feat(web): add IwoooS executive snapshot

docs/LOGBOOK.md

@@ -1,3 +1,31 @@
+## 2026-06-01｜IwoooS 高層快照層
+
+**背景**：
+
+- 使用者持續指出 IwoooS 不能只是長文字與很多區塊，必須讓使用者更快理解目前到底完成哪些工作、哪些主機 / 產品已納管、下一個真正卡點與禁止動作。
+- 本輪不新增掃描、不更新 Kali / 開發主機、不切換 GitHub / Gitea、不提高初期資安限制；只把已存在的工作狀態壓成第一屏管理層快照。
+
+**本次調整**：
+
+- `apps/web/src/app/[locale]/iwooos/page.tsx`：
+  - 新增 `IwoooSExecutiveSnapshotBoard`，放在頁首後、焦點導覽前。
+  - 以四張摘要卡呈現：已完成可見工作、資產與主機已納管、下一個真正卡點、仍禁止執行。
+  - 以三條狀態軸呈現：框架 / 治理 / UI、S4.9 owner evidence、執行期開閘。
+  - 明確標示 `Gate 0`、`owner response=0`、`runtime_execution_authorized=false`，避免把 UI 可視化誤讀成執行授權。
+- `apps/web/messages/zh-TW.json` / `apps/web/messages/en.json`：
+  - 新增 `iwooos.executiveSnapshot` 全繁中文案；`en.json` 維持繁中鏡像。
+- `docs/security/iwooos-posture-projection.snapshot.json` / `security-mirror-status-rollup.snapshot.json`：
+  - 新增 `executive_snapshot_*` summary、cards、axes。
+  - 新增 `S2.153` 進度 ledger；headline 不增加，因為這是 framework / UX / 可理解度提升，不是 runtime gate。
+- `scripts/security/security-mirror-progress-guard.py`：
+  - 新增高層快照的 component、testid、i18n、snapshot 與 runtime false 邊界 guard。
+
+**進度邊界**：
+
+- 整體維持 `61%`；這輪提升的是「第一眼理解度」與「高層狀態摘要」。
+- `active_runtime_gate_count=0`、`runtime_execution_authorized=false`。
+- 未執行 Kali 掃描、未 SSH 變更 112 / 111 / 168、未開啟自動修復、未做 GitHub primary / Gitea 切換。
+
 ## 2026-06-01｜AI 自健診 W-1 SLO：auto_execute_success_rate 修復
 
 **背景**：

docs/security/iwooos-posture-projection.snapshot.json

@@ -83,6 +83,14 @@
     "github_primary_ready_count": 0,
     "source_control_primary_readiness_item_count": 6,
     "action_buttons_allowed": false,
+    "executive_snapshot_first_layer": true,
+    "executive_snapshot_card_count": 4,
+    "executive_snapshot_axis_count": 3,
+    "executive_snapshot_above_focus_deck": true,
+    "executive_snapshot_explains_done_next_blocked": true,
+    "executive_snapshot_runtime_gate_count": 0,
+    "executive_snapshot_owner_response_received_count": 0,
+    "executive_snapshot_owner_response_accepted_count": 0,
     "all_product_coverage_snapshot_scope_count": 7,
     "all_product_coverage_snapshot_read_only_count": 7,
     "all_product_coverage_snapshot_runtime_ready_count": 0,
@@ -186,6 +194,90 @@
     "headline_status": "reviewed_after_awooop_read_only_production_landing_evidence",
     "not_authorization": true
   },
+  "executive_snapshot_cards": [
+    {
+      "card_id": "visibleWork",
+      "display_order": 1,
+      "display_mode": "first_screen_executive_snapshot",
+      "metric": "7區",
+      "summarizes_completed_visible_work": true,
+      "execution_action_button_allowed": false,
+      "runtime_gate_opened": false,
+      "runtime_execution_authorized": false,
+      "not_authorization": true
+    },
+    {
+      "card_id": "assetMesh",
+      "display_order": 2,
+      "display_mode": "first_screen_executive_snapshot",
+      "metric": "8+3",
+      "summarizes_asset_and_host_scope": true,
+      "execution_action_button_allowed": false,
+      "runtime_gate_opened": false,
+      "runtime_execution_authorized": false,
+      "not_authorization": true
+    },
+    {
+      "card_id": "nextBlocker",
+      "display_order": 3,
+      "display_mode": "first_screen_executive_snapshot",
+      "metric": "S4.9",
+      "summarizes_next_blocker": true,
+      "owner_response_received_count": 0,
+      "owner_response_accepted_count": 0,
+      "execution_action_button_allowed": false,
+      "runtime_gate_opened": false,
+      "runtime_execution_authorized": false,
+      "not_authorization": true
+    },
+    {
+      "card_id": "runtimeLock",
+      "display_order": 4,
+      "display_mode": "first_screen_executive_snapshot",
+      "metric": "Gate 0",
+      "summarizes_forbidden_runtime_actions": true,
+      "execution_action_button_allowed": false,
+      "scan_authorized": false,
+      "host_change_authorized": false,
+      "source_control_mutation_authorized": false,
+      "runtime_gate_opened": false,
+      "runtime_execution_authorized": false,
+      "not_authorization": true
+    }
+  ],
+  "executive_snapshot_axes": [
+    {
+      "axis_id": "framework",
+      "display_order": 1,
+      "display_mode": "first_screen_executive_snapshot_axis",
+      "value": "88%",
+      "percent": 88,
+      "runtime_delta": false,
+      "not_authorization": true
+    },
+    {
+      "axis_id": "evidence",
+      "display_order": 2,
+      "display_mode": "first_screen_executive_snapshot_axis",
+      "value": "0/4",
+      "percent": 0,
+      "owner_response_received_count": 0,
+      "owner_response_accepted_count": 0,
+      "runtime_delta": false,
+      "not_authorization": true
+    },
+    {
+      "axis_id": "runtime",
+      "display_order": 3,
+      "display_mode": "first_screen_executive_snapshot_axis",
+      "value": "0",
+      "percent": 0,
+      "runtime_gate_count": 0,
+      "runtime_execution_authorized": false,
+      "runtime_delta": false,
+      "not_authorization": true
+    }
+  ],
   "first_progress_unlock_path_steps": [
     {
       "step_id": "owner_response_scope",

docs/security/security-mirror-status-rollup.snapshot.json

@@ -2305,6 +2305,18 @@
       "runtime_delta": false,
       "execution_authorized": false,
       "not_authorization": true
+    },
+    {
+      "delta_id": "s2_153_iwooos_executive_snapshot",
+      "display_order": 182,
+      "completed_stage": "S2.153 IwoooS 高層快照層",
+      "progress_axis": "framework_detail",
+      "headline_percent_delta": 0,
+      "framework_delta_visible": true,
+      "why_headline_unchanged": "IwoooS 只新增第一屏高層快照層，把已完成可見工作、8+3 資產與主機納管、S4.9 下一卡點與 Gate 0 禁止動作壓成四張摘要卡與三條狀態軸；iwooos_executive_snapshot_card_count=4、iwooos_executive_snapshot_axis_count=3、iwooos_executive_snapshot_above_focus_deck=true、iwooos_executive_snapshot_execution_action_buttons_allowed=false、iwooos_executive_snapshot_runtime_gate_count=0、runtime_execution_authorized=false、active_runtime_gate_count=0，不把高層快照當掃描、修復、部署、主機更新、source-control mutation、GitHub primary 切換、Gitea 停用或 runtime gate。",
+      "runtime_delta": false,
+      "execution_authorized": false,
+      "not_authorization": true
     }
   ],
   "next_safe_actions": [