diff --git a/apps/web/messages/en.json b/apps/web/messages/en.json index f350c10c..c2edfc7a 100644 --- a/apps/web/messages/en.json +++ b/apps/web/messages/en.json @@ -1930,6 +1930,49 @@ "field": "runtime gate pointer; active gates=0" } } + }, + "hostOwnerDecisionRecordWriteupReview": { + "title": "Host Owner Decision Record Write-Up Review Checklist", + "subtitle": "Write-up packets still require read-only review. This only shows whether formal decision record write-up fields are readable and does not mark write-up completed, create or accept decision records, or open runtime gates.", + "checkLabel": "Write-up review", + "guardLabel": "No upgrade", + "items": { + "decisionSummaryReadable": { + "title": "Decision summary readable", + "body": "Confirm the write-up only organizes the human owner decision, risk acceptance boundary, and no-execution statement without adding approval semantics.", + "guard": "write-up review only; completed=0" + }, + "scopeExpiryComplete": { + "title": "Scope and expiry complete", + "body": "Confirm scope, exclusions, observation intent, and expiry are readable so the formal record scope is not ambiguous.", + "guard": "record created=false" + }, + "scanModeLimitsExplicit": { + "title": "Scan mode limits explicit", + "body": "Confirm observe-only, future active scan, and credentialed scan limits are explicit while not becoming scan authorization.", + "guard": "scan authorized=false" + }, + "credentialBoundaryMetadataOnly": { + "title": "Credential boundary metadata only", + "body": "Confirm credential handling still keeps only metadata, owner, and retention boundary without requesting or storing sensitive material.", + "guard": "secret collection=false" + }, + "maintenanceRollbackLinked": { + "title": "Maintenance and rollback linked", + "body": "Confirm maintenance window candidates, constraints, rollback owner, recovery path, and human contact remain traceable.", + "guard": "host update=false" + }, + "validationEvidenceLinked": { + "title": "Validation evidence linked", + "body": "Confirm post-check metrics, baseline, evidence pointer, and human acceptance condition are linked to the write-up.", + "guard": "accepted=0" + }, + "runtimeGateStillSeparate": { + "title": "Runtime gate still separate", + "body": "Confirm the runtime gate pointer still points to a separate follow-up gate and write-up review does not open gates.", + "guard": "active runtime gates=0; action buttons=false" + } + } } }, "tickets": { diff --git a/apps/web/messages/zh-TW.json b/apps/web/messages/zh-TW.json index 14cd198c..bca51eea 100644 --- a/apps/web/messages/zh-TW.json +++ b/apps/web/messages/zh-TW.json @@ -1931,6 +1931,49 @@ "field": "runtime gate pointer；active gates=0" } } + }, + "hostOwnerDecisionRecordWriteupReview": { + "title": "主機 Owner Decision Record Write-Up Review Checklist", + "subtitle": "Write-up packets 後仍需要只讀核對。這裡只顯示正式 decision record 撰寫欄位是否可讀，不會標記 write-up completed、不會建立或接受 decision record、不會開 runtime gate。", + "checkLabel": "Write-up review", + "guardLabel": "不可升級", + "items": { + "decisionSummaryReadable": { + "title": "Decision summary readable", + "body": "確認 write-up 只整理 owner 人工判斷、風險接受邊界與不執行聲明，不新增批准語義。", + "guard": "write-up review only；completed=0" + }, + "scopeExpiryComplete": { + "title": "Scope and expiry complete", + "body": "確認 scope、排除範圍、觀察目的與到期時間可讀，避免正式紀錄範圍不清。", + "guard": "record created=false" + }, + "scanModeLimitsExplicit": { + "title": "Scan mode limits explicit", + "body": "確認 observe-only、future active scan 與 credentialed scan 的限制條件明確，且不代表掃描授權。", + "guard": "scan authorized=false" + }, + "credentialBoundaryMetadataOnly": { + "title": "Credential boundary metadata only", + "body": "確認 credential handling 仍只保留 metadata、owner 與保存邊界，不要求或保存敏感素材。", + "guard": "secret collection=false" + }, + "maintenanceRollbackLinked": { + "title": "Maintenance and rollback linked", + "body": "確認維護窗口候選、限制條件、rollback owner、復原路徑與人工聯絡點都可追。", + "guard": "host update=false" + }, + "validationEvidenceLinked": { + "title": "Validation evidence linked", + "body": "確認 post-check metrics、baseline、evidence pointer 與人工驗收條件已連到 write-up。", + "guard": "accepted=0" + }, + "runtimeGateStillSeparate": { + "title": "Runtime gate still separate", + "body": "確認 runtime gate pointer 仍指向獨立 follow-up gate，write-up review 不會開 gate。", + "guard": "active runtime gates=0；action buttons=false" + } + } } }, "tickets": { diff --git a/apps/web/src/app/[locale]/iwooos/page.tsx b/apps/web/src/app/[locale]/iwooos/page.tsx index af367544..f1ff7914 100644 --- a/apps/web/src/app/[locale]/iwooos/page.tsx +++ b/apps/web/src/app/[locale]/iwooos/page.tsx @@ -186,6 +186,13 @@ type HostOwnerDecisionRecordWriteupPacket = { tone: 'steady' | 'warn' | 'locked' } +type HostOwnerDecisionRecordWriteupReviewItem = { + key: string + check: string + icon: typeof ShieldCheck + tone: 'steady' | 'warn' | 'locked' +} + const postureMetrics: PostureMetric[] = [ { key: 'overall', value: '58%', tone: 'warn' }, { key: 'framework', value: '80-85%', tone: 'steady' }, @@ -437,6 +444,16 @@ const hostOwnerDecisionRecordWriteupPackets: HostOwnerDecisionRecordWriteupPacke { key: 'runtimeGatePointerWriteup', packet: 'WU7', icon: ShieldCheck, tone: 'locked' }, ] +const hostOwnerDecisionRecordWriteupReviewItems: HostOwnerDecisionRecordWriteupReviewItem[] = [ + { key: 'decisionSummaryReadable', check: 'WR1', icon: ClipboardCheck, tone: 'warn' }, + { key: 'scopeExpiryComplete', check: 'WR2', icon: Radar, tone: 'warn' }, + { key: 'scanModeLimitsExplicit', check: 'WR3', icon: Activity, tone: 'locked' }, + { key: 'credentialBoundaryMetadataOnly', check: 'WR4', icon: Lock, tone: 'locked' }, + { key: 'maintenanceRollbackLinked', check: 'WR5', icon: Clock3, tone: 'warn' }, + { key: 'validationEvidenceLinked', check: 'WR6', icon: CheckCircle2, tone: 'warn' }, + { key: 'runtimeGateStillSeparate', check: 'WR7', icon: ShieldCheck, tone: 'locked' }, +] + const evidenceItems = [ 'iwooos-posture-projection.snapshot.json', 'security-rollout-policy.snapshot.json', @@ -1135,6 +1152,34 @@ function HostOwnerDecisionRecordWriteupCard({ item }: { item: HostOwnerDecisionR ) } +function HostOwnerDecisionRecordWriteupReviewCard({ item }: { item: HostOwnerDecisionRecordWriteupReviewItem }) { + const t = useTranslations('iwooos.hostOwnerDecisionRecordWriteupReview') + const Icon = item.icon + return ( +
+
+
+ + {t('checkLabel')} +
+ {item.check} +
+

+ {t(`items.${item.key}.title` as never)} +

+

+ {t(`items.${item.key}.body` as never)} +

+
+
{t('guardLabel')}
+
+ {t(`items.${item.key}.guard` as never)} +
+
+
+ ) +} + export default function IwoooSPage({ params }: { params: { locale: string } }) { const t = useTranslations('iwooos') @@ -1527,6 +1572,26 @@ export default function IwoooSPage({ params }: { params: { locale: string } }) { +
+
+

{t('hostOwnerDecisionRecordWriteupReview.title')}

+

+ {t('hostOwnerDecisionRecordWriteupReview.subtitle')} +

+
+
+ {hostOwnerDecisionRecordWriteupReviewItems.map(item => ( + + ))} +
+
+
None: "s2_27_iwooos_host_owner_decision_record_draft_review_checklist", "s2_28_iwooos_host_owner_decision_record_draft_review_outcome_lanes", "s2_29_iwooos_host_owner_decision_record_writeup_packets", + "s2_30_iwooos_host_owner_decision_record_writeup_review_checklist", ] assert_equal( "progress_delta_ledger.delta_ids", @@ -488,6 +489,15 @@ def validate(root: Path) -> None: "host_decision_record_validation_evidence_writeup_packet", "host_decision_record_runtime_gate_pointer_writeup_packet", ] + expected_iwooos_host_owner_decision_record_writeup_review_checklist_item_ids = [ + "host_decision_record_summary_writeup_review_check", + "host_decision_record_scope_writeup_review_check", + "host_decision_record_scan_mode_limits_writeup_review_check", + "host_decision_record_credential_boundary_writeup_review_check", + "host_decision_record_maintenance_rollback_writeup_review_check", + "host_decision_record_validation_evidence_writeup_review_check", + "host_decision_record_runtime_gate_writeup_review_check", + ] assert_equal( "iwooos_projection.summary.frontend_surface_coverage_group_count", iwooos_projection["summary"]["frontend_surface_coverage_group_count"], @@ -588,6 +598,11 @@ def validate(root: Path) -> None: iwooos_projection["summary"]["host_owner_decision_record_writeup_packet_count"], len(expected_iwooos_host_owner_decision_record_writeup_packet_ids), ) + assert_equal( + "iwooos_projection.summary.host_owner_decision_record_writeup_review_checklist_item_count", + iwooos_projection["summary"]["host_owner_decision_record_writeup_review_checklist_item_count"], + len(expected_iwooos_host_owner_decision_record_writeup_review_checklist_item_ids), + ) iwooos_progress = iwooos_projection["progress"] assert_equal("iwooos_projection.progress.overall_percent", iwooos_progress["overall_percent"], progress["overall_percent"]) assert_equal( @@ -1847,6 +1862,91 @@ def validate(root: Path) -> None: f"iwooos_projection.host_owner_decision_record_writeup_packets.{item['packet_id']}.not_authorization", item["not_authorization"], ) + iwooos_host_owner_decision_record_writeup_review_checklist_items = iwooos_projection[ + "host_owner_decision_record_writeup_review_checklist_items" + ] + assert_equal( + "iwooos_projection.host_owner_decision_record_writeup_review_checklist_items.ids", + [item["check_id"] for item in iwooos_host_owner_decision_record_writeup_review_checklist_items], + expected_iwooos_host_owner_decision_record_writeup_review_checklist_item_ids, + ) + assert_equal( + "iwooos_projection.host_owner_decision_record_writeup_review_checklist_items.display_order", + [item["display_order"] for item in iwooos_host_owner_decision_record_writeup_review_checklist_items], + list(range(1, len(expected_iwooos_host_owner_decision_record_writeup_review_checklist_item_ids) + 1)), + ) + expected_iwooos_host_owner_decision_record_writeup_review_conditions = [ + "decision_summary_risk_acceptance_and_no_execution_statement_readable", + "scope_exclusion_observation_intent_and_expiry_complete", + "scan_mode_limits_explicit_and_not_authorization", + "credential_boundary_metadata_only_and_no_secret_collection", + "maintenance_window_constraints_rollback_and_human_contact_linked", + "validation_metrics_baseline_evidence_and_acceptance_condition_linked", + "runtime_gate_pointer_separate_and_closed", + ] + assert_equal( + "iwooos_projection.host_owner_decision_record_writeup_review_checklist_items.review_conditions", + [item["review_condition"] for item in iwooos_host_owner_decision_record_writeup_review_checklist_items], + expected_iwooos_host_owner_decision_record_writeup_review_conditions, + ) + for item in iwooos_host_owner_decision_record_writeup_review_checklist_items: + assert_equal( + f"iwooos_projection.host_owner_decision_record_writeup_review_checklist_items.{item['check_id']}.display_mode", + item["display_mode"], + "owner_decision_record_writeup_review_checklist_only", + ) + assert_equal( + f"iwooos_projection.host_owner_decision_record_writeup_review_checklist_items.{item['check_id']}.decision_record_writeup_review_passed_count", + item["decision_record_writeup_review_passed_count"], + 0, + ) + assert_equal( + f"iwooos_projection.host_owner_decision_record_writeup_review_checklist_items.{item['check_id']}.decision_record_writeup_completed_count", + item["decision_record_writeup_completed_count"], + 0, + ) + assert_false( + f"iwooos_projection.host_owner_decision_record_writeup_review_checklist_items.{item['check_id']}.decision_record_created", + item["decision_record_created"], + ) + assert_equal( + f"iwooos_projection.host_owner_decision_record_writeup_review_checklist_items.{item['check_id']}.owner_decision_received_count", + item["owner_decision_received_count"], + 0, + ) + assert_equal( + f"iwooos_projection.host_owner_decision_record_writeup_review_checklist_items.{item['check_id']}.owner_decision_accepted_count", + item["owner_decision_accepted_count"], + 0, + ) + assert_false( + f"iwooos_projection.host_owner_decision_record_writeup_review_checklist_items.{item['check_id']}.owner_approval_record_created", + item["owner_approval_record_created"], + ) + assert_false( + f"iwooos_projection.host_owner_decision_record_writeup_review_checklist_items.{item['check_id']}.runtime_gate_opened", + item["runtime_gate_opened"], + ) + assert_false( + f"iwooos_projection.host_owner_decision_record_writeup_review_checklist_items.{item['check_id']}.raw_payload_allowed", + item["raw_payload_allowed"], + ) + assert_false( + f"iwooos_projection.host_owner_decision_record_writeup_review_checklist_items.{item['check_id']}.secret_value_collection_allowed", + item["secret_value_collection_allowed"], + ) + assert_false( + f"iwooos_projection.host_owner_decision_record_writeup_review_checklist_items.{item['check_id']}.runtime_execution_authorized", + item["runtime_execution_authorized"], + ) + assert_false( + f"iwooos_projection.host_owner_decision_record_writeup_review_checklist_items.{item['check_id']}.action_buttons_allowed", + item["action_buttons_allowed"], + ) + assert_true( + f"iwooos_projection.host_owner_decision_record_writeup_review_checklist_items.{item['check_id']}.not_authorization", + item["not_authorization"], + ) assert_equal( "iwooos_projection.non_blocking_lane_ids", iwooos_projection["non_blocking_lane_ids"], @@ -1885,6 +1985,7 @@ def validate(root: Path) -> None: "display_host_owner_decision_record_draft_review_checklist", "display_host_owner_decision_record_draft_review_outcome_lanes", "display_host_owner_decision_record_writeup_packets", + "display_host_owner_decision_record_writeup_review_checklist", "display_evidence_refs", "display_forbidden_actions", ]: @@ -1950,6 +2051,11 @@ def validate(root: Path) -> None: "mark_host_owner_decision_record_writeup_completed", "mark_host_owner_decision_record_accepted_from_writeup", "open_runtime_gate_from_owner_decision_record_writeup", + "treat_host_owner_decision_record_writeup_review_as_approval", + "mark_host_owner_decision_record_writeup_review_passed", + "mark_host_owner_decision_record_writeup_review_completed", + "create_host_owner_decision_record_from_writeup_review", + "open_runtime_gate_from_owner_decision_record_writeup_review", "apply_runtime_blocking_control", "switch_github_primary", "production_deploy",