Files
awoooi/docs/security/github-target-owner-execution-authorization.snapshot.json

199 lines
7.9 KiB
JSON

{
"schema_version": "github_target_owner_execution_authorization_v1",
"generated_at": "2026-06-28T00:00:00+08:00",
"status": "owner_authorized_controlled_execution",
"mode": "controlled_github_private_backup_execution_no_secret_plaintext",
"authorization_source": "chat_authorization_2026-06-28_full_hard_gate_open",
"scope": "github_private_backup_targets_only",
"summary": {
"authorization_received_count": 1,
"authorized_target_count": 9,
"github_missing_target_create_private_repo_authorized_count": 5,
"github_missing_target_refs_sync_authorized_count": 5,
"repo_creation_authorized": true,
"visibility_change_authorized": true,
"refs_sync_authorized": true,
"workflow_trigger_authorized": true,
"github_primary_switch_authorized": false,
"workflow_modification_authorized": false,
"delete_refs_authorized": false,
"force_push_authorized": false,
"public_repo_allowed": false,
"public_visibility_allowed": false,
"secret_value_collection_allowed": false,
"private_clone_url_collection_allowed": false,
"credential_value_collection_allowed": false,
"raw_payload_storage_allowed": false,
"write_performed": false,
"repo_creation_performed": false,
"visibility_change_performed": false,
"refs_sync_performed": false,
"workflow_trigger_performed": false
},
"authorized_actions": [
"create_private_repo_for_missing_targets_after_collision_preflight",
"set_or_verify_private_visibility",
"sync_refs_from_approved_source_candidate",
"trigger_post_sync_verification_workflow"
],
"controlled_preflight_requirements": [
"confirm_target_owner_scope_is_owenhytsai",
"verify_no_existing_private_repo_collision_before_create",
"select_best_available_source_candidate_without_copying_secret_values",
"perform_normal_push_or_sync_only_no_force",
"run_post_execution_private_visibility_and_refs_readback"
],
"still_forbidden": [
"secret_value",
"token_value",
"private_key",
"cookie_or_session",
"authorization_header",
"private_clone_url_credential",
"repo_archive",
"git_object_pack",
"db_dump",
"force_push",
"delete_refs",
"tag_rewrite",
"repo_delete",
"github_primary_switch",
"public_visibility",
"raw_runtime_secret_volume",
"unrelated_history_merge"
],
"authorized_targets": [
{
"github_repo": "owenhytsai/awoooi",
"template_id": "target-awoooi-refs-blocked",
"target_execution_authorized": true,
"create_private_repo_authorized": false,
"visibility_change_authorized": true,
"refs_sync_authorized": true,
"workflow_trigger_authorized": true,
"source_disposition": "existing_private_target_use_gitea_main_refs",
"controlled_preflight_required": true,
"post_execution_readback_required": true
},
{
"github_repo": "owenhytsai/clawbot-v5",
"template_id": "target-clawbot-v5-refs-blocked",
"target_execution_authorized": true,
"create_private_repo_authorized": false,
"visibility_change_authorized": true,
"refs_sync_authorized": true,
"workflow_trigger_authorized": true,
"source_disposition": "existing_private_target_use_gitea_main_refs",
"controlled_preflight_required": true,
"post_execution_readback_required": true
},
{
"github_repo": "owenhytsai/wooo-aiops",
"template_id": "target-wooo-aiops-refs-blocked",
"target_execution_authorized": true,
"create_private_repo_authorized": false,
"visibility_change_authorized": true,
"refs_sync_authorized": true,
"workflow_trigger_authorized": true,
"source_disposition": "existing_private_target_use_gitea_main_refs",
"controlled_preflight_required": true,
"post_execution_readback_required": true
},
{
"github_repo": "owenhytsai/wooo-infra-config",
"template_id": "target-wooo-infra-config-internal-remote",
"target_execution_authorized": true,
"create_private_repo_authorized": false,
"visibility_change_authorized": true,
"refs_sync_authorized": true,
"workflow_trigger_authorized": true,
"source_disposition": "existing_private_target_verify_internal_remote_refs",
"controlled_preflight_required": true,
"post_execution_readback_required": true
},
{
"github_repo": "owenhytsai/ewoooc",
"template_id": "target-ewoooc-private-or-new",
"target_execution_authorized": true,
"create_private_repo_authorized": true,
"visibility_change_authorized": true,
"refs_sync_authorized": true,
"workflow_trigger_authorized": true,
"source_disposition": "owner_authorized_use_best_available_source_candidate_pending_preflight",
"controlled_preflight_required": true,
"post_execution_readback_required": true
},
{
"github_repo": "owenhytsai/bitan-pharmacy",
"template_id": "target-bitan-pharmacy-private-or-new",
"target_execution_authorized": true,
"create_private_repo_authorized": true,
"visibility_change_authorized": true,
"refs_sync_authorized": true,
"workflow_trigger_authorized": true,
"source_disposition": "owner_authorized_use_best_available_source_candidate_pending_preflight",
"controlled_preflight_required": true,
"post_execution_readback_required": true
},
{
"github_repo": "owenhytsai/tsenyang-website",
"template_id": "target-tsenyang-website-private-or-new",
"target_execution_authorized": true,
"create_private_repo_authorized": true,
"visibility_change_authorized": true,
"refs_sync_authorized": true,
"workflow_trigger_authorized": true,
"source_disposition": "owner_authorized_use_best_available_source_candidate_pending_preflight",
"controlled_preflight_required": true,
"post_execution_readback_required": true
},
{
"github_repo": "owenhytsai/VibeWork",
"template_id": "target-vibework-private-or-new",
"target_execution_authorized": true,
"create_private_repo_authorized": true,
"visibility_change_authorized": true,
"refs_sync_authorized": true,
"workflow_trigger_authorized": true,
"source_disposition": "owner_authorized_use_best_available_source_candidate_pending_preflight",
"controlled_preflight_required": true,
"post_execution_readback_required": true
},
{
"github_repo": "owenhytsai/agent-bounty-protocol",
"template_id": "target-agent-bounty-protocol-private-or-new",
"target_execution_authorized": true,
"create_private_repo_authorized": true,
"visibility_change_authorized": true,
"refs_sync_authorized": true,
"workflow_trigger_authorized": true,
"source_disposition": "owner_authorized_use_best_available_source_candidate_pending_preflight",
"controlled_preflight_required": true,
"post_execution_readback_required": true
}
],
"operation_boundaries": {
"read_only_api_allowed": true,
"github_api_write_allowed": true,
"repo_creation_allowed": true,
"visibility_change_allowed": true,
"refs_sync_allowed": true,
"workflow_trigger_allowed": true,
"workflow_modification_allowed": false,
"github_primary_switch_allowed": false,
"delete_refs_allowed": false,
"force_push_allowed": false,
"secret_value_collection_allowed": false,
"private_clone_url_collection_allowed": false,
"credential_value_collection_allowed": false,
"raw_payload_storage_allowed": false
},
"evidence_refs": [
"docs/HARD_RULES.md#ai-agent-controlled-runtime-authorization",
"docs/superpowers/specs/2026-04-15-MASTER-ai-autonomous-flywheel-v2.md#15-2026-06-26",
"docs/security/github-target-owner-decision-response.snapshot.json",
"docs/security/github-target-missing-source-readiness.snapshot.json"
],
"next_gate": "perform_controlled_github_private_backup_execution_and_post_readback"
}