Files
awoooi/docs/security/telegram-alert-readability-guard.snapshot.json
Your Name 1591969578
Some checks failed
Code Review / ai-code-review (push) Successful in 13s
CD Pipeline / tests (push) Successful in 1m38s
CD Pipeline / build-and-deploy (push) Successful in 5m32s
CD Pipeline / post-deploy-checks (push) Successful in 1m30s
Ansible / Reboot Recovery Contract / validate (push) Has been cancelled
fix(security): align alert guards with controlled apply
2026-06-26 19:30:49 +08:00

126 lines
4.3 KiB
JSON

{
"ai_signal_lanes": [
"wazuh_dashboard_api_readback_degraded",
"wazuh_intrusion_signal",
"kali_assessment_signal",
"nginx_config_drift",
"backup_restore_escrow_signal",
"provider_freshness_signal",
"supply_chain_drift"
],
"blocked_raw_output_markers": [
"root-process-line",
"root-prisma-process-line",
"external-checkpoint-url",
"package-tree-path",
"hosted-toolcache-path",
"workspace-path",
"raw-wazuh-path",
"raw-nginx-path",
"secret-placeholder",
"token-like-placeholder",
"internal-host-ip",
"raw-prisma-json-product-marker"
],
"execution_boundaries": {
"action_buttons_allowed": false,
"api_sender_refactor_authorized": false,
"bot_api_call_authorized": false,
"direct_bot_api_migration_authorized": false,
"host_write_authorized": false,
"not_authorization": true,
"ops_script_modification_authorized": false,
"production_write_authorized": false,
"raw_payload_storage_allowed": false,
"runtime_execution_authorized": false,
"runtime_gate_open": false,
"secret_value_collection_allowed": false,
"telegram_send_authorized": false,
"workflow_modification_authorized": false
},
"final_exit_contracts": [
{
"exit_id": "telegram_gateway:_send_request",
"function_marker": "async def _send_request",
"required_marker": "normalize_telegram_send_message_payload"
},
{
"exit_id": "telegram_gateway:send_alert_notification",
"function_marker": "async def send_alert_notification",
"required_marker": "normalize_alert_notification_payload"
},
{
"exit_id": "telegram_gateway:send_text",
"function_marker": "async def send_text",
"required_marker": "normalize_alert_notification_payload"
}
],
"generated_at": "2026-06-26T19:22:57+08:00",
"git_commit": "e0a86b625",
"host_resource_lanes": [
"orphan_browser_smoke_runaway_process",
"ci_runner_load_saturation",
"runner_prisma_generate_resource_pressure",
"runner_build_resource_pressure",
"node_process_resource_pressure",
"host_resource_pressure_triage"
],
"required_output_markers": [
"ai_automation_alert_card_v1",
"AI 自動化判讀",
"controlled_playbook_queue",
"runtime_write_gate=controlled",
"Top evidence",
"禁止事項",
"allowlisted PlayBook"
],
"schema_version": "telegram_alert_readability_guard_v1",
"source_markers": [
"def format_host_resource_alert_card",
"def format_aiops_signal_alert_card",
"def normalize_alert_notification_payload",
"def normalize_telegram_send_message_payload",
"_HOST_PROCESS_LINE_RE",
"_SECRET_ASSIGNMENT_RE",
"_BEARER_RE",
"_PRIVATE_IP_RE",
"_ABSOLUTE_PATH_RE",
"_URL_RE",
"payload = normalize_telegram_send_message_payload(method, payload)"
],
"source_refs": [
"apps/api/src/services/telegram_gateway.py",
"apps/api/tests/test_telegram_message_templates.py"
],
"status": "telegram_alert_readability_guard_ready_no_runtime_action",
"summary": {
"action_button_count": 0,
"ai_signal_lane_count": 7,
"blocked_raw_output_marker_count": 12,
"bot_api_call_authorized_count": 0,
"final_exit_contract_count": 3,
"host_resource_lane_count": 6,
"production_write_authorized_count": 0,
"raw_payload_storage_allowed_count": 0,
"required_output_marker_count": 7,
"runtime_gate_count": 0,
"secret_value_collection_allowed_count": 0,
"source_formatter_marker_count": 11,
"telegram_send_authorized_count": 0,
"test_contract_count": 11
},
"test_contracts": [
"test_ci_runner_load_alert_becomes_capacity_event_packet",
"test_wazuh_alert_becomes_aiops_signal_event_packet",
"test_wazuh_dashboard_api_degraded_alert_becomes_readback_gap_event_packet",
"test_nginx_drift_alert_becomes_public_gateway_event_packet",
"test_aiops_signal_formatter_covers_non_host_alert_lanes",
"test_send_alert_notification_normalizes_host_resource_raw_dump",
"test_send_alert_notification_normalizes_aiops_signal_alert",
"test_prisma_generate_alert_redacts_raw_process_json_and_urls",
"test_send_alert_notification_forces_html_card_for_markdown_host_alert",
"test_send_text_normalizes_host_resource_alert",
"test_send_request_payload_normalizer_blocks_direct_host_raw_dump"
]
}