feat(governance): 新增 AI Agent TG canary delivery gate

2026-06-16 11:19:27 +08:00
parent 95be78bd66
commit adb5d689cf
14 changed files with 2371 additions and 46 deletions
--- a/apps/api/src/services/ai_agent_professional_task_expansion.py
+++ b/apps/api/src/services/ai_agent_professional_task_expansion.py
@@ -1,7 +1,7 @@
 """
 AI Agent professional task expansion and Telegram runtime bridge snapshot.

-Loads the latest committed P2-405C read-only contract. The contract expands
+Loads the latest committed P2-405D read-only contract. The contract expands
 professional AI Agent work and defines Telegram no-send previews, but it does
 not write Telegram Gateway queues, send Telegram messages, call the Bot API,
 read secrets, or execute production changes.
@@ -29,6 +29,7 @@ _EXPECTED_DEDUP_KEY_COUNT = 6
 _EXPECTED_RECEIPT_EXPECTATION_COUNT = 6
 _EXPECTED_CANARY_PACKAGE_COUNT = 1
 _EXPECTED_CANARY_APPROVAL_PACKET_COUNT = 1
+_EXPECTED_CANARY_DELIVERY_GATE_COUNT = 1
 _ZERO_ROLLUP_FIELDS = {
    "current_live_count",
    "gateway_queue_write_count",
@@ -53,6 +54,14 @@ _ZERO_ROLLUP_FIELDS = {
    "canary_bot_api_call_enabled_count",
    "canary_delivery_receipt_write_enabled_count",
    "canary_secret_read_enabled_count",
+    "canary_delivery_approved_count",
+    "canary_delivery_attempt_allowed_count",
+    "canary_delivery_live_send_enabled_count",
+    "canary_delivery_gateway_queue_write_enabled_count",
+    "canary_delivery_bot_api_call_enabled_count",
+    "canary_delivery_receipt_write_enabled_count",
+    "canary_delivery_secret_read_enabled_count",
+    "canary_delivery_paid_api_enabled_count",
 }
 _FORBIDDEN_PUBLIC_TERMS = {
    "work_window_transcript",
@@ -100,11 +109,11 @@ def _require_schema(payload: dict[str, Any], label: str) -> None:
    status = payload.get("program_status") or {}
    expected = {
        "current_priority": "P2",
-        "current_task_id": "P2-405C",
-        "next_task_id": "P2-405D",
+        "current_task_id": "P2-405D",
+        "next_task_id": "P2-405E",
        "read_only_mode": True,
        "runtime_authority": _RUNTIME_AUTHORITY,
-        "overall_completion_percent": 92,
+        "overall_completion_percent": 96,
    }
    mismatches = _mismatches(status, expected)
    if mismatches:
@@ -145,6 +154,7 @@ def _require_telegram_bridge(payload: dict[str, Any], label: str) -> None:
    _require_no_send_previews(bridge, label)
    _require_receipt_and_canary_package(bridge, label)
    _require_canary_send_approval_packet(bridge, label)
+    _require_canary_delivery_gate(bridge, label)


 def _require_no_send_previews(bridge: dict[str, Any], label: str) -> None:
@@ -325,6 +335,98 @@ def _require_canary_send_approval_packet(bridge: dict[str, Any], label: str) ->
        raise ValueError(f"{label}: canary send approval_decision_log must remain empty")


+def _require_canary_delivery_gate(bridge: dict[str, Any], label: str) -> None:
+    gate = bridge.get("canary_delivery_gate") or {}
+    expected_gate = {
+        "status": "blocked_waiting_commander_delivery_fields",
+        "gate_ready": True,
+        "delivery_approved": False,
+        "delivery_attempt_allowed": False,
+        "selected_message_type": "not_selected",
+        "target_room_env": "SRE_GROUP_CHAT_ID",
+        "target_room_value_visible": False,
+        "target_room_verified": False,
+        "proposed_time_window": "waiting_commander_input",
+        "approved_time_window": "not_approved",
+    }
+    mismatches = _mismatches(gate, expected_gate)
+    if mismatches:
+        raise ValueError(f"{label}: canary_delivery_gate mismatch: {mismatches}")
+    if not gate:
+        raise ValueError(
+            f"{label}: expected {_EXPECTED_CANARY_DELIVERY_GATE_COUNT} canary delivery gate"
+        )
+
+    fields = gate.get("required_delivery_fields") or []
+    required_field_ids = {
+        "commander_delivery_approval",
+        "selected_message_type",
+        "delivery_time_window",
+        "target_room_env_ref",
+        "receipt_readback_owner",
+        "mute_rollback_plan",
+        "failure_stop_condition",
+        "dry_run_readback_ref",
+    }
+    field_ids = {field.get("field_id") for field in fields}
+    if field_ids != required_field_ids:
+        raise ValueError(f"{label}: canary delivery required fields mismatch")
+    for field in fields:
+        field_id = field.get("field_id")
+        if field.get("required") is not True:
+            raise ValueError(f"{label}: {field_id}.required must be true")
+        if field.get("current_value_status") != "waiting_input":
+            raise ValueError(f"{label}: {field_id}.current_value_status must be waiting_input")
+        if field.get("value_display_allowed") is not False:
+            raise ValueError(f"{label}: {field_id}.value_display_allowed must remain false")
+
+    attempt_plan = gate.get("delivery_attempt_plan") or {}
+    expected_attempt = {
+        "max_messages": 1,
+        "send_mode": "blocked_no_send",
+        "live_delivery_enabled": False,
+        "gateway_queue_write_enabled": False,
+        "bot_api_call_enabled": False,
+        "delivery_receipt_write_enabled": False,
+        "production_write_enabled": False,
+        "secret_read_enabled": False,
+        "paid_api_enabled": False,
+    }
+    mismatches = _mismatches(attempt_plan, expected_attempt)
+    if mismatches:
+        raise ValueError(f"{label}: canary delivery attempt plan mismatch: {mismatches}")
+
+    execution_flags = gate.get("execution_flags") or {}
+    expected_execution = {
+        "live_delivery_enabled": False,
+        "gateway_queue_write_enabled": False,
+        "bot_api_call_enabled": False,
+        "delivery_receipt_write_enabled": False,
+        "production_write_enabled": False,
+        "secret_read_enabled": False,
+        "paid_api_enabled": False,
+    }
+    mismatches = _mismatches(execution_flags, expected_execution)
+    if mismatches:
+        raise ValueError(f"{label}: canary delivery execution flags mismatch: {mismatches}")
+
+    readback_plan = gate.get("readback_after_approval_plan") or {}
+    if readback_plan.get("enabled_before_delivery") is not False:
+        raise ValueError(f"{label}: canary delivery readback must stay disabled before delivery")
+    if readback_plan.get("production_receipt_write_enabled") is not False:
+        raise ValueError(f"{label}: canary delivery production receipt write must remain false")
+    if not readback_plan.get("required_checks"):
+        raise ValueError(f"{label}: canary delivery readback required_checks are required")
+    if not gate.get("preflight_checks"):
+        raise ValueError(f"{label}: canary delivery preflight_checks are required")
+    if not gate.get("hold_reasons"):
+        raise ValueError(f"{label}: canary delivery hold_reasons are required")
+    if not gate.get("rollback_mute_controls"):
+        raise ValueError(f"{label}: canary delivery rollback_mute_controls are required")
+    if gate.get("delivery_decision_log") != []:
+        raise ValueError(f"{label}: canary delivery decision log must remain empty")
+
+
 def _require_professional_tasks(payload: dict[str, Any], label: str) -> None:
    domains = payload.get("professional_task_domains") or []
    if len(domains) != _EXPECTED_DOMAIN_COUNT:
@@ -438,6 +540,28 @@ def _require_rollups(payload: dict[str, Any], label: str) -> None:
            ).get("required_checks")
            or []
        ),
+        "canary_delivery_gate_count": 1
+        if bridge.get("canary_delivery_gate")
+        else 0,
+        "canary_delivery_required_field_count": len(
+            (bridge.get("canary_delivery_gate") or {}).get("required_delivery_fields") or []
+        ),
+        "canary_delivery_preflight_check_count": len(
+            (bridge.get("canary_delivery_gate") or {}).get("preflight_checks") or []
+        ),
+        "canary_delivery_hold_reason_count": len(
+            (bridge.get("canary_delivery_gate") or {}).get("hold_reasons") or []
+        ),
+        "canary_delivery_readback_check_count": len(
+            (
+                (bridge.get("canary_delivery_gate") or {}).get("readback_after_approval_plan")
+                or {}
+            ).get("required_checks")
+            or []
+        ),
+        "canary_delivery_rollback_mute_control_count": len(
+            (bridge.get("canary_delivery_gate") or {}).get("rollback_mute_controls") or []
+        ),
    }
    mismatches = _mismatches(rollups, expected)
    if mismatches:
--- a/apps/api/tests/test_ai_agent_professional_task_expansion.py
+++ b/apps/api/tests/test_ai_agent_professional_task_expansion.py
@@ -18,9 +18,9 @@ def test_load_latest_ai_agent_professional_task_expansion_snapshot() -> None:
    snapshot = load_latest_ai_agent_professional_task_expansion()

    assert snapshot["schema_version"] == "ai_agent_professional_task_expansion_v1"
-    assert snapshot["program_status"]["current_task_id"] == "P2-405C"
-    assert snapshot["program_status"]["next_task_id"] == "P2-405D"
-    assert snapshot["program_status"]["overall_completion_percent"] == 92
+    assert snapshot["program_status"]["current_task_id"] == "P2-405D"
+    assert snapshot["program_status"]["next_task_id"] == "P2-405E"
+    assert snapshot["program_status"]["overall_completion_percent"] == 96
    assert snapshot["program_status"]["runtime_authority"] == (
        "professional_task_expansion_and_telegram_bridge_read_only_no_send"
    )
@@ -46,6 +46,9 @@ def test_load_latest_ai_agent_professional_task_expansion_snapshot() -> None:
    assert bridge["canary_send_approval_packet"]["approval_granted"] is False
    assert bridge["canary_send_approval_packet"]["selected_message_type"] == "not_selected"
    assert bridge["canary_send_approval_packet"]["proposed_time_window"] == "waiting_commander_input"
+    assert bridge["canary_delivery_gate"]["status"] == "blocked_waiting_commander_delivery_fields"
+    assert bridge["canary_delivery_gate"]["delivery_approved"] is False
+    assert bridge["canary_delivery_gate"]["delivery_attempt_allowed"] is False

    rollups = snapshot["rollups"]
    assert rollups["professional_task_count"] == 24
@@ -89,6 +92,20 @@ def test_load_latest_ai_agent_professional_task_expansion_snapshot() -> None:
    assert rollups["canary_bot_api_call_enabled_count"] == 0
    assert rollups["canary_delivery_receipt_write_enabled_count"] == 0
    assert rollups["canary_secret_read_enabled_count"] == 0
+    assert rollups["canary_delivery_gate_count"] == 1
+    assert rollups["canary_delivery_required_field_count"] == 8
+    assert rollups["canary_delivery_preflight_check_count"] == 8
+    assert rollups["canary_delivery_hold_reason_count"] == 7
+    assert rollups["canary_delivery_readback_check_count"] == 7
+    assert rollups["canary_delivery_rollback_mute_control_count"] == 5
+    assert rollups["canary_delivery_approved_count"] == 0
+    assert rollups["canary_delivery_attempt_allowed_count"] == 0
+    assert rollups["canary_delivery_live_send_enabled_count"] == 0
+    assert rollups["canary_delivery_gateway_queue_write_enabled_count"] == 0
+    assert rollups["canary_delivery_bot_api_call_enabled_count"] == 0
+    assert rollups["canary_delivery_receipt_write_enabled_count"] == 0
+    assert rollups["canary_delivery_secret_read_enabled_count"] == 0
+    assert rollups["canary_delivery_paid_api_enabled_count"] == 0


 def test_professional_tasks_cover_required_agents_and_reporting() -> None:
@@ -196,6 +213,38 @@ def test_canary_send_approval_packet_waits_for_explicit_approval() -> None:
    assert all(value is False for value in packet["execution_flags"].values())


+def test_canary_delivery_gate_waits_for_explicit_delivery_fields() -> None:
+    snapshot = load_latest_ai_agent_professional_task_expansion()
+    gate = snapshot["telegram_runtime_bridge"]["canary_delivery_gate"]
+
+    assert gate["gate_ready"] is True
+    assert gate["delivery_approved"] is False
+    assert gate["delivery_attempt_allowed"] is False
+    assert gate["selected_message_type"] == "not_selected"
+    assert gate["target_room_env"] == "SRE_GROUP_CHAT_ID"
+    assert gate["target_room_value_visible"] is False
+    assert gate["target_room_verified"] is False
+    assert gate["proposed_time_window"] == "waiting_commander_input"
+    assert gate["approved_time_window"] == "not_approved"
+    assert len(gate["required_delivery_fields"]) == 8
+    assert len(gate["preflight_checks"]) == 8
+    assert len(gate["hold_reasons"]) == 7
+    assert len(gate["rollback_mute_controls"]) == 5
+    assert len(gate["readback_after_approval_plan"]["required_checks"]) == 7
+    assert gate["delivery_decision_log"] == []
+
+    for field in gate["required_delivery_fields"]:
+        assert field["required"] is True
+        assert field["current_value_status"] == "waiting_input"
+        assert field["value_display_allowed"] is False
+
+    assert gate["delivery_attempt_plan"]["max_messages"] == 1
+    assert gate["delivery_attempt_plan"]["send_mode"] == "blocked_no_send"
+    assert gate["readback_after_approval_plan"]["enabled_before_delivery"] is False
+    assert gate["readback_after_approval_plan"]["production_receipt_write_enabled"] is False
+    assert all(value is False for value in gate["execution_flags"].values())
+
+
 def test_rejects_telegram_send_enabled(tmp_path: Path) -> None:
    snapshot = copy.deepcopy(load_latest_ai_agent_professional_task_expansion())
    snapshot["telegram_runtime_bridge"]["telegram_send_enabled"] = True
@@ -277,6 +326,39 @@ def test_rejects_selected_canary_message_type_without_approval(tmp_path: Path) -
        load_latest_ai_agent_professional_task_expansion(tmp_path)


+def test_rejects_canary_delivery_approved(tmp_path: Path) -> None:
+    snapshot = copy.deepcopy(load_latest_ai_agent_professional_task_expansion())
+    gate = snapshot["telegram_runtime_bridge"]["canary_delivery_gate"]
+    gate["delivery_approved"] = True
+    snapshot["rollups"]["canary_delivery_approved_count"] = 1
+    _write_snapshot(tmp_path, snapshot)
+
+    with pytest.raises(ValueError, match="canary_delivery_gate mismatch"):
+        load_latest_ai_agent_professional_task_expansion(tmp_path)
+
+
+def test_rejects_canary_delivery_attempt_allowed(tmp_path: Path) -> None:
+    snapshot = copy.deepcopy(load_latest_ai_agent_professional_task_expansion())
+    gate = snapshot["telegram_runtime_bridge"]["canary_delivery_gate"]
+    gate["delivery_attempt_allowed"] = True
+    snapshot["rollups"]["canary_delivery_attempt_allowed_count"] = 1
+    _write_snapshot(tmp_path, snapshot)
+
+    with pytest.raises(ValueError, match="canary_delivery_gate mismatch"):
+        load_latest_ai_agent_professional_task_expansion(tmp_path)
+
+
+def test_rejects_canary_delivery_gateway_queue_write_enabled(tmp_path: Path) -> None:
+    snapshot = copy.deepcopy(load_latest_ai_agent_professional_task_expansion())
+    gate = snapshot["telegram_runtime_bridge"]["canary_delivery_gate"]
+    gate["delivery_attempt_plan"]["gateway_queue_write_enabled"] = True
+    snapshot["rollups"]["canary_delivery_gateway_queue_write_enabled_count"] = 1
+    _write_snapshot(tmp_path, snapshot)
+
+    with pytest.raises(ValueError, match="canary delivery attempt plan mismatch"):
+        load_latest_ai_agent_professional_task_expansion(tmp_path)
+
+
 def test_rejects_high_risk_without_approval(tmp_path: Path) -> None:
    snapshot = copy.deepcopy(load_latest_ai_agent_professional_task_expansion())
    high_task = next(task for task in snapshot["professional_tasks"] if task["risk_tier"] == "high")
--- a/apps/api/tests/test_ai_agent_professional_task_expansion_api.py
+++ b/apps/api/tests/test_ai_agent_professional_task_expansion_api.py
@@ -17,9 +17,9 @@ def test_ai_agent_professional_task_expansion_endpoint() -> None:
    assert response.status_code == 200
    payload = response.json()
    assert payload["schema_version"] == "ai_agent_professional_task_expansion_v1"
-    assert payload["program_status"]["current_task_id"] == "P2-405C"
-    assert payload["program_status"]["next_task_id"] == "P2-405D"
-    assert payload["program_status"]["overall_completion_percent"] == 92
+    assert payload["program_status"]["current_task_id"] == "P2-405D"
+    assert payload["program_status"]["next_task_id"] == "P2-405E"
+    assert payload["program_status"]["overall_completion_percent"] == 96
    assert payload["program_status"]["runtime_authority"] == (
        "professional_task_expansion_and_telegram_bridge_read_only_no_send"
    )
@@ -48,11 +48,20 @@ def test_ai_agent_professional_task_expansion_endpoint() -> None:
    assert payload["rollups"]["canary_send_execution_enabled_count"] == 0
    assert payload["rollups"]["canary_gateway_queue_write_enabled_count"] == 0
    assert payload["rollups"]["canary_bot_api_call_enabled_count"] == 0
+    assert payload["rollups"]["canary_delivery_gate_count"] == 1
+    assert payload["rollups"]["canary_delivery_required_field_count"] == 8
+    assert payload["rollups"]["canary_delivery_approved_count"] == 0
+    assert payload["rollups"]["canary_delivery_attempt_allowed_count"] == 0
+    assert payload["rollups"]["canary_delivery_gateway_queue_write_enabled_count"] == 0
+    assert payload["rollups"]["canary_delivery_bot_api_call_enabled_count"] == 0
    assert payload["telegram_runtime_bridge"]["canary_approval_package"]["live_send_enabled"] is False
    assert payload["telegram_runtime_bridge"]["canary_send_approval_packet"]["approval_granted"] is False
    assert (
        payload["telegram_runtime_bridge"]["canary_send_approval_packet"]["selected_message_type"]
        == "not_selected"
    )
+    assert payload["telegram_runtime_bridge"]["canary_delivery_gate"]["delivery_approved"] is False
+    assert payload["telegram_runtime_bridge"]["canary_delivery_gate"]["delivery_attempt_allowed"] is False
+    assert payload["telegram_runtime_bridge"]["canary_delivery_gate"]["target_room_value_visible"] is False
    assert len(payload["telegram_runtime_bridge"]["no_send_message_previews"]) == 6
    assert len(payload["telegram_runtime_bridge"]["receipt_expectations"]) == 6
--- a/apps/web/messages/en.json
+++ b/apps/web/messages/en.json
@@ -6448,7 +6448,7 @@
        }
      },
      "professionalTaskExpansion": {
-        "title": "P2-405C AI Agent TG Canary 批准包",
+        "title": "P2-405D AI Agent TG Canary Delivery Gate",
        "source": "產生 {generated}；目前 {current}；下一步 {next}",
        "runtime": "runtime={value}",
        "telegramTitle": "Telegram Runtime Bridge",
@@ -6470,7 +6470,11 @@
          "canaryPacket": "canary 批准包",
          "canaryFields": "批准欄位",
          "stopConditions": "停止條件",
-          "canaryApprovalGaps": "已批准 / 選擇 / 時間窗"
+          "canaryApprovalGaps": "已批准 / 選擇 / 時間窗",
+          "deliveryGate": "delivery gate",
+          "deliveryFields": "交付欄位",
+          "deliveryPreflight": "交付 preflight",
+          "deliveryHoldReasons": "hold reason"
        },
        "previewTitle": "Telegram no-send 訊息預覽",
        "canaryTitle": "Canary 批准包",
@@ -6503,14 +6507,20 @@
          "timeWindow": "時間窗={value}",
          "required": "必填={value}",
          "inputStatus": "輸入狀態={value}",
-          "valueVisible": "值可見={value}"
+          "valueVisible": "值可見={value}",
+          "gateReady": "gate ready={value}",
+          "deliveryApproved": "delivery approved={value}",
+          "attemptAllowed": "attempt allowed={value}",
+          "targetVerified": "target verified={value}",
+          "holdReason": "hold={value}"
        },
        "riskTiers": {
          "low": "低風險",
          "medium": "中風險",
          "high": "高風險",
          "critical": "Critical"
-        }
+        },
+        "canaryDeliveryGateTitle": "P2-405D Canary Delivery Gate"
      },
      "resultCaptureReleaseVerifierOwnerReviewPacket": {
        "title": "P2-137 釋出驗證器負責人審查包",
--- a/apps/web/messages/zh-TW.json
+++ b/apps/web/messages/zh-TW.json
@@ -6448,7 +6448,7 @@
        }
      },
      "professionalTaskExpansion": {
-        "title": "P2-405C AI Agent TG Canary 批准包",
+        "title": "P2-405D AI Agent TG Canary Delivery Gate",
        "source": "產生 {generated}；目前 {current}；下一步 {next}",
        "runtime": "runtime={value}",
        "telegramTitle": "Telegram Runtime Bridge",
@@ -6470,7 +6470,11 @@
          "canaryPacket": "canary 批准包",
          "canaryFields": "批准欄位",
          "stopConditions": "停止條件",
-          "canaryApprovalGaps": "已批准 / 選擇 / 時間窗"
+          "canaryApprovalGaps": "已批准 / 選擇 / 時間窗",
+          "deliveryGate": "delivery gate",
+          "deliveryFields": "交付欄位",
+          "deliveryPreflight": "交付 preflight",
+          "deliveryHoldReasons": "hold reason"
        },
        "previewTitle": "Telegram no-send 訊息預覽",
        "canaryTitle": "Canary 批准包",
@@ -6503,14 +6507,20 @@
          "timeWindow": "時間窗={value}",
          "required": "必填={value}",
          "inputStatus": "輸入狀態={value}",
-          "valueVisible": "值可見={value}"
+          "valueVisible": "值可見={value}",
+          "gateReady": "gate ready={value}",
+          "deliveryApproved": "delivery approved={value}",
+          "attemptAllowed": "attempt allowed={value}",
+          "targetVerified": "target verified={value}",
+          "holdReason": "hold={value}"
        },
        "riskTiers": {
          "low": "低風險",
          "medium": "中風險",
          "high": "高風險",
          "critical": "Critical"
-        }
+        },
+        "canaryDeliveryGateTitle": "P2-405D Canary Delivery Gate"
      },
      "resultCaptureReleaseVerifierOwnerReviewPacket": {
        "title": "P2-137 釋出驗證器負責人審查包",
--- a/apps/web/src/app/[locale]/governance/tabs/automation-inventory-tab.tsx
+++ b/apps/web/src/app/[locale]/governance/tabs/automation-inventory-tab.tsx
@@ -3716,12 +3716,20 @@ export function AutomationInventoryTab() {
    + professionalTaskExpansion.rollups.canary_bot_api_call_enabled_count
    + professionalTaskExpansion.rollups.canary_delivery_receipt_write_enabled_count
    + professionalTaskExpansion.rollups.canary_secret_read_enabled_count
+    + professionalTaskExpansion.rollups.canary_delivery_live_send_enabled_count
+    + professionalTaskExpansion.rollups.canary_delivery_gateway_queue_write_enabled_count
+    + professionalTaskExpansion.rollups.canary_delivery_bot_api_call_enabled_count
+    + professionalTaskExpansion.rollups.canary_delivery_secret_read_enabled_count
+    + professionalTaskExpansion.rollups.canary_delivery_paid_api_enabled_count
  )
  const professionalTaskCanarySendPacket = professionalTaskExpansion.telegram_runtime_bridge.canary_send_approval_packet
+  const professionalTaskCanaryDeliveryGate = professionalTaskExpansion.telegram_runtime_bridge.canary_delivery_gate
  const professionalTaskCanaryApprovalGaps = (
    professionalTaskExpansion.rollups.canary_approval_granted_count
    + professionalTaskExpansion.rollups.canary_selected_message_type_count
    + professionalTaskExpansion.rollups.canary_approved_time_window_count
+    + professionalTaskExpansion.rollups.canary_delivery_approved_count
+    + professionalTaskExpansion.rollups.canary_delivery_attempt_allowed_count
  )
  const backlogProgressPercent = backlog.progress_summary.overall_percent
  const explicitApprovalItemCount = backlog.item_approval_boundary_rollup.items_requiring_explicit_approval.length
@@ -4152,6 +4160,10 @@ export function AutomationInventoryTab() {
            <MetricCard label={t('professionalTaskExpansion.metrics.canaryFields')} value={professionalTaskExpansion.rollups.canary_operator_approval_field_count} tone="warn" icon={<FileText size={16} />} />
            <MetricCard label={t('professionalTaskExpansion.metrics.stopConditions')} value={professionalTaskExpansion.rollups.canary_stop_condition_count} tone="danger" icon={<ShieldAlert size={16} />} />
            <MetricCard label={t('professionalTaskExpansion.metrics.canaryApprovalGaps')} value={professionalTaskCanaryApprovalGaps} tone={professionalTaskCanaryApprovalGaps === 0 ? 'ok' : 'danger'} icon={<BellOff size={16} />} />
+            <MetricCard label={t('professionalTaskExpansion.metrics.deliveryGate')} value={professionalTaskExpansion.rollups.canary_delivery_gate_count} tone="warn" icon={<Route size={16} />} />
+            <MetricCard label={t('professionalTaskExpansion.metrics.deliveryFields')} value={professionalTaskExpansion.rollups.canary_delivery_required_field_count} tone="warn" icon={<ClipboardCheck size={16} />} />
+            <MetricCard label={t('professionalTaskExpansion.metrics.deliveryPreflight')} value={professionalTaskExpansion.rollups.canary_delivery_preflight_check_count} tone="warn" icon={<ShieldCheck size={16} />} />
+            <MetricCard label={t('professionalTaskExpansion.metrics.deliveryHoldReasons')} value={professionalTaskExpansion.rollups.canary_delivery_hold_reason_count} tone="danger" icon={<Lock size={16} />} />
          </div>

          <div style={{ display: 'grid', gridTemplateColumns: 'repeat(auto-fit, minmax(260px, 1fr))', gap: 10 }}>
@@ -4276,6 +4288,52 @@ export function AutomationInventoryTab() {
            </div>
          </div>

+          <div style={{ padding: 10, border: '0.5px solid #d7c7a1', borderRadius: 7, background: '#fff', minWidth: 0 }}>
+            <SmallLabel>{t('professionalTaskExpansion.canaryDeliveryGateTitle')}</SmallLabel>
+            <p style={{ margin: '6px 0 8px', fontFamily: "'DM Mono', monospace", fontSize: 10, lineHeight: 1.5, color: '#5c5a55', overflowWrap: 'anywhere' }}>
+              {professionalTaskCanaryDeliveryGate.gate_id} · {professionalTaskCanaryDeliveryGate.status}
+            </p>
+            <div style={{ display: 'flex', flexWrap: 'wrap', gap: 6, marginBottom: 8 }}>
+              <Chip value={t('professionalTaskExpansion.labels.gateReady', { value: String(professionalTaskCanaryDeliveryGate.gate_ready) })} />
+              <Chip value={t('professionalTaskExpansion.labels.deliveryApproved', { value: String(professionalTaskCanaryDeliveryGate.delivery_approved) })} muted />
+              <Chip value={t('professionalTaskExpansion.labels.attemptAllowed', { value: String(professionalTaskCanaryDeliveryGate.delivery_attempt_allowed) })} muted />
+              <Chip value={t('professionalTaskExpansion.labels.selectedMessage', { value: professionalTaskCanaryDeliveryGate.selected_message_type })} muted />
+              <Chip value={t('professionalTaskExpansion.labels.timeWindow', { value: professionalTaskCanaryDeliveryGate.proposed_time_window })} muted />
+              <Chip value={t('professionalTaskExpansion.labels.targetVerified', { value: String(professionalTaskCanaryDeliveryGate.target_room_verified) })} muted />
+              <Chip value={t('professionalTaskExpansion.labels.canarySend', { value: String(professionalTaskCanaryDeliveryGate.delivery_attempt_plan.live_delivery_enabled) })} muted />
+              <Chip value={t('professionalTaskExpansion.labels.queueWrites', { value: String(professionalTaskCanaryDeliveryGate.delivery_attempt_plan.gateway_queue_write_enabled) })} muted />
+              <Chip value={t('professionalTaskExpansion.labels.botCalls', { value: String(professionalTaskCanaryDeliveryGate.delivery_attempt_plan.bot_api_call_enabled) })} muted />
+            </div>
+            <div style={{ display: 'grid', gridTemplateColumns: 'repeat(auto-fit, minmax(220px, 1fr))', gap: 8 }}>
+              {professionalTaskCanaryDeliveryGate.required_delivery_fields.map(field => (
+                <div key={field.field_id} style={{ padding: 8, borderRadius: 6, background: '#f8f5ed', display: 'flex', flexDirection: 'column', gap: 5, minWidth: 0 }}>
+                  <span style={{ fontFamily: 'Syne, sans-serif', fontSize: 11, fontWeight: 700, color: '#141413', overflowWrap: 'anywhere' }}>
+                    {field.label}
+                  </span>
+                  <div style={{ display: 'flex', flexWrap: 'wrap', gap: 6 }}>
+                    <Chip value={t('professionalTaskExpansion.labels.required', { value: String(field.required) })} muted />
+                    <Chip value={t('professionalTaskExpansion.labels.inputStatus', { value: field.current_value_status })} muted />
+                    <Chip value={t('professionalTaskExpansion.labels.valueVisible', { value: String(field.value_display_allowed) })} muted />
+                  </div>
+                </div>
+              ))}
+            </div>
+            <div style={{ display: 'grid', gridTemplateColumns: 'repeat(auto-fit, minmax(220px, 1fr))', gap: 8, marginTop: 8 }}>
+              {professionalTaskCanaryDeliveryGate.preflight_checks.slice(0, 8).map(check => (
+                <div key={check} style={{ padding: 8, borderRadius: 6, background: '#eef8f4', fontFamily: "'DM Mono', monospace", fontSize: 10, lineHeight: 1.45, color: '#176d8a', overflowWrap: 'anywhere' }}>
+                  {check}
+                </div>
+              ))}
+            </div>
+            <div style={{ display: 'grid', gridTemplateColumns: 'repeat(auto-fit, minmax(220px, 1fr))', gap: 8, marginTop: 8 }}>
+              {professionalTaskCanaryDeliveryGate.hold_reasons.slice(0, 7).map(reason => (
+                <div key={reason} style={{ padding: 8, borderRadius: 6, background: '#fff7ed', fontFamily: "'DM Mono', monospace", fontSize: 10, lineHeight: 1.45, color: '#7a4a20', overflowWrap: 'anywhere' }}>
+                  {t('professionalTaskExpansion.labels.holdReason', { value: reason })}
+                </div>
+              ))}
+            </div>
+          </div>
+
          <SmallLabel>{t('professionalTaskExpansion.tasksTitle')}</SmallLabel>
          <div style={{ display: 'grid', gridTemplateColumns: 'repeat(auto-fit, minmax(220px, 1fr))', gap: 10 }} className="automation-inventory-live-read-card-grid">
            {visibleProfessionalTasks.map(task => {
--- a/apps/web/src/lib/api-client.ts
+++ b/apps/web/src/lib/api-client.ts
@@ -1429,8 +1429,8 @@ export interface AiAgentProfessionalTaskExpansionSnapshot {
  program_status: {
    overall_completion_percent: number
    current_priority: 'P0' | 'P1' | 'P2' | 'P3'
-    current_task_id: 'P2-405C'
-    next_task_id: 'P2-405D'
+    current_task_id: 'P2-405D'
+    next_task_id: 'P2-405E'
    read_only_mode: true
    runtime_authority: 'professional_task_expansion_and_telegram_bridge_read_only_no_send'
    status_note: string
@@ -1588,12 +1588,73 @@ export interface AiAgentProfessionalTaskExpansionSnapshot {
      }
      approval_decision_log: unknown[]
    }
+    canary_delivery_gate: {
+      gate_id: string
+      status: string
+      gate_ready: boolean
+      delivery_approved: boolean
+      delivery_attempt_allowed: boolean
+      selected_message_type: string
+      selected_message_type_source: string
+      target_room_alias: string
+      target_room_env: string
+      target_room_value_visible: boolean
+      target_room_verified: boolean
+      proposed_time_window: string
+      approved_time_window: string
+      owner_agent: string
+      arbiter: string
+      reviewers: string[]
+      required_delivery_fields: Array<{
+        field_id: string
+        label: string
+        required: boolean
+        current_value_status: string
+        value_display_allowed: boolean
+      }>
+      preflight_checks: string[]
+      hold_reasons: string[]
+      delivery_attempt_plan: {
+        max_messages: number
+        dry_run_message_type: string
+        dedup_key_template: string
+        send_mode: string
+        live_delivery_enabled: boolean
+        gateway_queue_write_enabled: boolean
+        bot_api_call_enabled: boolean
+        delivery_receipt_write_enabled: boolean
+        production_write_enabled: boolean
+        secret_read_enabled: boolean
+        paid_api_enabled: boolean
+      }
+      readback_after_approval_plan: {
+        owner_agent: string
+        enabled_before_delivery: boolean
+        production_receipt_write_enabled: boolean
+        required_checks: string[]
+      }
+      rollback_mute_controls: string[]
+      execution_flags: {
+        live_delivery_enabled: boolean
+        gateway_queue_write_enabled: boolean
+        bot_api_call_enabled: boolean
+        delivery_receipt_write_enabled: boolean
+        production_write_enabled: boolean
+        secret_read_enabled: boolean
+        paid_api_enabled: boolean
+      }
+      delivery_decision_log: unknown[]
+    }
    no_send_preview_completion_percent: number
    canary_approval_package_completion_percent: number
    canary_send_approval_packet_ready: boolean
    canary_send_approval_granted: boolean
    canary_send_execution_enabled: boolean
    canary_send_approval_packet_completion_percent: number
+    canary_delivery_gate_ready: boolean
+    canary_delivery_approved: boolean
+    canary_delivery_attempt_allowed: boolean
+    canary_delivery_gate_completion_percent: number
  }
  professional_task_domains: Array<{
    domain_id: string
@@ -1630,6 +1691,7 @@ export interface AiAgentProfessionalTaskExpansionSnapshot {
    frontend_display_policy: string
    message_preview_redaction_checks: string[]
    canary_packet_redaction_checks: string[]
+    canary_delivery_redaction_checks: string[]
  }
  rollups: {
    professional_task_count: number
@@ -1676,6 +1738,19 @@ export interface AiAgentProfessionalTaskExpansionSnapshot {
    canary_bot_api_call_enabled_count: number
    canary_delivery_receipt_write_enabled_count: number
    canary_secret_read_enabled_count: number
+    canary_delivery_gate_count: number
+    canary_delivery_required_field_count: number
+    canary_delivery_preflight_check_count: number
+    canary_delivery_hold_reason_count: number
+    canary_delivery_readback_check_count: number
+    canary_delivery_rollback_mute_control_count: number
+    canary_delivery_approved_count: number
+    canary_delivery_attempt_allowed_count: number
+    canary_delivery_live_send_enabled_count: number
+    canary_delivery_gateway_queue_write_enabled_count: number
+    canary_delivery_bot_api_call_enabled_count: number
+    canary_delivery_secret_read_enabled_count: number
+    canary_delivery_paid_api_enabled_count: number
  }
 }

--- a/docs/LOGBOOK.md
+++ b/docs/LOGBOOK.md
@@ -166,6 +166,34 @@
 - 本輪未連 live ArgoCD、未 `kubectl`、未 `helm`、未讀 live Secret、未改 NetworkPolicy / RBAC / NodePort / Ingress / route、未手動 sync、未 patch live manifest、未 active scan、未收 secrets 明文、未 force push。
 - 下一優先：收 K8s / ArgoCD owner evidence 與事故後回讀包；同時把 Backup / Restore / Escrow、Monitoring / Alerting / Observability、Public gateway / Nginx、Gitea workflow / runner / deploy secret injection 的 owner evidence gate 往前推，且不得用 route 200、pod up、UI 可見或 CD success 當成資安 runtime 授權。

+## 2026-06-16｜P2-405D AI Agent TG Canary Delivery Gate
+
+**背景**：P2-405C 已把第一次 TG canary 實發前的批准欄位、停止條件、mute / rollback 與 receipt readback plan 固定成只讀 artifact；下一步需要把「已可進入 delivery gate 但仍不得送出」的最後交付欄位、preflight、hold reason 與 readback 控制產品化，避免批准包就緒被誤解成可寫 Gateway queue 或可呼叫 Bot API。
+
+**完成項目**：
+- 新增 `docs/evaluations/ai_agent_professional_task_expansion_2026-06-16_1108_p2_405d.json`，`current_task_id=P2-405D`、`next_task_id=P2-405E`、整體完成度 `96%`。
+- `telegram_runtime_bridge.canary_delivery_gate` 已固定 `gate_ready=true`、`delivery_approved=false`、`delivery_attempt_allowed=false`、`status=blocked_waiting_commander_delivery_fields`。
+- Canary delivery gate 要求 8 個統帥 / operator 必填欄位：統帥批准本次 delivery、單一訊息類型、交付時間窗、目標 env ref、receipt readback owner、mute / rollback plan、failure stop condition、dry-run readback evidence ref。
+- Canary delivery gate 固定 8 個 preflight check、7 個 hold reason、7 個 readback check、5 個 rollback / mute control；所有欄位值維持不可公開顯示。
+- 後端 loader / schema / 測試已要求 delivery approved、delivery attempt allowed、live delivery、Gateway queue write、Bot API call、delivery receipt write、secret read、paid API 全部維持 `false / 0`。
+- `/zh-TW/governance?tab=automation-inventory` 的 AI Agent 專業任務卡片已顯示 P2-405D delivery gate、交付欄位、preflight、hold reason 與批准缺口，並把 delivery 實發 / queue / Bot API / secret / paid API 全部納入 live write 計數。
+- `zh-TW.json` 與 `en.json` 維持繁中鏡像；治理頁不顯示工作視窗對話、未遮罩 runtime payload、機密值或可直接執行的 Telegram 操作。
+
+**本地驗證**：
+- JSON parse 驗證 `docs/evaluations/ai_agent_professional_task_expansion_2026-06-16_1108_p2_405d.json`、`docs/schemas/ai_agent_professional_task_expansion_v1.schema.json`、`apps/web/messages/zh-TW.json`、`apps/web/messages/en.json` 通過。
+- `python3 -m py_compile apps/api/src/services/ai_agent_professional_task_expansion.py apps/api/src/api/v1/agents.py` 通過。
+- `DATABASE_URL=postgresql+asyncpg://test:test@localhost/test pytest -q apps/api/tests/test_ai_agent_professional_task_expansion.py apps/api/tests/test_ai_agent_professional_task_expansion_api.py` → `20 passed`。
+- `pnpm --filter @awoooi/web typecheck` 通過。
+- `python3 scripts/security/security-mirror-progress-guard.py --root .` → `SECURITY_MIRROR_PROGRESS_GUARD_OK`。
+- `python3 scripts/ops/doc-secrets-sanity-check.py docs .gitea apps/web/messages/zh-TW.json apps/web/messages/en.json 'apps/web/src/app/[locale]/governance/tabs/automation-inventory-tab.tsx' apps/web/src/lib/api-client.ts` → `DOC_SECRET_SANITY_OK scanned_files=886`。
+- `git diff --check` 通過。
+
+**完成度與邊界**：
+- AI Agent 專業任務擴展與 Telegram Runtime Bridge：`92% -> 96%`。
+- Telegram no-send preview、dedup、receipt expectation、canary approval package、canary send approval packet、canary delivery gate：皆為 `100%`。
+- Telegram 實發、Gateway queue write、Bot API call、delivery receipt production write、secret read、paid API、host write、kubectl action、production write 全部仍為 `0 / false`。
+- 下一步：P2-405E 只能在統帥明確提供 canary delivery 欄位後，才進入受控 dry-run delivery rehearsal；未批准前不得實發。
+
 ## 2026-06-16｜P2-405C AI Agent TG Canary 發送批准包

 **背景**：P2-405B 已讓治理頁看見 Telegram no-send 訊息預覽、dedup key、receipt expectation 與 canary approval package；下一步需要把第一次 TG canary 實發前的人工批准輸入、停止條件、mute / rollback 與回執讀回要求固定成可測試 artifact，但不能因「批准包已就緒」就打開 Telegram 實發或 Gateway queue。
--- a/docs/ai/AI_AGENT_12_AGENT_WAR_ROOM_2026-06-14.md
+++ b/docs/ai/AI_AGENT_12_AGENT_WAR_ROOM_2026-06-14.md
@@ -184,5 +184,5 @@ Telegram Ops 工位負責 Telegram Gateway、Channel Hub、日報/週報/月報
 狀態變更：12 位 Agent 只讀審查全部回收並彙整；已建立 `ai_agent_12_agent_war_room_v1` schema / committed snapshot / API / tests / governance UI 區塊。
 證據：`docs/schemas/ai_agent_12_agent_war_room_v1.schema.json`、`docs/evaluations/ai_agent_12_agent_war_room_2026-06-14.json`、`GET /api/v1/agents/agent-12-agent-war-room`、治理頁 12-Agent War Room 區塊、12 位 Agent 只讀回饋。
 阻擋：runtime writer、Telegram send、Bot API、production write、SDK 安裝、付費 API、shadow/canary、host update、DB migration、restore 仍未批准。
-下一步：P2-405D 承接 Telegram canary delivery gate；只有在統帥明確批准發送時間窗、單一訊息類型、目標 env ref、receipt readback owner、mute / rollback plan 與停止條件後，才可進入受控 canary delivery。P2-146 owner response receipt preview 仍屬另一條 release gate 主線；兩者都不得直接打開 Gateway queue、Telegram send、Bot API 或 production write。
+下一步：P2-405E 承接 Telegram canary dry-run delivery rehearsal；只有在統帥明確批准 delivery 欄位、單一訊息類型、目標 env ref、receipt readback owner、mute / rollback plan 與停止條件後，才可進入受控 dry-run rehearsal。P2-146 owner response receipt preview 仍屬另一條 release gate 主線；兩者都不得直接打開 Gateway queue、Telegram send、Bot API 或 production write。
 ```
--- a/docs/ai/AI_AGENT_AUTOMATION_WORKLIST_2026-06-04.md
+++ b/docs/ai/AI_AGENT_AUTOMATION_WORKLIST_2026-06-04.md
@@ -15,11 +15,19 @@
 | OpenClaw / Hermes / NemoTron 主動溝通、學習與成長證據 | 100% | P2-401A 到 P2-144 已完成只讀證據面、runtime / report / result-capture gates、no-write readback、promotion review、writer implementation review、writer dry-run fixture、writer dry-run readback、owner promotion execution gate、owner-approved execution rehearsal、owner acceptance / maintenance window gate、owner acceptance readback / preflight hold、owner-approved preflight release package、owner-approved release readiness readback、owner release approval gate、post-release verifier / rollback gate、final release candidate readback、release authorization hold / readback gate、release verifier preflight / owner review packet、release decision hold / readback、release decision next handoff、release decision input prep、12-Agent War Room、owner response 預檢與 owner response 回讀；P2-141 基線與 S4.9 owner release packet 補強皆已正式驗證，P2-142 12-Agent War Room 已完成 production readback 與 desktop / mobile smoke，P2-143 owner response 預檢已完成 production readback 與 in-app browser smoke，P2-144 owner response 回讀已完成 production API readback 與 desktop / mobile smoke。runtime worker、DB migration、production Redis consumer group、canonical runtime readback、live query、runtime score、result capture write、Telegram 實發、delivery receipt E2E、live report delivery、reviewer queue write、Gateway queue write、AI analysis runtime、中低風險 auto worker、KM / LOGBOOK / audit DB / timeline / PlayBook trust 寫入、SDK / 付費服務仍未開 gate | `ai_agent_result_capture_release_decision_owner_response_readback_v1`、`GET /api/v1/agents/agent-result-capture-release-decision-owner-response-readback`、`docs/evaluations/ai_agent_result_capture_release_decision_owner_response_readback_2026-06-14.json`、feature commit `8795f100`、deploy marker `ac938037`、Gitea code-review `2965` / CD `2964` success、5 個回覆讀回 lane、18 個 owner 必填欄位、6 個 readback validation check、6 個 rejection guard、5 個 operator action、等待外部回覆 `5`、未收件 lane `5`、正式寫入 / 發送 `0`；P2-142 feature commit `5de4b3f3`、deploy marker `1a2c9e36`、Gitea CD run `4232` success、production API readback、desktop / mobile in-app browser smoke；P2-143 feature commit `755b0a8d`、deploy marker `667d6329`、Gitea code-review `2961` / CD `2960` success、production API readback、desktop / mobile in-app browser smoke；MASTER §3.2.1b / §3.2.1d / §3.4.3 |
 | AI Agent 主動營運委派與版本生命週期 | 100% | P2-402A / P2-402B / P2-402C / P2-402D / P2-402E / P2-402F / P2-402G 已完成；已建立 repo-only 版本新鮮度快照、工具採用批准包、Telegram action-required digest policy、Gitea PR 草案 lane、host / K3s / stateful 版本只讀盤點、API 與 governance UI。定期排程、外部版本查詢、工具安裝、CI 變更、套件升級、主機更新、container pull、實際 PR creation、auto merge、Telegram 實發、SSH、kubectl、重啟仍未開 gate | `ai_agent_proactive_operations_contract_v1`、`ai_agent_version_freshness_snapshot_v1`、`ai_agent_tool_adoption_approval_package_v1`、`ai_agent_telegram_action_required_digest_policy_v1`、`ai_agent_gitea_pr_draft_lane_v1`、`ai_agent_host_stateful_version_inventory_v1`、`GET /api/v1/agents/agent-proactive-operations-contract`、`GET /api/v1/agents/agent-version-freshness-snapshot`、`GET /api/v1/agents/agent-tool-adoption-approval-package`、`GET /api/v1/agents/agent-telegram-action-required-digest-policy`、`GET /api/v1/agents/agent-gitea-pr-draft-lane`、`GET /api/v1/agents/agent-host-stateful-version-inventory`、`/zh-TW/governance?tab=automation-inventory`、MASTER §3.2.1c |
 | 12-Agent War Room 編組 | 72% | 12 個邏輯工位與分批派工規則已正式部署；OpenClaw / Hermes / NemoTron / SRE / Security / DevOps / Data/DR / Supply Chain / Product/UI / QA / Market / Telegram 共 12 份只讀審查已回收；schema / committed snapshot / API / tests / governance UI 區塊 / production API readback / desktop + mobile in-app browser smoke 已完成；runtime writer、Telegram send、Bot API、production write 仍未批准 | `ai_agent_12_agent_war_room_v1`、`docs/evaluations/ai_agent_12_agent_war_room_2026-06-14.json`、`GET /api/v1/agents/agent-12-agent-war-room`、feature commit `5de4b3f3`、deploy marker `1a2c9e36`、Gitea CD run `4232` success、`/zh-TW/governance?tab=automation-inventory`、12 份 Codex sub-agent 只讀回饋 |
-| AI Agent 專業任務擴展與 Telegram Runtime Bridge | 92% | P2-405C 已完成只讀契約、正式 API、治理頁 P2-405C 卡片、6 種 Telegram no-send preview、6 個 dedup key、6 組 receipt expectation、1 份 canary approval package、1 份 canary send approval packet、7 個批准欄位、6 個停止條件、5 步 mute / rollback 與 6 個 receipt readback check；24 類專業任務、8 個領域、5 段 Telegram bridge、6 種訊息類型、MCP/RAG stack、日報 / 週報 / 月報 / action-required 報告契約已固定；Telegram 實發、Gateway queue、Bot API、delivery receipt production write、secret read、paid API、host write、kubectl action 仍全部關閉 | `ai_agent_professional_task_expansion_v1`、`docs/evaluations/ai_agent_professional_task_expansion_2026-06-16_1015_p2_405c.json`、`GET /api/v1/agents/agent-professional-task-expansion`、`/zh-TW/governance?tab=automation-inventory`、`docs/ai/AI_AGENT_PROFESSIONAL_TASK_EXPANSION_2026-06-15.md`、需批准任務 `19`、no-send preview `6`、dedup key `6`、receipt expectation `6`、canary package `1`、canary send approval packet `1`、批准欄位 `7`、停止條件 `6`、preview / canary live write `0`；下一步 P2-405D canary delivery gate |
+| AI Agent 專業任務擴展與 Telegram Runtime Bridge | 96% | P2-405D 已完成只讀契約、正式 API、治理頁 P2-405D 卡片、6 種 Telegram no-send preview、6 個 dedup key、6 組 receipt expectation、1 份 canary approval package、1 份 canary send approval packet、1 份 canary delivery gate、8 個交付必填欄位、8 個 preflight check、7 個 hold reason、7 個 readback check、5 個 rollback / mute control；24 類專業任務、8 個領域、5 段 Telegram bridge、6 種訊息類型、MCP/RAG stack、日報 / 週報 / 月報 / action-required 報告契約已固定；Telegram 實發、Gateway queue、Bot API、delivery receipt production write、secret read、paid API、host write、kubectl action 仍全部關閉 | `ai_agent_professional_task_expansion_v1`、`docs/evaluations/ai_agent_professional_task_expansion_2026-06-16_1108_p2_405d.json`、`GET /api/v1/agents/agent-professional-task-expansion`、`/zh-TW/governance?tab=automation-inventory`、`docs/ai/AI_AGENT_PROFESSIONAL_TASK_EXPANSION_2026-06-15.md`、需批准任務 `19`、no-send preview `6`、dedup key `6`、receipt expectation `6`、canary package `1`、canary send approval packet `1`、delivery gate `1`、交付欄位 `8`、preflight `8`、hold reason `7`、preview / canary / delivery live write `0`；下一步 P2-405E canary dry-run delivery rehearsal |
 | Owner response 預檢與拒收邊界 | 100% | P2-143 已完成正式部署與 production readback；承接 P2-141 input prep 與 P2-142 War Room，只建立 owner / verifier / rollback / maintenance / live-apply 五類外部回覆的 intake 預檢、必填欄位與拒收規則；正式 owner response 尚未收到、未接受、未寫入 | `ai_agent_result_capture_release_decision_owner_response_preflight_v1`、`GET /api/v1/agents/agent-result-capture-release-decision-owner-response-preflight`、feature commit `755b0a8d`、deploy marker `667d6329`、Gitea code-review `2961` / CD `2960` success、5 個 response intake lane、18 個 required owner field、6 個 validation check、6 個 rejection guard、5 個 operator action；owner response received / accepted / redacted payload / reviewer queue / Gateway / Telegram / Bot API / production write / secret read / destructive operation 全為 `0` |
 | Owner response 回讀狀態 | 100% | P2-144 已完成正式部署與 production readback；承接 P2-143 preflight，只讀回五類外部回覆仍未收到、未接受、未拒絕、未保存 | `ai_agent_result_capture_release_decision_owner_response_readback_v1`、`GET /api/v1/agents/agent-result-capture-release-decision-owner-response-readback`、feature commit `8795f100`、deploy marker `ac938037`、Gitea code-review `2965` / CD `2964` success、5 個 response readback lane、18 個 required owner field、6 個 readback validation check、6 個 readback rejection guard、5 個 operator action、waiting external response `5`、no external response received `5`；owner response received / accepted / redacted payload / reviewer queue / Gateway / Telegram / Bot API / production write / secret read / destructive operation 全為 `0` |
 | 本工作清單與分析報告 | 100% | 已完成 | 本 MD 文件 |

+### 2026-06-16 11:08 狀態同步
+
+- `P2-405D` AI Agent TG Canary Delivery Gate 已本地完成：新增 `docs/evaluations/ai_agent_professional_task_expansion_2026-06-16_1108_p2_405d.json`，current `P2-405D`、next `P2-405E`、completion `96`。
+- P2-405D 固定 1 份 canary delivery gate、8 個 required delivery field、8 個 preflight check、7 個 hold reason、7 個 readback check、5 個 rollback / mute control。
+- 治理頁 `automation-inventory` 已顯示 P2-405D delivery gate、交付必填欄位、preflight、hold reason、delivery approved / attempt allowed / queue / Bot API 狀態。
+- 本地證據：JSON parse、Python compile、AI Agent professional task expansion API/service regression `20 passed`、Web typecheck、安全掃描與 diff check 通過。
+- Telegram send、Gateway queue write、Bot API call、delivery receipt production write、secret read、paid API、host write、kubectl action、production write 全部仍為 `0 / false`；P2-405E 才能進入受控 dry-run delivery rehearsal，且不得實發。
+
 ### 2026-06-16 10:15 狀態同步

 - `P2-405C` AI Agent TG Canary 發送批准包已本地完成：新增 `docs/evaluations/ai_agent_professional_task_expansion_2026-06-16_1015_p2_405c.json`，current `P2-405C`、next `P2-405D`、completion `92`。
@@ -1425,7 +1433,7 @@ UI：
 ## 13. 立即執行順序

 1. P2-004：依賴 / 供應鏈漂移監控，保持只讀觀察與批准包邊界。
-2. P2-405D：AI Agent Telegram canary delivery gate；只有統帥明確批准發送時間窗、單一訊息類型、目標 env ref、receipt readback owner、mute / rollback plan 與停止條件後，才可進入受控 canary delivery；未批准前仍不得實發。
+2. P2-405E：AI Agent Telegram canary dry-run delivery rehearsal；只有統帥明確批准 delivery 欄位、單一訊息類型、目標 env ref、receipt readback owner、mute / rollback plan 與停止條件後，才可進入受控 dry-run rehearsal；未批准前仍不得實發。
 3. P3-001：外部 Agent / SDK / API 相關能力仍需證據、費用批准與 shadow / canary 關卡。

 ## 14. 目前風險
--- a/docs/ai/AI_AGENT_PROFESSIONAL_TASK_EXPANSION_2026-06-15.md
+++ b/docs/ai/AI_AGENT_PROFESSIONAL_TASK_EXPANSION_2026-06-15.md
@@ -1,14 +1,14 @@
 # AI Agent 專業任務擴展與 Telegram Runtime Bridge 工作報告

 > 日期：2026-06-16（台北時間）
-> 狀態：P2-405C 已完成 Canary 發送批准包、7 個必填批准欄位、6 個停止條件、5 步 mute / rollback、6 個 receipt readback check、API guard、測試與治理頁可視化；Telegram 實發仍未啟用。
+> 狀態：P2-405D 已完成 Telegram Canary Delivery Gate、8 個交付必填欄位、8 個 preflight check、7 個 hold reason、7 個 readback check、5 個 rollback / mute 控制、API guard、測試與治理頁可視化；Telegram 實發仍未啟用。
 > 事實來源：`ai_agent_professional_task_expansion_v1`

 ## 1. 結論

-本輪把「AI Agent 還能處理哪些專業工作」正式產品化成 24 類專業任務，並把 Telegram 群組 / TG Bot 整合拆成 5 段啟動前閘門。P2-405C 進一步把第一次 Canary 發送前必須由統帥確認的批准欄位、停止條件、mute / rollback 與 receipt readback plan 顯示到治理頁。
+本輪把「AI Agent 還能處理哪些專業工作」正式產品化成 24 類專業任務，並把 Telegram 群組 / TG Bot 整合拆成 5 段啟動前閘門。P2-405D 進一步把第一次 Canary delivery 前必須由統帥確認的交付欄位、preflight、hold reason、rollback / mute 與 readback plan 顯示到治理頁。

-這不是直接讓 AI Agent 發 Telegram 或改 production；目前只允許 no-send preview、queue preview readback、owner review、canary approval package 與 canary send approval packet。真正送到 **AwoooI SRE 戰情室** 必須先通過統帥明確批准、approved canary、dedup、receipt、redaction、OpenClaw 仲裁、Security gate 與 QA verifier。
+這不是直接讓 AI Agent 發 Telegram 或改 production；目前只允許 no-send preview、queue preview readback、owner review、canary approval package、canary send approval packet 與 canary delivery gate。真正送到 **AwoooI SRE 戰情室** 必須先通過統帥明確批准、approved canary、dedup、receipt、redaction、OpenClaw 仲裁、Security gate 與 QA verifier。

 ## 2. 完成度

@@ -18,8 +18,9 @@
 | Telegram Runtime Bridge 契約 | 100% | no-send preview、queue preview、approved canary、日週月報、action-required digest 已分段 |
 | Telegram no-send 訊息預覽 | 100% | 6 種訊息預覽、6 個 dedup key、6 組 receipt expectation、1 份 canary approval package 已固定 |
 | Canary 發送批准包 | 100% | 1 份 canary send approval packet、7 個批准欄位、6 個停止條件、5 步 mute / rollback、6 個 receipt readback check 已固定 |
+| Canary Delivery Gate | 100% | 1 份 delivery gate、8 個交付必填欄位、8 個 preflight、7 個 hold reason、7 個 readback check、5 個 rollback / mute 控制已固定 |
 | API / loader | 100% | `GET /api/v1/agents/agent-professional-task-expansion` 只讀輸出 |
-| 治理頁可視化 | 100% | `/zh-TW/governance?tab=automation-inventory` 顯示任務、風險、TG bridge、preview、dedup、receipt、canary 與 live/send/write=0 |
+| 治理頁可視化 | 100% | `/zh-TW/governance?tab=automation-inventory` 顯示任務、風險、TG bridge、preview、dedup、receipt、canary、delivery gate 與 live/send/write=0 |
 | Telegram 實發 | 0% | `telegram_send_count=0`、`bot_api_call_count=0`、`gateway_queue_write_count=0` |
 | Runtime 自動優化 | 0% | production write、host write、kubectl、paid API、secret read 全部維持 0 |

@@ -74,7 +75,24 @@

 Canary 發送批准包固定 6 個停止條件、5 步 mute / rollback plan、6 個 receipt readback check；`canary_send_execution_enabled`、`gateway_queue_write_enabled`、`bot_api_call_enabled`、`delivery_receipt_write_enabled`、`production_write_enabled`、`secret_read_enabled`、`paid_api_enabled` 全部仍為 `false`。

-## 7. 專業任務總覽
+## 7. P2-405D Canary Delivery Gate
+
+目前 canary delivery gate 狀態為 `blocked_waiting_commander_delivery_fields`，`gate_ready=true`，但 `delivery_approved=false`、`delivery_attempt_allowed=false`、`selected_message_type=not_selected`、`approved_time_window=not_approved`、`target_room_verified=false`。
+
+| 必填交付欄位 | 目前狀態 | 邊界 |
+|---|---|---|
+| 統帥批准本次 delivery | waiting input | 未批准不得交付 |
+| 單一訊息類型 | waiting input | 不允許多訊息型別同時交付 |
+| 交付時間窗 | waiting input | 無時間窗即 hold |
+| 目標 env ref | waiting input | 只顯示 env ref，不顯示 room value |
+| receipt readback owner | waiting input | 未指定 owner 即 hold |
+| mute / rollback plan | waiting input | 錯誤時必須可停用 |
+| failure stop condition | waiting input | 任一失敗停止，不重試洗版 |
+| dry-run readback evidence ref | waiting input | 必須先有只讀證據 |
+
+Canary delivery gate 固定 8 個 preflight check、7 個 hold reason、7 個 readback check 與 5 個 rollback / mute control；`live_delivery_enabled`、`gateway_queue_write_enabled`、`bot_api_call_enabled`、`delivery_receipt_write_enabled`、`production_write_enabled`、`secret_read_enabled`、`paid_api_enabled` 全部仍為 `false`。
+
+## 8. 專業任務總覽

 | 領域 | 任務數 | 代表任務 | 主責 |
 |---|---:|---|---|
@@ -87,7 +105,7 @@ Canary 發送批准包固定 6 個停止條件、5 步 mute / rollback plan、6
 | AI Governance / Replay / Market | 4 | market watch、NemoTron replay、cost forecast、runbook/postmortem | OpenClaw / NemoTron / Hermes |
 | Telegram / Reports / Receipts | 3 | digest preview、report truth gate、post-action verifier | Telegram Ops / Hermes / OpenClaw |

-## 8. 專業能力層級
+## 9. 專業能力層級

 | 層級 | AI Agent 可自動做 | Gate |
 |---|---|---|
@@ -96,7 +114,7 @@ Canary 發送批准包固定 6 個停止條件、5 步 mute / rollback plan、6
 | 高風險 | 只產批准包、rollback plan、failure-only digest 草案 | 統帥批准 |
 | Critical | production write、kubectl、ArgoCD sync、Telegram 實發、secret、restore、host write | 預設 blocked |

-## 9. MCP / RAG
+## 10. MCP / RAG

 首批 MCP：Gitea、Browser、Observability、Telegram Gateway、Package Registry、Database Readonly、Backup Status、ArgoCD Readonly、HTTP Probe、Fixture Store。

@@ -104,7 +122,7 @@ Canary 發送批准包固定 6 個停止條件、5 步 mute / rollback plan、6

 成長指標：KM entries、PlayBook updates、recommendations、replay score delta、blocked action prevented count、receipt missing count。

-## 10. 邊界
+## 11. 邊界

 - 不直接發 Telegram。
 - 不寫 Telegram Gateway queue。
@@ -113,9 +131,9 @@ Canary 發送批准包固定 6 個停止條件、5 步 mute / rollback plan、6
 - 不把工作視窗對話、未遮罩提示、私人推理或未遮罩 runtime payload 放進前端或 Telegram。
 - 不做 production write、host write、kubectl、ArgoCD sync、restore、rollback、paid API、SDK install。

-## 11. 下一步
+## 12. 下一步

-1. P2-405D：統帥明確批准 canary 發送時間窗、單一訊息類型、目標 env ref、receipt readback owner 與停止條件後，才進入受控 canary delivery gate。
-2. P2-405E：canary 通過後才開日報 / 週報 / 月報 digest delivery。
-3. P2-405F：Action-required digest 只對 failure / high-risk / approval-required 事件開啟。
+1. P2-405E：統帥明確批准 canary delivery 欄位、單一訊息類型、時間窗、目標 env ref、receipt readback owner 與停止條件後，才進入受控 dry-run delivery rehearsal。
+2. P2-405F：canary 通過後才開日報 / 週報 / 月報 digest delivery。
+3. P2-405G：Action-required digest 只對 failure / high-risk / approval-required 事件開啟。
 4. P2-405G：把 receipt readback 與 report status board 串起來，但仍需 canary gate 後才能寫正式 receipt。
--- a/docs/evaluations/ai_agent_professional_task_expansion_2026-06-16_1108_p2_405d.json
+++ b/docs/evaluations/ai_agent_professional_task_expansion_2026-06-16_1108_p2_405d.json
--- a/docs/schemas/ai_agent_professional_task_expansion_v1.schema.json
+++ b/docs/schemas/ai_agent_professional_task_expansion_v1.schema.json
@@ -38,13 +38,18 @@
      ],
      "properties": {
        "current_priority": {
-          "enum": ["P0", "P1", "P2", "P3"]
+          "enum": [
+            "P0",
+            "P1",
+            "P2",
+            "P3"
+          ]
        },
        "current_task_id": {
-          "const": "P2-405C"
+          "const": "P2-405D"
        },
        "next_task_id": {
-          "const": "P2-405D"
+          "const": "P2-405E"
        },
        "overall_completion_percent": {
          "type": "integer",
@@ -92,7 +97,8 @@
        "queue_preview_readback",
        "receipt_expectations",
        "canary_approval_package",
-        "canary_send_approval_packet"
+        "canary_send_approval_packet",
+        "canary_delivery_gate"
      ],
      "properties": {
        "canonical_room": {
@@ -201,7 +207,12 @@
        },
        "dedup_policy": {
          "type": "object",
-          "required": ["required", "key_count", "live_cache_write_enabled", "keys"],
+          "required": [
+            "required",
+            "key_count",
+            "live_cache_write_enabled",
+            "keys"
+          ],
          "properties": {
            "required": {
              "const": true
@@ -222,7 +233,12 @@
        },
        "queue_preview_readback": {
          "type": "object",
-          "required": ["enabled", "preview_only", "write_enabled", "readback_enabled"],
+          "required": [
+            "enabled",
+            "preview_only",
+            "write_enabled",
+            "readback_enabled"
+          ],
          "properties": {
            "enabled": {
              "const": true
@@ -435,6 +451,169 @@
            }
          },
          "additionalProperties": true
+        },
+        "canary_delivery_gate": {
+          "type": "object",
+          "required": [
+            "gate_id",
+            "status",
+            "gate_ready",
+            "delivery_approved",
+            "delivery_attempt_allowed",
+            "selected_message_type",
+            "selected_message_type_source",
+            "target_room_alias",
+            "target_room_env",
+            "target_room_value_visible",
+            "target_room_verified",
+            "proposed_time_window",
+            "approved_time_window",
+            "owner_agent",
+            "arbiter",
+            "reviewers",
+            "required_delivery_fields",
+            "preflight_checks",
+            "hold_reasons",
+            "delivery_attempt_plan",
+            "readback_after_approval_plan",
+            "rollback_mute_controls",
+            "execution_flags",
+            "delivery_decision_log"
+          ],
+          "properties": {
+            "status": {
+              "const": "blocked_waiting_commander_delivery_fields"
+            },
+            "gate_ready": {
+              "const": true
+            },
+            "delivery_approved": {
+              "const": false
+            },
+            "delivery_attempt_allowed": {
+              "const": false
+            },
+            "selected_message_type": {
+              "const": "not_selected"
+            },
+            "target_room_env": {
+              "const": "SRE_GROUP_CHAT_ID"
+            },
+            "target_room_value_visible": {
+              "const": false
+            },
+            "target_room_verified": {
+              "const": false
+            },
+            "proposed_time_window": {
+              "const": "waiting_commander_input"
+            },
+            "approved_time_window": {
+              "const": "not_approved"
+            },
+            "required_delivery_fields": {
+              "type": "array",
+              "minItems": 8,
+              "maxItems": 8
+            },
+            "preflight_checks": {
+              "type": "array",
+              "minItems": 8,
+              "maxItems": 8
+            },
+            "hold_reasons": {
+              "type": "array",
+              "minItems": 7,
+              "maxItems": 7
+            },
+            "delivery_attempt_plan": {
+              "type": "object",
+              "properties": {
+                "max_messages": {
+                  "const": 1
+                },
+                "send_mode": {
+                  "const": "blocked_no_send"
+                },
+                "live_delivery_enabled": {
+                  "const": false
+                },
+                "gateway_queue_write_enabled": {
+                  "const": false
+                },
+                "bot_api_call_enabled": {
+                  "const": false
+                },
+                "delivery_receipt_write_enabled": {
+                  "const": false
+                },
+                "production_write_enabled": {
+                  "const": false
+                },
+                "secret_read_enabled": {
+                  "const": false
+                },
+                "paid_api_enabled": {
+                  "const": false
+                }
+              },
+              "additionalProperties": true
+            },
+            "readback_after_approval_plan": {
+              "type": "object",
+              "properties": {
+                "enabled_before_delivery": {
+                  "const": false
+                },
+                "production_receipt_write_enabled": {
+                  "const": false
+                },
+                "required_checks": {
+                  "type": "array",
+                  "minItems": 7,
+                  "maxItems": 7
+                }
+              },
+              "additionalProperties": true
+            },
+            "rollback_mute_controls": {
+              "type": "array",
+              "minItems": 5,
+              "maxItems": 5
+            },
+            "execution_flags": {
+              "type": "object",
+              "properties": {
+                "live_delivery_enabled": {
+                  "const": false
+                },
+                "gateway_queue_write_enabled": {
+                  "const": false
+                },
+                "bot_api_call_enabled": {
+                  "const": false
+                },
+                "delivery_receipt_write_enabled": {
+                  "const": false
+                },
+                "production_write_enabled": {
+                  "const": false
+                },
+                "secret_read_enabled": {
+                  "const": false
+                },
+                "paid_api_enabled": {
+                  "const": false
+                }
+              },
+              "additionalProperties": true
+            },
+            "delivery_decision_log": {
+              "type": "array",
+              "maxItems": 0
+            }
+          },
+          "additionalProperties": true
        }
      },
      "additionalProperties": true
@@ -479,7 +658,12 @@
            "type": "string"
          },
          "risk_tier": {
-            "enum": ["low", "medium", "high", "critical"]
+            "enum": [
+              "low",
+              "medium",
+              "high",
+              "critical"
+            ]
          },
          "automation_mode": {
            "enum": [
@@ -583,7 +767,20 @@
        "canary_gateway_queue_write_enabled_count",
        "canary_bot_api_call_enabled_count",
        "canary_delivery_receipt_write_enabled_count",
-        "canary_secret_read_enabled_count"
+        "canary_secret_read_enabled_count",
+        "canary_delivery_gate_count",
+        "canary_delivery_required_field_count",
+        "canary_delivery_preflight_check_count",
+        "canary_delivery_hold_reason_count",
+        "canary_delivery_readback_check_count",
+        "canary_delivery_rollback_mute_control_count",
+        "canary_delivery_approved_count",
+        "canary_delivery_attempt_allowed_count",
+        "canary_delivery_live_send_enabled_count",
+        "canary_delivery_gateway_queue_write_enabled_count",
+        "canary_delivery_bot_api_call_enabled_count",
+        "canary_delivery_secret_read_enabled_count",
+        "canary_delivery_paid_api_enabled_count"
      ],
      "properties": {
        "professional_task_count": {
@@ -708,6 +905,45 @@
        },
        "canary_secret_read_enabled_count": {
          "const": 0
+        },
+        "canary_delivery_gate_count": {
+          "const": 1
+        },
+        "canary_delivery_required_field_count": {
+          "const": 8
+        },
+        "canary_delivery_preflight_check_count": {
+          "const": 8
+        },
+        "canary_delivery_hold_reason_count": {
+          "const": 7
+        },
+        "canary_delivery_readback_check_count": {
+          "const": 7
+        },
+        "canary_delivery_rollback_mute_control_count": {
+          "const": 5
+        },
+        "canary_delivery_approved_count": {
+          "const": 0
+        },
+        "canary_delivery_attempt_allowed_count": {
+          "const": 0
+        },
+        "canary_delivery_live_send_enabled_count": {
+          "const": 0
+        },
+        "canary_delivery_gateway_queue_write_enabled_count": {
+          "const": 0
+        },
+        "canary_delivery_bot_api_call_enabled_count": {
+          "const": 0
+        },
+        "canary_delivery_secret_read_enabled_count": {
+          "const": 0
+        },
+        "canary_delivery_paid_api_enabled_count": {
+          "const": 0
        }
      },
      "additionalProperties": true
--- a/docs/superpowers/specs/2026-04-15-MASTER-ai-autonomous-flywheel-v2.md
+++ b/docs/superpowers/specs/2026-04-15-MASTER-ai-autonomous-flywheel-v2.md
@@ -638,7 +638,7 @@ Alert / Sentry / SigNoz / Gitea / Market Watch / Operator
 | `docs/evaluations/ai_agent_report_runtime_dry_run_2026-06-12.json` + `GET /api/v1/agents/agent-report-runtime-dry-run` | P2-403M 報表 runtime no-write dry-run 證據包；建立 5 個 dry-run artifact、3 個 SRE 戰情室 queue digest 草案、4 個 readback verifier case、3 個 Agent dry-run role 與 6 個 operator checkpoint；不寫 Gateway queue、不送 Telegram、不呼叫 Bot API、不寫 delivery receipt、不啟動 worker、不跑 verifier live readback、不讀 secret，已由 P2-403N fixture readback 承接 |
 | `docs/evaluations/ai_agent_report_runtime_fixture_readback_2026-06-12.json` + `GET /api/v1/agents/agent-report-runtime-fixture-readback` | P2-403N fixture smoke / queue preview readback / verifier dry-run 證據包；建立 5 個 fixture smoke、3 個 SRE 戰情室 queue preview readback、4 個 verifier dry-run case、3 個 Agent fixture role 與 5 個 operator checkpoint；不寫 Gateway queue、不送 Telegram、不呼叫 Bot API、不寫 delivery receipt、不啟動 worker、不跑 verifier live readback、不讀 secret，下一步 P2-404 |
 | `docs/evaluations/ai_agent_runtime_worker_shadow_gate_2026-06-12.json` + `GET /api/v1/agents/agent-runtime-worker-shadow-gate` | P2-404 runtime worker shadow / no-write execution evidence gate；建立 5 個 shadow candidate、4 個 no-write replay、4 個 verifier shadow case、3 個 Agent shadow role 與 6 個 operator checkpoint；shadow live worker、Gateway queue write、Telegram send、Bot API、delivery receipt、auto worker、verifier live readback、production write 與 secret read 全部 `0 / false`，下一步 P2-101 |
-| `docs/evaluations/ai_agent_professional_task_expansion_2026-06-16_1015_p2_405c.json` + `GET /api/v1/agents/agent-professional-task-expansion` | P2-405C AI Agent 專業任務擴展與 Telegram Runtime Bridge；承接 12-Agent War Room、P2-403 report/runtime 鏈與 monitoring owner response acceptance，固定 24 類專業任務、8 個任務領域、5 段 Telegram bridge、6 種訊息類型、6 個 no-send preview、6 個 dedup key、6 組 receipt expectation、1 份 canary approval package、1 份 canary send approval packet、7 個批准欄位、6 個停止條件、5 步 mute / rollback、6 個 receipt readback check、MCP/RAG stack、日報 / 週報 / 月報 / action-required 報告契約，並接入 governance automation inventory 卡片；需批准任務 `19`、preview / canary live write `0`；Gateway queue write、Telegram send、Bot API、delivery receipt production write、production write、secret read、paid API、host write 與 kubectl action 全部 `0 / false`，下一步 P2-405D canary delivery gate |
+| `docs/evaluations/ai_agent_professional_task_expansion_2026-06-16_1108_p2_405d.json` + `GET /api/v1/agents/agent-professional-task-expansion` | P2-405D AI Agent 專業任務擴展與 Telegram Runtime Bridge；承接 12-Agent War Room、P2-403 report/runtime 鏈與 monitoring owner response acceptance，固定 24 類專業任務、8 個任務領域、5 段 Telegram bridge、6 種訊息類型、6 個 no-send preview、6 個 dedup key、6 組 receipt expectation、1 份 canary approval package、1 份 canary send approval packet、1 份 canary delivery gate、8 個交付必填欄位、8 個 preflight check、7 個 hold reason、7 個 readback check、5 個 rollback / mute control、MCP/RAG stack、日報 / 週報 / 月報 / action-required 報告契約，並接入 governance automation inventory 卡片；需批准任務 `19`、preview / canary / delivery live write `0`；Gateway queue write、Telegram send、Bot API、delivery receipt production write、production write、secret read、paid API、host write 與 kubectl action 全部 `0 / false`，下一步 P2-405E canary dry-run delivery rehearsal |
 | `docs/evaluations/ai_agent_operation_permission_model_2026-06-12.json` + `GET /api/v1/agents/agent-operation-permission-model` | P2-101 操作類別權限模型；建立 5 條 permission lane、13 類 operation category、3 個 Agent permission role、8 個 gate transition 與 5 個 operator decision template；runtime execution、Gateway queue write、Telegram send、Bot API、delivery receipt、auto worker、verifier live readback、production write、secret / paid provider、host command 與 destructive action 全部 `0 / false`，已由 P2-102 承接 |
 | `docs/evaluations/ai_agent_candidate_operation_dry_run_evidence_2026-06-12.json` + `GET /api/v1/agents/agent-candidate-operation-dry-run-evidence` | P2-102 候選操作 dry-run 證據；13 類候選操作全部具備 input / output evidence hash、side-effect count、verifier plan、rollback/no-op plan 與人工 handoff；6 個 verifier plan、7 個 gate evidence requirement、5 個 operator handoff；runtime、Gateway queue、Telegram、production write、secret / paid provider 與 destructive action 全部 `0 / false`，已由 P2-103 承接 |
 | `docs/evaluations/ai_agent_task_result_audit_trail_2026-06-13.json` + `GET /api/v1/agents/agent-task-result-audit-trail` | P2-103 任務結果稽核軌跡；8 條 result route、6 個 writeback contract、7 個 audit checkpoint、5 個 operator handoff；把 diagnostic-only、repair candidate、execution failed、provider unmatched、report zero-signal 等結果固定到 KM 草稿、LOGBOOK 證據、audit trail、timeline 與人工下一步；KM / LOGBOOK / audit DB / timeline / PlayBook trust / Gateway queue / Telegram 寫入全為 `0 / false`，已由 P2-104 承接 |
@@ -841,7 +841,7 @@ Repo / registry / release notes / K8s / host / observability / backup evidence
 64. 建立 owner response preflight 與拒收邊界。✅ P2-143 已完成正式驗證；承接 P2-141 decision input prep 與 P2-142 War Room 基線，固定 response intake lane `5`、required owner field `18`、intake validation check `6`、rejection guard `6`、operator action `5`、waiting external response `5`；owner response received / accepted / rejected、redacted payload ingested、reviewer queue write、Gateway queue write、Telegram send、Bot API、result capture、learning、PlayBook trust、production write、secret read、destructive operation 仍為 `0 / false`；feature commit `755b0a8d`、deploy marker `667d6329`、Gitea code-review `2961` / CD `2960` success、本地 P2-142 War Room + P2-139 至 P2-143 regression `37 passed`、JSON parse、Python compile、Web typecheck、guard、doc secret sanity、禁用外露值掃描、production API readback 與 desktop / mobile smoke 通過。下一步 P2-144 owner response readback。
 65. 建立 owner response readback。✅ P2-144 已完成正式驗證；承接 P2-143 preflight，固定 response readback lane `5`、required owner field `18`、readback validation check `6`、readback rejection guard `6`、operator action `5`、waiting external response `5`、no external response received lane `5`；owner response received / accepted / rejected、redacted payload ingested、reviewer queue write、Gateway queue write、Telegram send、Bot API、result capture、learning、PlayBook trust、production write、secret read、destructive operation 仍為 `0 / false`；feature commit `8795f100`、deploy marker `ac938037`、Gitea code-review `2965` / CD `2964` success；本地 P2-139 至 P2-144 regression `45 passed`，rebase 後含 tenants regression 的推送前回歸 `47 passed`、JSON parse、Python compile、Web typecheck、guard、doc secret sanity、value-only 禁用外露值掃描、i18n key parity 與 diff check 通過；production API readback、desktop / mobile smoke、水平溢位 `0`、危險控制 `0`、工作溝通片語命中 `0` 已完成。下一步 P2-145 owner response acceptance gate。
 66. 建立 owner response acceptance gate。✅ P2-145 已完成並正式驗證；承接 P2-144 readback，固定 acceptance gate lane `5`、required owner field `18`、acceptance validation check `6`、acceptance rejection guard `6`、operator action `5`、blocked no external response `5`、no acceptable external response `5`；owner response received / accepted / rejected、redacted payload ingested、reviewer queue write、Gateway queue write、Telegram send、Bot API、result capture、learning、PlayBook trust、production write、secret read、destructive operation 仍為 `0 / false`；feature commit `386dbd07`、deploy marker `36fbfc6b`、Gitea code-review `2969` / CD `2968` success；P2-144 + P2-145 regression `16 passed`、JSON parse、Python compile、Web typecheck、guard、doc secret sanity、顯示值工作視窗污染掃描、i18n key parity、diff check、production API readback、in-app browser smoke、desktop / mobile smoke、水平溢位 `0`、P2-145 卡片操作控制 `0`、工作溝通片語命中 `0` 已完成。下一步 P2-146 acceptance receipt preview，且必須等合格、遮罩、欄位完整、可驗證來源的外部正式回覆後才能建立 receipt preview。
-66a. 建立 AI Agent 專業任務擴展與 Telegram Runtime Bridge。✅ P2-405C 本地完成；承接 12-Agent War Room、P2-403 report/runtime 鏈與 monitoring owner response acceptance，固定 24 類專業任務、8 個領域、5 段 Telegram bridge、6 種訊息類型、6 個 no-send preview、6 個 dedup key、6 組 receipt expectation、1 份 canary approval package、1 份 canary send approval packet、7 個批准欄位、6 個停止條件、5 步 mute / rollback、6 個 receipt readback check 與 MCP/RAG stack，並接入 governance automation inventory 卡片；需批准任務 `19`、low / medium / high / critical = `3 / 10 / 6 / 5`；Gateway queue write、Telegram send、Bot API、delivery receipt production write、production write、secret read、paid API、host write、kubectl action 仍為 `0 / false`。下一步 P2-405D canary delivery gate；這不占用 P2-146 owner response receipt preview。
+66a. 建立 AI Agent 專業任務擴展與 Telegram Runtime Bridge。✅ P2-405D 本地完成；承接 12-Agent War Room、P2-403 report/runtime 鏈與 monitoring owner response acceptance，固定 24 類專業任務、8 個領域、5 段 Telegram bridge、6 種訊息類型、6 個 no-send preview、6 個 dedup key、6 組 receipt expectation、1 份 canary approval package、1 份 canary send approval packet、1 份 canary delivery gate、8 個交付必填欄位、8 個 preflight check、7 個 hold reason、7 個 readback check、5 個 rollback / mute control 與 MCP/RAG stack，並接入 governance automation inventory 卡片；需批准任務 `19`、low / medium / high / critical = `3 / 10 / 6 / 5`；Gateway queue write、Telegram send、Bot API、delivery receipt production write、production write、secret read、paid API、host write、kubectl action 仍為 `0 / false`。下一步 P2-405E canary dry-run delivery rehearsal；這不占用 P2-146 owner response receipt preview。
 67. 新增 P0 配置控管優先序前台可視化。✅ 正式驗證完成；`/zh-TW/iwooos` 已集中顯示 Nginx public gateway、DNS / TLS / certbot、K8s / ArgoCD / production manifests、Workflow / runner / secret metadata、Public / admin / API runtime config、agent-bounty runtime / treasury 六類即時風險配置；owner response `0 / 0`、live evidence `0`、執行期 `0`、操作按鈕 `0`；feature commit `e992af89`、deploy marker `ed651a98`、Gitea code-review `2971` / CD `2970` success；本地與正式 in-app browser、desktop `1440x1100`、mobile `390x844` smoke 通過。這不是 Nginx live conf 讀取、`nginx -t`、reload、DNS / TLS probe、certbot renew、ArgoCD sync、kubectl、workflow / secret 修改、public route change、agent-bounty runtime、payout / withdrawal、production write 或 runtime gate。
 68. 補強 P0 高價值配置 Gate path pattern、工作樹 preflight、owner packet 與 coverage snapshot。✅ 本地完成；`k8s/nginx/**`、`scripts/ops/**/*cert*`、`scripts/ops/**/*tls*` 已納入 high-value config classification，Nginx public gateway 與 DNS / TLS / certbot sample 從 `matched=0 / C0=0` 收斂到 `matched=3 / C0=2`；gate snapshot 顯示 `changed_files=6`、`matched=6`、`categories=3`、`c0=2`、`c1=0`；預設模式已可讀取 staged / unstaged / untracked，臨時 `k8s/nginx/*` smoke 命中 C0；owner packet snapshot `packets=3 / c0=2 / runtime_gate=0`；coverage snapshot `categories=14 / c0=8 / avg=67 / runtime_gate=0`；owner evidence 仍 `provided=false / complete=false`，runtime execution 仍 `false`。這不是 live config read、`nginx -t`、reload、certbot renew、DNS / TLS probe、host write、active scan、workflow 修改、secret 收集、production write 或 runtime gate。
 69. 同步高價值配置 Owner Packet 前台 projection。✅ 已完成並正式驗證；`/zh-TW/iwooos` 與 `/zh-TW/awooop` 已顯示 owner packet snapshot `packet=3 / c0=2`、最高命中 `C0 / P0`、Nginx public gateway、DNS / TLS / certbot 與 security tooling 影響範圍；feature commit `e999c16b`、deploy marker `16c6b983`、Gitea code-review `2973` / CD `2972` success；request sent、received、accepted、runtime gate 與 action buttons 仍為 `0`；本地與正式 desktop / mobile / in-app browser smoke 已通過，水平溢位 `0`、卡片內操作控制 `0`、危險連結 `0`、工作溝通片語命中 `0`。不得因此調高 IwoooS headline。
@@ -894,7 +894,7 @@ Repo / registry / release notes / K8s / host / observability / backup evidence
 | `docs/evaluations/ai_agent_report_runtime_dry_run_2026-06-12.json` + `GET /api/v1/agents/agent-report-runtime-dry-run` | P2-403M 報表 runtime no-write dry-run 證據包；5 個 dry-run artifact、3 個 queue digest 草案、4 個 readback verifier case、3 個 Agent dry-run role、6 個 operator checkpoint；不寫 Gateway queue、不送 Telegram、不呼叫 Bot API、不寫 delivery receipt、不啟動 worker、不跑 verifier live readback |
 | `docs/evaluations/ai_agent_report_runtime_fixture_readback_2026-06-12.json` + `GET /api/v1/agents/agent-report-runtime-fixture-readback` | P2-403N fixture smoke / queue preview readback / verifier dry-run 證據包；5 個 fixture smoke、3 個 queue preview readback、4 個 verifier dry-run case、3 個 Agent fixture role、5 個 operator checkpoint；不寫 Gateway queue、不送 Telegram、不呼叫 Bot API、不寫 delivery receipt、不啟動 worker、不跑 verifier live readback |
 | `docs/evaluations/ai_agent_runtime_worker_shadow_gate_2026-06-12.json` + `GET /api/v1/agents/agent-runtime-worker-shadow-gate` | P2-404 runtime worker shadow / no-write execution evidence gate；5 個 shadow candidate、4 個 no-write replay、4 個 verifier shadow case、3 個 Agent shadow role、6 個 operator checkpoint；不啟動 live worker、不寫 Gateway queue、不送 Telegram、不呼叫 Bot API、不寫 production target |
-| `docs/evaluations/ai_agent_professional_task_expansion_2026-06-16_1015_p2_405c.json` + `GET /api/v1/agents/agent-professional-task-expansion` | P2-405C AI Agent 專業任務擴展與 Telegram Runtime Bridge；24 類專業任務、8 個領域、5 段 Telegram bridge、6 種訊息類型、6 個 no-send preview、6 個 dedup key、6 組 receipt expectation、1 份 canary approval package、1 份 canary send approval packet、7 個批准欄位、6 個停止條件、5 步 mute / rollback、6 個 receipt readback check、MCP/RAG stack、治理頁 P2-405C 卡片；不寫 Gateway queue、不送 Telegram、不呼叫 Bot API、不寫 production target、不讀 secret、不用 paid API |
+| `docs/evaluations/ai_agent_professional_task_expansion_2026-06-16_1108_p2_405d.json` + `GET /api/v1/agents/agent-professional-task-expansion` | P2-405D AI Agent 專業任務擴展與 Telegram Runtime Bridge；24 類專業任務、8 個領域、5 段 Telegram bridge、6 種訊息類型、6 個 no-send preview、6 個 dedup key、6 組 receipt expectation、1 份 canary approval package、1 份 canary send approval packet、1 份 canary delivery gate、8 個交付必填欄位、8 個 preflight check、7 個 hold reason、7 個 readback check、5 個 rollback / mute control、MCP/RAG stack、治理頁 P2-405D 卡片；不寫 Gateway queue、不送 Telegram、不呼叫 Bot API、不寫 production target、不讀 secret、不用 paid API |
 | `docs/evaluations/ai_agent_operation_permission_model_2026-06-12.json` + `GET /api/v1/agents/agent-operation-permission-model` | P2-101 操作類別權限模型；5 條 permission lane、13 類 operation category、3 個 Agent permission role、8 個 gate transition、5 個 operator decision template；不啟動 runtime worker、不寫 Gateway queue、不送 Telegram、不呼叫 Bot API、不寫 production target、不讀 secret |
 | `docs/evaluations/ai_agent_candidate_operation_dry_run_evidence_2026-06-12.json` + `GET /api/v1/agents/agent-candidate-operation-dry-run-evidence` | P2-102 候選操作 dry-run 證據；13 類候選操作、13 組 dry-run evidence、6 個 verifier plan、7 個 gate evidence requirement、5 個 operator handoff；不啟動 runtime worker、不寫 Gateway queue、不送 Telegram、不呼叫 Bot API、不寫 production target、不讀 secret、不執行 destructive action |
 | `docs/evaluations/ai_agent_task_result_audit_trail_2026-06-13.json` + `GET /api/v1/agents/agent-task-result-audit-trail` | P2-103 任務結果稽核軌跡；8 條 result route、6 個 writeback contract、7 個 audit checkpoint、5 個 operator handoff；不寫 KM、不 runtime append LOGBOOK、不寫 audit DB、不寫 timeline、不更新 PlayBook trust、不寫 Gateway queue、不送 Telegram |
@@ -5017,3 +5017,15 @@ Trigger commit `f5cd37b7` 與 deploy marker `0ba92357` 已把 governance UI 的
 - 新增 / 更新測試，明確拒絕 canary approval granted、selected message type、canary execution enabled、Gateway queue write、Bot API call、delivery receipt production write、secret read 或 paid API 被提前打開。

 **裁決：** 這是 canary send approval packet，不是 Telegram send、Gateway queue write、Bot API call、delivery receipt production write、approved canary delivery、production write、secret read、host write、kubectl action 或 runtime authorization；下一步 P2-405D 只能在統帥明確填入 canary 發送批准欄位後進入受控 delivery gate，未批准前不得實發。
+
+### 2026-06-16 11:08 (台北) — §3.2 / §5 — 新增 P2-405D Canary Delivery Gate — 把 TG canary 交付前最後欄位與 preflight 固定成 no-send gate
+
+**觸發**：P2-405C 已建立 canary send approval packet，但仍需要一層 delivery gate 明確呈現哪些交付欄位未填、哪些 preflight 未通過、哪些 hold reason 仍阻擋，避免把「批准包就緒」誤判成 Gateway queue write、Bot API call 或 Telegram 實發授權。
+
+**已推進：**
+- 新增 `docs/evaluations/ai_agent_professional_task_expansion_2026-06-16_1108_p2_405d.json`，`current_task_id=P2-405D`、`next_task_id=P2-405E`、overall `96%`。
+- `ai_agent_professional_task_expansion_v1` schema 與 API loader 已要求 1 份 canary delivery gate、8 個 required delivery field、8 個 preflight check、7 個 hold reason、7 個 readback check、5 個 rollback / mute control。
+- `/zh-TW/governance?tab=automation-inventory` P2-405D 卡片顯示 delivery gate、交付必填欄位、preflight、hold reason 與批准缺口；preview / canary / delivery live write 計數仍為 `0`。
+- 新增 / 更新測試，明確拒絕 delivery approved、delivery attempt allowed、Gateway queue write、Bot API call、delivery receipt write、secret read 或 paid API 被提前打開。
+
+**裁決：** 這是 canary delivery gate，不是 Telegram send、Gateway queue write、Bot API call、delivery receipt production write、approved canary delivery、production write、secret read、host write、kubectl action 或 runtime authorization；下一步 P2-405E 只能在統帥明確填入 canary delivery 欄位後進入受控 dry-run delivery rehearsal，未批准前不得實發。