{ "metadata": { "generated_at": "2026-06-03T08:00:30.625547+00:00", "stage": "HRMS_FEISHU_READONLY_TOKEN_PERMISSION_CHECK_PACK_Z1" }, "snapshot_tables": { "feishu_readonly_snapshot_runs": { "exists": false, "columns": [], "row_count": null }, "feishu_user_snapshots": { "exists": false, "columns": [], "row_count": null }, "feishu_department_snapshots": { "exists": false, "columns": [], "row_count": null } }, "snapshot_table_readiness": false, "readonly_refresh_service_files": [ "/root/.openclaw/workspace/talent-review-system/backend/main.py", "/root/.openclaw/workspace/talent-review-system/backend/services/feishu_readonly_directory_client.py", "/root/.openclaw/workspace/talent-review-system/backend/services/feishu_snapshot_refresh_service.py", "/root/.openclaw/workspace/talent-review-system/backend/services/feishu_token_cache_metadata_validator.py", "/root/.openclaw/workspace/talent-review-system/docs/roadmap/CONFIG_GOVERNANCE_ASSET_AUDIT.md", "/root/.openclaw/workspace/talent-review-system/docs/roadmap/HRMS_PRODUCT_ARCHITECTURE_RESET_AUDIT.md", "/root/.openclaw/workspace/talent-review-system/docs/roadmap/algorithm_hardcoded_rules_refactor_preview.json", "/root/.openclaw/workspace/talent-review-system/docs/roadmap/assessment_to_org_canvas_bridge_pack_r.json", "/root/.openclaw/workspace/talent-review-system/docs/roadmap/hrms_80_percent_progress_review_v1.json", "/root/.openclaw/workspace/talent-review-system/docs/roadmap/hrms_feishu_real_user_master_data_readonly_sync_prep_pack_z.json", "/root/.openclaw/workspace/talent-review-system/docs/roadmap/hrms_org_canvas_drag_drop_feishu_mapping_remediation_preview_v1.json", "/root/.openclaw/workspace/talent-review-system/docs/roadmap/hrms_org_canvas_drag_drop_feishu_mapping_remediation_preview_v1.md", "/root/.openclaw/workspace/talent-review-system/docs/roadmap/hrms_org_canvas_feishu_readonly_client_provider_code_apply_v1.json", "/root/.openclaw/workspace/talent-review-system/docs/roadmap/hrms_org_canvas_feishu_readonly_client_provider_code_preview_v1.json", "/root/.openclaw/workspace/talent-review-system/docs/roadmap/hrms_org_canvas_feishu_readonly_client_provider_code_preview_v1.md", "/root/.openclaw/workspace/talent-review-system/docs/roadmap/hrms_org_canvas_feishu_readonly_client_readiness_preview_v1.json", "/root/.openclaw/workspace/talent-review-system/docs/roadmap/hrms_org_canvas_feishu_readonly_client_readiness_preview_v1.md", "/root/.openclaw/workspace/talent-review-system/docs/roadmap/hrms_org_canvas_feishu_readonly_client_readiness_recheck_v1.json", "/root/.openclaw/workspace/talent-review-system/docs/roadmap/hrms_org_canvas_feishu_readonly_safety_scan_token_metadata_patch_apply_v1.json", "/root/.openclaw/workspace/talent-review-system/docs/roadmap/hrms_org_canvas_feishu_readonly_snapshot_refresh_apply_retry_v1.json", "/root/.openclaw/workspace/talent-review-system/docs/roadmap/hrms_org_canvas_feishu_readonly_snapshot_refresh_apply_retry_v1.md", "/root/.openclaw/workspace/talent-review-system/docs/roadmap/hrms_org_canvas_feishu_readonly_snapshot_refresh_apply_v1.json", "/root/.openclaw/workspace/talent-review-system/docs/roadmap/hrms_org_canvas_feishu_readonly_snapshot_refresh_apply_v1.md", "/root/.openclaw/workspace/talent-review-system/docs/roadmap/hrms_org_canvas_feishu_readonly_snapshot_refresh_preview_v1.json", "/root/.openclaw/workspace/talent-review-system/docs/roadmap/hrms_org_canvas_feishu_readonly_snapshot_refresh_preview_v1.md", "/root/.openclaw/workspace/talent-review-system/docs/roadmap/hrms_org_canvas_feishu_readonly_snapshot_schema_apply_v1.json", "/root/.openclaw/workspace/talent-review-system/docs/roadmap/hrms_org_canvas_feishu_readonly_snapshot_schema_apply_v1.md", "/root/.openclaw/workspace/talent-review-system/docs/roadmap/hrms_org_canvas_feishu_readonly_snapshot_schema_preview_v1.json", "/root/.openclaw/workspace/talent-review-system/docs/roadmap/hrms_org_canvas_feishu_readonly_snapshot_schema_preview_v1.md", "/root/.openclaw/workspace/talent-review-system/docs/roadmap/hrms_product_architecture_reset_audit.json", "/root/.openclaw/workspace/talent-review-system/docs/roadmap/position_capability_db_sandbox_runthrough_apply_prep.json", "/var/www/talent-review/hrms-feishu-real-user-master-data-sync-prep.html", "/var/www/talent-review/org-canvas-drag-drop-feishu-department-candidate-review.html", "/var/www/talent-review/org-canvas-drag-drop-feishu-identity-candidate-review.html", "/var/www/talent-review/org-canvas-drag-drop-feishu-mapping-approval-card.html", "/var/www/talent-review/org-canvas-drag-drop-feishu-mapping-gap-analysis.html", "/var/www/talent-review/org-canvas-drag-drop-feishu-mapping-remediation-options.html", "/var/www/talent-review/org-canvas-drag-drop-feishu-mapping-remediation-preview.html", "/var/www/talent-review/org-canvas-drag-drop-feishu-mapping-rollback-plan.html", "/var/www/talent-review/org-canvas-feishu-readonly-api-scope-review.html", "/var/www/talent-review/org-canvas-feishu-readonly-client-approval-card.html", "/var/www/talent-review/org-canvas-feishu-readonly-client-code-rollback-plan.html", "/var/www/talent-review/org-canvas-feishu-readonly-client-provider-code-apply-result.html", "/var/www/talent-review/org-canvas-feishu-readonly-client-provider-code-preview.html", "/var/www/talent-review/org-canvas-feishu-readonly-client-readiness-preview.html", "/var/www/talent-review/org-canvas-feishu-readonly-client-readiness-recheck-2.html", "/var/www/talent-review/org-canvas-feishu-readonly-client-readiness-recheck.html", "/var/www/talent-review/org-canvas-feishu-readonly-client-remediation-options.html", "/var/www/talent-review/org-canvas-feishu-readonly-client-safety-guardrails.html", "/var/www/talent-review/org-canvas-feishu-readonly-code-patch-plan.html", "/var/www/talent-review/org-canvas-feishu-readonly-contract-check.html", "/var/www/talent-review/org-canvas-feishu-readonly-department-snapshot-schema.html", "/var/www/talent-review/org-canvas-feishu-readonly-field-scope.html", "/var/www/talent-review/org-canvas-feishu-readonly-mask-policy.html", "/var/www/talent-review/org-canvas-feishu-readonly-patch-file-plan.html", "/var/www/talent-review/org-canvas-feishu-readonly-patch-test-plan.html", "/var/www/talent-review/org-canvas-feishu-readonly-provider-architecture.html", "/var/www/talent-review/org-canvas-feishu-readonly-provider-health-check.html", "/var/www/talent-review/org-canvas-feishu-readonly-refresh-acceptance-checklist.html", "/var/www/talent-review/org-canvas-feishu-readonly-refresh-apply-2-approval-card.html", "/var/www/talent-review/org-canvas-feishu-readonly-refresh-approval-card.html", "/var/www/talent-review/org-canvas-feishu-readonly-refresh-retry-approval-card.html", "/var/www/talent-review/org-canvas-feishu-readonly-refresh-rollback-plan.html", "/var/www/talent-review/org-canvas-feishu-readonly-run-log-schema.html", "/var/www/talent-review/org-canvas-feishu-readonly-safety-boundary.html", "/var/www/talent-review/org-canvas-feishu-readonly-safety-scan-token-metadata-patch-apply-result.html", "/var/www/talent-review/org-canvas-feishu-readonly-schema-approval-card.html", "/var/www/talent-review/org-canvas-feishu-readonly-schema-impact-preview.html", "/var/www/talent-review/org-canvas-feishu-readonly-schema-rollback-plan.html", "/var/www/talent-review/org-canvas-feishu-readonly-snapshot-client-contract.html", "/var/www/talent-review/org-canvas-feishu-readonly-snapshot-refresh-apply-result.html", "/var/www/talent-review/org-canvas-feishu-readonly-snapshot-refresh-preview.html", "/var/www/talent-review/org-canvas-feishu-readonly-snapshot-schema-apply-result.html", "/var/www/talent-review/org-canvas-feishu-readonly-snapshot-schema-preview.html", "/var/www/talent-review/org-canvas-feishu-readonly-token-provider-contract.html", "/var/www/talent-review/org-canvas-feishu-readonly-token-refresh-safety-boundary.html", "/var/www/talent-review/org-canvas-feishu-readonly-user-snapshot-schema.html", "/var/www/talent-review/outputs/assessment_mvp_snapshot.json", "/var/www/talent-review/outputs/assessment_to_org_canvas_bridge_pack_r_summary_v1.json", "/var/www/talent-review/outputs/employee_profile_mvp_snapshot.json", "/var/www/talent-review/outputs/hrms_80_percent_progress_review_v1.json", "/var/www/talent-review/outputs/hrms_80_percent_review_sop_v1.json", "/var/www/talent-review/outputs/hrms_engineering_audit_center_index_v1.json", "/var/www/talent-review/outputs/hrms_feishu_real_user_master_data_readonly_readiness_v1.json", "/var/www/talent-review/outputs/hrms_feishu_real_user_master_data_sync_prep_summary_v1.json", "/var/www/talent-review/outputs/hrms_feishu_real_user_staging_plan_v1.json", "/var/www/talent-review/outputs/org_canvas_drag_drop_feishu_department_candidate_review_FD8E34D10.json", "/var/www/talent-review/outputs/org_canvas_drag_drop_feishu_identity_candidate_review_FD8E34D10.json", "/var/www/talent-review/outputs/org_canvas_drag_drop_feishu_mapping_approval_card_FD8E34D10.json", "/var/www/talent-review/outputs/org_canvas_drag_drop_feishu_mapping_gap_analysis_FD8E34D10.json", "/var/www/talent-review/outputs/org_canvas_drag_drop_feishu_mapping_remediation_options_FD8E34D10.json", "/var/www/talent-review/outputs/org_canvas_drag_drop_feishu_mapping_remediation_preview_FD8E34D10.json", "/var/www/talent-review/outputs/org_canvas_drag_drop_feishu_mapping_remediation_sop_v1.json", "/var/www/talent-review/outputs/org_canvas_drag_drop_feishu_mapping_rollback_plan_FD8E34D10.json", "/var/www/talent-review/outputs/org_canvas_feishu_readonly_api_scope_review_v1.json", "/var/www/talent-review/outputs/org_canvas_feishu_readonly_client_approval_card_v1.json", "/var/www/talent-review/outputs/org_canvas_feishu_readonly_client_code_review_v1.json", "/var/www/talent-review/outputs/org_canvas_feishu_readonly_client_code_rollback_plan_v1.json", "/var/www/talent-review/outputs/org_canvas_feishu_readonly_client_provider_code_apply_audit_v1.json", "/var/www/talent-review/outputs/org_canvas_feishu_readonly_client_provider_code_apply_execution_summary_v1.json", "/var/www/talent-review/outputs/org_canvas_feishu_readonly_client_provider_code_apply_result_v1.json", "/var/www/talent-review/outputs/org_canvas_feishu_readonly_client_provider_code_preview_execution_summary_v1.json", "/var/www/talent-review/outputs/org_canvas_feishu_readonly_client_provider_code_preview_sop_v1.json", "/var/www/talent-review/outputs/org_canvas_feishu_readonly_client_provider_code_preview_v1.json", "/var/www/talent-review/outputs/org_canvas_feishu_readonly_client_readiness_execution_summary_v1.json", "/var/www/talent-review/outputs/org_canvas_feishu_readonly_client_readiness_preview_v1.json", "/var/www/talent-review/outputs/org_canvas_feishu_readonly_client_readiness_recheck_execution_summary_v1.json", "/var/www/talent-review/outputs/org_canvas_feishu_readonly_client_readiness_recheck_v1.json", "/var/www/talent-review/outputs/org_canvas_feishu_readonly_client_readiness_sop_v1.json", "/var/www/talent-review/outputs/org_canvas_feishu_readonly_client_remediation_options_v1.json", "/var/www/talent-review/outputs/org_canvas_feishu_readonly_client_rollback_plan_v1.json", "/var/www/talent-review/outputs/org_canvas_feishu_readonly_client_safety_guardrails_v1.json", "/var/www/talent-review/outputs/org_canvas_feishu_readonly_code_patch_plan_v1.json", "/var/www/talent-review/outputs/org_canvas_feishu_readonly_config_safety_review_v1.json", "/var/www/talent-review/outputs/org_canvas_feishu_readonly_contract_check_v1.json", "/var/www/talent-review/outputs/org_canvas_feishu_readonly_department_snapshot_schema_v1.json", "/var/www/talent-review/outputs/org_canvas_feishu_readonly_field_scope_v1.json", "/var/www/talent-review/outputs/org_canvas_feishu_readonly_mask_policy_v1.json", "/var/www/talent-review/outputs/org_canvas_feishu_readonly_patch_file_plan_v1.json", "/var/www/talent-review/outputs/org_canvas_feishu_readonly_patch_test_plan_v1.json", "/var/www/talent-review/outputs/org_canvas_feishu_readonly_provider_architecture_v1.json", "/var/www/talent-review/outputs/org_canvas_feishu_readonly_provider_health_check_v1.json", "/var/www/talent-review/outputs/org_canvas_feishu_readonly_refresh_acceptance_checklist_v1.json", "/var/www/talent-review/outputs/org_canvas_feishu_readonly_refresh_apply_2_approval_card_v1.json", "/var/www/talent-review/outputs/org_canvas_feishu_readonly_refresh_approval_card_v1.json", "/var/www/talent-review/outputs/org_canvas_feishu_readonly_refresh_retry_approval_card_v1.json", "/var/www/talent-review/outputs/org_canvas_feishu_readonly_refresh_rollback_plan_v1.json", "/var/www/talent-review/outputs/org_canvas_feishu_readonly_run_log_schema_v1.json", "/var/www/talent-review/outputs/org_canvas_feishu_readonly_safety_boundary_v1.json", "/var/www/talent-review/outputs/org_canvas_feishu_readonly_safety_scan_token_metadata_patch_apply_execution_summary_v1.json", "/var/www/talent-review/outputs/org_canvas_feishu_readonly_safety_scan_token_metadata_patch_apply_result_v1.json", "/var/www/talent-review/outputs/org_canvas_feishu_readonly_safety_scan_token_metadata_patch_execution_summary_v1.json", "/var/www/talent-review/outputs/org_canvas_feishu_readonly_schema_approval_card_v1.json", "/var/www/talent-review/outputs/org_canvas_feishu_readonly_schema_impact_preview_v1.json", "/var/www/talent-review/outputs/org_canvas_feishu_readonly_schema_rollback_plan_v1.json", "/var/www/talent-review/outputs/org_canvas_feishu_readonly_snapshot_client_contract_v1.json", "/var/www/talent-review/outputs/org_canvas_feishu_readonly_snapshot_refresh_apply_result_v1.json", "/var/www/talent-review/outputs/org_canvas_feishu_readonly_snapshot_refresh_audit_v1.json", "/var/www/talent-review/outputs/org_canvas_feishu_readonly_snapshot_refresh_preview_v1.json", "/var/www/talent-review/outputs/org_canvas_feishu_readonly_snapshot_refresh_rollback_v1.json", "/var/www/talent-review/outputs/org_canvas_feishu_readonly_snapshot_refresh_sop_v1.json", "/var/www/talent-review/outputs/org_canvas_feishu_readonly_snapshot_schema_apply_audit_v1.json", "/var/www/talent-review/outputs/org_canvas_feishu_readonly_snapshot_schema_apply_result_v1.json", "/var/www/talent-review/outputs/org_canvas_feishu_readonly_snapshot_schema_apply_rollback_v1.json", "/var/www/talent-review/outputs/org_canvas_feishu_readonly_snapshot_schema_preview_v1.json", "/var/www/talent-review/outputs/org_canvas_feishu_readonly_snapshot_schema_sop_v1.json", "/var/www/talent-review/outputs/org_canvas_feishu_readonly_token_cache_expired_remediation_sop_v1.json", "/var/www/talent-review/outputs/org_canvas_feishu_readonly_token_cache_review_v1.json", "/var/www/talent-review/outputs/org_canvas_feishu_readonly_token_provider_contract_v1.json", "/var/www/talent-review/outputs/org_canvas_feishu_readonly_token_refresh_safety_boundary_v1.json", "/var/www/talent-review/outputs/org_canvas_feishu_readonly_user_snapshot_schema_v1.json", "/var/www/talent-review/outputs/permission_admin_mvp_snapshot.json" ], "readonly_refresh_service_readiness": true, "readiness_endpoints": { "/api/feishu-readonly-snapshot/readiness": { "url": "https://hrms.yuechongjia.com/api/feishu-readonly-snapshot/readiness", "http_status": "200", "safe_metadata_only_probe": true, "body_type": "json", "top_level_keys": [ "can_enter_refresh_retry_approval", "client_handle", "data_write", "feishu_api_call", "hard_blocks", "job_created", "mapping_created", "next_gate", "ok", "production_writeback", "provider_installed", "refresh_executed", "safety_scan", "safety_scanner_installed", "secret_read", "snapshot_refreshed", "snapshot_schema", "snapshot_schema_ready", "token_cache_detail", "token_cache_status", "token_metadata_status", "token_output", "warnings", "write_endpoint_risk_status" ], "sanitized_metadata": { "ok": true, "provider_installed": true, "safety_scanner_installed": true, "token_cache_status": "[REDACTED_METADATA_ONLY]", "token_metadata_status": "[REDACTED_METADATA_ONLY]", "token_cache_detail": "[REDACTED_METADATA_ONLY]", "client_handle": { "provider_installed": true, "status": "[REDACTED_METADATA_ONLY]", "token_value_exposed": "[REDACTED_METADATA_ONLY]", "secret_read": "[REDACTED_METADATA_ONLY]", "token_output": "[REDACTED_METADATA_ONLY]", "feishu_api_call": false, "reason": "[REDACTED_METADATA_ONLY]" }, "snapshot_schema_ready": true, "snapshot_schema": { "snapshot_schema_ready": true, "tables": { "feishu_readonly_snapshot_runs": true, "feishu_user_snapshots": true, "feishu_department_snapshots": true }, "data_write": false, "checked_at": "2026-06-03T08:00:38.649069+00:00" }, "write_endpoint_risk_status": "false_positive_from_denylist_literals", "safety_scan": { "write_endpoint_risk_status": "false_positive_from_denylist_literals", "findings": [ { "file": "backend/services/feishu_readonly_directory_client.py", "line": 16, "classification": "false_positive_from_denylist_literals", "risk_level": "low", "context": "literal_context", "preview": "\"PATCH\"," }, { "file": "backend/services/feishu_readonly_directory_client.py", "line": 17, "classification": "false_positive_from_denylist_literals", "risk_level": "low", "context": "literal_context", "preview": "\"POST\"," }, { "file": "backend/services/feishu_readonly_directory_client.py", "line": 18, "classification": "false_positive_from_denylist_literals", "risk_level": "low", "context": "literal_context", "preview": "\"PUT\"," }, { "file": "backend/services/feishu_readonly_directory_client.py", "line": 19, "classification": "false_positive_from_denylist_literals", "risk_level": "low", "context": "literal_context", "preview": "\"DELETE\"," }, { "file": "backend/services/feishu_readonly_directory_client.py", "line": 22, "classification": "false_positive_from_denylist_literals", "risk_level": "low", "context": "literal_context", "preview": "\"/writeback\"," }, { "file": "backend/services/feishu_readonly_directory_client.py", "line": 23, "classification": "false_positive_from_denylist_literals", "risk_level": "low", "context": "literal_context", "preview": "\"/users/batch\"," }, { "file": "backend/services/feishu_snapshot_refresh_service.py", "line": 101, "classification": "false_positive_from_denylist_literals", "risk_level": "low", "context": "literal_context", "preview": "\"production_writeback\": False," }, { "file": "backend/services/feishu_snapshot_refresh_service.py", "line": 111, "classification": "false_positive_from_denylist_literals", "risk_level": "low", "context": "literal_context", "preview": "\"denylist\": [\"user update\", \"department update\", \"writeback\", \"any write API\"]," }, { "file": "backend/services/feishu_snapshot_refresh_service.py", "line": 114, "classification": "false_positive_from_denylist_literals", "risk_level": "low", "context": "literal_context", "preview": "\"mapping_job_production_writeback_boundaries\": {" }, { "file": "backend/services/feishu_snapshot_refresh_service.py", "line": 118, "classification": "false_positive_from_denylist_literals", "risk_level": "low", "context": "literal_context", "preview": "\"production_writeback\": \"separate approval\"" }, { "file": "backend/services/feishu_snapshot_refresh_service.py", "line": 131, "classification": "false_positive_from_denylist_literals", "risk_level": "low", "context": "literal_context", "preview": "\"would_not_write\": [\"feishu_department_mappings\", \"feishu_writeback_jobs\", \"employees\", \"departments\", \"positions\", \"org_change_drafts\"]," }, { "file": "backend/routers/feishu_org_snapshot_cache.py", "line": 396, "classification": "legacy_isolated", "risk_level": "medium", "context": "legacy_router_context", "preview": "@router.post(\"/run\")" } ], "high_risk_count": 0, "legacy_isolated_count": 1, "false_positive_count": 11, "unknown_count": 0, "secret_read": "[REDACTED_METADATA_ONLY]", "token_output": "[REDACTED_METADATA_ONLY]" }, "can_enter_refresh_retry_approval": false, "hard_blocks": [ "[REDACTED_METADATA_ONLY]" ], "warnings": [ "write endpoint risk is classified as non-executable or legacy isolated" ], "feishu_api_call": false, "secret_read": "[REDACTED_METADATA_ONLY]", "token_output": "[REDACTED_METADATA_ONLY]", "data_write": false, "refresh_executed": false, "snapshot_refreshed": false, "mapping_created": false, "job_created": false, "production_writeback": false, "next_gate": "[REDACTED_METADATA_ONLY]" } }, "/api/feishu-readonly-snapshot/contract": { "url": "https://hrms.yuechongjia.com/api/feishu-readonly-snapshot/contract", "http_status": "200", "safe_metadata_only_probe": true, "body_type": "json", "top_level_keys": [ "data_write", "feishu_api_call", "mode", "ok", "readiness", "refresh_executed", "refresh_preview", "request_contract", "secret_read", "token_output" ], "sanitized_metadata": { "ok": true, "mode": "readonly_contract", "readiness": { "ok": true, "provider_installed": true, "safety_scanner_installed": true, "token_cache_status": "[REDACTED_METADATA_ONLY]", "token_metadata_status": "[REDACTED_METADATA_ONLY]", "token_cache_detail": "[REDACTED_METADATA_ONLY]", "client_handle": { "provider_installed": true, "status": "[REDACTED_METADATA_ONLY]", "token_value_exposed": "[REDACTED_METADATA_ONLY]", "secret_read": "[REDACTED_METADATA_ONLY]", "token_output": "[REDACTED_METADATA_ONLY]", "feishu_api_call": false, "reason": "[REDACTED_METADATA_ONLY]" }, "snapshot_schema_ready": true, "snapshot_schema": { "snapshot_schema_ready": true, "tables": { "feishu_readonly_snapshot_runs": true, "feishu_user_snapshots": true, "feishu_department_snapshots": true }, "data_write": false, "checked_at": "2026-06-03T08:00:39.406793+00:00" }, "write_endpoint_risk_status": "false_positive_from_denylist_literals", "safety_scan": { "write_endpoint_risk_status": "false_positive_from_denylist_literals", "findings": [ { "file": "backend/services/feishu_readonly_directory_client.py", "line": 16, "classification": "false_positive_from_denylist_literals", "risk_level": "low", "context": "literal_context", "preview": "\"PATCH\"," }, { "file": "backend/services/feishu_readonly_directory_client.py", "line": 17, "classification": "false_positive_from_denylist_literals", "risk_level": "low", "context": "literal_context", "preview": "\"POST\"," }, { "file": "backend/services/feishu_readonly_directory_client.py", "line": 18, "classification": "false_positive_from_denylist_literals", "risk_level": "low", "context": "literal_context", "preview": "\"PUT\"," }, { "file": "backend/services/feishu_readonly_directory_client.py", "line": 19, "classification": "false_positive_from_denylist_literals", "risk_level": "low", "context": "literal_context", "preview": "\"DELETE\"," }, { "file": "backend/services/feishu_readonly_directory_client.py", "line": 22, "classification": "false_positive_from_denylist_literals", "risk_level": "low", "context": "literal_context", "preview": "\"/writeback\"," }, { "file": "backend/services/feishu_readonly_directory_client.py", "line": 23, "classification": "false_positive_from_denylist_literals", "risk_level": "low", "context": "literal_context", "preview": "\"/users/batch\"," }, { "file": "backend/services/feishu_snapshot_refresh_service.py", "line": 101, "classification": "false_positive_from_denylist_literals", "risk_level": "low", "context": "literal_context", "preview": "\"production_writeback\": False," }, { "file": "backend/services/feishu_snapshot_refresh_service.py", "line": 111, "classification": "false_positive_from_denylist_literals", "risk_level": "low", "context": "literal_context", "preview": "\"denylist\": [\"user update\", \"department update\", \"writeback\", \"any write API\"]," }, { "file": "backend/services/feishu_snapshot_refresh_service.py", "line": 114, "classification": "false_positive_from_denylist_literals", "risk_level": "low", "context": "literal_context", "preview": "\"mapping_job_production_writeback_boundaries\": {" }, { "file": "backend/services/feishu_snapshot_refresh_service.py", "line": 118, "classification": "false_positive_from_denylist_literals", "risk_level": "low", "context": "literal_context", "preview": "\"production_writeback\": \"separate approval\"" }, { "file": "backend/services/feishu_snapshot_refresh_service.py", "line": 131, "classification": "false_positive_from_denylist_literals", "risk_level": "low", "context": "literal_context", "preview": "\"would_not_write\": [\"feishu_department_mappings\", \"feishu_writeback_jobs\", \"employees\", \"departments\", \"positions\", \"org_change_drafts\"]," }, { "file": "backend/routers/feishu_org_snapshot_cache.py", "line": 396, "classification": "legacy_isolated", "risk_level": "medium", "context": "legacy_router_context", "preview": "@router.post(\"/run\")" } ], "high_risk_count": 0, "legacy_isolated_count": 1, "false_positive_count": 11, "unknown_count": 0, "secret_read": "[REDACTED_METADATA_ONLY]", "token_output": "[REDACTED_METADATA_ONLY]" }, "can_enter_refresh_retry_approval": false, "hard_blocks": [ "[REDACTED_METADATA_ONLY]" ], "warnings": [ "write endpoint risk is classified as non-executable or legacy isolated" ], "feishu_api_call": false, "secret_read": "[REDACTED_METADATA_ONLY]", "token_output": "[REDACTED_METADATA_ONLY]", "data_write": false, "refresh_executed": false, "snapshot_refreshed": false, "mapping_created": false, "job_created": false, "production_writeback": false, "next_gate": "[REDACTED_METADATA_ONLY]" }, "request_contract": { "readonly_only": true, "users_preview": { "method": "GET", "url": "https://open.feishu.cn/open-apis/contact/v3/users/find_by_department?department_id=0&page_size=50", "endpoint_allowed": true, "executable": false, "feishu_api_call": false, "token_output": "[REDACTED_METADATA_ONLY]" }, "departments_preview": { "method": "GET", "url": "https://open.feishu.cn/open-apis/contact/v3/departments/0/children?page_size=50", "endpoint_allowed": true, "executable": false, "feishu_api_call": false, "token_output": "[REDACTED_METADATA_ONLY]" }, "allowlist": [ "GET contact users readonly", "GET contact departments readonly" ], "denylist": [ "user update", "department update", "writeback", "any write API" ], "token_not_returned": "[REDACTED_METADATA_ONLY]", "refresh_requires_separate_approval": true, "mapping_job_production_writeback_boundaries": { "snapshot_refresh": "readonly data capture only", "mapping_apply": "separate approval", "job_register": "separate approval", "production_writeback": "separate approval" }, "feishu_api_call": false, "data_write": false, "token_output": "[REDACTED_METADATA_ONLY]" }, "refresh_preview": { "dry_run": true, "preview_only": true, "execution_enabled": false, "would_write_tables": [ "feishu_readonly_snapshot_runs", "feishu_user_snapshots", "feishu_department_snapshots" ], "would_not_write": [ "feishu_department_mappings", "feishu_writeback_jobs", "employees", "departments", "positions", "org_change_drafts" ], "feishu_api_call": false, "data_write": false, "secret_read": "[REDACTED_METADATA_ONLY]", "token_output": "[REDACTED_METADATA_ONLY]" }, "feishu_api_call": false, "secret_read": "[REDACTED_METADATA_ONLY]", "token_output": "[REDACTED_METADATA_ONLY]", "data_write": false, "refresh_executed": false } } }, "readiness_endpoint_available": true, "live_probe_scope": "metadata_only_counts_only_if_endpoint_available", "real_employee_detail_output": false }