{
  "schema_version": "dependency_risk_policy_v1",
  "generated_at": "2026-06-04T20:30:12+08:00",
  "program_status": {
    "overall_completion_percent": 98,
    "current_priority": "P1",
    "current_task_id": "P1-204",
    "next_task_id": "P1-205",
    "read_only_mode": true
  },
  "source_refs": [
    "docs/evaluations/package_supply_chain_inventory_2026-06-04.json",
    "docs/evaluations/javascript_package_inventory_2026-06-04.json",
    "docs/evaluations/docker_build_surface_inventory_2026-06-04.json",
    "apps/api/pyproject.toml",
    "apps/api/requirements.txt",
    "apps/web/package.json",
    "pnpm-lock.yaml",
    "apps/api/Dockerfile",
    "apps/web/Dockerfile"
  ],
  "risk_taxonomy": {
    "severity_levels": [
      {
        "severity": "critical",
        "definition": "已批准外部查詢後，確認為 actively exploited / known exploited，且影響 production runtime、公開入口、憑證路徑、備份 / restore、AI Router 或資料完整性。",
        "default_gate": "OpenClaw 仲裁 + 人工批准 + 回滾方案；NemoTron 僅能提供離線比較建議。"
      },
      {
        "severity": "high",
        "definition": "影響 runtime 或 build trust chain，可能導致不可重現 build、供應鏈污染、授權違規、digest / binary source 不可追溯，或 manifest 權威性衝突。",
        "default_gate": "OpenClaw 風險仲裁；Hermes 產生批准包；任何安裝、升級、rebuild、push 都需人工批准。"
      },
      {
        "severity": "medium",
        "definition": "尚未造成已知 exploit，但會提高漂移、freshness、健康檢查、publish boundary 或 build-time network fetch 風險。",
        "default_gate": "Hermes 維持只讀追蹤；OpenClaw 決定是否升級為批准包。"
      },
      {
        "severity": "low",
        "definition": "目前證據顯示一致或已被接受，但仍需排入週期性只讀監控。",
        "default_gate": "read-only monitor；不得自動變更。"
      }
    ],
    "statuses": [
      "accepted",
      "action_required",
      "planned_next",
      "blocked"
    ],
    "policy_states": [
      "monitor_only",
      "approval_package_required",
      "external_lookup_required",
      "blocked_until_approval"
    ]
  },
  "rollups": {
    "total_rules": 12,
    "by_severity": {
      "critical": 1,
      "high": 5,
      "medium": 5,
      "low": 1
    },
    "by_status": {
      "action_required": 8,
      "planned_next": 3,
      "accepted": 1
    },
    "action_required_rule_ids": [
      "python_manifest_authority_drift",
      "python_no_lockfile_reproducibility_gap",
      "js_caret_range_high_impact",
      "shared_types_publish_boundary",
      "docker_base_not_digest_pinned",
      "binary_source_without_checksum",
      "build_time_network_fetch_unpinned",
      "web_runtime_healthcheck_gap"
    ],
    "planned_next_rule_ids": [
      "cve_critical_known_exploited",
      "cve_high_runtime_exposure",
      "license_strong_copyleft_or_unknown"
    ],
    "accepted_rule_ids": [
      "js_lockfile_currently_in_sync"
    ]
  },
  "severity_rules": [
    {
      "rule_id": "cve_critical_known_exploited",
      "domain": "cve",
      "severity": "critical",
      "status": "planned_next",
      "trigger": "已批准外部 CVE / advisory 查詢後，確認依賴或 image 有 known exploited / actively exploited 記錄，且位於 production runtime 或公開入口鏈路。",
      "current_evidence": "本輪未查外部 CVE / advisory；只建立政策與批准邊界。",
      "required_gate": "external_lookup_approval + OpenClaw arbitration + HITL approval",
      "blocked_operations": [
        "external_cve_lookup",
        "package_install",
        "package_upgrade",
        "lockfile_write",
        "docker_build",
        "image_pull",
        "image_rebuild",
        "registry_push",
        "production_routing"
      ],
      "owner_agent": "openclaw",
      "role_contract": "OpenClaw 只做仲裁與批准包判定；不得自動修復或切流量。",
      "evidence_refs": [
        "docs/evaluations/package_supply_chain_inventory_2026-06-04.json",
        "docs/evaluations/docker_build_surface_inventory_2026-06-04.json"
      ],
      "next_action": "P1-205 建立外部 CVE / advisory data source 批准包，先定義來源、頻率、成本、速率與失敗告警。"
    },
    {
      "rule_id": "cve_high_runtime_exposure",
      "domain": "cve",
      "severity": "high",
      "status": "planned_next",
      "trigger": "已批准外部查詢後，production/runtime dependency 或 base image 出現 high CVE，且缺少固定版本、digest、rollback 或 smoke gate。",
      "current_evidence": "本輪未查外部 CVE；Python / JS / Docker 只讀基線已建立。",
      "required_gate": "external_lookup_approval + upgrade_approval_package",
      "blocked_operations": [
        "external_cve_lookup",
        "package_upgrade",
        "lockfile_write",
        "docker_build",
        "image_pull",
        "image_rebuild",
        "registry_push"
      ],
      "owner_agent": "openclaw",
      "role_contract": "OpenClaw 判定 high CVE 是否需要升級包；Hermes 才能整理執行候選清單。",
      "evidence_refs": [
        "docs/evaluations/package_supply_chain_inventory_2026-06-04.json",
        "docs/evaluations/javascript_package_inventory_2026-06-04.json",
        "docs/evaluations/docker_build_surface_inventory_2026-06-04.json"
      ],
      "next_action": "P1-205 先建立 read-only freshness / advisory cadence；P1-206 才能產生升級批准包。"
    },
    {
      "rule_id": "license_strong_copyleft_or_unknown",
      "domain": "license",
      "severity": "high",
      "status": "planned_next",
      "trigger": "已批准 license database 查詢後，production path 出現 AGPL / GPL 類強 copyleft、unknown license，或 package metadata 與 publish boundary 衝突。",
      "current_evidence": "本輪未查外部 license database；shared-types publish boundary 已標為 action_required。",
      "required_gate": "external_license_lookup_approval + legal_or_owner_review",
      "blocked_operations": [
        "external_license_lookup",
        "package_install",
        "package_upgrade",
        "lockfile_write",
        "package_publish"
      ],
      "owner_agent": "openclaw",
      "role_contract": "OpenClaw 決定 license 風險分級；NemoTron 可做離線比較與條款摘要，不得替代人工授權判定。",
      "evidence_refs": [
        "packages/shared-types/package.json",
        "docs/evaluations/javascript_package_inventory_2026-06-04.json"
      ],
      "next_action": "P1-205 把 license source、cache、審核人與失敗告警寫進批准包。"
    },
    {
      "rule_id": "python_manifest_authority_drift",
      "domain": "python",
      "severity": "high",
      "status": "action_required",
      "trigger": "同一 runtime 存在 pyproject.toml 與 requirements.txt，且依賴集合或版本下限不一致。",
      "current_evidence": "apps/api/pyproject.toml 與 apps/api/requirements.txt 不一致；Dockerfile 目前使用 pyproject + uv。",
      "required_gate": "manifest_authority_decision_package",
      "blocked_operations": [
        "package_install",
        "package_upgrade",
        "requirements_delete",
        "lockfile_write",
        "docker_build"
      ],
      "owner_agent": "openclaw",
      "role_contract": "OpenClaw 決定權威 manifest 與廢止策略；Hermes 只能整理差異與後續 PR 範本。",
      "evidence_refs": [
        "apps/api/pyproject.toml",
        "apps/api/requirements.txt",
        "apps/api/Dockerfile",
        "docs/evaluations/package_supply_chain_inventory_2026-06-04.json"
      ],
      "next_action": "P1-206 產生 Python manifest authority / constraints 批准包。"
    },
    {
      "rule_id": "python_no_lockfile_reproducibility_gap",
      "domain": "python",
      "severity": "medium",
      "status": "action_required",
      "trigger": "Python runtime / package surfaces 以 range constraints 為主，未發現 uv.lock、poetry.lock、Pipfile.lock 或等價 constraints policy。",
      "current_evidence": "P1-201 已確認 Python 6 個表面未形成完整 lockfile policy。",
      "required_gate": "reproducible_build_policy_package",
      "blocked_operations": [
        "lockfile_write",
        "package_install",
        "package_upgrade",
        "docker_build"
      ],
      "owner_agent": "hermes",
      "role_contract": "Hermes 整理 constraints / lockfile 選項；OpenClaw 決定採用與否。",
      "evidence_refs": [
        "apps/api/pyproject.toml",
        "packages/lewooogo-data/pyproject.toml",
        "packages/lewooogo-brain/pyproject.toml",
        "docs/evaluations/package_supply_chain_inventory_2026-06-04.json"
      ],
      "next_action": "P1-206 將 lockfile / constraints 策略納入升級批准包模板。"
    },
    {
      "rule_id": "js_lockfile_currently_in_sync",
      "domain": "javascript",
      "severity": "low",
      "status": "accepted",
      "trigger": "pnpm-lock.yaml importer specifier 與 6 個 workspace package.json manifest 同步，missing、mismatch、extra 均為 0。",
      "current_evidence": "P1-202 已確認 manifest / lockfile drift 為 0。",
      "required_gate": "read_only_monitor",
      "blocked_operations": [
        "pnpm_install",
        "npm_audit",
        "package_upgrade",
        "lockfile_write"
      ],
      "owner_agent": "hermes",
      "role_contract": "Hermes 維持只讀 drift 監控；不得因 accepted 狀態自動執行 install 或 audit。",
      "evidence_refs": [
        "docs/evaluations/javascript_package_inventory_2026-06-04.json",
        "pnpm-lock.yaml"
      ],
      "next_action": "P1-205 建立週期性只讀 lockfile drift 檢查，不寫 lockfile。"
    },
    {
      "rule_id": "js_caret_range_high_impact",
      "domain": "javascript",
      "severity": "medium",
      "status": "action_required",
      "trigger": "高影響 workspace 使用大量 caret range，雖然 lockfile 目前固定解析結果，但 version freshness、CVE 與 upgrade blast radius 尚未分級。",
      "current_evidence": "@awoooi/web 有 33 條 direct dependencies，其中 28 條使用 caret range；全 repo 44 條 caret specs。",
      "required_gate": "js_dependency_drift_policy_package",
      "blocked_operations": [
        "pnpm_install",
        "npm_update",
        "npm_audit",
        "package_upgrade",
        "lockfile_write"
      ],
      "owner_agent": "hermes",
      "role_contract": "Hermes 追蹤 drift 與高影響套件清單；OpenClaw 決定升級候選是否進批准包。",
      "evidence_refs": [
        "apps/web/package.json",
        "docs/evaluations/javascript_package_inventory_2026-06-04.json"
      ],
      "next_action": "P1-205 產生 Next / React / Sentry / Playwright / visualization 套件的 read-only freshness cadence。"
    },
    {
      "rule_id": "shared_types_publish_boundary",
      "domain": "javascript",
      "severity": "medium",
      "status": "action_required",
      "trigger": "workspace package 未標記 private=true，且含 publishConfig access=public；需要確認是否為刻意 publish contract。",
      "current_evidence": "@awoooi/shared-types 未標記 private=true，publishConfig access=public。",
      "required_gate": "publish_boundary_approval_package",
      "blocked_operations": [
        "package_publish",
        "package_metadata_change",
        "package_upgrade",
        "lockfile_write"
      ],
      "owner_agent": "openclaw",
      "role_contract": "OpenClaw 仲裁 publish boundary；Hermes 只產生差異證據與 PR 範本。",
      "evidence_refs": [
        "packages/shared-types/package.json",
        "docs/evaluations/javascript_package_inventory_2026-06-04.json"
      ],
      "next_action": "P1-206 產生 shared-types publish boundary 批准包。"
    },
    {
      "rule_id": "docker_base_not_digest_pinned",
      "domain": "docker",
      "severity": "high",
      "status": "action_required",
      "trigger": "Dockerfile 使用 tag-pinned external images，但沒有 digest pin；base image freshness 與 rebuild provenance 不可追溯。",
      "current_evidence": "python:3.11-slim、node:20-alpine、ghcr.io/astral-sh/uv:0.6.9 均未 digest-pinned。",
      "required_gate": "image_digest_pin_approval_package",
      "blocked_operations": [
        "image_pull",
        "docker_build",
        "image_rebuild",
        "registry_push",
        "production_routing"
      ],
      "owner_agent": "openclaw",
      "role_contract": "OpenClaw 決定 digest pin 與 rebuild policy；Hermes 只能整理 Dockerfile 證據。",
      "evidence_refs": [
        "apps/api/Dockerfile",
        "apps/web/Dockerfile",
        "docs/evaluations/docker_build_surface_inventory_2026-06-04.json"
      ],
      "next_action": "P1-206 產生 base image digest pin / rollback / smoke gate 批准包。"
    },
    {
      "rule_id": "binary_source_without_checksum",
      "domain": "docker",
      "severity": "high",
      "status": "action_required",
      "trigger": "Docker build-time binary 透過網路下載，但缺少 checksum / signature policy。",
      "current_evidence": "API Dockerfile 以 curl 下載 kubectl v1.29.0，未呈現 checksum / signature 驗證 policy。",
      "required_gate": "binary_source_verification_package",
      "blocked_operations": [
        "docker_build",
        "image_rebuild",
        "registry_push"
      ],
      "owner_agent": "openclaw",
      "role_contract": "OpenClaw 判定 binary source trust chain；Hermes 產生替代方案與驗證 gate。",
      "evidence_refs": [
        "apps/api/Dockerfile",
        "docs/evaluations/docker_build_surface_inventory_2026-06-04.json"
      ],
      "next_action": "P1-206 將 checksum / signature 驗證納入 image rebuild 批准包。"
    },
    {
      "rule_id": "build_time_network_fetch_unpinned",
      "domain": "docker",
      "severity": "medium",
      "status": "action_required",
      "trigger": "Docker build 需要 apt-get、curl、corepack prepare 或 pnpm install 等 build-time network fetch，且外部來源白名單 / cache / 失敗告警尚未定義。",
      "current_evidence": "P1-203 已盤點 4 個 build-time network fetches。",
      "required_gate": "build_network_source_policy_package",
      "blocked_operations": [
        "docker_build",
        "image_pull",
        "image_rebuild",
        "registry_push"
      ],
      "owner_agent": "hermes",
      "role_contract": "Hermes 整理外部來源、cache 與失敗模式；OpenClaw 決定 gate。",
      "evidence_refs": [
        "apps/api/Dockerfile",
        "apps/web/Dockerfile",
        "pnpm-lock.yaml",
        "docs/evaluations/docker_build_surface_inventory_2026-06-04.json"
      ],
      "next_action": "P1-205 建立 read-only build source freshness 檢查設計，不執行 build。"
    },
    {
      "rule_id": "web_runtime_healthcheck_gap",
      "domain": "docker",
      "severity": "medium",
      "status": "action_required",
      "trigger": "Web runtime stage 缺少 Dockerfile HEALTHCHECK，需要確認 K8s probe 是否是唯一健康檢查來源。",
      "current_evidence": "P1-203 已確認 API 有 healthcheck，Web Dockerfile 未定義 HEALTHCHECK。",
      "required_gate": "runtime_health_contract_review",
      "blocked_operations": [
        "docker_build",
        "image_rebuild",
        "production_routing"
      ],
      "owner_agent": "openclaw",
      "role_contract": "OpenClaw 決定 Dockerfile healthcheck 與 K8s probe contract；Hermes 只整理證據。",
      "evidence_refs": [
        "apps/web/Dockerfile",
        "k8s/",
        "docs/evaluations/docker_build_surface_inventory_2026-06-04.json"
      ],
      "next_action": "P1-206 或 P1-001 對齊 runtime health contract；不得直接改 image。"
    }
  ],
  "domain_policies": [
    {
      "policy_id": "python_dependency_policy",
      "domain": "python",
      "status": "action_required",
      "owner_agent": "openclaw",
      "policy_summary": "Python 依賴先決定 pyproject / requirements 權威性與 lockfile / constraints 策略，再談升級；目前只允許 read-only diff。",
      "allowed_now": [
        "read_only_manifest_diff",
        "read_only_policy_report"
      ],
      "blocked_now": [
        "pip_install",
        "uv_sync",
        "requirements_delete",
        "lockfile_write",
        "docker_build"
      ],
      "required_next_gate": "P1-206 manifest authority approval package",
      "evidence_refs": [
        "apps/api/pyproject.toml",
        "apps/api/requirements.txt",
        "docs/evaluations/package_supply_chain_inventory_2026-06-04.json"
      ]
    },
    {
      "policy_id": "javascript_dependency_policy",
      "domain": "javascript",
      "status": "action_required",
      "owner_agent": "hermes",
      "policy_summary": "pnpm-lock.yaml 目前與 manifest 同步；後續只能做 read-only drift / freshness 報告，不執行 pnpm install、npm audit 或 lockfile rewrite。",
      "allowed_now": [
        "read_only_lockfile_drift",
        "read_only_workspace_rollup"
      ],
      "blocked_now": [
        "pnpm_install",
        "pnpm_update",
        "npm_audit",
        "package_upgrade",
        "lockfile_write",
        "package_publish"
      ],
      "required_next_gate": "P1-205 scheduled drift check design",
      "evidence_refs": [
        "apps/web/package.json",
        "packages/shared-types/package.json",
        "pnpm-lock.yaml",
        "docs/evaluations/javascript_package_inventory_2026-06-04.json"
      ]
    },
    {
      "policy_id": "docker_supply_chain_policy",
      "domain": "docker",
      "status": "action_required",
      "owner_agent": "openclaw",
      "policy_summary": "Docker build surface 必須先有 digest pin、binary checksum、build source cache 與 rollback policy；目前禁止 build / pull / push / rebuild。",
      "allowed_now": [
        "read_only_dockerfile_inventory",
        "read_only_build_surface_report"
      ],
      "blocked_now": [
        "docker_build",
        "image_pull",
        "image_rebuild",
        "registry_push",
        "production_routing"
      ],
      "required_next_gate": "P1-206 image rebuild approval package",
      "evidence_refs": [
        "apps/api/Dockerfile",
        "apps/web/Dockerfile",
        "docs/evaluations/docker_build_surface_inventory_2026-06-04.json"
      ]
    },
    {
      "policy_id": "external_source_policy",
      "domain": "external_sources",
      "status": "planned_next",
      "owner_agent": "openclaw",
      "policy_summary": "CVE、license、registry freshness 與 AI Agent 市場版本監控都必須先列出來源、成本、頻率、速率限制、cache、失敗告警與資料保留，再申請定期執行。",
      "allowed_now": [
        "read_only_source_proposal",
        "offline_policy_comparison"
      ],
      "blocked_now": [
        "external_cve_lookup",
        "external_license_lookup",
        "paid_api_call",
        "sdk_installation",
        "shadow_or_canary"
      ],
      "required_next_gate": "P1-205 external source approval package",
      "evidence_refs": [
        "docs/ai/AI_AGENT_AUTOMATION_WORKLIST_2026-06-04.md",
        "docs/HARD_RULES.md"
      ]
    }
  ],
  "action_queue": [
    {
      "task_id": "P1-205",
      "priority": "P1",
      "status": "planned_next",
      "owner_agent": "hermes",
      "title": "建立定期依賴漂移 / 外部資料來源檢查設計",
      "blocked_operations": [
        "sdk_installation",
        "external_cve_lookup_without_approval",
        "external_license_lookup_without_approval",
        "package_install",
        "lockfile_write"
      ],
      "acceptance_criteria": [
        "列出 CVE、license、registry freshness、AI Agent 市場版本監控來源",
        "定義頻率、cache、rate limit、失敗告警、資料保存與成本邊界",
        "只產生設計與 read-only API，不新增 SDK、不安裝套件、不呼叫付費 API"
      ]
    },
    {
      "task_id": "P1-206",
      "priority": "P1",
      "status": "planned",
      "owner_agent": "openclaw",
      "title": "產生依賴升級 / digest pin / publish boundary 批准包模板",
      "blocked_operations": [
        "package_upgrade",
        "lockfile_write",
        "docker_build",
        "image_rebuild",
        "registry_push",
        "package_publish"
      ],
      "acceptance_criteria": [
        "批准包必須包含證據、風險分級、blast radius、rollback、測試與人工批准欄位",
        "NemoTron 僅提供離線比較建議，不做裁決或執行",
        "不得在模板建立時修改任何 manifest、lockfile、Dockerfile 或 registry 狀態"
      ]
    }
  ],
  "operation_boundaries": {
    "read_only_policy_allowed": true,
    "external_cve_lookup_allowed": false,
    "external_license_lookup_allowed": false,
    "package_installation_allowed": false,
    "package_upgrade_allowed": false,
    "lockfile_write_allowed": false,
    "docker_build_allowed": false,
    "image_pull_allowed": false,
    "image_rebuild_allowed": false,
    "registry_push_allowed": false,
    "paid_api_call_allowed": false,
    "shadow_or_canary_allowed": false,
    "production_routing_allowed": false
  },
  "approval_boundaries": {
    "sdk_installation_allowed": false,
    "paid_api_call_allowed": false,
    "shadow_or_canary_allowed": false,
    "production_routing_allowed": false,
    "destructive_operation_allowed": false
  }
}