diff --git a/apps/web/src/app/[locale]/governance/tabs/automation-inventory-tab.tsx b/apps/web/src/app/[locale]/governance/tabs/automation-inventory-tab.tsx
index 6a20632f..8f7b89b6 100644
--- a/apps/web/src/app/[locale]/governance/tabs/automation-inventory-tab.tsx
+++ b/apps/web/src/app/[locale]/governance/tabs/automation-inventory-tab.tsx
@@ -244,7 +244,7 @@ const PUBLIC_TEXT_REPLACEMENTS: Array<[RegExp, string]> = [
   [/receipt production write/gi, '回執正式寫入'],
   [/production write/gi, '正式環境寫入'],
   [/verifier live readback/gi, '驗證器正式讀回'],
-  [/host write/gi, '主機寫入'],
+  [/host write/gi, '主機變更'],
   [/secret read/gi, '機密讀取'],
   [/kubectl action/gi, 'kubectl 操作'],
   [/destructive operation/gi, '破壞性操作'],
diff --git a/apps/web/src/lib/api-client.ts b/apps/web/src/lib/api-client.ts
index ca3ee45a..cdd3aa66 100644
--- a/apps/web/src/lib/api-client.ts
+++ b/apps/web/src/lib/api-client.ts
@@ -51,6 +51,13 @@ const PUBLIC_TEXT_REPLACEMENTS: Array<[RegExp, string]> = [
   [/原始 runtime payload/gi, '已遮罩執行資料'],
   [/raw runtime payload/gi, '已遮罩執行資料'],
   [/raw_runtime_payload/gi, '已遮罩執行載荷欄位'],
+  [/runtime action/gi, '執行期變更'],
+  [/runtime gate 已開/g, '執行期閘門開啟'],
+  [/執行期已授權/g, '已取得執行期授權'],
+  [/live Wazuh/gi, '只讀 Wazuh 查詢'],
+  [/host write/gi, '主機變更'],
+  [/active response/gi, '主動回應流程'],
+  [/raw output/gi, '脫敏輸出摘要'],
   [/raw Telegram payload/gi, '原始 Telegram 載荷'],
   [/raw_telegram_payload/gi, '已遮罩 Telegram 載荷欄位'],
   [/raw tool output/gi, '原始工具輸出'],
diff --git a/apps/web/src/lib/public-security-redaction.ts b/apps/web/src/lib/public-security-redaction.ts
index 8b6349c3..e9a7bc50 100644
--- a/apps/web/src/lib/public-security-redaction.ts
+++ b/apps/web/src/lib/public-security-redaction.ts
@@ -2,8 +2,11 @@ export function publicBoundaryText(value: string): string {
   const redacted = value
     .replace(/live Wazuh/gi, "只讀管理端")
     .replace(/runtime action/gi, "執行期變更")
+    .replace(/runtime gate 已開/g, "執行期閘門開啟")
+    .replace(/執行期已授權/g, "已取得執行期授權")
     .replace(/host write/gi, "主機變更")
     .replace(/active response/gi, "主動回應流程")
+    .replace(/raw output/gi, "脫敏輸出摘要")
     .replace(/secret value/gi, "機密明文")
     .replace(/raw secret/gi, "原始機密");
   const labels: Record<string, string> = {