{"schemaVersion":"developer.reits.tech/runner-live-audit/v1","status":"DENIED_NO_ELIGIBLE_CAPACITY","observedAt":"2026-07-29T04:47:01Z","sources":{"gitea":{"apiBase":"https://gitea.reits.tech/api/v1","observedAt":"2026-07-29T04:47:01Z","adminRunners":9,"organizationRunners":0,"repositoriesScanned":52,"credentialBoundary":"本地 Git credential helper，仅用于只读 API；凭据值未记录","secretValuesRecorded":false},"aws":{"observedAt":"2026-07-20T11:40:44Z","freshness":"STALE_NOT_REOBSERVED_AWS_CLI_UNAVAILABLE","account":"668891722825","principal":"arn:aws:iam::668891722825:user/cc","region":"ap-southeast-2","runningInstances":1,"autoScalingGroups":0,"cloudFormationInventory":"BLOCKED_IAM","productionInstance":{"id":"i-09a6dae0352cff5af","name":"CC","type":"c8i-flex.xlarge","publicIp":"54.206.197.2","runnerEligible":false,"reason":"共享生产故障域承载 Portal、Gitea、业务、数据库与日志，禁止复用为 CI 或 Controller 目标。"}}},"summary":{"registered":9,"online":7,"eligible":0,"organizationOnline":0,"activeCandidates":0,"pendingStatuses":0,"successfulStatuses":0,"failedStatuses":0,"reusableAwsInstances":0},"runners":[{"id":27,"name":"pp-mac-ios-runner-codex","platform":"macos","architecture":"unreported","status":"online","busy":false,"ephemeral":false,"repository":"jx-im/im-client-ios-swift","labels":["macos-latest","self-hosted","macOS"],"scope":"repository","scopeEvidence":"只在 jx-im/im-client-ios-swift 可见；本次遍历 26 个 reits 仓与 26 个 jx-im 仓，两个组织清单均为 0。","admission":"DENIED","criteria":[{"id":"online","label":"Runner 在线","status":"PASS","evidence":"Gitea 管理清单报告 online / idle。"},{"id":"scope","label":"组织级作用域","status":"FAIL","evidence":"仅在 jx-im/im-client-ios-swift 仓库作用域可见；reits 与 jx-im 组织级清单均为 0。"},{"id":"ephemeral","label":"单次短生命周期","status":"FAIL","evidence":"Gitea 报告 ephemeral=false，不能证明单任务后销毁。"},{"id":"labels","label":"平台标签一致","status":"PASS","evidence":"平台 macos；标签 macos-latest, self-hosted, macOS。"},{"id":"isolation","label":"独立计算与网络证明","status":"MISSING","evidence":"没有绑定专用主机、凭据销毁、工作区销毁和生产网络隔离回执。"}]},{"id":76,"name":"mac-host-knowledge-runner","platform":"macos","architecture":"unreported","status":"online","busy":false,"ephemeral":false,"repository":"reits/reits-knowledge","labels":["ubuntu-latest","macos-latest"],"scope":"repository","scopeEvidence":"只在 reits/reits-knowledge 可见；本次遍历 26 个 reits 仓与 26 个 jx-im 仓，两个组织清单均为 0。","admission":"DENIED","criteria":[{"id":"online","label":"Runner 在线","status":"PASS","evidence":"Gitea 管理清单报告 online / idle。"},{"id":"scope","label":"组织级作用域","status":"FAIL","evidence":"仅在 reits/reits-knowledge 仓库作用域可见；reits 与 jx-im 组织级清单均为 0。"},{"id":"ephemeral","label":"单次短生命周期","status":"FAIL","evidence":"Gitea 报告 ephemeral=false，不能证明单任务后销毁。"},{"id":"labels","label":"平台标签一致","status":"FAIL","evidence":"平台 macos；标签 ubuntu-latest, macos-latest。"},{"id":"isolation","label":"独立计算与网络证明","status":"MISSING","evidence":"没有绑定专用主机、凭据销毁、工作区销毁和生产网络隔离回执。"}]},{"id":77,"name":"mac-host-ios-runner","platform":"macos","architecture":"unreported","status":"online","busy":true,"ephemeral":false,"repository":"reits/matrix-x-chat-ios","labels":["ubuntu-latest","macos-latest","self-hosted","macOS"],"scope":"repository","scopeEvidence":"只在 reits/matrix-x-chat-ios 可见；本次遍历 26 个 reits 仓与 26 个 jx-im 仓，两个组织清单均为 0。","admission":"DENIED","criteria":[{"id":"online","label":"Runner 在线","status":"PASS","evidence":"Gitea 管理清单报告 online / busy。"},{"id":"scope","label":"组织级作用域","status":"FAIL","evidence":"仅在 reits/matrix-x-chat-ios 仓库作用域可见；reits 与 jx-im 组织级清单均为 0。"},{"id":"ephemeral","label":"单次短生命周期","status":"FAIL","evidence":"Gitea 报告 ephemeral=false，不能证明单任务后销毁。"},{"id":"labels","label":"平台标签一致","status":"FAIL","evidence":"平台 macos；标签 ubuntu-latest, macos-latest, self-hosted, macOS。"},{"id":"isolation","label":"独立计算与网络证明","status":"MISSING","evidence":"没有绑定专用主机、凭据销毁、工作区销毁和生产网络隔离回执。"}]},{"id":2,"name":"reits-im-core-linux-arm64","platform":"linux","architecture":"arm64-name-declared","status":"online","busy":false,"ephemeral":false,"repository":"reits/im-core","labels":["ubuntu-latest","ubuntu-24.04","ubuntu-22.04"],"scope":"repository","scopeEvidence":"只在 reits/im-core 可见；本次遍历 26 个 reits 仓与 26 个 jx-im 仓，两个组织清单均为 0。","admission":"DENIED","criteria":[{"id":"online","label":"Runner 在线","status":"PASS","evidence":"Gitea 管理清单报告 online / idle。"},{"id":"scope","label":"组织级作用域","status":"FAIL","evidence":"仅在 reits/im-core 仓库作用域可见；reits 与 jx-im 组织级清单均为 0。"},{"id":"ephemeral","label":"单次短生命周期","status":"FAIL","evidence":"Gitea 报告 ephemeral=false，不能证明单任务后销毁。"},{"id":"labels","label":"平台标签一致","status":"PASS","evidence":"平台 linux；标签 ubuntu-latest, ubuntu-24.04, ubuntu-22.04。"},{"id":"isolation","label":"独立计算与网络证明","status":"MISSING","evidence":"没有绑定专用主机、凭据销毁、工作区销毁和生产网络隔离回执。"}]},{"id":89,"name":"mac-host-matrix-quant-im-ios-foundation","platform":"macos","architecture":"unreported","status":"online","busy":false,"ephemeral":false,"repository":"reits/matrix-quant-im-ios","labels":["macos-latest"],"scope":"repository","scopeEvidence":"只在 reits/matrix-quant-im-ios 可见；本次遍历 26 个 reits 仓与 26 个 jx-im 仓，两个组织清单均为 0。","admission":"DENIED","criteria":[{"id":"online","label":"Runner 在线","status":"PASS","evidence":"Gitea 管理清单报告 online / idle。"},{"id":"scope","label":"组织级作用域","status":"FAIL","evidence":"仅在 reits/matrix-quant-im-ios 仓库作用域可见；reits 与 jx-im 组织级清单均为 0。"},{"id":"ephemeral","label":"单次短生命周期","status":"FAIL","evidence":"Gitea 报告 ephemeral=false，不能证明单任务后销毁。"},{"id":"labels","label":"平台标签一致","status":"PASS","evidence":"平台 macos；标签 macos-latest。"},{"id":"isolation","label":"独立计算与网络证明","status":"MISSING","evidence":"没有绑定专用主机、凭据销毁、工作区销毁和生产网络隔离回执。"}]},{"id":90,"name":"mac-host-matrix-quant-im-ios-gate","platform":"macos","architecture":"unreported","status":"online","busy":false,"ephemeral":false,"repository":"reits/matrix-quant-im-ios","labels":["ubuntu-latest"],"scope":"repository","scopeEvidence":"只在 reits/matrix-quant-im-ios 可见；本次遍历 26 个 reits 仓与 26 个 jx-im 仓，两个组织清单均为 0。","admission":"DENIED","criteria":[{"id":"online","label":"Runner 在线","status":"PASS","evidence":"Gitea 管理清单报告 online / idle。"},{"id":"scope","label":"组织级作用域","status":"FAIL","evidence":"仅在 reits/matrix-quant-im-ios 仓库作用域可见；reits 与 jx-im 组织级清单均为 0。"},{"id":"ephemeral","label":"单次短生命周期","status":"FAIL","evidence":"Gitea 报告 ephemeral=false，不能证明单任务后销毁。"},{"id":"labels","label":"平台标签一致","status":"FAIL","evidence":"平台 macos；标签 ubuntu-latest。"},{"id":"isolation","label":"独立计算与网络证明","status":"MISSING","evidence":"没有绑定专用主机、凭据销毁、工作区销毁和生产网络隔离回执。"}]},{"id":88,"name":"mac-host-miniapp-open-platform","platform":"macos","architecture":"unreported","status":"online","busy":false,"ephemeral":false,"repository":"reits/miniapp-open-platform","labels":["ubuntu-latest"],"scope":"repository","scopeEvidence":"只在 reits/miniapp-open-platform 可见；本次遍历 26 个 reits 仓与 26 个 jx-im 仓，两个组织清单均为 0。","admission":"DENIED","criteria":[{"id":"online","label":"Runner 在线","status":"PASS","evidence":"Gitea 管理清单报告 online / idle。"},{"id":"scope","label":"组织级作用域","status":"FAIL","evidence":"仅在 reits/miniapp-open-platform 仓库作用域可见；reits 与 jx-im 组织级清单均为 0。"},{"id":"ephemeral","label":"单次短生命周期","status":"FAIL","evidence":"Gitea 报告 ephemeral=false，不能证明单任务后销毁。"},{"id":"labels","label":"平台标签一致","status":"FAIL","evidence":"平台 macos；标签 ubuntu-latest。"},{"id":"isolation","label":"独立计算与网络证明","status":"MISSING","evidence":"没有绑定专用主机、凭据销毁、工作区销毁和生产网络隔离回执。"}]},{"id":78,"name":"mac-gate-priority-runner","platform":"macos","architecture":"unreported","status":"offline","busy":false,"ephemeral":false,"repository":"reits/matrix-x-chat-ios","labels":["reits-gate-priority"],"scope":"repository","scopeEvidence":"只在 reits/matrix-x-chat-ios 可见；本次遍历 26 个 reits 仓与 26 个 jx-im 仓，两个组织清单均为 0。","admission":"DENIED","criteria":[{"id":"online","label":"Runner 在线","status":"FAIL","evidence":"Gitea 管理清单报告 offline / idle。"},{"id":"scope","label":"组织级作用域","status":"FAIL","evidence":"仅在 reits/matrix-x-chat-ios 仓库作用域可见；reits 与 jx-im 组织级清单均为 0。"},{"id":"ephemeral","label":"单次短生命周期","status":"FAIL","evidence":"Gitea 报告 ephemeral=false，不能证明单任务后销毁。"},{"id":"labels","label":"平台标签一致","status":"FAIL","evidence":"平台 macos；标签 reits-gate-priority。"},{"id":"isolation","label":"独立计算与网络证明","status":"MISSING","evidence":"没有绑定专用主机、凭据销毁、工作区销毁和生产网络隔离回执。"}]},{"id":1,"name":"pp-mac-ios-runner","platform":"macos","architecture":"unreported","status":"offline","busy":false,"ephemeral":false,"repository":"jx-im/im-client-ios-swift","labels":["macos-latest","self-hosted","macOS","ubuntu-latest","ubuntu-24.04","ubuntu-22.04"],"scope":"repository","scopeEvidence":"只在 jx-im/im-client-ios-swift 可见；本次遍历 26 个 reits 仓与 26 个 jx-im 仓，两个组织清单均为 0。","admission":"DENIED","criteria":[{"id":"online","label":"Runner 在线","status":"FAIL","evidence":"Gitea 管理清单报告 offline / idle。"},{"id":"scope","label":"组织级作用域","status":"FAIL","evidence":"仅在 jx-im/im-client-ios-swift 仓库作用域可见；reits 与 jx-im 组织级清单均为 0。"},{"id":"ephemeral","label":"单次短生命周期","status":"FAIL","evidence":"Gitea 报告 ephemeral=false，不能证明单任务后销毁。"},{"id":"labels","label":"平台标签一致","status":"FAIL","evidence":"平台 macos；标签 macos-latest, self-hosted, macOS, ubuntu-latest, ubuntu-24.04, ubuntu-22.04。"},{"id":"isolation","label":"独立计算与网络证明","status":"MISSING","evidence":"没有绑定专用主机、凭据销毁、工作区销毁和生产网络隔离回执。"}]}],"candidateQueues":[],"admissionPolicy":["Runner 必须在 reits 组织作用域在线。","Runner 必须是 ephemeral、并发度一，并在每个任务后销毁工作区和凭据。","Runner 平台、架构与标签必须一致并绑定受审工具链。","必须绑定专用计算、无生产路由和无云凭据证明。","生产主机、Docker socket、可复用注册凭据和宽泛私网路由均不得存在。"],"decision":{"requiresCostApproval":true,"nextAction":"先完成 D05-T02 独立 AWS 验证身份和 D05-T03 Product Owner + FinOps 双签成本批准，再部署并验收组织级 Linux 与独立 Mac lane。","forbiddenAction":"不得把 7 台在线仓库级可复用 Runner 提升为组织级合格容量，也不得在共享生产 EC2 上运行 CI 或 Controller。"},"discovery":{"workbench":"/release-foundation","schema":"/schemas/runner-live-audit.v1.schema.json","capacity":"/api/runner-capacity","capacityEvidence":"/api/runner-capacity/evidence","controllerReadinessEvidence":"/api/runner-controller/readiness-evidence","factory":"/api/runner-factory","releaseUnits":"/api/release-units"}}