179 lines
5.1 KiB
JSON
179 lines
5.1 KiB
JSON
{
|
|
"schema_version": "s4_9_owner_response_dispatch_package_v1",
|
|
"generated_at": "2026-06-13T02:20:00+08:00",
|
|
"status": "dispatch_package_ready_not_sent",
|
|
"mode": "owner_response_dispatch_package_only",
|
|
"source_documents": [
|
|
"docs/security/S4-9-CANONICAL-OWNER-RESPONSE-ENVELOPE.md",
|
|
"docs/security/S4-9-OWNER-RESPONSE-INTAKE-FORM.md",
|
|
"docs/security/S4-9-REVIEWER-VALIDATION-CHECKLIST.md",
|
|
"docs/security/S4-9-SECURITY-ACCEPTANCE-RECORD-TEMPLATE.md"
|
|
],
|
|
"canonical_owner_fields": [
|
|
"owner_role_or_team",
|
|
"decision",
|
|
"decision_reason",
|
|
"affected_scope",
|
|
"redacted_evidence_refs",
|
|
"followup_owner"
|
|
],
|
|
"allowed_decisions": [
|
|
"confirm",
|
|
"defer",
|
|
"reject",
|
|
"request_more_evidence"
|
|
],
|
|
"s4_9_response_templates": [
|
|
{
|
|
"template_id": "response-public-only-vs-local-gitea-gap",
|
|
"required_fields": 6,
|
|
"status": "waiting_owner_response"
|
|
},
|
|
{
|
|
"template_id": "response-org-user-endpoint-identity",
|
|
"required_fields": 6,
|
|
"status": "waiting_owner_response"
|
|
},
|
|
{
|
|
"template_id": "response-internal-110-adjacent-scope",
|
|
"required_fields": 6,
|
|
"status": "waiting_owner_response"
|
|
},
|
|
{
|
|
"template_id": "response-repo-owner-canonical-scope",
|
|
"required_fields": 6,
|
|
"status": "waiting_owner_response"
|
|
},
|
|
{
|
|
"template_id": "response-legacy-or-inaccessible-disposition",
|
|
"required_fields": 6,
|
|
"status": "waiting_owner_response"
|
|
}
|
|
],
|
|
"outcome_lanes": [
|
|
"keep_waiting_owner_response",
|
|
"request_more_evidence",
|
|
"quarantine_sensitive_payload",
|
|
"reject_execution_request",
|
|
"ready_for_reviewer_validation"
|
|
],
|
|
"high_value_config_owner_lanes": [
|
|
{
|
|
"priority": "P0-1",
|
|
"category_id": "nginx_public_gateway",
|
|
"owner_lane": "public_gateway_owner_response_required",
|
|
"status": "owner_response_required"
|
|
},
|
|
{
|
|
"priority": "P0-2",
|
|
"category_id": "k8s_production_gitops",
|
|
"owner_lane": "gitops_owner_response_required",
|
|
"status": "owner_response_required"
|
|
},
|
|
{
|
|
"priority": "P0-3",
|
|
"category_id": "gitea_workflow_runner_source_control",
|
|
"owner_lane": "workflow_source_control_owner_response_required",
|
|
"status": "owner_response_required"
|
|
},
|
|
{
|
|
"priority": "P0-4",
|
|
"category_id": "dns_tls_certbot",
|
|
"owner_lane": "domain_tls_owner_response_required",
|
|
"status": "owner_response_required"
|
|
},
|
|
{
|
|
"priority": "P0-5",
|
|
"category_id": "monitoring_alerting_observability",
|
|
"owner_lane": "monitoring_owner_response_required",
|
|
"status": "owner_response_required"
|
|
},
|
|
{
|
|
"priority": "P0-6",
|
|
"category_id": "public_admin_api_runtime_config",
|
|
"owner_lane": "public_runtime_config_owner_response_required",
|
|
"status": "owner_response_required"
|
|
},
|
|
{
|
|
"priority": "P0-7",
|
|
"category_id": "ai_provider_route",
|
|
"owner_lane": "ai_provider_route_owner_response_required",
|
|
"status": "owner_response_required"
|
|
},
|
|
{
|
|
"priority": "P0-8",
|
|
"category_id": "database_migration",
|
|
"owner_lane": "database_migration_owner_response_required",
|
|
"status": "owner_response_required"
|
|
},
|
|
{
|
|
"priority": "P0-9",
|
|
"category_id": "secret_metadata",
|
|
"owner_lane": "secret_metadata_owner_response_required",
|
|
"status": "owner_response_required"
|
|
}
|
|
],
|
|
"forbidden_payloads": [
|
|
"token",
|
|
"secret",
|
|
"private_key",
|
|
"cookie",
|
|
"session",
|
|
"authorization_header",
|
|
"runner_token",
|
|
"webhook_secret",
|
|
"database_url",
|
|
"unredacted_screenshot",
|
|
"private_url_credential"
|
|
],
|
|
"forbidden_actions": [
|
|
"repo_create",
|
|
"visibility_change",
|
|
"refs_sync",
|
|
"delete_refs",
|
|
"force_push",
|
|
"workflow_modify",
|
|
"runner_enable",
|
|
"kali_scan",
|
|
"host_update",
|
|
"runtime_restart",
|
|
"nginx_reload",
|
|
"argocd_sync",
|
|
"database_migration",
|
|
"secret_rotation",
|
|
"ai_provider_route_switch"
|
|
],
|
|
"gates": {
|
|
"dispatch_authorized": false,
|
|
"request_sent": false,
|
|
"request_sent_count": 0,
|
|
"received_response_count": 0,
|
|
"accepted_response_count": 0,
|
|
"rejected_response_count": 0,
|
|
"owner_response_received_count": 0,
|
|
"owner_response_accepted_count": 0,
|
|
"redacted_payload_ingested": false,
|
|
"active_runtime_gate_count": 0,
|
|
"runtime_execution_authorized": false,
|
|
"action_buttons_allowed": false,
|
|
"repo_creation_authorized": false,
|
|
"refs_sync_authorized": false,
|
|
"workflow_modification_authorized": false,
|
|
"github_primary_switch_authorized": false,
|
|
"host_update_authorized": false,
|
|
"active_scan_authorized": false,
|
|
"secret_value_collection_authorized": false,
|
|
"nginx_reload_authorized": false,
|
|
"argocd_sync_authorized": false,
|
|
"database_migration_authorized": false,
|
|
"ai_provider_route_change_authorized": false
|
|
},
|
|
"progress": {
|
|
"s4_9_dispatch_package_percent": 70,
|
|
"s4_9_owner_response_gate_percent": 0,
|
|
"high_value_config_owner_lane_alignment_percent": 55,
|
|
"iwooos_overall_percent": 64,
|
|
"active_runtime_gate_count": 0
|
|
}
|
|
}
|