diff --git a/.gitea/workflows/cd.yaml b/.gitea/workflows/cd.yaml
index 01d8fbd3..2709e354 100644
--- a/.gitea/workflows/cd.yaml
+++ b/.gitea/workflows/cd.yaml
@@ -254,6 +254,8 @@ jobs:
                 ;;
               apps/api/src/services/ai_agent_log_controlled_writeback_plan_readback.py)
                 ;;
+              apps/api/src/services/ai_agent_log_controlled_writeback_executor_readback.py)
+                ;;
               apps/api/src/services/ai_agent_autonomous_runtime_control.py)
                 ;;
               apps/api/src/services/awooop_ansible_audit_service.py)
@@ -340,6 +342,8 @@ jobs:
                 ;;
               apps/api/tests/test_ai_agent_log_controlled_writeback_plan_readback_api.py)
                 ;;
+              apps/api/tests/test_ai_agent_log_controlled_writeback_executor_readback_api.py)
+                ;;
               apps/api/tests/test_ai_agent_autonomous_runtime_control.py)
                 ;;
               apps/api/tests/test_awooop_truth_chain_service.py)
@@ -517,6 +521,7 @@ jobs:
               src/services/ai_agent_log_feedback_receipt_dry_run.py \
               src/services/ai_agent_log_post_write_verifier_dry_run.py \
               src/services/ai_agent_log_controlled_writeback_plan_readback.py \
+              src/services/ai_agent_log_controlled_writeback_executor_readback.py \
               src/services/ai_agent_autonomous_runtime_control.py \
               src/services/awooop_ansible_audit_service.py \
               src/services/awooop_ansible_check_mode_service.py \
@@ -565,6 +570,7 @@ jobs:
               tests/test_ai_agent_log_feedback_receipt_dry_run_api.py \
               tests/test_ai_agent_log_post_write_verifier_dry_run_api.py \
               tests/test_ai_agent_log_controlled_writeback_plan_readback_api.py \
+              tests/test_ai_agent_log_controlled_writeback_executor_readback_api.py \
               tests/test_ai_agent_autonomous_runtime_control.py \
               tests/test_awooop_truth_chain_service.py \
               tests/test_shadow_auto_approve.py \
diff --git a/ops/runner/test_cd_controlled_runtime_profile.py b/ops/runner/test_cd_controlled_runtime_profile.py
index 9240f2c4..e8afa267 100644
--- a/ops/runner/test_cd_controlled_runtime_profile.py
+++ b/ops/runner/test_cd_controlled_runtime_profile.py
@@ -139,6 +139,18 @@ def test_ai_log_controlled_writeback_plan_stays_on_controlled_runtime_profile()
         assert source in text
 
 
+def test_ai_log_controlled_writeback_executor_stays_on_controlled_runtime_profile() -> None:
+    text = _workflow_text()
+    expected_sources = [
+        "apps/api/src/services/ai_agent_log_controlled_writeback_executor_readback.py)",
+        "apps/api/tests/test_ai_agent_log_controlled_writeback_executor_readback_api.py)",
+        "src/services/ai_agent_log_controlled_writeback_executor_readback.py",
+        "tests/test_ai_agent_log_controlled_writeback_executor_readback_api.py",
+    ]
+    for source in expected_sources:
+        assert source in text
+
+
 def test_awooop_ansible_check_mode_stays_on_controlled_runtime_profile() -> None:
     text = _workflow_text()
     expected_sources = [