docs(logbook): record wazuh accepted production readback [skip ci]

This commit is contained in:
Your Name
2026-06-28 09:52:18 +08:00
parent 00db624e5f
commit c43ae67ff8

View File

@@ -48249,3 +48249,34 @@ production browser smoke:
**下一個 P0**
- commit feature正常 push 到 Gitea若 main CD idle/successnormal push `HEAD:main`,部署後 production readback 目標:`github_write_channel_ready=false``github_missing_target_controlled_apply_ready_count=0``blocked_preflight_target_count=5`,並確認 Workbench GitHub lane 顯示 preflight blocker。
- 後續真正 controlled apply 需要補 GitHub create repo channel 或可用 refs sync channel並逐 target 產生 source-of-truth diff / no-force dry-run仍不讀 secret、不收 private clone URL、不 force push。
## 2026-06-28 — 09:48 Wazuh manager registry accepted readback production 完成
**時間與來源**
- 2026-06-28 09:48 Asia/Taipei。
- 來源:`d4c2cc6e2` Wazuh accepted readback source、`264b8e0a7` IwoooS 前台 i18n 修正、deploy marker `3359268ec`
**完成內容**
- Wazuh manager registry reviewer validation readback 已在 production 顯示 committed accepted`manager_registry_accepted_count=6``manager_registry_acceptance_evidence_received_count=1``manager_registry_acceptance_evidence_review_ready_count=1`
- `POST /api/v1/iwooos/wazuh-manager-registry-reviewer-validation/validate-manager-registry-acceptance` 使用 redacted sample 回 `accepted_for_manager_registry_acceptance_review_only`;單次 POST 仍 `manager_registry_accepted_count=0``payload_persisted=false``manager_registry_accepted_updated=false`
- 修正 `/zh-TW/iwooos` 缺少 `iwooos.securityControlCoverage.domainStatus.manager_registry_readback_accepted_runtime_gate_closed` 的 i18n key並把 Wazuh accepted summary 改為 accepted readback `6`、runtime gate `0`
- 110 host pressure gate 未繞過;標準 web build 因另一條 build 造成 load spike 已中止本輪自啟 build改由本機 Next standalone build110 只做 30MB runtime image packaging 與 registry push。
**Production 驗證結果**
- Argo`sync=Synced``health=Healthy`、revision `3359268ec06002767dad0ee24312a891439520bf`
- ImagesAPI / worker / auto-repair canary `a1f5935481ad01cc3f73ebb4354726d57e7a2e41`Web `264b8e0a70a7b2fad70afede4b0d7a1c08d1aef8`
- Production GETHTTP 200schema `iwooos_wazuh_manager_registry_reviewer_validation_readback_v1`status `manager_registry_accepted_readback_committed_no_runtime_no_secret_collection`
- Production POSTHTTP 200status `accepted_for_manager_registry_acceptance_review_only`mode `no_persist_acceptance_evidence_review_no_runtime_no_secret_collection`
- POST 後 GET`manager_registry_accepted_count=6`、acceptance received / review ready `1 / 1`
- Browser smoke `/zh-TW/iwooos`desktop 1440x1100、mobile 390x844 皆 HTTP 200、console error `0`、page error `0`、horizontal overflow `false`、forbidden hits `0`
**仍維持 0 / false**
- `runtime_gate_count=0``host_write_authorized_count=0``active_response_authorized_count=0``secret_value_collection_allowed_count=0`
- `runtime_execution_authorized=false``payload_persisted=false``manager_registry_accepted_updated=false`
**未做**
- 沒有 live Wazuh query、沒有 host write、沒有 active response、沒有 runtime action、沒有讀 secret。
- 沒有重啟 host / Docker / systemd / Nginx / firewall / K8s node沒有 force push沒有把 host pressure gate 改成 warn-only。
**下一個 P0**
- 進入 Wazuh runtime gate owner review / controlled apply preflight補 target selector、source-of-truth diff、check-mode / dry-run、rollback、post-apply verifier在這些證據未成立前runtime gate 仍為 `0`