1810 lines
61 KiB
JSON
1810 lines
61 KiB
JSON
{
|
|
"schema_version": "telegram_notification_egress_owner_request_draft_v1",
|
|
"generated_at": "2026-06-18T22:45:00+08:00",
|
|
"git_commit": "8cbedfe4",
|
|
"status": "owner_request_draft_ready_no_dispatch_no_runtime_action",
|
|
"mode": "metadata_only_no_secret_value_no_telegram_send_no_workflow_change",
|
|
"source_snapshot": "docs/security/telegram-notification-egress-inventory.snapshot.json",
|
|
"source_schema_version": "telegram_notification_egress_inventory_v1",
|
|
"source_status": "inventory_ready_no_runtime_action",
|
|
"summary": {
|
|
"source_direct_bot_api_call_count": 18,
|
|
"source_direct_bot_api_file_count": 11,
|
|
"request_draft_count": 11,
|
|
"workflow_request_draft_count": 6,
|
|
"ops_script_request_draft_count": 4,
|
|
"ci_script_request_draft_count": 0,
|
|
"api_direct_request_draft_count": 1,
|
|
"request_field_count": 27,
|
|
"required_owner_field_count": 19,
|
|
"preflight_check_count": 16,
|
|
"outcome_lane_count": 9,
|
|
"forbidden_payload_count": 14,
|
|
"blocked_action_count": 26,
|
|
"request_sent_count": 0,
|
|
"recipient_confirmed_count": 0,
|
|
"audit_event_emitted_count": 0,
|
|
"owner_response_received_count": 0,
|
|
"owner_response_accepted_count": 0,
|
|
"formatter_convergence_accepted_count": 0,
|
|
"redaction_contract_accepted_count": 0,
|
|
"delivery_receipt_accepted_count": 0,
|
|
"break_glass_fallback_accepted_count": 0,
|
|
"direct_bot_api_migration_authorized_count": 0,
|
|
"telegram_send_authorized_count": 0,
|
|
"bot_api_call_authorized_count": 0,
|
|
"workflow_modification_authorized_count": 0,
|
|
"script_modification_authorized_count": 0,
|
|
"api_sender_refactor_authorized_count": 0,
|
|
"secret_value_collection_allowed_count": 0,
|
|
"raw_payload_storage_allowed_count": 0,
|
|
"production_write_authorized_count": 0,
|
|
"runtime_gate_count": 0,
|
|
"action_button_count": 0
|
|
},
|
|
"execution_boundaries": {
|
|
"runtime_execution_authorized": false,
|
|
"owner_request_send_authorized": false,
|
|
"recipient_confirmation_authorized": false,
|
|
"audit_event_emit_authorized": false,
|
|
"telegram_send_authorized": false,
|
|
"bot_api_call_authorized": false,
|
|
"workflow_modification_authorized": false,
|
|
"script_modification_authorized": false,
|
|
"api_sender_refactor_authorized": false,
|
|
"secret_value_collection_allowed": false,
|
|
"raw_payload_storage_allowed": false,
|
|
"production_write_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
"request_drafts": [
|
|
{
|
|
"request_draft_id": "telegram_notification_egress_owner_request:_gitea_workflows_cd_dev_yaml",
|
|
"source_inventory_schema_version": "telegram_notification_egress_inventory_v1",
|
|
"source_path": ".gitea/workflows/cd-dev.yaml",
|
|
"surface_kind": "gitea_workflow_direct_bot_api",
|
|
"direct_call_count": 3,
|
|
"line_refs": [
|
|
54,
|
|
241,
|
|
262
|
|
],
|
|
"line_hash_refs": [
|
|
"f503c2c0f61100a9",
|
|
"c41f88fbca91a4b9",
|
|
"eaa9a6cb8326dc79"
|
|
],
|
|
"request_fields": [
|
|
"request_draft_id",
|
|
"source_inventory_schema_version",
|
|
"source_path",
|
|
"surface_kind",
|
|
"direct_call_count",
|
|
"line_refs",
|
|
"line_hash_refs",
|
|
"owner_role_or_team",
|
|
"routing_purpose",
|
|
"current_sender",
|
|
"target_chat_route",
|
|
"message_shape_contract",
|
|
"redaction_contract",
|
|
"formatter_convergence_decision",
|
|
"gateway_or_alertmanager_target",
|
|
"break_glass_fallback_decision",
|
|
"delivery_receipt_ref",
|
|
"dedup_or_fingerprint_plan",
|
|
"fallback_or_degraded_mode",
|
|
"migration_or_exception_reason",
|
|
"maintenance_window",
|
|
"rollback_owner",
|
|
"postcheck_evidence_ref",
|
|
"no_secret_value_attestation",
|
|
"no_raw_payload_attestation",
|
|
"no_false_green_attestation",
|
|
"not_authorization"
|
|
],
|
|
"required_owner_fields": [
|
|
"owner_role_or_team",
|
|
"routing_purpose",
|
|
"current_sender",
|
|
"target_chat_route",
|
|
"message_shape_contract",
|
|
"redaction_contract",
|
|
"formatter_convergence_decision",
|
|
"gateway_or_alertmanager_target",
|
|
"break_glass_fallback_decision",
|
|
"delivery_receipt_ref",
|
|
"dedup_or_fingerprint_plan",
|
|
"fallback_or_degraded_mode",
|
|
"migration_or_exception_reason",
|
|
"maintenance_window",
|
|
"rollback_owner",
|
|
"postcheck_evidence_ref",
|
|
"no_secret_value_attestation",
|
|
"no_raw_payload_attestation",
|
|
"no_false_green_attestation"
|
|
],
|
|
"preflight_checks": [
|
|
"source_inventory_current",
|
|
"owner_role_present",
|
|
"route_purpose_present",
|
|
"message_shape_contract_present",
|
|
"redaction_contract_present",
|
|
"formatter_convergence_decision_present",
|
|
"break_glass_fallback_explicit",
|
|
"delivery_receipt_metadata_present",
|
|
"dedup_or_fingerprint_present",
|
|
"maintenance_window_present_for_change",
|
|
"rollback_owner_present",
|
|
"postcheck_evidence_present",
|
|
"no_secret_value_attested",
|
|
"no_raw_payload_attested",
|
|
"no_false_green_attested",
|
|
"runtime_gate_stays_zero"
|
|
],
|
|
"outcome_lanes": [
|
|
"draft_waiting_owner_dispatch",
|
|
"request_owner_route_supplement",
|
|
"request_formatter_convergence_supplement",
|
|
"request_break_glass_fallback_supplement",
|
|
"request_redaction_or_receipt_supplement",
|
|
"quarantine_secret_or_raw_payload",
|
|
"reject_false_green_claim",
|
|
"ready_for_manual_dispatch",
|
|
"waiting_runtime_gate"
|
|
],
|
|
"forbidden_payloads": [
|
|
"bot_token_value",
|
|
"chat_secret_value",
|
|
"secret_hash",
|
|
"partial_token",
|
|
"masked_token",
|
|
"authorization_header",
|
|
"raw_message_payload",
|
|
"raw_workflow_log",
|
|
"raw_action_log",
|
|
"raw_screenshot_with_secret",
|
|
"internal_work_window_transcript",
|
|
"private_namespace",
|
|
"unredacted_internal_path",
|
|
"unredacted_private_ip"
|
|
],
|
|
"blocked_actions": [
|
|
"send_owner_request",
|
|
"confirm_recipient",
|
|
"emit_audit_event",
|
|
"telegram_send",
|
|
"bot_api_call",
|
|
"workflow_modification",
|
|
"script_modification",
|
|
"api_sender_refactor",
|
|
"change_chat_route",
|
|
"change_bot_token",
|
|
"read_secret_store",
|
|
"collect_secret_value",
|
|
"collect_secret_hash",
|
|
"collect_partial_token",
|
|
"collect_chat_id_secret",
|
|
"store_raw_message_payload",
|
|
"store_unredacted_log",
|
|
"workflow_dispatch",
|
|
"production_deploy",
|
|
"accept_cd_success_as_delivery_receipt",
|
|
"accept_route_200_as_notification_delivery",
|
|
"accept_ui_visible_as_notification_acceptance",
|
|
"skip_formatter_convergence",
|
|
"skip_redaction_contract",
|
|
"open_runtime_gate",
|
|
"add_action_button"
|
|
],
|
|
"request_sent": false,
|
|
"recipient_confirmed": false,
|
|
"audit_event_emitted": false,
|
|
"owner_response_received": false,
|
|
"owner_response_accepted": false,
|
|
"formatter_convergence_accepted": false,
|
|
"redaction_contract_accepted": false,
|
|
"delivery_receipt_accepted": false,
|
|
"break_glass_fallback_accepted": false,
|
|
"direct_bot_api_migration_authorized": false,
|
|
"telegram_send_authorized": false,
|
|
"bot_api_call_authorized": false,
|
|
"workflow_modification_authorized": false,
|
|
"script_modification_authorized": false,
|
|
"api_sender_refactor_authorized": false,
|
|
"secret_value_collection_allowed": false,
|
|
"raw_payload_storage_allowed": false,
|
|
"production_write_authorized": false,
|
|
"runtime_gate": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"request_draft_id": "telegram_notification_egress_owner_request:_gitea_workflows_cd_yaml",
|
|
"source_inventory_schema_version": "telegram_notification_egress_inventory_v1",
|
|
"source_path": ".gitea/workflows/cd.yaml",
|
|
"surface_kind": "gitea_workflow_direct_bot_api",
|
|
"direct_call_count": 5,
|
|
"line_refs": [
|
|
113,
|
|
305,
|
|
1203,
|
|
1552,
|
|
1575
|
|
],
|
|
"line_hash_refs": [
|
|
"b57e6587a106976b",
|
|
"19c1de8d67af874a",
|
|
"6ef020c2b6eac91f",
|
|
"d029b95242f39c03",
|
|
"d62c45a8595984fc"
|
|
],
|
|
"request_fields": [
|
|
"request_draft_id",
|
|
"source_inventory_schema_version",
|
|
"source_path",
|
|
"surface_kind",
|
|
"direct_call_count",
|
|
"line_refs",
|
|
"line_hash_refs",
|
|
"owner_role_or_team",
|
|
"routing_purpose",
|
|
"current_sender",
|
|
"target_chat_route",
|
|
"message_shape_contract",
|
|
"redaction_contract",
|
|
"formatter_convergence_decision",
|
|
"gateway_or_alertmanager_target",
|
|
"break_glass_fallback_decision",
|
|
"delivery_receipt_ref",
|
|
"dedup_or_fingerprint_plan",
|
|
"fallback_or_degraded_mode",
|
|
"migration_or_exception_reason",
|
|
"maintenance_window",
|
|
"rollback_owner",
|
|
"postcheck_evidence_ref",
|
|
"no_secret_value_attestation",
|
|
"no_raw_payload_attestation",
|
|
"no_false_green_attestation",
|
|
"not_authorization"
|
|
],
|
|
"required_owner_fields": [
|
|
"owner_role_or_team",
|
|
"routing_purpose",
|
|
"current_sender",
|
|
"target_chat_route",
|
|
"message_shape_contract",
|
|
"redaction_contract",
|
|
"formatter_convergence_decision",
|
|
"gateway_or_alertmanager_target",
|
|
"break_glass_fallback_decision",
|
|
"delivery_receipt_ref",
|
|
"dedup_or_fingerprint_plan",
|
|
"fallback_or_degraded_mode",
|
|
"migration_or_exception_reason",
|
|
"maintenance_window",
|
|
"rollback_owner",
|
|
"postcheck_evidence_ref",
|
|
"no_secret_value_attestation",
|
|
"no_raw_payload_attestation",
|
|
"no_false_green_attestation"
|
|
],
|
|
"preflight_checks": [
|
|
"source_inventory_current",
|
|
"owner_role_present",
|
|
"route_purpose_present",
|
|
"message_shape_contract_present",
|
|
"redaction_contract_present",
|
|
"formatter_convergence_decision_present",
|
|
"break_glass_fallback_explicit",
|
|
"delivery_receipt_metadata_present",
|
|
"dedup_or_fingerprint_present",
|
|
"maintenance_window_present_for_change",
|
|
"rollback_owner_present",
|
|
"postcheck_evidence_present",
|
|
"no_secret_value_attested",
|
|
"no_raw_payload_attested",
|
|
"no_false_green_attested",
|
|
"runtime_gate_stays_zero"
|
|
],
|
|
"outcome_lanes": [
|
|
"draft_waiting_owner_dispatch",
|
|
"request_owner_route_supplement",
|
|
"request_formatter_convergence_supplement",
|
|
"request_break_glass_fallback_supplement",
|
|
"request_redaction_or_receipt_supplement",
|
|
"quarantine_secret_or_raw_payload",
|
|
"reject_false_green_claim",
|
|
"ready_for_manual_dispatch",
|
|
"waiting_runtime_gate"
|
|
],
|
|
"forbidden_payloads": [
|
|
"bot_token_value",
|
|
"chat_secret_value",
|
|
"secret_hash",
|
|
"partial_token",
|
|
"masked_token",
|
|
"authorization_header",
|
|
"raw_message_payload",
|
|
"raw_workflow_log",
|
|
"raw_action_log",
|
|
"raw_screenshot_with_secret",
|
|
"internal_work_window_transcript",
|
|
"private_namespace",
|
|
"unredacted_internal_path",
|
|
"unredacted_private_ip"
|
|
],
|
|
"blocked_actions": [
|
|
"send_owner_request",
|
|
"confirm_recipient",
|
|
"emit_audit_event",
|
|
"telegram_send",
|
|
"bot_api_call",
|
|
"workflow_modification",
|
|
"script_modification",
|
|
"api_sender_refactor",
|
|
"change_chat_route",
|
|
"change_bot_token",
|
|
"read_secret_store",
|
|
"collect_secret_value",
|
|
"collect_secret_hash",
|
|
"collect_partial_token",
|
|
"collect_chat_id_secret",
|
|
"store_raw_message_payload",
|
|
"store_unredacted_log",
|
|
"workflow_dispatch",
|
|
"production_deploy",
|
|
"accept_cd_success_as_delivery_receipt",
|
|
"accept_route_200_as_notification_delivery",
|
|
"accept_ui_visible_as_notification_acceptance",
|
|
"skip_formatter_convergence",
|
|
"skip_redaction_contract",
|
|
"open_runtime_gate",
|
|
"add_action_button"
|
|
],
|
|
"request_sent": false,
|
|
"recipient_confirmed": false,
|
|
"audit_event_emitted": false,
|
|
"owner_response_received": false,
|
|
"owner_response_accepted": false,
|
|
"formatter_convergence_accepted": false,
|
|
"redaction_contract_accepted": false,
|
|
"delivery_receipt_accepted": false,
|
|
"break_glass_fallback_accepted": false,
|
|
"direct_bot_api_migration_authorized": false,
|
|
"telegram_send_authorized": false,
|
|
"bot_api_call_authorized": false,
|
|
"workflow_modification_authorized": false,
|
|
"script_modification_authorized": false,
|
|
"api_sender_refactor_authorized": false,
|
|
"secret_value_collection_allowed": false,
|
|
"raw_payload_storage_allowed": false,
|
|
"production_write_authorized": false,
|
|
"runtime_gate": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"request_draft_id": "telegram_notification_egress_owner_request:_gitea_workflows_code_review_yaml",
|
|
"source_inventory_schema_version": "telegram_notification_egress_inventory_v1",
|
|
"source_path": ".gitea/workflows/code-review.yaml",
|
|
"surface_kind": "gitea_workflow_direct_bot_api",
|
|
"direct_call_count": 2,
|
|
"line_refs": [
|
|
137,
|
|
216
|
|
],
|
|
"line_hash_refs": [
|
|
"a7ebbd735dad5ab2",
|
|
"f10f7782dc7c8125"
|
|
],
|
|
"request_fields": [
|
|
"request_draft_id",
|
|
"source_inventory_schema_version",
|
|
"source_path",
|
|
"surface_kind",
|
|
"direct_call_count",
|
|
"line_refs",
|
|
"line_hash_refs",
|
|
"owner_role_or_team",
|
|
"routing_purpose",
|
|
"current_sender",
|
|
"target_chat_route",
|
|
"message_shape_contract",
|
|
"redaction_contract",
|
|
"formatter_convergence_decision",
|
|
"gateway_or_alertmanager_target",
|
|
"break_glass_fallback_decision",
|
|
"delivery_receipt_ref",
|
|
"dedup_or_fingerprint_plan",
|
|
"fallback_or_degraded_mode",
|
|
"migration_or_exception_reason",
|
|
"maintenance_window",
|
|
"rollback_owner",
|
|
"postcheck_evidence_ref",
|
|
"no_secret_value_attestation",
|
|
"no_raw_payload_attestation",
|
|
"no_false_green_attestation",
|
|
"not_authorization"
|
|
],
|
|
"required_owner_fields": [
|
|
"owner_role_or_team",
|
|
"routing_purpose",
|
|
"current_sender",
|
|
"target_chat_route",
|
|
"message_shape_contract",
|
|
"redaction_contract",
|
|
"formatter_convergence_decision",
|
|
"gateway_or_alertmanager_target",
|
|
"break_glass_fallback_decision",
|
|
"delivery_receipt_ref",
|
|
"dedup_or_fingerprint_plan",
|
|
"fallback_or_degraded_mode",
|
|
"migration_or_exception_reason",
|
|
"maintenance_window",
|
|
"rollback_owner",
|
|
"postcheck_evidence_ref",
|
|
"no_secret_value_attestation",
|
|
"no_raw_payload_attestation",
|
|
"no_false_green_attestation"
|
|
],
|
|
"preflight_checks": [
|
|
"source_inventory_current",
|
|
"owner_role_present",
|
|
"route_purpose_present",
|
|
"message_shape_contract_present",
|
|
"redaction_contract_present",
|
|
"formatter_convergence_decision_present",
|
|
"break_glass_fallback_explicit",
|
|
"delivery_receipt_metadata_present",
|
|
"dedup_or_fingerprint_present",
|
|
"maintenance_window_present_for_change",
|
|
"rollback_owner_present",
|
|
"postcheck_evidence_present",
|
|
"no_secret_value_attested",
|
|
"no_raw_payload_attested",
|
|
"no_false_green_attested",
|
|
"runtime_gate_stays_zero"
|
|
],
|
|
"outcome_lanes": [
|
|
"draft_waiting_owner_dispatch",
|
|
"request_owner_route_supplement",
|
|
"request_formatter_convergence_supplement",
|
|
"request_break_glass_fallback_supplement",
|
|
"request_redaction_or_receipt_supplement",
|
|
"quarantine_secret_or_raw_payload",
|
|
"reject_false_green_claim",
|
|
"ready_for_manual_dispatch",
|
|
"waiting_runtime_gate"
|
|
],
|
|
"forbidden_payloads": [
|
|
"bot_token_value",
|
|
"chat_secret_value",
|
|
"secret_hash",
|
|
"partial_token",
|
|
"masked_token",
|
|
"authorization_header",
|
|
"raw_message_payload",
|
|
"raw_workflow_log",
|
|
"raw_action_log",
|
|
"raw_screenshot_with_secret",
|
|
"internal_work_window_transcript",
|
|
"private_namespace",
|
|
"unredacted_internal_path",
|
|
"unredacted_private_ip"
|
|
],
|
|
"blocked_actions": [
|
|
"send_owner_request",
|
|
"confirm_recipient",
|
|
"emit_audit_event",
|
|
"telegram_send",
|
|
"bot_api_call",
|
|
"workflow_modification",
|
|
"script_modification",
|
|
"api_sender_refactor",
|
|
"change_chat_route",
|
|
"change_bot_token",
|
|
"read_secret_store",
|
|
"collect_secret_value",
|
|
"collect_secret_hash",
|
|
"collect_partial_token",
|
|
"collect_chat_id_secret",
|
|
"store_raw_message_payload",
|
|
"store_unredacted_log",
|
|
"workflow_dispatch",
|
|
"production_deploy",
|
|
"accept_cd_success_as_delivery_receipt",
|
|
"accept_route_200_as_notification_delivery",
|
|
"accept_ui_visible_as_notification_acceptance",
|
|
"skip_formatter_convergence",
|
|
"skip_redaction_contract",
|
|
"open_runtime_gate",
|
|
"add_action_button"
|
|
],
|
|
"request_sent": false,
|
|
"recipient_confirmed": false,
|
|
"audit_event_emitted": false,
|
|
"owner_response_received": false,
|
|
"owner_response_accepted": false,
|
|
"formatter_convergence_accepted": false,
|
|
"redaction_contract_accepted": false,
|
|
"delivery_receipt_accepted": false,
|
|
"break_glass_fallback_accepted": false,
|
|
"direct_bot_api_migration_authorized": false,
|
|
"telegram_send_authorized": false,
|
|
"bot_api_call_authorized": false,
|
|
"workflow_modification_authorized": false,
|
|
"script_modification_authorized": false,
|
|
"api_sender_refactor_authorized": false,
|
|
"secret_value_collection_allowed": false,
|
|
"raw_payload_storage_allowed": false,
|
|
"production_write_authorized": false,
|
|
"runtime_gate": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"request_draft_id": "telegram_notification_egress_owner_request:_gitea_workflows_deploy_alerts_yaml",
|
|
"source_inventory_schema_version": "telegram_notification_egress_inventory_v1",
|
|
"source_path": ".gitea/workflows/deploy-alerts.yaml",
|
|
"surface_kind": "gitea_workflow_direct_bot_api",
|
|
"direct_call_count": 1,
|
|
"line_refs": [
|
|
69
|
|
],
|
|
"line_hash_refs": [
|
|
"79e83190f68f27c9"
|
|
],
|
|
"request_fields": [
|
|
"request_draft_id",
|
|
"source_inventory_schema_version",
|
|
"source_path",
|
|
"surface_kind",
|
|
"direct_call_count",
|
|
"line_refs",
|
|
"line_hash_refs",
|
|
"owner_role_or_team",
|
|
"routing_purpose",
|
|
"current_sender",
|
|
"target_chat_route",
|
|
"message_shape_contract",
|
|
"redaction_contract",
|
|
"formatter_convergence_decision",
|
|
"gateway_or_alertmanager_target",
|
|
"break_glass_fallback_decision",
|
|
"delivery_receipt_ref",
|
|
"dedup_or_fingerprint_plan",
|
|
"fallback_or_degraded_mode",
|
|
"migration_or_exception_reason",
|
|
"maintenance_window",
|
|
"rollback_owner",
|
|
"postcheck_evidence_ref",
|
|
"no_secret_value_attestation",
|
|
"no_raw_payload_attestation",
|
|
"no_false_green_attestation",
|
|
"not_authorization"
|
|
],
|
|
"required_owner_fields": [
|
|
"owner_role_or_team",
|
|
"routing_purpose",
|
|
"current_sender",
|
|
"target_chat_route",
|
|
"message_shape_contract",
|
|
"redaction_contract",
|
|
"formatter_convergence_decision",
|
|
"gateway_or_alertmanager_target",
|
|
"break_glass_fallback_decision",
|
|
"delivery_receipt_ref",
|
|
"dedup_or_fingerprint_plan",
|
|
"fallback_or_degraded_mode",
|
|
"migration_or_exception_reason",
|
|
"maintenance_window",
|
|
"rollback_owner",
|
|
"postcheck_evidence_ref",
|
|
"no_secret_value_attestation",
|
|
"no_raw_payload_attestation",
|
|
"no_false_green_attestation"
|
|
],
|
|
"preflight_checks": [
|
|
"source_inventory_current",
|
|
"owner_role_present",
|
|
"route_purpose_present",
|
|
"message_shape_contract_present",
|
|
"redaction_contract_present",
|
|
"formatter_convergence_decision_present",
|
|
"break_glass_fallback_explicit",
|
|
"delivery_receipt_metadata_present",
|
|
"dedup_or_fingerprint_present",
|
|
"maintenance_window_present_for_change",
|
|
"rollback_owner_present",
|
|
"postcheck_evidence_present",
|
|
"no_secret_value_attested",
|
|
"no_raw_payload_attested",
|
|
"no_false_green_attested",
|
|
"runtime_gate_stays_zero"
|
|
],
|
|
"outcome_lanes": [
|
|
"draft_waiting_owner_dispatch",
|
|
"request_owner_route_supplement",
|
|
"request_formatter_convergence_supplement",
|
|
"request_break_glass_fallback_supplement",
|
|
"request_redaction_or_receipt_supplement",
|
|
"quarantine_secret_or_raw_payload",
|
|
"reject_false_green_claim",
|
|
"ready_for_manual_dispatch",
|
|
"waiting_runtime_gate"
|
|
],
|
|
"forbidden_payloads": [
|
|
"bot_token_value",
|
|
"chat_secret_value",
|
|
"secret_hash",
|
|
"partial_token",
|
|
"masked_token",
|
|
"authorization_header",
|
|
"raw_message_payload",
|
|
"raw_workflow_log",
|
|
"raw_action_log",
|
|
"raw_screenshot_with_secret",
|
|
"internal_work_window_transcript",
|
|
"private_namespace",
|
|
"unredacted_internal_path",
|
|
"unredacted_private_ip"
|
|
],
|
|
"blocked_actions": [
|
|
"send_owner_request",
|
|
"confirm_recipient",
|
|
"emit_audit_event",
|
|
"telegram_send",
|
|
"bot_api_call",
|
|
"workflow_modification",
|
|
"script_modification",
|
|
"api_sender_refactor",
|
|
"change_chat_route",
|
|
"change_bot_token",
|
|
"read_secret_store",
|
|
"collect_secret_value",
|
|
"collect_secret_hash",
|
|
"collect_partial_token",
|
|
"collect_chat_id_secret",
|
|
"store_raw_message_payload",
|
|
"store_unredacted_log",
|
|
"workflow_dispatch",
|
|
"production_deploy",
|
|
"accept_cd_success_as_delivery_receipt",
|
|
"accept_route_200_as_notification_delivery",
|
|
"accept_ui_visible_as_notification_acceptance",
|
|
"skip_formatter_convergence",
|
|
"skip_redaction_contract",
|
|
"open_runtime_gate",
|
|
"add_action_button"
|
|
],
|
|
"request_sent": false,
|
|
"recipient_confirmed": false,
|
|
"audit_event_emitted": false,
|
|
"owner_response_received": false,
|
|
"owner_response_accepted": false,
|
|
"formatter_convergence_accepted": false,
|
|
"redaction_contract_accepted": false,
|
|
"delivery_receipt_accepted": false,
|
|
"break_glass_fallback_accepted": false,
|
|
"direct_bot_api_migration_authorized": false,
|
|
"telegram_send_authorized": false,
|
|
"bot_api_call_authorized": false,
|
|
"workflow_modification_authorized": false,
|
|
"script_modification_authorized": false,
|
|
"api_sender_refactor_authorized": false,
|
|
"secret_value_collection_allowed": false,
|
|
"raw_payload_storage_allowed": false,
|
|
"production_write_authorized": false,
|
|
"runtime_gate": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"request_draft_id": "telegram_notification_egress_owner_request:_gitea_workflows_e2e_health_yaml",
|
|
"source_inventory_schema_version": "telegram_notification_egress_inventory_v1",
|
|
"source_path": ".gitea/workflows/e2e-health.yaml",
|
|
"surface_kind": "gitea_workflow_direct_bot_api",
|
|
"direct_call_count": 1,
|
|
"line_refs": [
|
|
98
|
|
],
|
|
"line_hash_refs": [
|
|
"d73ce94678f970a9"
|
|
],
|
|
"request_fields": [
|
|
"request_draft_id",
|
|
"source_inventory_schema_version",
|
|
"source_path",
|
|
"surface_kind",
|
|
"direct_call_count",
|
|
"line_refs",
|
|
"line_hash_refs",
|
|
"owner_role_or_team",
|
|
"routing_purpose",
|
|
"current_sender",
|
|
"target_chat_route",
|
|
"message_shape_contract",
|
|
"redaction_contract",
|
|
"formatter_convergence_decision",
|
|
"gateway_or_alertmanager_target",
|
|
"break_glass_fallback_decision",
|
|
"delivery_receipt_ref",
|
|
"dedup_or_fingerprint_plan",
|
|
"fallback_or_degraded_mode",
|
|
"migration_or_exception_reason",
|
|
"maintenance_window",
|
|
"rollback_owner",
|
|
"postcheck_evidence_ref",
|
|
"no_secret_value_attestation",
|
|
"no_raw_payload_attestation",
|
|
"no_false_green_attestation",
|
|
"not_authorization"
|
|
],
|
|
"required_owner_fields": [
|
|
"owner_role_or_team",
|
|
"routing_purpose",
|
|
"current_sender",
|
|
"target_chat_route",
|
|
"message_shape_contract",
|
|
"redaction_contract",
|
|
"formatter_convergence_decision",
|
|
"gateway_or_alertmanager_target",
|
|
"break_glass_fallback_decision",
|
|
"delivery_receipt_ref",
|
|
"dedup_or_fingerprint_plan",
|
|
"fallback_or_degraded_mode",
|
|
"migration_or_exception_reason",
|
|
"maintenance_window",
|
|
"rollback_owner",
|
|
"postcheck_evidence_ref",
|
|
"no_secret_value_attestation",
|
|
"no_raw_payload_attestation",
|
|
"no_false_green_attestation"
|
|
],
|
|
"preflight_checks": [
|
|
"source_inventory_current",
|
|
"owner_role_present",
|
|
"route_purpose_present",
|
|
"message_shape_contract_present",
|
|
"redaction_contract_present",
|
|
"formatter_convergence_decision_present",
|
|
"break_glass_fallback_explicit",
|
|
"delivery_receipt_metadata_present",
|
|
"dedup_or_fingerprint_present",
|
|
"maintenance_window_present_for_change",
|
|
"rollback_owner_present",
|
|
"postcheck_evidence_present",
|
|
"no_secret_value_attested",
|
|
"no_raw_payload_attested",
|
|
"no_false_green_attested",
|
|
"runtime_gate_stays_zero"
|
|
],
|
|
"outcome_lanes": [
|
|
"draft_waiting_owner_dispatch",
|
|
"request_owner_route_supplement",
|
|
"request_formatter_convergence_supplement",
|
|
"request_break_glass_fallback_supplement",
|
|
"request_redaction_or_receipt_supplement",
|
|
"quarantine_secret_or_raw_payload",
|
|
"reject_false_green_claim",
|
|
"ready_for_manual_dispatch",
|
|
"waiting_runtime_gate"
|
|
],
|
|
"forbidden_payloads": [
|
|
"bot_token_value",
|
|
"chat_secret_value",
|
|
"secret_hash",
|
|
"partial_token",
|
|
"masked_token",
|
|
"authorization_header",
|
|
"raw_message_payload",
|
|
"raw_workflow_log",
|
|
"raw_action_log",
|
|
"raw_screenshot_with_secret",
|
|
"internal_work_window_transcript",
|
|
"private_namespace",
|
|
"unredacted_internal_path",
|
|
"unredacted_private_ip"
|
|
],
|
|
"blocked_actions": [
|
|
"send_owner_request",
|
|
"confirm_recipient",
|
|
"emit_audit_event",
|
|
"telegram_send",
|
|
"bot_api_call",
|
|
"workflow_modification",
|
|
"script_modification",
|
|
"api_sender_refactor",
|
|
"change_chat_route",
|
|
"change_bot_token",
|
|
"read_secret_store",
|
|
"collect_secret_value",
|
|
"collect_secret_hash",
|
|
"collect_partial_token",
|
|
"collect_chat_id_secret",
|
|
"store_raw_message_payload",
|
|
"store_unredacted_log",
|
|
"workflow_dispatch",
|
|
"production_deploy",
|
|
"accept_cd_success_as_delivery_receipt",
|
|
"accept_route_200_as_notification_delivery",
|
|
"accept_ui_visible_as_notification_acceptance",
|
|
"skip_formatter_convergence",
|
|
"skip_redaction_contract",
|
|
"open_runtime_gate",
|
|
"add_action_button"
|
|
],
|
|
"request_sent": false,
|
|
"recipient_confirmed": false,
|
|
"audit_event_emitted": false,
|
|
"owner_response_received": false,
|
|
"owner_response_accepted": false,
|
|
"formatter_convergence_accepted": false,
|
|
"redaction_contract_accepted": false,
|
|
"delivery_receipt_accepted": false,
|
|
"break_glass_fallback_accepted": false,
|
|
"direct_bot_api_migration_authorized": false,
|
|
"telegram_send_authorized": false,
|
|
"bot_api_call_authorized": false,
|
|
"workflow_modification_authorized": false,
|
|
"script_modification_authorized": false,
|
|
"api_sender_refactor_authorized": false,
|
|
"secret_value_collection_allowed": false,
|
|
"raw_payload_storage_allowed": false,
|
|
"production_write_authorized": false,
|
|
"runtime_gate": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"request_draft_id": "telegram_notification_egress_owner_request:_gitea_workflows_run_migration_yml",
|
|
"source_inventory_schema_version": "telegram_notification_egress_inventory_v1",
|
|
"source_path": ".gitea/workflows/run-migration.yml",
|
|
"surface_kind": "gitea_workflow_direct_bot_api",
|
|
"direct_call_count": 1,
|
|
"line_refs": [
|
|
210
|
|
],
|
|
"line_hash_refs": [
|
|
"934a8dd69fca99b3"
|
|
],
|
|
"request_fields": [
|
|
"request_draft_id",
|
|
"source_inventory_schema_version",
|
|
"source_path",
|
|
"surface_kind",
|
|
"direct_call_count",
|
|
"line_refs",
|
|
"line_hash_refs",
|
|
"owner_role_or_team",
|
|
"routing_purpose",
|
|
"current_sender",
|
|
"target_chat_route",
|
|
"message_shape_contract",
|
|
"redaction_contract",
|
|
"formatter_convergence_decision",
|
|
"gateway_or_alertmanager_target",
|
|
"break_glass_fallback_decision",
|
|
"delivery_receipt_ref",
|
|
"dedup_or_fingerprint_plan",
|
|
"fallback_or_degraded_mode",
|
|
"migration_or_exception_reason",
|
|
"maintenance_window",
|
|
"rollback_owner",
|
|
"postcheck_evidence_ref",
|
|
"no_secret_value_attestation",
|
|
"no_raw_payload_attestation",
|
|
"no_false_green_attestation",
|
|
"not_authorization"
|
|
],
|
|
"required_owner_fields": [
|
|
"owner_role_or_team",
|
|
"routing_purpose",
|
|
"current_sender",
|
|
"target_chat_route",
|
|
"message_shape_contract",
|
|
"redaction_contract",
|
|
"formatter_convergence_decision",
|
|
"gateway_or_alertmanager_target",
|
|
"break_glass_fallback_decision",
|
|
"delivery_receipt_ref",
|
|
"dedup_or_fingerprint_plan",
|
|
"fallback_or_degraded_mode",
|
|
"migration_or_exception_reason",
|
|
"maintenance_window",
|
|
"rollback_owner",
|
|
"postcheck_evidence_ref",
|
|
"no_secret_value_attestation",
|
|
"no_raw_payload_attestation",
|
|
"no_false_green_attestation"
|
|
],
|
|
"preflight_checks": [
|
|
"source_inventory_current",
|
|
"owner_role_present",
|
|
"route_purpose_present",
|
|
"message_shape_contract_present",
|
|
"redaction_contract_present",
|
|
"formatter_convergence_decision_present",
|
|
"break_glass_fallback_explicit",
|
|
"delivery_receipt_metadata_present",
|
|
"dedup_or_fingerprint_present",
|
|
"maintenance_window_present_for_change",
|
|
"rollback_owner_present",
|
|
"postcheck_evidence_present",
|
|
"no_secret_value_attested",
|
|
"no_raw_payload_attested",
|
|
"no_false_green_attested",
|
|
"runtime_gate_stays_zero"
|
|
],
|
|
"outcome_lanes": [
|
|
"draft_waiting_owner_dispatch",
|
|
"request_owner_route_supplement",
|
|
"request_formatter_convergence_supplement",
|
|
"request_break_glass_fallback_supplement",
|
|
"request_redaction_or_receipt_supplement",
|
|
"quarantine_secret_or_raw_payload",
|
|
"reject_false_green_claim",
|
|
"ready_for_manual_dispatch",
|
|
"waiting_runtime_gate"
|
|
],
|
|
"forbidden_payloads": [
|
|
"bot_token_value",
|
|
"chat_secret_value",
|
|
"secret_hash",
|
|
"partial_token",
|
|
"masked_token",
|
|
"authorization_header",
|
|
"raw_message_payload",
|
|
"raw_workflow_log",
|
|
"raw_action_log",
|
|
"raw_screenshot_with_secret",
|
|
"internal_work_window_transcript",
|
|
"private_namespace",
|
|
"unredacted_internal_path",
|
|
"unredacted_private_ip"
|
|
],
|
|
"blocked_actions": [
|
|
"send_owner_request",
|
|
"confirm_recipient",
|
|
"emit_audit_event",
|
|
"telegram_send",
|
|
"bot_api_call",
|
|
"workflow_modification",
|
|
"script_modification",
|
|
"api_sender_refactor",
|
|
"change_chat_route",
|
|
"change_bot_token",
|
|
"read_secret_store",
|
|
"collect_secret_value",
|
|
"collect_secret_hash",
|
|
"collect_partial_token",
|
|
"collect_chat_id_secret",
|
|
"store_raw_message_payload",
|
|
"store_unredacted_log",
|
|
"workflow_dispatch",
|
|
"production_deploy",
|
|
"accept_cd_success_as_delivery_receipt",
|
|
"accept_route_200_as_notification_delivery",
|
|
"accept_ui_visible_as_notification_acceptance",
|
|
"skip_formatter_convergence",
|
|
"skip_redaction_contract",
|
|
"open_runtime_gate",
|
|
"add_action_button"
|
|
],
|
|
"request_sent": false,
|
|
"recipient_confirmed": false,
|
|
"audit_event_emitted": false,
|
|
"owner_response_received": false,
|
|
"owner_response_accepted": false,
|
|
"formatter_convergence_accepted": false,
|
|
"redaction_contract_accepted": false,
|
|
"delivery_receipt_accepted": false,
|
|
"break_glass_fallback_accepted": false,
|
|
"direct_bot_api_migration_authorized": false,
|
|
"telegram_send_authorized": false,
|
|
"bot_api_call_authorized": false,
|
|
"workflow_modification_authorized": false,
|
|
"script_modification_authorized": false,
|
|
"api_sender_refactor_authorized": false,
|
|
"secret_value_collection_allowed": false,
|
|
"raw_payload_storage_allowed": false,
|
|
"production_write_authorized": false,
|
|
"runtime_gate": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"request_draft_id": "telegram_notification_egress_owner_request:apps_api_src_services_channel_hub_py",
|
|
"source_inventory_schema_version": "telegram_notification_egress_inventory_v1",
|
|
"source_path": "apps/api/src/services/channel_hub.py",
|
|
"surface_kind": "api_direct_bot_api",
|
|
"direct_call_count": 1,
|
|
"line_refs": [
|
|
1138
|
|
],
|
|
"line_hash_refs": [
|
|
"9e418fa74c83815a"
|
|
],
|
|
"request_fields": [
|
|
"request_draft_id",
|
|
"source_inventory_schema_version",
|
|
"source_path",
|
|
"surface_kind",
|
|
"direct_call_count",
|
|
"line_refs",
|
|
"line_hash_refs",
|
|
"owner_role_or_team",
|
|
"routing_purpose",
|
|
"current_sender",
|
|
"target_chat_route",
|
|
"message_shape_contract",
|
|
"redaction_contract",
|
|
"formatter_convergence_decision",
|
|
"gateway_or_alertmanager_target",
|
|
"break_glass_fallback_decision",
|
|
"delivery_receipt_ref",
|
|
"dedup_or_fingerprint_plan",
|
|
"fallback_or_degraded_mode",
|
|
"migration_or_exception_reason",
|
|
"maintenance_window",
|
|
"rollback_owner",
|
|
"postcheck_evidence_ref",
|
|
"no_secret_value_attestation",
|
|
"no_raw_payload_attestation",
|
|
"no_false_green_attestation",
|
|
"not_authorization"
|
|
],
|
|
"required_owner_fields": [
|
|
"owner_role_or_team",
|
|
"routing_purpose",
|
|
"current_sender",
|
|
"target_chat_route",
|
|
"message_shape_contract",
|
|
"redaction_contract",
|
|
"formatter_convergence_decision",
|
|
"gateway_or_alertmanager_target",
|
|
"break_glass_fallback_decision",
|
|
"delivery_receipt_ref",
|
|
"dedup_or_fingerprint_plan",
|
|
"fallback_or_degraded_mode",
|
|
"migration_or_exception_reason",
|
|
"maintenance_window",
|
|
"rollback_owner",
|
|
"postcheck_evidence_ref",
|
|
"no_secret_value_attestation",
|
|
"no_raw_payload_attestation",
|
|
"no_false_green_attestation"
|
|
],
|
|
"preflight_checks": [
|
|
"source_inventory_current",
|
|
"owner_role_present",
|
|
"route_purpose_present",
|
|
"message_shape_contract_present",
|
|
"redaction_contract_present",
|
|
"formatter_convergence_decision_present",
|
|
"break_glass_fallback_explicit",
|
|
"delivery_receipt_metadata_present",
|
|
"dedup_or_fingerprint_present",
|
|
"maintenance_window_present_for_change",
|
|
"rollback_owner_present",
|
|
"postcheck_evidence_present",
|
|
"no_secret_value_attested",
|
|
"no_raw_payload_attested",
|
|
"no_false_green_attested",
|
|
"runtime_gate_stays_zero"
|
|
],
|
|
"outcome_lanes": [
|
|
"draft_waiting_owner_dispatch",
|
|
"request_owner_route_supplement",
|
|
"request_formatter_convergence_supplement",
|
|
"request_break_glass_fallback_supplement",
|
|
"request_redaction_or_receipt_supplement",
|
|
"quarantine_secret_or_raw_payload",
|
|
"reject_false_green_claim",
|
|
"ready_for_manual_dispatch",
|
|
"waiting_runtime_gate"
|
|
],
|
|
"forbidden_payloads": [
|
|
"bot_token_value",
|
|
"chat_secret_value",
|
|
"secret_hash",
|
|
"partial_token",
|
|
"masked_token",
|
|
"authorization_header",
|
|
"raw_message_payload",
|
|
"raw_workflow_log",
|
|
"raw_action_log",
|
|
"raw_screenshot_with_secret",
|
|
"internal_work_window_transcript",
|
|
"private_namespace",
|
|
"unredacted_internal_path",
|
|
"unredacted_private_ip"
|
|
],
|
|
"blocked_actions": [
|
|
"send_owner_request",
|
|
"confirm_recipient",
|
|
"emit_audit_event",
|
|
"telegram_send",
|
|
"bot_api_call",
|
|
"workflow_modification",
|
|
"script_modification",
|
|
"api_sender_refactor",
|
|
"change_chat_route",
|
|
"change_bot_token",
|
|
"read_secret_store",
|
|
"collect_secret_value",
|
|
"collect_secret_hash",
|
|
"collect_partial_token",
|
|
"collect_chat_id_secret",
|
|
"store_raw_message_payload",
|
|
"store_unredacted_log",
|
|
"workflow_dispatch",
|
|
"production_deploy",
|
|
"accept_cd_success_as_delivery_receipt",
|
|
"accept_route_200_as_notification_delivery",
|
|
"accept_ui_visible_as_notification_acceptance",
|
|
"skip_formatter_convergence",
|
|
"skip_redaction_contract",
|
|
"open_runtime_gate",
|
|
"add_action_button"
|
|
],
|
|
"request_sent": false,
|
|
"recipient_confirmed": false,
|
|
"audit_event_emitted": false,
|
|
"owner_response_received": false,
|
|
"owner_response_accepted": false,
|
|
"formatter_convergence_accepted": false,
|
|
"redaction_contract_accepted": false,
|
|
"delivery_receipt_accepted": false,
|
|
"break_glass_fallback_accepted": false,
|
|
"direct_bot_api_migration_authorized": false,
|
|
"telegram_send_authorized": false,
|
|
"bot_api_call_authorized": false,
|
|
"workflow_modification_authorized": false,
|
|
"script_modification_authorized": false,
|
|
"api_sender_refactor_authorized": false,
|
|
"secret_value_collection_allowed": false,
|
|
"raw_payload_storage_allowed": false,
|
|
"production_write_authorized": false,
|
|
"runtime_gate": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"request_draft_id": "telegram_notification_egress_owner_request:scripts_ops_backup_from_110_sh",
|
|
"source_inventory_schema_version": "telegram_notification_egress_inventory_v1",
|
|
"source_path": "scripts/ops/backup-from-110.sh",
|
|
"surface_kind": "ops_script_direct_bot_api",
|
|
"direct_call_count": 1,
|
|
"line_refs": [
|
|
64
|
|
],
|
|
"line_hash_refs": [
|
|
"ff5ffbeca44d679b"
|
|
],
|
|
"request_fields": [
|
|
"request_draft_id",
|
|
"source_inventory_schema_version",
|
|
"source_path",
|
|
"surface_kind",
|
|
"direct_call_count",
|
|
"line_refs",
|
|
"line_hash_refs",
|
|
"owner_role_or_team",
|
|
"routing_purpose",
|
|
"current_sender",
|
|
"target_chat_route",
|
|
"message_shape_contract",
|
|
"redaction_contract",
|
|
"formatter_convergence_decision",
|
|
"gateway_or_alertmanager_target",
|
|
"break_glass_fallback_decision",
|
|
"delivery_receipt_ref",
|
|
"dedup_or_fingerprint_plan",
|
|
"fallback_or_degraded_mode",
|
|
"migration_or_exception_reason",
|
|
"maintenance_window",
|
|
"rollback_owner",
|
|
"postcheck_evidence_ref",
|
|
"no_secret_value_attestation",
|
|
"no_raw_payload_attestation",
|
|
"no_false_green_attestation",
|
|
"not_authorization"
|
|
],
|
|
"required_owner_fields": [
|
|
"owner_role_or_team",
|
|
"routing_purpose",
|
|
"current_sender",
|
|
"target_chat_route",
|
|
"message_shape_contract",
|
|
"redaction_contract",
|
|
"formatter_convergence_decision",
|
|
"gateway_or_alertmanager_target",
|
|
"break_glass_fallback_decision",
|
|
"delivery_receipt_ref",
|
|
"dedup_or_fingerprint_plan",
|
|
"fallback_or_degraded_mode",
|
|
"migration_or_exception_reason",
|
|
"maintenance_window",
|
|
"rollback_owner",
|
|
"postcheck_evidence_ref",
|
|
"no_secret_value_attestation",
|
|
"no_raw_payload_attestation",
|
|
"no_false_green_attestation"
|
|
],
|
|
"preflight_checks": [
|
|
"source_inventory_current",
|
|
"owner_role_present",
|
|
"route_purpose_present",
|
|
"message_shape_contract_present",
|
|
"redaction_contract_present",
|
|
"formatter_convergence_decision_present",
|
|
"break_glass_fallback_explicit",
|
|
"delivery_receipt_metadata_present",
|
|
"dedup_or_fingerprint_present",
|
|
"maintenance_window_present_for_change",
|
|
"rollback_owner_present",
|
|
"postcheck_evidence_present",
|
|
"no_secret_value_attested",
|
|
"no_raw_payload_attested",
|
|
"no_false_green_attested",
|
|
"runtime_gate_stays_zero"
|
|
],
|
|
"outcome_lanes": [
|
|
"draft_waiting_owner_dispatch",
|
|
"request_owner_route_supplement",
|
|
"request_formatter_convergence_supplement",
|
|
"request_break_glass_fallback_supplement",
|
|
"request_redaction_or_receipt_supplement",
|
|
"quarantine_secret_or_raw_payload",
|
|
"reject_false_green_claim",
|
|
"ready_for_manual_dispatch",
|
|
"waiting_runtime_gate"
|
|
],
|
|
"forbidden_payloads": [
|
|
"bot_token_value",
|
|
"chat_secret_value",
|
|
"secret_hash",
|
|
"partial_token",
|
|
"masked_token",
|
|
"authorization_header",
|
|
"raw_message_payload",
|
|
"raw_workflow_log",
|
|
"raw_action_log",
|
|
"raw_screenshot_with_secret",
|
|
"internal_work_window_transcript",
|
|
"private_namespace",
|
|
"unredacted_internal_path",
|
|
"unredacted_private_ip"
|
|
],
|
|
"blocked_actions": [
|
|
"send_owner_request",
|
|
"confirm_recipient",
|
|
"emit_audit_event",
|
|
"telegram_send",
|
|
"bot_api_call",
|
|
"workflow_modification",
|
|
"script_modification",
|
|
"api_sender_refactor",
|
|
"change_chat_route",
|
|
"change_bot_token",
|
|
"read_secret_store",
|
|
"collect_secret_value",
|
|
"collect_secret_hash",
|
|
"collect_partial_token",
|
|
"collect_chat_id_secret",
|
|
"store_raw_message_payload",
|
|
"store_unredacted_log",
|
|
"workflow_dispatch",
|
|
"production_deploy",
|
|
"accept_cd_success_as_delivery_receipt",
|
|
"accept_route_200_as_notification_delivery",
|
|
"accept_ui_visible_as_notification_acceptance",
|
|
"skip_formatter_convergence",
|
|
"skip_redaction_contract",
|
|
"open_runtime_gate",
|
|
"add_action_button"
|
|
],
|
|
"request_sent": false,
|
|
"recipient_confirmed": false,
|
|
"audit_event_emitted": false,
|
|
"owner_response_received": false,
|
|
"owner_response_accepted": false,
|
|
"formatter_convergence_accepted": false,
|
|
"redaction_contract_accepted": false,
|
|
"delivery_receipt_accepted": false,
|
|
"break_glass_fallback_accepted": false,
|
|
"direct_bot_api_migration_authorized": false,
|
|
"telegram_send_authorized": false,
|
|
"bot_api_call_authorized": false,
|
|
"workflow_modification_authorized": false,
|
|
"script_modification_authorized": false,
|
|
"api_sender_refactor_authorized": false,
|
|
"secret_value_collection_allowed": false,
|
|
"raw_payload_storage_allowed": false,
|
|
"production_write_authorized": false,
|
|
"runtime_gate": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"request_draft_id": "telegram_notification_egress_owner_request:scripts_ops_docker_health_monitor_sh",
|
|
"source_inventory_schema_version": "telegram_notification_egress_inventory_v1",
|
|
"source_path": "scripts/ops/docker-health-monitor.sh",
|
|
"surface_kind": "ops_script_direct_bot_api",
|
|
"direct_call_count": 1,
|
|
"line_refs": [
|
|
90
|
|
],
|
|
"line_hash_refs": [
|
|
"6611406903bc7d65"
|
|
],
|
|
"request_fields": [
|
|
"request_draft_id",
|
|
"source_inventory_schema_version",
|
|
"source_path",
|
|
"surface_kind",
|
|
"direct_call_count",
|
|
"line_refs",
|
|
"line_hash_refs",
|
|
"owner_role_or_team",
|
|
"routing_purpose",
|
|
"current_sender",
|
|
"target_chat_route",
|
|
"message_shape_contract",
|
|
"redaction_contract",
|
|
"formatter_convergence_decision",
|
|
"gateway_or_alertmanager_target",
|
|
"break_glass_fallback_decision",
|
|
"delivery_receipt_ref",
|
|
"dedup_or_fingerprint_plan",
|
|
"fallback_or_degraded_mode",
|
|
"migration_or_exception_reason",
|
|
"maintenance_window",
|
|
"rollback_owner",
|
|
"postcheck_evidence_ref",
|
|
"no_secret_value_attestation",
|
|
"no_raw_payload_attestation",
|
|
"no_false_green_attestation",
|
|
"not_authorization"
|
|
],
|
|
"required_owner_fields": [
|
|
"owner_role_or_team",
|
|
"routing_purpose",
|
|
"current_sender",
|
|
"target_chat_route",
|
|
"message_shape_contract",
|
|
"redaction_contract",
|
|
"formatter_convergence_decision",
|
|
"gateway_or_alertmanager_target",
|
|
"break_glass_fallback_decision",
|
|
"delivery_receipt_ref",
|
|
"dedup_or_fingerprint_plan",
|
|
"fallback_or_degraded_mode",
|
|
"migration_or_exception_reason",
|
|
"maintenance_window",
|
|
"rollback_owner",
|
|
"postcheck_evidence_ref",
|
|
"no_secret_value_attestation",
|
|
"no_raw_payload_attestation",
|
|
"no_false_green_attestation"
|
|
],
|
|
"preflight_checks": [
|
|
"source_inventory_current",
|
|
"owner_role_present",
|
|
"route_purpose_present",
|
|
"message_shape_contract_present",
|
|
"redaction_contract_present",
|
|
"formatter_convergence_decision_present",
|
|
"break_glass_fallback_explicit",
|
|
"delivery_receipt_metadata_present",
|
|
"dedup_or_fingerprint_present",
|
|
"maintenance_window_present_for_change",
|
|
"rollback_owner_present",
|
|
"postcheck_evidence_present",
|
|
"no_secret_value_attested",
|
|
"no_raw_payload_attested",
|
|
"no_false_green_attested",
|
|
"runtime_gate_stays_zero"
|
|
],
|
|
"outcome_lanes": [
|
|
"draft_waiting_owner_dispatch",
|
|
"request_owner_route_supplement",
|
|
"request_formatter_convergence_supplement",
|
|
"request_break_glass_fallback_supplement",
|
|
"request_redaction_or_receipt_supplement",
|
|
"quarantine_secret_or_raw_payload",
|
|
"reject_false_green_claim",
|
|
"ready_for_manual_dispatch",
|
|
"waiting_runtime_gate"
|
|
],
|
|
"forbidden_payloads": [
|
|
"bot_token_value",
|
|
"chat_secret_value",
|
|
"secret_hash",
|
|
"partial_token",
|
|
"masked_token",
|
|
"authorization_header",
|
|
"raw_message_payload",
|
|
"raw_workflow_log",
|
|
"raw_action_log",
|
|
"raw_screenshot_with_secret",
|
|
"internal_work_window_transcript",
|
|
"private_namespace",
|
|
"unredacted_internal_path",
|
|
"unredacted_private_ip"
|
|
],
|
|
"blocked_actions": [
|
|
"send_owner_request",
|
|
"confirm_recipient",
|
|
"emit_audit_event",
|
|
"telegram_send",
|
|
"bot_api_call",
|
|
"workflow_modification",
|
|
"script_modification",
|
|
"api_sender_refactor",
|
|
"change_chat_route",
|
|
"change_bot_token",
|
|
"read_secret_store",
|
|
"collect_secret_value",
|
|
"collect_secret_hash",
|
|
"collect_partial_token",
|
|
"collect_chat_id_secret",
|
|
"store_raw_message_payload",
|
|
"store_unredacted_log",
|
|
"workflow_dispatch",
|
|
"production_deploy",
|
|
"accept_cd_success_as_delivery_receipt",
|
|
"accept_route_200_as_notification_delivery",
|
|
"accept_ui_visible_as_notification_acceptance",
|
|
"skip_formatter_convergence",
|
|
"skip_redaction_contract",
|
|
"open_runtime_gate",
|
|
"add_action_button"
|
|
],
|
|
"request_sent": false,
|
|
"recipient_confirmed": false,
|
|
"audit_event_emitted": false,
|
|
"owner_response_received": false,
|
|
"owner_response_accepted": false,
|
|
"formatter_convergence_accepted": false,
|
|
"redaction_contract_accepted": false,
|
|
"delivery_receipt_accepted": false,
|
|
"break_glass_fallback_accepted": false,
|
|
"direct_bot_api_migration_authorized": false,
|
|
"telegram_send_authorized": false,
|
|
"bot_api_call_authorized": false,
|
|
"workflow_modification_authorized": false,
|
|
"script_modification_authorized": false,
|
|
"api_sender_refactor_authorized": false,
|
|
"secret_value_collection_allowed": false,
|
|
"raw_payload_storage_allowed": false,
|
|
"production_write_authorized": false,
|
|
"runtime_gate": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"request_draft_id": "telegram_notification_egress_owner_request:scripts_ops_dr_drill_sh",
|
|
"source_inventory_schema_version": "telegram_notification_egress_inventory_v1",
|
|
"source_path": "scripts/ops/dr-drill.sh",
|
|
"surface_kind": "ops_script_direct_bot_api",
|
|
"direct_call_count": 1,
|
|
"line_refs": [
|
|
63
|
|
],
|
|
"line_hash_refs": [
|
|
"b7cf532f3c5509fc"
|
|
],
|
|
"request_fields": [
|
|
"request_draft_id",
|
|
"source_inventory_schema_version",
|
|
"source_path",
|
|
"surface_kind",
|
|
"direct_call_count",
|
|
"line_refs",
|
|
"line_hash_refs",
|
|
"owner_role_or_team",
|
|
"routing_purpose",
|
|
"current_sender",
|
|
"target_chat_route",
|
|
"message_shape_contract",
|
|
"redaction_contract",
|
|
"formatter_convergence_decision",
|
|
"gateway_or_alertmanager_target",
|
|
"break_glass_fallback_decision",
|
|
"delivery_receipt_ref",
|
|
"dedup_or_fingerprint_plan",
|
|
"fallback_or_degraded_mode",
|
|
"migration_or_exception_reason",
|
|
"maintenance_window",
|
|
"rollback_owner",
|
|
"postcheck_evidence_ref",
|
|
"no_secret_value_attestation",
|
|
"no_raw_payload_attestation",
|
|
"no_false_green_attestation",
|
|
"not_authorization"
|
|
],
|
|
"required_owner_fields": [
|
|
"owner_role_or_team",
|
|
"routing_purpose",
|
|
"current_sender",
|
|
"target_chat_route",
|
|
"message_shape_contract",
|
|
"redaction_contract",
|
|
"formatter_convergence_decision",
|
|
"gateway_or_alertmanager_target",
|
|
"break_glass_fallback_decision",
|
|
"delivery_receipt_ref",
|
|
"dedup_or_fingerprint_plan",
|
|
"fallback_or_degraded_mode",
|
|
"migration_or_exception_reason",
|
|
"maintenance_window",
|
|
"rollback_owner",
|
|
"postcheck_evidence_ref",
|
|
"no_secret_value_attestation",
|
|
"no_raw_payload_attestation",
|
|
"no_false_green_attestation"
|
|
],
|
|
"preflight_checks": [
|
|
"source_inventory_current",
|
|
"owner_role_present",
|
|
"route_purpose_present",
|
|
"message_shape_contract_present",
|
|
"redaction_contract_present",
|
|
"formatter_convergence_decision_present",
|
|
"break_glass_fallback_explicit",
|
|
"delivery_receipt_metadata_present",
|
|
"dedup_or_fingerprint_present",
|
|
"maintenance_window_present_for_change",
|
|
"rollback_owner_present",
|
|
"postcheck_evidence_present",
|
|
"no_secret_value_attested",
|
|
"no_raw_payload_attested",
|
|
"no_false_green_attested",
|
|
"runtime_gate_stays_zero"
|
|
],
|
|
"outcome_lanes": [
|
|
"draft_waiting_owner_dispatch",
|
|
"request_owner_route_supplement",
|
|
"request_formatter_convergence_supplement",
|
|
"request_break_glass_fallback_supplement",
|
|
"request_redaction_or_receipt_supplement",
|
|
"quarantine_secret_or_raw_payload",
|
|
"reject_false_green_claim",
|
|
"ready_for_manual_dispatch",
|
|
"waiting_runtime_gate"
|
|
],
|
|
"forbidden_payloads": [
|
|
"bot_token_value",
|
|
"chat_secret_value",
|
|
"secret_hash",
|
|
"partial_token",
|
|
"masked_token",
|
|
"authorization_header",
|
|
"raw_message_payload",
|
|
"raw_workflow_log",
|
|
"raw_action_log",
|
|
"raw_screenshot_with_secret",
|
|
"internal_work_window_transcript",
|
|
"private_namespace",
|
|
"unredacted_internal_path",
|
|
"unredacted_private_ip"
|
|
],
|
|
"blocked_actions": [
|
|
"send_owner_request",
|
|
"confirm_recipient",
|
|
"emit_audit_event",
|
|
"telegram_send",
|
|
"bot_api_call",
|
|
"workflow_modification",
|
|
"script_modification",
|
|
"api_sender_refactor",
|
|
"change_chat_route",
|
|
"change_bot_token",
|
|
"read_secret_store",
|
|
"collect_secret_value",
|
|
"collect_secret_hash",
|
|
"collect_partial_token",
|
|
"collect_chat_id_secret",
|
|
"store_raw_message_payload",
|
|
"store_unredacted_log",
|
|
"workflow_dispatch",
|
|
"production_deploy",
|
|
"accept_cd_success_as_delivery_receipt",
|
|
"accept_route_200_as_notification_delivery",
|
|
"accept_ui_visible_as_notification_acceptance",
|
|
"skip_formatter_convergence",
|
|
"skip_redaction_contract",
|
|
"open_runtime_gate",
|
|
"add_action_button"
|
|
],
|
|
"request_sent": false,
|
|
"recipient_confirmed": false,
|
|
"audit_event_emitted": false,
|
|
"owner_response_received": false,
|
|
"owner_response_accepted": false,
|
|
"formatter_convergence_accepted": false,
|
|
"redaction_contract_accepted": false,
|
|
"delivery_receipt_accepted": false,
|
|
"break_glass_fallback_accepted": false,
|
|
"direct_bot_api_migration_authorized": false,
|
|
"telegram_send_authorized": false,
|
|
"bot_api_call_authorized": false,
|
|
"workflow_modification_authorized": false,
|
|
"script_modification_authorized": false,
|
|
"api_sender_refactor_authorized": false,
|
|
"secret_value_collection_allowed": false,
|
|
"raw_payload_storage_allowed": false,
|
|
"production_write_authorized": false,
|
|
"runtime_gate": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
},
|
|
{
|
|
"request_draft_id": "telegram_notification_egress_owner_request:scripts_ops_pg_backup_sh",
|
|
"source_inventory_schema_version": "telegram_notification_egress_inventory_v1",
|
|
"source_path": "scripts/ops/pg-backup.sh",
|
|
"surface_kind": "ops_script_direct_bot_api",
|
|
"direct_call_count": 1,
|
|
"line_refs": [
|
|
52
|
|
],
|
|
"line_hash_refs": [
|
|
"8268f3d6f14d66a3"
|
|
],
|
|
"request_fields": [
|
|
"request_draft_id",
|
|
"source_inventory_schema_version",
|
|
"source_path",
|
|
"surface_kind",
|
|
"direct_call_count",
|
|
"line_refs",
|
|
"line_hash_refs",
|
|
"owner_role_or_team",
|
|
"routing_purpose",
|
|
"current_sender",
|
|
"target_chat_route",
|
|
"message_shape_contract",
|
|
"redaction_contract",
|
|
"formatter_convergence_decision",
|
|
"gateway_or_alertmanager_target",
|
|
"break_glass_fallback_decision",
|
|
"delivery_receipt_ref",
|
|
"dedup_or_fingerprint_plan",
|
|
"fallback_or_degraded_mode",
|
|
"migration_or_exception_reason",
|
|
"maintenance_window",
|
|
"rollback_owner",
|
|
"postcheck_evidence_ref",
|
|
"no_secret_value_attestation",
|
|
"no_raw_payload_attestation",
|
|
"no_false_green_attestation",
|
|
"not_authorization"
|
|
],
|
|
"required_owner_fields": [
|
|
"owner_role_or_team",
|
|
"routing_purpose",
|
|
"current_sender",
|
|
"target_chat_route",
|
|
"message_shape_contract",
|
|
"redaction_contract",
|
|
"formatter_convergence_decision",
|
|
"gateway_or_alertmanager_target",
|
|
"break_glass_fallback_decision",
|
|
"delivery_receipt_ref",
|
|
"dedup_or_fingerprint_plan",
|
|
"fallback_or_degraded_mode",
|
|
"migration_or_exception_reason",
|
|
"maintenance_window",
|
|
"rollback_owner",
|
|
"postcheck_evidence_ref",
|
|
"no_secret_value_attestation",
|
|
"no_raw_payload_attestation",
|
|
"no_false_green_attestation"
|
|
],
|
|
"preflight_checks": [
|
|
"source_inventory_current",
|
|
"owner_role_present",
|
|
"route_purpose_present",
|
|
"message_shape_contract_present",
|
|
"redaction_contract_present",
|
|
"formatter_convergence_decision_present",
|
|
"break_glass_fallback_explicit",
|
|
"delivery_receipt_metadata_present",
|
|
"dedup_or_fingerprint_present",
|
|
"maintenance_window_present_for_change",
|
|
"rollback_owner_present",
|
|
"postcheck_evidence_present",
|
|
"no_secret_value_attested",
|
|
"no_raw_payload_attested",
|
|
"no_false_green_attested",
|
|
"runtime_gate_stays_zero"
|
|
],
|
|
"outcome_lanes": [
|
|
"draft_waiting_owner_dispatch",
|
|
"request_owner_route_supplement",
|
|
"request_formatter_convergence_supplement",
|
|
"request_break_glass_fallback_supplement",
|
|
"request_redaction_or_receipt_supplement",
|
|
"quarantine_secret_or_raw_payload",
|
|
"reject_false_green_claim",
|
|
"ready_for_manual_dispatch",
|
|
"waiting_runtime_gate"
|
|
],
|
|
"forbidden_payloads": [
|
|
"bot_token_value",
|
|
"chat_secret_value",
|
|
"secret_hash",
|
|
"partial_token",
|
|
"masked_token",
|
|
"authorization_header",
|
|
"raw_message_payload",
|
|
"raw_workflow_log",
|
|
"raw_action_log",
|
|
"raw_screenshot_with_secret",
|
|
"internal_work_window_transcript",
|
|
"private_namespace",
|
|
"unredacted_internal_path",
|
|
"unredacted_private_ip"
|
|
],
|
|
"blocked_actions": [
|
|
"send_owner_request",
|
|
"confirm_recipient",
|
|
"emit_audit_event",
|
|
"telegram_send",
|
|
"bot_api_call",
|
|
"workflow_modification",
|
|
"script_modification",
|
|
"api_sender_refactor",
|
|
"change_chat_route",
|
|
"change_bot_token",
|
|
"read_secret_store",
|
|
"collect_secret_value",
|
|
"collect_secret_hash",
|
|
"collect_partial_token",
|
|
"collect_chat_id_secret",
|
|
"store_raw_message_payload",
|
|
"store_unredacted_log",
|
|
"workflow_dispatch",
|
|
"production_deploy",
|
|
"accept_cd_success_as_delivery_receipt",
|
|
"accept_route_200_as_notification_delivery",
|
|
"accept_ui_visible_as_notification_acceptance",
|
|
"skip_formatter_convergence",
|
|
"skip_redaction_contract",
|
|
"open_runtime_gate",
|
|
"add_action_button"
|
|
],
|
|
"request_sent": false,
|
|
"recipient_confirmed": false,
|
|
"audit_event_emitted": false,
|
|
"owner_response_received": false,
|
|
"owner_response_accepted": false,
|
|
"formatter_convergence_accepted": false,
|
|
"redaction_contract_accepted": false,
|
|
"delivery_receipt_accepted": false,
|
|
"break_glass_fallback_accepted": false,
|
|
"direct_bot_api_migration_authorized": false,
|
|
"telegram_send_authorized": false,
|
|
"bot_api_call_authorized": false,
|
|
"workflow_modification_authorized": false,
|
|
"script_modification_authorized": false,
|
|
"api_sender_refactor_authorized": false,
|
|
"secret_value_collection_allowed": false,
|
|
"raw_payload_storage_allowed": false,
|
|
"production_write_authorized": false,
|
|
"runtime_gate": false,
|
|
"action_buttons_allowed": false,
|
|
"not_authorization": true
|
|
}
|
|
],
|
|
"operator_interpretation": [
|
|
"This is a draft packet for manual owner dispatch; request_sent_count remains 0.",
|
|
"Each file-level draft must decide whether the path converges to TelegramGateway, AWOOI Alertmanager, or a documented break-glass fallback.",
|
|
"No workflow, script, API, secret, Telegram, or production action is authorized by this snapshot."
|
|
]
|
|
}
|