{ "schema_version": "security_approval_state_transition_v1", "status": "draft", "date": "2026-05-13", "mode": "approval_state_transition_only", "runtime_execution_authorized": false, "source_indexes": [ "docs/security/security-approval-review-packet.snapshot.json", "docs/security/security-approval-gate.snapshot.json", "docs/security/security-approval-decision-record.snapshot.json", "docs/security/security-followup-runtime-gate.snapshot.json", "docs/security/security-mirror-status-rollup.snapshot.json", "docs/security/security-rollout-policy.snapshot.json" ], "summary": { "total_transition_rules": 5, "decision_options_covered": [ "approve_scope", "reject", "defer", "request_more_evidence", "keep_blocked" ], "runtime_actions_authorized": false, "immediate_execution_allowed": false, "action_buttons_allowed": false, "raw_secret_storage_authorized": false }, "transition_rules": [ { "rule_id": "transition-approve-scope-waiting-runtime-gate", "decision": "approve_scope", "from_review_states": ["ready_for_human_review"], "next_state": "scope_approved_waiting_runtime_gate", "allowed_state_updates": [ "將人工決策寫入 security_approval_decision_record_v1", "標示 approved_scope，但 execution_authorized 仍維持 false", "依 security_followup_runtime_gate_v1 顯示 follow-up runtime gate required 與前置條件", "更新 rollup 的 pending / approved scope 摘要" ], "allowed_next_artifacts": [ "follow_up_runtime_gate_draft", "design_or_draft_pr", "read_only_inventory_request", "low_noise_scope_definition", "audit_evidence" ], "still_forbidden": [ "批准後立即執行 scan、/execute、repo、refs、deploy 或 secret 類動作", "顯示高風險 action button", "跳過 follow-up runtime gate", "保存 raw secret/token/cookie/private key/exploit payload" ], "followup_runtime_gate_required": true, "execution_authorized": false }, { "rule_id": "transition-reject-close-no-action", "decision": "reject", "from_review_states": ["ready_for_human_review"], "next_state": "closed_rejected_no_action", "allowed_state_updates": [ "將拒絕原因寫入 security_approval_decision_record_v1", "標示該 packet 不再等待批准", "保留 evidence refs 與 reviewer", "顯示 no runtime action" ], "allowed_next_artifacts": [ "audit_evidence", "operator_console_note" ], "still_forbidden": [ "用 reject 觸發 rollback、cleanup、repo delete 或任何補救動作", "刪除原始 evidence refs", "自動重開新的執行 gate" ], "followup_runtime_gate_required": false, "execution_authorized": false }, { "rule_id": "transition-defer-pending-owner-timing", "decision": "defer", "from_review_states": ["ready_for_human_review", "block_candidate"], "next_state": "deferred_pending_owner_timing", "allowed_state_updates": [ "將延後原因與下一次 review 條件寫入 decision record", "保留原 packet 與 gate item", "顯示 deferred，不升級為阻擋", "必要時要求 owner 補時間窗或責任人" ], "allowed_next_artifacts": [ "audit_evidence", "deferred_review_note", "future_review_candidate" ], "still_forbidden": [ "因 defer 自動批准", "因 defer 自動執行任何掃描或遷移", "把 deferred item 轉成 runtime blocker" ], "followup_runtime_gate_required": false, "execution_authorized": false }, { "rule_id": "transition-request-more-evidence-waiting-snapshot-update", "decision": "request_more_evidence", "from_review_states": ["ready_for_human_review", "block_candidate"], "next_state": "evidence_requested_waiting_snapshot_update", "allowed_state_updates": [ "記錄缺少的 evidence 類型", "要求 Security Supply Chain Session 產生新的 redacted snapshot", "保留原 packet 不執行", "新 snapshot commit 後再回到 ready_for_human_review" ], "allowed_next_artifacts": [ "redacted_snapshot_request", "evidence_gap_note", "audit_evidence" ], "still_forbidden": [ "要求 raw secret、token、cookie、private key 或 exploit payload", "用未補齊 evidence 的 packet 進行批准", "猜測缺漏資料後繼續" ], "followup_runtime_gate_required": false, "execution_authorized": false }, { "rule_id": "transition-keep-blocked-by-default", "decision": "keep_blocked", "from_review_states": ["block_candidate"], "next_state": "blocked_by_default", "allowed_state_updates": [ "將 keep_blocked 決策寫入 security_approval_decision_record_v1", "維持 blocked reason 與 required reviewers", "顯示 block candidate 仍未解除", "只允許後續補 disable/allowlist/audit gate 設計" ], "allowed_next_artifacts": [ "blocked_reason_audit", "disable_gate_design_note", "allowlist_design_note" ], "still_forbidden": [ "啟用 Kali /execute", "把 /execute 當成一般 MCP action", "執行 shell command 自動修復", "保存 command output 中可能含有的敏感資訊" ], "followup_runtime_gate_required": true, "execution_authorized": false } ], "transition_rules_global": [ "任何人工決策都必須先形成 security_approval_decision_record_v1。", "任何 next_state 都不代表 runtime execution authorization。", "approve_scope 只允許進入設計、草案、只讀 inventory、低噪音 scope 或人工 exception 的下一個文件階段。", "security_followup_runtime_gate_v1 只顯示未來 runtime gate 的 minimum evidence、preflight checks 與 rollback / disable requirement，不啟用 runtime gate。", "真正 scan、/execute、repo、refs、deploy、secret、RBAC、NetworkPolicy、firewall 變更仍需獨立 follow-up runtime gate。", "LOW / MEDIUM observation 不因狀態轉移而變成 blocking gate。" ], "forbidden_actions": [ "execute_transition_rule", "auto_approve", "execute_after_approve_scope_without_runtime_gate", "start_kali_scan", "call_kali_execute_endpoint", "run_credentialed_scan", "create_github_repo", "change_repo_visibility", "sync_git_refs", "switch_github_primary", "auto_merge", "production_deploy", "store_secret_token_cookie_private_key_or_exploit_payload", "turn_low_medium_observations_into_blocking_gates" ] }