗在 `Seed asset_discovery_run (audit)`： + - `psql -c` 不展開 `:'commit_sha'` / `:'files_json'` 變數，造成 syntax error。 + - 同一 workflow 也把 `_down.sql` 當新增 migration 套用，導致 up migration 後又被 rollback。 +- 已手動確認 production 欄位曾被 `_down.sql` 移除，並立即重新套回 up migration。 +- workflow 修正： + - `Identify new migrations` 跳過 `*_down.sql` / `*rollback.sql`。 + - audit SQL 改用 heredoc 餵給 `psql`，讓 `-v` 變數正常展開。 + +```text +ruby YAML.load_file(".gitea/workflows/run-migration.yml") +# yaml ok + +bash -n Identify new migrations / Seed asset_discovery_run extracted scripts +# bash syntax ok + +Identify new migrations local dry-run: +apps/api/migrations/awooop_phase7_outbound_truth_chain_columns_2026-05-12.sql +Rollback/down migrations skipped: +apps/api/migrations/awooop_phase7_outbound_truth_chain_columns_2026-05-12_down.sql +``` + **下一步**： - 推 Gitea main，讓 API image 部署 T1 程式碼。 From 96a8cf3ad5bbbc41e2292231947dfc88abb6d909 Mon Sep 17 00:00:00 2001 From: Your Name Date: Tue, 12 May 2026 23:36:51 +0800 Subject: [PATCH 2/3] docs(awooop): record t1 truth-chain smoke --- docs/LOGBOOK.md | 59 +++++++++++++++++++ ...-04-15-MASTER-ai-autonomous-flywheel-v2.md | 7 ++- 2 files changed, 65 insertions(+), 1 deletion(-) diff --git a/docs/LOGBOOK.md b/docs/LOGBOOK.md index 600b8e1d..6d63b46c 100644 --- a/docs/LOGBOOK.md +++ b/docs/LOGBOOK.md @@ -6335,3 +6335,62 @@ apps/api/migrations/awooop_phase7_outbound_truth_chain_columns_2026-05-12_down.s - 推 Gitea main，讓 API image 部署 T1 程式碼。 - 部署後用 rollback transaction smoke 驗證新 outbound mirror 會寫入 redacted full content + source envelope，不污染 production DB。 - 再更新本 LOGBOOK 的 production smoke 結果。 + +**production deploy / smoke 追加（完成）**： + +```text +Gitea: +1912 CD Pipeline 24b15f4a -> success +1913 Code Review 24b15f4a -> success +1914 run-migration 24b15f4a -> failure + RCA: audit SQL 使用 psql -c + :'commit_sha'，且誤套 _down.sql。 +1916 Code Review f318fd3a -> success + 修正 run-migration workflow；workflow-only 變更不觸發 runtime CD。 + +K8s image: +awoooi-api 192.168.0.110:5000/awoooi/api:24b15f4ad2b0898820f8ba723c64ca928b48d471 +awoooi-worker 192.168.0.110:5000/awoooi/api:24b15f4ad2b0898820f8ba723c64ca928b48d471 +awoooi-web 192.168.0.110:5000/awoooi/web:24b15f4ad2b0898820f8ba723c64ca928b48d471 + +rollout: +deployment "awoooi-api" successfully rolled out + +health: +http://192.168.0.125:32334/api/v1/health -> 200 healthy +pod-local http://127.0.0.1:8000/api/v1/health -> 200 healthy +``` + +**T1 outbound mirror 實證**： + +```text +Rollback transaction smoke: +insert_visible=true +redaction_version=audit_sink_v1 +has_content_redacted=True +preview_matches_prefix=True +token_redacted=True +internal_ip_redacted=True +envelope_schema=outbound_source_envelope_v1 +envelope_adapter=codex_smoke +envelope_token_blocked=True +envelope_has_content_sha=True +rollback_triggered=true +persisted_after_rollback=0 + +Production live rows: +project_context=awoooi total=318 redacted_total=2 envelope_total=2 +latest real rows: +message_type=final send_status=sent redaction=audit_sink_v1 +adapter=legacy_telegram_gateway payload_sha=True content_sha=True + +Truth-chain API: +GET /api/v1/platform/truth-chain/5c659c44-9275-5d50-bb40-76f2f00b2d16?project_id=awoooi +status=200 found=True source_type=run outbound_visible=1 +has_content_redacted=True redaction_version=audit_sink_v1 +envelope_adapter=legacy_telegram_gateway envelope_has_payload_sha=True envelope_has_content_sha=True +``` + +**進度校準**： + +- T1 Channel Event hardening：已完成 deploy + production smoke。 +- 仍不能宣稱完整 AI 自動修復閉環已完成；T2 MCP Gateway mandatory audit、T3 Ansible executor、T4 Drift fingerprint FSM、T5 Incident status reconciliation 仍待推進。 diff --git a/docs/superpowers/specs/2026-04-15-MASTER-ai-autonomous-flywheel-v2.md b/docs/superpowers/specs/2026-04-15-MASTER-ai-autonomous-flywheel-v2.md index 0bed9947..ae019f46 100644 --- a/docs/superpowers/specs/2026-04-15-MASTER-ai-autonomous-flywheel-v2.md +++ b/docs/superpowers/specs/2026-04-15-MASTER-ai-autonomous-flywheel-v2.md @@ -372,6 +372,8 @@ source_event_received **T1 first implementation（2026-05-12 23:20 台北）**：開始補 `awooop_outbound_message` 的真相鏈欄位：`content_redacted`、`redaction_version`、`source_envelope`。設計邊界是只保存 redacted rendered card 與 source metadata 摘要；raw Telegram payload、完整 callback data、未遮蔽 token 不入庫。production DB migration 已預套用，API app role 在 `app.project_id=awoooi` 下可讀 outbound rows（`total=312`），代表 T1 的 RLS visibility 紅燈已先驗證可見；新欄位需等 T1 API image 上線後才會產生非空資料。 +**T1 production verified（2026-05-12 23:35 台北）**：API / worker / web 已部署 image `24b15f4a`，CD run `1912` success，health 200。rollback transaction smoke 證明 `record_outbound_message()` 會寫入 `content_redacted`、`redaction_version=audit_sink_v1`、`source_envelope.schema_version=outbound_source_envelope_v1`，且 token / internal IP 會 redacted，transaction rollback 後 `persisted_after_rollback=0`。live production rows 已出現 `redacted_total=2` / `envelope_total=2`，truth-chain API 查 run `5c659c44-9275-5d50-bb40-76f2f00b2d16` 回傳 `has_content_redacted=True` 與 legacy Telegram envelope hash。T1 退出條件中的「RLS 可見性」與「全文 / hash / envelope 可查」已達成。 + --- ## §3 6 大設計維度全展開 @@ -1855,8 +1857,11 @@ Phase 6 完成後 - truth-chain / router / operator auth / Telegram envelope 測試共 12 passed。 - production DB migration 已預套用；`app.project_id=awoooi` 下 `awooop_outbound_message total=312` 可見，舊資料 `redacted_total=0` 合理。 +**production 追加**： +- T1 API image 已部署並完成 production smoke；`awooop_outbound_message` 在 `app.project_id=awoooi` 下可見，且新出站 rows 已有 redacted full content 與 source envelope。 +- `run-migration.yml` 在 24b15f4a 暴露兩個 CI 問題：`psql -c` 不展開 `:'commit_sha'`，且誤套 `_down.sql`。已於 `f318fd3a` 修正為跳過 rollback/down migration，audit SQL 改 heredoc。 + **仍未宣稱完成**： -- T1 API image 尚需部署後 smoke，確認新 outbound mirror 實際寫入 `content_redacted` 與 `source_envelope`。 - T2 MCP Gateway mandatory audit 未完成，因此不能宣稱所有 MCP / 自建 MCP 都已經過 AwoooP Gateway。 --- From 94d006eac88fd65f6efca817eb392a103ec10d3f Mon Sep 17 00:00:00 2001 From: Your Name Date: Tue, 12 May 2026 23:44:19 +0800 Subject: [PATCH 3/3] feat(awooop): bridge legacy mcp audit into gateway timeline --- apps/api/src/plugins/mcp/gateway.py | 1 + apps/api/src/services/mcp_audit_service.py | 129 +++++++++++++++++- apps/api/tests/test_mcp_audit_service.py | 77 ++++++++++- docs/LOGBOOK.md | 62 +++++++++ ...-04-15-MASTER-ai-autonomous-flywheel-v2.md | 19 +++ 5 files changed, 286 insertions(+), 2 deletions(-) diff --git a/apps/api/src/plugins/mcp/gateway.py b/apps/api/src/plugins/mcp/gateway.py index aed41cfa..24f4c7a6 100644 --- a/apps/api/src/plugins/mcp/gateway.py +++ b/apps/api/src/plugins/mcp/gateway.py @@ -412,6 +412,7 @@ class McpGateway: "agent_id": ctx.agent_id, "run_id": str(ctx.run_id) if ctx.run_id else None, "trace_id": ctx.trace_id, + "gateway_path": "awooop_mcp_gateway", } return await provider.execute(ctx.tool_name, audit_params) diff --git a/apps/api/src/services/mcp_audit_service.py b/apps/api/src/services/mcp_audit_service.py index f5ef1ac6..45718ee1 100644 --- a/apps/api/src/services/mcp_audit_service.py +++ b/apps/api/src/services/mcp_audit_service.py @@ -9,6 +9,7 @@ before every runtime model has been refreshed. from __future__ import annotations import json +import hashlib import time import uuid from typing import Any @@ -22,6 +23,8 @@ from src.services.mcp_audit_context import normalize_mcp_audit_session_id logger = structlog.get_logger(__name__) _REDACT_KEYS = {"token", "password", "secret", "api_key", "authorization", "key"} +_LEGACY_PROJECT_ID = "awoooi" +_REAL_GATEWAY_PATH = "awooop_mcp_gateway" def infer_flywheel_node(mcp_server: str, tool_name: str) -> str: @@ -79,6 +82,109 @@ def _extract_audit_context(parameters: dict[str, Any]) -> dict[str, Any]: return audit_context if isinstance(audit_context, dict) else {} +def _extract_project_id( + parameters: dict[str, Any], + audit_context: dict[str, Any], +) -> str: + """Legacy MCP calls predate AwoooP tenancy; keep the bridge explicit.""" + for value in (audit_context.get("project_id"), parameters.get("project_id")): + if value: + return str(value) + return _LEGACY_PROJECT_ID + + +def _extract_run_id(audit_context: dict[str, Any]) -> uuid.UUID | None: + value = audit_context.get("run_id") + if not value: + return None + try: + return uuid.UUID(str(value)) + except (TypeError, ValueError): + return None + + +def _compact(value: Any, limit: int) -> str | None: + if value is None: + return None + return str(value)[:limit] + + +def _stable_hash(value: Any) -> str: + canonical = json.dumps(value, sort_keys=True, ensure_ascii=False, default=str) + return hashlib.sha256(canonical.encode()).hexdigest() + + +def _bridge_tool_name(mcp_server: str, tool_name: str) -> str: + combined = f"legacy:{mcp_server}:{tool_name}" + if len(combined) <= 128: + return combined + return str(tool_name)[:128] + + +def _should_bridge_to_awooop(audit_context: dict[str, Any]) -> bool: + """Skip real Gateway calls; they already write first-class audit rows.""" + return audit_context.get("gateway_path") != _REAL_GATEWAY_PATH + + +async def _record_awooop_gateway_bridge( + db: Any, + *, + project_id: str, + run_id: uuid.UUID | None, + trace_id: str | None, + agent_id: str | None, + mcp_server: str, + tool_name: str, + input_params: dict[str, Any], + output_result: Any | None, + duration_ms: int, + success: bool, + error_message: str | None, + flywheel_node: str | None, + audit_context: dict[str, Any], +) -> None: + """Mirror legacy direct provider calls into AwoooP audit as bridge rows.""" + result_status = "success" if success else "failed" + gate_result = { + "schema_version": "legacy_mcp_bridge_v1", + "gateway_path": audit_context.get("gateway_path") or "legacy_registry_provider", + "policy_enforced": False, + "not_used_reason": "legacy direct provider path; bridge audit only", + "legacy_mcp_server": mcp_server, + "legacy_tool_name": tool_name, + "flywheel_node": flywheel_node, + } + await db.execute( + text( + """ + INSERT INTO awooop_mcp_gateway_audit ( + project_id, run_id, trace_id, agent_id, + tool_name, input_hash, output_hash, gate_result, + result_status, block_gate, block_reason, latency_ms + ) + VALUES ( + :project_id, :run_id, :trace_id, :agent_id, + :tool_name, :input_hash, :output_hash, CAST(:gate_result AS jsonb), + :result_status, NULL, :block_reason, :latency_ms + ) + """ + ), + { + "project_id": project_id, + "run_id": run_id, + "trace_id": _compact(trace_id, 128), + "agent_id": _compact(agent_id or "legacy-mcp-provider", 128), + "tool_name": _bridge_tool_name(mcp_server, tool_name), + "input_hash": _stable_hash(input_params), + "output_hash": _stable_hash(output_result) if output_result is not None else None, + "gate_result": json.dumps(gate_result, ensure_ascii=False, default=str), + "result_status": result_status, + "block_reason": _compact(error_message, 256) if not success else None, + "latency_ms": duration_ms, + }, + ) + + async def record_mcp_call( *, mcp_server: str, @@ -102,9 +208,13 @@ async def record_mcp_call( flywheel_node = flywheel_node or infer_flywheel_node(mcp_server, tool_name) incident_id = incident_id or _extract_incident_id(input_params) agent_role = agent_role or audit_context.get("agent_role") + project_id = _extract_project_id(input_params, audit_context) + run_id = _extract_run_id(audit_context) + trace_id = audit_context.get("trace_id") or incident_id or session_id + agent_id = audit_context.get("agent_id") or agent_role try: - async with get_db_context() as db: + async with get_db_context(project_id) as db: await db.execute( text( """ @@ -165,6 +275,23 @@ async def record_mcp_call( "duration_ms": duration_ms, }, ) + if _should_bridge_to_awooop(audit_context): + await _record_awooop_gateway_bridge( + db, + project_id=project_id, + run_id=run_id, + trace_id=trace_id, + agent_id=agent_id, + mcp_server=mcp_server, + tool_name=tool_name, + input_params=input_params, + output_result=output_result, + duration_ms=duration_ms, + success=success, + error_message=error_message, + flywheel_node=flywheel_node, + audit_context=audit_context, + ) except Exception as exc: logger.warning( "mcp_audit_write_failed", diff --git a/apps/api/tests/test_mcp_audit_service.py b/apps/api/tests/test_mcp_audit_service.py index c8bc2a13..e9bcd361 100644 --- a/apps/api/tests/test_mcp_audit_service.py +++ b/apps/api/tests/test_mcp_audit_service.py @@ -10,8 +10,10 @@ from src.services import mcp_audit_service class _FakeDb: def __init__(self) -> None: self.executed_params: list[dict[str, Any]] = [] + self.statements: list[str] = [] async def execute(self, _statement: Any, params: dict[str, Any]) -> None: + self.statements.append(str(_statement)) self.executed_params.append(params) @@ -32,7 +34,7 @@ async def test_record_mcp_call_normalizes_long_session_id(monkeypatch) -> None: monkeypatch.setattr( mcp_audit_service, "get_db_context", - lambda: _FakeDbContext(db), + lambda _project_id=None: _FakeDbContext(db), ) await mcp_audit_service.record_mcp_call( @@ -53,3 +55,76 @@ async def test_record_mcp_call_normalizes_long_session_id(monkeypatch) -> None: audit_insert_params = db.executed_params[0] assert audit_insert_params["session_id"] == "inc:INC-20260505-E8033A:pre" assert len(audit_insert_params["session_id"]) <= 36 + + +@pytest.mark.asyncio +async def test_record_mcp_call_bridges_legacy_direct_path_to_awooop_audit(monkeypatch) -> None: + db = _FakeDb() + monkeypatch.setattr( + mcp_audit_service, + "get_db_context", + lambda _project_id=None: _FakeDbContext(db), + ) + + await mcp_audit_service.record_mcp_call( + mcp_server="ssh_host", + tool_name="ssh_get_docker_logs", + input_params={ + "_mcp_audit": { + "session_id": "incident:INC-20260512-B6C589:pre_decision", + "incident_id": "INC-20260512-B6C589", + "agent_role": "pre_decision_investigator", + "gateway_path": "legacy_direct_provider", + }, + "project_id": "awoooi", + "secret": "must-not-leak", + }, + output_result={"ok": True}, + duration_ms=37, + success=True, + error_message=None, + ) + + bridge_params = db.executed_params[2] + assert "INSERT INTO awooop_mcp_gateway_audit" in db.statements[2] + assert bridge_params["project_id"] == "awoooi" + assert bridge_params["run_id"] is None + assert bridge_params["trace_id"] == "INC-20260512-B6C589" + assert bridge_params["agent_id"] == "pre_decision_investigator" + assert bridge_params["tool_name"] == "legacy:ssh_host:ssh_get_docker_logs" + assert bridge_params["result_status"] == "success" + assert bridge_params["block_reason"] is None + assert bridge_params["latency_ms"] == 37 + assert "legacy_mcp_bridge_v1" in bridge_params["gate_result"] + assert "legacy direct provider path; bridge audit only" in bridge_params["gate_result"] + + +@pytest.mark.asyncio +async def test_record_mcp_call_skips_bridge_for_first_class_awooop_gateway(monkeypatch) -> None: + db = _FakeDb() + monkeypatch.setattr( + mcp_audit_service, + "get_db_context", + lambda _project_id=None: _FakeDbContext(db), + ) + + await mcp_audit_service.record_mcp_call( + mcp_server="kubernetes", + tool_name="kubectl_get", + input_params={ + "_mcp_audit": { + "project_id": "awoooi", + "run_id": "9d769d02-a036-4c9d-b659-5656c8d1bd5d", + "agent_id": "openclaw-sre", + "trace_id": "trace-1", + "gateway_path": "awooop_mcp_gateway", + }, + }, + output_result={"items": []}, + duration_ms=18, + success=True, + error_message=None, + ) + + assert len(db.executed_params) == 2 + assert all("awooop_mcp_gateway_audit" not in statement for statement in db.statements) diff --git a/docs/LOGBOOK.md b/docs/LOGBOOK.md index 6d63b46c..5f00de9b 100644 --- a/docs/LOGBOOK.md +++ b/docs/LOGBOOK.md @@ -6394,3 +6394,65 @@ envelope_adapter=legacy_telegram_gateway envelope_has_payload_sha=True envelope_ - T1 Channel Event hardening：已完成 deploy + production smoke。 - 仍不能宣稱完整 AI 自動修復閉環已完成；T2 MCP Gateway mandatory audit、T3 Ansible executor、T4 Drift fingerprint FSM、T5 Incident status reconciliation 仍待推進。 + +## 2026-05-12（台北）— T2 MCP Gateway mandatory audit：legacy MCP bridge 第一段 + +**背景**： + +- T0 truth-chain smoke 顯示 `awooop_mcp_gateway_audit` 仍是 0，但 legacy `mcp_audit_log` 24h 有大量 MCP 呼叫。 +- 這代表 MCP 能力有被部分使用，卻不是 AwoooP Gateway 單一治理鏈；Telegram / truth-chain 不能完整回答「用了哪些 MCP、自建 MCP、有沒有成功、是否被治理」。 +- T2 第一段先不改執行語意，避免影響修復行為；先把 legacy direct provider path 橋接到 AwoooP audit。 + +**改動**： + +- `mcp_audit_service.record_mcp_call()`： + - 保留原本 `mcp_audit_log` 與 `mcp_daily_stats` 寫入。 + - 對 legacy direct provider path 額外寫一筆 `awooop_mcp_gateway_audit` bridge row。 + - `gate_result` 明確標示： + - `schema_version=legacy_mcp_bridge_v1` + - `policy_enforced=false` + - `not_used_reason=legacy direct provider path; bridge audit only` + - legacy server/tool/flywheel node。 + - `trace_id` 優先使用 incident_id，讓 truth-chain 可用 incident id 串回 MCP 成敗。 +- `McpGateway._execute_tool()`： + - 真正走 AwoooP Gateway 的 provider 呼叫標記 `gateway_path=awooop_mcp_gateway`，避免 legacy bridge 重複寫。 +- `test_mcp_audit_service.py` 新增： + - legacy direct path 會寫 bridge row。 + - first-class gateway path 不重複 bridge。 + +**本地驗證**： + +```text +python -m py_compile \ + apps/api/src/services/mcp_audit_service.py \ + apps/api/src/plugins/mcp/gateway.py \ + apps/api/tests/test_mcp_audit_service.py +# OK + +/Users/ogt/awoooi/apps/api/.venv/bin/ruff check --select F,E9 \ + apps/api/src/services/mcp_audit_service.py \ + apps/api/src/plugins/mcp/gateway.py \ + apps/api/tests/test_mcp_audit_service.py +# All checks passed + +DATABASE_URL='postgresql+asyncpg://awoooi:awoooi_test_2026@localhost:5432/awoooi_test?ssl=disable' \ + python -m pytest \ + apps/api/tests/test_mcp_audit_service.py \ + apps/api/tests/test_mcp_gateway_audit.py \ + apps/api/tests/test_mcp_gateway_gate5.py -q +# 7 passed + +DATABASE_URL='postgresql+asyncpg://awoooi:awoooi_test_2026@localhost:5432/awoooi_test?ssl=disable' \ + python -m pytest \ + apps/api/tests/test_mcp_audit_context.py \ + apps/api/tests/test_pre_decision_investigator.py \ + apps/api/tests/test_post_execution_verifier.py \ + apps/api/tests/test_callback_dispatcher.py \ + apps/api/tests/test_approval_execution_mcp_audit.py -q +# 90 passed +``` + +**下一步**： + +- 推 Gitea main，等待 CD 部署。 +- production rollback smoke：呼叫 `record_mcp_call()`，確認同一 transaction 內同時可見 legacy `mcp_audit_log` 與 `awooop_mcp_gateway_audit` bridge row，rollback 後不污染 production。 diff --git a/docs/superpowers/specs/2026-04-15-MASTER-ai-autonomous-flywheel-v2.md b/docs/superpowers/specs/2026-04-15-MASTER-ai-autonomous-flywheel-v2.md index ae019f46..bc3c1251 100644 --- a/docs/superpowers/specs/2026-04-15-MASTER-ai-autonomous-flywheel-v2.md +++ b/docs/superpowers/specs/2026-04-15-MASTER-ai-autonomous-flywheel-v2.md @@ -1866,6 +1866,25 @@ Phase 6 完成後 --- +### 2026-05-12 晚 (台北) — T2 MCP Gateway mandatory audit — legacy MCP bridge 第一段 + +**範圍**： +- `record_mcp_call()` 保留 legacy `mcp_audit_log` 寫入，同步橋接一筆 `awooop_mcp_gateway_audit`。 +- bridge row 的 `gate_result` 明確標示 `schema_version=legacy_mcp_bridge_v1`、`policy_enforced=false`、`not_used_reason=legacy direct provider path; bridge audit only`，避免把 legacy direct call 誤認為已完成五閘門治理。 +- 真正走 `McpGateway` 的 provider 呼叫標記 `gateway_path=awooop_mcp_gateway`，避免重複 bridge。 +- bridge `trace_id` 優先使用 `incident_id`，讓 truth-chain 可用 incident id 回查 legacy MCP 成敗。 + +**已驗證**： +- 本地 `py_compile` / `ruff F,E9` 通過。 +- MCP gateway / audit 聚焦測試 7 passed。 +- PreDecision / PostExecution / Callback / Approval MCP audit 相鄰流程測試 90 passed。 + +**仍未宣稱完成**： +- T2 API image 尚需部署後 production rollback smoke。 +- 這只是 legacy bridge，不是把所有呼叫強制改經 AwoooP Gateway；T2 後續仍要把新 MCP caller 收斂到 first-class Gateway path。 + +--- + ### 2026-04-20 晚 (台北) — C1-C4 全流程串接 — Playbook 鏈路保護（commit de2d34d） **觸發**：統帥全景盤查 AI 自動化節點後，發現 Playbook 自動修復鏈路有 3 個結構性斷點。