From 2500496fa9d3f090cc5bd5210922ce9f5216ef57 Mon Sep 17 00:00:00 2001 From: Your Name Date: Thu, 18 Jun 2026 08:53:53 +0800 Subject: [PATCH] =?UTF-8?q?feat(governance):=20=E6=96=B0=E5=A2=9E=20TG=20c?= =?UTF-8?q?anary=20delivery=20rehearsal?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .../ai_agent_professional_task_expansion.py | 128 +- ...st_ai_agent_professional_task_expansion.py | 71 +- ...i_agent_professional_task_expansion_api.py | 24 +- apps/web/messages/en.json | 60 +- apps/web/messages/zh-TW.json | 60 +- .../tabs/automation-inventory-tab.tsx | 181 ++ apps/web/src/lib/api-client.ts | 65 +- docs/LOGBOOK.md | 23 + ...AI_AGENT_AUTOMATION_WORKLIST_2026-06-04.md | 10 +- ..._PROFESSIONAL_TASK_EXPANSION_2026-06-15.md | 44 +- ...ask_expansion_2026-06-18_1200_p2_405e.json | 1746 +++++++++++++++++ ...professional_task_expansion_v1.schema.json | 148 +- 12 files changed, 2518 insertions(+), 42 deletions(-) create mode 100644 docs/evaluations/ai_agent_professional_task_expansion_2026-06-18_1200_p2_405e.json diff --git a/apps/api/src/services/ai_agent_professional_task_expansion.py b/apps/api/src/services/ai_agent_professional_task_expansion.py index cb44f974..1f84fac3 100644 --- a/apps/api/src/services/ai_agent_professional_task_expansion.py +++ b/apps/api/src/services/ai_agent_professional_task_expansion.py @@ -1,10 +1,11 @@ """ AI Agent professional task expansion and Telegram runtime bridge snapshot. -Loads the latest committed P2-405D read-only contract. The contract expands -professional AI Agent work and defines Telegram no-send previews, but it does -not write Telegram Gateway queues, send Telegram messages, call the Bot API, -read secrets, or execute production changes. +Loads the latest committed P2-405E read-only contract. The contract expands +professional AI Agent work and defines Telegram no-send previews plus canary +delivery rehearsal evidence, but it does not write Telegram Gateway queues, +send Telegram messages, call the Bot API, read secrets, or execute production +changes. """ from __future__ import annotations @@ -30,6 +31,7 @@ _EXPECTED_RECEIPT_EXPECTATION_COUNT = 6 _EXPECTED_CANARY_PACKAGE_COUNT = 1 _EXPECTED_CANARY_APPROVAL_PACKET_COUNT = 1 _EXPECTED_CANARY_DELIVERY_GATE_COUNT = 1 +_EXPECTED_CANARY_DELIVERY_REHEARSAL_COUNT = 1 _ZERO_ROLLUP_FIELDS = { "current_live_count", "gateway_queue_write_count", @@ -62,6 +64,10 @@ _ZERO_ROLLUP_FIELDS = { "canary_delivery_receipt_write_enabled_count", "canary_delivery_secret_read_enabled_count", "canary_delivery_paid_api_enabled_count", + "canary_delivery_rehearsal_live_send_enabled_count", + "canary_delivery_rehearsal_gateway_queue_write_enabled_count", + "canary_delivery_rehearsal_bot_api_call_enabled_count", + "canary_delivery_rehearsal_receipt_write_enabled_count", } _FORBIDDEN_PUBLIC_TERMS = { "work_window_transcript", @@ -109,11 +115,11 @@ def _require_schema(payload: dict[str, Any], label: str) -> None: status = payload.get("program_status") or {} expected = { "current_priority": "P2", - "current_task_id": "P2-405D", - "next_task_id": "P2-405E", + "current_task_id": "P2-405E", + "next_task_id": "P2-405F", "read_only_mode": True, "runtime_authority": _RUNTIME_AUTHORITY, - "overall_completion_percent": 96, + "overall_completion_percent": 98, } mismatches = _mismatches(status, expected) if mismatches: @@ -155,6 +161,7 @@ def _require_telegram_bridge(payload: dict[str, Any], label: str) -> None: _require_receipt_and_canary_package(bridge, label) _require_canary_send_approval_packet(bridge, label) _require_canary_delivery_gate(bridge, label) + _require_canary_delivery_rehearsal(bridge, label) def _require_no_send_previews(bridge: dict[str, Any], label: str) -> None: @@ -427,6 +434,81 @@ def _require_canary_delivery_gate(bridge: dict[str, Any], label: str) -> None: raise ValueError(f"{label}: canary delivery decision log must remain empty") +def _require_canary_delivery_rehearsal(bridge: dict[str, Any], label: str) -> None: + rehearsal = bridge.get("canary_delivery_rehearsal") or {} + expected = { + "status": "ready_no_send_rehearsal", + "rehearsal_ready": True, + "selected_message_type": "daily_agent_workload_digest", + "selected_preview_id": "p2_405b_preview_daily_agent_workload_digest_v1", + "selected_receipt_expectation_id": "p2_405b_receipt_daily_agent_workload_digest_v1", + "target_room_env": "SRE_GROUP_CHAT_ID", + "target_room_value_visible": False, + "preview_hash_algorithm": "sha256_preview_only", + } + mismatches = _mismatches(rehearsal, expected) + if mismatches: + raise ValueError(f"{label}: canary_delivery_rehearsal mismatch: {mismatches}") + if not rehearsal: + raise ValueError( + f"{label}: expected {_EXPECTED_CANARY_DELIVERY_REHEARSAL_COUNT} " + "canary delivery rehearsal" + ) + + envelope = rehearsal.get("gateway_envelope_preview") or {} + expected_envelope = { + "message_type": "daily_agent_workload_digest", + "target_room_env_ref": "SRE_GROUP_CHAT_ID", + "dedup_key": rehearsal.get("dedup_key"), + "preview_hash": rehearsal.get("sanitized_preview_hash"), + "risk_tier": "low", + "queue_write_enabled": False, + "bot_api_call_enabled": False, + "telegram_send_enabled": False, + "delivery_receipt_write_enabled": False, + } + mismatches = _mismatches(envelope, expected_envelope) + if mismatches: + raise ValueError(f"{label}: canary rehearsal envelope mismatch: {mismatches}") + + readback = rehearsal.get("readback_drill") or {} + if readback.get("owner_agent") != "hermes": + raise ValueError(f"{label}: canary rehearsal readback owner must be hermes") + checks = readback.get("required_checks") or [] + if len(checks) != 8: + raise ValueError(f"{label}: canary rehearsal must define 8 readback checks") + if readback.get("completed_check_count") != len(checks): + raise ValueError(f"{label}: canary rehearsal completed checks must match checks") + if readback.get("failed_check_count") != 0: + raise ValueError(f"{label}: canary rehearsal failed checks must remain zero") + if readback.get("production_receipt_write_enabled") is not False: + raise ValueError(f"{label}: canary rehearsal production receipt write must remain false") + if readback.get("live_receipt_readback_enabled") is not False: + raise ValueError(f"{label}: canary rehearsal live receipt readback must remain false") + + if len(rehearsal.get("dry_run_steps") or []) != 6: + raise ValueError(f"{label}: canary rehearsal must define 6 dry-run steps") + if len(rehearsal.get("stop_conditions") or []) != 7: + raise ValueError(f"{label}: canary rehearsal must define 7 stop conditions") + if len(rehearsal.get("rollback_mute_controls") or []) != 5: + raise ValueError(f"{label}: canary rehearsal must define 5 rollback/mute controls") + + execution_flags = rehearsal.get("execution_flags") or {} + expected_execution = { + "live_delivery_enabled": False, + "gateway_queue_write_enabled": False, + "bot_api_call_enabled": False, + "telegram_send_enabled": False, + "delivery_receipt_write_enabled": False, + "production_write_enabled": False, + "secret_read_enabled": False, + "paid_api_enabled": False, + } + mismatches = _mismatches(execution_flags, expected_execution) + if mismatches: + raise ValueError(f"{label}: canary rehearsal execution flags mismatch: {mismatches}") + + def _require_professional_tasks(payload: dict[str, Any], label: str) -> None: domains = payload.get("professional_task_domains") or [] if len(domains) != _EXPECTED_DOMAIN_COUNT: @@ -562,6 +644,38 @@ def _require_rollups(payload: dict[str, Any], label: str) -> None: "canary_delivery_rollback_mute_control_count": len( (bridge.get("canary_delivery_gate") or {}).get("rollback_mute_controls") or [] ), + "canary_delivery_rehearsal_count": 1 + if bridge.get("canary_delivery_rehearsal") + else 0, + "canary_delivery_rehearsal_step_count": len( + (bridge.get("canary_delivery_rehearsal") or {}).get("dry_run_steps") or [] + ), + "canary_delivery_rehearsal_readback_check_count": len( + ( + (bridge.get("canary_delivery_rehearsal") or {}).get("readback_drill") + or {} + ).get("required_checks") + or [] + ), + "canary_delivery_rehearsal_stop_condition_count": len( + (bridge.get("canary_delivery_rehearsal") or {}).get("stop_conditions") or [] + ), + "canary_delivery_rehearsal_rollback_mute_control_count": len( + (bridge.get("canary_delivery_rehearsal") or {}).get("rollback_mute_controls") + or [] + ), + "canary_delivery_rehearsal_completed_check_count": ( + ( + (bridge.get("canary_delivery_rehearsal") or {}).get("readback_drill") + or {} + ).get("completed_check_count") + ), + "canary_delivery_rehearsal_failed_check_count": ( + ( + (bridge.get("canary_delivery_rehearsal") or {}).get("readback_drill") + or {} + ).get("failed_check_count") + ), } mismatches = _mismatches(rollups, expected) if mismatches: diff --git a/apps/api/tests/test_ai_agent_professional_task_expansion.py b/apps/api/tests/test_ai_agent_professional_task_expansion.py index 597df2e5..d7e1d0f4 100644 --- a/apps/api/tests/test_ai_agent_professional_task_expansion.py +++ b/apps/api/tests/test_ai_agent_professional_task_expansion.py @@ -18,9 +18,9 @@ def test_load_latest_ai_agent_professional_task_expansion_snapshot() -> None: snapshot = load_latest_ai_agent_professional_task_expansion() assert snapshot["schema_version"] == "ai_agent_professional_task_expansion_v1" - assert snapshot["program_status"]["current_task_id"] == "P2-405D" - assert snapshot["program_status"]["next_task_id"] == "P2-405E" - assert snapshot["program_status"]["overall_completion_percent"] == 96 + assert snapshot["program_status"]["current_task_id"] == "P2-405E" + assert snapshot["program_status"]["next_task_id"] == "P2-405F" + assert snapshot["program_status"]["overall_completion_percent"] == 98 assert snapshot["program_status"]["runtime_authority"] == ( "professional_task_expansion_and_telegram_bridge_read_only_no_send" ) @@ -106,6 +106,17 @@ def test_load_latest_ai_agent_professional_task_expansion_snapshot() -> None: assert rollups["canary_delivery_receipt_write_enabled_count"] == 0 assert rollups["canary_delivery_secret_read_enabled_count"] == 0 assert rollups["canary_delivery_paid_api_enabled_count"] == 0 + assert rollups["canary_delivery_rehearsal_count"] == 1 + assert rollups["canary_delivery_rehearsal_step_count"] == 6 + assert rollups["canary_delivery_rehearsal_readback_check_count"] == 8 + assert rollups["canary_delivery_rehearsal_stop_condition_count"] == 7 + assert rollups["canary_delivery_rehearsal_rollback_mute_control_count"] == 5 + assert rollups["canary_delivery_rehearsal_completed_check_count"] == 8 + assert rollups["canary_delivery_rehearsal_failed_check_count"] == 0 + assert rollups["canary_delivery_rehearsal_live_send_enabled_count"] == 0 + assert rollups["canary_delivery_rehearsal_gateway_queue_write_enabled_count"] == 0 + assert rollups["canary_delivery_rehearsal_bot_api_call_enabled_count"] == 0 + assert rollups["canary_delivery_rehearsal_receipt_write_enabled_count"] == 0 def test_professional_tasks_cover_required_agents_and_reporting() -> None: @@ -245,6 +256,38 @@ def test_canary_delivery_gate_waits_for_explicit_delivery_fields() -> None: assert all(value is False for value in gate["execution_flags"].values()) +def test_canary_delivery_rehearsal_is_ready_without_live_send() -> None: + snapshot = load_latest_ai_agent_professional_task_expansion() + rehearsal = snapshot["telegram_runtime_bridge"]["canary_delivery_rehearsal"] + + assert rehearsal["status"] == "ready_no_send_rehearsal" + assert rehearsal["rehearsal_ready"] is True + assert rehearsal["selected_message_type"] == "daily_agent_workload_digest" + assert rehearsal["selected_preview_id"] == "p2_405b_preview_daily_agent_workload_digest_v1" + assert rehearsal["target_room_env"] == "SRE_GROUP_CHAT_ID" + assert rehearsal["target_room_value_visible"] is False + assert rehearsal["sanitized_preview_hash"].startswith("sha256:") + assert rehearsal["dedup_key"] == "awoooi:agent-report:daily:2026-06-18:v1" + assert len(rehearsal["dry_run_steps"]) == 6 + assert len(rehearsal["stop_conditions"]) == 7 + assert len(rehearsal["rollback_mute_controls"]) == 5 + + envelope = rehearsal["gateway_envelope_preview"] + assert envelope["queue_write_enabled"] is False + assert envelope["bot_api_call_enabled"] is False + assert envelope["telegram_send_enabled"] is False + assert envelope["delivery_receipt_write_enabled"] is False + + readback = rehearsal["readback_drill"] + assert readback["owner_agent"] == "hermes" + assert len(readback["required_checks"]) == 8 + assert readback["completed_check_count"] == 8 + assert readback["failed_check_count"] == 0 + assert readback["production_receipt_write_enabled"] is False + assert readback["live_receipt_readback_enabled"] is False + assert all(value is False for value in rehearsal["execution_flags"].values()) + + def test_rejects_telegram_send_enabled(tmp_path: Path) -> None: snapshot = copy.deepcopy(load_latest_ai_agent_professional_task_expansion()) snapshot["telegram_runtime_bridge"]["telegram_send_enabled"] = True @@ -359,6 +402,28 @@ def test_rejects_canary_delivery_gateway_queue_write_enabled(tmp_path: Path) -> load_latest_ai_agent_professional_task_expansion(tmp_path) +def test_rejects_canary_delivery_rehearsal_send_enabled(tmp_path: Path) -> None: + snapshot = copy.deepcopy(load_latest_ai_agent_professional_task_expansion()) + rehearsal = snapshot["telegram_runtime_bridge"]["canary_delivery_rehearsal"] + rehearsal["execution_flags"]["telegram_send_enabled"] = True + snapshot["rollups"]["canary_delivery_rehearsal_live_send_enabled_count"] = 1 + _write_snapshot(tmp_path, snapshot) + + with pytest.raises(ValueError, match="canary rehearsal execution flags mismatch"): + load_latest_ai_agent_professional_task_expansion(tmp_path) + + +def test_rejects_canary_delivery_rehearsal_receipt_write_enabled(tmp_path: Path) -> None: + snapshot = copy.deepcopy(load_latest_ai_agent_professional_task_expansion()) + rehearsal = snapshot["telegram_runtime_bridge"]["canary_delivery_rehearsal"] + rehearsal["readback_drill"]["production_receipt_write_enabled"] = True + snapshot["rollups"]["canary_delivery_rehearsal_receipt_write_enabled_count"] = 1 + _write_snapshot(tmp_path, snapshot) + + with pytest.raises(ValueError, match="production receipt write must remain false"): + load_latest_ai_agent_professional_task_expansion(tmp_path) + + def test_rejects_high_risk_without_approval(tmp_path: Path) -> None: snapshot = copy.deepcopy(load_latest_ai_agent_professional_task_expansion()) high_task = next(task for task in snapshot["professional_tasks"] if task["risk_tier"] == "high") diff --git a/apps/api/tests/test_ai_agent_professional_task_expansion_api.py b/apps/api/tests/test_ai_agent_professional_task_expansion_api.py index 91804420..27996e91 100644 --- a/apps/api/tests/test_ai_agent_professional_task_expansion_api.py +++ b/apps/api/tests/test_ai_agent_professional_task_expansion_api.py @@ -17,9 +17,9 @@ def test_ai_agent_professional_task_expansion_endpoint() -> None: assert response.status_code == 200 payload = response.json() assert payload["schema_version"] == "ai_agent_professional_task_expansion_v1" - assert payload["program_status"]["current_task_id"] == "P2-405D" - assert payload["program_status"]["next_task_id"] == "P2-405E" - assert payload["program_status"]["overall_completion_percent"] == 96 + assert payload["program_status"]["current_task_id"] == "P2-405E" + assert payload["program_status"]["next_task_id"] == "P2-405F" + assert payload["program_status"]["overall_completion_percent"] == 98 assert payload["program_status"]["runtime_authority"] == ( "professional_task_expansion_and_telegram_bridge_read_only_no_send" ) @@ -54,6 +54,13 @@ def test_ai_agent_professional_task_expansion_endpoint() -> None: assert payload["rollups"]["canary_delivery_attempt_allowed_count"] == 0 assert payload["rollups"]["canary_delivery_gateway_queue_write_enabled_count"] == 0 assert payload["rollups"]["canary_delivery_bot_api_call_enabled_count"] == 0 + assert payload["rollups"]["canary_delivery_rehearsal_count"] == 1 + assert payload["rollups"]["canary_delivery_rehearsal_step_count"] == 6 + assert payload["rollups"]["canary_delivery_rehearsal_readback_check_count"] == 8 + assert payload["rollups"]["canary_delivery_rehearsal_failed_check_count"] == 0 + assert payload["rollups"]["canary_delivery_rehearsal_gateway_queue_write_enabled_count"] == 0 + assert payload["rollups"]["canary_delivery_rehearsal_bot_api_call_enabled_count"] == 0 + assert payload["rollups"]["canary_delivery_rehearsal_receipt_write_enabled_count"] == 0 assert payload["telegram_runtime_bridge"]["canary_approval_package"]["live_send_enabled"] is False assert payload["telegram_runtime_bridge"]["canary_send_approval_packet"]["approval_granted"] is False assert ( @@ -63,5 +70,16 @@ def test_ai_agent_professional_task_expansion_endpoint() -> None: assert payload["telegram_runtime_bridge"]["canary_delivery_gate"]["delivery_approved"] is False assert payload["telegram_runtime_bridge"]["canary_delivery_gate"]["delivery_attempt_allowed"] is False assert payload["telegram_runtime_bridge"]["canary_delivery_gate"]["target_room_value_visible"] is False + assert payload["telegram_runtime_bridge"]["canary_delivery_rehearsal"]["rehearsal_ready"] is True + assert ( + payload["telegram_runtime_bridge"]["canary_delivery_rehearsal"]["selected_message_type"] + == "daily_agent_workload_digest" + ) + assert ( + payload["telegram_runtime_bridge"]["canary_delivery_rehearsal"]["gateway_envelope_preview"][ + "telegram_send_enabled" + ] + is False + ) assert len(payload["telegram_runtime_bridge"]["no_send_message_previews"]) == 6 assert len(payload["telegram_runtime_bridge"]["receipt_expectations"]) == 6 diff --git a/apps/web/messages/en.json b/apps/web/messages/en.json index 497ae5f0..5f8b0bd4 100644 --- a/apps/web/messages/en.json +++ b/apps/web/messages/en.json @@ -4351,6 +4351,41 @@ "next_gate": "下一關" } }, + "reportDeliveryHero": { + "title": "Telegram / TG Bot 日週月報派送演練", + "subtitle": "{current} 已整理日報、週報、月報實發批准包；下一關 {next} 才能進入 fixture readback，不直接實發。", + "source": "{generated} · {current}", + "route": "正式目標：{room}", + "statusLine": "這裡顯示 AI Agent 報告要如何送到 Telegram：先走 AwoooI SRE 戰情室、先做 no-send 演練、先確認 dedup / redaction / 回執欄位；目前 scheduler、Gateway queue、Bot API、Telegram 實發、讀報回執與 AI 分析全部仍為 0。", + "routeGateTitle": "Telegram 路由與 TG Bot 閘門", + "receiptTitle": "讀報回執與 AI 分析演練", + "metrics": { + "packets": "批准包", + "routeGates": "路由閘門", + "receipts": "回執演練", + "approvalRequired": "需審核", + "telegramSends": "Telegram 實發", + "liveWrites": "live 寫入" + }, + "flags": { + "scheduler": "scheduler: {value}", + "gateway": "Gateway queue: {value}", + "telegram": "Telegram send: {value}", + "botApi": "Bot API: {value}", + "receipt": "receipt write: {value}", + "analysis": "AI analysis: {value}", + "ownerReview": "人工審核: {value}" + }, + "labels": { + "noSendMode": "no-send: {value}", + "requiredEvidence": "證據 {count}", + "gateway": "queue write: {value}", + "telegram": "send: {value}", + "requiredFields": "欄位 {count}", + "liveSendCount": "live send {count}", + "receiptWrite": "receipt write: {value}" + } + }, "reportRuntimeReadiness": { "title": "P2-403L 報表派送與自動處理啟動閘門", "source": "{generated} · {current} → {next}", @@ -6468,7 +6503,7 @@ } }, "professionalTaskExpansion": { - "title": "P2-405D AI Agent TG Canary Delivery Gate", + "title": "P2-405E AI Agent TG Canary 乾跑派送演練", "source": "產生 {generated}；目前 {current}；下一步 {next}", "runtime": "runtime={value}", "telegramTitle": "Telegram Runtime Bridge", @@ -6494,7 +6529,10 @@ "deliveryGate": "delivery gate", "deliveryFields": "交付欄位", "deliveryPreflight": "交付 preflight", - "deliveryHoldReasons": "hold reason" + "deliveryHoldReasons": "hold reason", + "deliveryRehearsal": "派送演練", + "rehearsalChecks": "演練檢查", + "rehearsalStops": "停止條件" }, "previewTitle": "Telegram no-send 訊息預覽", "canaryTitle": "Canary 批准包", @@ -6532,7 +6570,18 @@ "deliveryApproved": "delivery approved={value}", "attemptAllowed": "attempt allowed={value}", "targetVerified": "target verified={value}", - "holdReason": "hold={value}" + "holdReason": "hold={value}", + "rehearsalReady": "演練就緒={value}", + "targetRoom": "目標聊天室 env={value}", + "targetEnv": "目標 env={value}", + "previewHash": "preview hash={value}", + "readbackOwner": "readback owner={value}", + "completedChecks": "檢查 {done}/{total}", + "failedChecks": "失敗檢查={count}", + "receiptWrite": "receipt write={value}", + "liveReadback": "live readback={value}", + "stopCondition": "停止={value}", + "nextGate": "下一關={value}" }, "riskTiers": { "low": "低風險", @@ -6540,7 +6589,10 @@ "high": "高風險", "critical": "Critical" }, - "canaryDeliveryGateTitle": "P2-405D Canary Delivery Gate" + "canaryDeliveryGateTitle": "P2-405D Canary 派送閘門", + "canaryDeliveryRehearsalTitle": "P2-405E Canary 乾跑派送演練", + "rehearsalEnvelopeTitle": "Gateway envelope 演練", + "rehearsalReadbackTitle": "回執讀回演練" }, "resultCaptureReleaseVerifierOwnerReviewPacket": { "title": "P2-137 釋出驗證器負責人審查包", diff --git a/apps/web/messages/zh-TW.json b/apps/web/messages/zh-TW.json index 497ae5f0..5f8b0bd4 100644 --- a/apps/web/messages/zh-TW.json +++ b/apps/web/messages/zh-TW.json @@ -4351,6 +4351,41 @@ "next_gate": "下一關" } }, + "reportDeliveryHero": { + "title": "Telegram / TG Bot 日週月報派送演練", + "subtitle": "{current} 已整理日報、週報、月報實發批准包；下一關 {next} 才能進入 fixture readback，不直接實發。", + "source": "{generated} · {current}", + "route": "正式目標：{room}", + "statusLine": "這裡顯示 AI Agent 報告要如何送到 Telegram：先走 AwoooI SRE 戰情室、先做 no-send 演練、先確認 dedup / redaction / 回執欄位；目前 scheduler、Gateway queue、Bot API、Telegram 實發、讀報回執與 AI 分析全部仍為 0。", + "routeGateTitle": "Telegram 路由與 TG Bot 閘門", + "receiptTitle": "讀報回執與 AI 分析演練", + "metrics": { + "packets": "批准包", + "routeGates": "路由閘門", + "receipts": "回執演練", + "approvalRequired": "需審核", + "telegramSends": "Telegram 實發", + "liveWrites": "live 寫入" + }, + "flags": { + "scheduler": "scheduler: {value}", + "gateway": "Gateway queue: {value}", + "telegram": "Telegram send: {value}", + "botApi": "Bot API: {value}", + "receipt": "receipt write: {value}", + "analysis": "AI analysis: {value}", + "ownerReview": "人工審核: {value}" + }, + "labels": { + "noSendMode": "no-send: {value}", + "requiredEvidence": "證據 {count}", + "gateway": "queue write: {value}", + "telegram": "send: {value}", + "requiredFields": "欄位 {count}", + "liveSendCount": "live send {count}", + "receiptWrite": "receipt write: {value}" + } + }, "reportRuntimeReadiness": { "title": "P2-403L 報表派送與自動處理啟動閘門", "source": "{generated} · {current} → {next}", @@ -6468,7 +6503,7 @@ } }, "professionalTaskExpansion": { - "title": "P2-405D AI Agent TG Canary Delivery Gate", + "title": "P2-405E AI Agent TG Canary 乾跑派送演練", "source": "產生 {generated}；目前 {current}；下一步 {next}", "runtime": "runtime={value}", "telegramTitle": "Telegram Runtime Bridge", @@ -6494,7 +6529,10 @@ "deliveryGate": "delivery gate", "deliveryFields": "交付欄位", "deliveryPreflight": "交付 preflight", - "deliveryHoldReasons": "hold reason" + "deliveryHoldReasons": "hold reason", + "deliveryRehearsal": "派送演練", + "rehearsalChecks": "演練檢查", + "rehearsalStops": "停止條件" }, "previewTitle": "Telegram no-send 訊息預覽", "canaryTitle": "Canary 批准包", @@ -6532,7 +6570,18 @@ "deliveryApproved": "delivery approved={value}", "attemptAllowed": "attempt allowed={value}", "targetVerified": "target verified={value}", - "holdReason": "hold={value}" + "holdReason": "hold={value}", + "rehearsalReady": "演練就緒={value}", + "targetRoom": "目標聊天室 env={value}", + "targetEnv": "目標 env={value}", + "previewHash": "preview hash={value}", + "readbackOwner": "readback owner={value}", + "completedChecks": "檢查 {done}/{total}", + "failedChecks": "失敗檢查={count}", + "receiptWrite": "receipt write={value}", + "liveReadback": "live readback={value}", + "stopCondition": "停止={value}", + "nextGate": "下一關={value}" }, "riskTiers": { "low": "低風險", @@ -6540,7 +6589,10 @@ "high": "高風險", "critical": "Critical" }, - "canaryDeliveryGateTitle": "P2-405D Canary Delivery Gate" + "canaryDeliveryGateTitle": "P2-405D Canary 派送閘門", + "canaryDeliveryRehearsalTitle": "P2-405E Canary 乾跑派送演練", + "rehearsalEnvelopeTitle": "Gateway envelope 演練", + "rehearsalReadbackTitle": "回執讀回演練" }, "resultCaptureReleaseVerifierOwnerReviewPacket": { "title": "P2-137 釋出驗證器負責人審查包", diff --git a/apps/web/src/app/[locale]/governance/tabs/automation-inventory-tab.tsx b/apps/web/src/app/[locale]/governance/tabs/automation-inventory-tab.tsx index 6c6e333f..7796cab9 100644 --- a/apps/web/src/app/[locale]/governance/tabs/automation-inventory-tab.tsx +++ b/apps/web/src/app/[locale]/governance/tabs/automation-inventory-tab.tsx @@ -3721,9 +3721,14 @@ export function AutomationInventoryTab() { + professionalTaskExpansion.rollups.canary_delivery_bot_api_call_enabled_count + professionalTaskExpansion.rollups.canary_delivery_secret_read_enabled_count + professionalTaskExpansion.rollups.canary_delivery_paid_api_enabled_count + + professionalTaskExpansion.rollups.canary_delivery_rehearsal_live_send_enabled_count + + professionalTaskExpansion.rollups.canary_delivery_rehearsal_gateway_queue_write_enabled_count + + professionalTaskExpansion.rollups.canary_delivery_rehearsal_bot_api_call_enabled_count + + professionalTaskExpansion.rollups.canary_delivery_rehearsal_receipt_write_enabled_count ) const professionalTaskCanarySendPacket = professionalTaskExpansion.telegram_runtime_bridge.canary_send_approval_packet const professionalTaskCanaryDeliveryGate = professionalTaskExpansion.telegram_runtime_bridge.canary_delivery_gate + const professionalTaskCanaryDeliveryRehearsal = professionalTaskExpansion.telegram_runtime_bridge.canary_delivery_rehearsal const professionalTaskCanaryApprovalGaps = ( professionalTaskExpansion.rollups.canary_approval_granted_count + professionalTaskExpansion.rollups.canary_selected_message_type_count @@ -4178,6 +4183,129 @@ export function AutomationInventoryTab() { + +
+
+
+
+ +
+
+ + {t('reportDeliveryHero.title')} + + + {t('reportDeliveryHero.subtitle', { + current: reportLiveDeliveryApprovalPackage.program_status.current_task_id, + next: reportLiveDeliveryApprovalPackage.program_status.next_task_id, + })} + +
+
+
+ + +
+
+ +
+ + {t('reportDeliveryHero.statusLine')} + +
+ + + + + + + +
+
+ +
+ } /> + } /> + } /> + } /> + } /> + } /> +
+ +
+ {visibleReportDeliveryPackets.map(packet => ( +
+
+ + {packet.display_name} + + +
+ + {packet.operator_guidance} + +
+ + + + +
+
+ ))} +
+ +
+
+ {t('reportDeliveryHero.routeGateTitle')} + {visibleReportRouteGates.slice(0, 3).map(gate => ( +
+ + {gate.display_name} + +
+ + + + +
+
+ ))} +
+ +
+ {t('reportDeliveryHero.receiptTitle')} + {visibleReportDeliveryReceipts.map(receipt => ( +
+ + {receipt.display_name} + +
+ + + + +
+
+ ))} +
+
+
+ +
@@ -4342,6 +4470,9 @@ export function AutomationInventoryTab() { } /> } /> } /> + } /> + } /> + } />
@@ -4512,6 +4643,56 @@ export function AutomationInventoryTab() {
+
+ {t('professionalTaskExpansion.canaryDeliveryRehearsalTitle')} +

+ {professionalTaskCanaryDeliveryRehearsal.rehearsal_id} · {professionalTaskCanaryDeliveryRehearsal.status} +

+
+ + + + + + +
+
+
+ {t('professionalTaskExpansion.rehearsalEnvelopeTitle')} +
+ + + + +
+
+
+ {t('professionalTaskExpansion.rehearsalReadbackTitle')} +
+ + + + + +
+
+
+
+ {professionalTaskCanaryDeliveryRehearsal.dry_run_steps.map(step => ( +
+ {step} +
+ ))} +
+
+ {professionalTaskCanaryDeliveryRehearsal.stop_conditions.slice(0, 7).map(condition => ( +
+ {t('professionalTaskExpansion.labels.stopCondition', { value: condition })} +
+ ))} +
+
+ {t('professionalTaskExpansion.tasksTitle')}
{visibleProfessionalTasks.map(task => { diff --git a/apps/web/src/lib/api-client.ts b/apps/web/src/lib/api-client.ts index 91085347..08d2d85d 100644 --- a/apps/web/src/lib/api-client.ts +++ b/apps/web/src/lib/api-client.ts @@ -1429,8 +1429,8 @@ export interface AiAgentProfessionalTaskExpansionSnapshot { program_status: { overall_completion_percent: number current_priority: 'P0' | 'P1' | 'P2' | 'P3' - current_task_id: 'P2-405D' - next_task_id: 'P2-405E' + current_task_id: 'P2-405E' + next_task_id: 'P2-405F' read_only_mode: true runtime_authority: 'professional_task_expansion_and_telegram_bridge_read_only_no_send' status_note: string @@ -1645,6 +1645,54 @@ export interface AiAgentProfessionalTaskExpansionSnapshot { } delivery_decision_log: unknown[] } + canary_delivery_rehearsal: { + rehearsal_id: string + status: string + rehearsal_ready: boolean + selected_message_type: string + selected_preview_id: string + selected_receipt_expectation_id: string + target_room_alias: string + target_room_env: string + target_room_value_visible: boolean + dry_run_window: string + preview_hash_algorithm: string + sanitized_preview_hash: string + dedup_key: string + gateway_envelope_preview: { + message_type: string + target_room_env_ref: string + dedup_key: string + preview_hash: string + risk_tier: string + queue_write_enabled: boolean + bot_api_call_enabled: boolean + telegram_send_enabled: boolean + delivery_receipt_write_enabled: boolean + } + dry_run_steps: string[] + readback_drill: { + owner_agent: string + required_checks: string[] + completed_check_count: number + failed_check_count: number + production_receipt_write_enabled: boolean + live_receipt_readback_enabled: boolean + } + stop_conditions: string[] + rollback_mute_controls: string[] + execution_flags: { + live_delivery_enabled: boolean + gateway_queue_write_enabled: boolean + bot_api_call_enabled: boolean + telegram_send_enabled: boolean + delivery_receipt_write_enabled: boolean + production_write_enabled: boolean + secret_read_enabled: boolean + paid_api_enabled: boolean + } + next_gate: string + } no_send_preview_completion_percent: number canary_approval_package_completion_percent: number canary_send_approval_packet_ready: boolean @@ -1655,6 +1703,8 @@ export interface AiAgentProfessionalTaskExpansionSnapshot { canary_delivery_approved: boolean canary_delivery_attempt_allowed: boolean canary_delivery_gate_completion_percent: number + canary_delivery_rehearsal_ready: boolean + canary_delivery_rehearsal_completion_percent: number } professional_task_domains: Array<{ domain_id: string @@ -1751,6 +1801,17 @@ export interface AiAgentProfessionalTaskExpansionSnapshot { canary_delivery_bot_api_call_enabled_count: number canary_delivery_secret_read_enabled_count: number canary_delivery_paid_api_enabled_count: number + canary_delivery_rehearsal_count: number + canary_delivery_rehearsal_step_count: number + canary_delivery_rehearsal_readback_check_count: number + canary_delivery_rehearsal_stop_condition_count: number + canary_delivery_rehearsal_rollback_mute_control_count: number + canary_delivery_rehearsal_completed_check_count: number + canary_delivery_rehearsal_failed_check_count: number + canary_delivery_rehearsal_live_send_enabled_count: number + canary_delivery_rehearsal_gateway_queue_write_enabled_count: number + canary_delivery_rehearsal_bot_api_call_enabled_count: number + canary_delivery_rehearsal_receipt_write_enabled_count: number } } diff --git a/docs/LOGBOOK.md b/docs/LOGBOOK.md index 114e2d84..72eac18c 100644 --- a/docs/LOGBOOK.md +++ b/docs/LOGBOOK.md @@ -1,3 +1,26 @@ +## 2026-06-18｜P2-405E / P2-406A AI Agent Telegram 派送演練與前段主看板 + +**背景**：統帥已明確指出 Telegram 告警與日週月報不能停在「報表都是 0」或「批准後沒有自動化」，也不能讓日報、週報、月報埋在長頁面後段。既有 P2-405D 已把 Canary Delivery Gate、必填欄位、preflight、hold reason 與 rollback / mute 控制固定；既有 P2-111 也已有日報、週報、月報、failure-only 摘要與讀報回執的實發批准包。本階段一方面把下一步推進成可重放的 dry-run delivery rehearsal，另一方面把 P2-111 報告派送批准包拉到治理頁前段，讓 operator 能看見單一訊息如何被選定、如何形成 Gateway envelope preview、如何由 Hermes 做 receipt readback drill、哪些條件會停止，以及報告會送往哪個 TG 戰情室。此段仍不實發 Telegram、不寫 Gateway queue、不呼叫 Bot API。 + +**完成內容**： +- 新增 committed snapshot `docs/evaluations/ai_agent_professional_task_expansion_2026-06-18_1200_p2_405e.json`，current `P2-405E`、next `P2-405F`、completion `98%`。 +- `telegram_runtime_bridge.canary_delivery_rehearsal` 固定 `daily_agent_workload_digest` 作為第一個 dry-run rehearsal 訊息，目標只顯示 `SRE_GROUP_CHAT_ID` env ref，不顯示 chat id value。 +- Rehearsal 固定 preview-only hash、single-use dedup key、Gateway envelope preview、6 個 dry-run step、8 個 readback check、7 個 stop condition、5 個 rollback / mute control。 +- API service guard 強制 rehearsal 的 live delivery、Gateway queue write、Bot API call、Telegram send、receipt write、production write、secret read、paid API 全部維持 `false / 0`。 +- Governance automation inventory 的 P2-405 區塊新增 rehearsal KPI 與卡片，直接顯示 selected message、target env、preview hash、dedup key、readback owner、completed / failed checks、next gate。 +- Governance automation inventory 在日週月報主看板下方新增「Telegram / TG Bot 日週月報派送演練」主看板。 +- P2-406A 主看板直接顯示正式目標 `AwoooI SRE 戰情室`、P2-111 實發批准包、下一關 P2-112、5 份 delivery approval packet、4 個路由閘門、4 個 no-send 回執演練、需審核數、Telegram 實發數與 live write 數。 +- P2-406A 主看板列出 `AI Agent 日報實發批准包`、`AI Agent 週報實發批准包`、`AI Agent 月報實發批准包`、`失敗限定摘要批准包`、`讀報回執 readback 批准包`，並保留 owner agent、risk tier、status 與 no-send 狀態。 +- i18n 兩份 locale 均使用繁體中文鏡像；前端仍透過既有 redaction helper 遮蔽內部協作、raw prompt、raw payload、authorization header 與 secret 類字串。 + +**完成度同步**： +- P2-405E Telegram Canary Dry-run Delivery Rehearsal：本地實作 `100%`，待 Gitea CD / production verification。 +- P2-406A 日週月報 Telegram 派送演練主看板：本地實作 `100%`，待 Gitea CD / production verification。 +- AI Agent 專業任務擴展與 Telegram Runtime Bridge：`96% -> 98%`。 +- Telegram 實發、Gateway queue 寫入、Bot API call、delivery receipt production write、AI analysis runtime、中低風險 auto worker、production optimization write：全部仍維持 `0 / false`。 + +**邊界**：本段不送 Telegram、不寫 Gateway queue、不呼叫 Bot API、不寫讀報回執、不啟動排程、不啟動 AI analysis runtime、不啟動中低風險自動處理、不讀 secret、不新增批准或發送按鈕；不得把 dry-run rehearsal 解讀成 runtime gate 已開啟。 + ## 2026-06-16｜IwoooS CD / Runner / Secret 回讀 Gate 正式部署驗證 **背景**：上一段 CD / Runner / Secret 注入事故後回讀 gate 已完成 repo 內 artifact / guard / 前台 marker，但一度被 CD run `3071` 的 Docker build lock timeout 擋住，不能宣告 production 完成。後續另一個 Session 記錄 empty lock cleanup evidence，並以 `97b66a0e` 前端 locale commit 觸發正式 CD；本視窗只做只讀 Actions / production 回讀與 LOGBOOK 同步，未 SSH、未 Docker / host live write、未 workflow dispatch、未改 runner 或 repository secret。 diff --git a/docs/ai/AI_AGENT_AUTOMATION_WORKLIST_2026-06-04.md b/docs/ai/AI_AGENT_AUTOMATION_WORKLIST_2026-06-04.md index 9f609b13..c0d3b958 100644 --- a/docs/ai/AI_AGENT_AUTOMATION_WORKLIST_2026-06-04.md +++ b/docs/ai/AI_AGENT_AUTOMATION_WORKLIST_2026-06-04.md @@ -15,11 +15,19 @@ | OpenClaw / Hermes / NemoTron 主動溝通、學習與成長證據 | 100% | P2-401A 到 P2-144 已完成只讀證據面、runtime / report / result-capture gates、no-write readback、promotion review、writer implementation review、writer dry-run fixture、writer dry-run readback、owner promotion execution gate、owner-approved execution rehearsal、owner acceptance / maintenance window gate、owner acceptance readback / preflight hold、owner-approved preflight release package、owner-approved release readiness readback、owner release approval gate、post-release verifier / rollback gate、final release candidate readback、release authorization hold / readback gate、release verifier preflight / owner review packet、release decision hold / readback、release decision next handoff、release decision input prep、12-Agent War Room、owner response 預檢與 owner response 回讀；P2-141 基線與 S4.9 owner release packet 補強皆已正式驗證，P2-142 12-Agent War Room 已完成 production readback 與 desktop / mobile smoke，P2-143 owner response 預檢已完成 production readback 與 in-app browser smoke，P2-144 owner response 回讀已完成 production API readback 與 desktop / mobile smoke。runtime worker、DB migration、production Redis consumer group、canonical runtime readback、live query、runtime score、result capture write、Telegram 實發、delivery receipt E2E、live report delivery、reviewer queue write、Gateway queue write、AI analysis runtime、中低風險 auto worker、KM / LOGBOOK / audit DB / timeline / PlayBook trust 寫入、SDK / 付費服務仍未開 gate | `ai_agent_result_capture_release_decision_owner_response_readback_v1`、`GET /api/v1/agents/agent-result-capture-release-decision-owner-response-readback`、`docs/evaluations/ai_agent_result_capture_release_decision_owner_response_readback_2026-06-14.json`、feature commit `8795f100`、deploy marker `ac938037`、Gitea code-review `2965` / CD `2964` success、5 個回覆讀回 lane、18 個 owner 必填欄位、6 個 readback validation check、6 個 rejection guard、5 個 operator action、等待外部回覆 `5`、未收件 lane `5`、正式寫入 / 發送 `0`；P2-142 feature commit `5de4b3f3`、deploy marker `1a2c9e36`、Gitea CD run `4232` success、production API readback、desktop / mobile in-app browser smoke；P2-143 feature commit `755b0a8d`、deploy marker `667d6329`、Gitea code-review `2961` / CD `2960` success、production API readback、desktop / mobile in-app browser smoke；MASTER §3.2.1b / §3.2.1d / §3.4.3 | | AI Agent 主動營運委派與版本生命週期 | 100% | P2-402A / P2-402B / P2-402C / P2-402D / P2-402E / P2-402F / P2-402G 已完成；已建立 repo-only 版本新鮮度快照、工具採用批准包、Telegram action-required digest policy、Gitea PR 草案 lane、host / K3s / stateful 版本只讀盤點、API 與 governance UI。定期排程、外部版本查詢、工具安裝、CI 變更、套件升級、主機更新、container pull、實際 PR creation、auto merge、Telegram 實發、SSH、kubectl、重啟仍未開 gate | `ai_agent_proactive_operations_contract_v1`、`ai_agent_version_freshness_snapshot_v1`、`ai_agent_tool_adoption_approval_package_v1`、`ai_agent_telegram_action_required_digest_policy_v1`、`ai_agent_gitea_pr_draft_lane_v1`、`ai_agent_host_stateful_version_inventory_v1`、`GET /api/v1/agents/agent-proactive-operations-contract`、`GET /api/v1/agents/agent-version-freshness-snapshot`、`GET /api/v1/agents/agent-tool-adoption-approval-package`、`GET /api/v1/agents/agent-telegram-action-required-digest-policy`、`GET /api/v1/agents/agent-gitea-pr-draft-lane`、`GET /api/v1/agents/agent-host-stateful-version-inventory`、`/zh-TW/governance?tab=automation-inventory`、MASTER §3.2.1c | | 12-Agent War Room 編組 | 72% | 12 個邏輯工位與分批派工規則已正式部署；OpenClaw / Hermes / NemoTron / SRE / Security / DevOps / Data/DR / Supply Chain / Product/UI / QA / Market / Telegram 共 12 份只讀審查已回收；schema / committed snapshot / API / tests / governance UI 區塊 / production API readback / desktop + mobile in-app browser smoke 已完成；runtime writer、Telegram send、Bot API、production write 仍未批准 | `ai_agent_12_agent_war_room_v1`、`docs/evaluations/ai_agent_12_agent_war_room_2026-06-14.json`、`GET /api/v1/agents/agent-12-agent-war-room`、feature commit `5de4b3f3`、deploy marker `1a2c9e36`、Gitea CD run `4232` success、`/zh-TW/governance?tab=automation-inventory`、12 份 Codex sub-agent 只讀回饋 | -| AI Agent 專業任務擴展與 Telegram Runtime Bridge | 96% | P2-405D 已完成只讀契約、正式 API、治理頁 P2-405D 卡片、6 種 Telegram no-send preview、6 個 dedup key、6 組 receipt expectation、1 份 canary approval package、1 份 canary send approval packet、1 份 canary delivery gate、8 個交付必填欄位、8 個 preflight check、7 個 hold reason、7 個 readback check、5 個 rollback / mute control；24 類專業任務、8 個領域、5 段 Telegram bridge、6 種訊息類型、MCP/RAG stack、日報 / 週報 / 月報 / action-required 報告契約已固定；Telegram 實發、Gateway queue、Bot API、delivery receipt production write、secret read、paid API、host write、kubectl action 仍全部關閉 | `ai_agent_professional_task_expansion_v1`、`docs/evaluations/ai_agent_professional_task_expansion_2026-06-16_1108_p2_405d.json`、`GET /api/v1/agents/agent-professional-task-expansion`、`/zh-TW/governance?tab=automation-inventory`、`docs/ai/AI_AGENT_PROFESSIONAL_TASK_EXPANSION_2026-06-15.md`、需批准任務 `19`、no-send preview `6`、dedup key `6`、receipt expectation `6`、canary package `1`、canary send approval packet `1`、delivery gate `1`、交付欄位 `8`、preflight `8`、hold reason `7`、preview / canary / delivery live write `0`；下一步 P2-405E canary dry-run delivery rehearsal | +| AI Agent 專業任務擴展與 Telegram Runtime Bridge | 98% | P2-405E 已完成只讀契約、正式 API 候選、治理頁 P2-405E 乾跑派送演練卡、6 種 Telegram no-send preview、6 個 dedup key、6 組 receipt expectation、1 份 canary approval package、1 份 canary send approval packet、1 份 canary delivery gate、1 份 canary dry-run delivery rehearsal、6 個乾跑步驟、8 個 receipt readback check、7 個 stop condition、5 個 rollback / mute control；P2-406A 已把 P2-111 日報 / 週報 / 月報實發批准包、AwoooI SRE 戰情室 route、TG Bot / Gateway / receipt / AI analysis 邊界拉到治理頁前段主看板；24 類專業任務、8 個領域、5 段 Telegram bridge、6 種訊息類型、MCP/RAG stack、日報 / 週報 / 月報 / action-required 報告契約已固定；Telegram 實發、Gateway queue、Bot API、delivery receipt production write、secret read、paid API、host write、kubectl action 仍全部關閉 | `ai_agent_professional_task_expansion_v1`、`docs/evaluations/ai_agent_professional_task_expansion_2026-06-18_1200_p2_405e.json`、`GET /api/v1/agents/agent-professional-task-expansion`、`GET /api/v1/agents/agent-report-live-delivery-approval-package`、`/zh-TW/governance?tab=automation-inventory`、`docs/ai/AI_AGENT_PROFESSIONAL_TASK_EXPANSION_2026-06-15.md`、需批准任務 `19`、no-send preview `6`、dedup key `6`、receipt expectation `6`、canary package `1`、canary send approval packet `1`、delivery gate `1`、dry-run rehearsal `1`、P2-111 delivery approval packet `5`、route gate `4`、no-send receipt `4`、交付欄位 `8`、preflight `8`、hold reason `7`、preview / canary / delivery / rehearsal live write `0`；下一步 P2-405F / P2-406B receipt readback owner review | | Owner response 預檢與拒收邊界 | 100% | P2-143 已完成正式部署與 production readback；承接 P2-141 input prep 與 P2-142 War Room，只建立 owner / verifier / rollback / maintenance / live-apply 五類外部回覆的 intake 預檢、必填欄位與拒收規則；正式 owner response 尚未收到、未接受、未寫入 | `ai_agent_result_capture_release_decision_owner_response_preflight_v1`、`GET /api/v1/agents/agent-result-capture-release-decision-owner-response-preflight`、feature commit `755b0a8d`、deploy marker `667d6329`、Gitea code-review `2961` / CD `2960` success、5 個 response intake lane、18 個 required owner field、6 個 validation check、6 個 rejection guard、5 個 operator action；owner response received / accepted / redacted payload / reviewer queue / Gateway / Telegram / Bot API / production write / secret read / destructive operation 全為 `0` | | Owner response 回讀狀態 | 100% | P2-144 已完成正式部署與 production readback；承接 P2-143 preflight，只讀回五類外部回覆仍未收到、未接受、未拒絕、未保存 | `ai_agent_result_capture_release_decision_owner_response_readback_v1`、`GET /api/v1/agents/agent-result-capture-release-decision-owner-response-readback`、feature commit `8795f100`、deploy marker `ac938037`、Gitea code-review `2965` / CD `2964` success、5 個 response readback lane、18 個 required owner field、6 個 readback validation check、6 個 readback rejection guard、5 個 operator action、waiting external response `5`、no external response received `5`；owner response received / accepted / redacted payload / reviewer queue / Gateway / Telegram / Bot API / production write / secret read / destructive operation 全為 `0` | | 本工作清單與分析報告 | 100% | 已完成 | 本 MD 文件 | +### 2026-06-18 12:00 狀態同步 + +- `P2-405E` AI Agent TG Canary 乾跑派送演練已本地完成：新增 `docs/evaluations/ai_agent_professional_task_expansion_2026-06-18_1200_p2_405e.json`，current `P2-405E`、next `P2-405F`、completion `98`。 +- P2-405E 固定 1 份 canary dry-run delivery rehearsal、6 個 dry-run step、8 個 receipt readback check、7 個 stop condition、5 個 rollback / mute control。 +- 治理頁 `automation-inventory` 已顯示 P2-405E 乾跑派送演練、Gateway envelope 演練、回執讀回演練、dry-run step、stop condition、queue / Bot API / Telegram send / receipt write 狀態。 +- P2-406A 前段主看板同步顯示 P2-111 日報 / 週報 / 月報實發批准包、AwoooI SRE 戰情室 route、5 份 delivery packet、4 個 route gate、4 個 no-send receipt。 +- Telegram send、Gateway queue write、Bot API call、delivery receipt production write、secret read、paid API、host write、kubectl action、production write 全部仍為 `0 / false`；P2-405F / P2-406B 才能進入 receipt readback owner review，且仍不得實發。 + ### 2026-06-16 11:08 狀態同步 - `P2-405D` AI Agent TG Canary Delivery Gate 已本地完成：新增 `docs/evaluations/ai_agent_professional_task_expansion_2026-06-16_1108_p2_405d.json`，current `P2-405D`、next `P2-405E`、completion `96`。 diff --git a/docs/ai/AI_AGENT_PROFESSIONAL_TASK_EXPANSION_2026-06-15.md b/docs/ai/AI_AGENT_PROFESSIONAL_TASK_EXPANSION_2026-06-15.md index faa86cb0..7f7f0f30 100644 --- a/docs/ai/AI_AGENT_PROFESSIONAL_TASK_EXPANSION_2026-06-15.md +++ b/docs/ai/AI_AGENT_PROFESSIONAL_TASK_EXPANSION_2026-06-15.md @@ -1,14 +1,14 @@ # AI Agent 專業任務擴展與 Telegram Runtime Bridge 工作報告 -> 日期：2026-06-16（台北時間） -> 狀態：P2-405D 已完成 Telegram Canary Delivery Gate、8 個交付必填欄位、8 個 preflight check、7 個 hold reason、7 個 readback check、5 個 rollback / mute 控制、API guard、測試與治理頁可視化；Telegram 實發仍未啟用。 +> 日期：2026-06-18（台北時間） +> 狀態：P2-405E 已完成 Telegram Canary Dry-run Delivery Rehearsal、6 個 rehearsal step、8 個 readback check、7 個 stop condition、5 個 rollback / mute 控制、API guard、測試與治理頁可視化；Telegram 實發仍未啟用。 > 事實來源：`ai_agent_professional_task_expansion_v1` ## 1. 結論 -本輪把「AI Agent 還能處理哪些專業工作」正式產品化成 24 類專業任務，並把 Telegram 群組 / TG Bot 整合拆成 5 段啟動前閘門。P2-405D 進一步把第一次 Canary delivery 前必須由統帥確認的交付欄位、preflight、hold reason、rollback / mute 與 readback plan 顯示到治理頁。 +本輪把「AI Agent 還能處理哪些專業工作」正式產品化成 24 類專業任務，並把 Telegram 群組 / TG Bot 整合拆成 5 段啟動前閘門。P2-405D 已把第一次 Canary delivery 前必須由統帥確認的交付欄位、preflight、hold reason、rollback / mute 與 readback plan 顯示到治理頁；P2-405E 進一步把第一個 `daily_agent_workload_digest` dry-run delivery rehearsal 固定成可重放證據，包含 preview hash、dedup key、Gateway envelope preview、Hermes receipt readback drill 與停止條件。 -這不是直接讓 AI Agent 發 Telegram 或改 production；目前只允許 no-send preview、queue preview readback、owner review、canary approval package、canary send approval packet 與 canary delivery gate。真正送到 **AwoooI SRE 戰情室** 必須先通過統帥明確批准、approved canary、dedup、receipt、redaction、OpenClaw 仲裁、Security gate 與 QA verifier。 +這不是直接讓 AI Agent 發 Telegram 或改 production；目前只允許 no-send preview、queue preview readback、owner review、canary approval package、canary send approval packet、canary delivery gate 與 dry-run delivery rehearsal。真正送到 **AwoooI SRE 戰情室** 必須先通過 owner-approved P2-405F live canary approval、dedup、receipt、redaction、OpenClaw 仲裁、Security gate 與 QA verifier。 ## 2. 完成度 @@ -19,8 +19,9 @@ | Telegram no-send 訊息預覽 | 100% | 6 種訊息預覽、6 個 dedup key、6 組 receipt expectation、1 份 canary approval package 已固定 | | Canary 發送批准包 | 100% | 1 份 canary send approval packet、7 個批准欄位、6 個停止條件、5 步 mute / rollback、6 個 receipt readback check 已固定 | | Canary Delivery Gate | 100% | 1 份 delivery gate、8 個交付必填欄位、8 個 preflight、7 個 hold reason、7 個 readback check、5 個 rollback / mute 控制已固定 | +| Canary Dry-run Delivery Rehearsal | 100% | 1 份 dry-run rehearsal、6 個 step、8 個 readback check、7 個 stop condition、5 個 rollback / mute 控制已固定 | | API / loader | 100% | `GET /api/v1/agents/agent-professional-task-expansion` 只讀輸出 | -| 治理頁可視化 | 100% | `/zh-TW/governance?tab=automation-inventory` 顯示任務、風險、TG bridge、preview、dedup、receipt、canary、delivery gate 與 live/send/write=0 | +| 治理頁可視化 | 100% | `/zh-TW/governance?tab=automation-inventory` 顯示任務、風險、TG bridge、preview、dedup、receipt、canary、delivery gate、rehearsal 與 live/send/write=0 | | Telegram 實發 | 0% | `telegram_send_count=0`、`bot_api_call_count=0`、`gateway_queue_write_count=0` | | Runtime 自動優化 | 0% | production write、host write、kubectl、paid API、secret read 全部維持 0 | @@ -92,7 +93,22 @@ Canary 發送批准包固定 6 個停止條件、5 步 mute / rollback plan、6 Canary delivery gate 固定 8 個 preflight check、7 個 hold reason、7 個 readback check 與 5 個 rollback / mute control；`live_delivery_enabled`、`gateway_queue_write_enabled`、`bot_api_call_enabled`、`delivery_receipt_write_enabled`、`production_write_enabled`、`secret_read_enabled`、`paid_api_enabled` 全部仍為 `false`。 -## 8. 專業任務總覽 +## 8. P2-405E Canary Dry-run Delivery Rehearsal + +目前 canary delivery rehearsal 狀態為 `ready_no_send_rehearsal`，`rehearsal_ready=true`，選定 `daily_agent_workload_digest` 作為第一個 dry-run 訊息。此 rehearsal 只產生 preview hash、dedup key 與 Gateway envelope preview，不寫 Gateway queue、不送 Telegram、不呼叫 Bot API、不寫 production receipt。 + +| 項目 | 值 | 邊界 | +|---|---|---| +| selected message | `daily_agent_workload_digest` | 只允許單一訊息型別 | +| selected preview | `p2_405b_preview_daily_agent_workload_digest_v1` | 必須對應 no-send preview | +| target room | `SRE_GROUP_CHAT_ID` | 只顯示 env ref，不顯示 chat id value | +| dedup key | `awoooi:agent-report:daily:2026-06-18:v1` | 單一 rehearsal window 使用 | +| readback owner | Hermes | 只做 dry-run readback drill | +| completed / failed checks | `8 / 0` | 失敗即回到 no-send preview | + +Rehearsal 固定 6 個 dry-run step、8 個 readback check、7 個 stop condition 與 5 個 rollback / mute control；`live_delivery_enabled`、`gateway_queue_write_enabled`、`bot_api_call_enabled`、`telegram_send_enabled`、`delivery_receipt_write_enabled`、`production_write_enabled`、`secret_read_enabled`、`paid_api_enabled` 全部仍為 `false`。 + +## 9. 專業任務總覽 | 領域 | 任務數 | 代表任務 | 主責 | |---|---:|---|---| @@ -105,7 +121,7 @@ Canary delivery gate 固定 8 個 preflight check、7 個 hold reason、7 個 re | AI Governance / Replay / Market | 4 | market watch、NemoTron replay、cost forecast、runbook/postmortem | OpenClaw / NemoTron / Hermes | | Telegram / Reports / Receipts | 3 | digest preview、report truth gate、post-action verifier | Telegram Ops / Hermes / OpenClaw | -## 9. 專業能力層級 +## 10. 專業能力層級 | 層級 | AI Agent 可自動做 | Gate | |---|---|---| @@ -114,7 +130,7 @@ Canary delivery gate 固定 8 個 preflight check、7 個 hold reason、7 個 re | 高風險 | 只產批准包、rollback plan、failure-only digest 草案 | 統帥批准 | | Critical | production write、kubectl、ArgoCD sync、Telegram 實發、secret、restore、host write | 預設 blocked | -## 10. MCP / RAG +## 11. MCP / RAG 首批 MCP：Gitea、Browser、Observability、Telegram Gateway、Package Registry、Database Readonly、Backup Status、ArgoCD Readonly、HTTP Probe、Fixture Store。 @@ -122,7 +138,7 @@ Canary delivery gate 固定 8 個 preflight check、7 個 hold reason、7 個 re 成長指標：KM entries、PlayBook updates、recommendations、replay score delta、blocked action prevented count、receipt missing count。 -## 11. 邊界 +## 12. 邊界 - 不直接發 Telegram。 - 不寫 Telegram Gateway queue。 @@ -131,9 +147,9 @@ Canary delivery gate 固定 8 個 preflight check、7 個 hold reason、7 個 re - 不把工作視窗對話、未遮罩提示、私人推理或未遮罩 runtime payload 放進前端或 Telegram。 - 不做 production write、host write、kubectl、ArgoCD sync、restore、rollback、paid API、SDK install。 -## 12. 下一步 +## 13. 下一步 -1. P2-405E：統帥明確批准 canary delivery 欄位、單一訊息類型、時間窗、目標 env ref、receipt readback owner 與停止條件後，才進入受控 dry-run delivery rehearsal。 -2. P2-405F：canary 通過後才開日報 / 週報 / 月報 digest delivery。 -3. P2-405G：Action-required digest 只對 failure / high-risk / approval-required 事件開啟。 -4. P2-405G：把 receipt readback 與 report status board 串起來，但仍需 canary gate 後才能寫正式 receipt。 +1. P2-405F：以 P2-405E rehearsal readback 為證據，產出 owner-approved single canary live delivery approval package。 +2. P2-405G：canary 通過後才開日報 / 週報 / 月報 digest delivery。 +3. P2-405H：Action-required digest 只對 failure / high-risk / approval-required 事件開啟。 +4. P2-405H：把 receipt readback 與 report status board 串起來，但仍需 canary gate 後才能寫正式 receipt。 diff --git a/docs/evaluations/ai_agent_professional_task_expansion_2026-06-18_1200_p2_405e.json b/docs/evaluations/ai_agent_professional_task_expansion_2026-06-18_1200_p2_405e.json new file mode 100644 index 00000000..22a6395b --- /dev/null +++ b/docs/evaluations/ai_agent_professional_task_expansion_2026-06-18_1200_p2_405e.json @@ -0,0 +1,1746 @@ +{ + "schema_version": "ai_agent_professional_task_expansion_v1", + "generated_at": "2026-06-18T12:00:00+08:00", + "program_status": { + "current_priority": "P2", + "current_task_id": "P2-405E", + "next_task_id": "P2-405F", + "overall_completion_percent": 98, + "read_only_mode": true, + "runtime_authority": "professional_task_expansion_and_telegram_bridge_read_only_no_send", + "status_note": "P2-405E 已建立 Telegram canary dry-run delivery rehearsal：把單一日報訊息的 preview hash、dedup key、Gateway envelope、receipt readback drill、停止條件與 mute / rollback 控制完整固定；仍維持 no-send，不寫 Gateway queue、不送 Telegram、不呼叫 Bot API、不寫 production receipt、不讀 secret。" + }, + "source_refs": [ + "docs/ai/AI_AGENT_12_AGENT_WAR_ROOM_2026-06-14.md", + "docs/ai/AI_AGENT_PROACTIVE_OPERATIONS_2026-06-11.md", + "docs/ai/AI_AGENT_INTERACTION_LEARNING_PROOF_2026-06-11.md", + "docs/ai/AI_AGENT_TELEGRAM_ACTION_REQUIRED_DIGEST_POLICY_2026-06-11.md", + "docs/ai/AI_AGENT_DEPLOYMENT_LAYOUT_2026-06-11.md", + "docs/security/MONITORING-OWNER-RESPONSE-ACCEPTANCE.md", + "apps/api/src/services/telegram_gateway.py", + ".gitea/workflows/cd.yaml", + ".gitea/workflows/code-review.yaml" + ], + "telegram_runtime_bridge": { + "canonical_room": "AwoooI SRE 戰情室", + "canonical_room_env": "SRE_GROUP_CHAT_ID", + "gateway_required": true, + "gateway_owner": "telegram_ops_liaison", + "arbiter": "openclaw", + "receipt_owner": "hermes", + "replay_owner": "nemotron", + "no_send_preview_ready": true, + "queue_preview_readback_ready": true, + "approved_canary_required": true, + "direct_bot_api_allowed": false, + "bot_api_call_enabled": false, + "gateway_queue_write_enabled": false, + "telegram_send_enabled": false, + "delivery_receipt_write_enabled": false, + "stages": [ + { + "stage_id": "tg_bridge_01_no_send_preview", + "title": "Telegram no-send preview", + "status": "ready_for_owner_review", + "allowed_output": "脫敏訊息預覽、dedup key、目標群組 metadata、風險層級、需審核選項", + "live_send_enabled": false, + "exit_condition": "OpenClaw + Security + QA 確認不含 secret、raw payload、工作視窗內容與誤導性執行按鈕。" + }, + { + "stage_id": "tg_bridge_02_queue_preview_readback", + "title": "Gateway queue preview readback", + "status": "ready_for_owner_review", + "allowed_output": "queue envelope hash、message type、receipt expectation、rate-limit / dedup plan", + "live_send_enabled": false, + "exit_condition": "Hermes 讀回 preview hash，QA 確認不會寫入 production queue。" + }, + { + "stage_id": "tg_bridge_03_approved_canary", + "title": "Canary dry-run delivery rehearsal", + "status": "dry_run_rehearsal_ready_no_send", + "allowed_output": "單一 canary rehearsal 訊息、preview hash、dedup key、Gateway envelope dry-run 與 receipt readback drill", + "live_send_enabled": false, + "exit_condition": "dry-run rehearsal 全部 readback 通過後，才可另案批准真正 Bot API canary 實發。" + }, + { + "stage_id": "tg_bridge_04_daily_weekly_monthly_digest", + "title": "日報 / 週報 / 月報 digest delivery", + "status": "blocked_until_canary_receipt", + "allowed_output": "Agent 工作量、完成度、阻擋項、圖表摘要與 low-noise digest", + "live_send_enabled": false, + "exit_condition": "canary receipt 正常、dedup 有效、成功訊息壓制策略通過。" + }, + { + "stage_id": "tg_bridge_05_action_required_digest", + "title": "Action-required / high-risk approval digest", + "status": "blocked_until_dual_gate", + "allowed_output": "高風險審核卡、owner response 缺口、failure-only escalation", + "live_send_enabled": false, + "exit_condition": "OpenClaw 仲裁、Security gate、QA verifier 與 Telegram receipt 全通過。" + } + ], + "message_types": [ + { + "message_type": "daily_agent_workload_digest", + "cadence": "daily", + "risk_tier": "low", + "owner_agent": "hermes", + "send_policy": "send_after_canary_and_dedup_gate" + }, + { + "message_type": "weekly_governance_summary", + "cadence": "weekly", + "risk_tier": "medium", + "owner_agent": "hermes", + "send_policy": "send_after_canary_and_truth_gate" + }, + { + "message_type": "monthly_growth_report", + "cadence": "monthly", + "risk_tier": "medium", + "owner_agent": "hermes", + "send_policy": "send_after_owner_review" + }, + { + "message_type": "high_risk_approval_card", + "cadence": "event", + "risk_tier": "high", + "owner_agent": "openclaw", + "send_policy": "approval_required_before_send" + }, + { + "message_type": "failure_only_escalation", + "cadence": "event", + "risk_tier": "critical", + "owner_agent": "sre_sentinel", + "send_policy": "failure_only_after_route_lock" + }, + { + "message_type": "report_receipt_gap_alert", + "cadence": "event", + "risk_tier": "medium", + "owner_agent": "telegram_ops_liaison", + "send_policy": "no_send_preview_until_receipt_contract" + } + ], + "no_send_message_previews": [ + { + "preview_id": "p2_405b_preview_daily_agent_workload_digest_v1", + "message_type": "daily_agent_workload_digest", + "title": "AI Agent 日報 no-send 預覽", + "target_room_alias": "awoooi_sre_war_room_env_ref", + "target_room_env": "SRE_GROUP_CHAT_ID", + "owner_agent": "hermes", + "risk_tier": "low", + "status": "preview_ready_no_send", + "dedup_key": "awoooi:agent-report:daily:{yyyy-mm-dd}:v1", + "receipt_expectation_id": "p2_405b_receipt_daily_agent_workload_digest_v1", + "approval_required_before_send": false, + "canary_required_before_live": true, + "send_enabled": false, + "gateway_queue_write_enabled": false, + "bot_api_call_enabled": false, + "delivery_receipt_write_enabled": false, + "sanitized_body_lines": [ + "AWOOOI AI Agent 日報", + "今日完成度、工作量、阻擋項與低風險自動處理摘要。", + "所有成功煙霧訊號只彙整，不逐筆洗版。", + "live / send / write 計數維持 0，等待 canary gate。" + ], + "redaction_checks": [ + "不含機密明文", + "不含未遮罩工作上下文", + "不含未遮罩 runtime payload", + "不含可執行修復指令", + "不含誤導性成功宣告" + ] + }, + { + "preview_id": "p2_405b_preview_weekly_governance_summary_v1", + "message_type": "weekly_governance_summary", + "title": "AI Agent 週報 no-send 預覽", + "target_room_alias": "awoooi_sre_war_room_env_ref", + "target_room_env": "SRE_GROUP_CHAT_ID", + "owner_agent": "hermes", + "risk_tier": "medium", + "status": "preview_ready_no_send", + "dedup_key": "awoooi:agent-report:weekly:{iso-week}:v1", + "receipt_expectation_id": "p2_405b_receipt_weekly_governance_summary_v1", + "approval_required_before_send": false, + "canary_required_before_live": true, + "send_enabled": false, + "gateway_queue_write_enabled": false, + "bot_api_call_enabled": false, + "delivery_receipt_write_enabled": false, + "sanitized_body_lines": [ + "AWOOOI AI Agent 週報", + "本週專業任務、模型市場 watch、治理 gate 與未完成 owner response 摘要。", + "中風險項目只列 proposal / dry-run，不列正式執行結果。", + "任何需要批准的項目改送 action-required digest 草案。" + ], + "redaction_checks": [ + "不含機密明文", + "不含未遮罩工作上下文", + "不含未遮罩 runtime payload", + "不含可執行修復指令", + "不含誤導性成功宣告" + ] + }, + { + "preview_id": "p2_405b_preview_monthly_growth_report_v1", + "message_type": "monthly_growth_report", + "title": "AI Agent 月報 no-send 預覽", + "target_room_alias": "awoooi_sre_war_room_env_ref", + "target_room_env": "SRE_GROUP_CHAT_ID", + "owner_agent": "hermes", + "risk_tier": "medium", + "status": "preview_ready_no_send", + "dedup_key": "awoooi:agent-report:monthly:{yyyy-mm}:v1", + "receipt_expectation_id": "p2_405b_receipt_monthly_growth_report_v1", + "approval_required_before_send": true, + "canary_required_before_live": true, + "send_enabled": false, + "gateway_queue_write_enabled": false, + "bot_api_call_enabled": false, + "delivery_receipt_write_enabled": false, + "sanitized_body_lines": [ + "AWOOOI AI Agent 月報", + "智慧成長指標、PlayBook 更新、replay 分數變化與 blocked action 防護數。", + "成本、容量、版本更新與外部 Agent 市場候選以審核建議呈現。", + "月報首次實發前需要 owner review 與 canary receipt。" + ], + "redaction_checks": [ + "不含機密明文", + "不含未遮罩工作上下文", + "不含未遮罩 runtime payload", + "不含可執行修復指令", + "不含誤導性成功宣告" + ] + }, + { + "preview_id": "p2_405b_preview_high_risk_approval_card_v1", + "message_type": "high_risk_approval_card", + "title": "高風險審核卡 no-send 預覽", + "target_room_alias": "awoooi_sre_war_room_env_ref", + "target_room_env": "SRE_GROUP_CHAT_ID", + "owner_agent": "openclaw", + "risk_tier": "high", + "status": "preview_ready_no_send", + "dedup_key": "awoooi:agent-approval:{risk}:{work-item-id}:v1", + "receipt_expectation_id": "p2_405b_receipt_high_risk_approval_card_v1", + "approval_required_before_send": true, + "canary_required_before_live": true, + "send_enabled": false, + "gateway_queue_write_enabled": false, + "bot_api_call_enabled": false, + "delivery_receipt_write_enabled": false, + "sanitized_body_lines": [ + "AWOOOI 高風險 AI Agent 審核卡", + "列出候選動作、風險、rollback plan、verifier plan 與 owner 缺口。", + "審核卡不等於 runtime authorization，按鈕與指令預設不顯示。", + "OpenClaw 仲裁、Security gate 與 QA verifier 必須全部通過。" + ], + "redaction_checks": [ + "不含機密明文", + "不含未遮罩工作上下文", + "不含未遮罩 runtime payload", + "不含可執行修復指令", + "不含誤導性成功宣告" + ] + }, + { + "preview_id": "p2_405b_preview_failure_only_escalation_v1", + "message_type": "failure_only_escalation", + "title": "Failure-only 升級 no-send 預覽", + "target_room_alias": "awoooi_sre_war_room_env_ref", + "target_room_env": "SRE_GROUP_CHAT_ID", + "owner_agent": "sre_sentinel", + "risk_tier": "critical", + "status": "preview_ready_no_send", + "dedup_key": "awoooi:agent-failure:{alertname}:{target}:{window}:v1", + "receipt_expectation_id": "p2_405b_receipt_failure_only_escalation_v1", + "approval_required_before_send": true, + "canary_required_before_live": true, + "send_enabled": false, + "gateway_queue_write_enabled": false, + "bot_api_call_enabled": false, + "delivery_receipt_write_enabled": false, + "sanitized_body_lines": [ + "AWOOOI failure-only 升級通知", + "只在失敗、阻擋或高風險審核缺口時產生，不發成功噪音。", + "包含 blocker summary、下一步、owner 欄位與 verifier plan。", + "任何修復執行仍需獨立批准與 post-action verifier。" + ], + "redaction_checks": [ + "不含機密明文", + "不含未遮罩工作上下文", + "不含未遮罩 runtime payload", + "不含可執行修復指令", + "不含誤導性成功宣告" + ] + }, + { + "preview_id": "p2_405b_preview_report_receipt_gap_alert_v1", + "message_type": "report_receipt_gap_alert", + "title": "報表回執缺口 no-send 預覽", + "target_room_alias": "awoooi_sre_war_room_env_ref", + "target_room_env": "SRE_GROUP_CHAT_ID", + "owner_agent": "telegram_ops_liaison", + "risk_tier": "medium", + "status": "preview_ready_no_send", + "dedup_key": "awoooi:agent-receipt-gap:{message-type}:{window}:v1", + "receipt_expectation_id": "p2_405b_receipt_report_receipt_gap_alert_v1", + "approval_required_before_send": true, + "canary_required_before_live": true, + "send_enabled": false, + "gateway_queue_write_enabled": false, + "bot_api_call_enabled": false, + "delivery_receipt_write_enabled": false, + "sanitized_body_lines": [ + "AWOOOI 報表回執缺口提示", + "用來指出 preview hash、dedup key、canary receipt 或 readback evidence 不完整。", + "此提示本身仍是 no-send preview，不寫 delivery receipt。", + "修復方向只產生 owner review 項目，不自動改 Gateway。" + ], + "redaction_checks": [ + "不含機密明文", + "不含未遮罩工作上下文", + "不含未遮罩 runtime payload", + "不含可執行修復指令", + "不含誤導性成功宣告" + ] + } + ], + "dedup_policy": { + "required": true, + "key_count": 6, + "collision_policy": "drop_duplicate_and_raise_preview_gap_without_send", + "preview_hash_algorithm": "sha256_preview_only", + "live_cache_write_enabled": false, + "keys": [ + { + "message_type": "daily_agent_workload_digest", + "key_template": "awoooi:agent-report:daily:{yyyy-mm-dd}:v1", + "owner_agent": "hermes", + "risk_tier": "low", + "window": "daily", + "live_cache_write_enabled": false + }, + { + "message_type": "weekly_governance_summary", + "key_template": "awoooi:agent-report:weekly:{iso-week}:v1", + "owner_agent": "hermes", + "risk_tier": "medium", + "window": "event_or_cadence_window", + "live_cache_write_enabled": false + }, + { + "message_type": "monthly_growth_report", + "key_template": "awoooi:agent-report:monthly:{yyyy-mm}:v1", + "owner_agent": "hermes", + "risk_tier": "medium", + "window": "event_or_cadence_window", + "live_cache_write_enabled": false + }, + { + "message_type": "high_risk_approval_card", + "key_template": "awoooi:agent-approval:{risk}:{work-item-id}:v1", + "owner_agent": "openclaw", + "risk_tier": "high", + "window": "event_or_cadence_window", + "live_cache_write_enabled": false + }, + { + "message_type": "failure_only_escalation", + "key_template": "awoooi:agent-failure:{alertname}:{target}:{window}:v1", + "owner_agent": "sre_sentinel", + "risk_tier": "critical", + "window": "event_or_cadence_window", + "live_cache_write_enabled": false + }, + { + "message_type": "report_receipt_gap_alert", + "key_template": "awoooi:agent-receipt-gap:{message-type}:{window}:v1", + "owner_agent": "telegram_ops_liaison", + "risk_tier": "medium", + "window": "event_or_cadence_window", + "live_cache_write_enabled": false + } + ] + }, + "queue_preview_readback": { + "enabled": true, + "preview_only": true, + "write_enabled": false, + "readback_enabled": true, + "envelope_fields": [ + "message_type", + "dedup_key", + "sanitized_preview_hash", + "target_room_env_ref", + "risk_tier", + "approval_gate" + ], + "readback_checks": [ + "preview hash 必須與治理頁顯示一致", + "dedup key 必須唯一", + "target room 只能顯示 env ref", + "所有 send / queue / bot flags 必須為 false" + ] + }, + "receipt_expectations": [ + { + "receipt_id": "p2_405b_receipt_daily_agent_workload_digest_v1", + "message_type": "daily_agent_workload_digest", + "preview_id": "p2_405b_preview_daily_agent_workload_digest_v1", + "expected_signal": "preview_hash_and_dedup_key_match_after_approved_canary", + "required_evidence_refs": [ + "sanitized_preview_hash", + "dedup_key", + "target_room_env_ref", + "canary_window_ref", + "gateway_preview_readback_ref" + ], + "receipt_write_enabled": false, + "production_receipt_readback_enabled": false, + "missing_receipt_policy": "create_report_receipt_gap_alert_preview_only" + }, + { + "receipt_id": "p2_405b_receipt_weekly_governance_summary_v1", + "message_type": "weekly_governance_summary", + "preview_id": "p2_405b_preview_weekly_governance_summary_v1", + "expected_signal": "preview_hash_and_dedup_key_match_after_approved_canary", + "required_evidence_refs": [ + "sanitized_preview_hash", + "dedup_key", + "target_room_env_ref", + "canary_window_ref", + "gateway_preview_readback_ref" + ], + "receipt_write_enabled": false, + "production_receipt_readback_enabled": false, + "missing_receipt_policy": "create_report_receipt_gap_alert_preview_only" + }, + { + "receipt_id": "p2_405b_receipt_monthly_growth_report_v1", + "message_type": "monthly_growth_report", + "preview_id": "p2_405b_preview_monthly_growth_report_v1", + "expected_signal": "preview_hash_and_dedup_key_match_after_approved_canary", + "required_evidence_refs": [ + "sanitized_preview_hash", + "dedup_key", + "target_room_env_ref", + "canary_window_ref", + "gateway_preview_readback_ref" + ], + "receipt_write_enabled": false, + "production_receipt_readback_enabled": false, + "missing_receipt_policy": "create_report_receipt_gap_alert_preview_only" + }, + { + "receipt_id": "p2_405b_receipt_high_risk_approval_card_v1", + "message_type": "high_risk_approval_card", + "preview_id": "p2_405b_preview_high_risk_approval_card_v1", + "expected_signal": "preview_hash_and_dedup_key_match_after_approved_canary", + "required_evidence_refs": [ + "sanitized_preview_hash", + "dedup_key", + "target_room_env_ref", + "canary_window_ref", + "gateway_preview_readback_ref" + ], + "receipt_write_enabled": false, + "production_receipt_readback_enabled": false, + "missing_receipt_policy": "create_report_receipt_gap_alert_preview_only" + }, + { + "receipt_id": "p2_405b_receipt_failure_only_escalation_v1", + "message_type": "failure_only_escalation", + "preview_id": "p2_405b_preview_failure_only_escalation_v1", + "expected_signal": "preview_hash_and_dedup_key_match_after_approved_canary", + "required_evidence_refs": [ + "sanitized_preview_hash", + "dedup_key", + "target_room_env_ref", + "canary_window_ref", + "gateway_preview_readback_ref" + ], + "receipt_write_enabled": false, + "production_receipt_readback_enabled": false, + "missing_receipt_policy": "create_report_receipt_gap_alert_preview_only" + }, + { + "receipt_id": "p2_405b_receipt_report_receipt_gap_alert_v1", + "message_type": "report_receipt_gap_alert", + "preview_id": "p2_405b_preview_report_receipt_gap_alert_v1", + "expected_signal": "preview_hash_and_dedup_key_match_after_approved_canary", + "required_evidence_refs": [ + "sanitized_preview_hash", + "dedup_key", + "target_room_env_ref", + "canary_window_ref", + "gateway_preview_readback_ref" + ], + "receipt_write_enabled": false, + "production_receipt_readback_enabled": false, + "missing_receipt_policy": "create_report_receipt_gap_alert_preview_only" + } + ], + "canary_approval_package": { + "package_id": "p2_405b_telegram_canary_approval_package_v1", + "status": "blocked_until_explicit_approval", + "package_ready": true, + "approval_required": true, + "target_room_alias": "awoooi_sre_war_room_env_ref", + "target_room_env": "SRE_GROUP_CHAT_ID", + "arbiter": "openclaw", + "owner_agent": "telegram_ops_liaison", + "reviewers": [ + "security_sentinel", + "qa_verifier", + "hermes" + ], + "message_type_scope": [ + "daily_agent_workload_digest", + "weekly_governance_summary", + "monthly_growth_report", + "high_risk_approval_card", + "failure_only_escalation", + "report_receipt_gap_alert" + ], + "required_approval_inputs": [ + "統帥批准 canary 時間窗", + "可接受的單一訊息類型", + "mute / rollback plan", + "receipt readback owner", + "失敗時停止條件" + ], + "approval_checklist": [ + "OpenClaw 仲裁通過", + "Security redaction gate 通過", + "QA verifier 確認 no-send preview 與 receipt expectation", + "Hermes 確認報告真實性 gate", + "Telegram Ops 確認 dedup 與 rate-limit plan" + ], + "live_send_enabled": false, + "gateway_queue_write_enabled": false, + "bot_api_call_enabled": false, + "delivery_receipt_write_enabled": false, + "production_write_enabled": false + }, + "no_send_preview_completion_percent": 100, + "canary_approval_package_completion_percent": 100, + "canary_send_approval_packet": { + "packet_id": "p2_405c_approved_canary_send_approval_packet_v1", + "status": "waiting_explicit_commander_approval", + "packet_ready": true, + "approval_required": true, + "approval_granted": false, + "recommended_first_message_type": "daily_agent_workload_digest", + "selected_message_type": "not_selected", + "eligible_message_types": [ + "daily_agent_workload_digest", + "weekly_governance_summary", + "monthly_growth_report", + "high_risk_approval_card", + "failure_only_escalation", + "report_receipt_gap_alert" + ], + "target_room_alias": "awoooi_sre_war_room_env_ref", + "target_room_env": "SRE_GROUP_CHAT_ID", + "target_room_value_visible": false, + "proposed_time_window": "waiting_commander_input", + "owner_agent": "telegram_ops_liaison", + "arbiter": "openclaw", + "reviewers": [ + "security_sentinel", + "qa_verifier", + "hermes" + ], + "operator_approval_fields": [ + { + "field_id": "commander_approval", + "label": "統帥批准 canary 實發", + "required": true, + "current_value_status": "waiting_input", + "value_display_allowed": false + }, + { + "field_id": "selected_message_type", + "label": "單一訊息類型", + "required": true, + "current_value_status": "waiting_input", + "value_display_allowed": false + }, + { + "field_id": "scheduled_window", + "label": "發送時間窗", + "required": true, + "current_value_status": "waiting_input", + "value_display_allowed": false + }, + { + "field_id": "target_room_env_ref", + "label": "目標群組 env ref", + "required": true, + "current_value_status": "waiting_input", + "value_display_allowed": false + }, + { + "field_id": "mute_rollback_plan", + "label": "mute / rollback plan", + "required": true, + "current_value_status": "waiting_input", + "value_display_allowed": false + }, + { + "field_id": "receipt_readback_owner", + "label": "receipt readback owner", + "required": true, + "current_value_status": "waiting_input", + "value_display_allowed": false + }, + { + "field_id": "failure_stop_condition", + "label": "失敗停止條件", + "required": true, + "current_value_status": "waiting_input", + "value_display_allowed": false + } + ], + "rate_limit_plan": { + "max_messages": 1, + "window": "single_canary_only", + "cooldown_after_attempt_minutes": 60, + "duplicate_policy": "dedup_key_must_drop_duplicate_before_send", + "live_rate_limit_write_enabled": false + }, + "mute_rollback_plan": [ + "若 preview hash 與 approval packet 不一致，停止 canary。", + "若 dedup key collision 或 receipt expectation 缺欄位，停止 canary。", + "若 Telegram Gateway 回報未知錯誤，停止後只產 report_receipt_gap_alert preview。", + "若訊息內容被 Security / QA 判定含敏感或誤導語意，停止 canary。", + "若超過指定時間窗未發送，批准自動過期。" + ], + "receipt_readback_plan": { + "owner_agent": "hermes", + "required_checks": [ + "preview_id 對應已批准 message_type", + "dedup_key 對應 approved packet", + "target_room 只以 env ref 比對", + "gateway envelope hash 對應 no-send preview hash", + "delivery receipt 不含 token 或 chat id value", + "failure path 只產 no-send receipt gap preview" + ], + "production_receipt_write_enabled": false, + "receipt_readback_enabled_before_send": false + }, + "stop_conditions": [ + "未取得統帥明確批准", + "未選定單一訊息類型", + "未指定時間窗", + "redaction / QA / OpenClaw 任一 gate 失敗", + "dedup key 不唯一或 preview hash 不一致", + "Gateway、Bot API 或 receipt write 任一 flag 不是 false" + ], + "execution_flags": { + "canary_send_execution_enabled": false, + "gateway_queue_write_enabled": false, + "bot_api_call_enabled": false, + "delivery_receipt_write_enabled": false, + "production_write_enabled": false, + "secret_read_enabled": false, + "paid_api_enabled": false + }, + "approval_decision_log": [] + }, + "canary_send_approval_packet_ready": true, + "canary_send_approval_granted": false, + "canary_send_execution_enabled": false, + "canary_send_approval_packet_completion_percent": 100, + "canary_delivery_gate": { + "gate_id": "p2_405d_canary_delivery_gate_v1", + "status": "blocked_waiting_commander_delivery_fields", + "gate_ready": true, + "delivery_approved": false, + "delivery_attempt_allowed": false, + "selected_message_type": "not_selected", + "selected_message_type_source": "waiting_commander_input", + "target_room_alias": "AwoooI SRE 戰情室", + "target_room_env": "SRE_GROUP_CHAT_ID", + "target_room_value_visible": false, + "target_room_verified": false, + "proposed_time_window": "waiting_commander_input", + "approved_time_window": "not_approved", + "owner_agent": "telegram_ops_liaison", + "arbiter": "openclaw", + "reviewers": [ + "security_sentinel", + "qa_verifier", + "hermes", + "sre_sentinel" + ], + "required_delivery_fields": [ + { + "field_id": "commander_delivery_approval", + "label": "統帥批准本次 canary delivery", + "required": true, + "current_value_status": "waiting_input", + "value_display_allowed": false + }, + { + "field_id": "selected_message_type", + "label": "單一訊息類型", + "required": true, + "current_value_status": "waiting_input", + "value_display_allowed": false + }, + { + "field_id": "delivery_time_window", + "label": "交付時間窗", + "required": true, + "current_value_status": "waiting_input", + "value_display_allowed": false + }, + { + "field_id": "target_room_env_ref", + "label": "目標群組 env ref", + "required": true, + "current_value_status": "waiting_input", + "value_display_allowed": false + }, + { + "field_id": "receipt_readback_owner", + "label": "receipt readback owner", + "required": true, + "current_value_status": "waiting_input", + "value_display_allowed": false + }, + { + "field_id": "mute_rollback_plan", + "label": "mute / rollback plan", + "required": true, + "current_value_status": "waiting_input", + "value_display_allowed": false + }, + { + "field_id": "failure_stop_condition", + "label": "失敗停止條件", + "required": true, + "current_value_status": "waiting_input", + "value_display_allowed": false + }, + { + "field_id": "dry_run_readback_ref", + "label": "dry-run readback evidence ref", + "required": true, + "current_value_status": "waiting_input", + "value_display_allowed": false + } + ], + "preflight_checks": [ + "packet_ready_true", + "approval_fields_complete", + "single_message_type_selected", + "time_window_approved", + "target_room_env_ref_only", + "dedup_key_reserved_preview_only", + "receipt_readback_owner_assigned", + "stop_condition_confirmed" + ], + "hold_reasons": [ + "commander_delivery_approval_missing", + "selected_message_type_missing", + "delivery_time_window_missing", + "receipt_readback_owner_missing", + "target_room_value_hidden", + "gateway_queue_write_disabled", + "bot_api_call_disabled" + ], + "delivery_attempt_plan": { + "max_messages": 1, + "dry_run_message_type": "daily_agent_workload_digest", + "dedup_key_template": "awoooi:agent-report:daily:{yyyy-mm-dd}:v1", + "send_mode": "blocked_no_send", + "live_delivery_enabled": false, + "gateway_queue_write_enabled": false, + "bot_api_call_enabled": false, + "delivery_receipt_write_enabled": false, + "production_write_enabled": false, + "secret_read_enabled": false, + "paid_api_enabled": false + }, + "readback_after_approval_plan": { + "owner_agent": "hermes", + "enabled_before_delivery": false, + "production_receipt_write_enabled": false, + "required_checks": [ + "approved_packet_id_matches_delivery_gate", + "selected_message_type_matches_preview", + "dedup_key_matches_reserved_template", + "target_room_checked_by_env_ref_only", + "gateway_envelope_hash_matches_preview", + "receipt_owner_acknowledged", + "failure_path_keeps_no_send_receipt_gap_preview" + ] + }, + "rollback_mute_controls": [ + "approval_expires_outside_time_window", + "mute_if_gateway_error_unknown", + "mute_if_receipt_missing_after_window", + "rollback_to_no_send_preview_only", + "escalate_action_required_preview_only" + ], + "execution_flags": { + "live_delivery_enabled": false, + "gateway_queue_write_enabled": false, + "bot_api_call_enabled": false, + "delivery_receipt_write_enabled": false, + "production_write_enabled": false, + "secret_read_enabled": false, + "paid_api_enabled": false + }, + "delivery_decision_log": [] + }, + "canary_delivery_gate_ready": true, + "canary_delivery_approved": false, + "canary_delivery_attempt_allowed": false, + "canary_delivery_gate_completion_percent": 100, + "canary_delivery_rehearsal": { + "rehearsal_id": "p2_405e_canary_dry_run_delivery_rehearsal_v1", + "status": "ready_no_send_rehearsal", + "rehearsal_ready": true, + "selected_message_type": "daily_agent_workload_digest", + "selected_preview_id": "p2_405b_preview_daily_agent_workload_digest_v1", + "selected_receipt_expectation_id": "p2_405b_receipt_daily_agent_workload_digest_v1", + "target_room_alias": "AwoooI SRE 戰情室", + "target_room_env": "SRE_GROUP_CHAT_ID", + "target_room_value_visible": false, + "dry_run_window": "2026-06-18T12:00:00+08:00/2026-06-18T13:00:00+08:00", + "preview_hash_algorithm": "sha256_preview_only", + "sanitized_preview_hash": "sha256:preview-only-daily-agent-workload-digest-p2-405e", + "dedup_key": "awoooi:agent-report:daily:2026-06-18:v1", + "gateway_envelope_preview": { + "message_type": "daily_agent_workload_digest", + "target_room_env_ref": "SRE_GROUP_CHAT_ID", + "dedup_key": "awoooi:agent-report:daily:2026-06-18:v1", + "preview_hash": "sha256:preview-only-daily-agent-workload-digest-p2-405e", + "risk_tier": "low", + "queue_write_enabled": false, + "bot_api_call_enabled": false, + "telegram_send_enabled": false, + "delivery_receipt_write_enabled": false + }, + "dry_run_steps": [ + "選定 daily_agent_workload_digest 作為單一 canary rehearsal 訊息。", + "用 no-send preview 產生固定 preview hash 與 dedup key。", + "產生 Gateway envelope preview，但不寫入 Gateway queue。", + "Hermes 讀回 receipt expectation 與 preview hash 對應。", + "OpenClaw 確認此 rehearsal 不等於 runtime 授權或 Bot API 實發。", + "QA 確認失敗路徑只產 report_receipt_gap_alert preview。" + ], + "readback_drill": { + "owner_agent": "hermes", + "required_checks": [ + "preview_id_matches_selected_message_type", + "dedup_key_is_single_use_for_window", + "target_room_value_hidden_env_ref_only", + "gateway_envelope_preview_has_all_send_flags_false", + "receipt_expectation_matches_selected_preview", + "failure_path_creates_no_send_receipt_gap_preview", + "no_secret_or_chat_id_value_visible", + "no_runtime_authorization_implied" + ], + "completed_check_count": 8, + "failed_check_count": 0, + "production_receipt_write_enabled": false, + "live_receipt_readback_enabled": false + }, + "stop_conditions": [ + "preview_hash_mismatch", + "dedup_key_collision", + "target_room_value_exposed", + "any_send_flag_true", + "receipt_expectation_missing", + "secret_or_runtime_payload_detected", + "operator_attempts_to_treat_rehearsal_as_delivery" + ], + "rollback_mute_controls": [ + "keep_all_messages_no_send_preview_only", + "mute_daily_digest_until_new_rehearsal_hash", + "raise_report_receipt_gap_alert_preview_only", + "return_to_p2_405d_delivery_gate_if_any_check_fails", + "require_new_owner_review_before_p2_405f" + ], + "execution_flags": { + "live_delivery_enabled": false, + "gateway_queue_write_enabled": false, + "bot_api_call_enabled": false, + "telegram_send_enabled": false, + "delivery_receipt_write_enabled": false, + "production_write_enabled": false, + "secret_read_enabled": false, + "paid_api_enabled": false + }, + "next_gate": "P2-405F canary live delivery approval after rehearsal readback" + }, + "canary_delivery_rehearsal_ready": true, + "canary_delivery_rehearsal_completion_percent": 100 + }, + "professional_task_domains": [ + { + "domain_id": "sre_observability", + "label": "SRE / Observability", + "owner_agent": "sre_sentinel" + }, + { + "domain_id": "security_iwooos", + "label": "Security / IwoooS", + "owner_agent": "security_sentinel" + }, + { + "domain_id": "devops_release", + "label": "DevOps / Release", + "owner_agent": "devops_commander" + }, + { + "domain_id": "data_dr", + "label": "Data / Backup / DR", + "owner_agent": "data_dr_guardian" + }, + { + "domain_id": "supply_chain", + "label": "Supply Chain / Versions", + "owner_agent": "supply_chain_scout" + }, + { + "domain_id": "product_quality", + "label": "Product / UI / QA", + "owner_agent": "product_ui_curator" + }, + { + "domain_id": "ai_governance", + "label": "AI Governance / Replay / Market", + "owner_agent": "openclaw" + }, + { + "domain_id": "telegram_reporting", + "label": "Telegram / Reports / Receipts", + "owner_agent": "telegram_ops_liaison" + } + ], + "professional_tasks": [ + { + "task_id": "pro_task_001_incident_correlation", + "title": "跨來源 incident correlation 與根因候選排序", + "domain_id": "sre_observability", + "owner_agent": "sre_sentinel", + "supporting_agents": [ + "openclaw", + "hermes" + ], + "risk_tier": "medium", + "automation_mode": "no_write_dry_run", + "telegram_policy": "action_required_preview", + "required_mcp": [ + "observability", + "gitea", + "browser" + ], + "required_rag": [ + "incident_traces", + "runbooks" + ], + "approval_required": true, + "current_live_count_24h": 0, + "blocked_actions": [ + "alert_rule_change", + "silence_change", + "restart_service" + ] + }, + { + "task_id": "pro_task_002_alert_noise_budget", + "title": "告警噪音預算與降噪提案", + "domain_id": "sre_observability", + "owner_agent": "sre_sentinel", + "supporting_agents": [ + "hermes", + "openclaw" + ], + "risk_tier": "medium", + "automation_mode": "proposal_only", + "telegram_policy": "weekly_digest", + "required_mcp": [ + "prometheus", + "alertmanager" + ], + "required_rag": [ + "alert_traces", + "runbooks" + ], + "approval_required": true, + "current_live_count_24h": 0, + "blocked_actions": [ + "receiver_route_change", + "silence_policy_change", + "prometheus_reload" + ] + }, + { + "task_id": "pro_task_003_synthetic_check_plan", + "title": "公開路由 synthetic check 與失敗分類計畫", + "domain_id": "sre_observability", + "owner_agent": "qa_verifier", + "supporting_agents": [ + "product_ui_curator", + "sre_sentinel" + ], + "risk_tier": "low", + "automation_mode": "auto_summary_after_guard", + "telegram_policy": "daily_digest", + "required_mcp": [ + "browser", + "http_probe" + ], + "required_rag": [ + "route_runbooks" + ], + "approval_required": false, + "current_live_count_24h": 0, + "blocked_actions": [ + "active_scan", + "production_write" + ] + }, + { + "task_id": "pro_task_004_backup_restore_readiness", + "title": "備份 freshness、restore drill 與 DR readiness 報告", + "domain_id": "data_dr", + "owner_agent": "data_dr_guardian", + "supporting_agents": [ + "hermes", + "openclaw" + ], + "risk_tier": "high", + "automation_mode": "approval_required_before_execution", + "telegram_policy": "action_required_preview", + "required_mcp": [ + "backup_status", + "gitea" + ], + "required_rag": [ + "dr_runbooks" + ], + "approval_required": true, + "current_live_count_24h": 0, + "blocked_actions": [ + "restore_run", + "offsite_sync", + "credential_escrow_marker_write" + ] + }, + { + "task_id": "pro_task_005_non_secret_escrow_evidence", + "title": "credential escrow 非敏感證據補件路由", + "domain_id": "data_dr", + "owner_agent": "data_dr_guardian", + "supporting_agents": [ + "security_sentinel", + "hermes" + ], + "risk_tier": "critical", + "automation_mode": "blocked_until_owner_response", + "telegram_policy": "action_required_preview", + "required_mcp": [ + "gitea" + ], + "required_rag": [ + "dr_runbooks", + "hard_rules" + ], + "approval_required": true, + "current_live_count_24h": 0, + "blocked_actions": [ + "secret_value_collection", + "credential_read", + "marker_write_without_owner" + ] + }, + { + "task_id": "pro_task_006_dependency_cve_triage", + "title": "依賴 CVE / EOL / license 風險分流", + "domain_id": "supply_chain", + "owner_agent": "supply_chain_scout", + "supporting_agents": [ + "openclaw", + "security_sentinel" + ], + "risk_tier": "medium", + "automation_mode": "proposal_only", + "telegram_policy": "weekly_digest", + "required_mcp": [ + "package_registry", + "osv" + ], + "required_rag": [ + "dependency_policy" + ], + "approval_required": true, + "current_live_count_24h": 0, + "blocked_actions": [ + "package_upgrade", + "lockfile_write", + "external_scan_without_approval" + ] + }, + { + "task_id": "pro_task_007_sbom_license_drift", + "title": "SBOM / license / Docker surface drift 批准包", + "domain_id": "supply_chain", + "owner_agent": "supply_chain_scout", + "supporting_agents": [ + "hermes", + "security_sentinel" + ], + "risk_tier": "medium", + "automation_mode": "proposal_only", + "telegram_policy": "weekly_digest", + "required_mcp": [ + "syft", + "trivy" + ], + "required_rag": [ + "supply_chain_runbooks" + ], + "approval_required": true, + "current_live_count_24h": 0, + "blocked_actions": [ + "tool_install", + "image_pull", + "sbom_upload" + ] + }, + { + "task_id": "pro_task_008_image_digest_pin_plan", + "title": "Docker image digest pinning 與 rollback 計畫", + "domain_id": "supply_chain", + "owner_agent": "devops_commander", + "supporting_agents": [ + "supply_chain_scout", + "qa_verifier" + ], + "risk_tier": "high", + "automation_mode": "approval_required_before_execution", + "telegram_policy": "action_required_preview", + "required_mcp": [ + "registry", + "gitea" + ], + "required_rag": [ + "release_runbooks" + ], + "approval_required": true, + "current_live_count_24h": 0, + "blocked_actions": [ + "image_pull", + "image_push", + "kustomization_write_without_review" + ] + }, + { + "task_id": "pro_task_009_gitops_diff_review", + "title": "K8s / ArgoCD manifest diff 與 blast-radius review", + "domain_id": "devops_release", + "owner_agent": "devops_commander", + "supporting_agents": [ + "openclaw", + "qa_verifier" + ], + "risk_tier": "critical", + "automation_mode": "approval_required_before_execution", + "telegram_policy": "action_required_preview", + "required_mcp": [ + "gitea", + "argocd" + ], + "required_rag": [ + "gitops_runbooks" + ], + "approval_required": true, + "current_live_count_24h": 0, + "blocked_actions": [ + "argocd_sync", + "kubectl_apply", + "helm_upgrade" + ] + }, + { + "task_id": "pro_task_010_gateway_route_impact", + "title": "Nginx / public gateway route impact analysis", + "domain_id": "devops_release", + "owner_agent": "devops_commander", + "supporting_agents": [ + "security_sentinel", + "qa_verifier" + ], + "risk_tier": "critical", + "automation_mode": "approval_required_before_execution", + "telegram_policy": "action_required_preview", + "required_mcp": [ + "gitea", + "browser" + ], + "required_rag": [ + "gateway_runbooks" + ], + "approval_required": true, + "current_live_count_24h": 0, + "blocked_actions": [ + "nginx_reload", + "route_change", + "certbot_renew" + ] + }, + { + "task_id": "pro_task_011_public_bundle_redaction", + "title": "前台 bundle / DOM / i18n 敏感資訊防洩漏掃描", + "domain_id": "security_iwooos", + "owner_agent": "security_sentinel", + "supporting_agents": [ + "product_ui_curator", + "qa_verifier" + ], + "risk_tier": "medium", + "automation_mode": "no_write_dry_run", + "telegram_policy": "daily_digest", + "required_mcp": [ + "browser", + "gitea" + ], + "required_rag": [ + "hard_rules" + ], + "approval_required": true, + "current_live_count_24h": 0, + "blocked_actions": [ + "frontend_deploy_without_smoke", + "secret_storage" + ] + }, + { + "task_id": "pro_task_012_secret_metadata_parity", + "title": "Secret name parity、injection route 與 redaction gate", + "domain_id": "security_iwooos", + "owner_agent": "security_sentinel", + "supporting_agents": [ + "devops_commander", + "openclaw" + ], + "risk_tier": "critical", + "automation_mode": "blocked_until_owner_response", + "telegram_policy": "action_required_preview", + "required_mcp": [ + "gitea" + ], + "required_rag": [ + "secret_runbooks" + ], + "approval_required": true, + "current_live_count_24h": 0, + "blocked_actions": [ + "secret_value_read", + "secret_rotation", + "workflow_modification" + ] + }, + { + "task_id": "pro_task_013_telegram_digest_preview", + "title": "AI Agent 日週月報 Telegram no-send preview", + "domain_id": "telegram_reporting", + "owner_agent": "telegram_ops_liaison", + "supporting_agents": [ + "hermes", + "qa_verifier" + ], + "risk_tier": "medium", + "automation_mode": "no_write_dry_run", + "telegram_policy": "no_direct_telegram", + "required_mcp": [ + "telegram_gateway" + ], + "required_rag": [ + "logbook_chunks" + ], + "approval_required": true, + "current_live_count_24h": 0, + "blocked_actions": [ + "telegram_send", + "bot_api_call", + "gateway_queue_write" + ] + }, + { + "task_id": "pro_task_014_report_truth_gate", + "title": "日報 / 週報 / 月報 truth gate 與可處置性審查", + "domain_id": "telegram_reporting", + "owner_agent": "hermes", + "supporting_agents": [ + "openclaw", + "sre_sentinel" + ], + "risk_tier": "medium", + "automation_mode": "auto_summary_after_guard", + "telegram_policy": "weekly_digest", + "required_mcp": [ + "gitea", + "observability" + ], + "required_rag": [ + "logbook_chunks", + "incident_traces" + ], + "approval_required": false, + "current_live_count_24h": 0, + "blocked_actions": [ + "false_green_report", + "report_send_without_truth_gate" + ] + }, + { + "task_id": "pro_task_015_agent_market_watch", + "title": "主流 AI Agent / SDK / 模型版本市場雷達", + "domain_id": "ai_governance", + "owner_agent": "market_scout", + "supporting_agents": [ + "openclaw", + "nemotron" + ], + "risk_tier": "medium", + "automation_mode": "proposal_only", + "telegram_policy": "weekly_digest", + "required_mcp": [ + "web_primary_sources", + "gitea" + ], + "required_rag": [ + "agent_market_evidence" + ], + "approval_required": true, + "current_live_count_24h": 0, + "blocked_actions": [ + "sdk_install", + "paid_api_call", + "production_route_change" + ] + }, + { + "task_id": "pro_task_016_model_replay_scorecard", + "title": "NemoTron / 候選模型 replay scorecard 與 failure mode 分析", + "domain_id": "ai_governance", + "owner_agent": "nemotron", + "supporting_agents": [ + "openclaw", + "qa_verifier" + ], + "risk_tier": "high", + "automation_mode": "no_write_dry_run", + "telegram_policy": "action_required_preview", + "required_mcp": [ + "fixture_store", + "gitea" + ], + "required_rag": [ + "replay_fixtures" + ], + "approval_required": true, + "current_live_count_24h": 0, + "blocked_actions": [ + "shadow_route", + "canary_route", + "full_replay_without_approval" + ] + }, + { + "task_id": "pro_task_017_cost_capacity_forecast", + "title": "AI provider、主機、K3s 與外部服務成本 / 容量預測", + "domain_id": "ai_governance", + "owner_agent": "openclaw", + "supporting_agents": [ + "supply_chain_scout", + "sre_sentinel" + ], + "risk_tier": "high", + "automation_mode": "proposal_only", + "telegram_policy": "monthly_digest", + "required_mcp": [ + "observability", + "billing_metadata" + ], + "required_rag": [ + "cost_policy" + ], + "approval_required": true, + "current_live_count_24h": 0, + "blocked_actions": [ + "paid_provider_switch", + "limit_increase", + "paid_api_call" + ] + }, + { + "task_id": "pro_task_018_db_query_triage", + "title": "PostgreSQL 慢查詢、索引與資料新鮮度異常 triage", + "domain_id": "sre_observability", + "owner_agent": "sre_sentinel", + "supporting_agents": [ + "data_dr_guardian", + "openclaw" + ], + "risk_tier": "high", + "automation_mode": "proposal_only", + "telegram_policy": "action_required_preview", + "required_mcp": [ + "database_readonly", + "observability" + ], + "required_rag": [ + "db_runbooks" + ], + "approval_required": true, + "current_live_count_24h": 0, + "blocked_actions": [ + "migration", + "reindex", + "write_query" + ] + }, + { + "task_id": "pro_task_019_data_freshness_source_reliability", + "title": "資料來源新鮮度、fallback 與來源可信度監控", + "domain_id": "data_dr", + "owner_agent": "hermes", + "supporting_agents": [ + "sre_sentinel", + "qa_verifier" + ], + "risk_tier": "medium", + "automation_mode": "auto_summary_after_guard", + "telegram_policy": "daily_digest", + "required_mcp": [ + "http_probe", + "database_readonly" + ], + "required_rag": [ + "data_quality_runbooks" + ], + "approval_required": false, + "current_live_count_24h": 0, + "blocked_actions": [ + "source_switch_without_owner", + "data_write" + ] + }, + { + "task_id": "pro_task_020_ui_accessibility_regression", + "title": "前後台 mobile overflow、console error、可讀性與 a11y regression", + "domain_id": "product_quality", + "owner_agent": "product_ui_curator", + "supporting_agents": [ + "qa_verifier", + "security_sentinel" + ], + "risk_tier": "low", + "automation_mode": "auto_summary_after_guard", + "telegram_policy": "daily_digest", + "required_mcp": [ + "browser" + ], + "required_rag": [ + "frontend_guidelines" + ], + "approval_required": false, + "current_live_count_24h": 0, + "blocked_actions": [ + "unrelated_redesign", + "public_secret_display" + ] + }, + { + "task_id": "pro_task_021_runbook_postmortem_draft", + "title": "Runbook、postmortem 與 owner handoff 草稿", + "domain_id": "ai_governance", + "owner_agent": "hermes", + "supporting_agents": [ + "openclaw", + "sre_sentinel" + ], + "risk_tier": "low", + "automation_mode": "auto_summary_after_guard", + "telegram_policy": "weekly_digest", + "required_mcp": [ + "gitea" + ], + "required_rag": [ + "logbook_chunks", + "runbooks" + ], + "approval_required": false, + "current_live_count_24h": 0, + "blocked_actions": [ + "canonical_km_write_without_review", + "secret_in_doc" + ] + }, + { + "task_id": "pro_task_022_owner_response_completeness", + "title": "Owner response 欄位完整性、補件與拒收分流", + "domain_id": "security_iwooos", + "owner_agent": "security_sentinel", + "supporting_agents": [ + "hermes", + "openclaw" + ], + "risk_tier": "high", + "automation_mode": "proposal_only", + "telegram_policy": "action_required_preview", + "required_mcp": [ + "gitea" + ], + "required_rag": [ + "owner_response_templates" + ], + "approval_required": true, + "current_live_count_24h": 0, + "blocked_actions": [ + "mark_accepted_without_reviewer", + "runtime_gate_open" + ] + }, + { + "task_id": "pro_task_023_candidate_pr_draft_packaging", + "title": "低 / 中風險候選 PR 草案、測試與 rollback 封包", + "domain_id": "devops_release", + "owner_agent": "devops_commander", + "supporting_agents": [ + "qa_verifier", + "openclaw" + ], + "risk_tier": "medium", + "automation_mode": "proposal_only", + "telegram_policy": "action_required_preview", + "required_mcp": [ + "gitea" + ], + "required_rag": [ + "release_runbooks" + ], + "approval_required": true, + "current_live_count_24h": 0, + "blocked_actions": [ + "branch_push_without_approval", + "auto_merge", + "workflow_trigger" + ] + }, + { + "task_id": "pro_task_024_post_action_verifier", + "title": "Post-action verifier、rollback trigger 與 receipt reconciliation", + "domain_id": "telegram_reporting", + "owner_agent": "openclaw", + "supporting_agents": [ + "telegram_ops_liaison", + "qa_verifier" + ], + "risk_tier": "critical", + "automation_mode": "approval_required_before_execution", + "telegram_policy": "failure_only_preview", + "required_mcp": [ + "telegram_gateway", + "observability", + "gitea" + ], + "required_rag": [ + "verification_runbooks" + ], + "approval_required": true, + "current_live_count_24h": 0, + "blocked_actions": [ + "verifier_live_readback_without_gate", + "rollback_without_owner", + "telegram_send_without_receipt" + ] + } + ], + "mcp_rag_stack": { + "mcp_connectors": [ + "gitea", + "browser", + "observability", + "telegram_gateway", + "package_registry", + "database_readonly", + "backup_status", + "argocd_readonly", + "http_probe", + "fixture_store" + ], + "rag_sources": [ + "LOGBOOK chunks", + "HARD_RULES / ADR chunks", + "runbook chunks", + "incident / alert traces", + "agent market evidence", + "owner response templates" + ], + "growth_metrics": [ + "km_entries_created", + "playbook_updates", + "recommendations_created", + "replay_score_delta", + "blocked_action_prevented_count", + "receipt_missing_count" + ] + }, + "risk_policy": { + "low": "文件、報表、UI smoke 與只讀摘要可在 guard 後自動處理並進每日 digest。", + "medium": "中風險只能先產 proposal、no-write dry-run 或 PR 草案；涉及設定、外部服務、成本、路由或未知狀態時升級審核。", + "high": "高風險必須 OpenClaw 仲裁、QA / Security gate 與統帥批准；不得自動執行。", + "critical": "production write、kubectl、ArgoCD sync、Telegram 實發、secret、付費 API、restore、rollback、host write 均維持 blocked until explicit approval。" + }, + "reporting_contract": { + "daily": { + "required": true, + "owner_agent": "hermes", + "telegram_stage": "tg_bridge_04_daily_weekly_monthly_digest" + }, + "weekly": { + "required": true, + "owner_agent": "hermes", + "telegram_stage": "tg_bridge_04_daily_weekly_monthly_digest" + }, + "monthly": { + "required": true, + "owner_agent": "hermes", + "telegram_stage": "tg_bridge_04_daily_weekly_monthly_digest" + }, + "action_required": { + "required": true, + "owner_agent": "openclaw", + "telegram_stage": "tg_bridge_05_action_required_digest" + } + }, + "redaction_contract": { + "redaction_required": true, + "conversation_transcript_display_allowed": false, + "raw_prompt_display_allowed": false, + "private_reasoning_display_allowed": false, + "secret_value_display_allowed": false, + "raw_runtime_payload_display_allowed": false, + "telegram_message_must_be_sanitized": true, + "forbidden_terms": [ + "work_window_transcript", + "raw prompt", + "private reasoning", + "chain-of-thought", + "telegram token", + "authorization header", + "secret value" + ], + "frontend_display_policy": "前端與 Telegram preview 只顯示脫敏摘要、env ref、dedup key、preview hash 與審核狀態；不得顯示工作視窗對話、未遮罩提示、私有推理、機密明文或未遮罩 runtime payload。", + "message_preview_redaction_checks": [ + "conversation_context_redacted", + "prompt_surface_redacted", + "runtime_payload_redacted", + "credential_material_absent", + "action_button_absent", + "execution_claim_absent" + ], + "canary_packet_redaction_checks": [ + "target_room_value_hidden", + "bot_token_absent", + "operator_input_value_hidden", + "no_runtime_payload", + "collaboration_context_redacted", + "no_action_button" + ], + "canary_delivery_redaction_checks": [ + "target_room_value_hidden", + "operator_input_value_hidden", + "runtime_payload_redacted", + "collaboration_context_redacted", + "credential_material_absent", + "action_button_absent" + ] + }, + "rollups": { + "professional_task_count": 24, + "domain_count": 8, + "telegram_stage_count": 5, + "telegram_message_type_count": 6, + "approval_required_count": 19, + "low_risk_task_count": 3, + "medium_risk_task_count": 10, + "high_risk_task_count": 6, + "critical_risk_task_count": 5, + "current_live_count": 0, + "gateway_queue_write_count": 0, + "telegram_send_count": 0, + "bot_api_call_count": 0, + "delivery_receipt_write_count": 0, + "production_write_count": 0, + "secret_read_count": 0, + "paid_api_call_count": 0, + "host_write_count": 0, + "kubectl_action_count": 0, + "no_send_preview_count": 6, + "dedup_key_count": 6, + "receipt_expectation_count": 6, + "canary_approval_package_count": 1, + "queue_preview_envelope_field_count": 6, + "canary_required_preview_count": 6, + "approval_required_preview_count": 4, + "preview_send_enabled_count": 0, + "preview_queue_write_enabled_count": 0, + "preview_bot_api_call_enabled_count": 0, + "receipt_live_write_enabled_count": 0, + "canary_live_send_enabled_count": 0, + "canary_send_approval_packet_count": 1, + "canary_operator_approval_field_count": 7, + "canary_stop_condition_count": 6, + "canary_rollback_mute_step_count": 5, + "canary_receipt_readback_check_count": 6, + "canary_approval_granted_count": 0, + "canary_selected_message_type_count": 0, + "canary_approved_time_window_count": 0, + "canary_send_execution_enabled_count": 0, + "canary_gateway_queue_write_enabled_count": 0, + "canary_bot_api_call_enabled_count": 0, + "canary_delivery_receipt_write_enabled_count": 0, + "canary_secret_read_enabled_count": 0, + "canary_delivery_gate_count": 1, + "canary_delivery_required_field_count": 8, + "canary_delivery_preflight_check_count": 8, + "canary_delivery_hold_reason_count": 7, + "canary_delivery_readback_check_count": 7, + "canary_delivery_rollback_mute_control_count": 5, + "canary_delivery_approved_count": 0, + "canary_delivery_attempt_allowed_count": 0, + "canary_delivery_live_send_enabled_count": 0, + "canary_delivery_gateway_queue_write_enabled_count": 0, + "canary_delivery_bot_api_call_enabled_count": 0, + "canary_delivery_secret_read_enabled_count": 0, + "canary_delivery_paid_api_enabled_count": 0, + "canary_delivery_rehearsal_count": 1, + "canary_delivery_rehearsal_step_count": 6, + "canary_delivery_rehearsal_readback_check_count": 8, + "canary_delivery_rehearsal_stop_condition_count": 7, + "canary_delivery_rehearsal_rollback_mute_control_count": 5, + "canary_delivery_rehearsal_completed_check_count": 8, + "canary_delivery_rehearsal_failed_check_count": 0, + "canary_delivery_rehearsal_live_send_enabled_count": 0, + "canary_delivery_rehearsal_gateway_queue_write_enabled_count": 0, + "canary_delivery_rehearsal_bot_api_call_enabled_count": 0, + "canary_delivery_rehearsal_receipt_write_enabled_count": 0 + } +} diff --git a/docs/schemas/ai_agent_professional_task_expansion_v1.schema.json b/docs/schemas/ai_agent_professional_task_expansion_v1.schema.json index 7df3afe6..8e624108 100644 --- a/docs/schemas/ai_agent_professional_task_expansion_v1.schema.json +++ b/docs/schemas/ai_agent_professional_task_expansion_v1.schema.json @@ -46,10 +46,10 @@ ] }, "current_task_id": { - "const": "P2-405D" + "const": "P2-405E" }, "next_task_id": { - "const": "P2-405E" + "const": "P2-405F" }, "overall_completion_percent": { "type": "integer", @@ -98,7 +98,8 @@ "receipt_expectations", "canary_approval_package", "canary_send_approval_packet", - "canary_delivery_gate" + "canary_delivery_gate", + "canary_delivery_rehearsal" ], "properties": { "canonical_room": { @@ -614,6 +615,101 @@ } }, "additionalProperties": true + }, + "canary_delivery_rehearsal": { + "type": "object", + "required": [ + "rehearsal_id", + "status", + "rehearsal_ready", + "selected_message_type", + "selected_preview_id", + "selected_receipt_expectation_id", + "target_room_env", + "target_room_value_visible", + "sanitized_preview_hash", + "dedup_key", + "gateway_envelope_preview", + "dry_run_steps", + "readback_drill", + "stop_conditions", + "rollback_mute_controls", + "execution_flags", + "next_gate" + ], + "properties": { + "status": { + "const": "ready_no_send_rehearsal" + }, + "rehearsal_ready": { + "const": true + }, + "selected_message_type": { + "const": "daily_agent_workload_digest" + }, + "selected_preview_id": { + "const": "p2_405b_preview_daily_agent_workload_digest_v1" + }, + "selected_receipt_expectation_id": { + "const": "p2_405b_receipt_daily_agent_workload_digest_v1" + }, + "target_room_env": { + "const": "SRE_GROUP_CHAT_ID" + }, + "target_room_value_visible": { + "const": false + }, + "dry_run_steps": { + "type": "array", + "minItems": 6, + "maxItems": 6 + }, + "readback_drill": { + "type": "object", + "required": [ + "owner_agent", + "required_checks", + "completed_check_count", + "failed_check_count", + "production_receipt_write_enabled", + "live_receipt_readback_enabled" + ], + "properties": { + "owner_agent": { + "const": "hermes" + }, + "required_checks": { + "type": "array", + "minItems": 8, + "maxItems": 8 + }, + "completed_check_count": { + "const": 8 + }, + "failed_check_count": { + "const": 0 + }, + "production_receipt_write_enabled": { + "const": false + }, + "live_receipt_readback_enabled": { + "const": false + } + }, + "additionalProperties": true + }, + "stop_conditions": { + "type": "array", + "minItems": 7, + "maxItems": 7 + }, + "rollback_mute_controls": { + "type": "array", + "minItems": 5, + "maxItems": 5 + } + }, + "additionalProperties": true } }, "additionalProperties": true @@ -780,7 +876,18 @@ "canary_delivery_gateway_queue_write_enabled_count", "canary_delivery_bot_api_call_enabled_count", "canary_delivery_secret_read_enabled_count", - "canary_delivery_paid_api_enabled_count" + "canary_delivery_paid_api_enabled_count", + "canary_delivery_rehearsal_count", + "canary_delivery_rehearsal_step_count", + "canary_delivery_rehearsal_readback_check_count", + "canary_delivery_rehearsal_stop_condition_count", + "canary_delivery_rehearsal_rollback_mute_control_count", + "canary_delivery_rehearsal_completed_check_count", + "canary_delivery_rehearsal_failed_check_count", + "canary_delivery_rehearsal_live_send_enabled_count", + "canary_delivery_rehearsal_gateway_queue_write_enabled_count", + "canary_delivery_rehearsal_bot_api_call_enabled_count", + "canary_delivery_rehearsal_receipt_write_enabled_count" ], "properties": { "professional_task_count": { @@ -944,6 +1051,39 @@ }, "canary_delivery_paid_api_enabled_count": { "const": 0 + }, + "canary_delivery_rehearsal_count": { + "const": 1 + }, + "canary_delivery_rehearsal_step_count": { + "const": 6 + }, + "canary_delivery_rehearsal_readback_check_count": { + "const": 8 + }, + "canary_delivery_rehearsal_stop_condition_count": { + "const": 7 + }, + "canary_delivery_rehearsal_rollback_mute_control_count": { + "const": 5 + }, + "canary_delivery_rehearsal_completed_check_count": { + "const": 8 + }, + "canary_delivery_rehearsal_failed_check_count": { + "const": 0 + }, + "canary_delivery_rehearsal_live_send_enabled_count": { + "const": 0 + }, + "canary_delivery_rehearsal_gateway_queue_write_enabled_count": { + "const": 0 + }, + "canary_delivery_rehearsal_bot_api_call_enabled_count": { + "const": 0 + }, + "canary_delivery_rehearsal_receipt_write_enabled_count": { + "const": 0 } }, "additionalProperties": true