269 lines
10 KiB
JSON
269 lines
10 KiB
JSON
{
|
|
"acknowledges_pr26_owner_approval_was_missing": true,
|
|
"approval_request_branch": "governance/request/single-owner-control-plane-deployment-20260728T170740Z-ea7a102dac417c23",
|
|
"approval_type": "SINGLE_OWNER_GOVERNANCE_CONTROL_PLANE_DEPLOYMENT",
|
|
"control_plane_targets": {
|
|
"allowed_human_approvers": [
|
|
"owner"
|
|
],
|
|
"branch_deletion": false,
|
|
"direct_protected_branch_push": false,
|
|
"dismiss_stale_approvals": true,
|
|
"executor_must_not_approve": true,
|
|
"force_push": false,
|
|
"governance_model": "SINGLE_OWNER_WITH_MACHINE_GATES_V1",
|
|
"historical_records_immutable": true,
|
|
"machine_gates_required": true,
|
|
"policy_effective_at_set_only_after_activation_tests_pass": true,
|
|
"protected_branches": [
|
|
"governance/approvals",
|
|
"main",
|
|
"release/**",
|
|
"integration/**"
|
|
],
|
|
"requester_must_not_approve": true,
|
|
"require_approval_for_latest_commit": true,
|
|
"required_human_approvals": 1,
|
|
"required_owner_approvals": 1,
|
|
"required_status_contexts": [
|
|
"aios/machine-gates",
|
|
"aios/secret-scan",
|
|
"aios/evidence-closure"
|
|
],
|
|
"tag_rewrite": false,
|
|
"wip_blocks_merge": true
|
|
},
|
|
"does_not_claim_pr26_met_old_two_natural_person_policy": true,
|
|
"expected_authoritative_governance_base_oid": "ac2dc5c30eb35748ef11c98297812729d0fd5828",
|
|
"expected_gitea_governance_base_oid": "a5489f1b67870622162b2daa781bd0237735831a",
|
|
"expires_at": "2026-07-29T05:07:40Z",
|
|
"explicitly_allowed_operations_after_exact_head_approvals_and_merge": [
|
|
"approval_mirror.fast_forward_governance_only",
|
|
"approval_validator.update",
|
|
"state_machine.update",
|
|
"gitea_branch_protection.update_via_authenticated_api_compare_and_swap",
|
|
"governance_policy.activate",
|
|
"rollback_configuration.install",
|
|
"governance_acceptance_tests.execute",
|
|
"single_owner_governance_activation_receipt.create"
|
|
],
|
|
"explicitly_denied_operations": [
|
|
"force_push",
|
|
"plus_refspec",
|
|
"tag_fetch",
|
|
"prune",
|
|
"direct_git_database_write",
|
|
"direct_protected_ref_push",
|
|
"main_write",
|
|
"integration_write",
|
|
"tag_write",
|
|
"registry_write",
|
|
"baseline_write",
|
|
"production_write",
|
|
"history_rewrite",
|
|
"branch_delete",
|
|
"secret_read",
|
|
"approval_impersonation"
|
|
],
|
|
"global_constraints": {
|
|
"AIOS_GITOPS_WRITES_ENABLED": false,
|
|
"direct_main_push": false,
|
|
"force_push_used": false,
|
|
"owner_approval_respected": true,
|
|
"secrets_committed": false,
|
|
"tag_rewritten": false
|
|
},
|
|
"implementation_surface": {
|
|
"approval_validator": [
|
|
"services/aios-autonomous-release-candidate/aios_autonomous_release_candidate/approval.py",
|
|
"services/aios-autonomous-release-candidate/aios_autonomous_release_candidate/models.py",
|
|
"services/aios-autonomous-release-candidate/aios_autonomous_release_candidate/policy.py"
|
|
],
|
|
"runtime": [
|
|
"active-runtime/app/silent_release_controller.py",
|
|
"active-runtime/app/silent_release_hardening.py"
|
|
],
|
|
"state_machine": [
|
|
"services/aios-autonomous-release-candidate/aios_autonomous_release_candidate/store.py",
|
|
"services/aios-autonomous-release-candidate/aios_autonomous_release_candidate/workflow.py",
|
|
"services/aios-autonomous-release-candidate/aios_autonomous_release_candidate/release.py"
|
|
],
|
|
"systemd": [
|
|
"deploy/systemd/aios-autonomous-release-candidate.service",
|
|
"deploy/systemd/aios-silent-release-controller.service"
|
|
]
|
|
},
|
|
"issued_at": "2026-07-28T17:07:40Z",
|
|
"legacy_gitea_protection_gate": {
|
|
"account_reviews_do_not_prove_distinct_natural_persons": true,
|
|
"both_must_approve_this_exact_head": true,
|
|
"current_approval_whitelist": [
|
|
"codex",
|
|
"gpt"
|
|
],
|
|
"current_required_approvals": 2
|
|
},
|
|
"migration_mode": "OWNER_BREAK_GLASS_GOVERNANCE_RESET_RATIFICATION",
|
|
"mirror_contract": {
|
|
"expected_chain_contains_policy_merge_oid": "a5489f1b67870622162b2daa781bd0237735831a",
|
|
"expected_pre_sync_authoritative_oid": "ac2dc5c30eb35748ef11c98297812729d0fd5828",
|
|
"fast_forward_only": true,
|
|
"force": false,
|
|
"fsck_connectivity_only_required": true,
|
|
"only_ref": "refs/heads/governance/approvals",
|
|
"plus_refspec": false,
|
|
"prune": false,
|
|
"quarantine_required": true,
|
|
"source": "gitea_repository_file_url_only",
|
|
"tags": false
|
|
},
|
|
"owner_break_glass_ratification": {
|
|
"attests_reason": "single-maintainer-system",
|
|
"attests_scope": "governance-policy-migration-only",
|
|
"created_before_expires_at": true,
|
|
"dismissed": false,
|
|
"required": true,
|
|
"review_state": "APPROVED",
|
|
"reviewed_head_oid_must_equal_current_pr_head_oid": true,
|
|
"reviewer_user_id": 2,
|
|
"reviewer_username": "owner",
|
|
"stale": false
|
|
},
|
|
"pre_approval_non_authorizations": {
|
|
"approval_validator_update_allowed": false,
|
|
"development_allowed": false,
|
|
"gitea_branch_protection_update_allowed": false,
|
|
"governance_policy_activation_allowed": false,
|
|
"merge_allowed": false,
|
|
"mirror_allowed": false,
|
|
"production_change_allowed": false,
|
|
"rollback_install_allowed": false,
|
|
"standing_writer_policy_allowed": false,
|
|
"state_machine_update_allowed": false
|
|
},
|
|
"pre_cutover_protection_snapshot": {
|
|
"protected_branch": [
|
|
{
|
|
"approvals_whitelist_team_i_ds": "null",
|
|
"approvals_whitelist_user_i_ds": "[42,43]",
|
|
"block_on_official_review_requests": 1,
|
|
"block_on_outdated_branch": 1,
|
|
"block_on_rejected_reviews": 1,
|
|
"branch_name": "governance/approvals",
|
|
"can_push": 0,
|
|
"created_unix": 1785093201,
|
|
"dismiss_stale_approvals": 1,
|
|
"enable_approvals_whitelist": 1,
|
|
"enable_merge_whitelist": 1,
|
|
"enable_status_check": 0,
|
|
"enable_whitelist": 0,
|
|
"id": 1,
|
|
"ignore_stale_approvals": 0,
|
|
"merge_whitelist_team_i_ds": "null",
|
|
"merge_whitelist_user_i_ds": "[42,43]",
|
|
"protected_file_patterns": "",
|
|
"repo_id": 1,
|
|
"require_signed_commits": 0,
|
|
"required_approvals": 2,
|
|
"status_check_contexts": "[]",
|
|
"unprotected_file_patterns": "",
|
|
"updated_unix": 1785093422,
|
|
"whitelist_deploy_keys": 0,
|
|
"whitelist_team_i_ds": "null",
|
|
"whitelist_user_i_ds": "null"
|
|
},
|
|
{
|
|
"approvals_whitelist_team_i_ds": "null",
|
|
"approvals_whitelist_user_i_ds": "[42,43]",
|
|
"block_on_official_review_requests": 1,
|
|
"block_on_outdated_branch": 1,
|
|
"block_on_rejected_reviews": 1,
|
|
"branch_name": "integration/chatgpt-autonomous-completion-20260726",
|
|
"can_push": 0,
|
|
"created_unix": 1785093201,
|
|
"dismiss_stale_approvals": 1,
|
|
"enable_approvals_whitelist": 1,
|
|
"enable_merge_whitelist": 1,
|
|
"enable_status_check": 0,
|
|
"enable_whitelist": 0,
|
|
"id": 3,
|
|
"ignore_stale_approvals": 0,
|
|
"merge_whitelist_team_i_ds": "null",
|
|
"merge_whitelist_user_i_ds": "[42,43]",
|
|
"protected_file_patterns": "",
|
|
"repo_id": 1,
|
|
"require_signed_commits": 0,
|
|
"required_approvals": 2,
|
|
"status_check_contexts": "[]",
|
|
"unprotected_file_patterns": "",
|
|
"updated_unix": 1785093422,
|
|
"whitelist_deploy_keys": 0,
|
|
"whitelist_team_i_ds": "null",
|
|
"whitelist_user_i_ds": "null"
|
|
},
|
|
{
|
|
"approvals_whitelist_team_i_ds": "null",
|
|
"approvals_whitelist_user_i_ds": "[42,43]",
|
|
"block_on_official_review_requests": 1,
|
|
"block_on_outdated_branch": 1,
|
|
"block_on_rejected_reviews": 1,
|
|
"branch_name": "main",
|
|
"can_push": 0,
|
|
"created_unix": 1785093201,
|
|
"dismiss_stale_approvals": 1,
|
|
"enable_approvals_whitelist": 1,
|
|
"enable_merge_whitelist": 1,
|
|
"enable_status_check": 0,
|
|
"enable_whitelist": 0,
|
|
"id": 2,
|
|
"ignore_stale_approvals": 0,
|
|
"merge_whitelist_team_i_ds": "null",
|
|
"merge_whitelist_user_i_ds": "[42,43]",
|
|
"protected_file_patterns": "",
|
|
"repo_id": 1,
|
|
"require_signed_commits": 0,
|
|
"required_approvals": 2,
|
|
"status_check_contexts": "[]",
|
|
"unprotected_file_patterns": "",
|
|
"updated_unix": 1785093422,
|
|
"whitelist_deploy_keys": 0,
|
|
"whitelist_team_i_ds": "null",
|
|
"whitelist_user_i_ds": "null"
|
|
}
|
|
],
|
|
"protected_tag": []
|
|
},
|
|
"pre_cutover_protection_snapshot_sha256": "2bc353f34689242cabebf89856d3faab0e1c496b5d33761dfb7cbd47904516f7",
|
|
"ratifies_policy_manifest_blob_oid": "65f44007b10fc2a912d69e3f9081c0cfff77dfad",
|
|
"ratifies_policy_manifest_path": "approvals/governance-policy/SINGLE-OWNER-GOVERNANCE-MIGRATION-20260728T162246Z.json",
|
|
"ratifies_policy_manifest_sha256": "c097475afbe3074e6482f125b635981f8c0284f3d763c926e2a63e1a3ee1c6c3",
|
|
"ratifies_policy_merge_oid": "a5489f1b67870622162b2daa781bd0237735831a",
|
|
"ratifies_policy_pr_number": 26,
|
|
"ratifies_policy_request_oid": "312d3b483049a748675e887a516ec739c81ff474",
|
|
"ratifies_policy_tree_oid": "5c6974c058bba6210dcc1bdd0968fb7e6c84a844",
|
|
"repository": "aios/aios",
|
|
"request_status": "HUMAN_OWNER_AND_LEGACY_PROTECTION_APPROVAL_PENDING",
|
|
"required_machine_gates": [
|
|
"owner_exact_head_review_valid",
|
|
"legacy_protection_reviews_valid",
|
|
"ordinary_merge_commit",
|
|
"parent_order_verified",
|
|
"manifest_add_only",
|
|
"quarantine_verification",
|
|
"approval_mirror_fast_forward",
|
|
"validator_tests",
|
|
"state_machine_tests",
|
|
"protection_compare_and_swap",
|
|
"positive_governance_tests",
|
|
"negative_governance_tests",
|
|
"secret_scan",
|
|
"rollback_integrity",
|
|
"production_write_false"
|
|
],
|
|
"rollback_configuration_path": "/var/lib/aios-gitops/runtime/tasks/AIOS-SINGLE-OWNER-GOVERNANCE-MIGRATION-20260729/rollback-configuration.tar",
|
|
"rollback_configuration_sha256": "fc8dcf68aaf53edb0cda45833ee45ba5b8b205791af9073258ca617c8b8187d6",
|
|
"schema": "aios.single-owner-governance-control-plane-deployment/v1",
|
|
"scope": "pr26-ratification-mirror-and-single-owner-control-plane-deployment-only",
|
|
"task_id": "AIOS-SINGLE-OWNER-CONTROL-PLANE-DEPLOYMENT-20260729"
|
|
}
|