Files
aios/approvals/governance-policy/SINGLE-OWNER-GOVERNANCE-MIGRATION-20260728T162246Z.json
T

485 lines
21 KiB
JSON

{
"allowed_human_approvers": [
"owner"
],
"approval_expires_at": "2026-07-29T16:22:46Z",
"approval_request_branch": "governance/request/single-owner-governance-migration-20260728T162246Z",
"approval_type": "SINGLE_OWNER_GOVERNANCE_POLICY",
"approval_types_migrated_after_policy_effective_at": [
"SOURCE_MAPPING_AND_IMPORT_EXECUTION_RENEWAL",
"CONTROL_PLANE_DEPLOYMENT_APPROVAL",
"DEVELOPMENT_MERGE_APPROVAL",
"RELEASE_CANDIDATE_APPROVAL",
"PRODUCTION_RELEASE_APPROVAL",
"TAG_APPROVAL",
"REGISTRY_BASELINE_PROMOTION_APPROVAL",
"PRODUCTION_DEPLOYMENT_APPROVAL",
"ROLLBACK_APPROVAL"
],
"atomic_migration": {
"backup_checksums_sha256": "72e2fe0b03d1011c872bb39a6cff489f08398ac7d52092f720cbbc63bcf6f753",
"backup_root": "/var/lib/aios-gitops/runtime/tasks/AIOS-SINGLE-OWNER-GOVERNANCE-MIGRATION-20260729/pre-migration-backup",
"direct_database_update": false,
"direct_ref_update": false,
"dual_capable_validator_shadow_required": true,
"identity_snapshot_sha256": "2d7b4e72d1fdf187425092089589547e0d76784c611d00f915a8c212f17d3b15",
"live_protection_canonical_sha256": "2bc353f34689242cabebf89856d3faab0e1c496b5d33761dfb7cbd47904516f7",
"maintenance_lock_required": true,
"old_rules_remain_active_until_owner_approval_and_machine_gates_pass": true,
"protected_branch_snapshot_sha256": "2bc353f34689242cabebf89856d3faab0e1c496b5d33761dfb7cbd47904516f7",
"protection_update_method": "authenticated_admin_API_compare_and_swap",
"reviewable_backup_file_hashes": {
"app.ini": "0693e4fa8296a22533429339faeee2ac1856b6c966c6c1009bb139ab4784f687",
"authoritative-aios.bundle": "4fb4ccc979c3061065cde451af0e733326cb56fa6f860124bb73f153a60907c9",
"authoritative-refs.txt": "85cb664c8edf3902bebfc6c2253a3ee16cff8534f86561ba771a73df160186c6",
"backup-metadata.json": "a38ef6dacb52ae61c4332bf8d087f479fb0d5f51d5f636a132a711bddd6e7732",
"checksums.sha256": "72e2fe0b03d1011c872bb39a6cff489f08398ac7d52092f720cbbc63bcf6f753",
"gitea-aios.bundle": "a343c7437f3a1a2aa842dd9d986a1d3cf80691058faae978565224320ff5ed90",
"gitea-refs.txt": "1792b2c4f1cf1f232704601ee968e16425f926a6eaab1bdcddf273525d046e4d",
"gitea.db": "aadcc1587a05827ed3b2c4ffc2403f26139020cd0328afaa03f7afbf6083a2f1",
"governance-identities.json": "2d7b4e72d1fdf187425092089589547e0d76784c611d00f915a8c212f17d3b15",
"protected-branch.json": "5cc4ae4fe5614baa3d4bb83d71872a4ad1ce3c5e39061e02b336be40d5b5b75d",
"protected-tag.json": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
"repository/active-runtime/app/aios_isolated_writer_policy.py": "d86ec23fd5d8b7e9844c0895c50385b6f8f3071c3dac3c0f26c70768ae00a188",
"repository/active-runtime/app/isolated_writer_authz.py": "cfae1cdf70c1dabbe013e9365c308a45f11acf20035881a3bb6143774682bbf0",
"repository/active-runtime/app/isolated_writer_path_policy.py": "c6c9ea8e45dfc03c4703503f4dc9c92f887bbacdbf1c7779a487567eee6c257c",
"repository/active-runtime/app/silent_release_controller.py": "524a0a9961b15c2a35b669d1b89b2142377c13ddd3c721780f374331b7d2b6eb",
"repository/active-runtime/app/silent_release_hardening.py": "524aba7034f2cd89d897fe01e9799c835bae9f11ca738182ce469aa59e05cc1a",
"repository/services/aios-autonomous-release-candidate/aios_autonomous_release_candidate/approval.py": "cc937a81aef881206cb1d6fd2ad1feb1a1c2e0ad91c908095d56fd96402c3373",
"repository/services/aios-autonomous-release-candidate/aios_autonomous_release_candidate/models.py": "aa3b3dd41c03c17e4e116ce444d9f4f779694a9cde684e8329cf892bd319069a",
"repository/services/aios-autonomous-release-candidate/aios_autonomous_release_candidate/policy.py": "24b3f3326e6dcd1a4c376d892c53ad20c68e0dd6f861a3a34e11c9a2bba4c756",
"repository/services/aios-autonomous-release-candidate/aios_autonomous_release_candidate/release.py": "db535e5006f8e4a3ab80c2f689213045c120b01cda9b43ef461a3022096c9d19",
"repository/services/aios-autonomous-release-candidate/aios_autonomous_release_candidate/store.py": "31e1f3b904b0bfc8822d21bfd166a45388f122398d1ec76b803e90ee06dc92f0",
"repository/services/aios-autonomous-release-candidate/aios_autonomous_release_candidate/workflow.py": "5f6a8e3a4d66f47717e95842f2eaa443e3cfa321cb08026cc82d74c4ad353bcf",
"repository/tests/autonomous_release/test_core_contracts.py": "71852070db50a04901c141213cadc987ae17ec678fe27a901fee165b6d1c3e2a",
"repository/tests/autonomous_release/test_external_gates.py": "91cca37eb1d40f0cf9fc38b12e2123045ffebd794a34d6cdef3f1dec470fffd2",
"repository/tests/autonomous_release/test_release_gates.py": "d82b23ac00f5389f1a0de628bda9dff898d33f80d375cf6ff74f1531fd138134",
"repository/tests/autonomous_release/test_state_and_workflow.py": "c0395a901732adb0b2f1402e6a1cf5202d54aa597bcaec9584a7ea7589c53917"
},
"reviewable_pre_migration_governance_identity_snapshot": [
{
"created_unix": 1783321252,
"id": 1,
"is_active": 1,
"is_admin": 0,
"last_login_unix": 0,
"lower_name": "aios",
"prohibit_login": 1,
"type": 0
},
{
"created_unix": 1783335380,
"id": 2,
"is_active": 1,
"is_admin": 1,
"last_login_unix": 1785086126,
"lower_name": "owner",
"prohibit_login": 0,
"type": 0
},
{
"created_unix": 1783411566,
"id": 3,
"is_active": 1,
"is_admin": 1,
"last_login_unix": 0,
"lower_name": "gito",
"prohibit_login": 0,
"type": 0
},
{
"created_unix": 1785078826,
"id": 42,
"is_active": 1,
"is_admin": 0,
"last_login_unix": 1785206253,
"lower_name": "codex",
"prohibit_login": 0,
"type": 0
},
{
"created_unix": 1785078882,
"id": 43,
"is_active": 1,
"is_admin": 0,
"last_login_unix": 1785206380,
"lower_name": "gpt",
"prohibit_login": 0,
"type": 0
}
],
"reviewable_pre_migration_protection_snapshot": {
"protected_branch": [
{
"approvals_whitelist_team_i_ds": "null",
"approvals_whitelist_user_i_ds": "[42,43]",
"block_on_official_review_requests": 1,
"block_on_outdated_branch": 1,
"block_on_rejected_reviews": 1,
"branch_name": "governance/approvals",
"can_push": 0,
"created_unix": 1785093201,
"dismiss_stale_approvals": 1,
"enable_approvals_whitelist": 1,
"enable_merge_whitelist": 1,
"enable_status_check": 0,
"enable_whitelist": 0,
"id": 1,
"ignore_stale_approvals": 0,
"merge_whitelist_team_i_ds": "null",
"merge_whitelist_user_i_ds": "[42,43]",
"protected_file_patterns": "",
"repo_id": 1,
"require_signed_commits": 0,
"required_approvals": 2,
"status_check_contexts": "[]",
"unprotected_file_patterns": "",
"updated_unix": 1785093422,
"whitelist_deploy_keys": 0,
"whitelist_team_i_ds": "null",
"whitelist_user_i_ds": "null"
},
{
"approvals_whitelist_team_i_ds": "null",
"approvals_whitelist_user_i_ds": "[42,43]",
"block_on_official_review_requests": 1,
"block_on_outdated_branch": 1,
"block_on_rejected_reviews": 1,
"branch_name": "integration/chatgpt-autonomous-completion-20260726",
"can_push": 0,
"created_unix": 1785093201,
"dismiss_stale_approvals": 1,
"enable_approvals_whitelist": 1,
"enable_merge_whitelist": 1,
"enable_status_check": 0,
"enable_whitelist": 0,
"id": 3,
"ignore_stale_approvals": 0,
"merge_whitelist_team_i_ds": "null",
"merge_whitelist_user_i_ds": "[42,43]",
"protected_file_patterns": "",
"repo_id": 1,
"require_signed_commits": 0,
"required_approvals": 2,
"status_check_contexts": "[]",
"unprotected_file_patterns": "",
"updated_unix": 1785093422,
"whitelist_deploy_keys": 0,
"whitelist_team_i_ds": "null",
"whitelist_user_i_ds": "null"
},
{
"approvals_whitelist_team_i_ds": "null",
"approvals_whitelist_user_i_ds": "[42,43]",
"block_on_official_review_requests": 1,
"block_on_outdated_branch": 1,
"block_on_rejected_reviews": 1,
"branch_name": "main",
"can_push": 0,
"created_unix": 1785093201,
"dismiss_stale_approvals": 1,
"enable_approvals_whitelist": 1,
"enable_merge_whitelist": 1,
"enable_status_check": 0,
"enable_whitelist": 0,
"id": 2,
"ignore_stale_approvals": 0,
"merge_whitelist_team_i_ds": "null",
"merge_whitelist_user_i_ds": "[42,43]",
"protected_file_patterns": "",
"repo_id": 1,
"require_signed_commits": 0,
"required_approvals": 2,
"status_check_contexts": "[]",
"unprotected_file_patterns": "",
"updated_unix": 1785093422,
"whitelist_deploy_keys": 0,
"whitelist_team_i_ds": "null",
"whitelist_user_i_ds": "null"
}
],
"protected_tag": []
},
"rollback_archive_members": {
"pre-migration-backup/app.ini": "0693e4fa8296a22533429339faeee2ac1856b6c966c6c1009bb139ab4784f687",
"pre-migration-backup/authoritative-aios.bundle": "4fb4ccc979c3061065cde451af0e733326cb56fa6f860124bb73f153a60907c9",
"pre-migration-backup/authoritative-refs.txt": "85cb664c8edf3902bebfc6c2253a3ee16cff8534f86561ba771a73df160186c6",
"pre-migration-backup/backup-metadata.json": "a38ef6dacb52ae61c4332bf8d087f479fb0d5f51d5f636a132a711bddd6e7732",
"pre-migration-backup/checksums.sha256": "72e2fe0b03d1011c872bb39a6cff489f08398ac7d52092f720cbbc63bcf6f753",
"pre-migration-backup/gitea-aios.bundle": "a343c7437f3a1a2aa842dd9d986a1d3cf80691058faae978565224320ff5ed90",
"pre-migration-backup/gitea-refs.txt": "1792b2c4f1cf1f232704601ee968e16425f926a6eaab1bdcddf273525d046e4d",
"pre-migration-backup/gitea.db": "aadcc1587a05827ed3b2c4ffc2403f26139020cd0328afaa03f7afbf6083a2f1",
"pre-migration-backup/governance-identities.json": "2d7b4e72d1fdf187425092089589547e0d76784c611d00f915a8c212f17d3b15",
"pre-migration-backup/protected-branch.json": "5cc4ae4fe5614baa3d4bb83d71872a4ad1ce3c5e39061e02b336be40d5b5b75d",
"pre-migration-backup/protected-tag.json": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
"pre-migration-backup/repository/active-runtime/app/aios_isolated_writer_policy.py": "d86ec23fd5d8b7e9844c0895c50385b6f8f3071c3dac3c0f26c70768ae00a188",
"pre-migration-backup/repository/active-runtime/app/isolated_writer_authz.py": "cfae1cdf70c1dabbe013e9365c308a45f11acf20035881a3bb6143774682bbf0",
"pre-migration-backup/repository/active-runtime/app/isolated_writer_path_policy.py": "c6c9ea8e45dfc03c4703503f4dc9c92f887bbacdbf1c7779a487567eee6c257c",
"pre-migration-backup/repository/active-runtime/app/silent_release_controller.py": "524a0a9961b15c2a35b669d1b89b2142377c13ddd3c721780f374331b7d2b6eb",
"pre-migration-backup/repository/active-runtime/app/silent_release_hardening.py": "524aba7034f2cd89d897fe01e9799c835bae9f11ca738182ce469aa59e05cc1a",
"pre-migration-backup/repository/services/aios-autonomous-release-candidate/aios_autonomous_release_candidate/approval.py": "cc937a81aef881206cb1d6fd2ad1feb1a1c2e0ad91c908095d56fd96402c3373",
"pre-migration-backup/repository/services/aios-autonomous-release-candidate/aios_autonomous_release_candidate/models.py": "aa3b3dd41c03c17e4e116ce444d9f4f779694a9cde684e8329cf892bd319069a",
"pre-migration-backup/repository/services/aios-autonomous-release-candidate/aios_autonomous_release_candidate/policy.py": "24b3f3326e6dcd1a4c376d892c53ad20c68e0dd6f861a3a34e11c9a2bba4c756",
"pre-migration-backup/repository/services/aios-autonomous-release-candidate/aios_autonomous_release_candidate/release.py": "db535e5006f8e4a3ab80c2f689213045c120b01cda9b43ef461a3022096c9d19",
"pre-migration-backup/repository/services/aios-autonomous-release-candidate/aios_autonomous_release_candidate/store.py": "31e1f3b904b0bfc8822d21bfd166a45388f122398d1ec76b803e90ee06dc92f0",
"pre-migration-backup/repository/services/aios-autonomous-release-candidate/aios_autonomous_release_candidate/workflow.py": "5f6a8e3a4d66f47717e95842f2eaa443e3cfa321cb08026cc82d74c4ad353bcf",
"pre-migration-backup/repository/tests/autonomous_release/test_core_contracts.py": "71852070db50a04901c141213cadc987ae17ec678fe27a901fee165b6d1c3e2a",
"pre-migration-backup/repository/tests/autonomous_release/test_external_gates.py": "91cca37eb1d40f0cf9fc38b12e2123045ffebd794a34d6cdef3f1dec470fffd2",
"pre-migration-backup/repository/tests/autonomous_release/test_release_gates.py": "d82b23ac00f5389f1a0de628bda9dff898d33f80d375cf6ff74f1531fd138134",
"pre-migration-backup/repository/tests/autonomous_release/test_state_and_workflow.py": "c0395a901732adb0b2f1402e6a1cf5202d54aa597bcaec9584a7ea7589c53917"
},
"rollback_configuration_path": "/var/lib/aios-gitops/runtime/tasks/AIOS-SINGLE-OWNER-GOVERNANCE-MIGRATION-20260729/rollback-configuration.tar",
"rollback_configuration_sha256": "fc8dcf68aaf53edb0cda45833ee45ba5b8b205791af9073258ca617c8b8187d6",
"rollback_restores_protection_before_validator": true
},
"auto_merge_after_owner_approval": false,
"auto_merge_machine_conditions": [
"owner_approval_valid",
"head_oid_unchanged",
"required_checks_pass",
"secret_scan_pass",
"evidence_closure_pass",
"approval_not_expired",
"protected_branch_rules_pass"
],
"automatic_renewal_policy": {
"approval_ref_fast_forward_descendant_required": true,
"changed_condition_fallback": "HUMAN_OWNER_APPROVAL_PENDING",
"secret_scan": "PASS_REQUIRED",
"single_renewal_max_hours": 12,
"status": "PROPOSED_AFTER_MIGRATION",
"total_window_max_days": 7,
"unchanged_fields_required": [
"original_policy_sha256",
"allowed_paths",
"allowed_operations",
"denied_operations",
"source_sha256",
"source_blob_oid"
]
},
"break_glass_executor_may_merge_only_after_owner_approval_machine_gates_and_atomic_cutover_preconditions": true,
"break_glass_expires_at": "2026-07-29T16:22:46Z",
"desired_branch_protection": {
"approval_whitelist_user_ids": [
2
],
"approval_whitelist_usernames": [
"owner"
],
"block_on_official_review_requests": true,
"block_on_outdated_branch": true,
"block_on_rejected_reviews": true,
"branch_deletion": false,
"branch_patterns": [
"governance/approvals",
"main",
"release/**",
"integration/**"
],
"direct_push": false,
"dismiss_stale_approvals": true,
"force_push": false,
"require_status_checks": true,
"required_approvals": 1,
"required_status_contexts": [
"aios/machine-gates",
"aios/secret-scan",
"aios/evidence-closure"
],
"wip_blocks_merge": true
},
"executor_must_not_approve": true,
"expected_governance_base_oid": "ac2dc5c30eb35748ef11c98297812729d0fd5828",
"expires_at": "2026-07-29T16:22:46Z",
"global_constraints": {
"AIOS_GITOPS_WRITES_ENABLED": false,
"approval_impersonation": false,
"direct_main_push": false,
"fake_review": false,
"force_push": false,
"production_change_without_owner_approval": false,
"secret_commit": false,
"tag_rewrite": false
},
"governance_model": "SINGLE_OWNER_WITH_MACHINE_GATES_V1",
"historical_policy": {
"historical_manifests_modified": false,
"old_policy_decoder_retained_read_only": true,
"requests_created_before_policy_effective_at_use_old_policy": true
},
"issued_at": "2026-07-28T16:22:46Z",
"machine_gates": {
"development_branch": [
"allowed_branch",
"allowed_paths",
"compileall",
"targeted_tests",
"secret_scan",
"git_diff_check"
],
"production": [
"owner_approval",
"tag_consistency",
"registry_consistency",
"deployment_plan",
"rollback_plan",
"artifact_integrity",
"production_preflight"
],
"protected_branch_merge": [
"expected_base_oid",
"current_head_oid",
"ordinary_merge_commit",
"parent_order_verified",
"artifact_binding",
"audit_chain_valid"
],
"release": [
"version_manifest",
"explicit_release_target_oid",
"artifact_sha256",
"rollback_artifact_sha256",
"sbom",
"test_evidence",
"evidence_closure"
]
},
"merge_mode": "CREATE_MERGE_COMMIT",
"migration_acceptance_tests": [
"agent_request_pass",
"owner_current_head_approval_pass",
"machine_gates_then_merge_commit_pass",
"agent_self_approval_denied",
"non_owner_approval_denied",
"stale_head_approval_denied",
"wip_merge_denied",
"machine_test_failure_merge_denied",
"secret_scan_failure_merge_denied",
"main_direct_write_denied",
"tag_direct_write_denied",
"force_push_denied",
"missing_tag_target_oid_denied",
"missing_evidence_closure_oid_denied",
"production_without_owner_denied",
"dormant_only_production_activation_denied"
],
"migration_mode": "OWNER_BREAK_GLASS_GOVERNANCE_RESET",
"new_policy": "SINGLE_OWNER_WITH_MACHINE_GATES_V1",
"old_policy": "DUAL_HUMAN_APPROVAL",
"owner_approval_contract": {
"dismissed": false,
"does_not_claim_old_dual_approval_compliance": true,
"head_change_invalidates_owner_approval": true,
"owner_review_is_break_glass_signature": true,
"review_created_before_approval_expires_at": true,
"review_state": "APPROVED",
"reviewed_head_oid_must_equal_current_pr_head_oid": true,
"reviewer_must_equal": "owner",
"stale": false
},
"owner_break_glass_declaration_to_be_attested_by_review": {
"attestation_status": "PENDING_OWNER_REVIEW",
"expires_at": "2026-07-29T16:22:46Z",
"new_policy": "SINGLE_OWNER_WITH_MACHINE_GATES_V1",
"old_policy": "DUAL_HUMAN_APPROVAL",
"owner_acknowledges_old_policy_exception": true,
"reason": "single-maintainer-system",
"scope": "governance-policy-migration-only"
},
"owner_is_only_human_approver": true,
"policy_effective_at": null,
"pre_approval_non_authorizations": {
"approval_validator_update_allowed": false,
"gitea_branch_protection_update_allowed": false,
"merge_allowed": false,
"old_dual_rule_disable_allowed": false,
"production_change_allowed": false,
"state_machine_update_allowed": false,
"writer_credential_issue_allowed": false
},
"prohibited_merge_modes": [
"squash",
"rebase",
"force",
"fast_forward_policy_bypass"
],
"reason": "single-maintainer-system",
"repository": "aios/aios",
"request_status": "HUMAN_OWNER_APPROVAL_PENDING",
"requester_must_not_approve": true,
"requesters": [
"codex-chartgpt-bridge",
"aios-governance-agent",
"aios-release-agent",
"aios-governed-development-writer"
],
"required_distinct_human_approvers": 1,
"required_human_approvals": 1,
"required_owner_approvals": 1,
"resolved_owner": {
"confidence_before_review": "MEDIUM",
"confirmation_rule": "valid APPROVED review by owner on this exact immutable head",
"email_sha256": "f5dc2928f6202c24fa4db8bb33db84e1b77c6eff30d1b95abdadeaae209bc4c9",
"identity_source": [
"gitea_repository_owner_account_aios_is_login_prohibited",
"all_login_enabled_site_admins_enumerated_owner_and_never_logged_in_service_gito",
"only_interactive_site_admin_named_owner",
"gitea_owner_last_login_present",
"historical_governance_records_use_approved_by_role_owner",
"user_declared_single_natural_person_maintainer"
],
"login_enabled_site_admins": [
{
"observed_prior_login": true,
"user_id": 2,
"username": "owner"
},
{
"classification": "service_admin_not_human_approver",
"observed_prior_login": false,
"user_id": 3,
"username": "gito"
}
],
"user_id": 2,
"username": "owner"
},
"schema": "aios.single-owner-governance-policy/v1",
"scope": "governance-policy-migration-only",
"standing_autonomous_development_policy": {
"allowed_without_repeated_owner_approval": [
"patch_branch_create",
"allowlisted_development_write",
"patch_branch_commit_and_push",
"test_execute",
"artifact_build",
"approval_pr_create",
"read_only_evidence",
"task_writer_renewal"
],
"owner_approval_still_required": [
"protected_branch_merge",
"tag",
"registry_update",
"production_baseline_update",
"production_deploy",
"production_rollback",
"governance_policy_change"
],
"status": "PROPOSED_AFTER_MIGRATION"
},
"standing_single_owner_governance_migration_authorization": true,
"state_machine": {
"auto_merge_ready_state": "AUTO_MERGE_READY",
"execution_ready_state": "OWNER_APPROVED_EXECUTION_READY",
"machine_verified_state": "MACHINE_GATES_VERIFIED",
"owner_approval_alone_is_not_execution_ready": true,
"owner_verified_state": "OWNER_APPROVAL_VERIFIED",
"pending_state": "HUMAN_OWNER_APPROVAL_PENDING"
},
"task_id": "AIOS-SINGLE-OWNER-GOVERNANCE-MIGRATION-20260729",
"this_manifest_authorizes_only_governance_policy_migration": true,
"this_manifest_grants_standing_development_authorization": false
}