ogt 6b82adca35 feat(sre): close provider and telegram automation receipts

2026-07-17 02:27:29 +08:00

..

AGENT-BOUNTY-IWOOOS-ONBOARDING-HANDOFF.md

…

agent-bounty-iwooos-onboarding-handoff.snapshot.json

…

AGENT-BOUNTY-OWNER-REQUEST-DRAFT.md

…

agent-bounty-owner-request-draft.snapshot.json

…

AI-PROVIDER-OWNER-RESPONSE-ACCEPTANCE.md

…

ai-provider-owner-response-acceptance.snapshot.json

…

AWOOOP-MIRROR-ONLY-CONSUMPTION-CHECKLIST.md

…

AWOOOP-SECURITY-SUPPLYCHAIN-INTEGRATION-HANDOFF.md

…

BACKUP-RESTORE-ESCROW-INVENTORY.md

…

backup-restore-escrow-inventory.snapshot.json

…

BACKUP-RESTORE-OWNER-REQUEST-DRAFT.md

…

backup-restore-owner-request-draft.snapshot.json

…

BACKUP-RESTORE-OWNER-RESPONSE-ACCEPTANCE.md

…

backup-restore-owner-response-acceptance.snapshot.json

…

BACKUP-RESTORE-POST-INCIDENT-READBACK-PLAN.md

…

backup-restore-post-incident-readback-plan.snapshot.json

…

CD-RUNNER-SECRET-INJECTION-CHANGE-EVIDENCE-ACCEPTANCE.md

…

cd-runner-secret-injection-change-evidence-acceptance.snapshot.json

…

CD-RUNNER-SECRET-INJECTION-POST-INCIDENT-READBACK-PLAN.md

…

cd-runner-secret-injection-post-incident-readback-plan.snapshot.json

…

CODEX-PATCH-ONLY-HANDOFF-PROMPT.md

…

CREDENTIAL-ESCROW-EVIDENCE-OWNER-REQUEST.md

…

credential-escrow-evidence-owner-request.snapshot.json

…

dev-hosts-111-168-scope-handoff.snapshot.json

docs(security): 補開發主機 scope handoff [skip ci]

2026-06-04 20:40:37 +08:00

DEV-HOSTS-111-168-SCOPE-HANDOFF.md

…

DEV-HOSTS-112-111-168-OBSERVE-ONLY-MAPPING.md

…

DOMAIN-TLS-CERTBOT-INVENTORY.md

…

domain-tls-certbot-inventory.snapshot.json

…

DOMAIN-TLS-CERTBOT-OWNER-CONFIRMATION-REQUEST.md

…

domain-tls-certbot-owner-confirmation-request.snapshot.json

…

DOMAIN-TLS-CERTBOT-OWNER-RESPONSE-ACCEPTANCE.md

…

domain-tls-certbot-owner-response-acceptance.snapshot.json

…

EXTERNAL-HOST-INTRUSION-PREVENTION-CONTROL.md

…

external-host-intrusion-prevention-control.snapshot.json

…

GIT-REMOTE-REFS-BITAN-TSENYANG-SNAPSHOT.md

…

git-remote-refs-bitan-tsenyang.snapshot.json

…

GIT-REMOTE-REFS-WOOO-INFRA-CONFIG-SNAPSHOT.md

…

git-remote-refs-wooo-infra-config.snapshot.json

…

GITEA-ADMIN-EXPORT-REDACTION-CHECKLIST.md

…

GITEA-AUTHENTICATED-INVENTORY-EXPORT-REQUEST.md

…

gitea-authenticated-inventory-export-request.snapshot.json

…

GITEA-AUTHENTICATED-INVENTORY-IMPORT-ACCEPTANCE.md

…

gitea-authenticated-inventory-import-acceptance.snapshot.json

…

gitea-github-awoooi-inventory.snapshot.json

…

GITEA-GITHUB-MIGRATION-INVENTORY.md

…

GITEA-GITHUB-MIGRATION-SNAPSHOT.md

…

GITEA-INVENTORY-COVERAGE-ATTESTATION.md

…

gitea-inventory-coverage-attestation.snapshot.json

…

GITEA-INVENTORY-OWNER-ATTESTATION-REQUEST-DRAFT.md

…

gitea-inventory-owner-attestation-request-draft.snapshot.json

…

GITEA-INVENTORY-OWNER-ATTESTATION-RESPONSE.md

…

gitea-inventory-owner-attestation-response.snapshot.json

…

GITEA-ORG-REPO-INVENTORY-BLOCKED-SNAPSHOT.md

…

gitea-org-repo-inventory-blocked.snapshot.json

…

GITEA-PUBLIC-REPO-SEARCH-SNAPSHOT.md

…

gitea-public-repo-search.snapshot.json

…

GITEA-READONLY-INVENTORY-APPROVAL-PACKAGE.md

…

gitea-readonly-inventory-approval.snapshot.json

…

GITEA-REPO-INVENTORY-SNAPSHOT.md

…

gitea-repo-inventory.snapshot.json

…

GITEA-SERVER-SIDE-INVENTORY-RUNBOOK.md

…

github-operator-unblock-governance-closure.snapshot.json

…

github-target-connector-readback.snapshot.json

…

github-target-controlled-execution-preflight.snapshot.json

…

github-target-decision.snapshot.json

…

github-target-missing-source-readiness.snapshot.json

…

GITHUB-TARGET-OWNER-DECISION-RESPONSE.md

docs(security): 補 S4.10 owner response canonical fields [skip ci]

2026-06-11 20:42:38 +08:00

github-target-owner-decision-response.snapshot.json

…

github-target-owner-execution-authorization.snapshot.json

…

GITHUB-TARGET-PROBE-SNAPSHOT.md

…

github-target-probe.snapshot.json

…

GITHUB-TARGET-REPO-APPROVAL-PACKAGE.md

…

github-target-repo-approval-package.snapshot.json

…

GITHUB-TARGET-VISIBILITY-DECISION-TABLE.md

…

HIGH-VALUE-CONFIG-CHANGE-GATE.md

…

high-value-config-change-gate.snapshot.json

…

HIGH-VALUE-CONFIG-CONTROL-COVERAGE.md

…

high-value-config-control-coverage.snapshot.json

…

HIGH-VALUE-CONFIG-OWNER-PACKET-INTAKE-PREFLIGHT.md

…

high-value-config-owner-packet-intake-preflight.snapshot.json

…

HIGH-VALUE-CONFIG-OWNER-PACKET.md

…

high-value-config-owner-packet.snapshot.json

…

HIGH-VALUE-CONFIG-OWNER-REQUEST-DRAFT.md

…

high-value-config-owner-request-draft.snapshot.json

…

HOST-SERVICE-CHANGE-EVIDENCE-ACCEPTANCE.md

feat(iwooos): 新增主機服務變更證據驗收 gate

2026-06-15 18:16:34 +08:00

host-service-change-evidence-acceptance.snapshot.json

feat(iwooos): 新增主機服務變更證據驗收 gate

2026-06-15 18:16:34 +08:00

HOST-SERVICE-CONFIG-INVENTORY.md

…

host-service-config-inventory.snapshot.json

…

HOST-SERVICE-OWNER-REQUEST-DRAFT.md

…

host-service-owner-request-draft.snapshot.json

…

HOST-SERVICE-OWNER-RESPONSE-ACCEPTANCE.md

…

host-service-owner-response-acceptance.snapshot.json

…

HOST-SERVICE-POST-INCIDENT-READBACK-PLAN.md

…

host-service-post-incident-readback-plan.snapshot.json

…

IWOOOS-CONFIG-CONTROL-GUARD.md

…

IWOOOS-CONFIG-CONTROL-INVENTORY.md

fix(security): align alert guards with controlled apply

2026-06-26 19:30:49 +08:00

IWOOOS-OWNER-GATE-GUARD.md

…

iwooos-p0-security-incident-convergence-gate.snapshot.json

…

IWOOOS-P0-SECURITY-INCIDENT-CONVERGENCE-GATE.md

feat(iwooos): add P0 security incident convergence gate

2026-06-25 19:25:55 +08:00

IWOOOS-POSTURE-PROJECTION.md

…

iwooos-posture-projection.snapshot.json

…

IWOOOS-PRODUCTION-LANDING-EVIDENCE.md

…

IWOOOS-REALTIME-SECURITY-SCOPE-AND-WAVE0.md

…

IWOOOS-SECURITY-OPERATING-SYSTEM.md

…

iwooos-security-operating-system.snapshot.json

…

IWOOOS-WAZUH-READONLY-API-RELEASE-HANDOFF.md

…

k8s-argocd-change-evidence-acceptance.snapshot.json

…

k8s-argocd-manifest-inventory.snapshot.json

…

k8s-argocd-owner-request-draft.snapshot.json

…

k8s-argocd-owner-response-acceptance.snapshot.json

…

k8s-argocd-post-incident-readback-plan.snapshot.json

…

K8S-ARGOCD-CHANGE-EVIDENCE-ACCEPTANCE.md

…

K8S-ARGOCD-MANIFEST-INVENTORY.md

…

K8S-ARGOCD-OWNER-REQUEST-DRAFT.md

…

K8S-ARGOCD-OWNER-RESPONSE-ACCEPTANCE.md

…

K8S-ARGOCD-POST-INCIDENT-READBACK-PLAN.md

…

kali-112-maintenance-window-draft.snapshot.json

docs(security): add Kali maintenance window draft [skip ci]

2026-06-04 19:56:23 +08:00

KALI-112-MAINTENANCE-WINDOW-DRAFT.md

…

KALI-INTEGRATION-STATUS.md

…

kali-integration-status.snapshot.json

…

KALI-SCAN-SCOPE-APPROVAL-PACKAGE.md

…

kali-scan-scope-approval.snapshot.json

…

KALI-SECURITY-MESH-BLUEPRINT.md

…

KALI-SECURITY-MESH-EXECUTION-READINESS.md

…

LOCAL-GIT-REMOTE-INVENTORY-SNAPSHOT.md

…

local-git-remote-inventory.snapshot.json

…

LOCAL-REPO-CANONICAL-EWOOOC-MOMO-SNAPSHOT.md

…

local-repo-canonical-ewoooc-momo.snapshot.json

…

MAINSTREAM-AISOC-SECURITY-CONTROL-ROADMAP.md

…

MONITORING-ALERTING-OBSERVABILITY-INVENTORY.md

…

monitoring-alerting-observability-inventory.snapshot.json

…

MONITORING-OWNER-REQUEST-DRAFT.md

feat(iwooos): 強化告警鏈路 no-false-green gate

2026-06-15 17:45:28 +08:00

monitoring-owner-request-draft.snapshot.json

…

MONITORING-OWNER-RESPONSE-ACCEPTANCE.md

…

monitoring-owner-response-acceptance.snapshot.json

feat(iwooos): 強化告警鏈路 no-false-green gate

2026-06-15 17:45:28 +08:00

MONITORING-POST-INCIDENT-READBACK-PLAN.md

…

monitoring-post-incident-readback-plan.snapshot.json

feat(iwooos): 新增監控告警事故回讀 gate

2026-06-16 11:07:34 +08:00

NGINX-CONFIG-DRIFT-DETECTOR.md

feat(security): 新增 public gateway preflight 只讀清冊

2026-06-12 01:25:04 +08:00

nginx-config-drift-repo.snapshot.json

feat(security): 建立 Nginx 只讀漂移偵測器 [skip ci]

2026-06-11 11:40:37 +08:00

PACKAGE-SUPPLY-CHAIN-BASELINE.md

…

package-supply-chain-baseline.snapshot.json

…

PACKAGE-SUPPLY-CHAIN-OWNER-POLICY-GATE.md

…

package-supply-chain-owner-policy-gate.snapshot.json

…

PORT-FIREWALL-CHANGE-EVIDENCE-ACCEPTANCE.md

…

port-firewall-change-evidence-acceptance.snapshot.json

…

public-frontend-sensitive-surface-guard.snapshot.json

feat(iwooos): 接入 Wazuh 入侵回讀 gate

2026-06-18 09:20:25 +08:00

PUBLIC-GATEWAY-LIVE-CONF-EXPORT-REQUEST.md

…

public-gateway-live-conf-export-request.snapshot.json

…

PUBLIC-GATEWAY-OWNER-RESPONSE-ACCEPTANCE.md

…

public-gateway-owner-response-acceptance.snapshot.json

…

PUBLIC-GATEWAY-POST-INCIDENT-READBACK-PLAN.md

…

public-gateway-post-incident-readback-plan.snapshot.json

…

PUBLIC-GATEWAY-PREFLIGHT-INVENTORY.md

…

public-gateway-preflight-inventory.snapshot.json

…

PUBLIC-GATEWAY-REDACTED-EXPORT-INTAKE-PREFLIGHT.md

…

public-gateway-redacted-export-intake-preflight.snapshot.json

…

PUBLIC-GATEWAY-RENDERED-DIFF-ACCEPTANCE.md

…

public-gateway-rendered-diff-acceptance.snapshot.json

…

PUBLIC-GATEWAY-RENDERED-DIFF-GATE-DRAFT.md

…

public-gateway-rendered-diff-gate-draft.snapshot.json

…

PUBLIC-RUNTIME-CONFIG-CHANGE-EVIDENCE-ACCEPTANCE.md

…

public-runtime-config-change-evidence-acceptance.snapshot.json

…

RBAC_SCHEMA.md

…

s4-9-owner-response-gap-audit.snapshot.json

…

S4-9-CANONICAL-OWNER-RESPONSE-ENVELOPE.md

…

S4-9-OWNER-RESPONSE-GATE-CURRENT-GAP-AUDIT.md

…

S4-9-OWNER-RESPONSE-INTAKE-FORM.md

…

S4-9-REVIEWER-VALIDATION-CHECKLIST.md

…

S4-9-SECURITY-ACCEPTANCE-RECORD-TEMPLATE.md

docs(iwooos): 更新 S4.9 gate 最新基準 [skip ci]

2026-06-15 07:52:56 +08:00

SECRETS_REFERENCE.md

…

SECURITY-APPROVAL-DECISION-RECORD.md

…

security-approval-decision-record.snapshot.json

…

SECURITY-APPROVAL-GATE.md

…

security-approval-gate.snapshot.json

…

SECURITY-APPROVAL-QUEUE.md

…

security-approval-queue.snapshot.json

…

SECURITY-APPROVAL-REVIEW-PACKET.md

…

security-approval-review-packet.snapshot.json

…

SECURITY-APPROVAL-STATE-TRANSITION.md

…

security-approval-state-transition.snapshot.json

…

SECURITY-ASSET-CONTROL-LEDGER.md

…

security-asset-control-ledger.snapshot.json

…

SECURITY-FINDING-CONTRACT.md

…

security-finding-kali-sample.snapshot.json

…

SECURITY-FOLLOWUP-RUNTIME-GATE.md

…

security-followup-runtime-gate.snapshot.json

…

SECURITY-LOW-FRICTION-ROLLOUT-POLICY.md

…

SECURITY-MIRROR-ACCEPTANCE.md

…

security-mirror-acceptance.snapshot.json

…

SECURITY-MIRROR-DRY-RUN.md

…

security-mirror-dry-run.snapshot.json

test(iwooos): 新增供應鏈 owner policy gate [skip ci]

2026-06-15 07:01:58 +08:00

SECURITY-MIRROR-EVENT-CONTRACT.md

feat(web): land iwooos security posture surfaces

2026-05-25 20:35:52 +08:00

security-mirror-event-sample.snapshot.json

…

SECURITY-MIRROR-INTAKE-PLAN.md

…

security-mirror-intake-plan.snapshot.json

…

SECURITY-MIRROR-QUARANTINE.md

…

security-mirror-quarantine.snapshot.json

…

SECURITY-MIRROR-READINESS.md

…

security-mirror-readiness.snapshot.json

…

SECURITY-MIRROR-ROUTE.md

…

security-mirror-route.snapshot.json

…

SECURITY-MIRROR-STATUS-ROLLUP.md

feat(security): 擴充 S4.10 target owner response

2026-06-11 20:30:41 +08:00

security-mirror-status-rollup.snapshot.json

…

security-rollout-policy.snapshot.json

…

SECURITY-SUPPLY-CHAIN-CONTRACT-MANIFEST.md

…

security-supply-chain-contract-manifest.snapshot.json

feat(security): 擴充 S4.10 target owner response

2026-06-11 20:30:41 +08:00

SECURITY-SUPPLY-CHAIN-PROGRESS.md

…

SOC-SIEM-KALI-WAZUH-INTEGRATION-CONTROL.md

…

soc-siem-kali-wazuh-integration-control.snapshot.json

…

SOURCE-CONTROL-APPROVAL-BOARD.md

…

source-control-approval-board.snapshot.json

…

SOURCE-CONTROL-CANONICAL-DECISION-TABLE.md

…

source-control-clawbot-v5.snapshot.json

…

SOURCE-CONTROL-CLAWBOT-V5-SNAPSHOT.md

…

SOURCE-CONTROL-MIGRATION-MATRIX.md

…

SOURCE-CONTROL-OWNER-RESPONSE-VALIDATION-ROLLUP.md

…

source-control-owner-response-validation-rollup.snapshot.json

…

SOURCE-CONTROL-PRIMARY-READINESS-GATE.md

…

source-control-primary-readiness-gate.snapshot.json

…

SOURCE-CONTROL-PRIMARY-ROLLBACK-ADR.md

…

source-control-primary-rollback-adr.snapshot.json

…

SOURCE-CONTROL-RECONCILE-PLAN.md

…

source-control-reconcile-plan.snapshot.json

…

SOURCE-CONTROL-REF-DETAIL-DIFF.md

…

source-control-ref-detail-diff.snapshot.json

…

SOURCE-CONTROL-REF-TRUTH-CLASSIFICATION.md

…

source-control-ref-truth-classification.snapshot.json

…

SOURCE-CONTROL-REF-TRUTH-OWNER-RESPONSE.md

…

source-control-ref-truth-owner-response.snapshot.json

…

SOURCE-CONTROL-WOOO-AIOPS-SNAPSHOT.md

…

source-control-wooo-aiops.snapshot.json

…

SOURCE-CONTROL-WORKFLOW-SECRET-NAME-EXPORT-REQUEST.md

…

source-control-workflow-secret-name-export-request.snapshot.json

…

SOURCE-CONTROL-WORKFLOW-SECRET-NAME-INVENTORY.md

…

source-control-workflow-secret-name-inventory.snapshot.json

…

SOURCE-CONTROL-WORKFLOW-SECRET-NAME-LOCAL-EVIDENCE.md

…

source-control-workflow-secret-name-local-evidence.snapshot.json

…

SOURCE-CONTROL-WORKFLOW-SECRET-NAME-OWNER-RESPONSE.md

…

source-control-workflow-secret-name-owner-response.snapshot.json

…

SSH-NETWORK-ACCESS-INVENTORY.md

…

ssh-network-access-inventory.snapshot.json

…

SSH-NETWORK-OWNER-REQUEST-DRAFT.md

…

ssh-network-owner-request-draft.snapshot.json

…

SSH-NETWORK-OWNER-RESPONSE-ACCEPTANCE.md

…

ssh-network-owner-response-acceptance.snapshot.json

…

SSH-NETWORK-POST-INCIDENT-READBACK-PLAN.md

…

ssh-network-post-incident-readback-plan.snapshot.json

…

TELEGRAM-ALERT-READABILITY-GUARD.md

…

telegram-alert-readability-guard.snapshot.json

…

TELEGRAM-CANONICAL-ROUTING-INVENTORY.md

…

telegram-canonical-routing-registry.snapshot.json

feat(sre): close provider and telegram automation receipts

2026-07-17 02:27:29 +08:00

TELEGRAM-NOTIFICATION-EGRESS-INVENTORY.md

…

telegram-notification-egress-inventory.snapshot.json

…

TELEGRAM-NOTIFICATION-EGRESS-MIGRATION-PLAN-DRAFT.md

…

telegram-notification-egress-migration-plan-draft.snapshot.json

…

TELEGRAM-NOTIFICATION-EGRESS-NO-NEW-BYPASS-GUARD.md

…

telegram-notification-egress-no-new-bypass-guard.snapshot.json

…

TELEGRAM-NOTIFICATION-EGRESS-OWNER-REQUEST-DRAFT.md

…

telegram-notification-egress-owner-request-draft.snapshot.json

…

TELEGRAM-NOTIFICATION-EGRESS-OWNER-RESPONSE-ACCEPTANCE.md

…

telegram-notification-egress-owner-response-acceptance.snapshot.json

…

VIBEWORK-IWOOOS-ONBOARDING-HANDOFF.md

…

vibework-iwooos-onboarding-handoff.snapshot.json

…

WAZUH-AGENT-DISAPPEARANCE-INCIDENT-READBACK-2026-06-24.md

…

WAZUH-AGENT-VISIBILITY-OWNER-EVIDENCE-PREFLIGHT.md

…

wazuh-agent-visibility-owner-evidence-preflight.snapshot.json

…

wazuh-agent-visibility-runtime-gate.snapshot.json

feat(iwooos): gate Wazuh dashboard API readiness

2026-06-25 18:04:58 +08:00

wazuh-allowlisted-check-mode-dry-run.snapshot.json

…

WAZUH-IWOOOS-INTRUSION-READBACK-PLAN.md

…

wazuh-iwooos-intrusion-readback-plan.snapshot.json

…

WAZUH-MANAGED-HOST-COVERAGE-GATE.md

…

wazuh-managed-host-coverage-gate.snapshot.json

…

wazuh-manager-registry-reviewer-validation.snapshot.json

…

wazuh-readonly-live-metadata-env-gate.snapshot.json

feat(iwooos): commit wazuh live metadata readiness

2026-06-28 15:53:25 +08:00

wazuh-readonly-release-gate.snapshot.json

…

wazuh-readonly-release-lane-preflight.snapshot.json

…

wazuh-readonly-release-owner-request.snapshot.json

…

wazuh-readonly-release-owner-response-acceptance.snapshot.json

…

wazuh-runtime-controlled-apply-preflight.snapshot.json

…

wazuh-runtime-gate-owner-review-readback.snapshot.json

…