347 lines
12 KiB
JSON
347 lines
12 KiB
JSON
{
|
||
"$schema": "https://json-schema.org/draft/2020-12/schema",
|
||
"$id": "urn:awoooi:dependency-supply-chain-drift-monitor-v1",
|
||
"title": "AWOOOI dependency supply-chain drift monitor v1",
|
||
"description": "P2-004 依賴 / 供應鏈漂移監控讀回。此 schema 僅授權 repo-only committed snapshot 讀回，不授權排程啟用、workflow 寫入、外部 CVE / license / registry / Agent market 查詢、套件安裝或升級、lockfile 寫入、Docker build / image pull / registry push、PR 建立、Telegram 實發、secret 讀取、host probe 或 production write。",
|
||
"type": "object",
|
||
"required": [
|
||
"schema_version",
|
||
"generated_at",
|
||
"program_status",
|
||
"source_refs",
|
||
"rollups",
|
||
"source_snapshot_readbacks",
|
||
"monitor_checks",
|
||
"drift_candidates",
|
||
"owner_actions",
|
||
"telegram_policy",
|
||
"agent_roles",
|
||
"next_actions",
|
||
"monitor_boundaries"
|
||
],
|
||
"properties": {
|
||
"schema_version": {
|
||
"type": "string",
|
||
"const": "dependency_supply_chain_drift_monitor_v1"
|
||
},
|
||
"generated_at": {
|
||
"type": "string",
|
||
"minLength": 1
|
||
},
|
||
"program_status": {
|
||
"type": "object",
|
||
"required": [
|
||
"overall_completion_percent",
|
||
"current_priority",
|
||
"current_task_id",
|
||
"next_task_id",
|
||
"read_only_mode",
|
||
"runtime_authority",
|
||
"status_note"
|
||
],
|
||
"properties": {
|
||
"overall_completion_percent": {
|
||
"type": "integer",
|
||
"minimum": 0,
|
||
"maximum": 100
|
||
},
|
||
"current_priority": {
|
||
"type": "string",
|
||
"enum": ["P0", "P1", "P2", "P3"]
|
||
},
|
||
"current_task_id": {
|
||
"type": "string",
|
||
"const": "P2-004"
|
||
},
|
||
"next_task_id": {
|
||
"type": "string",
|
||
"minLength": 1
|
||
},
|
||
"read_only_mode": {
|
||
"type": "boolean",
|
||
"const": true
|
||
},
|
||
"runtime_authority": {
|
||
"type": "string",
|
||
"minLength": 1
|
||
},
|
||
"status_note": {
|
||
"type": "string",
|
||
"minLength": 1
|
||
}
|
||
},
|
||
"additionalProperties": false
|
||
},
|
||
"source_refs": {
|
||
"type": "array",
|
||
"minItems": 1,
|
||
"items": {
|
||
"type": "string",
|
||
"minLength": 1
|
||
}
|
||
},
|
||
"rollups": {
|
||
"type": "object",
|
||
"required": [
|
||
"source_snapshot_count",
|
||
"stale_source_snapshot_count",
|
||
"monitor_check_count",
|
||
"drift_candidate_count",
|
||
"action_required_candidate_count",
|
||
"owner_action_count",
|
||
"blocked_operation_count",
|
||
"by_domain",
|
||
"action_required_drift_candidate_ids"
|
||
],
|
||
"properties": {
|
||
"source_snapshot_count": { "type": "integer", "minimum": 0 },
|
||
"stale_source_snapshot_count": { "type": "integer", "minimum": 0 },
|
||
"monitor_check_count": { "type": "integer", "minimum": 0 },
|
||
"drift_candidate_count": { "type": "integer", "minimum": 0 },
|
||
"action_required_candidate_count": { "type": "integer", "minimum": 0 },
|
||
"owner_action_count": { "type": "integer", "minimum": 0 },
|
||
"blocked_operation_count": { "type": "integer", "minimum": 0 },
|
||
"by_domain": {
|
||
"type": "object",
|
||
"additionalProperties": {
|
||
"type": "integer",
|
||
"minimum": 0
|
||
}
|
||
},
|
||
"action_required_drift_candidate_ids": {
|
||
"type": "array",
|
||
"items": {
|
||
"type": "string",
|
||
"minLength": 1
|
||
}
|
||
}
|
||
},
|
||
"additionalProperties": false
|
||
},
|
||
"source_snapshot_readbacks": {
|
||
"type": "array",
|
||
"minItems": 1,
|
||
"items": {
|
||
"type": "object",
|
||
"required": [
|
||
"snapshot_id",
|
||
"source_ref",
|
||
"source_schema_version",
|
||
"generated_at",
|
||
"freshness_status",
|
||
"evidence_status",
|
||
"next_action"
|
||
],
|
||
"properties": {
|
||
"snapshot_id": { "type": "string", "minLength": 1 },
|
||
"source_ref": { "type": "string", "minLength": 1 },
|
||
"source_schema_version": { "type": "string", "minLength": 1 },
|
||
"generated_at": { "type": "string", "minLength": 1 },
|
||
"freshness_status": { "type": "string", "minLength": 1 },
|
||
"evidence_status": { "type": "string", "minLength": 1 },
|
||
"next_action": { "type": "string", "minLength": 1 }
|
||
},
|
||
"additionalProperties": false
|
||
}
|
||
},
|
||
"monitor_checks": {
|
||
"type": "array",
|
||
"minItems": 1,
|
||
"items": {
|
||
"type": "object",
|
||
"required": [
|
||
"check_id",
|
||
"domain",
|
||
"owner_agent",
|
||
"status",
|
||
"current_signal",
|
||
"evidence_refs",
|
||
"blocked_now",
|
||
"next_action"
|
||
],
|
||
"properties": {
|
||
"check_id": { "type": "string", "minLength": 1 },
|
||
"domain": { "type": "string", "minLength": 1 },
|
||
"owner_agent": { "type": "string", "enum": ["openclaw", "hermes", "nemotron"] },
|
||
"status": { "type": "string", "minLength": 1 },
|
||
"current_signal": { "type": "string", "minLength": 1 },
|
||
"evidence_refs": {
|
||
"type": "array",
|
||
"minItems": 1,
|
||
"items": { "type": "string", "minLength": 1 }
|
||
},
|
||
"blocked_now": {
|
||
"type": "array",
|
||
"items": { "type": "string", "minLength": 1 }
|
||
},
|
||
"next_action": { "type": "string", "minLength": 1 }
|
||
},
|
||
"additionalProperties": false
|
||
}
|
||
},
|
||
"drift_candidates": {
|
||
"type": "array",
|
||
"minItems": 1,
|
||
"items": {
|
||
"type": "object",
|
||
"required": [
|
||
"candidate_id",
|
||
"domain",
|
||
"severity",
|
||
"status",
|
||
"owner_agent",
|
||
"summary",
|
||
"evidence_refs",
|
||
"next_owner_action"
|
||
],
|
||
"properties": {
|
||
"candidate_id": { "type": "string", "minLength": 1 },
|
||
"domain": { "type": "string", "minLength": 1 },
|
||
"severity": { "type": "string", "enum": ["low", "medium", "high", "critical"] },
|
||
"status": { "type": "string", "minLength": 1 },
|
||
"owner_agent": { "type": "string", "enum": ["openclaw", "hermes", "nemotron"] },
|
||
"summary": { "type": "string", "minLength": 1 },
|
||
"evidence_refs": {
|
||
"type": "array",
|
||
"minItems": 1,
|
||
"items": { "type": "string", "minLength": 1 }
|
||
},
|
||
"next_owner_action": { "type": "string", "minLength": 1 }
|
||
},
|
||
"additionalProperties": false
|
||
}
|
||
},
|
||
"owner_actions": {
|
||
"type": "array",
|
||
"minItems": 1,
|
||
"items": {
|
||
"type": "object",
|
||
"required": [
|
||
"action_id",
|
||
"priority",
|
||
"owner_agent",
|
||
"approval_gate",
|
||
"summary",
|
||
"blocked_until"
|
||
],
|
||
"properties": {
|
||
"action_id": { "type": "string", "minLength": 1 },
|
||
"priority": { "type": "string", "enum": ["P0", "P1", "P2", "P3"] },
|
||
"owner_agent": { "type": "string", "enum": ["openclaw", "hermes", "nemotron"] },
|
||
"approval_gate": { "type": "string", "minLength": 1 },
|
||
"summary": { "type": "string", "minLength": 1 },
|
||
"blocked_until": { "type": "string", "minLength": 1 }
|
||
},
|
||
"additionalProperties": false
|
||
}
|
||
},
|
||
"telegram_policy": {
|
||
"type": "object",
|
||
"required": [
|
||
"status",
|
||
"direct_send_allowed",
|
||
"gateway_queue_write_allowed",
|
||
"success_quiet",
|
||
"failure_digest_after_approval",
|
||
"draft_only_outputs"
|
||
],
|
||
"properties": {
|
||
"status": { "type": "string", "minLength": 1 },
|
||
"direct_send_allowed": { "type": "boolean", "const": false },
|
||
"gateway_queue_write_allowed": { "type": "boolean", "const": false },
|
||
"success_quiet": { "type": "boolean" },
|
||
"failure_digest_after_approval": { "type": "boolean" },
|
||
"draft_only_outputs": {
|
||
"type": "array",
|
||
"items": { "type": "string", "minLength": 1 }
|
||
}
|
||
},
|
||
"additionalProperties": false
|
||
},
|
||
"agent_roles": {
|
||
"type": "array",
|
||
"minItems": 1,
|
||
"items": {
|
||
"type": "object",
|
||
"required": ["agent_id", "role", "autonomy_level", "approval_gate", "outputs"],
|
||
"properties": {
|
||
"agent_id": { "type": "string", "enum": ["openclaw", "hermes", "nemotron"] },
|
||
"role": { "type": "string", "minLength": 1 },
|
||
"autonomy_level": { "type": "string", "minLength": 1 },
|
||
"approval_gate": { "type": "string", "minLength": 1 },
|
||
"outputs": {
|
||
"type": "array",
|
||
"items": { "type": "string", "minLength": 1 }
|
||
}
|
||
},
|
||
"additionalProperties": false
|
||
}
|
||
},
|
||
"next_actions": {
|
||
"type": "array",
|
||
"items": {
|
||
"type": "object",
|
||
"required": ["task_id", "priority", "summary", "gate"],
|
||
"properties": {
|
||
"task_id": { "type": "string", "minLength": 1 },
|
||
"priority": { "type": "string", "enum": ["P0", "P1", "P2", "P3"] },
|
||
"summary": { "type": "string", "minLength": 1 },
|
||
"gate": { "type": "string", "minLength": 1 }
|
||
},
|
||
"additionalProperties": false
|
||
}
|
||
},
|
||
"monitor_boundaries": {
|
||
"type": "object",
|
||
"required": [
|
||
"read_only_repo_monitor_allowed",
|
||
"schedule_activation_allowed",
|
||
"workflow_write_allowed",
|
||
"external_cve_lookup_allowed",
|
||
"external_license_lookup_allowed",
|
||
"registry_lookup_allowed",
|
||
"agent_market_external_lookup_allowed",
|
||
"package_installation_allowed",
|
||
"package_upgrade_allowed",
|
||
"lockfile_write_allowed",
|
||
"docker_build_allowed",
|
||
"image_pull_allowed",
|
||
"image_rebuild_allowed",
|
||
"registry_push_allowed",
|
||
"pr_creation_allowed",
|
||
"telegram_send_allowed",
|
||
"production_write_allowed",
|
||
"paid_external_service_allowed",
|
||
"secret_read_allowed",
|
||
"host_probe_allowed",
|
||
"npm_audit_allowed"
|
||
],
|
||
"properties": {
|
||
"read_only_repo_monitor_allowed": { "type": "boolean", "const": true },
|
||
"schedule_activation_allowed": { "type": "boolean", "const": false },
|
||
"workflow_write_allowed": { "type": "boolean", "const": false },
|
||
"external_cve_lookup_allowed": { "type": "boolean", "const": false },
|
||
"external_license_lookup_allowed": { "type": "boolean", "const": false },
|
||
"registry_lookup_allowed": { "type": "boolean", "const": false },
|
||
"agent_market_external_lookup_allowed": { "type": "boolean", "const": false },
|
||
"package_installation_allowed": { "type": "boolean", "const": false },
|
||
"package_upgrade_allowed": { "type": "boolean", "const": false },
|
||
"lockfile_write_allowed": { "type": "boolean", "const": false },
|
||
"docker_build_allowed": { "type": "boolean", "const": false },
|
||
"image_pull_allowed": { "type": "boolean", "const": false },
|
||
"image_rebuild_allowed": { "type": "boolean", "const": false },
|
||
"registry_push_allowed": { "type": "boolean", "const": false },
|
||
"pr_creation_allowed": { "type": "boolean", "const": false },
|
||
"telegram_send_allowed": { "type": "boolean", "const": false },
|
||
"production_write_allowed": { "type": "boolean", "const": false },
|
||
"paid_external_service_allowed": { "type": "boolean", "const": false },
|
||
"secret_read_allowed": { "type": "boolean", "const": false },
|
||
"host_probe_allowed": { "type": "boolean", "const": false },
|
||
"npm_audit_allowed": { "type": "boolean", "const": false }
|
||
},
|
||
"additionalProperties": false
|
||
}
|
||
},
|
||
"additionalProperties": false
|
||
}
|