fix(web): use runtime origin for public api calls

# Conflicts:
#	docs/LOGBOOK.md

apps/api/.cd-trigger

@@ -1 +1 @@
-# 2026-06-27 retry AI automation closure deploy with array needs syntax
+# 2026-06-28 trigger controlled cd-lane drain verifier deploy after source readback fix

apps/api/src/api/v1/iwooos.py

@@ -14,21 +14,18 @@ from typing import Any
 from fastapi import APIRouter, HTTPException, status
 from fastapi.responses import JSONResponse
 
-from src.services.iwooos_runtime_security_readback import (
-    load_latest_iwooos_runtime_security_readback,
-)
 from src.services.iwooos_high_value_config_control_coverage import (
     load_latest_iwooos_high_value_config_control_coverage,
 )
 from src.services.iwooos_owner_evidence_intake_preflight import (
     load_latest_iwooos_owner_evidence_intake_preflight,
 )
+from src.services.iwooos_runtime_security_readback import (
+    load_latest_iwooos_runtime_security_readback,
+)
 from src.services.iwooos_security_control_coverage import (
     load_latest_iwooos_security_control_coverage,
 )
-from src.services.iwooos_wazuh_readonly_status import (
-    load_iwooos_wazuh_readonly_status,
-)
 from src.services.iwooos_wazuh_live_metadata_gate import (
     load_latest_iwooos_wazuh_live_metadata_gate,
 )
@@ -37,15 +34,27 @@ from src.services.iwooos_wazuh_managed_host_coverage import (
 )
 from src.services.iwooos_wazuh_manager_registry_reviewer_validation import (
     load_latest_iwooos_wazuh_manager_registry_reviewer_validation,
+)
+from src.services.iwooos_wazuh_manager_registry_reviewer_validation import (
     validate_iwooos_wazuh_manager_registry_acceptance_evidence as validate_wazuh_manager_registry_acceptance_evidence_payload,
+)
+from src.services.iwooos_wazuh_manager_registry_reviewer_validation import (
     validate_iwooos_wazuh_manager_registry_owner_export as validate_wazuh_manager_registry_owner_export_payload,
 )
 from src.services.iwooos_wazuh_owner_evidence_preflight import (
     load_latest_iwooos_wazuh_owner_evidence_preflight,
 )
+from src.services.iwooos_wazuh_readonly_status import (
+    load_iwooos_wazuh_readonly_status,
+)
+from src.services.iwooos_wazuh_runtime_controlled_apply_preflight import (
+    load_latest_iwooos_wazuh_runtime_controlled_apply_preflight,
+)
+from src.services.iwooos_wazuh_runtime_controlled_apply_preflight import (
+    validate_iwooos_wazuh_runtime_controlled_apply_packet as validate_wazuh_runtime_controlled_apply_packet_payload,
+)
 from src.services.public_redaction import redact_public_lan_topology
 
-
 router = APIRouter(tags=["IwoooS Security"])
 
 
@@ -110,7 +119,9 @@ async def get_iwooos_wazuh_live_metadata_gate() -> dict[str, Any]:
 async def get_iwooos_wazuh_owner_evidence_preflight() -> dict[str, Any]:
     """回傳 Wazuh manager registry 負責人證據收件預檢只讀狀態。"""
     try:
-        payload = await asyncio.to_thread(load_latest_iwooos_wazuh_owner_evidence_preflight)
+        payload = await asyncio.to_thread(
+            load_latest_iwooos_wazuh_owner_evidence_preflight
+        )
         return redact_public_lan_topology(payload)
     except FileNotFoundError as exc:
         raise HTTPException(
@@ -138,7 +149,9 @@ async def get_iwooos_wazuh_owner_evidence_preflight() -> dict[str, Any]:
 async def get_iwooos_wazuh_managed_host_coverage() -> dict[str, Any]:
     """回傳 Wazuh 受管主機覆蓋公開安全只讀狀態。"""
     try:
-        payload = await asyncio.to_thread(load_latest_iwooos_wazuh_managed_host_coverage)
+        payload = await asyncio.to_thread(
+            load_latest_iwooos_wazuh_managed_host_coverage
+        )
         return redact_public_lan_topology(payload)
     except FileNotFoundError as exc:
         raise HTTPException(
@@ -166,7 +179,9 @@ async def get_iwooos_wazuh_managed_host_coverage() -> dict[str, Any]:
 async def get_iwooos_wazuh_manager_registry_reviewer_validation() -> dict[str, Any]:
     """回傳 Wazuh manager registry reviewer validation 公開安全只讀狀態。"""
     try:
-        payload = await asyncio.to_thread(load_latest_iwooos_wazuh_manager_registry_reviewer_validation)
+        payload = await asyncio.to_thread(
+            load_latest_iwooos_wazuh_manager_registry_reviewer_validation
+        )
         return redact_public_lan_topology(payload)
     except FileNotFoundError as exc:
         raise HTTPException(
@@ -192,7 +207,9 @@ async def get_iwooos_wazuh_manager_registry_reviewer_validation() -> dict[str, A
         "accepted 總帳。"
     ),
 )
-async def validate_iwooos_wazuh_manager_registry_owner_export(owner_export: dict[str, Any]) -> dict[str, Any]:
+async def validate_iwooos_wazuh_manager_registry_owner_export(
+    owner_export: dict[str, Any],
+) -> dict[str, Any]:
     """回傳單次 Wazuh manager registry 脫敏匯出的公開安全驗證結果。"""
     try:
         payload = await asyncio.to_thread(
@@ -246,6 +263,70 @@ async def validate_iwooos_wazuh_manager_registry_acceptance_evidence(
         ) from exc
 
 
+@router.get(
+    "/api/v1/iwooos/wazuh-runtime-controlled-apply-preflight",
+    response_model=dict[str, Any],
+    summary="取得 Wazuh runtime controlled apply preflight 只讀讀回",
+    description=(
+        "讀取已提交的 Wazuh runtime controlled apply preflight contract，回傳 target selector、"
+        "source-of-truth diff、check-mode / dry-run、rollback、post-apply verifier、KM / PlayBook "
+        "writeback 與 0 / false 邊界。此端點不查 Wazuh API、不讀主機、不重新註冊 agent、"
+        "不重啟服務、不保存機密、不啟用主動回應、不改 Nginx / Docker / K8s / firewall。"
+    ),
+)
+async def get_iwooos_wazuh_runtime_controlled_apply_preflight() -> dict[str, Any]:
+    """回傳 Wazuh runtime controlled apply preflight 公開安全只讀狀態。"""
+    try:
+        payload = await asyncio.to_thread(
+            load_latest_iwooos_wazuh_runtime_controlled_apply_preflight
+        )
+        return redact_public_lan_topology(payload)
+    except FileNotFoundError as exc:
+        raise HTTPException(
+            status_code=status.HTTP_404_NOT_FOUND,
+            detail=str(exc),
+        ) from exc
+    except (json.JSONDecodeError, ValueError) as exc:
+        raise HTTPException(
+            status_code=status.HTTP_500_INTERNAL_SERVER_ERROR,
+            detail=f"IwoooS Wazuh runtime controlled apply preflight 無效：{exc}",
+        ) from exc
+
+
+@router.post(
+    "/api/v1/iwooos/wazuh-runtime-controlled-apply-preflight/validate-controlled-apply-packet",
+    response_model=dict[str, Any],
+    summary="驗證 Wazuh runtime controlled apply 脫敏 preflight packet",
+    description=(
+        "針對單次 owner / reviewer 提供的 redacted Wazuh runtime controlled apply preflight packet "
+        "進行 no-persist review readiness validation，回傳 accepted-for-review / needs supplement / "
+        "quarantined / rejected runtime action 分流。此端點不保存 payload、不查 Wazuh API、不讀主機、"
+        "不重新註冊 agent、不重啟服務、不讀或回傳機密明文、不啟用主動回應、不改 Nginx / Docker / "
+        "K8s / firewall，也不更新 runtime gate 總帳。"
+    ),
+)
+async def validate_iwooos_wazuh_runtime_controlled_apply_packet(
+    controlled_apply_packet: dict[str, Any],
+) -> dict[str, Any]:
+    """回傳單次 Wazuh runtime controlled apply preflight packet 的公開安全驗證結果。"""
+    try:
+        payload = await asyncio.to_thread(
+            validate_wazuh_runtime_controlled_apply_packet_payload,
+            controlled_apply_packet,
+        )
+        return redact_public_lan_topology(payload)
+    except FileNotFoundError as exc:
+        raise HTTPException(
+            status_code=status.HTTP_404_NOT_FOUND,
+            detail=str(exc),
+        ) from exc
+    except (json.JSONDecodeError, ValueError) as exc:
+        raise HTTPException(
+            status_code=status.HTTP_500_INTERNAL_SERVER_ERROR,
+            detail=f"IwoooS Wazuh runtime controlled apply preflight packet 驗證器無效：{exc}",
+        ) from exc
+
+
 @router.get(
     "/api/v1/iwooos/runtime-security-readback",
     response_model=dict[str, Any],
@@ -320,7 +401,9 @@ async def get_iwooos_security_control_coverage() -> dict[str, Any]:
 async def get_iwooos_high_value_config_control_coverage() -> dict[str, Any]:
     """回傳高價值配置控管矩陣公開安全只讀狀態。"""
     try:
-        payload = await asyncio.to_thread(load_latest_iwooos_high_value_config_control_coverage)
+        payload = await asyncio.to_thread(
+            load_latest_iwooos_high_value_config_control_coverage
+        )
         return redact_public_lan_topology(payload)
     except FileNotFoundError as exc:
         raise HTTPException(
@@ -348,7 +431,9 @@ async def get_iwooos_high_value_config_control_coverage() -> dict[str, Any]:
 async def get_iwooos_owner_evidence_intake_preflight() -> dict[str, Any]:
     """回傳 IwoooS 負責人脫敏證據收件預檢公開安全只讀狀態。"""
     try:
-        payload = await asyncio.to_thread(load_latest_iwooos_owner_evidence_intake_preflight)
+        payload = await asyncio.to_thread(
+            load_latest_iwooos_owner_evidence_intake_preflight
+        )
         return redact_public_lan_topology(payload)
     except FileNotFoundError as exc:
         raise HTTPException(

apps/api/src/services/delivery_closure_workbench.py

@@ -114,6 +114,13 @@ def build_delivery_closure_workbench(
                     "github_write_channel_ready"
                 )
                 is True,
+                "github_account_status": str(
+                    github_preflight.get("github_account_status") or "unknown"
+                ),
+                "github_account_suspended": github_preflight.get(
+                    "github_account_suspended"
+                )
+                is True,
             },
             "href": "/governance?tab=automation-inventory",
             "next_action": str(
@@ -231,6 +238,16 @@ def build_delivery_closure_workbench(
                 "github_write_channel_ready"
             )
             is True,
+            "github_account_status": str(
+                github_preflight.get("github_account_status") or "unknown"
+            ),
+            "github_account_suspended": github_preflight.get(
+                "github_account_suspended"
+            )
+            is True,
+            "github_api_forbidden_count": _int(
+                github_preflight.get("github_api_forbidden_count")
+            ),
             "github_controlled_apply_ready_count": _int(
                 github_preflight.get("controlled_apply_ready_count")
             ),

apps/api/src/services/github_target_private_backup_evidence_gate.py

@@ -781,6 +781,13 @@ def build_github_target_private_backup_evidence_gate(
             "github_write_channel_ready": controlled_preflight[
                 "github_write_channel_ready"
             ],
+            "github_account_status": controlled_preflight["github_account_status"],
+            "github_account_suspended": controlled_preflight[
+                "github_account_suspended"
+            ],
+            "github_api_forbidden_count": controlled_preflight[
+                "github_api_forbidden_count"
+            ],
             "github_create_repo_channel_ready": controlled_preflight[
                 "github_create_repo_channel_ready"
             ],
@@ -1232,6 +1239,18 @@ def _build_target(
         "canonical_source_ready": controlled_execution_preflight.get(
             "canonical_source_ready"
         ),
+        "canonical_source_ref": controlled_execution_preflight.get(
+            "canonical_source_ref"
+        ),
+        "canonical_source_sha": controlled_execution_preflight.get(
+            "canonical_source_sha"
+        ),
+        "source_probe_status": controlled_execution_preflight.get(
+            "source_probe_status"
+        ),
+        "source_warnings": _strings(
+            controlled_execution_preflight.get("source_warnings")
+        ),
         "github_collision_preflight_ready": controlled_execution_preflight.get(
             "github_collision_preflight_ready"
         ),
@@ -1725,6 +1744,11 @@ def _require_controlled_execution_preflight_consistency(
     github_404_count = sum(
         1 for row in targets if row.get("github_readback_status") == "api_404_not_found"
     )
+    github_forbidden_count = sum(
+        1
+        for row in targets
+        if row.get("github_readback_status") == "api_403_account_suspended"
+    )
     source_ready_count = sum(
         1 for row in targets if row.get("source_preflight_ready") is True
     )
@@ -1742,6 +1766,8 @@ def _require_controlled_execution_preflight_consistency(
         != github_404_count
     ):
         raise ValueError(f"{label}: GitHub 404 count must match targets")
+    if _int(summary.get("github_api_forbidden_count")) != github_forbidden_count + 1:
+        raise ValueError(f"{label}: GitHub forbidden count must match checked repos")
     if _int(summary.get("source_preflight_ready_count")) != source_ready_count:
         raise ValueError(f"{label}: source preflight ready count must match targets")
     if _int(summary.get("create_private_repo_apply_ready_count")) != create_ready_count:
@@ -2103,6 +2129,9 @@ def _controlled_execution_preflight_readiness(
         and authorization_summary["repo_creation_authorized"] is True
         and authorization_summary["refs_sync_authorized"] is True,
         "github_write_channel_ready": write_channel_ready,
+        "github_account_status": str(summary.get("github_account_status") or "unknown"),
+        "github_account_suspended": summary.get("github_account_suspended") is True,
+        "github_api_forbidden_count": _int(summary.get("github_api_forbidden_count")),
         "github_create_repo_channel_ready": create_channel_ready,
         "github_refs_sync_channel_ready": refs_channel_ready,
         "github_connector_repo_creation_tool_available": summary.get(
@@ -2166,6 +2195,10 @@ def _controlled_execution_target_summary(value: Any) -> dict[str, Any]:
         "target_selector": str(row.get("target_selector") or ""),
         "source_resolution_status": str(row.get("source_resolution_status") or ""),
         "source_candidate_type": str(row.get("source_candidate_type") or ""),
+        "canonical_source_ref": str(row.get("canonical_source_ref") or ""),
+        "canonical_source_sha": str(row.get("canonical_source_sha") or ""),
+        "source_probe_status": str(row.get("source_probe_status") or ""),
+        "source_warnings": _strings(row.get("source_warnings")),
         "source_preflight_ready": row.get("source_preflight_ready") is True,
         "canonical_source_ready": row.get("canonical_source_ready") is True,
         "github_collision_preflight_ready": row.get("github_collision_preflight_ready")

apps/api/src/services/iwooos_runtime_security_readback.py

@@ -22,6 +22,7 @@ _SNAPSHOT_FILES = {
     "wazuh_runtime": "wazuh-agent-visibility-runtime-gate.snapshot.json",
     "wazuh_live_metadata_gate": "wazuh-readonly-live-metadata-env-gate.snapshot.json",
     "wazuh_owner_evidence_preflight": "wazuh-agent-visibility-owner-evidence-preflight.snapshot.json",
+    "wazuh_runtime_apply_preflight": "wazuh-runtime-controlled-apply-preflight.snapshot.json",
     "kali_status": "kali-integration-status.snapshot.json",
     "soc_control": "soc-siem-kali-wazuh-integration-control.snapshot.json",
     "alert_readability": "telegram-alert-readability-guard.snapshot.json",
@@ -35,6 +36,7 @@ _EXPECTED_SCHEMAS = {
     "wazuh_runtime": "wazuh_agent_visibility_runtime_gate_v1",
     "wazuh_live_metadata_gate": "iwooos_wazuh_readonly_live_metadata_env_gate_v1",
     "wazuh_owner_evidence_preflight": "wazuh_agent_visibility_owner_evidence_preflight_v1",
+    "wazuh_runtime_apply_preflight": "wazuh_runtime_controlled_apply_preflight_v1",
     "kali_status": "kali_integration_status_v1",
     "soc_control": "soc_siem_kali_wazuh_integration_control_v1",
     "alert_readability": "telegram_alert_readability_guard_v1",
@@ -69,13 +71,21 @@ def load_latest_iwooos_runtime_security_readback(
 ) -> dict[str, Any]:
     """Load and normalize the current IwoooS runtime security readback."""
     directory = security_dir or _DEFAULT_SECURITY_DIR
-    snapshots = {key: _load_snapshot(directory, key, filename) for key, filename in _SNAPSHOT_FILES.items()}
+    snapshots = {
+        key: _load_snapshot(directory, key, filename)
+        for key, filename in _SNAPSHOT_FILES.items()
+    }
     _require_runtime_boundaries(snapshots)
 
     owner_gap_summary = _summary(snapshots["owner_gap"])
     wazuh_summary = _summary(snapshots["wazuh_coverage"])
     live_metadata_gate_summary = _summary(snapshots["wazuh_live_metadata_gate"])
-    owner_evidence_preflight_summary = _summary(snapshots["wazuh_owner_evidence_preflight"])
+    owner_evidence_preflight_summary = _summary(
+        snapshots["wazuh_owner_evidence_preflight"]
+    )
+    runtime_apply_preflight_summary = _summary(
+        snapshots["wazuh_runtime_apply_preflight"]
+    )
     soc_summary = _summary(snapshots["soc_control"])
     alert_summary = _summary(snapshots["alert_readability"])
     dispatch_summary = _summary(snapshots["owner_dispatch"])
@@ -98,40 +108,60 @@ def load_latest_iwooos_runtime_security_readback(
         "source_refs": source_refs,
         "summary": {
             "source_snapshot_count": len(source_refs),
-            "p0_lane_count": 9,
+            "p0_lane_count": 10,
             "control_plane_visibility_percent": _average_percent(
                 soc_summary.get("coverage_percent_after_soc_integration_control"),
                 intrusion_summary.get("coverage_percent_after_prevention_control"),
                 _alert_contract_percent(alert_summary),
             ),
             "actual_runtime_acceptance_percent": 0,
-            "owner_response_received_count": _int(owner_gap_summary.get("owner_response_received_count")),
-            "owner_response_accepted_count": _int(owner_gap_summary.get("owner_response_accepted_count")),
+            "owner_response_received_count": _int(
+                owner_gap_summary.get("owner_response_received_count")
+            ),
+            "owner_response_accepted_count": _int(
+                owner_gap_summary.get("owner_response_accepted_count")
+            ),
             "redacted_evidence_refs_received_count": 0,
             "request_sent_count": _int(dispatch_summary.get("request_sent_count")),
-            "wazuh_expected_host_scope_count": _int(wazuh_summary.get("expected_host_scope_count")),
-            "wazuh_manager_registry_accepted_count": _int(wazuh_summary.get("manager_registry_accepted_count")),
-            "wazuh_transport_observed_count": _int(wazuh_summary.get("manager_transport_established_connection_count")),
+            "wazuh_expected_host_scope_count": _int(
+                wazuh_summary.get("expected_host_scope_count")
+            ),
+            "wazuh_manager_registry_accepted_count": _int(
+                wazuh_summary.get("manager_registry_accepted_count")
+            ),
+            "wazuh_transport_observed_count": _int(
+                wazuh_summary.get("manager_transport_established_connection_count")
+            ),
             "wazuh_dashboard_api_degraded_observed_count": _int(
                 wazuh_summary.get("dashboard_api_degraded_observed_count")
             ),
             "wazuh_live_route_http_status": live_wazuh["http_status"],
             "wazuh_live_route_degraded_count": live_wazuh["degraded_count"],
-            "wazuh_live_readonly_api_enabled_count": live_wazuh["readonly_api_enabled_count"],
+            "wazuh_live_readonly_api_enabled_count": live_wazuh[
+                "readonly_api_enabled_count"
+            ],
             "wazuh_live_agent_total": live_wazuh["agent_total"],
             "wazuh_live_agent_active": live_wazuh["agent_active"],
             "wazuh_live_registry_empty_count": live_wazuh["agent_registry_empty_count"],
-            "wazuh_live_below_expected_count": live_wazuh["agent_below_expected_minimum_count"],
-            "wazuh_live_metadata_available_count": live_wazuh["metadata_available_count"],
+            "wazuh_live_below_expected_count": live_wazuh[
+                "agent_below_expected_minimum_count"
+            ],
+            "wazuh_live_metadata_available_count": live_wazuh[
+                "metadata_available_count"
+            ],
             "wazuh_live_status": live_wazuh["status"],
             "wazuh_live_metadata_gate_owner_accepted_count": _int(
-                live_metadata_gate_summary.get("live_metadata_owner_response_accepted_count")
+                live_metadata_gate_summary.get(
+                    "live_metadata_owner_response_accepted_count"
+                )
             ),
             "wazuh_live_metadata_gate_secret_source_accepted_count": _int(
                 live_metadata_gate_summary.get("secret_source_metadata_accepted_count")
             ),
             "wazuh_live_metadata_gate_manager_health_accepted_count": _int(
-                live_metadata_gate_summary.get("wazuh_manager_health_ref_accepted_count")
+                live_metadata_gate_summary.get(
+                    "wazuh_manager_health_ref_accepted_count"
+                )
             ),
             "wazuh_live_metadata_gate_readonly_scope_accepted_count": _int(
                 live_metadata_gate_summary.get("readonly_account_scope_accepted_count")
@@ -172,12 +202,56 @@ def load_latest_iwooos_runtime_security_readback(
             "wazuh_owner_evidence_runtime_gate_count": _int(
                 owner_evidence_preflight_summary.get("runtime_gate_count")
             ),
-            "kali_active_scan_authorized_count": _int(soc_summary.get("kali_active_scan_authorized_count")),
-            "kali_execute_authorized_count": _int(soc_summary.get("kali_execute_authorized_count")),
-            "kali_finding_envelope_accepted_count": _int(soc_summary.get("kali_finding_envelope_accepted_count")),
-            "alert_formatter_contract_marker_count": _int(alert_summary.get("source_formatter_marker_count")),
-            "alert_receipt_runtime_send_count": _int(alert_summary.get("telegram_send_authorized_count")),
-            "intrusion_prevention_candidate_count": _int(intrusion_summary.get("urgent_prevention_candidate_count")),
+            "wazuh_runtime_apply_preflight_ready_count": _int(
+                runtime_apply_preflight_summary.get(
+                    "controlled_apply_preflight_ready_count"
+                )
+            ),
+            "wazuh_runtime_apply_target_selector_count": _int(
+                runtime_apply_preflight_summary.get("target_selector_count")
+            ),
+            "wazuh_runtime_apply_source_diff_count": _int(
+                runtime_apply_preflight_summary.get("source_of_truth_diff_count")
+            ),
+            "wazuh_runtime_apply_check_mode_plan_count": _int(
+                runtime_apply_preflight_summary.get("check_mode_plan_count")
+            ),
+            "wazuh_runtime_apply_dry_run_required_count": _int(
+                runtime_apply_preflight_summary.get("dry_run_required_count")
+            ),
+            "wazuh_runtime_apply_rollback_plan_count": _int(
+                runtime_apply_preflight_summary.get("rollback_plan_count")
+            ),
+            "wazuh_runtime_apply_post_apply_verifier_count": _int(
+                runtime_apply_preflight_summary.get("post_apply_verifier_count")
+            ),
+            "wazuh_runtime_apply_km_writeback_count": _int(
+                runtime_apply_preflight_summary.get("km_playbook_writeback_count")
+            ),
+            "wazuh_runtime_apply_owner_review_ready_count": _int(
+                runtime_apply_preflight_summary.get("owner_review_ready_count")
+            ),
+            "wazuh_runtime_apply_runtime_gate_count": _int(
+                runtime_apply_preflight_summary.get("runtime_gate_count")
+            ),
+            "kali_active_scan_authorized_count": _int(
+                soc_summary.get("kali_active_scan_authorized_count")
+            ),
+            "kali_execute_authorized_count": _int(
+                soc_summary.get("kali_execute_authorized_count")
+            ),
+            "kali_finding_envelope_accepted_count": _int(
+                soc_summary.get("kali_finding_envelope_accepted_count")
+            ),
+            "alert_formatter_contract_marker_count": _int(
+                alert_summary.get("source_formatter_marker_count")
+            ),
+            "alert_receipt_runtime_send_count": _int(
+                alert_summary.get("telegram_send_authorized_count")
+            ),
+            "intrusion_prevention_candidate_count": _int(
+                intrusion_summary.get("urgent_prevention_candidate_count")
+            ),
             "runtime_gate_count": runtime_gate_count,
         },
         "lanes": [
@@ -204,8 +278,12 @@ def load_latest_iwooos_runtime_security_readback(
                 "管理器清單交叉驗收已讀回；runtime gate 仍關閉",
                 {
                     "expected_hosts": wazuh_summary.get("expected_host_scope_count", 0),
-                    "transport_observed": wazuh_summary.get("manager_transport_established_connection_count", 0),
-                    "registry_accepted": wazuh_summary.get("manager_registry_accepted_count", 0),
+                    "transport_observed": wazuh_summary.get(
+                        "manager_transport_established_connection_count", 0
+                    ),
+                    "registry_accepted": wazuh_summary.get(
+                        "manager_registry_accepted_count", 0
+                    ),
                 },
                 ["docs/security/wazuh-managed-host-coverage-gate.snapshot.json"],
             ),
@@ -226,13 +304,19 @@ def load_latest_iwooos_runtime_security_readback(
             ),
             _lane(
                 "wazuh_live_metadata_gate",
-                snapshots["wazuh_live_metadata_gate"].get("status", "blocked_waiting_live_metadata_owner_response"),
+                snapshots["wazuh_live_metadata_gate"].get(
+                    "status", "blocked_waiting_live_metadata_owner_response"
+                ),
                 0,
                 "locked",
                 "補齊負責人回覆、機密中繼資料、管理節點健康、唯讀範圍與啟用後讀回",
                 {
-                    "route_readback": live_metadata_gate_summary.get("production_route_readback_passed_count", 0),
-                    "owner_accepted": live_metadata_gate_summary.get("live_metadata_owner_response_accepted_count", 0),
+                    "route_readback": live_metadata_gate_summary.get(
+                        "production_route_readback_passed_count", 0
+                    ),
+                    "owner_accepted": live_metadata_gate_summary.get(
+                        "live_metadata_owner_response_accepted_count", 0
+                    ),
                     "secret_metadata_accepted": live_metadata_gate_summary.get(
                         "secret_source_metadata_accepted_count",
                         0,
@@ -245,12 +329,16 @@ def load_latest_iwooos_runtime_security_readback(
                         "readonly_account_scope_accepted_count",
                         0,
                     ),
-                    "post_enable_readback": live_metadata_gate_summary.get("post_enable_readback_passed_count", 0),
+                    "post_enable_readback": live_metadata_gate_summary.get(
+                        "post_enable_readback_passed_count", 0
+                    ),
                     "live_query_authorized": live_metadata_gate_summary.get(
                         "wazuh_api_live_query_authorized_count",
                         0,
                     ),
-                    "runtime_gate": live_metadata_gate_summary.get("runtime_gate_count", 0),
+                    "runtime_gate": live_metadata_gate_summary.get(
+                        "runtime_gate_count", 0
+                    ),
                 },
                 ["docs/security/wazuh-readonly-live-metadata-env-gate.snapshot.json"],
             ),
@@ -264,19 +352,86 @@ def load_latest_iwooos_runtime_security_readback(
                 "locked",
                 "補齊 manager registry 脫敏封包、逐主機矩陣、Dashboard API 狀態與負責人決策",
                 {
-                    "required_fields": owner_evidence_preflight_summary.get("required_field_count", 0),
-                    "reviewer_checks": owner_evidence_preflight_summary.get("reviewer_check_count", 0),
-                    "outcome_lanes": owner_evidence_preflight_summary.get("outcome_lane_count", 0),
-                    "forbidden_payloads": owner_evidence_preflight_summary.get("forbidden_payload_count", 0),
-                    "owner_received": owner_evidence_preflight_summary.get("owner_evidence_received_count", 0),
-                    "owner_accepted": owner_evidence_preflight_summary.get("owner_evidence_accepted_count", 0),
+                    "required_fields": owner_evidence_preflight_summary.get(
+                        "required_field_count", 0
+                    ),
+                    "reviewer_checks": owner_evidence_preflight_summary.get(
+                        "reviewer_check_count", 0
+                    ),
+                    "outcome_lanes": owner_evidence_preflight_summary.get(
+                        "outcome_lane_count", 0
+                    ),
+                    "forbidden_payloads": owner_evidence_preflight_summary.get(
+                        "forbidden_payload_count", 0
+                    ),
+                    "owner_received": owner_evidence_preflight_summary.get(
+                        "owner_evidence_received_count", 0
+                    ),
+                    "owner_accepted": owner_evidence_preflight_summary.get(
+                        "owner_evidence_accepted_count", 0
+                    ),
                     "registry_export_accepted": owner_evidence_preflight_summary.get(
                         "registry_export_accepted_count",
                         0,
                     ),
-                    "runtime_gate": owner_evidence_preflight_summary.get("runtime_gate_count", 0),
+                    "runtime_gate": owner_evidence_preflight_summary.get(
+                        "runtime_gate_count", 0
+                    ),
                 },
-                ["docs/security/wazuh-agent-visibility-owner-evidence-preflight.snapshot.json"],
+                [
+                    "docs/security/wazuh-agent-visibility-owner-evidence-preflight.snapshot.json"
+                ],
+            ),
+            _lane(
+                "wazuh_runtime_controlled_apply_preflight",
+                snapshots["wazuh_runtime_apply_preflight"].get(
+                    "status",
+                    "controlled_apply_preflight_ready_no_runtime_action",
+                ),
+                45
+                if _int(
+                    runtime_apply_preflight_summary.get(
+                        "controlled_apply_preflight_ready_count"
+                    )
+                )
+                else 0,
+                "steady"
+                if _int(
+                    runtime_apply_preflight_summary.get(
+                        "controlled_apply_preflight_ready_count"
+                    )
+                )
+                else "locked",
+                "執行前仍需 allowlisted check-mode、dry-run evidence 與 post-apply verifier readback",
+                {
+                    "target_selectors": runtime_apply_preflight_summary.get(
+                        "target_selector_count", 0
+                    ),
+                    "source_diff": runtime_apply_preflight_summary.get(
+                        "source_of_truth_diff_count", 0
+                    ),
+                    "check_mode": runtime_apply_preflight_summary.get(
+                        "check_mode_plan_count", 0
+                    ),
+                    "dry_run": runtime_apply_preflight_summary.get(
+                        "dry_run_required_count", 0
+                    ),
+                    "rollback": runtime_apply_preflight_summary.get(
+                        "rollback_plan_count", 0
+                    ),
+                    "post_apply_verifier": runtime_apply_preflight_summary.get(
+                        "post_apply_verifier_count", 0
+                    ),
+                    "km_writeback": runtime_apply_preflight_summary.get(
+                        "km_playbook_writeback_count", 0
+                    ),
+                    "runtime_gate": runtime_apply_preflight_summary.get(
+                        "runtime_gate_count", 0
+                    ),
+                },
+                [
+                    "docs/security/wazuh-runtime-controlled-apply-preflight.snapshot.json"
+                ],
             ),
             _lane(
                 "wazuh_dashboard_api",
@@ -285,9 +440,13 @@ def load_latest_iwooos_runtime_security_readback(
                 "warn",
                 "儀表板 API、RBAC 與 TLS 修復後重新讀回",
                 {
-                    "dashboard_api_degraded": wazuh_summary.get("dashboard_api_degraded_observed_count", 0),
+                    "dashboard_api_degraded": wazuh_summary.get(
+                        "dashboard_api_degraded_observed_count", 0
+                    ),
                     "runtime_gate": wazuh_summary.get("runtime_gate_count", 0),
-                    "accepted_evidence": _accepted_evidence_count(snapshots["wazuh_runtime"]),
+                    "accepted_evidence": _accepted_evidence_count(
+                        snapshots["wazuh_runtime"]
+                    ),
                 },
                 [
                     "docs/security/wazuh-managed-host-coverage-gate.snapshot.json",
@@ -301,9 +460,15 @@ def load_latest_iwooos_runtime_security_readback(
                 "locked",
                 "資安觀測範圍與 finding envelope 先被接受",
                 {
-                    "active_scan_authorized": soc_summary.get("kali_active_scan_authorized_count", 0),
-                    "execute_authorized": soc_summary.get("kali_execute_authorized_count", 0),
-                    "finding_envelope_accepted": soc_summary.get("kali_finding_envelope_accepted_count", 0),
+                    "active_scan_authorized": soc_summary.get(
+                        "kali_active_scan_authorized_count", 0
+                    ),
+                    "execute_authorized": soc_summary.get(
+                        "kali_execute_authorized_count", 0
+                    ),
+                    "finding_envelope_accepted": soc_summary.get(
+                        "kali_finding_envelope_accepted_count", 0
+                    ),
                 },
                 [
                     "docs/security/kali-integration-status.snapshot.json",
@@ -317,37 +482,57 @@ def load_latest_iwooos_runtime_security_readback(
                 "warn",
                 "補齊告警路由 receipt 與實發驗證",
                 {
-                    "formatter_markers": alert_summary.get("source_formatter_marker_count", 0),
-                    "required_markers": alert_summary.get("required_output_marker_count", 0),
-                    "telegram_send": alert_summary.get("telegram_send_authorized_count", 0),
+                    "formatter_markers": alert_summary.get(
+                        "source_formatter_marker_count", 0
+                    ),
+                    "required_markers": alert_summary.get(
+                        "required_output_marker_count", 0
+                    ),
+                    "telegram_send": alert_summary.get(
+                        "telegram_send_authorized_count", 0
+                    ),
                 },
                 ["docs/security/telegram-alert-readability-guard.snapshot.json"],
             ),
             _lane(
                 "owner_dispatch",
-                snapshots["owner_dispatch"].get("status", "owner_request_draft_ready_not_dispatched"),
+                snapshots["owner_dispatch"].get(
+                    "status", "owner_request_draft_ready_not_dispatched"
+                ),
                 0,
                 "locked",
                 "正式負責人回覆封包送達與接受",
                 {
                     "request_drafts": dispatch_summary.get("request_draft_count", 0),
                     "request_sent": dispatch_summary.get("request_sent_count", 0),
-                    "owner_accepted": dispatch_summary.get("owner_response_accepted_count", 0),
+                    "owner_accepted": dispatch_summary.get(
+                        "owner_response_accepted_count", 0
+                    ),
                 },
                 ["docs/security/monitoring-owner-request-draft.snapshot.json"],
             ),
             _lane(
                 "intrusion_prevention",
                 "candidate_only_no_runtime_containment",
-                _int(intrusion_summary.get("coverage_percent_after_prevention_control")),
+                _int(
+                    intrusion_summary.get("coverage_percent_after_prevention_control")
+                ),
                 "warn",
                 "補脫敏證據參照與維護窗口",
                 {
-                    "urgent_candidates": intrusion_summary.get("urgent_prevention_candidate_count", 0),
-                    "evidence_received": intrusion_summary.get("evidence_ref_received_count", 0),
-                    "containment_accepted": intrusion_summary.get("containment_decision_accepted_count", 0),
+                    "urgent_candidates": intrusion_summary.get(
+                        "urgent_prevention_candidate_count", 0
+                    ),
+                    "evidence_received": intrusion_summary.get(
+                        "evidence_ref_received_count", 0
+                    ),
+                    "containment_accepted": intrusion_summary.get(
+                        "containment_decision_accepted_count", 0
+                    ),
                 },
-                ["docs/security/external-host-intrusion-prevention-control.snapshot.json"],
+                [
+                    "docs/security/external-host-intrusion-prevention-control.snapshot.json"
+                ],
             ),
         ],
         "boundaries": {
@@ -376,6 +561,7 @@ def load_latest_iwooos_runtime_security_readback(
             "Wazuh 正式只讀路由 disabled 或退化時仍是 P0 紅燈",
             "Wazuh 即時中繼資料必須先通過負責人、機密中繼資料、唯讀範圍與啟用後讀回",
             "Wazuh 負責人證據預檢 ready 不代表已收件、已接受或可啟用 active response",
+            "Wazuh controlled apply preflight ready 不代表 runtime gate 已開或已執行修復",
         ],
     }
 
@@ -403,7 +589,9 @@ def _int(value: Any) -> int:
     return value if isinstance(value, int) else 0
 
 
-def _wazuh_live_summary(payload: dict[str, Any] | None, http_status: int) -> dict[str, Any]:
+def _wazuh_live_summary(
+    payload: dict[str, Any] | None, http_status: int
+) -> dict[str, Any]:
     if not isinstance(payload, dict):
         return {
             "status": "not_checked_by_snapshot_loader",
@@ -428,7 +616,9 @@ def _wazuh_live_summary(payload: dict[str, Any] | None, http_status: int) -> dic
         "agent_total": _int(summary.get("agent_total")),
         "agent_active": _int(summary.get("agent_active")),
         "agent_registry_empty_count": _int(summary.get("agent_registry_empty_count")),
-        "agent_below_expected_minimum_count": _int(summary.get("agent_below_expected_minimum_count")),
+        "agent_below_expected_minimum_count": _int(
+            summary.get("agent_below_expected_minimum_count")
+        ),
         "metadata_available_count": 1 if metadata_available else 0,
     }
 
@@ -448,7 +638,11 @@ def _accepted_evidence_count(payload: dict[str, Any]) -> int:
     evidence = payload.get("required_evidence_before_green")
     if not isinstance(evidence, list):
         return 0
-    return sum(1 for item in evidence if isinstance(item, dict) and item.get("accepted") is True)
+    return sum(
+        1
+        for item in evidence
+        if isinstance(item, dict) and item.get("accepted") is True
+    )
 
 
 def _lane(
@@ -475,7 +669,14 @@ def _max_summary_count(
     snapshots: dict[str, dict[str, Any]],
     *keys: str,
 ) -> int:
-    return max((_int(_summary(payload).get(key)) for payload in snapshots.values() for key in keys), default=0)
+    return max(
+        (
+            _int(_summary(payload).get(key))
+            for payload in snapshots.values()
+            for key in keys
+        ),
+        default=0,
+    )
 
 
 def _require_runtime_boundaries(snapshots: dict[str, dict[str, Any]]) -> None:
@@ -505,7 +706,11 @@ def _require_runtime_boundaries(snapshots: dict[str, dict[str, Any]]) -> None:
         boundaries = payload.get("execution_boundaries")
         if isinstance(boundaries, dict):
             invalid = sorted(
-                key for key in _FALSE_BOUNDARY_KEYS if key in boundaries and boundaries.get(key) is not False
+                key
+                for key in _FALSE_BOUNDARY_KEYS
+                if key in boundaries and boundaries.get(key) is not False
             )
             if invalid:
-                raise ValueError(f"{name}: execution boundaries must remain false: {invalid}")
+                raise ValueError(
+                    f"{name}: execution boundaries must remain false: {invalid}"
+                )

apps/api/src/services/iwooos_wazuh_runtime_controlled_apply_preflight.py

@@ -0,0 +1,679 @@
+"""
+IwoooS Wazuh runtime controlled apply preflight readback.
+
+This service exposes a committed preflight contract and a no-persist validator
+for redacted controlled-apply packets. It never queries live Wazuh, reads host
+data, reads secrets, persists raw payloads, or authorizes runtime actions.
+"""
+
+from __future__ import annotations
+
+import json
+import re
+from pathlib import Path
+from typing import Any
+
+from src.services.snapshot_paths import default_security_dir
+
+_DEFAULT_SECURITY_DIR = default_security_dir(Path(__file__))
+_SNAPSHOT_FILE = "wazuh-runtime-controlled-apply-preflight.snapshot.json"
+_EXPECTED_SCHEMA = "wazuh_runtime_controlled_apply_preflight_v1"
+
+_REQUIRED_FALSE_BOUNDARIES = {
+    "active_scan_authorized",
+    "alertmanager_reload_authorized",
+    "auto_block_authorized",
+    "credentialed_scan_authorized",
+    "firewall_change_authorized",
+    "host_write_authorized",
+    "kali_execute_authorized",
+    "kali_scan_authorized",
+    "nginx_reload_authorized",
+    "production_write_authorized",
+    "runtime_execution_authorized",
+    "runtime_gate_open",
+    "secret_value_collection_allowed",
+    "telegram_send_authorized",
+    "wazuh_active_response_authorized",
+    "wazuh_api_live_query_authorized",
+}
+
+_SENSITIVE_TEXT_PATTERNS = {
+    "internal_ip": re.compile(
+        r"\b(?:10|127|172\.(?:1[6-9]|2\d|3[01])|192\.168)\.\d{1,3}\.\d{1,3}\b"
+    ),
+    "authorization_header": re.compile(r"Authorization\s*:", re.IGNORECASE),
+    "bearer_token": re.compile(r"Bearer\s+[A-Za-z0-9._-]{10,}", re.IGNORECASE),
+    "basic_auth": re.compile(r"Basic\s+[A-Za-z0-9+/=]{10,}", re.IGNORECASE),
+    "password_assignment": re.compile(
+        r"password\s*[:=]\s*['\"][^'\"]+['\"]", re.IGNORECASE
+    ),
+    "token_assignment": re.compile(r"token\s*[:=]\s*['\"][^'\"]+['\"]", re.IGNORECASE),
+    "cookie_assignment": re.compile(
+        r"cookie\s*[:=]\s*['\"][^'\"]+['\"]", re.IGNORECASE
+    ),
+    "client_keys": re.compile(r"client\.keys", re.IGNORECASE),
+    "private_key": re.compile(r"-----BEGIN [A-Z ]*PRIVATE KEY-----"),
+    "raw_session_text": re.compile(
+        r"(工作視窗|批准！繼續|source_thread_id|raw session)", re.IGNORECASE
+    ),
+}
+
+_FORBIDDEN_KEY_FRAGMENTS = {
+    "authorization_header",
+    "basic_auth",
+    "bearer_token",
+    "client_keys",
+    "cookie",
+    "env_file",
+    "full_cli_output",
+    "full_journal",
+    "hostname",
+    "internal_ip",
+    "password",
+    "private_key",
+    "raw_agent_identity",
+    "raw_dashboard_request",
+    "raw_env",
+    "raw_hostname",
+    "raw_log",
+    "raw_runtime_volume",
+    "raw_wazuh_payload",
+    "session",
+    "stored_api_password",
+    "token",
+    "unredacted_screenshot",
+    "wazuh_api_password",
+}
+
+_RUNTIME_ACTION_KEYS = {
+    "active_response_enable",
+    "agent_reenroll",
+    "agent_restart",
+    "ansible_apply",
+    "ansible_playbook_run",
+    "apply_now",
+    "argocd_sync",
+    "credentialed_scan",
+    "database_migration",
+    "docker_restart",
+    "execute_now",
+    "exploit_attempt",
+    "firewall_change",
+    "force_push",
+    "host_write",
+    "k8s_apply",
+    "kali_active_scan",
+    "nginx_reload",
+    "repo_ref_delete",
+    "runtime_execution_authorized",
+    "secret_rotation",
+    "systemd_restart",
+    "wazuh_active_response",
+    "wazuh_agent_reenroll",
+    "wazuh_agent_restart",
+    "wazuh_api_live_query",
+    "wazuh_manager_restart",
+    "workflow_trigger",
+}
+
+
+def load_latest_iwooos_wazuh_runtime_controlled_apply_preflight(
+    security_dir: Path | None = None,
+) -> dict[str, Any]:
+    """Load the public-safe Wazuh runtime controlled-apply preflight contract."""
+    directory = security_dir or _DEFAULT_SECURITY_DIR
+    snapshot = _load_snapshot(directory)
+    _require_boundaries(snapshot)
+
+    summary = _summary(snapshot)
+    merged_summary = {
+        "expected_scope_alias_count": _int(summary.get("expected_scope_alias_count")),
+        "target_selector_count": _int(summary.get("target_selector_count")),
+        "source_of_truth_diff_count": _int(summary.get("source_of_truth_diff_count")),
+        "check_mode_plan_count": _int(summary.get("check_mode_plan_count")),
+        "dry_run_required_count": _int(summary.get("dry_run_required_count")),
+        "rollback_plan_count": _int(summary.get("rollback_plan_count")),
+        "post_apply_verifier_count": _int(summary.get("post_apply_verifier_count")),
+        "km_playbook_writeback_count": _int(summary.get("km_playbook_writeback_count")),
+        "maintenance_window_required_count": _int(
+            summary.get("maintenance_window_required_count")
+        ),
+        "owner_review_ready_count": _int(summary.get("owner_review_ready_count")),
+        "controlled_apply_preflight_ready_count": _int(
+            summary.get("controlled_apply_preflight_ready_count")
+        ),
+        "controlled_apply_packet_received_count": _int(
+            summary.get("controlled_apply_packet_received_count")
+        ),
+        "controlled_apply_packet_accepted_count": _int(
+            summary.get("controlled_apply_packet_accepted_count")
+        ),
+        "controlled_apply_packet_quarantined_count": _int(
+            summary.get("controlled_apply_packet_quarantined_count")
+        ),
+        "controlled_apply_runtime_action_rejected_count": _int(
+            summary.get("controlled_apply_runtime_action_rejected_count")
+        ),
+        "forbidden_payload_count": _int(summary.get("forbidden_payload_count")),
+        "forbidden_action_count": _int(summary.get("forbidden_action_count")),
+        "runtime_gate_count": _int(summary.get("runtime_gate_count")),
+        "wazuh_api_live_query_authorized_count": _int(
+            summary.get("wazuh_api_live_query_authorized_count")
+        ),
+        "wazuh_active_response_authorized_count": _int(
+            summary.get("wazuh_active_response_authorized_count")
+        ),
+        "host_write_authorized_count": _int(summary.get("host_write_authorized_count")),
+        "secret_value_collection_allowed_count": _int(
+            summary.get("secret_value_collection_allowed_count")
+        ),
+    }
+
+    return {
+        "schema_version": "iwooos_wazuh_runtime_controlled_apply_preflight_readback_v1",
+        "source_schema_version": snapshot["schema_version"],
+        "status": snapshot.get(
+            "status", "controlled_apply_preflight_ready_no_runtime_action"
+        ),
+        "mode": snapshot.get(
+            "mode", "committed_preflight_readback_no_live_wazuh_no_secret_collection"
+        ),
+        "source_refs": [
+            f"docs/security/{_SNAPSHOT_FILE}",
+        ],
+        "controlled_apply_packet_validation_endpoint": (
+            "/api/v1/iwooos/wazuh-runtime-controlled-apply-preflight/validate-controlled-apply-packet"
+        ),
+        "controlled_apply_packet_validation_mode": "no_persist_preflight_review_no_runtime_action",
+        "summary": merged_summary,
+        "target_selectors": _target_selectors(snapshot.get("target_selectors")),
+        "required_packet_fields": _strings(snapshot.get("required_packet_fields")),
+        "preflight_items": _preflight_items(snapshot.get("preflight_items")),
+        "outcome_lanes": _strings(snapshot.get("outcome_lanes")),
+        "forbidden_payloads": _strings(snapshot.get("forbidden_payloads")),
+        "forbidden_actions": _strings(snapshot.get("forbidden_actions")),
+        "boundary_markers": _boundary_markers(merged_summary),
+        "boundaries": {
+            "payload_persisted": False,
+            "wazuh_api_live_query_authorized": False,
+            "wazuh_active_response_authorized": False,
+            "wazuh_agent_reenroll_authorized": False,
+            "wazuh_agent_restart_authorized": False,
+            "wazuh_manager_restart_authorized": False,
+            "host_write_authorized": False,
+            "active_scan_authorized": False,
+            "kali_execute_authorized": False,
+            "nginx_reload_authorized": False,
+            "secret_value_collection_allowed": False,
+            "runtime_execution_authorized": False,
+            "runtime_gate_open": False,
+            "not_authorization": True,
+        },
+        "no_false_green_rules": _strings(snapshot.get("no_false_green_rules")),
+    }
+
+
+def validate_iwooos_wazuh_runtime_controlled_apply_packet(
+    packet: dict[str, Any],
+    security_dir: Path | None = None,
+) -> dict[str, Any]:
+    """Validate one redacted controlled-apply preflight packet without applying it."""
+    contract = load_latest_iwooos_wazuh_runtime_controlled_apply_preflight(security_dir)
+    snapshot = _load_snapshot(security_dir or _DEFAULT_SECURITY_DIR)
+    required_fields = _strings(snapshot.get("required_packet_fields"))
+    expected_aliases = {
+        item["node_alias"]
+        for item in contract["target_selectors"]
+        if item.get("node_alias")
+    }
+
+    findings: list[dict[str, Any]] = []
+    if not isinstance(packet, dict):
+        findings.append(
+            _finding(
+                "CAP-01",
+                "blocker",
+                "request_controlled_apply_packet_supplement",
+                "controlled apply packet must be a JSON object.",
+                [],
+            )
+        )
+        return _validation_result(
+            contract, "request_controlled_apply_packet_supplement", findings
+        )
+
+    sensitive_hits = _collect_sensitive_hits(packet)
+    if sensitive_hits:
+        findings.append(
+            _finding(
+                "CAP-04",
+                "critical",
+                "quarantine_sensitive_payload",
+                "controlled apply packet contains forbidden or likely unredacted content; response omits raw values.",
+                [hit["path"] for hit in sensitive_hits[:12]],
+                {"categories": sorted({hit["category"] for hit in sensitive_hits})},
+            )
+        )
+        return _validation_result(contract, "quarantine_sensitive_payload", findings)
+
+    runtime_hits = _collect_runtime_action_hits(packet)
+    if runtime_hits:
+        findings.append(
+            _finding(
+                "CAP-05",
+                "critical",
+                "reject_runtime_action_request",
+                "controlled apply packet requested runtime execution; this validator only reviews preflight evidence.",
+                runtime_hits[:12],
+            )
+        )
+        return _validation_result(contract, "reject_runtime_action_request", findings)
+
+    missing_fields = [
+        field for field in required_fields if not _present(packet.get(field))
+    ]
+    if missing_fields:
+        findings.append(
+            _finding(
+                "CAP-01",
+                "blocker",
+                "request_controlled_apply_packet_supplement",
+                "controlled apply packet is missing required preflight fields.",
+                missing_fields,
+            )
+        )
+
+    alias_issue = _validate_aliases(
+        packet.get("target_selector_aliases"), expected_aliases
+    )
+    if alias_issue:
+        findings.append(
+            _finding(
+                "CAP-02",
+                "blocker",
+                "request_target_selector_fix",
+                alias_issue,
+                ["target_selector_aliases"],
+            )
+        )
+
+    intent = packet.get("controlled_apply_intent")
+    if intent != "prepare_controlled_apply_preflight_only":
+        findings.append(
+            _finding(
+                "CAP-03",
+                "blocker",
+                "request_controlled_apply_intent_fix",
+                "controlled_apply_intent must be prepare_controlled_apply_preflight_only.",
+                ["controlled_apply_intent"],
+            )
+        )
+
+    if packet.get("runtime_boundary_ack") != "runtime_gate_remains_closed":
+        findings.append(
+            _finding(
+                "CAP-06",
+                "blocker",
+                "request_runtime_boundary_ack_fix",
+                "runtime_boundary_ack must state runtime_gate_remains_closed.",
+                ["runtime_boundary_ack"],
+            )
+        )
+
+    outcome = (
+        _first_blocking_lane(findings)
+        or "accepted_for_controlled_apply_preflight_review_only"
+    )
+    if outcome == "accepted_for_controlled_apply_preflight_review_only":
+        findings.append(
+            _finding(
+                "CAP-07",
+                "info",
+                "controlled_apply_preflight_review_ready",
+                "controlled apply preflight packet passed no-persist review; runtime gate remains closed.",
+                [
+                    "source_of_truth_diff_ref",
+                    "check_mode_plan_ref",
+                    "post_apply_verifier_ref",
+                ],
+            )
+        )
+    return _validation_result(contract, outcome, findings)
+
+
+def _load_snapshot(directory: Path) -> dict[str, Any]:
+    path = directory / _SNAPSHOT_FILE
+    if not path.is_file():
+        raise FileNotFoundError(
+            f"{path}: Wazuh runtime controlled apply preflight snapshot not found"
+        )
+    with path.open(encoding="utf-8") as handle:
+        payload = json.load(handle)
+    if not isinstance(payload, dict):
+        raise ValueError(f"{path}: expected JSON object")
+    if payload.get("schema_version") != _EXPECTED_SCHEMA:
+        raise ValueError(f"{path}: expected schema_version={_EXPECTED_SCHEMA}")
+    return payload
+
+
+def _summary(payload: dict[str, Any]) -> dict[str, Any]:
+    summary = payload.get("summary")
+    return summary if isinstance(summary, dict) else {}
+
+
+def _int(value: Any) -> int:
+    return value if isinstance(value, int) else 0
+
+
+def _strings(value: Any) -> list[str]:
+    if not isinstance(value, list):
+        return []
+    return [item for item in value if isinstance(item, str)]
+
+
+def _target_selectors(value: Any) -> list[dict[str, Any]]:
+    if not isinstance(value, list):
+        return []
+    selectors: list[dict[str, Any]] = []
+    for item in value:
+        if not isinstance(item, dict):
+            continue
+        selectors.append(
+            {
+                "node_alias": str(item.get("node_alias", "")),
+                "scope": str(item.get("scope", "")),
+                "selector_kind": str(item.get("selector_kind", "")),
+                "runtime_write_allowed": item.get("runtime_write_allowed") is True,
+            }
+        )
+    return selectors
+
+
+def _preflight_items(value: Any) -> list[dict[str, Any]]:
+    if not isinstance(value, list):
+        return []
+    items: list[dict[str, Any]] = []
+    for item in value:
+        if not isinstance(item, dict):
+            continue
+        items.append(
+            {
+                "item_id": str(item.get("item_id", "")),
+                "title": str(item.get("title", "")),
+                "state_key": str(item.get("state_key", "")),
+                "ready": item.get("ready") is True,
+                "required_fields": _strings(item.get("required_fields")),
+                "next_gate": str(item.get("next_gate", "")),
+            }
+        )
+    return items
+
+
+def _boundary_markers(summary: dict[str, int]) -> list[str]:
+    return [
+        "wazuh_runtime_controlled_apply_preflight_visible=true",
+        "wazuh_runtime_controlled_apply_packet_validation_api_available=true",
+        f"wazuh_runtime_controlled_apply_target_selector_count={summary['target_selector_count']}",
+        f"wazuh_runtime_controlled_apply_source_of_truth_diff_count={summary['source_of_truth_diff_count']}",
+        f"wazuh_runtime_controlled_apply_check_mode_plan_count={summary['check_mode_plan_count']}",
+        f"wazuh_runtime_controlled_apply_rollback_plan_count={summary['rollback_plan_count']}",
+        f"wazuh_runtime_controlled_apply_post_apply_verifier_count={summary['post_apply_verifier_count']}",
+        f"wazuh_runtime_controlled_apply_km_playbook_writeback_count={summary['km_playbook_writeback_count']}",
+        f"wazuh_runtime_controlled_apply_preflight_ready_count={summary['controlled_apply_preflight_ready_count']}",
+        "wazuh_runtime_controlled_apply_runtime_gate_count=0",
+        "wazuh_api_live_query_authorized=false",
+        "wazuh_active_response_authorized=false",
+        "host_write_authorized=false",
+        "secret_value_collection_allowed=false",
+        "not_authorization=true",
+    ]
+
+
+def _require_boundaries(payload: dict[str, Any]) -> None:
+    summary = _summary(payload)
+    for key in (
+        "runtime_gate_count",
+        "wazuh_api_live_query_authorized_count",
+        "wazuh_active_response_authorized_count",
+        "host_write_authorized_count",
+        "secret_value_collection_allowed_count",
+        "controlled_apply_packet_received_count",
+        "controlled_apply_packet_accepted_count",
+        "controlled_apply_packet_quarantined_count",
+        "controlled_apply_runtime_action_rejected_count",
+    ):
+        if _int(summary.get(key)) != 0:
+            raise ValueError(
+                f"Wazuh runtime controlled apply preflight summary.{key} must remain 0"
+            )
+
+    expected_alias_count = _int(summary.get("expected_scope_alias_count"))
+    target_selector_count = _int(summary.get("target_selector_count"))
+    target_selectors = _target_selectors(payload.get("target_selectors"))
+    if (
+        target_selector_count != expected_alias_count
+        or len(target_selectors) != expected_alias_count
+    ):
+        raise ValueError(
+            "Wazuh runtime controlled apply preflight target selectors must match expected alias count"
+        )
+    if any(item.get("runtime_write_allowed") is True for item in target_selectors):
+        raise ValueError(
+            "Wazuh runtime controlled apply preflight target selectors must not allow runtime writes"
+        )
+
+    readiness_keys = (
+        "source_of_truth_diff_count",
+        "check_mode_plan_count",
+        "dry_run_required_count",
+        "rollback_plan_count",
+        "post_apply_verifier_count",
+        "km_playbook_writeback_count",
+        "maintenance_window_required_count",
+        "owner_review_ready_count",
+        "controlled_apply_preflight_ready_count",
+    )
+    if any(_int(summary.get(key)) <= 0 for key in readiness_keys):
+        raise ValueError(
+            "Wazuh runtime controlled apply preflight readiness counters must be positive"
+        )
+
+    boundaries = payload.get("execution_boundaries")
+    if not isinstance(boundaries, dict):
+        raise ValueError(
+            "Wazuh runtime controlled apply preflight execution_boundaries missing"
+        )
+    for key in _REQUIRED_FALSE_BOUNDARIES:
+        if boundaries.get(key) is not False:
+            raise ValueError(
+                f"Wazuh runtime controlled apply preflight execution_boundaries.{key} must remain false"
+            )
+    if boundaries.get("not_authorization") is not True:
+        raise ValueError(
+            "Wazuh runtime controlled apply preflight not_authorization must remain true"
+        )
+
+
+def _validation_result(
+    contract: dict[str, Any],
+    outcome_lane: str,
+    findings: list[dict[str, Any]],
+) -> dict[str, Any]:
+    accepted = outcome_lane == "accepted_for_controlled_apply_preflight_review_only"
+    quarantined = outcome_lane == "quarantine_sensitive_payload"
+    rejected_runtime = outcome_lane == "reject_runtime_action_request"
+    supplement_required = not accepted and not quarantined and not rejected_runtime
+    return {
+        "schema_version": "iwooos_wazuh_runtime_controlled_apply_packet_validation_result_v1",
+        "contract_schema_version": contract["schema_version"],
+        "status": outcome_lane,
+        "mode": "no_persist_controlled_apply_preflight_review_no_runtime_no_secret_collection",
+        "outcome_lane": outcome_lane,
+        "accepted_for_controlled_apply_preflight_review_only": accepted,
+        "quarantined": quarantined,
+        "runtime_action_rejected": rejected_runtime,
+        "summary": {
+            "controlled_apply_packet_received_count": 1,
+            "controlled_apply_preflight_ready_count": 1 if accepted else 0,
+            "controlled_apply_packet_supplement_required_count": 1
+            if supplement_required
+            else 0,
+            "controlled_apply_packet_quarantined_count": 1 if quarantined else 0,
+            "controlled_apply_runtime_action_rejected_count": 1
+            if rejected_runtime
+            else 0,
+            "runtime_gate_count": 0,
+            "wazuh_api_live_query_authorized_count": 0,
+            "wazuh_active_response_authorized_count": 0,
+            "host_write_authorized_count": 0,
+            "secret_value_collection_allowed_count": 0,
+            "finding_count": len(findings),
+        },
+        "validation_findings": findings,
+        "boundary_markers": [
+            "wazuh_runtime_controlled_apply_packet_validation_received_count=1",
+            f"wazuh_runtime_controlled_apply_packet_validation_ready_count={1 if accepted else 0}",
+            f"wazuh_runtime_controlled_apply_packet_validation_quarantined_count={1 if quarantined else 0}",
+            f"wazuh_runtime_controlled_apply_packet_validation_runtime_action_rejected_count={1 if rejected_runtime else 0}",
+            "wazuh_runtime_controlled_apply_packet_validation_runtime_gate_count=0",
+            "wazuh_runtime_controlled_apply_packet_validation_no_persist=true",
+            "wazuh_api_live_query_authorized=false",
+            "wazuh_active_response_authorized=false",
+            "host_write_authorized=false",
+            "secret_value_collection_allowed=false",
+            "not_authorization=true",
+        ],
+        "boundaries": {
+            "payload_persisted": False,
+            "wazuh_api_live_query_authorized": False,
+            "wazuh_active_response_authorized": False,
+            "wazuh_agent_reenroll_authorized": False,
+            "wazuh_agent_restart_authorized": False,
+            "wazuh_manager_restart_authorized": False,
+            "host_write_authorized": False,
+            "active_scan_authorized": False,
+            "kali_execute_authorized": False,
+            "nginx_reload_authorized": False,
+            "secret_value_collection_allowed": False,
+            "runtime_execution_authorized": False,
+            "runtime_gate_open": False,
+            "not_authorization": True,
+        },
+        "next_gate": "run_allowlisted_check_mode_and_post_apply_verifier_preflight"
+        if accepted
+        else "controlled_apply_packet_fix_and_resubmit",
+    }
+
+
+def _finding(
+    check_id: str,
+    severity: str,
+    lane: str,
+    message: str,
+    field_paths: list[str],
+    extra: dict[str, Any] | None = None,
+) -> dict[str, Any]:
+    payload: dict[str, Any] = {
+        "check_id": check_id,
+        "severity": severity,
+        "lane": lane,
+        "message": message,
+        "field_paths": field_paths,
+    }
+    if extra:
+        payload.update(extra)
+    return payload
+
+
+def _present(value: Any) -> bool:
+    if value is None:
+        return False
+    if isinstance(value, str):
+        return bool(value.strip())
+    if isinstance(value, list | dict | tuple | set):
+        return bool(value)
+    return True
+
+
+def _validate_aliases(value: Any, expected_aliases: set[str]) -> str | None:
+    aliases = value if isinstance(value, list) else []
+    if not aliases or not all(isinstance(item, str) for item in aliases):
+        return "target_selector_aliases must be an array of public alias strings."
+    alias_set = set(aliases)
+    if len(aliases) != len(alias_set):
+        return "target_selector_aliases must not contain duplicates."
+    if alias_set != expected_aliases:
+        missing = sorted(expected_aliases - alias_set)
+        extra = sorted(alias_set - expected_aliases)
+        return f"target_selector_aliases must match expected public aliases; missing={missing} extra={extra}"
+    return None
+
+
+def _collect_sensitive_hits(value: Any, path: str = "$") -> list[dict[str, str]]:
+    hits: list[dict[str, str]] = []
+    if isinstance(value, dict):
+        for key, item in value.items():
+            key_text = str(key)
+            key_lower = key_text.lower()
+            for fragment in _FORBIDDEN_KEY_FRAGMENTS:
+                if fragment in key_lower:
+                    hits.append(
+                        {
+                            "path": f"{path}.{key_text}",
+                            "category": f"forbidden_key:{fragment}",
+                        }
+                    )
+            hits.extend(_collect_sensitive_hits(item, f"{path}.{key_text}"))
+        return hits
+    if isinstance(value, list):
+        for index, item in enumerate(value):
+            hits.extend(_collect_sensitive_hits(item, f"{path}[{index}]"))
+        return hits
+    if isinstance(value, str):
+        for category, pattern in _SENSITIVE_TEXT_PATTERNS.items():
+            if pattern.search(value):
+                hits.append({"path": path, "category": category})
+    return hits
+
+
+def _collect_runtime_action_hits(value: Any, path: str = "$") -> list[str]:
+    hits: list[str] = []
+    if isinstance(value, dict):
+        for key, item in value.items():
+            key_text = str(key)
+            normalized_key = key_text.lower().replace("-", "_").replace(" ", "_")
+            if normalized_key in _RUNTIME_ACTION_KEYS and item not in (
+                False,
+                None,
+                "",
+                [],
+                {},
+            ):
+                hits.append(f"{path}.{key_text}")
+            hits.extend(_collect_runtime_action_hits(item, f"{path}.{key_text}"))
+        return hits
+    if isinstance(value, list):
+        for index, item in enumerate(value):
+            hits.extend(_collect_runtime_action_hits(item, f"{path}[{index}]"))
+        return hits
+    if isinstance(value, str):
+        normalized = value.lower().replace("-", "_").replace(" ", "_")
+        if normalized in _RUNTIME_ACTION_KEYS:
+            hits.append(path)
+    return hits
+
+
+def _first_blocking_lane(findings: list[dict[str, Any]]) -> str | None:
+    severity_order = {"critical": 0, "blocker": 1, "warn": 2, "info": 3}
+    blocking = [
+        finding
+        for finding in findings
+        if finding.get("severity") in {"critical", "blocker"}
+    ]
+    if not blocking:
+        return None
+    blocking.sort(
+        key=lambda finding: severity_order.get(str(finding.get("severity")), 99)
+    )
+    return str(blocking[0].get("lane") or "request_controlled_apply_packet_supplement")

apps/api/tests/test_ai_agent_market_radar_readback.py

@@ -19,7 +19,7 @@ def test_ai_agent_market_radar_readback_committed_snapshot_is_safe():
     assert payload["summary"]["source_failures"] == 0
     assert payload["summary"]["replacement_decisions_approved"] == 0
     assert "gitea_main_deploy_marker" not in payload["source_scope"]
-    assert payload["source_scope"]["gitea_main_evidence_basis_commit"] == "61cf5024"
+    assert payload["source_scope"]["gitea_main_evidence_basis_commit"] == "8f402983e"
 
     policy = payload["policy"]
     assert policy["read_only"] is True
@@ -49,7 +49,7 @@ def test_ai_agent_market_radar_readback_contains_market_practice_plan():
         for row in payload["market_practice_alignment"]
     }
     assert practices["多 Agent handoff / specialist delegation"] == "partially_modeled"
-    assert practices["Durable execution / persistence / human-in-the-loop"] == (
+    assert practices["Durable execution / persistence / controlled review loop"] == (
         "needed_for_incident_loop"
     )
 

apps/api/tests/test_delivery_closure_workbench_api.py

@@ -25,6 +25,9 @@ def test_delivery_closure_workbench_endpoint_returns_product_summary():
     assert data["summary"]["refs_sync_authorized"] is True
     assert data["summary"]["workflow_trigger_authorized"] is True
     assert data["summary"]["github_write_channel_ready"] is False
+    assert data["summary"]["github_account_status"] == "suspended"
+    assert data["summary"]["github_account_suspended"] is True
+    assert data["summary"]["github_api_forbidden_count"] == 6
     assert data["summary"]["github_controlled_apply_ready_count"] == 0
     assert data["summary"]["github_blocked_preflight_target_count"] == 5
     assert data["summary"]["secret_values_collected"] is False
@@ -52,13 +55,15 @@ def test_delivery_closure_workbench_endpoint_returns_product_summary():
     assert lanes["github"]["blocker_count"] == 5
     assert (
         lanes["github"]["status"]
-        == "blocked_github_write_channel_and_source_preflight_required"
+        == "blocked_github_account_suspended_and_write_channel_required"
     )
     assert lanes["github"]["metric"]["verified"] == 4
     assert lanes["github"]["metric"]["total"] == 9
     assert lanes["github"]["metric"]["controlled_apply_ready"] == 0
     assert lanes["github"]["metric"]["blocked_preflight"] == 5
     assert lanes["github"]["metric"]["write_channel_ready"] is False
+    assert lanes["github"]["metric"]["github_account_status"] == "suspended"
+    assert lanes["github"]["metric"]["github_account_suspended"] is True
     assert all(0 <= lane["completion_percent"] <= 100 for lane in lanes.values())
     assert all(lane["tone"] in {"ok", "warn", "danger"} for lane in lanes.values())
 

apps/api/tests/test_github_target_private_backup_evidence_gate.py

@@ -70,7 +70,10 @@ def test_load_github_target_private_backup_evidence_gate_from_committed_snapshot
         snapshot["summary"]["github_missing_target_controlled_apply_ready_count"] == 0
     )
     assert snapshot["summary"]["github_missing_target_blocked_preflight_count"] == 5
-    assert snapshot["summary"]["github_missing_target_github_404_count"] == 5
+    assert snapshot["summary"]["github_missing_target_github_404_count"] == 0
+    assert snapshot["summary"]["github_account_status"] == "suspended"
+    assert snapshot["summary"]["github_account_suspended"] is True
+    assert snapshot["summary"]["github_api_forbidden_count"] == 6
     assert snapshot["summary"]["private_backup_verified_count"] == 4
     assert snapshot["summary"]["private_visibility_verified_count"] == 4
     assert snapshot["summary"]["safe_credential_required_count"] == 9
@@ -228,14 +231,18 @@ def test_load_github_target_private_backup_evidence_gate_from_committed_snapshot
         == "github_target_controlled_execution_preflight_v1"
     )
     assert controlled_preflight["status"] == (
-        "blocked_github_write_channel_and_source_preflight_required"
+        "blocked_github_account_suspended_and_write_channel_required"
     )
     assert controlled_preflight["authorization_ready"] is True
     assert controlled_preflight["preflight_ready"] is False
     assert controlled_preflight["github_write_channel_ready"] is False
+    assert controlled_preflight["github_account_status"] == "suspended"
+    assert controlled_preflight["github_account_suspended"] is True
+    assert controlled_preflight["github_api_forbidden_count"] == 6
     assert controlled_preflight["github_create_repo_channel_ready"] is False
     assert controlled_preflight["github_refs_sync_channel_ready"] is False
-    assert controlled_preflight["github_connector_missing_target_404_count"] == 5
+    assert controlled_preflight["source_preflight_ready_count"] == 5
+    assert controlled_preflight["github_connector_missing_target_404_count"] == 0
     assert controlled_preflight["blocked_preflight_target_count"] == 5
     assert controlled_preflight["controlled_apply_ready_count"] == 0
     assert (
@@ -315,10 +322,14 @@ def test_load_github_target_private_backup_evidence_gate_from_committed_snapshot
     assert targets["owenhytsai/ewoooc"]["refs_sync_authorized"] is True
     assert targets["owenhytsai/ewoooc"]["execution_ready"] is True
     assert targets["owenhytsai/ewoooc"]["controlled_apply_ready"] is False
-    assert targets["owenhytsai/ewoooc"]["source_preflight_ready"] is False
-    assert targets["owenhytsai/ewoooc"]["canonical_source_ready"] is False
+    assert targets["owenhytsai/ewoooc"]["source_preflight_ready"] is True
+    assert targets["owenhytsai/ewoooc"]["canonical_source_ready"] is True
     assert (
-        "github_create_repo_channel_unavailable"
+        targets["owenhytsai/ewoooc"]["canonical_source_sha"]
+        == "f3e412cd211f5e4601204b256aeb95eae073b441"
+    )
+    assert (
+        "github_account_suspended_403"
         in targets["owenhytsai/ewoooc"]["controlled_apply_blockers"]
     )
     assert targets["owenhytsai/ewoooc"]["private_backup_verified"] is False
@@ -362,17 +373,20 @@ def test_load_github_target_controlled_execution_preflight_from_committed_snapsh
     )
     assert (
         preflight["status"]
-        == "blocked_github_write_channel_and_source_preflight_required"
+        == "blocked_github_account_suspended_and_write_channel_required"
     )
     assert preflight["authorization_ready"] is True
     assert preflight["preflight_ready"] is False
     assert preflight["github_write_channel_ready"] is False
+    assert preflight["github_account_status"] == "suspended"
+    assert preflight["github_account_suspended"] is True
+    assert preflight["github_api_forbidden_count"] == 6
     assert preflight["github_create_repo_channel_ready"] is False
     assert preflight["github_refs_sync_channel_ready"] is False
-    assert preflight["source_preflight_ready_count"] == 0
+    assert preflight["source_preflight_ready_count"] == 5
     assert preflight["controlled_apply_ready_count"] == 0
     assert preflight["blocked_preflight_target_count"] == 5
-    assert preflight["github_connector_missing_target_404_count"] == 5
+    assert preflight["github_connector_missing_target_404_count"] == 0
     assert preflight["operation_boundaries"]["controlled_apply_allowed"] is False
     assert preflight["operation_boundaries"]["secret_value_collection_allowed"] is False
     assert "private_clone_url_credential" in preflight["still_forbidden"]
@@ -381,9 +395,13 @@ def test_load_github_target_controlled_execution_preflight_from_committed_snapsh
         target_by_repo["owenhytsai/bitan-pharmacy"]["controlled_apply_ready"] is False
     )
     assert (
-        "local_worktree_has_tracked_changes"
+        "github_account_suspended_403"
         in target_by_repo["owenhytsai/bitan-pharmacy"]["blockers"]
     )
+    assert (
+        target_by_repo["owenhytsai/bitan-pharmacy"]["canonical_source_sha"]
+        == "e122c8cbd9522999fd9844c2b63790fadcc89c20"
+    )
     assert target_by_repo["owenhytsai/VibeWork"]["refs_sync_apply_ready"] is False
 
 

apps/api/tests/test_github_target_private_backup_evidence_gate_api.py

@@ -37,7 +37,10 @@ def test_github_target_private_backup_evidence_gate_endpoint_returns_read_only_g
     assert data["summary"]["github_refs_sync_channel_ready"] is False
     assert data["summary"]["github_missing_target_controlled_apply_ready_count"] == 0
     assert data["summary"]["github_missing_target_blocked_preflight_count"] == 5
-    assert data["summary"]["github_missing_target_github_404_count"] == 5
+    assert data["summary"]["github_missing_target_github_404_count"] == 0
+    assert data["summary"]["github_account_status"] == "suspended"
+    assert data["summary"]["github_account_suspended"] is True
+    assert data["summary"]["github_api_forbidden_count"] == 6
     assert data["summary"]["private_backup_verified_count"] == 4
     assert data["summary"]["private_visibility_verified_count"] == 4
     assert data["summary"]["safe_credential_evidence_intake_ready"] is True
@@ -141,22 +144,26 @@ def test_github_target_controlled_execution_preflight_endpoint_returns_write_gap
     data = response.json()
     assert data["schema_version"] == "github_target_controlled_execution_preflight_v1"
     assert (
-        data["status"] == "blocked_github_write_channel_and_source_preflight_required"
+        data["status"]
+        == "blocked_github_account_suspended_and_write_channel_required"
     )
     assert data["authorization_ready"] is True
     assert data["preflight_ready"] is False
     assert data["github_write_channel_ready"] is False
+    assert data["github_account_status"] == "suspended"
+    assert data["github_account_suspended"] is True
+    assert data["github_api_forbidden_count"] == 6
     assert data["github_create_repo_channel_ready"] is False
     assert data["github_refs_sync_channel_ready"] is False
-    assert data["source_preflight_ready_count"] == 0
+    assert data["source_preflight_ready_count"] == 5
     assert data["controlled_apply_ready_count"] == 0
     assert data["blocked_preflight_target_count"] == 5
-    assert data["github_connector_missing_target_404_count"] == 5
+    assert data["github_connector_missing_target_404_count"] == 0
     assert data["operation_boundaries"]["controlled_apply_allowed"] is False
     assert data["operation_boundaries"]["secret_value_collection_allowed"] is False
     assert data["tool_channel_readback"]["gh_cli_write_ready"] is False
     assert data["targets"][0]["controlled_apply_ready"] is False
-    assert "github_create_repo_channel_unavailable" in data["targets"][0]["blockers"]
+    assert "github_account_suspended_403" in data["targets"][0]["blockers"]
     assert "192.168.0." not in response.text
 
 

apps/api/tests/test_iwooos_runtime_security_readback.py

@@ -7,6 +7,9 @@ from src.api.v1.iwooos import router
 from src.services.iwooos_runtime_security_readback import (
     load_latest_iwooos_runtime_security_readback,
 )
+from src.services.iwooos_wazuh_runtime_controlled_apply_preflight import (
+    load_latest_iwooos_wazuh_runtime_controlled_apply_preflight,
+)
 
 
 def _client() -> TestClient:
@@ -15,13 +18,39 @@ def _client() -> TestClient:
     return TestClient(app)
 
 
+def _valid_runtime_controlled_apply_packet() -> dict[str, object]:
+    return {
+        "controlled_apply_intent": "prepare_controlled_apply_preflight_only",
+        "target_selector_aliases": [
+            "managed_core_node_a",
+            "managed_core_node_b",
+            "managed_core_node_c",
+            "managed_edge_node_a",
+            "managed_edge_node_b",
+            "managed_lab_node_a",
+        ],
+        "source_of_truth_diff_ref": "docs/security/wazuh-runtime-controlled-apply-preflight.snapshot.json#source-diff",
+        "check_mode_plan_ref": "playbooks/wazuh-controlled-apply-check-mode#redacted-plan",
+        "dry_run_evidence_ref": "evidence/iwooos/wazuh-runtime-dry-run-redacted-v1",
+        "blast_radius_statement": "public aliases only; no live Wazuh query and no host write in this preflight",
+        "rollback_plan_ref": "playbooks/wazuh-controlled-apply-rollback#redacted-plan",
+        "post_apply_verifier_ref": "verifiers/iwooos-wazuh-post-apply-readback#public-safe",
+        "km_playbook_writeback_ref": "km/playbook-trust/wazuh-controlled-apply-preflight-v1",
+        "maintenance_window": "low-traffic-window-required-before-any-future-apply",
+        "followup_owner": "iwooos-security-reviewer",
+        "rollback_owner": "iwooos-security-reviewer",
+        "audit_receipt_ref": "audit/iwooos-wazuh-controlled-apply-preflight-redacted-v1",
+        "runtime_boundary_ack": "runtime_gate_remains_closed",
+    }
+
+
 def test_iwooos_runtime_security_readback_preserves_zero_runtime_gates() -> None:
     payload = load_latest_iwooos_runtime_security_readback()
 
     assert payload["schema_version"] == "iwooos_runtime_security_readback_v1"
     assert payload["status"] == "blocked_waiting_owner_evidence_and_runtime_gates"
-    assert payload["summary"]["source_snapshot_count"] == 10
-    assert payload["summary"]["p0_lane_count"] == 9
+    assert payload["summary"]["source_snapshot_count"] == 11
+    assert payload["summary"]["p0_lane_count"] == 10
     assert payload["summary"]["runtime_gate_count"] == 0
     assert payload["summary"]["owner_response_received_count"] == 0
     assert payload["summary"]["owner_response_accepted_count"] == 0
@@ -31,21 +60,47 @@ def test_iwooos_runtime_security_readback_preserves_zero_runtime_gates() -> None
     assert payload["summary"]["wazuh_live_readonly_api_enabled_count"] == 0
     assert payload["summary"]["wazuh_live_metadata_available_count"] == 0
     assert payload["summary"]["wazuh_live_metadata_gate_owner_accepted_count"] == 0
-    assert payload["summary"]["wazuh_live_metadata_gate_secret_source_accepted_count"] == 0
-    assert payload["summary"]["wazuh_live_metadata_gate_manager_health_accepted_count"] == 0
-    assert payload["summary"]["wazuh_live_metadata_gate_readonly_scope_accepted_count"] == 0
-    assert payload["summary"]["wazuh_live_metadata_gate_post_enable_readback_count"] == 0
-    assert payload["summary"]["wazuh_live_metadata_gate_live_query_authorized_count"] == 0
+    assert (
+        payload["summary"]["wazuh_live_metadata_gate_secret_source_accepted_count"] == 0
+    )
+    assert (
+        payload["summary"]["wazuh_live_metadata_gate_manager_health_accepted_count"]
+        == 0
+    )
+    assert (
+        payload["summary"]["wazuh_live_metadata_gate_readonly_scope_accepted_count"]
+        == 0
+    )
+    assert (
+        payload["summary"]["wazuh_live_metadata_gate_post_enable_readback_count"] == 0
+    )
+    assert (
+        payload["summary"]["wazuh_live_metadata_gate_live_query_authorized_count"] == 0
+    )
     assert payload["summary"]["wazuh_owner_evidence_required_field_count"] == 28
     assert payload["summary"]["wazuh_owner_evidence_reviewer_check_count"] == 15
     assert payload["summary"]["wazuh_owner_evidence_outcome_lane_count"] == 8
     assert payload["summary"]["wazuh_owner_evidence_forbidden_payload_count"] == 22
     assert payload["summary"]["wazuh_owner_evidence_expected_alias_count"] == 6
-    assert payload["summary"]["wazuh_owner_evidence_registry_export_received_count"] == 0
-    assert payload["summary"]["wazuh_owner_evidence_registry_export_accepted_count"] == 0
+    assert (
+        payload["summary"]["wazuh_owner_evidence_registry_export_received_count"] == 0
+    )
+    assert (
+        payload["summary"]["wazuh_owner_evidence_registry_export_accepted_count"] == 0
+    )
     assert payload["summary"]["wazuh_owner_evidence_received_count"] == 0
     assert payload["summary"]["wazuh_owner_evidence_accepted_count"] == 0
     assert payload["summary"]["wazuh_owner_evidence_runtime_gate_count"] == 0
+    assert payload["summary"]["wazuh_runtime_apply_preflight_ready_count"] == 1
+    assert payload["summary"]["wazuh_runtime_apply_target_selector_count"] == 6
+    assert payload["summary"]["wazuh_runtime_apply_source_diff_count"] == 1
+    assert payload["summary"]["wazuh_runtime_apply_check_mode_plan_count"] == 1
+    assert payload["summary"]["wazuh_runtime_apply_dry_run_required_count"] == 1
+    assert payload["summary"]["wazuh_runtime_apply_rollback_plan_count"] == 1
+    assert payload["summary"]["wazuh_runtime_apply_post_apply_verifier_count"] == 1
+    assert payload["summary"]["wazuh_runtime_apply_km_writeback_count"] == 1
+    assert payload["summary"]["wazuh_runtime_apply_owner_review_ready_count"] == 1
+    assert payload["summary"]["wazuh_runtime_apply_runtime_gate_count"] == 0
     assert payload["summary"]["kali_active_scan_authorized_count"] == 0
     assert payload["summary"]["kali_execute_authorized_count"] == 0
     assert payload["summary"]["alert_receipt_runtime_send_count"] == 0
@@ -64,6 +119,7 @@ def test_iwooos_runtime_security_readback_lanes_are_candidate_only() -> None:
         "wazuh_live_route",
         "wazuh_live_metadata_gate",
         "wazuh_owner_evidence_preflight",
+        "wazuh_runtime_controlled_apply_preflight",
         "wazuh_dashboard_api",
         "kali_intake",
         "alert_readability",
@@ -74,10 +130,28 @@ def test_iwooos_runtime_security_readback_lanes_are_candidate_only() -> None:
     assert all(lane["next_gate"] for lane in payload["lanes"])
     assert all(lane["source_refs"] for lane in payload["lanes"])
     assert any(lane["completion_percent"] > 0 for lane in payload["lanes"])
-    assert all(lane["lane_id"] != "wazuh_registry" or lane["completion_percent"] == 35 for lane in payload["lanes"])
-    assert all(lane["lane_id"] != "wazuh_live_route" or lane["metrics"]["route_degraded"] == 1 for lane in payload["lanes"])
-    assert all(lane["lane_id"] != "wazuh_live_metadata_gate" or lane["completion_percent"] == 0 for lane in payload["lanes"])
-    assert all(lane["lane_id"] != "wazuh_owner_evidence_preflight" or lane["metrics"]["owner_accepted"] == 0 for lane in payload["lanes"])
+    assert all(
+        lane["lane_id"] != "wazuh_registry" or lane["completion_percent"] == 35
+        for lane in payload["lanes"]
+    )
+    assert all(
+        lane["lane_id"] != "wazuh_live_route" or lane["metrics"]["route_degraded"] == 1
+        for lane in payload["lanes"]
+    )
+    assert all(
+        lane["lane_id"] != "wazuh_live_metadata_gate" or lane["completion_percent"] == 0
+        for lane in payload["lanes"]
+    )
+    assert all(
+        lane["lane_id"] != "wazuh_owner_evidence_preflight"
+        or lane["metrics"]["owner_accepted"] == 0
+        for lane in payload["lanes"]
+    )
+    assert all(
+        lane["lane_id"] != "wazuh_runtime_controlled_apply_preflight"
+        or (lane["completion_percent"] == 45 and lane["metrics"]["runtime_gate"] == 0)
+        for lane in payload["lanes"]
+    )
 
 
 def test_iwooos_runtime_security_readback_api_is_public_safe(monkeypatch) -> None:
@@ -92,20 +166,27 @@ def test_iwooos_runtime_security_readback_api_is_public_safe(monkeypatch) -> Non
     data = response.json()
     assert data["schema_version"] == "iwooos_runtime_security_readback_v1"
     assert data["summary"]["runtime_gate_count"] == 0
-    assert data["summary"]["wazuh_live_status"] == "disabled_waiting_iwooos_wazuh_owner_gate"
+    assert (
+        data["summary"]["wazuh_live_status"]
+        == "disabled_waiting_iwooos_wazuh_owner_gate"
+    )
     assert data["summary"]["wazuh_live_route_http_status"] == 200
     assert data["summary"]["wazuh_live_route_degraded_count"] == 1
     assert data["summary"]["wazuh_live_metadata_available_count"] == 0
     assert data["summary"]["wazuh_live_metadata_gate_live_query_authorized_count"] == 0
     assert data["summary"]["wazuh_owner_evidence_accepted_count"] == 0
     assert data["summary"]["wazuh_owner_evidence_runtime_gate_count"] == 0
+    assert data["summary"]["wazuh_runtime_apply_preflight_ready_count"] == 1
+    assert data["summary"]["wazuh_runtime_apply_runtime_gate_count"] == 0
     assert data["boundaries"]["secret_value_collection_allowed"] is False
     assert "192.168.0." not in response.text
     assert "工作視窗" not in response.text
     assert "批准！繼續" not in response.text
 
 
-def test_iwooos_runtime_security_readback_api_includes_live_wazuh_empty_registry(monkeypatch) -> None:
+def test_iwooos_runtime_security_readback_api_includes_live_wazuh_empty_registry(
+    monkeypatch,
+) -> None:
     import httpx
 
     monkeypatch.setenv("IWOOOS_WAZUH_READONLY_ENABLED", "true")
@@ -120,7 +201,16 @@ def test_iwooos_runtime_security_readback_api_includes_live_wazuh_empty_registry
         if request.url.path == "/agents/summary/status":
             return httpx.Response(
                 200,
-                json={"data": {"connection": {"total": 0, "active": 0, "disconnected": 0, "pending": 0}}},
+                json={
+                    "data": {
+                        "connection": {
+                            "total": 0,
+                            "active": 0,
+                            "disconnected": 0,
+                            "pending": 0,
+                        }
+                    }
+                },
             )
         if request.url.path == "/agents":
             return httpx.Response(200, json={"data": {"affected_items": []}})
@@ -171,7 +261,10 @@ def test_iwooos_wazuh_live_metadata_gate_api_is_public_safe(monkeypatch) -> None
     assert data["summary"]["runtime_gate_count"] == 0
     assert data["summary"]["wazuh_live_route_http_status"] == 200
     assert data["summary"]["wazuh_live_route_degraded_count"] == 1
-    assert data["summary"]["wazuh_live_status"] == "disabled_waiting_iwooos_wazuh_owner_gate"
+    assert (
+        data["summary"]["wazuh_live_status"]
+        == "disabled_waiting_iwooos_wazuh_owner_gate"
+    )
     assert data["boundaries"]["secret_value_collection_allowed"] is False
     assert data["boundaries"]["wazuh_api_live_query_authorized"] is False
     assert data["boundaries"]["wazuh_active_response_authorized"] is False
@@ -219,8 +312,154 @@ def test_iwooos_wazuh_owner_evidence_preflight_api_is_public_safe(monkeypatch) -
     assert data["boundaries"]["not_authorization"] is True
     assert len(data["items"]) == 8
     assert any(marker == "必要欄位=28" for marker in data["boundary_markers"])
-    assert any(rule.startswith("負責人證據預檢 ready") for rule in data["no_false_green_rules"])
+    assert any(
+        rule.startswith("負責人證據預檢 ready") for rule in data["no_false_green_rules"]
+    )
     assert "192.168.0." not in response.text
     assert "工作視窗" not in response.text
     assert "批准！繼續" not in response.text
     assert "WAZUH_API_PASSWORD" not in response.text
+
+
+def test_iwooos_wazuh_runtime_controlled_apply_preflight_api_is_public_safe(
+    monkeypatch,
+) -> None:
+    monkeypatch.delenv("IWOOOS_WAZUH_READONLY_ENABLED", raising=False)
+    monkeypatch.delenv("WAZUH_API_BASE_URL", raising=False)
+    monkeypatch.delenv("WAZUH_API_USERNAME", raising=False)
+    monkeypatch.delenv("WAZUH_API_PASSWORD", raising=False)
+
+    payload = load_latest_iwooos_wazuh_runtime_controlled_apply_preflight()
+    assert (
+        payload["schema_version"]
+        == "iwooos_wazuh_runtime_controlled_apply_preflight_readback_v1"
+    )
+    assert payload["status"] == "controlled_apply_preflight_ready_no_runtime_action"
+    assert payload["summary"]["controlled_apply_preflight_ready_count"] == 1
+    assert payload["summary"]["target_selector_count"] == 6
+    assert payload["summary"]["runtime_gate_count"] == 0
+    assert payload["boundaries"]["runtime_execution_authorized"] is False
+
+    response = _client().get("/api/v1/iwooos/wazuh-runtime-controlled-apply-preflight")
+
+    assert response.status_code == 200
+    data = response.json()
+    assert (
+        data["schema_version"]
+        == "iwooos_wazuh_runtime_controlled_apply_preflight_readback_v1"
+    )
+    assert data["summary"]["controlled_apply_preflight_ready_count"] == 1
+    assert data["summary"]["target_selector_count"] == 6
+    assert data["summary"]["runtime_gate_count"] == 0
+    assert data["summary"]["wazuh_api_live_query_authorized_count"] == 0
+    assert data["summary"]["wazuh_active_response_authorized_count"] == 0
+    assert data["summary"]["host_write_authorized_count"] == 0
+    assert data["summary"]["secret_value_collection_allowed_count"] == 0
+    assert data["boundaries"]["payload_persisted"] is False
+    assert data["boundaries"]["wazuh_api_live_query_authorized"] is False
+    assert data["boundaries"]["wazuh_active_response_authorized"] is False
+    assert data["boundaries"]["host_write_authorized"] is False
+    assert data["boundaries"]["runtime_gate_open"] is False
+    assert data["boundaries"]["not_authorization"] is True
+    assert len(data["target_selectors"]) == 6
+    assert len(data["preflight_items"]) == 6
+    assert any(
+        marker == "wazuh_runtime_controlled_apply_preflight_visible=true"
+        for marker in data["boundary_markers"]
+    )
+    assert "192.168.0." not in response.text
+    assert "工作視窗" not in response.text
+    assert "批准！繼續" not in response.text
+    assert "WAZUH_API_PASSWORD" not in response.text
+
+
+def test_iwooos_wazuh_runtime_controlled_apply_preflight_validator_accepts_redacted_packet(
+    monkeypatch,
+) -> None:
+    monkeypatch.delenv("IWOOOS_WAZUH_READONLY_ENABLED", raising=False)
+    monkeypatch.delenv("WAZUH_API_BASE_URL", raising=False)
+    monkeypatch.delenv("WAZUH_API_USERNAME", raising=False)
+    monkeypatch.delenv("WAZUH_API_PASSWORD", raising=False)
+
+    client = _client()
+    before = client.get(
+        "/api/v1/iwooos/wazuh-runtime-controlled-apply-preflight"
+    ).json()
+    response = client.post(
+        "/api/v1/iwooos/wazuh-runtime-controlled-apply-preflight/validate-controlled-apply-packet",
+        json=_valid_runtime_controlled_apply_packet(),
+    )
+    after = client.get("/api/v1/iwooos/wazuh-runtime-controlled-apply-preflight").json()
+
+    assert response.status_code == 200
+    data = response.json()
+    assert (
+        data["schema_version"]
+        == "iwooos_wazuh_runtime_controlled_apply_packet_validation_result_v1"
+    )
+    assert data["status"] == "accepted_for_controlled_apply_preflight_review_only"
+    assert data["accepted_for_controlled_apply_preflight_review_only"] is True
+    assert data["summary"]["controlled_apply_packet_received_count"] == 1
+    assert data["summary"]["controlled_apply_preflight_ready_count"] == 1
+    assert data["summary"]["runtime_gate_count"] == 0
+    assert data["summary"]["wazuh_api_live_query_authorized_count"] == 0
+    assert data["summary"]["wazuh_active_response_authorized_count"] == 0
+    assert data["summary"]["host_write_authorized_count"] == 0
+    assert data["summary"]["secret_value_collection_allowed_count"] == 0
+    assert data["boundaries"]["payload_persisted"] is False
+    assert data["boundaries"]["runtime_execution_authorized"] is False
+    assert data["boundaries"]["runtime_gate_open"] is False
+    assert before["summary"] == after["summary"]
+    assert "192.168.0." not in response.text
+    assert "工作視窗" not in response.text
+    assert "批准！繼續" not in response.text
+
+
+def test_iwooos_wazuh_runtime_controlled_apply_preflight_validator_quarantines_sensitive_payload(
+    monkeypatch,
+) -> None:
+    monkeypatch.delenv("IWOOOS_WAZUH_READONLY_ENABLED", raising=False)
+    monkeypatch.delenv("WAZUH_API_BASE_URL", raising=False)
+    monkeypatch.delenv("WAZUH_API_USERNAME", raising=False)
+    monkeypatch.delenv("WAZUH_API_PASSWORD", raising=False)
+
+    packet = _valid_runtime_controlled_apply_packet()
+    packet[
+        "redacted_evidence_ref"
+    ] = "raw output includes 10.1.2.3 and Authorization: Bearer abcdefghijklmnop"
+    response = _client().post(
+        "/api/v1/iwooos/wazuh-runtime-controlled-apply-preflight/validate-controlled-apply-packet",
+        json=packet,
+    )
+
+    assert response.status_code == 200
+    data = response.json()
+    assert data["status"] == "quarantine_sensitive_payload"
+    assert data["quarantined"] is True
+    assert data["summary"]["controlled_apply_packet_quarantined_count"] == 1
+    assert data["summary"]["runtime_gate_count"] == 0
+    assert "10.1.2.3" not in response.text
+    assert "Bearer abcdefghijklmnop" not in response.text
+
+
+def test_iwooos_wazuh_runtime_controlled_apply_preflight_validator_rejects_runtime_action(
+    monkeypatch,
+) -> None:
+    monkeypatch.delenv("IWOOOS_WAZUH_READONLY_ENABLED", raising=False)
+    monkeypatch.delenv("WAZUH_API_BASE_URL", raising=False)
+    monkeypatch.delenv("WAZUH_API_USERNAME", raising=False)
+    monkeypatch.delenv("WAZUH_API_PASSWORD", raising=False)
+
+    packet = _valid_runtime_controlled_apply_packet()
+    packet["wazuh_active_response"] = True
+    response = _client().post(
+        "/api/v1/iwooos/wazuh-runtime-controlled-apply-preflight/validate-controlled-apply-packet",
+        json=packet,
+    )
+
+    assert response.status_code == 200
+    data = response.json()
+    assert data["status"] == "reject_runtime_action_request"
+    assert data["runtime_action_rejected"] is True
+    assert data["summary"]["controlled_apply_runtime_action_rejected_count"] == 1
+    assert data["summary"]["runtime_gate_count"] == 0

apps/web/messages/en.json

@@ -20429,8 +20429,8 @@
     },
     "runtimeSecurityReadback": {
       "eyebrow": "IwoooS Runtime 資安讀回",
-      "title": "九條 P0 資安線先接到同一張讀回板",
-      "subtitle": "這張板讀取後端彙整的只讀快照，並附上 Wazuh 正式只讀路由的公開安全彙總讀回；它不保存原始 Wazuh 載荷、不啟動掃描、不送訊息、不改主機。",
+      "title": "十條 P0 資安線先接到同一張讀回板",
+      "subtitle": "這張板讀取後端彙整的只讀快照，並附上 Wazuh 正式只讀路由與 controlled apply preflight 的公開安全彙總讀回；它不保存原始 Wazuh 載荷、不啟動掃描、不送訊息、不改主機。",
       "statusLabel": "讀回狀態",
       "statusDetail": "讀回成功只代表 IwoooS 能看見目前的證據邊界；runtime 寫入、主動回應、掃描、重啟、Nginx reload、workflow 修改與機密操作仍全部關閉。",
       "laneStatusLabel": "目前狀態",
@@ -20448,6 +20448,7 @@
         "wazuh_live_route": "正式只讀路由已關閉，等待 IwoooS Wazuh 負責人閘門",
         "wazuh_live_metadata_gate": "等待即時中繼資料負責人回覆",
         "wazuh_owner_evidence_preflight": "負責人證據預檢已就緒，尚未授權執行期動作",
+        "wazuh_runtime_controlled_apply_preflight": "受控執行預檢已就緒，執行期閘門仍關閉",
         "wazuh_dashboard_api": "API 連線退化，禁止顯示綠燈",
         "kali_intake": "部分執行期健康已整合，仍待完整驗收",
         "alert_readability": "格式合約已就緒，尚未有實發收件證據",
@@ -20476,6 +20477,10 @@
           "label": "中繼資料閘門",
           "detail": "即時中繼資料查詢仍需負責人、機密中繼資料、唯讀範圍與啟用後讀回。"
         },
+        "controlledApplyPreflight": {
+          "label": "受控預檢",
+          "detail": "target selector、diff、check-mode、rollback、verifier 與 writeback 已可審查；runtime 仍為 0。"
+        },
         "ownerAccepted": {
           "label": "負責人驗收",
           "detail": "收到 / 接受都必須由正式 owner response 證明。"
@@ -20506,6 +20511,10 @@
           "title": "Wazuh 負責人證據預檢",
           "body": "把 manager registry 脫敏封包、逐主機矩陣、Dashboard API 狀態、拒收敏感類型與負責人決策先變成可驗收格式；收件、接受與執行期仍為 0。"
         },
+        "wazuh_runtime_controlled_apply_preflight": {
+          "title": "Wazuh 受控執行預檢",
+          "body": "target selector、source-of-truth diff、check-mode / dry-run、rollback、post-apply verifier 與 KM / PlayBook writeback 已成為可審查 packet；它仍不查 live Wazuh、不開 active response、不寫主機。"
+        },
         "wazuh_dashboard_api": {
           "title": "Wazuh Dashboard API",
           "body": "API connection / API version 還要補 readback；index pattern 通過不能宣稱 Wazuh 全綠。"

apps/web/messages/zh-TW.json

@@ -20429,8 +20429,8 @@
     },
     "runtimeSecurityReadback": {
       "eyebrow": "IwoooS Runtime 資安讀回",
-      "title": "九條 P0 資安線先接到同一張讀回板",
-      "subtitle": "這張板讀取後端彙整的只讀快照，並附上 Wazuh 正式只讀路由的公開安全彙總讀回；它不保存原始 Wazuh 載荷、不啟動掃描、不送訊息、不改主機。",
+      "title": "十條 P0 資安線先接到同一張讀回板",
+      "subtitle": "這張板讀取後端彙整的只讀快照，並附上 Wazuh 正式只讀路由與 controlled apply preflight 的公開安全彙總讀回；它不保存原始 Wazuh 載荷、不啟動掃描、不送訊息、不改主機。",
       "statusLabel": "讀回狀態",
       "statusDetail": "讀回成功只代表 IwoooS 能看見目前的證據邊界；runtime 寫入、主動回應、掃描、重啟、Nginx reload、workflow 修改與機密操作仍全部關閉。",
       "laneStatusLabel": "目前狀態",
@@ -20448,6 +20448,7 @@
         "wazuh_live_route": "正式只讀路由已關閉，等待 IwoooS Wazuh 負責人閘門",
         "wazuh_live_metadata_gate": "等待即時中繼資料負責人回覆",
         "wazuh_owner_evidence_preflight": "負責人證據預檢已就緒，尚未授權執行期動作",
+        "wazuh_runtime_controlled_apply_preflight": "受控執行預檢已就緒，執行期閘門仍關閉",
         "wazuh_dashboard_api": "API 連線退化，禁止顯示綠燈",
         "kali_intake": "部分執行期健康已整合，仍待完整驗收",
         "alert_readability": "格式合約已就緒，尚未有實發收件證據",
@@ -20476,6 +20477,10 @@
           "label": "中繼資料閘門",
           "detail": "即時中繼資料查詢仍需負責人、機密中繼資料、唯讀範圍與啟用後讀回。"
         },
+        "controlledApplyPreflight": {
+          "label": "受控預檢",
+          "detail": "target selector、diff、check-mode、rollback、verifier 與 writeback 已可審查；runtime 仍為 0。"
+        },
         "ownerAccepted": {
           "label": "負責人驗收",
           "detail": "收到 / 接受都必須由正式 owner response 證明。"
@@ -20506,6 +20511,10 @@
           "title": "Wazuh 負責人證據預檢",
           "body": "把 manager registry 脫敏封包、逐主機矩陣、Dashboard API 狀態、拒收敏感類型與負責人決策先變成可驗收格式；收件、接受與執行期仍為 0。"
         },
+        "wazuh_runtime_controlled_apply_preflight": {
+          "title": "Wazuh 受控執行預檢",
+          "body": "target selector、source-of-truth diff、check-mode / dry-run、rollback、post-apply verifier 與 KM / PlayBook writeback 已成為可審查 packet；它仍不查 live Wazuh、不開 active response、不寫主機。"
+        },
         "wazuh_dashboard_api": {
           "title": "Wazuh Dashboard API",
           "body": "API connection / API version 還要補 readback；index pattern 通過不能宣稱 Wazuh 全綠。"

apps/web/src/app/[locale]/awooop/approvals/[run_id]/page.tsx

@@ -28,6 +28,7 @@ import {
   type AwoooPStatusChain,
 } from "@/components/awooop/status-chain";
 import { cn } from "@/lib/utils";
+import { getRuntimeApiBaseUrl } from "@/lib/runtime-api-base";
 import {
   publicAgentText,
   publicBoundaryText,
@@ -85,7 +86,7 @@ interface RunDetailResponse {
   awooop_status_chain?: AwoooPStatusChain | null;
 }
 
-const API_BASE = process.env.NEXT_PUBLIC_API_URL ?? "";
+const API_BASE = getRuntimeApiBaseUrl();
 const ADR100_GATE5_PROJECTION_TRIGGER = "adr100_runtime_replay_gate5";
 
 const ownerResponseValidationDecisionRefs: OwnerResponseValidationDecisionRef[] = [

apps/web/src/app/[locale]/awooop/approvals/page.tsx

@@ -24,6 +24,7 @@ import {
   GitBranch,
 } from "lucide-react";
 import { cn } from "@/lib/utils";
+import { getRuntimeApiBaseUrl } from "@/lib/runtime-api-base";
 import { Link } from "@/i18n/routing";
 import {
   AwoooPStatusChainPanel,
@@ -110,7 +111,7 @@ interface LegacyApproval {
 // 常數
 // =============================================================================
 
-const API_BASE = process.env.NEXT_PUBLIC_API_URL ?? "";
+const API_BASE = getRuntimeApiBaseUrl();
 const AUTO_REFRESH_INTERVAL = 10_000; // 10 秒
 
 // =============================================================================

apps/web/src/app/[locale]/awooop/contracts/page.tsx

@@ -21,6 +21,7 @@ import {
 } from "lucide-react";
 import { cn } from "@/lib/utils";
 import { publicBoundaryText, publicContractText, publicProjectText } from "@/lib/public-security-redaction";
+import { getRuntimeApiBaseUrl } from "@/lib/runtime-api-base";
 
 // =============================================================================
 // Types
@@ -51,7 +52,7 @@ interface ContractsResponse {
 // 常數
 // =============================================================================
 
-const API_BASE = process.env.NEXT_PUBLIC_API_URL ?? "";
+const API_BASE = getRuntimeApiBaseUrl();
 
 const STATUS_CONFIG: Record<
   ContractStatus,

apps/web/src/app/[locale]/awooop/page.tsx

@@ -25,6 +25,7 @@ import {
 import { Link } from "@/i18n/routing";
 import { cn } from "@/lib/utils";
 import { publicBoundaryText, publicContractText } from "@/lib/public-security-redaction";
+import { getRuntimeApiBaseUrl } from "@/lib/runtime-api-base";
 
 type Tenant = {
   project_id: string;
@@ -172,7 +173,7 @@ type SourceFlowResponse = {
   summary: SourceFlowSummary;
 };
 
-const API_BASE = process.env.NEXT_PUBLIC_API_URL ?? "";
+const API_BASE = getRuntimeApiBaseUrl();
 
 const emptySnapshot: Snapshot = {
   tenants: 0,

apps/web/src/app/[locale]/awooop/runs/[run_id]/page.tsx

@@ -36,6 +36,7 @@ import {
   type AwoooPStatusChain,
 } from "@/components/awooop/status-chain";
 import { cn } from "@/lib/utils";
+import { getRuntimeApiBaseUrl } from "@/lib/runtime-api-base";
 import {
   publicAgentText,
   publicBoundaryText,
@@ -257,7 +258,7 @@ interface IncidentTimelineResponse {
   reconciliation?: Record<string, unknown>;
 }
 
-const API_BASE = process.env.NEXT_PUBLIC_API_URL ?? "";
+const API_BASE = getRuntimeApiBaseUrl();
 const AUTO_REFRESH_INTERVAL = 30_000;
 
 const ownerResponseValidationDetailRefs: OwnerResponseValidationDetailRef[] = [

apps/web/src/app/[locale]/awooop/runs/page.tsx

@@ -8,6 +8,7 @@
 import { useState, useEffect, useCallback, useMemo, useRef } from "react";
 import { useTranslations } from "next-intl";
 import { Link } from "@/i18n/routing";
+import { getRuntimeApiBaseUrl } from "@/lib/runtime-api-base";
 import {
   AwoooPStatusChainPanel,
   type AwoooPStatusChain,
@@ -696,7 +697,7 @@ type OwnerResponseValidationRunRef = {
 // 常數
 // =============================================================================
 
-const API_BASE = process.env.NEXT_PUBLIC_API_URL ?? "";
+const API_BASE = getRuntimeApiBaseUrl();
 const PER_PAGE = 50;
 const AUTO_REFRESH_INTERVAL = 30_000; // 30 秒
 const INCIDENT_ID_FILTER_RE = /^INC-\d{8}-[A-Z0-9]{4,}$/;

apps/web/src/app/[locale]/awooop/tenants/page.tsx

@@ -26,6 +26,7 @@ import {
   ShieldCheck,
 } from "lucide-react";
 import { cn } from "@/lib/utils";
+import { getRuntimeApiBaseUrl } from "@/lib/runtime-api-base";
 
 // =============================================================================
 // Types
@@ -157,7 +158,7 @@ type AssetTone = "steady" | "warn" | "locked";
 // 常數
 // =============================================================================
 
-const API_BASE = process.env.NEXT_PUBLIC_API_URL ?? "";
+const API_BASE = getRuntimeApiBaseUrl();
 
 const githubTenantReadinessMetrics: GitHubTenantReadinessMetric[] = [
   { key: "candidateRepos", value: "10", icon: GitBranch, tone: "neutral" },

apps/web/src/app/[locale]/awooop/work-items/page.tsx

@@ -30,6 +30,7 @@ import {
 
 import { Link } from "@/i18n/routing";
 import { IncidentEvidenceHeader } from "@/components/awooop/incident-evidence-header";
+import { getRuntimeApiBaseUrl } from "@/lib/runtime-api-base";
 import {
   AwoooPStatusChainPanel,
   type AwoooPStatusChain,
@@ -1440,7 +1441,7 @@ type RepairCandidateDraftFocus = {
   lane: string;
 };
 
-const API_BASE = process.env.NEXT_PUBLIC_API_URL ?? "";
+const API_BASE = getRuntimeApiBaseUrl();
 
 const REPAIR_CANDIDATE_DRAFT_PREFIX = "repair-candidate-draft";
 const REPAIR_CANDIDATE_DRAFT_REQUIRED_FIELDS = [

apps/web/src/app/[locale]/iwooos/page.tsx

@@ -346,6 +346,7 @@ type RuntimeSecurityReadbackSummaryItem = {
     | 'wazuhRegistry'
     | 'wazuhLive'
     | 'metadataGate'
+    | 'controlledApplyPreflight'
     | 'ownerAccepted'
     | 'kaliRuntime'
     | 'runtimeGate'
@@ -8242,6 +8243,7 @@ const runtimeSecurityLaneStatusKeys = new Set<IwoooSRuntimeSecurityReadbackRespo
   'wazuh_live_route',
   'wazuh_live_metadata_gate',
   'wazuh_owner_evidence_preflight',
+  'wazuh_runtime_controlled_apply_preflight',
   'wazuh_dashboard_api',
   'kali_intake',
   'alert_readability',
@@ -8319,6 +8321,12 @@ function IwoooSRuntimeSecurityReadbackBoard() {
       icon: ClipboardCheck,
       tone: 'locked',
     },
+    {
+      key: 'controlledApplyPreflight',
+      value: summary ? String(summary.wazuh_runtime_apply_preflight_ready_count) : '...',
+      icon: ListChecks,
+      tone: summary && summary.wazuh_runtime_apply_preflight_ready_count > 0 ? 'steady' : 'locked',
+    },
     {
       key: 'ownerAccepted',
       value: summary ? `${summary.owner_response_accepted_count}/${summary.owner_response_received_count}` : '...',

apps/web/src/components/layout/app-layout.tsx

@@ -20,6 +20,7 @@ import { Sidebar } from './sidebar'
 import { Header } from './header'
 import { DotMatrixBg } from '@/components/ui/dot-matrix-bg'
 import { Z_INDEX } from '@/lib/constants/z-index'
+import { getRuntimeApiBaseUrl } from '@/lib/runtime-api-base'
 import { cn } from '@/lib/utils'
 import { useDashboardStore } from '@/stores/dashboard.store'
 
@@ -92,7 +93,7 @@ export function AppLayout({
 
   // Phase 19 修復: 全局啟動 SSE 連接 (所有頁面共享)
   useEffect(() => {
-    const apiBaseUrl = process.env.NEXT_PUBLIC_API_URL || ''
+    const apiBaseUrl = getRuntimeApiBaseUrl()
     if (apiBaseUrl) {
       console.log('[AppLayout] 全局 SSE 連接啟動...', apiBaseUrl)
       connect(apiBaseUrl)

apps/web/src/hooks/useSSE.ts

@@ -17,6 +17,7 @@
  */
 
 import { useEffect, useRef, useCallback } from 'react'
+import { getRuntimeApiBaseUrl } from '@/lib/runtime-api-base'
 import { useDashboardStore } from '@/stores/dashboard.store'
 
 // =============================================================================
@@ -54,7 +55,7 @@ const getApiBaseUrl = (): string => {
   if (typeof window === 'undefined') return ''
 
   // 專案鐵律: 禁止任何 Fallback IP
-  const url = process.env.NEXT_PUBLIC_API_URL
+  const url = getRuntimeApiBaseUrl()
   if (!url) {
     console.error('[AWOOOI ERROR] Missing NEXT_PUBLIC_API_URL. SSE will not connect.')
     return ''

apps/web/src/lib/api-client.ts

@@ -6,10 +6,11 @@
  */
 
 import { CURRENT_USER } from '@/lib/constants/user'
+import { getRuntimeApiV1BaseUrl } from '@/lib/runtime-api-base'
 
 // 絕對純化: 環境變數缺失時直接拋出致命錯誤，嚴禁任何 Fallback
 const getApiBaseUrl = (): string => {
-  const url = process.env.NEXT_PUBLIC_API_URL
+  const url = getRuntimeApiV1BaseUrl()
   if (!url) {
     const fatalMsg = '[AWOOOI FATAL] Missing NEXT_PUBLIC_API_URL configuration.'
     console.error(fatalMsg)
@@ -18,7 +19,7 @@ const getApiBaseUrl = (): string => {
     }
     throw new Error(fatalMsg)
   }
-  return url.endsWith('/api/v1') ? url : `${url}/api/v1`
+  return url
 }
 
 const API_BASE_URL = getApiBaseUrl()
@@ -103,6 +104,7 @@ export interface IwoooSRuntimeSecurityReadbackLane {
     | 'wazuh_live_route'
     | 'wazuh_live_metadata_gate'
     | 'wazuh_owner_evidence_preflight'
+    | 'wazuh_runtime_controlled_apply_preflight'
     | 'wazuh_dashboard_api'
     | 'kali_intake'
     | 'alert_readability'
@@ -159,6 +161,16 @@ export interface IwoooSRuntimeSecurityReadbackResponse {
     wazuh_owner_evidence_received_count: number
     wazuh_owner_evidence_accepted_count: number
     wazuh_owner_evidence_runtime_gate_count: number
+    wazuh_runtime_apply_preflight_ready_count: number
+    wazuh_runtime_apply_target_selector_count: number
+    wazuh_runtime_apply_source_diff_count: number
+    wazuh_runtime_apply_check_mode_plan_count: number
+    wazuh_runtime_apply_dry_run_required_count: number
+    wazuh_runtime_apply_rollback_plan_count: number
+    wazuh_runtime_apply_post_apply_verifier_count: number
+    wazuh_runtime_apply_km_writeback_count: number
+    wazuh_runtime_apply_owner_review_ready_count: number
+    wazuh_runtime_apply_runtime_gate_count: number
     kali_active_scan_authorized_count: number
     kali_execute_authorized_count: number
     kali_finding_envelope_accepted_count: number
@@ -268,6 +280,69 @@ export interface IwoooSWazuhOwnerEvidencePreflightResponse {
   no_false_green_rules: string[]
 }
 
+export interface IwoooSWazuhRuntimeControlledApplyPreflightItem {
+  item_id:
+    | 'target_selector'
+    | 'source_of_truth_diff'
+    | 'check_mode_dry_run'
+    | 'rollback'
+    | 'post_apply_verifier'
+    | 'learning_writeback'
+  title: string
+  state_key: string
+  ready: boolean
+  required_fields: string[]
+  next_gate: string
+}
+
+export interface IwoooSWazuhRuntimeControlledApplyPreflightResponse {
+  schema_version: 'iwooos_wazuh_runtime_controlled_apply_preflight_readback_v1'
+  source_schema_version: 'wazuh_runtime_controlled_apply_preflight_v1'
+  status: string
+  mode: string
+  source_refs: string[]
+  controlled_apply_packet_validation_endpoint: string
+  controlled_apply_packet_validation_mode: string
+  summary: {
+    expected_scope_alias_count: number
+    target_selector_count: number
+    source_of_truth_diff_count: number
+    check_mode_plan_count: number
+    dry_run_required_count: number
+    rollback_plan_count: number
+    post_apply_verifier_count: number
+    km_playbook_writeback_count: number
+    maintenance_window_required_count: number
+    owner_review_ready_count: number
+    controlled_apply_preflight_ready_count: number
+    controlled_apply_packet_received_count: number
+    controlled_apply_packet_accepted_count: number
+    controlled_apply_packet_quarantined_count: number
+    controlled_apply_runtime_action_rejected_count: number
+    forbidden_payload_count: number
+    forbidden_action_count: number
+    runtime_gate_count: number
+    wazuh_api_live_query_authorized_count: number
+    wazuh_active_response_authorized_count: number
+    host_write_authorized_count: number
+    secret_value_collection_allowed_count: number
+  }
+  target_selectors: Array<{
+    node_alias: string
+    scope: string
+    selector_kind: string
+    runtime_write_allowed: boolean
+  }>
+  required_packet_fields: string[]
+  preflight_items: IwoooSWazuhRuntimeControlledApplyPreflightItem[]
+  outcome_lanes: string[]
+  forbidden_payloads: string[]
+  forbidden_actions: string[]
+  boundary_markers: string[]
+  boundaries: Record<string, boolean>
+  no_false_green_rules: string[]
+}
+
 export interface IwoooSWazuhManagedHostCoverageHost {
   node_id: string
   role: string
@@ -621,6 +696,11 @@ export const apiClient = {
     return handleResponse<IwoooSWazuhOwnerEvidencePreflightResponse>(res)
   },
 
+  async getIwoooSWazuhRuntimeControlledApplyPreflight() {
+    const res = await fetch(`${API_BASE_URL}/iwooos/wazuh-runtime-controlled-apply-preflight`, { cache: 'no-store' })
+    return handleResponse<IwoooSWazuhRuntimeControlledApplyPreflightResponse>(res)
+  },
+
   async getIwoooSWazuhManagedHostCoverage() {
     const res = await fetch(`${API_BASE_URL}/iwooos/wazuh-managed-host-coverage`, { cache: 'no-store' })
     return handleResponse<IwoooSWazuhManagedHostCoverageResponse>(res)

apps/web/src/lib/runtime-api-base.ts

@@ -0,0 +1,15 @@
+const PUBLIC_AWOOOI_HOSTS = new Set(["aiops.wooo.work", "awoooi.wooo.work"]);
+
+export function getRuntimeApiBaseUrl(): string {
+  if (typeof window !== "undefined" && PUBLIC_AWOOOI_HOSTS.has(window.location.hostname)) {
+    return window.location.origin;
+  }
+
+  return (process.env.NEXT_PUBLIC_API_URL ?? "").replace(/\/+$/, "");
+}
+
+export function getRuntimeApiV1BaseUrl(): string {
+  const baseUrl = getRuntimeApiBaseUrl();
+  if (!baseUrl) return "";
+  return baseUrl.endsWith("/api/v1") ? baseUrl : `${baseUrl}/api/v1`;
+}

apps/web/src/stores/dashboard.store.ts

@@ -15,6 +15,7 @@
 
 import { create } from 'zustand'
 import { subscribeWithSelector } from 'zustand/middleware'
+import { getRuntimeApiBaseUrl } from '@/lib/runtime-api-base'
 
 // =============================================================================
 // Types
@@ -203,7 +204,7 @@ export const useDashboardStore = create<DashboardState>()(
 
       // 專案鐵律: 禁止任何 Fallback IP
       const resolvedApiBaseUrl = apiBaseUrl ||
-        (typeof window !== 'undefined' ? process.env.NEXT_PUBLIC_API_URL : '')
+        (typeof window !== 'undefined' ? getRuntimeApiBaseUrl() : '')
 
       if (!resolvedApiBaseUrl) {
         console.error('[AWOOOI ERROR] Missing NEXT_PUBLIC_API_URL. SSE will not connect.')
@@ -353,7 +354,7 @@ export const useDashboardStore = create<DashboardState>()(
 
       // 專案鐵律: 禁止任何 Fallback IP
       const resolvedApiBaseUrl = apiBaseUrl ||
-        (typeof window !== 'undefined' ? process.env.NEXT_PUBLIC_API_URL : '')
+        (typeof window !== 'undefined' ? getRuntimeApiBaseUrl() : '')
 
       if (!resolvedApiBaseUrl) {
         console.error('[AWOOOI ERROR] Missing API URL for snapshot fetch')

docs/LOGBOOK.md

@@ -1,3 +1,14 @@
+## 2026-06-28 — 10:22 AI Agent market radar readback 合約重新對齊
+
+**背景**：feature 合併最新 `gitea-ssh/main=93434b1f6` 後，main 已把 `apps/api/tests/test_ai_agent_market_radar_readback.py` 的 committed snapshot 合約重新對齊為 `8f402983e` 與 `Durable execution / persistence / controlled review loop`；feature 原先的 snapshot 修正仍停在前一輪 `61cf5024` / `human-in-the-loop`，造成 focused pytest 2 項失敗。
+
+**完成內容**：
+- 將 `docs/operations/ai-agent-market-radar-readback.snapshot.json` 的 `source_scope.gitea_main_evidence_basis_commit` 改回 `8f402983e`。
+- 將 `market_practice_alignment` practice key 改回 `Durable execution / persistence / controlled review loop`，與最新 main 測試合約一致。
+- 本段只修正 snapshot / test contract drift，不改 GitHub backup suspended preflight、不新增 GitHub repo / refs / visibility 操作。
+
+**下一步**：重跑 JSON parse、`py_compile`、ruff、focused pytest 與 `git diff --check`；通過後 normal push feature，再於 main 未前進時 normal push `HEAD:main`。
+
 ## 2026-06-28 — 10:05 controlled cd-lane 與 legacy runner guard 分流
 
 **背景**：09:46 的 source fail-closed commit 將 `awoooi-cd-lane.service` 與 legacy runner 一起視為壓力事故路徑，導致正式 CD lane 被再次關閉；統帥要求非事故級 guard 全部轉 controlled apply。
@@ -48293,6 +48304,37 @@ production browser smoke:
 **下一個 P0**：
 - 進入 Wazuh runtime gate owner review / controlled apply preflight：補 target selector、source-of-truth diff、check-mode / dry-run、rollback、post-apply verifier；在這些證據未成立前，runtime gate 仍為 `0`。
 
+## 2026-06-28 — 09:50 GitHub account suspended readback 與 source selector preflight 本地完成
+
+**時間與來源**：
+- 2026-06-28 09:30-09:50 Asia/Taipei。
+- 來源：GitHub connector `_get_repo`、`git ls-remote origin`、本地 / 內網 git remote readback、feature branch `codex/github-redacted-evidence-validator-20260627`。
+
+**完成內容**：
+- GitHub live readback 從早前 404 / private admin 狀態變成 account-level 403：connector 對 `owenhytsai/awoooi` 與 missing target 均回 `Sorry. Your account was suspended`；`git remote show origin` / `git ls-remote origin` 也回 `Your account is suspended`。
+- `docs/security/github-target-controlled-execution-preflight.snapshot.json` 更新為 `status=blocked_github_account_suspended_and_write_channel_required`。
+- controlled preflight 新增並固定：`github_account_status=suspended`、`github_account_suspended=true`、`github_api_forbidden_count=6`、`github_connector_missing_target_404_count=0`。
+- 5 個 missing target 的 source selector 已補齊到 committed remote main，不把未提交本地變更偷偷納入 GitHub backup：
+  - `owenhytsai/ewoooc`：`gitea:wooo/ewoooc:main` → `f3e412cd211f5e4601204b256aeb95eae073b441`。
+  - `owenhytsai/bitan-pharmacy`：`internal-origin:bitan-pharmacy:main` → `e122c8cbd9522999fd9844c2b63790fadcc89c20`；本地 64 個 tracked changes 與 untracked changes 另列 source warning。
+  - `owenhytsai/tsenyang-website`：`internal-origin:tsenyang-website:main` → `b369ed8cb6666e8ddaa2d31e1418a02794fdea9d`；本地 29 個 tracked changes 與 untracked outputs 另列 source warning。
+  - `owenhytsai/VibeWork`：`gitea:wooo/vibework:main` → `76a4ee15026af278a3660ad4b4547e9308b107be`；本地 `48275cc52be79107e887147d3fe10310a887afe9` divergence 另列 source warning。
+  - `owenhytsai/agent-bounty-protocol`：`gitea:wooo/agent-bounty-protocol:main` → `b7a733f44f4f645dd21a9b4a9075b89c4a324f64`；本地 `0601df8bd9c0aaedb9ce3a226a6f1aeca645ca0a` divergence 另列 source warning，且不代表 runtime apply。
+- API / Workbench 新增 account suspended 欄位，GitHub lane 顯示 account 403，而不是誤導成單純缺 owner approval。
+
+**本地驗證結果**：
+- `python3 -m json.tool docs/security/github-target-controlled-execution-preflight.snapshot.json`：通過。
+- `python3 -m py_compile apps/api/src/services/github_target_private_backup_evidence_gate.py apps/api/src/services/delivery_closure_workbench.py apps/api/src/api/v1/agents.py`：通過。
+- `python3.11 -m ruff check apps/api/src/services/github_target_private_backup_evidence_gate.py apps/api/src/services/delivery_closure_workbench.py apps/api/src/api/v1/agents.py apps/api/tests/test_github_target_private_backup_evidence_gate.py apps/api/tests/test_github_target_private_backup_evidence_gate_api.py apps/api/tests/test_delivery_closure_workbench_api.py`：通過。
+- `DATABASE_URL=sqlite:///test.db PYTHONPATH=apps/api python3.11 -m pytest apps/api/tests/test_github_target_private_backup_evidence_gate.py apps/api/tests/test_github_target_private_backup_evidence_gate_api.py apps/api/tests/test_delivery_closure_workbench_api.py -q`：`20 passed`。
+- `git diff --check`：通過。
+- 本地 readback snippet：gate `github_account_status=suspended`、`github_account_suspended=True`、`github_api_forbidden_count=6`；preflight `source_preflight_ready_count=5`、`controlled_apply_ready_count=0`、`github_connector_missing_target_404_count=0`；Delivery Workbench GitHub lane `status=blocked_github_account_suspended_and_write_channel_required`、`blocker_count=5`。
+
+**為什麼仍不能全部推上 GitHub**：
+- 不是 owner / read-only / manual gate；受控授權已開，source selector 也已補到 5/5。
+- 目前唯一立即阻擋是 GitHub account-level suspension / 403，導致 create repo、private visibility readback、refs sync 都沒有可用通道。
+- 不讀 token、不收 private clone URL、不用 force push、不建立 public repo、不刪 refs；GitHub 帳號恢復或出現不讀 secret 的 create/write channel 後，下一步就是依 5 個 canonical source SHA 建 private repo 並 normal push。
+
 ## 2026-06-28 — 10:05 Status Cleanup controlled package 本地完成
 
 **時間與來源**：
@@ -48324,3 +48366,41 @@ production browser smoke:
 **下一個 P0**：
 - commit feature，fetch/rebase 到最新 `gitea-ssh/main`，normal push 後等待 Gitea CD deploy marker。
 - 部署後 production readback 目標：Status Cleanup API、Delivery Workbench、AI Agent market radar、AwoooP Approvals / Runs / Work Items / Alerts 都不再把舊 manual gate 當低中高風險預設終局；critical / break-glass 仍需獨立證據。
+
+## 2026-06-28 — 10:16 AI Agent market radar readback CI drift 修正
+
+**時間與來源**：
+- 2026-06-28 10:16 Asia/Taipei。
+- 來源：Gitea CD `cd.yaml #3779` failure log，失敗測試為 `tests/test_ai_agent_market_radar_readback.py`。
+
+**完成內容**：
+- 修正 `docs/operations/ai-agent-market-radar-readback.snapshot.json` 與測試合約漂移：`source_scope.gitea_main_evidence_basis_commit` 從 `8f402983e` 對齊為 `61cf5024`。
+- 修正 `market_practice_alignment` practice key，從 `Durable execution / persistence / controlled review loop` 對齊回測試/API contract 使用的 `Durable execution / persistence / human-in-the-loop`。
+
+**本地驗證結果**：
+- `python3 -m json.tool docs/operations/ai-agent-market-radar-readback.snapshot.json`：通過。
+- `DATABASE_URL=sqlite:///test.db PYTHONPATH=apps/api python3.11 -m pytest apps/api/tests/test_ai_agent_market_radar_readback.py apps/api/tests/test_github_target_private_backup_evidence_gate.py apps/api/tests/test_github_target_private_backup_evidence_gate_api.py apps/api/tests/test_delivery_closure_workbench_api.py -q`：`22 passed`。
+- `git diff --check`：通過。
+
+**仍未做**：
+- 尚未推 main；等待本修正進 feature、再於 main CD idle 時 normal push。
+
+## 2026-06-28 — 10:45 controlled cd-lane drain source verifier 補齊
+
+**時間與來源**：
+- 2026-06-28 10:33-10:45 Asia/Taipei。
+- 來源：110 live `awoooi-cd-lane-drain.service` readback、feature branch `codex/source-controlled-cd-lane-drain-20260628`。
+
+**完成內容**：
+- `scripts/reboot-recovery/awoooi-startup-110.sh` 新增 drain lane verifier：當 `/home/wooo/awoooi-cd-lane-drain` 符合 `capacity=1`、AWOOOI 專用 labels、binary 為 ELF、systemd active 時，保留 drain lane 並只 fail-close regular `awoooi-cd-lane.service`。
+- `full-stack-cold-start-check.sh`、`post-start-quick-check.sh`、`p3-controlled-release-gate.sh` 新增 `CD_LANE_DRAIN_CONTROLLED` 與 `CD_LANE_GUARDRAILS_OK` readback，接受 regular controlled/failclosed 或 drain controlled-open 任一通過。
+- legacy direct/Gitea runner fail-closed、direct runner process count、runner binary stub 檢查維持原樣；未恢復泛用 runner。
+
+**本地與 live 驗證結果**：
+- `bash -n scripts/reboot-recovery/awoooi-startup-110.sh scripts/reboot-recovery/full-stack-cold-start-check.sh scripts/reboot-recovery/post-start-quick-check.sh scripts/reboot-recovery/p3-controlled-release-gate.sh`：通過。
+- `git diff --check`：通過。
+- 110 live readback：`CD_LANE_DRAIN_CONTROLLED mode=controlled_open load=loaded unitfile=enabled active=active capacity=1 labels=1 binary_elf=1 ok=1`、`CD_LANE_GUARDRAILS_OK 1`。
+
+**仍維持**：
+- regular `awoooi-cd-lane.service` masked/inactive；legacy direct runner units fail-closed。
+- 不讀 `.runner`、SQLite、raw session、auth、`.env`；只驗 systemd、capacity/labels 與 binary kind。

docs/security/github-target-controlled-execution-preflight.snapshot.json

@@ -1,202 +1,238 @@
 {
-  "schema_version": "github_target_controlled_execution_preflight_v1",
-  "generated_at": "2026-06-28T08:44:54+08:00",
-  "status": "blocked_github_write_channel_and_source_preflight_required",
-  "mode": "controlled_apply_preflight_no_secret_no_repo_write",
-  "authorization_source": "chat_authorization_2026-06-28_full_hard_gate_open",
-  "summary": {
-    "owner_execution_authorization_received_count": 1,
-    "authorized_missing_target_count": 5,
-    "github_connector_get_repo_checked_count": 6,
-    "github_connector_existing_private_admin_count": 1,
-    "github_connector_missing_target_404_count": 5,
-    "local_gh_auth_ready": false,
-    "github_connector_repo_creation_tool_available": false,
-    "github_connector_refs_write_tool_available": true,
-    "github_create_repo_channel_ready": false,
-    "github_refs_sync_channel_ready": false,
-    "source_preflight_ready_count": 0,
-    "create_private_repo_apply_ready_count": 0,
-    "refs_sync_apply_ready_count": 0,
-    "blocked_preflight_target_count": 5,
-    "write_performed": false,
-    "repo_creation_performed": false,
-    "visibility_change_performed": false,
-    "refs_sync_performed": false,
-    "workflow_trigger_performed": false,
-    "secret_values_collected": false,
-    "private_clone_urls_collected": false
-  },
-  "tool_channel_readback": {
-    "gh_cli_auth_status": "invalid_token_in_keyring",
-    "gh_cli_write_ready": false,
-    "github_connector_read_repo_ready": true,
-    "github_connector_create_repo_ready": false,
-    "github_connector_refs_write_ready": true,
-    "github_connector_verified_private_admin_repo": "owenhytsai/awoooi",
-    "github_connector_missing_target_status": "api_404_not_found",
-    "credential_collection_attempted": false,
-    "secret_value_collection_allowed": false
-  },
-  "required_preflight_checks": [
-    "confirm_target_owner_scope_is_owenhytsai",
-    "verify_github_repo_collision_with_authenticated_readback",
-    "select_canonical_source_without_copying_secret_values",
-    "verify_source_worktree_clean_or_pick_remote_source",
-    "build_source_of_truth_ref_diff",
-    "run_no_force_refs_sync_dry_run",
-    "confirm_private_visibility_post_create",
-    "run_post_sync_refs_readback"
-  ],
-  "rollback_plan": {
-    "repo_creation": "new_private_repo_can_be_left_empty_or_archived_after_no_ref_sync; repo_delete_is_not_authorized_here",
-    "refs_sync": "normal_push_only; rollback_requires new forward commit or branch restore, never force push or ref delete",
-    "visibility": "private_only; public_visibility_is_forbidden",
-    "workflow_trigger": "post_sync_verification_only_after_refs_readback"
-  },
-  "post_apply_verifiers": [
-    "github_get_repo_visibility_private",
-    "github_default_branch_readback",
-    "github_refs_compare_against_canonical_source",
-    "awoooi_github_private_backup_evidence_gate_readback",
-    "delivery_closure_workbench_readback"
-  ],
-  "operation_boundaries": {
-    "read_only_api_allowed": true,
-    "github_api_write_allowed_by_authorization": true,
-    "github_create_repo_channel_ready": false,
-    "github_refs_sync_channel_ready": false,
-    "controlled_apply_allowed": false,
-    "repo_creation_allowed": false,
-    "visibility_change_allowed": false,
-    "refs_sync_allowed": false,
-    "workflow_trigger_allowed": false,
-    "force_push_allowed": false,
-    "delete_refs_allowed": false,
-    "public_visibility_allowed": false,
-    "github_primary_switch_allowed": false,
-    "secret_value_collection_allowed": false,
-    "private_clone_url_collection_allowed": false,
-    "raw_payload_storage_allowed": false
-  },
-  "targets": [
-    {
-      "github_repo": "owenhytsai/ewoooc",
-      "github_readback_status": "api_404_not_found",
-      "target_selector": "github_owner=owenhytsai repo=ewoooc source_candidate=wooo/ewoooc",
-      "source_resolution_status": "blocked_canonical_source_ambiguous",
-      "source_candidate_type": "gitea_repo_exists_with_momo_lineage_conflict",
-      "source_preflight_ready": false,
-      "canonical_source_ready": false,
-      "github_collision_preflight_ready": true,
-      "create_private_repo_apply_ready": false,
-      "refs_sync_apply_ready": false,
-      "controlled_apply_ready": false,
-      "blockers": [
-        "canonical_source_ambiguous",
-        "momo_lineage_conflict_requires_source_truth_diff",
-        "github_create_repo_channel_unavailable",
-        "github_refs_sync_channel_unavailable"
-      ],
-      "next_action": "produce ewoooc versus momo source-of-truth diff, then rerun create/sync dry-run"
+    "schema_version": "github_target_controlled_execution_preflight_v1",
+    "generated_at": "2026-06-28T09:48:36+08:00",
+    "status": "blocked_github_account_suspended_and_write_channel_required",
+    "mode": "controlled_apply_preflight_no_secret_no_repo_write",
+    "authorization_source": "chat_authorization_2026-06-28_full_hard_gate_open",
+    "summary": {
+        "owner_execution_authorization_received_count": 1,
+        "authorized_missing_target_count": 5,
+        "github_connector_get_repo_checked_count": 6,
+        "github_connector_readback_status": "api_403_account_suspended",
+        "github_account_status": "suspended",
+        "github_account_suspended": true,
+        "github_api_forbidden_count": 6,
+        "github_connector_existing_private_admin_count": 0,
+        "github_connector_missing_target_404_count": 0,
+        "local_gh_auth_ready": false,
+        "github_connector_repo_creation_tool_available": false,
+        "github_connector_refs_write_tool_available": true,
+        "github_create_repo_channel_ready": false,
+        "github_refs_sync_channel_ready": false,
+        "source_preflight_ready_count": 5,
+        "create_private_repo_apply_ready_count": 0,
+        "refs_sync_apply_ready_count": 0,
+        "blocked_preflight_target_count": 5,
+        "write_performed": false,
+        "repo_creation_performed": false,
+        "visibility_change_performed": false,
+        "refs_sync_performed": false,
+        "workflow_trigger_performed": false,
+        "secret_values_collected": false,
+        "private_clone_urls_collected": false
     },
-    {
-      "github_repo": "owenhytsai/bitan-pharmacy",
-      "github_readback_status": "api_404_not_found",
-      "target_selector": "github_owner=owenhytsai repo=bitan-pharmacy source_candidate=local_internal_remote_snapshot",
-      "source_resolution_status": "blocked_local_worktree_dirty",
-      "source_candidate_type": "internal_remote_snapshot_candidate",
-      "source_preflight_ready": false,
-      "canonical_source_ready": false,
-      "github_collision_preflight_ready": true,
-      "create_private_repo_apply_ready": false,
-      "refs_sync_apply_ready": false,
-      "controlled_apply_ready": false,
-      "blockers": [
-        "local_worktree_has_tracked_changes",
-        "canonical_remote_source_not_committed_as_gitea_repo",
-        "github_create_repo_channel_unavailable",
-        "github_refs_sync_channel_unavailable"
-      ],
-      "next_action": "choose clean local or internal remote source, run source diff, then rerun no-force refs dry-run"
+    "tool_channel_readback": {
+        "gh_cli_auth_status": "invalid_token_in_keyring_account_suspended",
+        "gh_cli_write_ready": false,
+        "github_connector_read_repo_ready": false,
+        "github_connector_create_repo_ready": false,
+        "github_connector_refs_write_ready": false,
+        "github_connector_verified_private_admin_repo": null,
+        "github_connector_account_status": "suspended",
+        "github_connector_forbidden_status": "api_403_account_suspended",
+        "github_connector_missing_target_status": "api_403_account_suspended",
+        "credential_collection_attempted": false,
+        "secret_value_collection_allowed": false
     },
-    {
-      "github_repo": "owenhytsai/tsenyang-website",
-      "github_readback_status": "api_404_not_found",
-      "target_selector": "github_owner=owenhytsai repo=tsenyang-website source_candidate=local_internal_remote_snapshot",
-      "source_resolution_status": "blocked_local_worktree_dirty",
-      "source_candidate_type": "internal_remote_snapshot_candidate",
-      "source_preflight_ready": false,
-      "canonical_source_ready": false,
-      "github_collision_preflight_ready": true,
-      "create_private_repo_apply_ready": false,
-      "refs_sync_apply_ready": false,
-      "controlled_apply_ready": false,
-      "blockers": [
-        "local_worktree_has_tracked_and_untracked_changes",
-        "canonical_remote_source_not_committed_as_gitea_repo",
-        "github_create_repo_channel_unavailable",
-        "github_refs_sync_channel_unavailable"
-      ],
-      "next_action": "select clean canonical source for tsenyang-website, then rerun no-force refs dry-run"
+    "required_preflight_checks": [
+        "confirm_target_owner_scope_is_owenhytsai",
+        "verify_github_repo_collision_with_authenticated_readback",
+        "select_canonical_source_without_copying_secret_values",
+        "verify_source_worktree_clean_or_pick_remote_source",
+        "build_source_of_truth_ref_diff",
+        "run_no_force_refs_sync_dry_run",
+        "confirm_private_visibility_post_create",
+        "run_post_sync_refs_readback"
+    ],
+    "rollback_plan": {
+        "repo_creation": "new_private_repo_can_be_left_empty_or_archived_after_no_ref_sync; repo_delete_is_not_authorized_here",
+        "refs_sync": "normal_push_only; rollback_requires new forward commit or branch restore, never force push or ref delete",
+        "visibility": "private_only; public_visibility_is_forbidden",
+        "workflow_trigger": "post_sync_verification_only_after_refs_readback"
     },
-    {
-      "github_repo": "owenhytsai/VibeWork",
-      "github_readback_status": "api_404_not_found",
-      "target_selector": "github_owner=owenhytsai repo=VibeWork source_candidate=wooo/vibework",
-      "source_resolution_status": "blocked_product_boundary_and_local_divergence",
-      "source_candidate_type": "gitea_repo_exists_local_worktree_diverged",
-      "source_preflight_ready": false,
-      "canonical_source_ready": false,
-      "github_collision_preflight_ready": true,
-      "create_private_repo_apply_ready": false,
-      "refs_sync_apply_ready": false,
-      "controlled_apply_ready": false,
-      "blockers": [
-        "product_boundary_requires_source_selector",
-        "local_worktree_ahead_behind_with_changes",
-        "github_create_repo_channel_unavailable",
-        "github_refs_sync_channel_unavailable"
-      ],
-      "next_action": "select Gitea vibework or local VibeWork as canonical source, then run refs diff dry-run"
+    "post_apply_verifiers": [
+        "github_get_repo_visibility_private",
+        "github_default_branch_readback",
+        "github_refs_compare_against_canonical_source",
+        "awoooi_github_private_backup_evidence_gate_readback",
+        "delivery_closure_workbench_readback"
+    ],
+    "operation_boundaries": {
+        "read_only_api_allowed": true,
+        "github_api_write_allowed_by_authorization": true,
+        "github_create_repo_channel_ready": false,
+        "github_refs_sync_channel_ready": false,
+        "controlled_apply_allowed": false,
+        "repo_creation_allowed": false,
+        "visibility_change_allowed": false,
+        "refs_sync_allowed": false,
+        "workflow_trigger_allowed": false,
+        "force_push_allowed": false,
+        "delete_refs_allowed": false,
+        "public_visibility_allowed": false,
+        "github_primary_switch_allowed": false,
+        "secret_value_collection_allowed": false,
+        "private_clone_url_collection_allowed": false,
+        "raw_payload_storage_allowed": false
     },
-    {
-      "github_repo": "owenhytsai/agent-bounty-protocol",
-      "github_readback_status": "api_404_not_found",
-      "target_selector": "github_owner=owenhytsai repo=agent-bounty-protocol source_candidate=wooo/agent-bounty-protocol",
-      "source_resolution_status": "blocked_high_risk_runtime_surface",
-      "source_candidate_type": "gitea_repo_exists_high_risk_runtime_surface",
-      "source_preflight_ready": false,
-      "canonical_source_ready": false,
-      "github_collision_preflight_ready": true,
-      "create_private_repo_apply_ready": false,
-      "refs_sync_apply_ready": false,
-      "controlled_apply_ready": false,
-      "blockers": [
-        "large_dirty_scan_not_completed",
-        "runtime_surface_source_selector_required",
-        "github_create_repo_channel_unavailable",
-        "github_refs_sync_channel_unavailable"
-      ],
-      "next_action": "finish bounded dirty/source scan without secrets, then run canonical refs dry-run"
-    }
-  ],
-  "still_forbidden": [
-    "secret_value",
-    "token_value",
-    "private_key",
-    "cookie_or_session",
-    "authorization_header",
-    "private_clone_url_credential",
-    "repo_archive",
-    "git_object_pack",
-    "force_push",
-    "delete_refs",
-    "tag_rewrite",
-    "repo_delete",
-    "github_primary_switch",
-    "public_visibility",
-    "raw_runtime_secret_volume",
-    "unrelated_history_merge"
-  ]
+    "targets": [
+        {
+            "github_repo": "owenhytsai/ewoooc",
+            "github_readback_status": "api_403_account_suspended",
+            "target_selector": "github_owner=owenhytsai repo=ewoooc source_candidate=wooo/ewoooc",
+            "source_resolution_status": "ready_gitea_main_selected_stale_momo_worktrees_excluded",
+            "source_candidate_type": "gitea_repo_exists_with_momo_lineage_conflict",
+            "canonical_source_ref": "gitea:wooo/ewoooc:main",
+            "canonical_source_sha": "f3e412cd211f5e4601204b256aeb95eae073b441",
+            "source_probe_status": "remote_main_verified_https_and_ssh",
+            "source_warnings": [
+                "local_ewoooc_dev_has_uncommitted_changes_excluded",
+                "momo_worktrees_have_stale_or_dirty_refs_excluded"
+            ],
+            "source_preflight_ready": true,
+            "canonical_source_ready": true,
+            "github_collision_preflight_ready": false,
+            "create_private_repo_apply_ready": false,
+            "refs_sync_apply_ready": false,
+            "controlled_apply_ready": false,
+            "blockers": [
+                "github_account_suspended_403",
+                "github_create_repo_channel_unavailable",
+                "github_refs_sync_channel_unavailable"
+            ],
+            "next_action": "restore GitHub write channel, create private repo, then normal-push gitea wooo/ewoooc main"
+        },
+        {
+            "github_repo": "owenhytsai/bitan-pharmacy",
+            "github_readback_status": "api_403_account_suspended",
+            "target_selector": "github_owner=owenhytsai repo=bitan-pharmacy source_candidate=local_internal_remote_snapshot",
+            "source_resolution_status": "ready_internal_remote_main_selected_dirty_worktree_excluded",
+            "source_candidate_type": "internal_remote_snapshot_candidate",
+            "canonical_source_ref": "internal-origin:bitan-pharmacy:main",
+            "canonical_source_sha": "e122c8cbd9522999fd9844c2b63790fadcc89c20",
+            "source_probe_status": "remote_main_verified",
+            "source_warnings": [
+                "local_worktree_has_64_tracked_changes_excluded",
+                "local_worktree_has_untracked_changes_excluded"
+            ],
+            "source_preflight_ready": true,
+            "canonical_source_ready": true,
+            "github_collision_preflight_ready": false,
+            "create_private_repo_apply_ready": false,
+            "refs_sync_apply_ready": false,
+            "controlled_apply_ready": false,
+            "blockers": [
+                "github_account_suspended_403",
+                "github_create_repo_channel_unavailable",
+                "github_refs_sync_channel_unavailable"
+            ],
+            "next_action": "restore GitHub write channel, create private repo, then normal-push internal bitan-pharmacy main; freeze dirty worktree separately if those changes must be backed up"
+        },
+        {
+            "github_repo": "owenhytsai/tsenyang-website",
+            "github_readback_status": "api_403_account_suspended",
+            "target_selector": "github_owner=owenhytsai repo=tsenyang-website source_candidate=local_internal_remote_snapshot",
+            "source_resolution_status": "ready_internal_remote_main_selected_dirty_worktree_excluded",
+            "source_candidate_type": "internal_remote_snapshot_candidate",
+            "canonical_source_ref": "internal-origin:tsenyang-website:main",
+            "canonical_source_sha": "b369ed8cb6666e8ddaa2d31e1418a02794fdea9d",
+            "source_probe_status": "remote_main_verified",
+            "source_warnings": [
+                "local_worktree_has_29_tracked_changes_excluded",
+                "local_worktree_has_untracked_outputs_excluded"
+            ],
+            "source_preflight_ready": true,
+            "canonical_source_ready": true,
+            "github_collision_preflight_ready": false,
+            "create_private_repo_apply_ready": false,
+            "refs_sync_apply_ready": false,
+            "controlled_apply_ready": false,
+            "blockers": [
+                "github_account_suspended_403",
+                "github_create_repo_channel_unavailable",
+                "github_refs_sync_channel_unavailable"
+            ],
+            "next_action": "restore GitHub write channel, create private repo, then normal-push internal tsenyang-website main; freeze dirty worktree separately if those changes must be backed up"
+        },
+        {
+            "github_repo": "owenhytsai/VibeWork",
+            "github_readback_status": "api_403_account_suspended",
+            "target_selector": "github_owner=owenhytsai repo=VibeWork source_candidate=wooo/vibework",
+            "source_resolution_status": "ready_gitea_main_selected_local_divergence_excluded",
+            "source_candidate_type": "gitea_repo_exists_local_worktree_diverged",
+            "canonical_source_ref": "gitea:wooo/vibework:main",
+            "canonical_source_sha": "76a4ee15026af278a3660ad4b4547e9308b107be",
+            "source_probe_status": "remote_main_verified",
+            "source_warnings": [
+                "local_vibework_head_48275cc52be79107e887147d3fe10310a887afe9_excluded",
+                "local_tracked_dirty_count_0"
+            ],
+            "source_preflight_ready": true,
+            "canonical_source_ready": true,
+            "github_collision_preflight_ready": false,
+            "create_private_repo_apply_ready": false,
+            "refs_sync_apply_ready": false,
+            "controlled_apply_ready": false,
+            "blockers": [
+                "github_account_suspended_403",
+                "github_create_repo_channel_unavailable",
+                "github_refs_sync_channel_unavailable"
+            ],
+            "next_action": "restore GitHub write channel, create private repo, then normal-push gitea wooo/vibework main; handle local VibeWork divergence separately"
+        },
+        {
+            "github_repo": "owenhytsai/agent-bounty-protocol",
+            "github_readback_status": "api_403_account_suspended",
+            "target_selector": "github_owner=owenhytsai repo=agent-bounty-protocol source_candidate=wooo/agent-bounty-protocol",
+            "source_resolution_status": "ready_gitea_main_selected_no_runtime_apply",
+            "source_candidate_type": "gitea_repo_exists_high_risk_runtime_surface",
+            "canonical_source_ref": "gitea:wooo/agent-bounty-protocol:main",
+            "canonical_source_sha": "b7a733f44f4f645dd21a9b4a9075b89c4a324f64",
+            "source_probe_status": "remote_main_verified",
+            "source_warnings": [
+                "local_agent_bounty_head_0601df8bd9c0aaedb9ce3a226a6f1aeca645ca0a_excluded",
+                "runtime_surface_not_applied_by_backup_sync"
+            ],
+            "source_preflight_ready": true,
+            "canonical_source_ready": true,
+            "github_collision_preflight_ready": false,
+            "create_private_repo_apply_ready": false,
+            "refs_sync_apply_ready": false,
+            "controlled_apply_ready": false,
+            "blockers": [
+                "github_account_suspended_403",
+                "github_create_repo_channel_unavailable",
+                "github_refs_sync_channel_unavailable"
+            ],
+            "next_action": "restore GitHub write channel, create private repo, then normal-push gitea wooo/agent-bounty-protocol main without runtime apply"
+        }
+    ],
+    "still_forbidden": [
+        "secret_value",
+        "token_value",
+        "private_key",
+        "cookie_or_session",
+        "authorization_header",
+        "private_clone_url_credential",
+        "repo_archive",
+        "git_object_pack",
+        "force_push",
+        "delete_refs",
+        "tag_rewrite",
+        "repo_delete",
+        "github_primary_switch",
+        "public_visibility",
+        "raw_runtime_secret_volume",
+        "unrelated_history_merge"
+    ]
 }

docs/security/wazuh-runtime-controlled-apply-preflight.snapshot.json

@@ -0,0 +1,223 @@
+{
+  "schema_version": "wazuh_runtime_controlled_apply_preflight_v1",
+  "generated_at": "2026-06-28T10:30:00+08:00",
+  "status": "controlled_apply_preflight_ready_no_runtime_action",
+  "mode": "committed_preflight_readback_no_live_wazuh_no_secret_collection",
+  "summary": {
+    "expected_scope_alias_count": 6,
+    "target_selector_count": 6,
+    "source_of_truth_diff_count": 1,
+    "check_mode_plan_count": 1,
+    "dry_run_required_count": 1,
+    "rollback_plan_count": 1,
+    "post_apply_verifier_count": 1,
+    "km_playbook_writeback_count": 1,
+    "maintenance_window_required_count": 1,
+    "owner_review_ready_count": 1,
+    "controlled_apply_preflight_ready_count": 1,
+    "controlled_apply_packet_received_count": 0,
+    "controlled_apply_packet_accepted_count": 0,
+    "controlled_apply_packet_quarantined_count": 0,
+    "controlled_apply_runtime_action_rejected_count": 0,
+    "forbidden_payload_count": 18,
+    "forbidden_action_count": 20,
+    "runtime_gate_count": 0,
+    "wazuh_api_live_query_authorized_count": 0,
+    "wazuh_active_response_authorized_count": 0,
+    "host_write_authorized_count": 0,
+    "secret_value_collection_allowed_count": 0
+  },
+  "target_selectors": [
+    {
+      "node_alias": "managed_core_node_a",
+      "scope": "wazuh_manager_registry_accepted_alias",
+      "selector_kind": "public_alias_only",
+      "runtime_write_allowed": false
+    },
+    {
+      "node_alias": "managed_core_node_b",
+      "scope": "wazuh_manager_registry_accepted_alias",
+      "selector_kind": "public_alias_only",
+      "runtime_write_allowed": false
+    },
+    {
+      "node_alias": "managed_core_node_c",
+      "scope": "wazuh_manager_registry_accepted_alias",
+      "selector_kind": "public_alias_only",
+      "runtime_write_allowed": false
+    },
+    {
+      "node_alias": "managed_edge_node_a",
+      "scope": "wazuh_manager_registry_accepted_alias",
+      "selector_kind": "public_alias_only",
+      "runtime_write_allowed": false
+    },
+    {
+      "node_alias": "managed_edge_node_b",
+      "scope": "wazuh_manager_registry_accepted_alias",
+      "selector_kind": "public_alias_only",
+      "runtime_write_allowed": false
+    },
+    {
+      "node_alias": "managed_lab_node_a",
+      "scope": "wazuh_manager_registry_accepted_alias",
+      "selector_kind": "public_alias_only",
+      "runtime_write_allowed": false
+    }
+  ],
+  "required_packet_fields": [
+    "controlled_apply_intent",
+    "target_selector_aliases",
+    "source_of_truth_diff_ref",
+    "check_mode_plan_ref",
+    "dry_run_evidence_ref",
+    "blast_radius_statement",
+    "rollback_plan_ref",
+    "post_apply_verifier_ref",
+    "km_playbook_writeback_ref",
+    "maintenance_window",
+    "followup_owner",
+    "rollback_owner",
+    "audit_receipt_ref",
+    "runtime_boundary_ack"
+  ],
+  "preflight_items": [
+    {
+      "item_id": "target_selector",
+      "title": "Public alias target selector",
+      "state_key": "target_selector_ready",
+      "ready": true,
+      "required_fields": [
+        "target_selector_aliases"
+      ],
+      "next_gate": "run check-mode against allowlisted route before any runtime action"
+    },
+    {
+      "item_id": "source_of_truth_diff",
+      "title": "Source-of-truth diff reference",
+      "state_key": "source_of_truth_diff_ready",
+      "ready": true,
+      "required_fields": [
+        "source_of_truth_diff_ref"
+      ],
+      "next_gate": "review repo or playbook diff before controlled apply"
+    },
+    {
+      "item_id": "check_mode_dry_run",
+      "title": "Check-mode and dry-run evidence",
+      "state_key": "check_mode_dry_run_ready",
+      "ready": true,
+      "required_fields": [
+        "check_mode_plan_ref",
+        "dry_run_evidence_ref"
+      ],
+      "next_gate": "store dry-run evidence reference without raw host output"
+    },
+    {
+      "item_id": "rollback",
+      "title": "Rollback plan",
+      "state_key": "rollback_ready",
+      "ready": true,
+      "required_fields": [
+        "rollback_plan_ref",
+        "rollback_owner"
+      ],
+      "next_gate": "rollback must remain available before apply"
+    },
+    {
+      "item_id": "post_apply_verifier",
+      "title": "Post-apply verifier",
+      "state_key": "post_apply_verifier_ready",
+      "ready": true,
+      "required_fields": [
+        "post_apply_verifier_ref"
+      ],
+      "next_gate": "verifier readback must run after any future controlled apply"
+    },
+    {
+      "item_id": "learning_writeback",
+      "title": "KM and PlayBook trust writeback",
+      "state_key": "learning_writeback_ready",
+      "ready": true,
+      "required_fields": [
+        "km_playbook_writeback_ref",
+        "audit_receipt_ref"
+      ],
+      "next_gate": "writeback receipt required after verifier"
+    }
+  ],
+  "outcome_lanes": [
+    "accepted_for_controlled_apply_preflight_review_only",
+    "request_controlled_apply_packet_supplement",
+    "quarantine_sensitive_payload",
+    "reject_runtime_action_request"
+  ],
+  "forbidden_payloads": [
+    "secret_value",
+    "token_value",
+    "private_key",
+    "cookie",
+    "session",
+    "authorization_header",
+    "client.keys",
+    "raw_wazuh_payload",
+    "raw_agent_identity",
+    "raw_hostname",
+    "internal_ip",
+    "full_cli_output",
+    "full_journal",
+    "raw_dashboard_request",
+    "unredacted_screenshot",
+    "private_namespace",
+    "raw_env_file",
+    "raw_runtime_volume"
+  ],
+  "forbidden_actions": [
+    "wazuh_api_live_query",
+    "wazuh_active_response",
+    "wazuh_agent_restart",
+    "wazuh_agent_reenroll",
+    "wazuh_manager_restart",
+    "host_write",
+    "systemd_restart",
+    "docker_restart",
+    "nginx_reload",
+    "firewall_change",
+    "kali_active_scan",
+    "credentialed_scan",
+    "exploit_attempt",
+    "secret_rotation",
+    "k8s_apply",
+    "argocd_sync",
+    "database_migration",
+    "force_push",
+    "repo_ref_delete",
+    "workflow_trigger"
+  ],
+  "execution_boundaries": {
+    "active_scan_authorized": false,
+    "alertmanager_reload_authorized": false,
+    "auto_block_authorized": false,
+    "credentialed_scan_authorized": false,
+    "firewall_change_authorized": false,
+    "host_write_authorized": false,
+    "kali_execute_authorized": false,
+    "kali_scan_authorized": false,
+    "nginx_reload_authorized": false,
+    "production_write_authorized": false,
+    "runtime_execution_authorized": false,
+    "runtime_gate_open": false,
+    "secret_value_collection_allowed": false,
+    "telegram_send_authorized": false,
+    "wazuh_active_response_authorized": false,
+    "wazuh_api_live_query_authorized": false,
+    "not_authorization": true
+  },
+  "no_false_green_rules": [
+    "Controlled apply preflight ready does not open runtime gate.",
+    "Target selectors are public aliases only and do not authorize host writes.",
+    "Check-mode and dry-run references do not authorize live Wazuh queries.",
+    "Rollback and verifier readiness does not authorize active response.",
+    "KM and PlayBook writeback readiness does not permit secret collection."
+  ]
+}

k8s/awoooi-prod/kustomization.yaml

@@ -41,7 +41,7 @@ resources:
 images:
 - name: 192.168.0.110:5000/library/api:IMAGE_TAG_PLACEHOLDER
   newName: 192.168.0.110:5000/awoooi/api
-  newTag: a1f5935481ad01cc3f73ebb4354726d57e7a2e41
+  newTag: 02971e128d6347bd427b04d3b46e62faffcc4596
 - name: 192.168.0.110:5000/library/web:IMAGE_TAG_PLACEHOLDER
   newName: 192.168.0.110:5000/awoooi/web
-  newTag: 264b8e0a70a7b2fad70afede4b0d7a1c08d1aef8
+  newTag: 02971e128d6347bd427b04d3b46e62faffcc4596

scripts/reboot-recovery/awoooi-startup-110.sh

@@ -198,6 +198,10 @@ CD_LANE_DIR="/home/wooo/awoooi-cd-lane"
 CD_LANE_SERVICE="awoooi-cd-lane.service"
 CD_LANE_BINARY="$CD_LANE_DIR/awoooi_cd_lane"
 CD_LANE_CONFIG="$CD_LANE_DIR/config.yaml"
+CD_LANE_DRAIN_DIR="/home/wooo/awoooi-cd-lane-drain"
+CD_LANE_DRAIN_SERVICE="awoooi-cd-lane-drain.service"
+CD_LANE_DRAIN_BINARY="$CD_LANE_DRAIN_DIR/awoooi_cd_lane_controlled"
+CD_LANE_DRAIN_CONFIG="$CD_LANE_DRAIN_DIR/config.yaml"
 CD_LANE_ENABLE_SENTINEL="/run/awoooi-cd-lane-enabled"
 START_CONTROLLED_CD_LANE="${AWOOOI_START_CONTROLLED_CD_LANE:-0}"
 START_CD_LANE_ALLOWED=0
@@ -300,18 +304,55 @@ EOF
     chattr +i "$unit_file" >/dev/null 2>&1 || true
 }
 
-cd_lane_config_is_controlled() {
-    [ -f "$CD_LANE_CONFIG" ] || return 1
-    grep -Eq '^[[:space:]]+capacity:[[:space:]]*1[[:space:]]*$' "$CD_LANE_CONFIG" || return 1
-    grep -q 'awoooi-ubuntu:docker://192.168.0.110:5000/awoooi/ci-runner:act-22.04' "$CD_LANE_CONFIG" || return 1
-    grep -q 'awoooi-host:host' "$CD_LANE_CONFIG" || return 1
-    if grep -Eq '^[[:space:]]+- ".*(ubuntu-latest|stockplatform|headless|playwright)' "$CD_LANE_CONFIG"; then
+cd_lane_config_path_is_controlled() {
+    local config_path="$1"
+    [ -f "$config_path" ] || return 1
+    grep -Eq '^[[:space:]]+capacity:[[:space:]]*1[[:space:]]*$' "$config_path" || return 1
+    grep -q 'awoooi-ubuntu:docker://192.168.0.110:5000/awoooi/ci-runner:act-22.04' "$config_path" || return 1
+    grep -q 'awoooi-host:host' "$config_path" || return 1
+    if grep -Eq '^[[:space:]]+- ".*(ubuntu-latest|stockplatform|headless|playwright)' "$config_path"; then
         return 1
     fi
     return 0
 }
 
+cd_lane_config_is_controlled() {
+    cd_lane_config_path_is_controlled "$CD_LANE_CONFIG"
+}
+
+cd_lane_drain_config_is_controlled() {
+    cd_lane_config_path_is_controlled "$CD_LANE_DRAIN_CONFIG"
+}
+
+cd_lane_drain_is_controlled_open() {
+    local active
+    active="$(systemctl show "$CD_LANE_DRAIN_SERVICE" -p ActiveState --value 2>/dev/null || true)"
+    [ "$active" = "active" ] || return 1
+    cd_lane_drain_config_is_controlled || return 1
+    file "$CD_LANE_DRAIN_BINARY" 2>/dev/null | grep -qi "ELF" || return 1
+    return 0
+}
+
 ensure_cd_lane_fail_closed() {
+    if cd_lane_drain_is_controlled_open; then
+        log "✅ controlled cd-lane drain verifier passed; preserving drain lane and fail-closing regular lane only"
+        systemctl kill --signal=SIGKILL "$CD_LANE_SERVICE" >/dev/null 2>&1 || true
+        systemctl stop "$CD_LANE_SERVICE" >/dev/null 2>&1 || true
+        systemctl disable "$CD_LANE_SERVICE" >/dev/null 2>&1 || true
+        install_cd_lane_fail_closed_unit
+        pkill -KILL -f "^${CD_LANE_BINARY} daemon" >/dev/null 2>&1 || true
+        systemctl daemon-reload >/dev/null 2>&1 || true
+        return 0
+    fi
+    if { [ -e "$CD_LANE_ENABLE_SENTINEL" ] || [ -e "/run/awoooi-cd-lane-controlled-open" ] || [ "$START_CONTROLLED_CD_LANE" = "1" ]; } \
+        && cd_lane_config_is_controlled \
+        && file "$CD_LANE_BINARY" 2>/dev/null | grep -qi "ELF"; then
+        log "✅ controlled cd-lane verifier passed; keeping dedicated lane open"
+        install_controlled_cd_lane_unit
+        systemctl daemon-reload >/dev/null 2>&1 || true
+        systemctl enable --now "$CD_LANE_SERVICE" >/dev/null 2>&1 || true
+        return 0
+    fi
     systemctl kill --signal=SIGKILL "$CD_LANE_SERVICE" >/dev/null 2>&1 || true
     systemctl stop "$CD_LANE_SERVICE" >/dev/null 2>&1 || true
     systemctl disable "$CD_LANE_SERVICE" >/dev/null 2>&1 || true
@@ -342,7 +383,7 @@ Environment=AWOOOI_CONTROLLED_RUNNER_OPEN=1
 Environment=HOST_WEB_BUILD_PRESSURE_ATTEMPTS=1
 Environment=HOST_WEB_BUILD_PRESSURE_SLEEP_SECONDS=1
 ExecStart=${CD_LANE_BINARY} daemon --config ${CD_LANE_CONFIG}
-Restart=on-failure
+Restart=always
 RestartSec=10
 KillSignal=SIGINT
 TimeoutStopSec=3700

scripts/reboot-recovery/full-stack-cold-start-check.sh

@@ -327,6 +327,38 @@ elif [ "$cd_lane_sentinel" = "present" ] && [ "$cd_lane_active" = "active" ] &&
   cd_lane_mode=controlled_open
 fi
 echo "CD_LANE_CONTROLLED mode=$cd_lane_mode load=$cd_lane_load unitfile=$cd_lane_unitfile active=$cd_lane_active mainpid=$cd_lane_mainpid sentinel=$cd_lane_sentinel capacity=$cd_lane_capacity_ok labels=$cd_lane_labels_ok binary_elf=$cd_lane_binary_elf ok=$cd_lane_ok"
+cd_lane_drain_load=$(systemctl show awoooi-cd-lane-drain.service -p LoadState --value 2>/dev/null || true)
+cd_lane_drain_unitfile=$(systemctl show awoooi-cd-lane-drain.service -p UnitFileState --value 2>/dev/null || true)
+cd_lane_drain_active=$(systemctl show awoooi-cd-lane-drain.service -p ActiveState --value 2>/dev/null || true)
+cd_lane_drain_mainpid=$(systemctl show awoooi-cd-lane-drain.service -p MainPID --value 2>/dev/null || true)
+cd_lane_drain_capacity_ok=0
+cd_lane_drain_labels_ok=0
+if grep -Eq "^[[:space:]]+capacity:[[:space:]]*1[[:space:]]*$" /home/wooo/awoooi-cd-lane-drain/config.yaml 2>/dev/null; then
+  cd_lane_drain_capacity_ok=1
+fi
+if grep -q "awoooi-ubuntu:docker://192.168.0.110:5000/awoooi/ci-runner:act-22.04" /home/wooo/awoooi-cd-lane-drain/config.yaml 2>/dev/null \
+  && grep -q "awoooi-host:host" /home/wooo/awoooi-cd-lane-drain/config.yaml 2>/dev/null \
+  && ! grep -Eq "^[[:space:]]+- \".*(ubuntu-latest|stockplatform|headless|playwright)" /home/wooo/awoooi-cd-lane-drain/config.yaml 2>/dev/null; then
+  cd_lane_drain_labels_ok=1
+fi
+cd_lane_drain_binary_kind=$(file -b /home/wooo/awoooi-cd-lane-drain/awoooi_cd_lane_controlled 2>/dev/null || echo missing)
+cd_lane_drain_binary_elf=0
+echo "$cd_lane_drain_binary_kind" | grep -qi "ELF" && cd_lane_drain_binary_elf=1
+cd_lane_drain_ok=0
+cd_lane_drain_mode=absent
+if [ "$cd_lane_drain_load" = "loaded" ] || [ "$cd_lane_drain_unitfile" = "enabled" ] || [ "$cd_lane_drain_active" = "active" ]; then
+  cd_lane_drain_mode=blocked
+fi
+if [ "$cd_lane_drain_active" = "active" ] && [ "$cd_lane_drain_capacity_ok" = "1" ] && [ "$cd_lane_drain_labels_ok" = "1" ] && [ "$cd_lane_drain_binary_elf" = "1" ]; then
+  cd_lane_drain_ok=1
+  cd_lane_drain_mode=controlled_open
+fi
+echo "CD_LANE_DRAIN_CONTROLLED mode=$cd_lane_drain_mode load=$cd_lane_drain_load unitfile=$cd_lane_drain_unitfile active=$cd_lane_drain_active mainpid=$cd_lane_drain_mainpid capacity=$cd_lane_drain_capacity_ok labels=$cd_lane_drain_labels_ok binary_elf=$cd_lane_drain_binary_elf ok=$cd_lane_drain_ok"
+cd_lane_guard_ok=0
+if [ "$cd_lane_ok" = "1" ] || [ "$cd_lane_drain_ok" = "1" ]; then
+  cd_lane_guard_ok=1
+fi
+echo "CD_LANE_GUARDRAILS_OK $cd_lane_guard_ok"
 direct_runner_count=$(pgrep -f "^/home/wooo/act-runner/act_runner|^/home/wooo/act-runner-controlled/act_runner|^/home/wooo/awoooi-controlled-runner/awoooi_controlled_runner" 2>/dev/null | wc -l | tr -d " ")
 echo "RUNNER_DIRECT_PROCESS_COUNT $direct_runner_count"
 for p in /home/wooo/act-runner/act_runner /home/wooo/act-runner/act_runner.real-20260628-runner-pressure-guard /home/wooo/act-runner-controlled/act_runner /home/wooo/awoooi-controlled-runner/awoooi_controlled_runner; do
@@ -362,7 +394,7 @@ docker ps --format "DOCKER {{.Names}}\t{{.Status}}" | head -120
   else
     fail "110 legacy direct/Gitea runner units are not fail-closed"
   fi
-  grep -q "CD_LANE_CONTROLLED .*ok=1" <<<"$out" && ok "110 controlled cd-lane is safe or fail-closed" || fail "110 controlled cd-lane is neither safe-open nor fail-closed"
+  grep -q "CD_LANE_GUARDRAILS_OK 1" <<<"$out" && ok "110 controlled cd-lane is safe, drained, or fail-closed" || fail "110 controlled cd-lane is neither safe-open/drained nor fail-closed"
   grep -q "RUNNER_DIRECT_PROCESS_COUNT 0" <<<"$out" && ok "110 legacy direct runner process count is zero" || fail "110 legacy direct runner process detected"
   grep -q "RUNNER_FAILCLOSED_BINARY_ELF" <<<"$out" && fail "110 runner fail-closed binary path restored to ELF" || ok "110 runner binary paths are fail-closed stubs or missing"
   grep -q "sentry-self-hosted-clickhouse-1.*Restarting" <<<"$out" && warn "Sentry ClickHouse restarting" || ok "Sentry ClickHouse not visibly restarting"

scripts/reboot-recovery/p3-controlled-release-gate.sh

@@ -346,7 +346,38 @@ elif [ "$cd_lane_sentinel" = "present" ] && [ "$cd_lane_active" = "active" ] &&
   cd_lane_mode=controlled_open
 fi
 echo "CD_LANE_CONTROLLED mode=$cd_lane_mode load=$cd_lane_load unitfile=$cd_lane_unitfile active=$cd_lane_active sentinel=$cd_lane_sentinel capacity=$cd_lane_capacity_ok labels=$cd_lane_labels_ok binary_elf=$cd_lane_binary_elf ok=$cd_lane_ok"
-[ "$cd_lane_ok" = "1" ] || bad=1
+cd_lane_drain_load=$(systemctl show awoooi-cd-lane-drain.service -p LoadState --value 2>/dev/null || true)
+cd_lane_drain_unitfile=$(systemctl show awoooi-cd-lane-drain.service -p UnitFileState --value 2>/dev/null || true)
+cd_lane_drain_active=$(systemctl show awoooi-cd-lane-drain.service -p ActiveState --value 2>/dev/null || true)
+cd_lane_drain_capacity_ok=0
+cd_lane_drain_labels_ok=0
+if grep -Eq "^[[:space:]]+capacity:[[:space:]]*1[[:space:]]*$" /home/wooo/awoooi-cd-lane-drain/config.yaml 2>/dev/null; then
+  cd_lane_drain_capacity_ok=1
+fi
+if grep -q "awoooi-ubuntu:docker://192.168.0.110:5000/awoooi/ci-runner:act-22.04" /home/wooo/awoooi-cd-lane-drain/config.yaml 2>/dev/null \
+  && grep -q "awoooi-host:host" /home/wooo/awoooi-cd-lane-drain/config.yaml 2>/dev/null \
+  && ! grep -Eq "^[[:space:]]+- \".*(ubuntu-latest|stockplatform|headless|playwright)" /home/wooo/awoooi-cd-lane-drain/config.yaml 2>/dev/null; then
+  cd_lane_drain_labels_ok=1
+fi
+cd_lane_drain_binary_kind=$(file -b /home/wooo/awoooi-cd-lane-drain/awoooi_cd_lane_controlled 2>/dev/null || echo missing)
+cd_lane_drain_binary_elf=0
+echo "$cd_lane_drain_binary_kind" | grep -qi "ELF" && cd_lane_drain_binary_elf=1
+cd_lane_drain_ok=0
+cd_lane_drain_mode=absent
+if [ "$cd_lane_drain_load" = "loaded" ] || [ "$cd_lane_drain_unitfile" = "enabled" ] || [ "$cd_lane_drain_active" = "active" ]; then
+  cd_lane_drain_mode=blocked
+fi
+if [ "$cd_lane_drain_active" = "active" ] && [ "$cd_lane_drain_capacity_ok" = "1" ] && [ "$cd_lane_drain_labels_ok" = "1" ] && [ "$cd_lane_drain_binary_elf" = "1" ]; then
+  cd_lane_drain_ok=1
+  cd_lane_drain_mode=controlled_open
+fi
+echo "CD_LANE_DRAIN_CONTROLLED mode=$cd_lane_drain_mode load=$cd_lane_drain_load unitfile=$cd_lane_drain_unitfile active=$cd_lane_drain_active capacity=$cd_lane_drain_capacity_ok labels=$cd_lane_drain_labels_ok binary_elf=$cd_lane_drain_binary_elf ok=$cd_lane_drain_ok"
+cd_lane_guard_ok=0
+if [ "$cd_lane_ok" = "1" ] || [ "$cd_lane_drain_ok" = "1" ]; then
+  cd_lane_guard_ok=1
+fi
+echo "CD_LANE_GUARDRAILS_OK $cd_lane_guard_ok"
+[ "$cd_lane_guard_ok" = "1" ] || bad=1
 direct_runner_count=$(pgrep -f "^/home/wooo/act-runner/act_runner|^/home/wooo/act-runner-controlled/act_runner|^/home/wooo/awoooi-controlled-runner/awoooi_controlled_runner" 2>/dev/null | wc -l | tr -d " ")
 echo "RUNNER_DIRECT_PROCESS_COUNT $direct_runner_count"
 [ "$direct_runner_count" = "0" ] || bad=1

scripts/reboot-recovery/post-start-quick-check.sh

@@ -579,6 +579,38 @@ elif [ "$cd_lane_sentinel" = "present" ] && [ "$cd_lane_active" = "active" ] &&
   cd_lane_mode=controlled_open
 fi
 echo "CD_LANE_CONTROLLED mode=$cd_lane_mode load=$cd_lane_load unitfile=$cd_lane_unitfile active=$cd_lane_active mainpid=$cd_lane_mainpid sentinel=$cd_lane_sentinel capacity=$cd_lane_capacity_ok labels=$cd_lane_labels_ok binary_elf=$cd_lane_binary_elf ok=$cd_lane_ok"
+cd_lane_drain_load=$(systemctl show awoooi-cd-lane-drain.service -p LoadState --value 2>/dev/null || true)
+cd_lane_drain_unitfile=$(systemctl show awoooi-cd-lane-drain.service -p UnitFileState --value 2>/dev/null || true)
+cd_lane_drain_active=$(systemctl show awoooi-cd-lane-drain.service -p ActiveState --value 2>/dev/null || true)
+cd_lane_drain_mainpid=$(systemctl show awoooi-cd-lane-drain.service -p MainPID --value 2>/dev/null || true)
+cd_lane_drain_capacity_ok=0
+cd_lane_drain_labels_ok=0
+if grep -Eq "^[[:space:]]+capacity:[[:space:]]*1[[:space:]]*$" /home/wooo/awoooi-cd-lane-drain/config.yaml 2>/dev/null; then
+  cd_lane_drain_capacity_ok=1
+fi
+if grep -q "awoooi-ubuntu:docker://192.168.0.110:5000/awoooi/ci-runner:act-22.04" /home/wooo/awoooi-cd-lane-drain/config.yaml 2>/dev/null \
+  && grep -q "awoooi-host:host" /home/wooo/awoooi-cd-lane-drain/config.yaml 2>/dev/null \
+  && ! grep -Eq "^[[:space:]]+- \".*(ubuntu-latest|stockplatform|headless|playwright)" /home/wooo/awoooi-cd-lane-drain/config.yaml 2>/dev/null; then
+  cd_lane_drain_labels_ok=1
+fi
+cd_lane_drain_binary_kind=$(file -b /home/wooo/awoooi-cd-lane-drain/awoooi_cd_lane_controlled 2>/dev/null || echo missing)
+cd_lane_drain_binary_elf=0
+echo "$cd_lane_drain_binary_kind" | grep -qi "ELF" && cd_lane_drain_binary_elf=1
+cd_lane_drain_ok=0
+cd_lane_drain_mode=absent
+if [ "$cd_lane_drain_load" = "loaded" ] || [ "$cd_lane_drain_unitfile" = "enabled" ] || [ "$cd_lane_drain_active" = "active" ]; then
+  cd_lane_drain_mode=blocked
+fi
+if [ "$cd_lane_drain_active" = "active" ] && [ "$cd_lane_drain_capacity_ok" = "1" ] && [ "$cd_lane_drain_labels_ok" = "1" ] && [ "$cd_lane_drain_binary_elf" = "1" ]; then
+  cd_lane_drain_ok=1
+  cd_lane_drain_mode=controlled_open
+fi
+echo "CD_LANE_DRAIN_CONTROLLED mode=$cd_lane_drain_mode load=$cd_lane_drain_load unitfile=$cd_lane_drain_unitfile active=$cd_lane_drain_active mainpid=$cd_lane_drain_mainpid capacity=$cd_lane_drain_capacity_ok labels=$cd_lane_drain_labels_ok binary_elf=$cd_lane_drain_binary_elf ok=$cd_lane_drain_ok"
+cd_lane_guard_ok=0
+if [ "$cd_lane_ok" = "1" ] || [ "$cd_lane_drain_ok" = "1" ]; then
+  cd_lane_guard_ok=1
+fi
+echo "CD_LANE_GUARDRAILS_OK $cd_lane_guard_ok"
 direct_runner_count=$(pgrep -f "^/home/wooo/act-runner/act_runner|^/home/wooo/act-runner-controlled/act_runner|^/home/wooo/awoooi-controlled-runner/awoooi_controlled_runner" 2>/dev/null | wc -l | tr -d " ")
 echo "RUNNER_DIRECT_PROCESS_COUNT $direct_runner_count"
 for p in /home/wooo/act-runner/act_runner /home/wooo/act-runner/act_runner.real-20260628-runner-pressure-guard /home/wooo/act-runner-controlled/act_runner /home/wooo/awoooi-controlled-runner/awoooi_controlled_runner; do
@@ -599,7 +631,7 @@ if awk '$1 == "RUNNER_FAILCLOSED_UNIT" && $NF != "ok=1" {bad=1} END {exit bad}'
 else
   blocked "110 legacy direct/Gitea runner units are not fail-closed"
 fi
-grep -q "CD_LANE_CONTROLLED .*ok=1" "$runner_tmp" && ok "110 controlled cd-lane is safe or fail-closed" || blocked "110 controlled cd-lane is neither safe-open nor fail-closed"
+grep -q "CD_LANE_GUARDRAILS_OK 1" "$runner_tmp" && ok "110 controlled cd-lane is safe, drained, or fail-closed" || blocked "110 controlled cd-lane is neither safe-open/drained nor fail-closed"
 grep -q "RUNNER_DIRECT_PROCESS_COUNT 0" "$runner_tmp" && ok "110 legacy direct runner process count is zero" || blocked "110 legacy direct runner process detected"
 grep -q "RUNNER_FAILCLOSED_BINARY_ELF" "$runner_tmp" && blocked "110 runner fail-closed binary path restored to ELF" || ok "110 runner binary paths are fail-closed stubs or missing"
 grep -q "RUNNER_PRESSURE_GATE_RC 0" "$runner_tmp" && ok "110 host pressure gate returned 0" || blocked "110 host pressure gate is blocking"