Files
awoooi/docs/security/github-target-controlled-execution-preflight.snapshot.json

203 lines
8.6 KiB
JSON

{
"schema_version": "github_target_controlled_execution_preflight_v1",
"generated_at": "2026-06-28T08:44:54+08:00",
"status": "blocked_github_write_channel_and_source_preflight_required",
"mode": "controlled_apply_preflight_no_secret_no_repo_write",
"authorization_source": "chat_authorization_2026-06-28_full_hard_gate_open",
"summary": {
"owner_execution_authorization_received_count": 1,
"authorized_missing_target_count": 5,
"github_connector_get_repo_checked_count": 6,
"github_connector_existing_private_admin_count": 1,
"github_connector_missing_target_404_count": 5,
"local_gh_auth_ready": false,
"github_connector_repo_creation_tool_available": false,
"github_connector_refs_write_tool_available": true,
"github_create_repo_channel_ready": false,
"github_refs_sync_channel_ready": false,
"source_preflight_ready_count": 0,
"create_private_repo_apply_ready_count": 0,
"refs_sync_apply_ready_count": 0,
"blocked_preflight_target_count": 5,
"write_performed": false,
"repo_creation_performed": false,
"visibility_change_performed": false,
"refs_sync_performed": false,
"workflow_trigger_performed": false,
"secret_values_collected": false,
"private_clone_urls_collected": false
},
"tool_channel_readback": {
"gh_cli_auth_status": "invalid_token_in_keyring",
"gh_cli_write_ready": false,
"github_connector_read_repo_ready": true,
"github_connector_create_repo_ready": false,
"github_connector_refs_write_ready": true,
"github_connector_verified_private_admin_repo": "owenhytsai/awoooi",
"github_connector_missing_target_status": "api_404_not_found",
"credential_collection_attempted": false,
"secret_value_collection_allowed": false
},
"required_preflight_checks": [
"confirm_target_owner_scope_is_owenhytsai",
"verify_github_repo_collision_with_authenticated_readback",
"select_canonical_source_without_copying_secret_values",
"verify_source_worktree_clean_or_pick_remote_source",
"build_source_of_truth_ref_diff",
"run_no_force_refs_sync_dry_run",
"confirm_private_visibility_post_create",
"run_post_sync_refs_readback"
],
"rollback_plan": {
"repo_creation": "new_private_repo_can_be_left_empty_or_archived_after_no_ref_sync; repo_delete_is_not_authorized_here",
"refs_sync": "normal_push_only; rollback_requires new forward commit or branch restore, never force push or ref delete",
"visibility": "private_only; public_visibility_is_forbidden",
"workflow_trigger": "post_sync_verification_only_after_refs_readback"
},
"post_apply_verifiers": [
"github_get_repo_visibility_private",
"github_default_branch_readback",
"github_refs_compare_against_canonical_source",
"awoooi_github_private_backup_evidence_gate_readback",
"delivery_closure_workbench_readback"
],
"operation_boundaries": {
"read_only_api_allowed": true,
"github_api_write_allowed_by_authorization": true,
"github_create_repo_channel_ready": false,
"github_refs_sync_channel_ready": false,
"controlled_apply_allowed": false,
"repo_creation_allowed": false,
"visibility_change_allowed": false,
"refs_sync_allowed": false,
"workflow_trigger_allowed": false,
"force_push_allowed": false,
"delete_refs_allowed": false,
"public_visibility_allowed": false,
"github_primary_switch_allowed": false,
"secret_value_collection_allowed": false,
"private_clone_url_collection_allowed": false,
"raw_payload_storage_allowed": false
},
"targets": [
{
"github_repo": "owenhytsai/ewoooc",
"github_readback_status": "api_404_not_found",
"target_selector": "github_owner=owenhytsai repo=ewoooc source_candidate=wooo/ewoooc",
"source_resolution_status": "blocked_canonical_source_ambiguous",
"source_candidate_type": "gitea_repo_exists_with_momo_lineage_conflict",
"source_preflight_ready": false,
"canonical_source_ready": false,
"github_collision_preflight_ready": true,
"create_private_repo_apply_ready": false,
"refs_sync_apply_ready": false,
"controlled_apply_ready": false,
"blockers": [
"canonical_source_ambiguous",
"momo_lineage_conflict_requires_source_truth_diff",
"github_create_repo_channel_unavailable",
"github_refs_sync_channel_unavailable"
],
"next_action": "produce ewoooc versus momo source-of-truth diff, then rerun create/sync dry-run"
},
{
"github_repo": "owenhytsai/bitan-pharmacy",
"github_readback_status": "api_404_not_found",
"target_selector": "github_owner=owenhytsai repo=bitan-pharmacy source_candidate=local_internal_remote_snapshot",
"source_resolution_status": "blocked_local_worktree_dirty",
"source_candidate_type": "internal_remote_snapshot_candidate",
"source_preflight_ready": false,
"canonical_source_ready": false,
"github_collision_preflight_ready": true,
"create_private_repo_apply_ready": false,
"refs_sync_apply_ready": false,
"controlled_apply_ready": false,
"blockers": [
"local_worktree_has_tracked_changes",
"canonical_remote_source_not_committed_as_gitea_repo",
"github_create_repo_channel_unavailable",
"github_refs_sync_channel_unavailable"
],
"next_action": "choose clean local or internal remote source, run source diff, then rerun no-force refs dry-run"
},
{
"github_repo": "owenhytsai/tsenyang-website",
"github_readback_status": "api_404_not_found",
"target_selector": "github_owner=owenhytsai repo=tsenyang-website source_candidate=local_internal_remote_snapshot",
"source_resolution_status": "blocked_local_worktree_dirty",
"source_candidate_type": "internal_remote_snapshot_candidate",
"source_preflight_ready": false,
"canonical_source_ready": false,
"github_collision_preflight_ready": true,
"create_private_repo_apply_ready": false,
"refs_sync_apply_ready": false,
"controlled_apply_ready": false,
"blockers": [
"local_worktree_has_tracked_and_untracked_changes",
"canonical_remote_source_not_committed_as_gitea_repo",
"github_create_repo_channel_unavailable",
"github_refs_sync_channel_unavailable"
],
"next_action": "select clean canonical source for tsenyang-website, then rerun no-force refs dry-run"
},
{
"github_repo": "owenhytsai/VibeWork",
"github_readback_status": "api_404_not_found",
"target_selector": "github_owner=owenhytsai repo=VibeWork source_candidate=wooo/vibework",
"source_resolution_status": "blocked_product_boundary_and_local_divergence",
"source_candidate_type": "gitea_repo_exists_local_worktree_diverged",
"source_preflight_ready": false,
"canonical_source_ready": false,
"github_collision_preflight_ready": true,
"create_private_repo_apply_ready": false,
"refs_sync_apply_ready": false,
"controlled_apply_ready": false,
"blockers": [
"product_boundary_requires_source_selector",
"local_worktree_ahead_behind_with_changes",
"github_create_repo_channel_unavailable",
"github_refs_sync_channel_unavailable"
],
"next_action": "select Gitea vibework or local VibeWork as canonical source, then run refs diff dry-run"
},
{
"github_repo": "owenhytsai/agent-bounty-protocol",
"github_readback_status": "api_404_not_found",
"target_selector": "github_owner=owenhytsai repo=agent-bounty-protocol source_candidate=wooo/agent-bounty-protocol",
"source_resolution_status": "blocked_high_risk_runtime_surface",
"source_candidate_type": "gitea_repo_exists_high_risk_runtime_surface",
"source_preflight_ready": false,
"canonical_source_ready": false,
"github_collision_preflight_ready": true,
"create_private_repo_apply_ready": false,
"refs_sync_apply_ready": false,
"controlled_apply_ready": false,
"blockers": [
"large_dirty_scan_not_completed",
"runtime_surface_source_selector_required",
"github_create_repo_channel_unavailable",
"github_refs_sync_channel_unavailable"
],
"next_action": "finish bounded dirty/source scan without secrets, then run canonical refs dry-run"
}
],
"still_forbidden": [
"secret_value",
"token_value",
"private_key",
"cookie_or_session",
"authorization_header",
"private_clone_url_credential",
"repo_archive",
"git_object_pack",
"force_push",
"delete_refs",
"tag_rewrite",
"repo_delete",
"github_primary_switch",
"public_visibility",
"raw_runtime_secret_volume",
"unrelated_history_merge"
]
}