yaojingang
416 lines
17 KiB
Python
416 lines
17 KiB
Python
#!/usr/bin/env python3
|
|
import argparse
|
|
import json
|
|
import os
|
|
from datetime import date
|
|
from pathlib import Path
|
|
from typing import Any
|
|
|
|
from render_world_class_evidence_intake import build_intake
|
|
from render_world_class_evidence_ledger import build_ledger
|
|
from render_world_class_submission_review import build_submission_review
|
|
from world_class_evidence_contract import rel_path
|
|
from world_class_source_checks import summarize_source_checklist
|
|
|
|
|
|
ROOT = Path(__file__).resolve().parent.parent
|
|
SCRIPT_INTERFACE = "cli"
|
|
SCRIPT_INTERFACE_REASON = "Renders a preflight checklist for collecting pending world-class evidence without accepting evidence."
|
|
|
|
|
|
PREFLIGHT_SPECS: dict[str, list[dict[str, Any]]] = {
|
|
"provider-holdout": [
|
|
{
|
|
"key": "output-cases",
|
|
"label": "Output eval cases",
|
|
"kind": "file",
|
|
"path": "evals/output/cases.jsonl",
|
|
"required": True,
|
|
"next_action": "Keep output holdout cases available before provider execution.",
|
|
},
|
|
{
|
|
"key": "provider-runner",
|
|
"label": "Provider runner",
|
|
"kind": "file",
|
|
"path": "scripts/provider_output_eval_runner.py",
|
|
"required": True,
|
|
"next_action": "Use the provider runner instead of the local command runner for model-backed evidence.",
|
|
},
|
|
{
|
|
"key": "openai-api-key",
|
|
"label": "Provider credential",
|
|
"kind": "env",
|
|
"name": "OPENAI_API_KEY",
|
|
"required": True,
|
|
"secret": True,
|
|
"next_action": "Set OPENAI_API_KEY in the operator shell; never commit or print the value.",
|
|
},
|
|
{
|
|
"key": "provider-model",
|
|
"label": "Provider model",
|
|
"kind": "env",
|
|
"name": "YAO_OUTPUT_EVAL_MODEL",
|
|
"required": False,
|
|
"default": "gpt-4.1-mini",
|
|
"next_action": "Optionally set YAO_OUTPUT_EVAL_MODEL; the runbook defaults to gpt-4.1-mini.",
|
|
},
|
|
],
|
|
"human-adjudication": [
|
|
{
|
|
"key": "review-kit",
|
|
"label": "Blind review kit",
|
|
"kind": "file",
|
|
"path": "reports/output_review_kit.html",
|
|
"required": True,
|
|
"next_action": "Open the blind review kit and record real reviewer choices.",
|
|
},
|
|
{
|
|
"key": "decision-template",
|
|
"label": "Decision template",
|
|
"kind": "file",
|
|
"path": "reports/output_review_decisions.json",
|
|
"required": True,
|
|
"next_action": "Fill winner_variant values with real A/B decisions.",
|
|
},
|
|
{
|
|
"key": "human-reviewer",
|
|
"label": "Human reviewer",
|
|
"kind": "human",
|
|
"required": True,
|
|
"next_action": "Assign a real reviewer identity before claiming human adjudication.",
|
|
},
|
|
],
|
|
"native-permission-enforcement": [
|
|
{
|
|
"key": "permission-policy",
|
|
"label": "Permission policy",
|
|
"kind": "file",
|
|
"path": "security/permission_policy.json",
|
|
"required": True,
|
|
"next_action": "Keep approved high-permission capabilities explicit.",
|
|
},
|
|
{
|
|
"key": "permission-probes",
|
|
"label": "Runtime probes",
|
|
"kind": "file",
|
|
"path": "reports/runtime_permission_probes.json",
|
|
"required": True,
|
|
"next_action": "Refresh runtime permission probes after packaging changes.",
|
|
},
|
|
{
|
|
"key": "native-guard",
|
|
"label": "Native guard",
|
|
"kind": "external",
|
|
"required": True,
|
|
"next_action": "Attach a real target-client or external installer runtime guard; metadata fallback is not enough.",
|
|
},
|
|
],
|
|
"native-client-telemetry": [
|
|
{
|
|
"key": "native-host",
|
|
"label": "Native telemetry host",
|
|
"kind": "file",
|
|
"path": "scripts/telemetry_native_host.py",
|
|
"required": True,
|
|
"next_action": "Use the native host to receive metadata-only client events.",
|
|
},
|
|
{
|
|
"key": "hook-recipes",
|
|
"label": "Hook recipes",
|
|
"kind": "file",
|
|
"path": "reports/telemetry_hook_recipes.json",
|
|
"required": True,
|
|
"next_action": "Refresh telemetry hook recipes before external client installation.",
|
|
},
|
|
{
|
|
"key": "external-client",
|
|
"label": "External client",
|
|
"kind": "external",
|
|
"required": True,
|
|
"next_action": "Install a real Browser, Chrome, IDE, or provider client that emits metadata-only events.",
|
|
},
|
|
],
|
|
}
|
|
|
|
|
|
def env_present(name: str) -> bool:
|
|
return bool(os.environ.get(name))
|
|
|
|
|
|
def build_precheck(skill_dir: Path, evidence_key: str, spec: dict[str, Any]) -> dict[str, Any]:
|
|
kind = str(spec.get("kind", ""))
|
|
required = spec.get("required") is True
|
|
row = {
|
|
"evidence_key": evidence_key,
|
|
"key": spec.get("key", ""),
|
|
"label": spec.get("label", ""),
|
|
"kind": kind,
|
|
"required": required,
|
|
"next_action": spec.get("next_action", ""),
|
|
"secret_value_redacted": spec.get("secret") is True,
|
|
}
|
|
if kind == "file":
|
|
path = skill_dir / str(spec.get("path", ""))
|
|
exists = path.exists()
|
|
row.update(
|
|
{
|
|
"path": rel_path(path, skill_dir),
|
|
"status": "pass" if exists else ("missing" if required else "optional"),
|
|
"actual": "present" if exists else "missing",
|
|
}
|
|
)
|
|
return row
|
|
if kind == "env":
|
|
name = str(spec.get("name", ""))
|
|
present = env_present(name)
|
|
row.update(
|
|
{
|
|
"env": name,
|
|
"status": "pass" if present else ("missing" if required else "optional"),
|
|
"actual": "set" if present else "not-set",
|
|
"default": spec.get("default", ""),
|
|
}
|
|
)
|
|
return row
|
|
if kind == "human":
|
|
row.update(
|
|
{
|
|
"status": "human-required",
|
|
"actual": "external-human-action",
|
|
}
|
|
)
|
|
return row
|
|
if kind == "external":
|
|
row.update(
|
|
{
|
|
"status": "external-required",
|
|
"actual": "external-integration-required",
|
|
}
|
|
)
|
|
return row
|
|
row.update({"status": "unknown", "actual": "unknown"})
|
|
return row
|
|
|
|
|
|
def item_status(entry: dict[str, Any], prechecks: list[dict[str, Any]], source_rows: list[dict[str, Any]]) -> str:
|
|
if entry.get("status") == "accepted":
|
|
return "accepted"
|
|
blocking = {row.get("status") for row in prechecks if row.get("required") is True}
|
|
if "missing" in blocking or "external-required" in blocking:
|
|
return "blocked"
|
|
if "human-required" in blocking:
|
|
return "ready-for-human-review"
|
|
if any(row.get("status") != "pass" for row in source_rows):
|
|
return "ready-to-collect"
|
|
return "ready-for-submission"
|
|
|
|
|
|
def first_next_action(prechecks: list[dict[str, Any]], source_rows: list[dict[str, Any]]) -> str:
|
|
for row in prechecks:
|
|
if row.get("required") is True and row.get("status") != "pass":
|
|
return str(row.get("next_action", ""))
|
|
for row in source_rows:
|
|
if row.get("status") != "pass":
|
|
return str(row.get("next_action", ""))
|
|
return "Validate intake, refresh the ledger, and run the claim guard."
|
|
|
|
|
|
def md_cell(value: Any) -> str:
|
|
return str(value).replace("|", "\\|")
|
|
|
|
|
|
def build_preflight(skill_dir: Path, generated_at: str, submissions_dir: Path | None = None) -> dict[str, Any]:
|
|
submissions_dir = submissions_dir or (skill_dir / "evidence" / "world_class" / "submissions")
|
|
ledger = build_ledger(skill_dir, generated_at, submissions_dir=submissions_dir)
|
|
intake = build_intake(skill_dir, generated_at, submissions_dir=submissions_dir)
|
|
review = build_submission_review(skill_dir, generated_at, submissions_dir=submissions_dir)
|
|
review_by_key = {str(item.get("evidence_key", "")): item for item in review.get("items", [])}
|
|
intake_by_key = {str(item.get("evidence_key", "")): item for item in intake.get("operator_checklist", [])}
|
|
items: list[dict[str, Any]] = []
|
|
precheck_rows: list[dict[str, Any]] = []
|
|
source_rows: list[dict[str, Any]] = []
|
|
for entry in ledger.get("entries", []):
|
|
key = str(entry.get("key", ""))
|
|
prechecks = [build_precheck(skill_dir, key, spec) for spec in PREFLIGHT_SPECS.get(key, [])]
|
|
review_item = review_by_key.get(key, {})
|
|
item_source_rows = review_item.get("source_checklist", entry.get("source_checklist", []))
|
|
item_source_rows = item_source_rows if isinstance(item_source_rows, list) else []
|
|
status = item_status(entry, prechecks, item_source_rows)
|
|
item = {
|
|
"evidence_key": key,
|
|
"label": entry.get("label", key),
|
|
"category": entry.get("category", "external"),
|
|
"owner": entry.get("owner", "release reviewer"),
|
|
"status": status,
|
|
"ledger_status": entry.get("status", "pending"),
|
|
"intake_readiness": intake_by_key.get(key, {}).get("readiness", "missing"),
|
|
"review_state": review_item.get("review_state", "missing"),
|
|
"source_accepted": entry.get("source_accepted") is True,
|
|
"prechecks": prechecks,
|
|
"source_checklist": item_source_rows,
|
|
"next_action": first_next_action(prechecks, item_source_rows),
|
|
"submission_path": intake_by_key.get(key, {}).get("submission_path", ""),
|
|
"template_path": intake_by_key.get(key, {}).get("template_path", ""),
|
|
"runbook": entry.get("runbook", []),
|
|
}
|
|
items.append(item)
|
|
precheck_rows.extend(prechecks)
|
|
source_rows.extend(item_source_rows)
|
|
precheck_status_counts: dict[str, int] = {}
|
|
for row in precheck_rows:
|
|
status = str(row.get("status", "unknown"))
|
|
precheck_status_counts[status] = precheck_status_counts.get(status, 0) + 1
|
|
source_summary = summarize_source_checklist(source_rows)
|
|
collection_ready_count = sum(1 for item in items if item["status"] in {"ready-to-collect", "ready-for-human-review", "ready-for-submission"})
|
|
blocked_count = sum(1 for item in items if item["status"] == "blocked")
|
|
ready_to_claim = ledger.get("summary", {}).get("ready_to_claim_world_class") is True
|
|
summary = {
|
|
"evidence_item_count": len(items),
|
|
"precheck_count": len(precheck_rows),
|
|
"precheck_pass_count": precheck_status_counts.get("pass", 0),
|
|
"precheck_missing_count": precheck_status_counts.get("missing", 0),
|
|
"precheck_optional_count": precheck_status_counts.get("optional", 0),
|
|
"precheck_human_required_count": precheck_status_counts.get("human-required", 0),
|
|
"precheck_external_required_count": precheck_status_counts.get("external-required", 0),
|
|
"collection_ready_count": collection_ready_count,
|
|
"collection_blocked_count": blocked_count,
|
|
**source_summary,
|
|
"pending_count": ledger.get("summary", {}).get("pending_count", 0),
|
|
"ready_to_claim_world_class": ready_to_claim,
|
|
"credential_value_exposed": False,
|
|
"preflight_counts_as_evidence": False,
|
|
"decision": "ready-for-completion-audit" if ready_to_claim else ("collection-preflight-blocked" if blocked_count else "ready-to-collect-evidence"),
|
|
}
|
|
return {
|
|
"schema_version": "1.0",
|
|
"ok": True,
|
|
"generated_at": generated_at,
|
|
"skill_dir": rel_path(skill_dir, ROOT),
|
|
"summary": summary,
|
|
"status_counts": {item["status"]: sum(1 for candidate in items if candidate["status"] == item["status"]) for item in items},
|
|
"precheck_status_counts": precheck_status_counts,
|
|
"items": items,
|
|
"prechecks": precheck_rows,
|
|
"source_checklist": source_rows,
|
|
"submissions": {
|
|
"directory": rel_path(submissions_dir, skill_dir),
|
|
"preflight_counts_submission_as_completion": False,
|
|
},
|
|
"source_reports": {
|
|
"ledger": "reports/world_class_evidence_ledger.json",
|
|
"intake": "reports/world_class_evidence_intake.json",
|
|
"submission_review": "reports/world_class_submission_review.json",
|
|
"operator_runbook": "reports/world_class_operator_runbook.json",
|
|
},
|
|
"artifacts": {
|
|
"json": "reports/world_class_evidence_preflight.json",
|
|
"markdown": "reports/world_class_evidence_preflight.md",
|
|
},
|
|
}
|
|
|
|
|
|
def render_markdown(report: dict[str, Any]) -> str:
|
|
summary = report["summary"]
|
|
lines = [
|
|
"# World-Class Evidence Preflight",
|
|
"",
|
|
f"Generated at: `{report['generated_at']}`",
|
|
"",
|
|
"## Summary",
|
|
"",
|
|
f"- decision: `{summary['decision']}`",
|
|
f"- ready to claim world-class: `{str(summary['ready_to_claim_world_class']).lower()}`",
|
|
f"- preflight counts as evidence: `{str(summary['preflight_counts_as_evidence']).lower()}`",
|
|
f"- credential value exposed: `{str(summary['credential_value_exposed']).lower()}`",
|
|
f"- collection ready: `{summary['collection_ready_count']}`",
|
|
f"- collection blocked: `{summary['collection_blocked_count']}`",
|
|
f"- source checks: `{summary['source_pass_count']}` pass / `{summary['source_check_count']}` total",
|
|
"",
|
|
"This preflight report checks whether an operator can start collecting the remaining external or human evidence. It never accepts evidence, prints secret values, or changes the world-class ledger.",
|
|
"",
|
|
"## Evidence Items",
|
|
"",
|
|
"| Evidence | Status | Intake | Review | Next action |",
|
|
"| --- | --- | --- | --- | --- |",
|
|
]
|
|
for item in report["items"]:
|
|
next_action = str(item.get("next_action", "")).replace("|", "\\|")
|
|
lines.append(
|
|
f"| `{item['evidence_key']}` | `{item['status']}` | `{item['intake_readiness']}` | `{item['review_state']}` | {next_action} |"
|
|
)
|
|
for item in report["items"]:
|
|
lines.extend(
|
|
[
|
|
"",
|
|
f"## {item['label']}",
|
|
"",
|
|
f"- status: `{item['status']}`",
|
|
f"- ledger: `{item['ledger_status']}`",
|
|
f"- submission: `{item.get('submission_path') or 'missing'}`",
|
|
"",
|
|
"### Prechecks",
|
|
"",
|
|
"| Check | Kind | Current | Status | Next action |",
|
|
"| --- | --- | --- | --- | --- |",
|
|
]
|
|
)
|
|
for row in item.get("prechecks", []):
|
|
action = md_cell(row.get("next_action", ""))
|
|
lines.append(
|
|
f"| {row['label']} | `{row['kind']}` | `{row['actual']}` | `{row['status']}` | {action} |"
|
|
)
|
|
lines.extend(
|
|
[
|
|
"",
|
|
"### Source Checks",
|
|
"",
|
|
"| Check | Current | Expected | Status | Next action |",
|
|
"| --- | --- | --- | --- | --- |",
|
|
]
|
|
)
|
|
for row in item.get("source_checklist", []):
|
|
action = md_cell(row.get("next_action", ""))
|
|
lines.append(
|
|
f"| {row['label']} | `{row['actual']}` | `{row['expected']}` | `{row['status']}` | {action} |"
|
|
)
|
|
lines.extend(
|
|
[
|
|
"",
|
|
"## Boundary",
|
|
"",
|
|
"- Environment variables are reported only as `set` or `not-set`; values are never printed.",
|
|
"- Human-required and external-required states are operator actions, not accepted evidence.",
|
|
"- The world-class ledger remains the source of truth for `ready_to_claim_world_class`.",
|
|
]
|
|
)
|
|
return "\n".join(lines).rstrip() + "\n"
|
|
|
|
|
|
def main() -> None:
|
|
parser = argparse.ArgumentParser(description="Render collection preflight checks for pending world-class evidence.")
|
|
parser.add_argument("skill_dir", nargs="?", default=".")
|
|
parser.add_argument("--submissions-dir")
|
|
parser.add_argument("--output-json", default="reports/world_class_evidence_preflight.json")
|
|
parser.add_argument("--output-md", default="reports/world_class_evidence_preflight.md")
|
|
parser.add_argument("--generated-at", default=date.today().isoformat())
|
|
args = parser.parse_args()
|
|
|
|
skill_dir = Path(args.skill_dir).resolve()
|
|
submissions_dir = Path(args.submissions_dir).resolve() if args.submissions_dir else None
|
|
report = build_preflight(skill_dir, args.generated_at, submissions_dir=submissions_dir)
|
|
output_json = Path(args.output_json)
|
|
output_md = Path(args.output_md)
|
|
if not output_json.is_absolute():
|
|
output_json = skill_dir / output_json
|
|
if not output_md.is_absolute():
|
|
output_md = skill_dir / output_md
|
|
output_json.parent.mkdir(parents=True, exist_ok=True)
|
|
output_md.parent.mkdir(parents=True, exist_ok=True)
|
|
output_json.write_text(json.dumps(report, ensure_ascii=False, indent=2) + "\n", encoding="utf-8")
|
|
output_md.write_text(render_markdown(report), encoding="utf-8")
|
|
print(json.dumps(report, ensure_ascii=False, indent=2))
|
|
|
|
|
|
if __name__ == "__main__":
|
|
main()
|