wooo/awoooi
1
1
Fork 0
Code Issues 2 Pull Requests 1 Actions 4 Packages Projects Releases Wiki Activity

docs(logbook): record wazuh owner review readback [skip ci]

Browse Source
This commit is contained in:
Your Name
2026-06-28 18:52:24 +08:00
parent f05d9f2a33
commit 17d25839dc
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
docs/LOGBOOK.md
View File

@@ -6,6 +6,8 @@
- Production `POST /validate-owner-export` valid redacted sample 回 `accepted_for_readonly_posture_only`；`POST /validate-manager-registry-acceptance` valid redacted sample 回 `accepted_for_manager_registry_acceptance_review_only`；兩個 POST 皆 no-persist，POST 後 GET 總帳仍維持 `manager_registry_accepted_count=6`、runtime gate `0`。
- Production `GET /api/v1/iwooos/runtime-security-readback` HTTP 200，schema `iwooos_runtime_security_readback_v1`，讀回 `wazuh_manager_registry_accepted_count=6`、`runtime_gate_count=0`。
- Production `GET /api/v1/iwooos/wazuh-runtime-controlled-apply-preflight` HTTP 200，target selector / source-of-truth diff / check-mode / dry-run / rollback / post-apply verifier / KM PlayBook writeback 皆 `1`；redacted controlled-apply packet POST 回 `accepted_for_controlled_apply_preflight_review_only`，POST 後 GET counters 不被 payload 改寫。
- Production `GET /api/v1/iwooos/wazuh-runtime-gate-owner-review-readback` HTTP 200，owner-review packet received / review ready / accepted 皆 `1`、supplement `0`；redacted owner-review packet POST 回 `accepted_for_runtime_gate_owner_review_readback_only`，POST 後 GET counters 不被 payload 改寫。
- Runtime-security 總板同步讀回 `wazuh_runtime_apply_preflight_ready_count=1`、`wazuh_runtime_owner_review_packet_accepted_count=1`、`wazuh_live_metadata_gate_owner_accepted_count=1`、`wazuh_live_metadata_gate_live_query_authorized_count=0`、`runtime_gate_count=0`。
- Production `/zh-TW/iwooos` desktop / mobile browser readback：manager registry reviewer validation board 可見 `Reviewer passed=1`、`Post-enable=1`、`Acceptance ready=1`、`Manager accepted=6`、`執行期=0`；console error `0`、水平溢出 `0`、敏感 pattern hit `0`。
**邊界**：沒有讀 secret / raw Wazuh payload / raw session / SQLite / auth；沒有查 live Wazuh；沒有 active response、agent restart、host write、K8s secret patch、Nginx、firewall、DB、GitHub 或 force push。