{ "schema_version": "ai_agent_deployment_layout_v1", "generated_at": "2026-06-11T18:20:00+08:00", "program_status": { "overall_completion_percent": 45, "current_priority": "P1", "current_task_id": "P1-402", "next_task_id": "P1-403", "read_only_mode": true, "deployment_authority": "layout_only_no_runtime_deploy" }, "agent_contracts": [ { "agent_id": "openclaw", "display_name": "OpenClaw", "primary_specialty": "生產仲裁、風險判斷、HITL 關卡與執行前後驗證", "deployment_lane": "production_decision_core", "allowed_autonomy": [ "只讀診斷", "風險分級", "批准包審查", "Telegram action-required 分流", "批准後的 dry-run / 執行仲裁" ], "must_delegate_to": [ "Hermes 負責治理、文件、降噪與盤點彙整", "NemoTron 負責離線模型能力比較與 replay 評分" ], "blocked_actions": [ "未批准的生產寫入", "未批准的 destructive operation", "未批准的 provider route 切換", "未批准的 Telegram 直接發送", "未通過 replacement gate 前降級或取代自身生產角色" ], "learning_scope": [ "incident lifecycle", "approval outcome", "post-execution verification", "playbook trust score", "alert grouping quality" ] }, { "agent_id": "hermes", "display_name": "Hermes", "primary_specialty": "治理、知識管理、文件、套件/供應鏈、降噪與跨專案盤點", "deployment_lane": "governance_knowledge_and_reporting", "allowed_autonomy": [ "只讀盤點", "Runbook / KM 草稿", "市場與依賴漂移摘要", "告警降噪提案", "批准包起草" ], "must_delegate_to": [ "OpenClaw 仲裁任何生產、Telegram、host mutation 或 rollback", "NemoTron 評估模型/工具能力與 replay 結果" ], "blocked_actions": [ "直接改生產環境", "直接發送 Telegram 通知", "直接修改 Secret", "自行升級套件或 SDK", "自行切換 AI provider" ], "learning_scope": [ "runbook freshness", "docs drift", "dependency drift", "service health evidence gap", "operator review feedback" ] }, { "agent_id": "nemotron", "display_name": "NemoTron / Nemotron", "primary_specialty": "離線專家評估、模型工具能力比較、NIM/NVIDIA replay 與長任務 Agent 能力驗證", "deployment_lane": "offline_evaluator_and_specialist_candidate", "allowed_autonomy": [ "sanitized request pack 分析", "5-record smoke 評分", "50-record replay 結果比較", "工具呼叫輸出合約檢查", "候選模型能力矩陣更新" ], "must_delegate_to": [ "OpenClaw 仲裁生產風險與是否可進 shadow/canary", "Hermes 彙整市場來源、文件與 operator 報告" ], "blocked_actions": [ "直接讀取 production secret", "未批准的 paid API / NIM 呼叫", "未批准的 SDK 安裝", "未通過 smoke gate 前進 full replay", "自行進 shadow/canary 或生產路由" ], "learning_scope": [ "smoke gate failures", "output contract completeness", "latency budget", "tool calling reliability", "OpenClaw same-run baseline delta" ] } ], "domains": [ { "domain_id": "hosts", "display_name": "主機", "description": "110 / 111 / 112 / 120 / 121 / 188 的只讀監控、診斷、備份與批准後修復佈局。" }, { "domain_id": "packages", "display_name": "套件與建置", "description": "Python、pnpm/npm、Docker base image、CVE、license、digest 與 drift。" }, { "domain_id": "tools", "display_name": "工具", "description": "Gitea、Harbor、Prometheus、Alertmanager、SigNoz、Sentry、Open-WebUI、Telegram、Ansible。" }, { "domain_id": "services", "display_name": "服務", "description": "API、Web、AwoooP、IwoooS、PostgreSQL、Redis、K8s workload 與內部控制面。" }, { "domain_id": "projects", "display_name": "專案", "description": "AWOOOI 及已納入治理視野的外部/相鄰專案。" }, { "domain_id": "websites", "display_name": "網站前後台", "description": "公開站、治理後台、告警後台、AwoooP 後台、IwoooS 後台。" }, { "domain_id": "learning", "display_name": "學習與協作", "description": "AgentSession、KM、Playbook trust、market watch、replay harness。" } ], "deployment_targets": [ { "target_id": "host_110", "domain_id": "hosts", "display_name": "110 DevOps / Gitea runner / monitoring host", "target_type": "host", "primary_agent": "openclaw", "supporting_agents": ["hermes"], "deployment_state": "active_governed", "automation_level": "prepare_only", "capabilities": ["host health diagnosis", "runner health review", "backup freshness review", "approval package"], "telegram_policy": "action_required", "learning_inputs": ["Gitea workflow result", "runner evidence", "backup status", "Alertmanager route"], "communication_channels": ["AwoooP approval", "Telegram failure/action-required", "Prometheus metrics"], "approval_gate": "host mutation requires human approval", "evidence_refs": ["infra/ansible/inventory/hosts.yml", "docs/evaluations/gitea_workflow_runner_health_2026-06-05.json"], "next_action": "把 runner / backup / monitoring 狀態納入 Agent 協作節點，但只允許準備修復提案。" }, { "target_id": "host_188", "domain_id": "hosts", "display_name": "188 AI / Web / PostgreSQL / Redis / SigNoz host", "target_type": "host", "primary_agent": "openclaw", "supporting_agents": ["hermes", "nemotron"], "deployment_state": "active_governed", "automation_level": "prepare_only", "capabilities": ["AI provider health review", "database/cache health review", "observability review", "NemoTron candidate evidence"], "telegram_policy": "action_required", "learning_inputs": ["AI route matrix", "DB backup status", "SigNoz/ClickHouse evidence", "NemoTron smoke result"], "communication_channels": ["AwoooP approval", "Telegram failure/action-required", "Prometheus metrics"], "approval_gate": "host mutation, service restart, provider route change require explicit approval", "evidence_refs": ["infra/ansible/inventory/hosts.yml", "docs/evaluations/ai_provider_route_matrix_2026-06-05.json"], "next_action": "建立 OpenClaw 主仲裁、Hermes 彙整、NemoTron 離線評估的 host-188 協作節點。" }, { "target_id": "host_111", "domain_id": "hosts", "display_name": "111 Ollama fallback host", "target_type": "host", "primary_agent": "openclaw", "supporting_agents": ["hermes"], "deployment_state": "read_only_layout", "automation_level": "observe_only", "capabilities": ["fallback health observation", "route readiness review"], "telegram_policy": "failure_only", "learning_inputs": ["Ollama health", "provider failover evidence"], "communication_channels": ["Prometheus metrics", "Telegram failure-only"], "approval_gate": "SSH / service operation requires approval", "evidence_refs": ["infra/ansible/inventory/hosts.yml", "docs/runbooks/RUNBOOK-OLLAMA-FAILOVER.md"], "next_action": "保持只讀觀察，避免因 fallback 健康誤判而切換 provider。" }, { "target_id": "host_120", "domain_id": "hosts", "display_name": "120 K3s master / blocked recovery host", "target_type": "host", "primary_agent": "openclaw", "supporting_agents": ["hermes"], "deployment_state": "blocked_by_gate", "automation_level": "blocked", "capabilities": ["blocked-state tracking", "recovery checklist", "backup config capture blocker"], "telegram_policy": "action_required", "learning_inputs": ["cold-start scorecard", "backup config capture", "host reachability"], "communication_channels": ["Telegram action-required", "LOGBOOK", "cold-start runbook"], "approval_gate": "console/SSH recovery evidence required before any automation", "evidence_refs": ["docs/runbooks/BACKUP-STATUS.md", "docs/runbooks/FULL-STACK-COLD-START-SOP.md"], "next_action": "維持 blocked，不安排自動修復，等待 console / SSH 復原證據。" }, { "target_id": "host_121", "domain_id": "hosts", "display_name": "121 K3s peer host", "target_type": "host", "primary_agent": "openclaw", "supporting_agents": ["hermes"], "deployment_state": "active_governed", "automation_level": "observe_only", "capabilities": ["K3s readiness observation", "failover context", "backup/cold-start evidence"], "telegram_policy": "failure_only", "learning_inputs": ["K3s node readiness", "host connectivity", "cold-start scorecard"], "communication_channels": ["Prometheus metrics", "Telegram failure-only"], "approval_gate": "K3s mutation requires maintenance window approval", "evidence_refs": ["infra/ansible/inventory/hosts.yml", "docs/runbooks/K3S-OPTIMIZATION-RUNBOOK.md"], "next_action": "將 121 視為 K3s readiness 證據節點，不做未批准操作。" }, { "target_id": "host_112", "domain_id": "hosts", "display_name": "112 Kali / security evidence host", "target_type": "host", "primary_agent": "hermes", "supporting_agents": ["openclaw"], "deployment_state": "read_only_layout", "automation_level": "observe_only", "capabilities": ["security evidence catalog", "owner response package", "read-only posture projection"], "telegram_policy": "no_direct_notify", "learning_inputs": ["IwoooS posture projection", "owner response evidence"], "communication_channels": ["IwoooS read-only handoff", "operator review"], "approval_gate": "active scan / host update / credentialed scan require independent approval", "evidence_refs": ["docs/security/iwooos-posture-projection.snapshot.json", "infra/ansible/inventory/hosts.yml"], "next_action": "維持只讀安全證據，不啟用 active scan。" }, { "target_id": "pkg_python_api", "domain_id": "packages", "display_name": "API Python dependencies", "target_type": "package_set", "primary_agent": "hermes", "supporting_agents": ["openclaw"], "deployment_state": "active_governed", "automation_level": "observe_only", "capabilities": ["dependency inventory", "CVE/license drift review", "upgrade approval package"], "telegram_policy": "daily_summary_only", "learning_inputs": ["package inventory", "CVE policy", "dependency drift plan"], "communication_channels": ["governance UI", "daily summary only"], "approval_gate": "dependency upgrade requires approval package", "evidence_refs": ["docs/evaluations/package_supply_chain_inventory_2026-06-04.json"], "next_action": "Hermes 週期性彙整漂移，OpenClaw 只仲裁高風險升級。" }, { "target_id": "pkg_web_pnpm", "domain_id": "packages", "display_name": "Web pnpm/npm dependencies", "target_type": "package_set", "primary_agent": "hermes", "supporting_agents": ["openclaw"], "deployment_state": "active_governed", "automation_level": "observe_only", "capabilities": ["package inventory", "lockfile drift review", "upgrade proposal"], "telegram_policy": "daily_summary_only", "learning_inputs": ["javascript package inventory", "dependency drift plan"], "communication_channels": ["governance UI", "daily summary only"], "approval_gate": "package upgrade / install requires approval", "evidence_refs": ["docs/evaluations/javascript_package_inventory_2026-06-04.json"], "next_action": "只產生升級批准包，不自動 npm/pnpm install。" }, { "target_id": "docker_build_surface", "domain_id": "packages", "display_name": "Docker base image and build surface", "target_type": "container_image", "primary_agent": "hermes", "supporting_agents": ["openclaw"], "deployment_state": "active_governed", "automation_level": "prepare_only", "capabilities": ["digest drift review", "base image risk review", "build-surface proposal"], "telegram_policy": "action_required", "learning_inputs": ["docker build surface inventory", "CVE policy"], "communication_channels": ["governance UI", "Telegram action-required for critical drift"], "approval_gate": "image digest/base image change requires review and deploy gate", "evidence_refs": ["docs/evaluations/docker_build_surface_inventory_2026-06-04.json"], "next_action": "把 critical image drift 送 OpenClaw 仲裁，其他由 Hermes 月報。" }, { "target_id": "gitea_actions", "domain_id": "tools", "display_name": "Gitea Actions and host runner", "target_type": "workflow_tool", "primary_agent": "hermes", "supporting_agents": ["openclaw"], "deployment_state": "active_governed", "automation_level": "observe_only", "capabilities": ["workflow health matrix", "runner attestation", "notification hygiene"], "telegram_policy": "action_required", "learning_inputs": ["workflow results", "runner evidence", "CI failure classes"], "communication_channels": ["Gitea Actions summary", "Telegram actionable/failure only"], "approval_gate": "workflow modification requires review", "evidence_refs": ["docs/evaluations/gitea_workflow_runner_health_2026-06-05.json", ".gitea/workflows/"], "next_action": "Hermes 彙整 runner / workflow gaps；OpenClaw 只仲裁部署或 workflow 修改。" }, { "target_id": "harbor_registry", "domain_id": "tools", "display_name": "Harbor registry", "target_type": "registry", "primary_agent": "hermes", "supporting_agents": ["openclaw"], "deployment_state": "read_only_layout", "automation_level": "observe_only", "capabilities": ["backup freshness", "image inventory", "registry health summary"], "telegram_policy": "failure_only", "learning_inputs": ["backup target inventory", "registry backup evidence"], "communication_channels": ["backup policy", "Telegram failure-only"], "approval_gate": "registry cleanup / retention change requires approval", "evidence_refs": ["scripts/backup/backup-harbor.sh", "docs/evaluations/backup_dr_target_inventory_2026-06-04.json"], "next_action": "只監控 backup / freshness，不自動刪 image。" }, { "target_id": "prometheus_alertmanager", "domain_id": "tools", "display_name": "Prometheus / Alertmanager", "target_type": "observability", "primary_agent": "hermes", "supporting_agents": ["openclaw"], "deployment_state": "active_governed", "automation_level": "prepare_only", "capabilities": ["alert contract review", "noise reduction proposal", "E2E chain evidence"], "telegram_policy": "action_required", "learning_inputs": ["alert rules", "alert chain metrics", "notification outcome"], "communication_channels": ["Alertmanager webhook", "Telegram action-required"], "approval_gate": "alert rule deploy / silence requires approval", "evidence_refs": ["docs/evaluations/observability_contract_matrix_2026-06-05.json", "docs/adr/ADR-035-telegram-alert-chain-enforcement.md"], "next_action": "保持告警必到，成功訊息降噪，規則部署另走 deploy-alerts gate。" }, { "target_id": "signoz_clickhouse", "domain_id": "tools", "display_name": "SigNoz / ClickHouse", "target_type": "observability", "primary_agent": "hermes", "supporting_agents": ["openclaw"], "deployment_state": "active_governed", "automation_level": "observe_only", "capabilities": ["trace evidence", "log evidence", "storage health review"], "telegram_policy": "action_required", "learning_inputs": ["SigNoz alert", "ClickHouse health", "trace/log evidence"], "communication_channels": ["governance UI", "Telegram action-required"], "approval_gate": "query-heavy or retention change requires approval", "evidence_refs": ["docs/evaluations/observability_contract_matrix_2026-06-05.json", "ops/signoz"], "next_action": "Hermes 做證據摘要，OpenClaw 仲裁重大 storage / retention 風險。" }, { "target_id": "sentry", "domain_id": "tools", "display_name": "Sentry", "target_type": "observability", "primary_agent": "hermes", "supporting_agents": ["openclaw"], "deployment_state": "active_governed", "automation_level": "observe_only", "capabilities": ["issue summary", "frontend/backend error drift", "release evidence"], "telegram_policy": "action_required", "learning_inputs": ["Sentry issue class", "release marker", "frontend/backend route"], "communication_channels": ["governance UI", "Telegram action-required"], "approval_gate": "Sentry DSN / project setting change requires approval", "evidence_refs": ["apps/web/src/instrumentation.ts", "scripts/backup/backup-sentry.sh"], "next_action": "只讀錯誤分類，不讀 secret，不直接建立/修改 Sentry 設定。" }, { "target_id": "open_webui", "domain_id": "tools", "display_name": "Open-WebUI / AI workspace", "target_type": "ai_tool", "primary_agent": "nemotron", "supporting_agents": ["hermes", "openclaw"], "deployment_state": "candidate_only", "automation_level": "observe_only", "capabilities": ["model evaluation evidence", "AI artifact inventory", "offline specialist review"], "telegram_policy": "no_direct_notify", "learning_inputs": ["AI artifact backup", "model evaluation", "operator review"], "communication_channels": ["offline report", "governance UI"], "approval_gate": "external model call / NIM route requires cost and data-boundary approval", "evidence_refs": ["scripts/backup/backup-open-webui.sh", "docs/evaluations/agent_nemotron_contract_tuned_smoke_matrix_2026-06-02.json"], "next_action": "NemoTron 只做離線評估，不接 production route。" }, { "target_id": "telegram_gateway", "domain_id": "tools", "display_name": "Telegram Gateway / Bot alert chain", "target_type": "notification_gateway", "primary_agent": "openclaw", "supporting_agents": ["hermes"], "deployment_state": "active_governed", "automation_level": "hitl_execute_after_approval", "capabilities": ["failure-only routing", "approval card", "dedup", "E2E validation"], "telegram_policy": "approval_required", "learning_inputs": ["notification outcome", "dedup result", "operator button action"], "communication_channels": ["Telegram Bot", "AwoooP approval", "alert operation log"], "approval_gate": "direct send / bot token change / chat target change requires approval and E2E smoke", "evidence_refs": ["apps/api/src/services/telegram_gateway.py", "docs/adr/ADR-035-telegram-alert-chain-enforcement.md"], "next_action": "把三 Agent 的通知都收斂到 Gateway，不讓 Agent 直接持有 token 或直接發送。" }, { "target_id": "ansible_control", "domain_id": "tools", "display_name": "Ansible host control plane", "target_type": "host_iac", "primary_agent": "openclaw", "supporting_agents": ["hermes"], "deployment_state": "read_only_layout", "automation_level": "hitl_execute_after_approval", "capabilities": ["check-mode proposal", "host-state drift", "rollback plan"], "telegram_policy": "approval_required", "learning_inputs": ["Ansible check-mode", "host textfile exporter", "operator approval outcome"], "communication_channels": ["AwoooP approval", "Telegram approval-required"], "approval_gate": "any ansible apply requires independent human approval", "evidence_refs": ["docs/runbooks/ANSIBLE-OPERATING-MODEL.md", "infra/ansible/inventory/hosts.yml"], "next_action": "先建立 check-mode 證據；apply 仍必須人工批准。" }, { "target_id": "awoooi_api", "domain_id": "services", "display_name": "AWOOOI API backend", "target_type": "api", "primary_agent": "openclaw", "supporting_agents": ["hermes", "nemotron"], "deployment_state": "active_governed", "automation_level": "prepare_only", "capabilities": ["incident decision", "MCP context", "agent API snapshots", "post-execution verification"], "telegram_policy": "failure_only", "learning_inputs": ["incident", "timeline event", "approval record", "agent snapshot"], "communication_channels": ["API", "Redis stream", "Telegram failure-only"], "approval_gate": "runtime deploy / DB migration / provider route change requires CD gate", "evidence_refs": ["apps/api/src/api/v1/agents.py", "docs/evaluations/runtime_surface_inventory_2026-06-05.json"], "next_action": "把新佈建布局暴露為只讀 API，不新增執行端點。" }, { "target_id": "awoooi_web", "domain_id": "services", "display_name": "AWOOOI public web frontend", "target_type": "web", "primary_agent": "hermes", "supporting_agents": ["openclaw"], "deployment_state": "active_governed", "automation_level": "observe_only", "capabilities": ["frontend evidence display", "i18n review", "route health summary"], "telegram_policy": "failure_only", "learning_inputs": ["browser smoke", "Sentry issue", "i18n validation"], "communication_channels": ["governance UI", "Sentry", "Telegram failure-only"], "approval_gate": "frontend deploy requires CD validation and production smoke", "evidence_refs": ["apps/web/src/app/[locale]/governance/page.tsx", "docs/evaluations/runtime_surface_inventory_2026-06-05.json"], "next_action": "Hermes 維護 UI/文案與證據卡；OpenClaw 仲裁發布風險。" }, { "target_id": "governance_backoffice", "domain_id": "services", "display_name": "Governance backoffice", "target_type": "backoffice", "primary_agent": "hermes", "supporting_agents": ["openclaw"], "deployment_state": "active_governed", "automation_level": "observe_only", "capabilities": ["automation inventory", "agent market", "service health", "deployment layout display"], "telegram_policy": "action_required", "learning_inputs": ["snapshot freshness", "operator review", "blocked gate count"], "communication_channels": ["governance UI", "AwoooP work item"], "approval_gate": "UI display is not runtime authorization", "evidence_refs": ["apps/web/src/app/[locale]/governance/tabs/automation-inventory-tab.tsx"], "next_action": "將本 layout 先接進只讀 API，再接治理 UI。" }, { "target_id": "awooop_control_plane", "domain_id": "services", "display_name": "AwoooP control plane", "target_type": "control_plane", "primary_agent": "openclaw", "supporting_agents": ["hermes"], "deployment_state": "active_governed", "automation_level": "hitl_execute_after_approval", "capabilities": ["work item", "approval", "truth chain", "run state"], "telegram_policy": "approval_required", "learning_inputs": ["approval decision", "run state", "operator timeline"], "communication_channels": ["AwoooP approvals", "Telegram approval card"], "approval_gate": "AwoooP work item is not security or production approval by itself", "evidence_refs": ["apps/web/src/app/[locale]/awooop/page.tsx", "docs/awooop/MASTER-WORKPLAN.md"], "next_action": "OpenClaw 只把 AwoooP 當批准/證據控制面，不讓候選 Agent 直接執行。" }, { "target_id": "iwooos_security_surface", "domain_id": "services", "display_name": "IwoooS security surface", "target_type": "security_surface", "primary_agent": "hermes", "supporting_agents": ["openclaw"], "deployment_state": "active_governed", "automation_level": "observe_only", "capabilities": ["read-only evidence", "owner response packet", "security posture"], "telegram_policy": "action_required", "learning_inputs": ["owner response gate", "redacted evidence refs", "scope handoff"], "communication_channels": ["IwoooS page", "operator review", "Telegram action-required only"], "approval_gate": "active runtime / scan / host update remains false until independent approval", "evidence_refs": ["apps/web/src/app/[locale]/iwooos/page.tsx", "docs/security/iwooos-posture-projection.snapshot.json"], "next_action": "Hermes 整理資安證據，OpenClaw 守住 active runtime gate。" }, { "target_id": "postgresql_primary", "domain_id": "services", "display_name": "PostgreSQL primary data layer", "target_type": "database", "primary_agent": "openclaw", "supporting_agents": ["hermes"], "deployment_state": "active_governed", "automation_level": "prepare_only", "capabilities": ["connection health", "backup freshness", "migration risk", "slow query evidence"], "telegram_policy": "failure_only", "learning_inputs": ["DB alert", "backup status", "migration outcome"], "communication_channels": ["Prometheus", "backup status", "Telegram failure-only"], "approval_gate": "migration / restore / schema change requires approval and backup evidence", "evidence_refs": ["apps/api/migrations/", "docs/evaluations/backup_dr_readiness_matrix_2026-06-04.json"], "next_action": "OpenClaw 仲裁 DB 風險；Hermes 產出備份與 migration 證據摘要。" }, { "target_id": "redis_cache", "domain_id": "services", "display_name": "Redis / Stream / cache layer", "target_type": "cache", "primary_agent": "openclaw", "supporting_agents": ["hermes"], "deployment_state": "active_governed", "automation_level": "prepare_only", "capabilities": ["stream backlog review", "cache health", "agent bus readiness"], "telegram_policy": "failure_only", "learning_inputs": ["Redis alert", "agent stream backlog", "approval outcome"], "communication_channels": ["Prometheus", "Agent stream", "Telegram failure-only"], "approval_gate": "flush / restart / data mutation requires approval", "evidence_refs": ["docs/evaluations/service_health_gap_matrix_2026-06-05.json", "docs/adr/ADR-082-multi-agent-collaboration.md"], "next_action": "用 Redis stream 作為 Agent 協作匯流，但不允許無批准清除資料。" }, { "target_id": "k8s_workloads", "domain_id": "services", "display_name": "K8s workloads / manifests", "target_type": "k8s", "primary_agent": "openclaw", "supporting_agents": ["hermes"], "deployment_state": "active_governed", "automation_level": "dry_run_only", "capabilities": ["manifest mapping", "rollout evidence", "drift interpretation", "dry-run proposal"], "telegram_policy": "action_required", "learning_inputs": ["runtime surface inventory", "drift report", "post-execution verifier"], "communication_channels": ["AwoooP approval", "Telegram action-required", "Prometheus"], "approval_gate": "kubectl apply / rollout / scale / delete requires approval", "evidence_refs": ["k8s/awoooi-prod/", "docs/evaluations/runtime_surface_inventory_2026-06-05.json"], "next_action": "OpenClaw 做乾跑仲裁，Hermes 彙整 manifest 與 runbook。" }, { "target_id": "project_awoooi", "domain_id": "projects", "display_name": "AWOOOI core project", "target_type": "project", "primary_agent": "openclaw", "supporting_agents": ["hermes", "nemotron"], "deployment_state": "active_governed", "automation_level": "prepare_only", "capabilities": ["incident governance", "agent market governance", "runtime truth", "deployment evidence"], "telegram_policy": "action_required", "learning_inputs": ["LOGBOOK", "HARD_RULES", "market watch", "runtime smoke"], "communication_channels": ["Gitea", "AwoooP", "Telegram", "governance UI"], "approval_gate": "production deploy and provider changes require existing CD/HITL gates", "evidence_refs": ["docs/HARD_RULES.md", "docs/LOGBOOK.md"], "next_action": "把三 Agent 佈局做成 AWOOOI 的正式只讀控制面資料。" }, { "target_id": "project_awooop", "domain_id": "projects", "display_name": "AwoooP operations project surface", "target_type": "project", "primary_agent": "openclaw", "supporting_agents": ["hermes"], "deployment_state": "active_governed", "automation_level": "hitl_execute_after_approval", "capabilities": ["work item", "approval queue", "run monitor", "contract governance"], "telegram_policy": "approval_required", "learning_inputs": ["work item status", "approval outcome", "truth chain"], "communication_channels": ["AwoooP UI", "Telegram approval card"], "approval_gate": "AwoooP approval is necessary but not sufficient for security or host mutation", "evidence_refs": ["docs/awooop/MASTER-WORKPLAN.md", "apps/web/src/app/[locale]/awooop/"], "next_action": "將 Agent 佈局轉為 AwoooP work item templates，但不自動簽核。" }, { "target_id": "project_iwooos", "domain_id": "projects", "display_name": "IwoooS security governance", "target_type": "project", "primary_agent": "hermes", "supporting_agents": ["openclaw"], "deployment_state": "active_governed", "automation_level": "observe_only", "capabilities": ["scope handoff", "owner response gate", "redacted evidence"], "telegram_policy": "action_required", "learning_inputs": ["IwoooS posture projection", "owner response state"], "communication_channels": ["IwoooS UI", "operator review"], "approval_gate": "UI-visible state must not be treated as runtime authorization", "evidence_refs": ["docs/security/iwooos-posture-projection.snapshot.json"], "next_action": "Hermes 維持只讀證據卡，OpenClaw 防止 runtime gate 被誤開。" }, { "target_id": "project_vibework", "domain_id": "projects", "display_name": "VibeWork adjacent product", "target_type": "adjacent_project", "primary_agent": "hermes", "supporting_agents": ["openclaw"], "deployment_state": "read_only_layout", "automation_level": "observe_only", "capabilities": ["boundary inventory", "release evidence summary", "alert routing expectation"], "telegram_policy": "no_direct_notify", "learning_inputs": ["cross-project handoff", "runtime evidence if explicitly supplied"], "communication_channels": ["operator report only"], "approval_gate": "separate repo/runtime approval required", "evidence_refs": ["docs/security/vibework-iwooos-onboarding-handoff.snapshot.json"], "next_action": "只保留治理視野，不跨 repo 自動部署。" }, { "target_id": "project_stockplatform", "domain_id": "projects", "display_name": "StockPlatform adjacent product", "target_type": "adjacent_project", "primary_agent": "hermes", "supporting_agents": ["nemotron", "openclaw"], "deployment_state": "read_only_layout", "automation_level": "observe_only", "capabilities": ["AI research governance", "dry-run review", "human-review boundary"], "telegram_policy": "no_direct_notify", "learning_inputs": ["research governance note", "operator-approved evidence"], "communication_channels": ["operator report only"], "approval_gate": "separate project approval required before any runtime work", "evidence_refs": ["docs/ai/AI_AGENT_AUTOMATION_WORKLIST_2026-06-04.md"], "next_action": "NemoTron 只可作研究乾跑，不作投資建議或生產推薦。" }, { "target_id": "project_tsenyang", "domain_id": "projects", "display_name": "TSENYANG website adjacent project", "target_type": "adjacent_project", "primary_agent": "hermes", "supporting_agents": ["openclaw"], "deployment_state": "read_only_layout", "automation_level": "observe_only", "capabilities": ["SEO/launch evidence summary", "analytics boundary review"], "telegram_policy": "no_direct_notify", "learning_inputs": ["operator-approved launch evidence"], "communication_channels": ["operator report only"], "approval_gate": "separate repo/runtime approval required", "evidence_refs": ["docs/security/iwooos-posture-projection.snapshot.json"], "next_action": "只保留跨產品治理視角，不直接改網站。" }, { "target_id": "project_bitan", "domain_id": "projects", "display_name": "Bitan Pharmacy adjacent project", "target_type": "adjacent_project", "primary_agent": "hermes", "supporting_agents": ["openclaw"], "deployment_state": "read_only_layout", "automation_level": "observe_only", "capabilities": ["production recovery evidence summary", "AI ops loop review"], "telegram_policy": "no_direct_notify", "learning_inputs": ["operator-approved recovery evidence"], "communication_channels": ["operator report only"], "approval_gate": "separate repo/runtime approval required", "evidence_refs": ["docs/security/iwooos-posture-projection.snapshot.json"], "next_action": "只列入相鄰產品治理，不跨專案部署。" }, { "target_id": "project_agent_bounty", "domain_id": "projects", "display_name": "agent-bounty-protocol onboarding surface", "target_type": "adjacent_project", "primary_agent": "hermes", "supporting_agents": ["openclaw"], "deployment_state": "read_only_layout", "automation_level": "observe_only", "capabilities": ["read-only security onboarding", "owner gate", "external agent boundary"], "telegram_policy": "no_direct_notify", "learning_inputs": ["agent bounty onboarding handoff", "owner response status"], "communication_channels": ["IwoooS read-only handoff", "operator report"], "approval_gate": "no runtime, repo, scan, cron, payout or contract action without explicit approval", "evidence_refs": ["docs/security/agent-bounty-iwooos-onboarding-handoff.snapshot.json"], "next_action": "維持 IwoooS 只讀收件，不跨到 agent-bounty runtime。" }, { "target_id": "public_frontend", "domain_id": "websites", "display_name": "Public frontend routes", "target_type": "website_frontend", "primary_agent": "hermes", "supporting_agents": ["openclaw"], "deployment_state": "active_governed", "automation_level": "observe_only", "capabilities": ["browser smoke evidence", "i18n coverage", "route health"], "telegram_policy": "failure_only", "learning_inputs": ["browser smoke", "Sentry error", "route uptime"], "communication_channels": ["Sentry", "Prometheus", "Telegram failure-only"], "approval_gate": "frontend deploy requires build/typecheck/browser smoke", "evidence_refs": ["apps/web/src/app/[locale]/page.tsx"], "next_action": "Hermes 負責內容/顯示品質；OpenClaw 仲裁發布風險。" }, { "target_id": "governance_ui", "domain_id": "websites", "display_name": "Governance UI backoffice", "target_type": "website_backoffice", "primary_agent": "hermes", "supporting_agents": ["openclaw"], "deployment_state": "active_governed", "automation_level": "observe_only", "capabilities": ["agent market display", "automation inventory display", "deployment layout display"], "telegram_policy": "action_required", "learning_inputs": ["operator review", "snapshot freshness", "blocked gate count"], "communication_channels": ["governance UI", "AwoooP work item"], "approval_gate": "UI display does not authorize runtime action", "evidence_refs": ["apps/web/src/app/[locale]/governance/page.tsx"], "next_action": "新增只讀 layout 資料源後再接 UI 呈現。" }, { "target_id": "alerts_backoffice", "domain_id": "websites", "display_name": "Alerts and operation-log backoffice", "target_type": "website_backoffice", "primary_agent": "openclaw", "supporting_agents": ["hermes"], "deployment_state": "active_governed", "automation_level": "prepare_only", "capabilities": ["incident triage", "alert operation log", "operator action request"], "telegram_policy": "action_required", "learning_inputs": ["alert operation log", "incident timeline", "notification outcome"], "communication_channels": ["alert-operation-logs UI", "Telegram action-required"], "approval_gate": "alert action execution requires approval", "evidence_refs": ["apps/web/src/app/[locale]/alerts/page.tsx", "apps/web/src/app/[locale]/alert-operation-logs/page.tsx"], "next_action": "OpenClaw 產生 action proposal；Hermes 彙整趨勢與降噪。" }, { "target_id": "awooop_admin", "domain_id": "websites", "display_name": "AwoooP admin routes", "target_type": "website_backoffice", "primary_agent": "openclaw", "supporting_agents": ["hermes"], "deployment_state": "active_governed", "automation_level": "hitl_execute_after_approval", "capabilities": ["approval queue", "runs", "contracts", "tenants"], "telegram_policy": "approval_required", "learning_inputs": ["approval decision", "run evidence", "contract state"], "communication_channels": ["AwoooP UI", "Telegram approval card"], "approval_gate": "AwoooP UI action requires separate policy and human approval", "evidence_refs": ["apps/web/src/app/[locale]/awooop/"], "next_action": "將三 Agent 提案映射成 AwoooP work item，不讓候選 Agent 直接執行。" }, { "target_id": "iwooos_admin", "domain_id": "websites", "display_name": "IwoooS read-only security routes", "target_type": "website_backoffice", "primary_agent": "hermes", "supporting_agents": ["openclaw"], "deployment_state": "active_governed", "automation_level": "observe_only", "capabilities": ["security mirror", "scope card", "owner response gate"], "telegram_policy": "action_required", "learning_inputs": ["owner response", "security posture", "redacted refs"], "communication_channels": ["IwoooS UI", "operator review"], "approval_gate": "IwoooS visibility is not active runtime authorization", "evidence_refs": ["apps/web/src/app/[locale]/iwooos/page.tsx"], "next_action": "繼續維持低摩擦只讀資安治理。" }, { "target_id": "agent_session_bus", "domain_id": "learning", "display_name": "AgentSession / Redis Streams collaboration bus", "target_type": "learning_bus", "primary_agent": "openclaw", "supporting_agents": ["hermes", "nemotron"], "deployment_state": "planned", "automation_level": "observe_only", "capabilities": ["agent handoff", "turn audit", "replayable collaboration"], "telegram_policy": "no_direct_notify", "learning_inputs": ["agent session turn", "critic challenge", "coordinator decision"], "communication_channels": ["Redis stream", "agent_sessions audit"], "approval_gate": "new runtime worker or schema migration requires approval", "evidence_refs": ["docs/adr/ADR-082-multi-agent-collaboration.md"], "next_action": "先補只讀 layout；下一波才評估是否需要 migration / worker。" }, { "target_id": "km_playbook_learning", "domain_id": "learning", "display_name": "KM / Playbook trust learning loop", "target_type": "learning_loop", "primary_agent": "hermes", "supporting_agents": ["openclaw"], "deployment_state": "planned", "automation_level": "observe_only", "capabilities": ["runbook freshness", "playbook trust evidence", "negative reinforcement"], "telegram_policy": "daily_summary_only", "learning_inputs": ["execution result", "post verification", "operator review"], "communication_channels": ["KM", "LOGBOOK", "daily summary only"], "approval_gate": "playbook promotion requires review", "evidence_refs": ["docs/superpowers/specs/2026-04-15-MASTER-ai-autonomous-flywheel-v2.md"], "next_action": "Hermes 整理學習素材，OpenClaw 仲裁是否可升為 approved playbook。" }, { "target_id": "nemotron_replay_pipeline", "domain_id": "learning", "display_name": "NemoTron smoke / replay pipeline", "target_type": "model_replay", "primary_agent": "nemotron", "supporting_agents": ["openclaw", "hermes"], "deployment_state": "blocked_by_gate", "automation_level": "blocked", "capabilities": ["5-record smoke", "output contract review", "latency budget", "same-run baseline delta"], "telegram_policy": "approval_required", "learning_inputs": ["smoke gate", "external runner report", "OpenClaw baseline"], "communication_channels": ["offline report", "operator review", "Telegram approval-required after gate"], "approval_gate": "refresh source evidence, cost/data approval, then 5-record smoke only", "evidence_refs": ["docs/evaluations/agent_nemotron_contract_tuned_smoke_matrix_2026-06-02.json", "docs/runbooks/OPENCLAW-REPLACEMENT-EVALUATION.md"], "next_action": "新增 Nemotron 3 Ultra source evidence 後，先重跑 5-record smoke。" }, { "target_id": "agent_market_watch", "domain_id": "learning", "display_name": "AI Agent market watch", "target_type": "market_watch", "primary_agent": "hermes", "supporting_agents": ["openclaw", "nemotron"], "deployment_state": "active_governed", "automation_level": "observe_only", "capabilities": ["primary-source scan", "integration review", "discovery intake", "candidate scoring"], "telegram_policy": "action_required", "learning_inputs": ["official docs", "release metadata", "scorecard", "operator review"], "communication_channels": ["Gitea Actions", "governance UI", "Telegram actionable only"], "approval_gate": "market watch cannot approve SDK/API/replay/shadow/canary/production", "evidence_refs": [".gitea/workflows/agent-market-watch.yaml", "docs/evaluations/agent_market_governance_snapshot_2026-06-04.json"], "next_action": "把 Nemotron 3 Ultra 納入下一次 source refresh 和 scorecard review。" } ], "collaboration_contract": { "message_bus": "以 Redis Streams / AgentSession / timeline event 作為可回放協作總線；本快照只描述布局，不啟動新 worker。", "audit_trail": "所有 Agent 建議必須落到可查詢事件、批准包或 committed snapshot；不得只存在聊天視窗。", "handoff_rules": [ "OpenClaw 收斂生產風險、HITL 與 Telegram action-required。", "Hermes 收斂治理、文件、盤點、降噪與跨專案報告。", "NemoTron 收斂 sanitized 離線評估、模型比較與 replay score。", "任何 Agent 發現風險升級時必須轉交 OpenClaw 仲裁。", "任何 Agent 發現市場/依賴漂移時必須轉交 Hermes 彙整。", "任何候選模型能力聲稱必須先經 NemoTron 或 replay harness 產出同題證據。" ], "frontend_redaction": { "operator_conversation_display_allowed": false, "agent_private_reasoning_display_allowed": false, "display_policy": "前端只能顯示任務狀態、證據摘要、批准邊界與產物連結；不得顯示操作對話原文或 Agent 私有推理。" } }, "learning_contract": { "event_sources": [ "incident timeline", "approval outcome", "alert operation log", "service health snapshot", "backup / DR evidence", "dependency drift snapshot", "agent market watch", "NemoTron smoke / replay result" ], "feedback_loops": [ "成功/失敗/中性結果回寫 Playbook trust", "Critic / Reviewer 挑戰結果回寫 AgentSession", "Telegram 按鈕與 operator review 回寫 notification outcome", "Market watch source delta 進入 scorecard / replay gate", "NemoTron replay 失敗模式回寫 prompt / contract 改善清單" ], "growth_metrics": [ "playbook trust_score 有效更新數", "general fallback alert ratio", "agent handoff completion rate", "notification failure rate", "smoke gate pass rate", "operator-approved proposal precision" ], "retention_policy": "學習資料只保留 redacted evidence refs、hash、分類與結果；Secret、token、原始對話與私有推理不得進前端或告警。" }, "telegram_contract": { "primary_gateway": "apps/api/src/services/telegram_gateway.py", "bot_roles": [ "OpenClaw Bot：生產告警、批准、HITL 與 action-required。", "Hermes Bot lane：治理摘要、週期性報告與降噪候選，但仍經 Gateway。", "NemoTron lane：只在 smoke/replay gate 需要 operator review 時產生摘要，不能直接發送。" ], "notification_classes": [ "critical failure: immediate", "operator action required: immediate", "approval required: approval card", "success / healthy: suppressed or daily summary", "watch-only no-op: quiet" ], "redaction_policy": "不得在 Telegram 顯示 Secret、token、cookie、private key、原始 payload、操作對話原文或 Agent 私有推理；只顯示 evidence ref、狀態、影響範圍與下一步。", "e2e_validation": "沿用 ADR-035：部署前檢查 Secret、部署時注入 K8s Secret、部署後做 E2E 告警鏈路驗證；本布局不直接送測試通知。" }, "rollups": { "total_targets": 42, "by_domain": { "hosts": 6, "packages": 3, "tools": 8, "services": 8, "projects": 8, "websites": 5, "learning": 4 }, "by_primary_agent": { "openclaw": 17, "hermes": 23, "nemotron": 2 }, "by_deployment_state": { "active_governed": 28, "read_only_layout": 9, "blocked_by_gate": 2, "planned": 2, "candidate_only": 1 }, "by_telegram_policy": { "failure_only": 8, "action_required": 17, "approval_required": 6, "daily_summary_only": 3, "no_direct_notify": 8 }, "blocked_target_ids": [ "host_120", "nemotron_replay_pipeline" ], "approval_required_target_ids": [ "host_120", "telegram_gateway", "ansible_control", "awooop_control_plane", "project_awooop", "awooop_admin", "nemotron_replay_pipeline" ] }, "approval_boundaries": { "sdk_installation_allowed": false, "paid_api_call_allowed": false, "shadow_or_canary_allowed": false, "production_routing_allowed": false, "destructive_operation_allowed": false, "secret_plaintext_allowed": false, "autonomous_host_mutation_allowed": false, "telegram_direct_send_allowed": false } }