312 lines
9.6 KiB
JSON
312 lines
9.6 KiB
JSON
{
|
||
"schema_version": "dev_host_scope_handoff_v1",
|
||
"status": "draft_waiting_owner_review",
|
||
"date": "2026-06-04",
|
||
"mode": "scope_handoff_only",
|
||
"source_evidence_refs": [
|
||
"docs/security/DEV-HOSTS-112-111-168-OBSERVE-ONLY-MAPPING.md",
|
||
"docs/security/KALI-SCAN-SCOPE-APPROVAL-PACKAGE.md",
|
||
"docs/security/IWOOOS-POSTURE-PROJECTION.md",
|
||
"docs/workplans/2026-06-04-iwooos-security-governance-p0.md",
|
||
"/Users/ogt/.claude/projects/-Users-ogt-awoooi/memory/feedback_ollama_111_only.md",
|
||
"/Users/ogt/.claude/projects/-Users-ogt-awoooi/memory/feedback_secret_debug_output_ban.md",
|
||
"/Users/ogt/.claude/projects/-Users-ogt-awoooi/memory/feedback_ssh_command_security.md"
|
||
],
|
||
"summary": {
|
||
"hosts": [
|
||
"192.168.0.111",
|
||
"192.168.0.168"
|
||
],
|
||
"asset_keys": [
|
||
"host:dev-ai-111",
|
||
"host:dev-workstation-168"
|
||
],
|
||
"scope_handoff_package_ready": true,
|
||
"scope_handoff_completion_percent": 100,
|
||
"host_execution_completion_percent": 0,
|
||
"owner_response_received": false,
|
||
"owner_response_accepted": false,
|
||
"host_change_authorized": false,
|
||
"fallback_route_change_authorized": false,
|
||
"credentialed_scan_authorized": false,
|
||
"active_scan_authorized": false,
|
||
"secret_value_collection_authorized": false,
|
||
"runtime_execution_authorized": false,
|
||
"action_buttons_allowed": false
|
||
},
|
||
"hosts": [
|
||
{
|
||
"host": "192.168.0.111",
|
||
"asset_key": "host:dev-ai-111",
|
||
"role": "Local AI / Ollama fallback / 開發輔助主機",
|
||
"mode": "observe_only",
|
||
"scope_lanes": [
|
||
{
|
||
"lane_id": "ollama-fallback-truth",
|
||
"description": "對齊 ADR-110 三層路由與 local fallback 事實來源，確認 evidence ref 與 owner。",
|
||
"validation_metrics": [
|
||
"Ollama route truth",
|
||
"fallback availability",
|
||
"AI route smoke"
|
||
],
|
||
"current_authorized": false
|
||
},
|
||
{
|
||
"lane_id": "model-inventory-posture",
|
||
"description": "只收模型清單摘要、模型數量、版本 / tag metadata 與 list hash，不收 prompt、token 或私有資料。",
|
||
"validation_metrics": [
|
||
"model list hash",
|
||
"model tag summary",
|
||
"inventory owner ref"
|
||
],
|
||
"current_authorized": false
|
||
},
|
||
{
|
||
"lane_id": "service-ssh-policy-posture",
|
||
"description": "只收服務狀態摘要與 SSH policy posture，不登入、不改 service。",
|
||
"validation_metrics": [
|
||
"service status summary",
|
||
"SSH policy posture",
|
||
"rollback owner ref"
|
||
],
|
||
"current_authorized": false
|
||
}
|
||
],
|
||
"maintenance_window": {
|
||
"window_status": "waiting_owner_selection",
|
||
"allowed_metadata": [
|
||
"future low-traffic window",
|
||
"stop condition",
|
||
"rollback owner",
|
||
"route validation metrics"
|
||
],
|
||
"forbidden_actions": [
|
||
"stop_model",
|
||
"restart_ollama",
|
||
"pull_model",
|
||
"delete_model",
|
||
"change_ollama_route",
|
||
"change_firewall"
|
||
]
|
||
},
|
||
"rollback_plan_draft": [
|
||
{
|
||
"rollback_item": "fallback route rollback",
|
||
"required_evidence": [
|
||
"route before / after refs",
|
||
"fallback owner",
|
||
"AI route smoke",
|
||
"stop condition"
|
||
],
|
||
"owner_status": "waiting_owner_assignment"
|
||
},
|
||
{
|
||
"rollback_item": "model service rollback",
|
||
"required_evidence": [
|
||
"service state ref",
|
||
"model inventory hash before / after",
|
||
"operator notice owner"
|
||
],
|
||
"owner_status": "waiting_owner_assignment"
|
||
}
|
||
]
|
||
},
|
||
{
|
||
"host": "192.168.0.168",
|
||
"asset_key": "host:dev-workstation-168",
|
||
"role": "開發工作站 / local development origin",
|
||
"mode": "observe_only",
|
||
"scope_lanes": [
|
||
{
|
||
"lane_id": "local-development-origin",
|
||
"description": "確認 168 作為本機開發來源、preview origin、dev-only CORS 候選，不改 runtime。",
|
||
"validation_metrics": [
|
||
"CORS origin review",
|
||
"local origin owner ref",
|
||
"production boundary note"
|
||
],
|
||
"current_authorized": false
|
||
},
|
||
{
|
||
"lane_id": "repo-hygiene",
|
||
"description": "只收 repo 層級 hygiene 摘要、secret scan summary、dirty worktree policy，不讀未授權目錄。",
|
||
"validation_metrics": [
|
||
"repo secret scan summary",
|
||
"repo owner ref",
|
||
"dirty worktree policy"
|
||
],
|
||
"current_authorized": false
|
||
},
|
||
{
|
||
"lane_id": "local-service-exposure",
|
||
"description": "只收服務清單摘要、port 類型、owner 與 disable note，不做 port scan 或 firewall 變更。",
|
||
"validation_metrics": [
|
||
"local service list summary",
|
||
"service owner ref",
|
||
"rollback / disable note"
|
||
],
|
||
"current_authorized": false
|
||
}
|
||
],
|
||
"maintenance_window": {
|
||
"window_status": "waiting_owner_selection",
|
||
"allowed_metadata": [
|
||
"future repo hygiene review window",
|
||
"future local service review window",
|
||
"excluded directories",
|
||
"disable note owner"
|
||
],
|
||
"forbidden_actions": [
|
||
"credentialed_scan",
|
||
"read_private_directory",
|
||
"change_cors",
|
||
"stop_service",
|
||
"change_local_firewall"
|
||
]
|
||
},
|
||
"rollback_plan_draft": [
|
||
{
|
||
"rollback_item": "dev CORS rollback",
|
||
"required_evidence": [
|
||
"current allowed origins ref",
|
||
"candidate change note",
|
||
"disable owner",
|
||
"browser smoke plan"
|
||
],
|
||
"owner_status": "waiting_owner_assignment"
|
||
},
|
||
{
|
||
"rollback_item": "local service disable / restore",
|
||
"required_evidence": [
|
||
"service list summary",
|
||
"owner",
|
||
"restore note",
|
||
"post-check ref"
|
||
],
|
||
"owner_status": "waiting_owner_assignment"
|
||
}
|
||
]
|
||
}
|
||
],
|
||
"owner_response_handoff": {
|
||
"status": "ready_not_dispatched",
|
||
"request_dispatch_authorized": false,
|
||
"required_response_fields": [
|
||
"owner_role_or_team",
|
||
"host_scope_boundary",
|
||
"decision",
|
||
"decision_reason",
|
||
"affected_scope",
|
||
"maintenance_window_expectation",
|
||
"credential_handling_confirmation",
|
||
"rollback_owner",
|
||
"validation_metrics_owner",
|
||
"redacted_evidence_refs",
|
||
"followup_owner"
|
||
],
|
||
"allowed_decisions": [
|
||
"confirm_observe_only",
|
||
"defer",
|
||
"reject",
|
||
"request_more_evidence"
|
||
],
|
||
"forbidden_inputs": [
|
||
"model API key value",
|
||
"SSH password",
|
||
"private key",
|
||
"token value",
|
||
"cookie",
|
||
"session",
|
||
"authorization header",
|
||
"personal credential",
|
||
"secret hash",
|
||
"masked token",
|
||
"partial token",
|
||
"command to execute",
|
||
"service restart request",
|
||
"firewall change request",
|
||
"model stop request",
|
||
"CORS apply request",
|
||
"active scan request",
|
||
"credentialed scan request",
|
||
"private directory content"
|
||
],
|
||
"response_received": false,
|
||
"response_accepted": false
|
||
},
|
||
"credential_handling": {
|
||
"policy": "metadata_only_no_secret_value",
|
||
"allowed_evidence": [
|
||
"present / absent",
|
||
"owner role",
|
||
"scope",
|
||
"document ref",
|
||
"ticket ref",
|
||
"redacted metadata pointer"
|
||
],
|
||
"forbidden_evidence": [
|
||
"secret value",
|
||
"private key",
|
||
"token",
|
||
"cookie",
|
||
"session",
|
||
"authorization header",
|
||
"model API key",
|
||
"SSH password",
|
||
"personal credential",
|
||
"reversible secret hash",
|
||
"partial token",
|
||
"raw screenshot containing credential"
|
||
],
|
||
"quarantine_required_on_plaintext_credential": true,
|
||
"secret_value_collection_authorized": false
|
||
},
|
||
"validation_metrics": [
|
||
{
|
||
"host": "192.168.0.111",
|
||
"metrics": [
|
||
"Ollama route truth",
|
||
"fallback availability",
|
||
"model list hash",
|
||
"service status",
|
||
"AI route smoke"
|
||
]
|
||
},
|
||
{
|
||
"host": "192.168.0.168",
|
||
"metrics": [
|
||
"repo secret scan summary",
|
||
"local service list summary",
|
||
"CORS origin review",
|
||
"rollback / disable note"
|
||
]
|
||
}
|
||
],
|
||
"acceptance_rules": [
|
||
"本 handoff 完成不代表 owner response 已收到、已接受或已批准。",
|
||
"192.168.0.111 的 fallback route truth 只能作為 observe-only evidence，不得改 OLLAMA_URL、OLLAMA_SECONDARY_URL、OLLAMA_FALLBACK_URL 或 proxy route。",
|
||
"192.168.0.168 的 repo / CORS / service exposure 只能作為 scope review，不得讀取未授權目錄或個人資料。",
|
||
"所有 credential / secret 類資料只能記錄脫敏 metadata；raw value 一律拒收或隔離。",
|
||
"維護窗口、rollback owner、validation owner 到齊前，不得做 host change、service restart、active scan、credentialed scan 或 runtime gate。",
|
||
"未來 post-check 失敗只能建立人工 follow-up，不得自動修復。"
|
||
],
|
||
"forbidden_actions": [
|
||
"ssh_to_host",
|
||
"read_private_directory",
|
||
"credentialed_scan",
|
||
"active_scan",
|
||
"port_scan",
|
||
"stop_model",
|
||
"pull_model",
|
||
"delete_model",
|
||
"restart_ollama",
|
||
"change_ollama_route",
|
||
"change_cors",
|
||
"change_firewall",
|
||
"change_service",
|
||
"store_credential_value",
|
||
"enable_runtime_blocking_control",
|
||
"add_awooop_action_button"
|
||
]
|
||
}
|