Merge remote-tracking branch 'gitea/main' into codex/security-supply-chain-contracts-20260512

docs/LOGBOOK.md

@@ -7373,3 +7373,39 @@ OK
 ```
 
 **目前整體進度**：約 66%。
+
+**production deploy / smoke 追加（完成）**：
+
+```text
+Gitea:
+2001 Code Review a99dccfc -> success
+2000 CD Pipeline a99dccfc -> success
+
+K8s image:
+awoooi-api    192.168.0.110:5000/awoooi/api:a99dccfc73cf5a763a2c42434fa09d70559df603
+awoooi-worker 192.168.0.110:5000/awoooi/api:a99dccfc73cf5a763a2c42434fa09d70559df603
+awoooi-web    192.168.0.110:5000/awoooi/web:a99dccfc73cf5a763a2c42434fa09d70559df603
+
+health:
+https://awoooi.wooo.work/api/v1/health -> 200
+
+Truth-chain smoke:
+source_id=codex-t9-approval-smoke-eb44cd4a
+found=true
+truth_status.current_stage=provider_failed_after_gateway
+truth_status.stage_status=failed
+truth_status.needs_human=true
+gateway.total=1
+gateway.first_class_total=1
+gateway.legacy_bridge_total=0
+gateway.policy_enforced_total=1
+gateway.approval_executor_total=1
+gateway.by_scope[0].required_scope=write
+gateway.by_agent[0].agent_id=approval_executor
+gateway.by_tool[0].tool_name=ssh_docker_restart
+```
+
+判讀：
+
+- Operator truth-chain 已能把「AwoooP Gateway 已通過」與「底層 provider 失敗」分開顯示。
+- 這直接補上 Telegram 卡片看不出 MCP / Gate / provider 階段的缺口；下一步要把這份 summary 接到 Run Detail / Telegram 詳情入口，而不是只靠 pod 內部 service smoke。

k8s/awoooi-prod/kustomization.yaml

@@ -40,7 +40,7 @@ resources:
 images:
 - name: 192.168.0.110:5000/library/api:IMAGE_TAG_PLACEHOLDER
   newName: 192.168.0.110:5000/awoooi/api
-  newTag: 34bfe56f53a87ac96dae9e502a2e954adc6e654b
+  newTag: a99dccfc73cf5a763a2c42434fa09d70559df603
 - name: 192.168.0.110:5000/library/web:IMAGE_TAG_PLACEHOLDER
   newName: 192.168.0.110:5000/awoooi/web
-  newTag: 34bfe56f53a87ac96dae9e502a2e954adc6e654b
+  newTag: a99dccfc73cf5a763a2c42434fa09d70559df603