{"schemaVersion":"developer.reits.tech/runner-capacity-evidence/v1","status":"G01_G02_DENIED_NO_ELIGIBLE_LANES","observedAt":"2026-07-29T04:47:01Z","observationMode":"READ_ONLY_LIVE_AUDIT_NO_REGISTRATION_NO_PROVISIONING","program":{"acceptedKnives":4,"totalKnives":36,"currentKnife":"D05","remainingIncludingCurrent":32,"remainingAfterAcceptance":31,"d05Accepted":false},"gateSummary":{"targetedGates":2,"satisfiedGates":0,"positiveAcceptanceReceipts":0,"observedDenialFacts":18,"decision":"DENY_AND_ESCALATE_TO_OWNERS"},"gates":[{"id":"D05-G01","name":"ORGANIZATION_LINUX_RUNNER_CAPACITY","owner":"PLATFORM_SRE","target":"2 organization-scoped Linux runners; concurrency one; single-use ephemeral boundary","observed":"1 台 Linux 候选、1 台在线；组织级 0、ephemeral 0、合格 0","positiveReceiptsObserved":0,"decision":"DENIED_NO_ORGANIZATION_EPHEMERAL_CAPACITY"},{"id":"D05-G02","name":"INDEPENDENT_MAC_RUNNER_LANE","owner":"MOBILE_PLATFORM","target":"1 online organization-scoped Mac runner with platform-safe labels and signed native job receipt","observed":"8 台 Mac 候选、6 台在线；全部仓库级可复用，部分标签混用；合格 0","positiveReceiptsObserved":0,"decision":"DENIED_NO_INDEPENDENT_MAC_LANE"}],"sources":[{"id":"gitea-live-api","type":"GITEA_READ_ONLY","status":"OBSERVED","observedAt":"2026-07-29T04:47:01Z","scope":"Gitea 1.25.4、管理 Runner、两个组织和 52 个仓库的 Runner 作用域","facts":["9 台已登记 Runner","7 台在线","0 台组织级 Runner","0 台 ephemeral Runner","0 台合格 Runner"]},{"id":"production-ec2-host","type":"SSH_READ_ONLY","status":"OBSERVED_DENIAL","observedAt":"2026-07-29T04:47:01Z","scope":"共享生产主机的标记、Portal、Controller 目录、Unit、进程与端口","facts":["/etc/reits-production-host 存在","Portal e1586aa7e1dd 在 8100 正常","Controller Unit、目录、Manifest、Readiness 与进程均不存在","8110 listener 为 0","UID 991 属于 redis6，GID 991 属于 nginx"]},{"id":"local-mac-host","type":"LOCAL_READ_ONLY","status":"STALE_NOT_REOBSERVED","observedAt":"2026-07-24T09:06:33Z","scope":"arm64/macOS/Xcode/Swift toolchain plus runner binary, process and launchd inspection on an unbound developer workstation","facts":["arm64 macOS 26.3.1 build 25D2128","Xcode 26.3 build 17C529 and Swift 6.2.4","0 act_runner binaries or processes","0 matching launchd runner services","host identity and isolation unbound"]},{"id":"aws-inventory","type":"LAST_KNOWN_READ_ONLY","status":"STALE_NOT_REOBSERVED","observedAt":"2026-07-20T11:40:44Z","scope":"上一份 ap-southeast-2 计算资源快照；当前工作区 AWS CLI 不可用","facts":["1 台共享生产实例","0 个 Auto Scaling Group","0 台可复用 CI 实例","CloudFormation inventory 仍被 IAM 阻断"]}],"lanes":{"linux":{"targetOnline":2,"registered":1,"online":1,"organizationScoped":0,"ephemeral":0,"eligible":0,"candidates":[{"id":2,"name":"reits-im-core-linux-arm64","scope":"repository:reits/im-core","status":"online","ephemeral":false,"admission":"DENIED"}]},"macos":{"targetOnline":1,"registered":8,"online":6,"organizationScoped":0,"ephemeral":0,"eligible":0,"candidates":[{"id":27,"name":"pp-mac-ios-runner-codex","scope":"repository:jx-im/im-client-ios-swift","status":"online","ephemeral":false,"admission":"DENIED"},{"id":76,"name":"mac-host-knowledge-runner","scope":"repository:reits/reits-knowledge","status":"online","ephemeral":false,"admission":"DENIED"},{"id":77,"name":"mac-host-ios-runner","scope":"repository:reits/matrix-x-chat-ios","status":"online","ephemeral":false,"admission":"DENIED"},{"id":89,"name":"mac-host-matrix-quant-im-ios-foundation","scope":"repository:reits/matrix-quant-im-ios","status":"online","ephemeral":false,"admission":"DENIED"},{"id":90,"name":"mac-host-matrix-quant-im-ios-gate","scope":"repository:reits/matrix-quant-im-ios","status":"online","ephemeral":false,"admission":"DENIED"},{"id":88,"name":"mac-host-miniapp-open-platform","scope":"repository:reits/miniapp-open-platform","status":"online","ephemeral":false,"admission":"DENIED"},{"id":78,"name":"mac-gate-priority-runner","scope":"repository:reits/matrix-x-chat-ios","status":"offline","ephemeral":false,"admission":"DENIED"},{"id":1,"name":"pp-mac-ios-runner","scope":"repository:jx-im/im-client-ios-swift","status":"offline","ephemeral":false,"admission":"DENIED"}]}},"receiptRequirements":[{"gate":"D05-G01","id":"LINUX-01","requirement":"two organization runner identities visible from Gitea organization scope","status":"MISSING"},{"gate":"D05-G01","id":"LINUX-02","requirement":"ephemeral=true and one-job concurrency attestation","status":"MISSING"},{"gate":"D05-G01","id":"LINUX-03","requirement":"dedicated compute and no production route attestation","status":"MISSING"},{"gate":"D05-G01","id":"LINUX-04","requirement":"successful required gate from at least two repositories","status":"MISSING"},{"gate":"D05-G01","id":"LINUX-05","requirement":"signed retirement and destroyed-workspace receipt after one job","status":"MISSING"},{"gate":"D05-G02","id":"MAC-01","requirement":"online independent Mac runner identity at organization scope","status":"MISSING"},{"gate":"D05-G02","id":"MAC-02","requirement":"macOS-only platform labels and reviewed architecture","status":"MISSING"},{"gate":"D05-G02","id":"MAC-03","requirement":"dedicated host, keychain and network isolation attestation","status":"MISSING"},{"gate":"D05-G02","id":"MAC-04","requirement":"Swift package and iOS policy jobs complete on the Mac lane","status":"MISSING"},{"gate":"D05-G02","id":"MAC-05","requirement":"signed cleanup and native job receipt bound to exact runner generation","status":"MISSING"}],"changeQueue":[],"operatorPlan":{"nextAction":"完成 D05-T02/T03 Owner 前置条件，部署隔离 Linux lane，再执行两条原生 Mac 资格包并收集十项正向回执。","forbiddenActions":["Do not widen the im-core runner to organization scope.","Do not run CI on the shared production EC2.","Do not treat an online wrong-scope reusable Mac registration or a historical green job as an independent native lane.","Do not mark G01 or G02 satisfied from inventory booleans alone."]},"safetyTruth":{"readOnlyAuditPerformed":true,"credentialsRecorded":false,"runnerRegistrationCalls":0,"giteaMutationCalls":0,"awsMutationCalls":0,"serviceChanges":0,"listenerStarts":0,"externalWritesExecuted":0,"paidResourcesCreated":false,"g01Satisfied":false,"g02Satisfied":false,"d05Accepted":false},"verification":{"status":"PASS_READ_ONLY_LIVE_OBSERVATION","targetedGates":2,"satisfiedGates":0,"registeredRunners":3,"onlineRunners":1,"eligibleRunners":0,"positiveAcceptanceReceipts":0,"missingReceiptRequirements":10,"externalWritesExecuted":0,"paidResourcesCreated":false},"discovery":{"workbench":"/release-foundation#runner-capacity-evidence","schema":"/schemas/runner-capacity-evidence.v1.schema.json","liveAudit":"/api/runner-audit","capacityPolicy":"/api/runner-capacity","d05Closure":"/api/runner-factory/controller/d05-acceptance-closure"}}