Files
awoooi/docs/security/github-target-controlled-execution-preflight.snapshot.json

239 lines
12 KiB
JSON

{
"schema_version": "github_target_controlled_execution_preflight_v1",
"generated_at": "2026-06-28T09:48:36+08:00",
"status": "blocked_github_account_suspended_and_write_channel_required",
"mode": "controlled_apply_preflight_no_secret_no_repo_write",
"authorization_source": "chat_authorization_2026-06-28_full_hard_gate_open",
"summary": {
"owner_execution_authorization_received_count": 1,
"authorized_missing_target_count": 5,
"github_connector_get_repo_checked_count": 6,
"github_connector_readback_status": "api_403_account_suspended",
"github_account_status": "suspended",
"github_account_suspended": true,
"github_api_forbidden_count": 6,
"github_connector_existing_private_admin_count": 0,
"github_connector_missing_target_404_count": 0,
"local_gh_auth_ready": false,
"github_connector_repo_creation_tool_available": false,
"github_connector_refs_write_tool_available": true,
"github_create_repo_channel_ready": false,
"github_refs_sync_channel_ready": false,
"source_preflight_ready_count": 5,
"create_private_repo_apply_ready_count": 0,
"refs_sync_apply_ready_count": 0,
"blocked_preflight_target_count": 5,
"write_performed": false,
"repo_creation_performed": false,
"visibility_change_performed": false,
"refs_sync_performed": false,
"workflow_trigger_performed": false,
"secret_values_collected": false,
"private_clone_urls_collected": false
},
"tool_channel_readback": {
"gh_cli_auth_status": "invalid_token_in_keyring_account_suspended",
"gh_cli_write_ready": false,
"github_connector_read_repo_ready": false,
"github_connector_create_repo_ready": false,
"github_connector_refs_write_ready": false,
"github_connector_verified_private_admin_repo": null,
"github_connector_account_status": "suspended",
"github_connector_forbidden_status": "api_403_account_suspended",
"github_connector_missing_target_status": "api_403_account_suspended",
"credential_collection_attempted": false,
"secret_value_collection_allowed": false
},
"required_preflight_checks": [
"confirm_target_owner_scope_is_owenhytsai",
"verify_github_repo_collision_with_authenticated_readback",
"select_canonical_source_without_copying_secret_values",
"verify_source_worktree_clean_or_pick_remote_source",
"build_source_of_truth_ref_diff",
"run_no_force_refs_sync_dry_run",
"confirm_private_visibility_post_create",
"run_post_sync_refs_readback"
],
"rollback_plan": {
"repo_creation": "new_private_repo_can_be_left_empty_or_archived_after_no_ref_sync; repo_delete_is_not_authorized_here",
"refs_sync": "normal_push_only; rollback_requires new forward commit or branch restore, never force push or ref delete",
"visibility": "private_only; public_visibility_is_forbidden",
"workflow_trigger": "post_sync_verification_only_after_refs_readback"
},
"post_apply_verifiers": [
"github_get_repo_visibility_private",
"github_default_branch_readback",
"github_refs_compare_against_canonical_source",
"awoooi_github_private_backup_evidence_gate_readback",
"delivery_closure_workbench_readback"
],
"operation_boundaries": {
"read_only_api_allowed": true,
"github_api_write_allowed_by_authorization": true,
"github_create_repo_channel_ready": false,
"github_refs_sync_channel_ready": false,
"controlled_apply_allowed": false,
"repo_creation_allowed": false,
"visibility_change_allowed": false,
"refs_sync_allowed": false,
"workflow_trigger_allowed": false,
"force_push_allowed": false,
"delete_refs_allowed": false,
"public_visibility_allowed": false,
"github_primary_switch_allowed": false,
"secret_value_collection_allowed": false,
"private_clone_url_collection_allowed": false,
"raw_payload_storage_allowed": false
},
"targets": [
{
"github_repo": "owenhytsai/ewoooc",
"github_readback_status": "api_403_account_suspended",
"target_selector": "github_owner=owenhytsai repo=ewoooc source_candidate=wooo/ewoooc",
"source_resolution_status": "ready_gitea_main_selected_stale_momo_worktrees_excluded",
"source_candidate_type": "gitea_repo_exists_with_momo_lineage_conflict",
"canonical_source_ref": "gitea:wooo/ewoooc:main",
"canonical_source_sha": "f3e412cd211f5e4601204b256aeb95eae073b441",
"source_probe_status": "remote_main_verified_https_and_ssh",
"source_warnings": [
"local_ewoooc_dev_has_uncommitted_changes_excluded",
"momo_worktrees_have_stale_or_dirty_refs_excluded"
],
"source_preflight_ready": true,
"canonical_source_ready": true,
"github_collision_preflight_ready": false,
"create_private_repo_apply_ready": false,
"refs_sync_apply_ready": false,
"controlled_apply_ready": false,
"blockers": [
"github_account_suspended_403",
"github_create_repo_channel_unavailable",
"github_refs_sync_channel_unavailable"
],
"next_action": "restore GitHub write channel, create private repo, then normal-push gitea wooo/ewoooc main"
},
{
"github_repo": "owenhytsai/bitan-pharmacy",
"github_readback_status": "api_403_account_suspended",
"target_selector": "github_owner=owenhytsai repo=bitan-pharmacy source_candidate=local_internal_remote_snapshot",
"source_resolution_status": "ready_internal_remote_main_selected_dirty_worktree_excluded",
"source_candidate_type": "internal_remote_snapshot_candidate",
"canonical_source_ref": "internal-origin:bitan-pharmacy:main",
"canonical_source_sha": "e122c8cbd9522999fd9844c2b63790fadcc89c20",
"source_probe_status": "remote_main_verified",
"source_warnings": [
"local_worktree_has_64_tracked_changes_excluded",
"local_worktree_has_untracked_changes_excluded"
],
"source_preflight_ready": true,
"canonical_source_ready": true,
"github_collision_preflight_ready": false,
"create_private_repo_apply_ready": false,
"refs_sync_apply_ready": false,
"controlled_apply_ready": false,
"blockers": [
"github_account_suspended_403",
"github_create_repo_channel_unavailable",
"github_refs_sync_channel_unavailable"
],
"next_action": "restore GitHub write channel, create private repo, then normal-push internal bitan-pharmacy main; freeze dirty worktree separately if those changes must be backed up"
},
{
"github_repo": "owenhytsai/tsenyang-website",
"github_readback_status": "api_403_account_suspended",
"target_selector": "github_owner=owenhytsai repo=tsenyang-website source_candidate=local_internal_remote_snapshot",
"source_resolution_status": "ready_internal_remote_main_selected_dirty_worktree_excluded",
"source_candidate_type": "internal_remote_snapshot_candidate",
"canonical_source_ref": "internal-origin:tsenyang-website:main",
"canonical_source_sha": "b369ed8cb6666e8ddaa2d31e1418a02794fdea9d",
"source_probe_status": "remote_main_verified",
"source_warnings": [
"local_worktree_has_29_tracked_changes_excluded",
"local_worktree_has_untracked_outputs_excluded"
],
"source_preflight_ready": true,
"canonical_source_ready": true,
"github_collision_preflight_ready": false,
"create_private_repo_apply_ready": false,
"refs_sync_apply_ready": false,
"controlled_apply_ready": false,
"blockers": [
"github_account_suspended_403",
"github_create_repo_channel_unavailable",
"github_refs_sync_channel_unavailable"
],
"next_action": "restore GitHub write channel, create private repo, then normal-push internal tsenyang-website main; freeze dirty worktree separately if those changes must be backed up"
},
{
"github_repo": "owenhytsai/VibeWork",
"github_readback_status": "api_403_account_suspended",
"target_selector": "github_owner=owenhytsai repo=VibeWork source_candidate=wooo/vibework",
"source_resolution_status": "ready_gitea_main_selected_local_divergence_excluded",
"source_candidate_type": "gitea_repo_exists_local_worktree_diverged",
"canonical_source_ref": "gitea:wooo/vibework:main",
"canonical_source_sha": "76a4ee15026af278a3660ad4b4547e9308b107be",
"source_probe_status": "remote_main_verified",
"source_warnings": [
"local_vibework_head_48275cc52be79107e887147d3fe10310a887afe9_excluded",
"local_tracked_dirty_count_0"
],
"source_preflight_ready": true,
"canonical_source_ready": true,
"github_collision_preflight_ready": false,
"create_private_repo_apply_ready": false,
"refs_sync_apply_ready": false,
"controlled_apply_ready": false,
"blockers": [
"github_account_suspended_403",
"github_create_repo_channel_unavailable",
"github_refs_sync_channel_unavailable"
],
"next_action": "restore GitHub write channel, create private repo, then normal-push gitea wooo/vibework main; handle local VibeWork divergence separately"
},
{
"github_repo": "owenhytsai/agent-bounty-protocol",
"github_readback_status": "api_403_account_suspended",
"target_selector": "github_owner=owenhytsai repo=agent-bounty-protocol source_candidate=wooo/agent-bounty-protocol",
"source_resolution_status": "ready_gitea_main_selected_no_runtime_apply",
"source_candidate_type": "gitea_repo_exists_high_risk_runtime_surface",
"canonical_source_ref": "gitea:wooo/agent-bounty-protocol:main",
"canonical_source_sha": "b7a733f44f4f645dd21a9b4a9075b89c4a324f64",
"source_probe_status": "remote_main_verified",
"source_warnings": [
"local_agent_bounty_head_0601df8bd9c0aaedb9ce3a226a6f1aeca645ca0a_excluded",
"runtime_surface_not_applied_by_backup_sync"
],
"source_preflight_ready": true,
"canonical_source_ready": true,
"github_collision_preflight_ready": false,
"create_private_repo_apply_ready": false,
"refs_sync_apply_ready": false,
"controlled_apply_ready": false,
"blockers": [
"github_account_suspended_403",
"github_create_repo_channel_unavailable",
"github_refs_sync_channel_unavailable"
],
"next_action": "restore GitHub write channel, create private repo, then normal-push gitea wooo/agent-bounty-protocol main without runtime apply"
}
],
"still_forbidden": [
"secret_value",
"token_value",
"private_key",
"cookie_or_session",
"authorization_header",
"private_clone_url_credential",
"repo_archive",
"git_object_pack",
"force_push",
"delete_refs",
"tag_rewrite",
"repo_delete",
"github_primary_switch",
"public_visibility",
"raw_runtime_secret_volume",
"unrelated_history_merge"
]
}