wooo/awoooi
1
1
Fork 0
Code Issues 2 Pull Requests 1 Actions 2 Packages Projects Releases Wiki Activity

docs(logbook): record wazuh registry production readback [skip ci]

Browse Source
This commit is contained in:
Your Name
2026-06-28 18:50:24 +08:00
parent 5c540460c0
commit f05d9f2a33
1 changed files with 12 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
docs/LOGBOOK.md
View File

@@ -1,3 +1,15 @@
## 2026-06-28 — 18:49 IwoooS Wazuh manager registry accepted 與 controlled apply preflight production readback
**完成內容**：
- Production `GET /api/v1/iwooos/wazuh-manager-registry-reviewer-validation` HTTP 200，schema `iwooos_wazuh_manager_registry_reviewer_validation_readback_v1`，狀態 `manager_registry_accepted_readback_committed_no_runtime_no_secret_collection`。
- Readback counters：owner export received / accepted / reviewer passed / post-enable readback / acceptance evidence received / acceptance ready 皆 `1`；`manager_registry_accepted_count=6`；runtime gate、host write、active response、secret value collection 仍全 `0`。
- Production `POST /validate-owner-export` valid redacted sample 回 `accepted_for_readonly_posture_only`；`POST /validate-manager-registry-acceptance` valid redacted sample 回 `accepted_for_manager_registry_acceptance_review_only`；兩個 POST 皆 no-persist，POST 後 GET 總帳仍維持 `manager_registry_accepted_count=6`、runtime gate `0`。
- Production `GET /api/v1/iwooos/runtime-security-readback` HTTP 200，schema `iwooos_runtime_security_readback_v1`，讀回 `wazuh_manager_registry_accepted_count=6`、`runtime_gate_count=0`。
- Production `GET /api/v1/iwooos/wazuh-runtime-controlled-apply-preflight` HTTP 200，target selector / source-of-truth diff / check-mode / dry-run / rollback / post-apply verifier / KM PlayBook writeback 皆 `1`；redacted controlled-apply packet POST 回 `accepted_for_controlled_apply_preflight_review_only`，POST 後 GET counters 不被 payload 改寫。
- Production `/zh-TW/iwooos` desktop / mobile browser readback：manager registry reviewer validation board 可見 `Reviewer passed=1`、`Post-enable=1`、`Acceptance ready=1`、`Manager accepted=6`、`執行期=0`；console error `0`、水平溢出 `0`、敏感 pattern hit `0`。
**邊界**：沒有讀 secret / raw Wazuh payload / raw session / SQLite / auth；沒有查 live Wazuh；沒有 active response、agent restart、host write、K8s secret patch、Nginx、firewall、DB、GitHub 或 force push。
## 2026-06-28 — 18:40 IwoooS Wazuh live metadata readiness production readback
**完成內容**：