{
  "schema_version": "ai_agent_professional_task_expansion_v1",
  "generated_at": "2026-06-16T11:08:00+08:00",
  "program_status": {
    "current_priority": "P2",
    "current_task_id": "P2-405D",
    "next_task_id": "P2-405E",
    "overall_completion_percent": 96,
    "read_only_mode": true,
    "runtime_authority": "professional_task_expansion_and_telegram_bridge_read_only_no_send",
    "status_note": "P2-405D 已建立 Telegram Canary Delivery Gate：固定交付前必填欄位、preflight、hold reason、readback 與 rollback/mute 控制；仍維持 read-only / 無發送，不寫 Gateway queue、不送 Telegram、不呼叫 Bot API、不寫 production receipt、不讀 secret、不用 paid API。"
  },
  "source_refs": [
    "docs/ai/AI_AGENT_12_AGENT_WAR_ROOM_2026-06-14.md",
    "docs/ai/AI_AGENT_PROACTIVE_OPERATIONS_2026-06-11.md",
    "docs/ai/AI_AGENT_INTERACTION_LEARNING_PROOF_2026-06-11.md",
    "docs/ai/AI_AGENT_TELEGRAM_ACTION_REQUIRED_DIGEST_POLICY_2026-06-11.md",
    "docs/ai/AI_AGENT_DEPLOYMENT_LAYOUT_2026-06-11.md",
    "docs/security/MONITORING-OWNER-RESPONSE-ACCEPTANCE.md",
    "apps/api/src/services/telegram_gateway.py",
    ".gitea/workflows/cd.yaml",
    ".gitea/workflows/code-review.yaml"
  ],
  "telegram_runtime_bridge": {
    "canonical_room": "AwoooI SRE 戰情室",
    "canonical_room_env": "SRE_GROUP_CHAT_ID",
    "gateway_required": true,
    "gateway_owner": "telegram_ops_liaison",
    "arbiter": "openclaw",
    "receipt_owner": "hermes",
    "replay_owner": "nemotron",
    "no_send_preview_ready": true,
    "queue_preview_readback_ready": true,
    "approved_canary_required": true,
    "direct_bot_api_allowed": false,
    "bot_api_call_enabled": false,
    "gateway_queue_write_enabled": false,
    "telegram_send_enabled": false,
    "delivery_receipt_write_enabled": false,
    "stages": [
      {
        "stage_id": "tg_bridge_01_no_send_preview",
        "title": "Telegram 無發送 preview",
        "status": "ready_for_owner_review",
        "allowed_output": "脫敏訊息預覽、dedup key、目標群組 metadata、風險層級、需審核選項",
        "live_send_enabled": false,
        "exit_condition": "OpenClaw + Security + QA 確認不含 secret、raw payload、工作視窗內容與誤導性執行按鈕。"
      },
      {
        "stage_id": "tg_bridge_02_queue_preview_readback",
        "title": "Gateway queue preview readback",
        "status": "ready_for_owner_review",
        "allowed_output": "queue envelope hash、message type、receipt expectation、rate-limit / dedup plan",
        "live_send_enabled": false,
        "exit_condition": "Hermes 讀回 preview hash，QA 確認不會寫入 production queue。"
      },
      {
        "stage_id": "tg_bridge_03_approved_canary",
        "title": "Approved canary delivery",
        "status": "blocked_until_explicit_approval",
        "allowed_output": "單一 approved canary 訊息與 receipt 驗證",
        "live_send_enabled": false,
        "exit_condition": "統帥明確批准 canary、指定時間窗與 rollback / mute plan。"
      },
      {
        "stage_id": "tg_bridge_04_daily_weekly_monthly_digest",
        "title": "日報 / 週報 / 月報 digest delivery",
        "status": "blocked_until_canary_receipt",
        "allowed_output": "Agent 工作量、完成度、阻擋項、圖表摘要與 low-noise digest",
        "live_send_enabled": false,
        "exit_condition": "canary receipt 正常、dedup 有效、成功訊息壓制策略通過。"
      },
      {
        "stage_id": "tg_bridge_05_action_required_digest",
        "title": "Action-required / high-risk approval digest",
        "status": "blocked_until_dual_gate",
        "allowed_output": "高風險審核卡、owner response 缺口、failure-only escalation",
        "live_send_enabled": false,
        "exit_condition": "OpenClaw 仲裁、Security gate、QA verifier 與 Telegram receipt 全通過。"
      }
    ],
    "message_types": [
      {
        "message_type": "daily_agent_workload_digest",
        "cadence": "daily",
        "risk_tier": "low",
        "owner_agent": "hermes",
        "send_policy": "send_after_canary_and_dedup_gate"
      },
      {
        "message_type": "weekly_governance_summary",
        "cadence": "weekly",
        "risk_tier": "medium",
        "owner_agent": "hermes",
        "send_policy": "send_after_canary_and_truth_gate"
      },
      {
        "message_type": "monthly_growth_report",
        "cadence": "monthly",
        "risk_tier": "medium",
        "owner_agent": "hermes",
        "send_policy": "send_after_owner_review"
      },
      {
        "message_type": "high_risk_approval_card",
        "cadence": "event",
        "risk_tier": "high",
        "owner_agent": "openclaw",
        "send_policy": "approval_required_before_send"
      },
      {
        "message_type": "failure_only_escalation",
        "cadence": "event",
        "risk_tier": "critical",
        "owner_agent": "sre_sentinel",
        "send_policy": "failure_only_after_route_lock"
      },
      {
        "message_type": "report_receipt_gap_alert",
        "cadence": "event",
        "risk_tier": "medium",
        "owner_agent": "telegram_ops_liaison",
        "send_policy": "no_send_preview_until_receipt_contract"
      }
    ],
    "no_send_message_previews": [
      {
        "preview_id": "p2_405b_preview_daily_agent_workload_digest_v1",
        "message_type": "daily_agent_workload_digest",
        "title": "AI Agent 日報 無發送 預覽",
        "target_room_alias": "awoooi_sre_war_room_env_ref",
        "target_room_env": "SRE_GROUP_CHAT_ID",
        "owner_agent": "hermes",
        "risk_tier": "low",
        "status": "preview_ready_no_send",
        "dedup_key": "awoooi:agent-report:daily:{yyyy-mm-dd}:v1",
        "receipt_expectation_id": "p2_405b_receipt_daily_agent_workload_digest_v1",
        "approval_required_before_send": false,
        "canary_required_before_live": true,
        "send_enabled": false,
        "gateway_queue_write_enabled": false,
        "bot_api_call_enabled": false,
        "delivery_receipt_write_enabled": false,
        "sanitized_body_lines": [
          "AWOOOI AI Agent 日報",
          "今日完成度、工作量、阻擋項與低風險自動處理摘要。",
          "所有成功煙霧訊號只彙整，不逐筆洗版。",
          "live / send / write 計數維持 0，等待 canary gate。"
        ],
        "redaction_checks": [
          "不含機密明文",
          "不含未遮罩工作上下文",
          "不含未遮罩 runtime payload",
          "不含可執行修復指令",
          "不含誤導性成功宣告"
        ]
      },
      {
        "preview_id": "p2_405b_preview_weekly_governance_summary_v1",
        "message_type": "weekly_governance_summary",
        "title": "AI Agent 週報 無發送 預覽",
        "target_room_alias": "awoooi_sre_war_room_env_ref",
        "target_room_env": "SRE_GROUP_CHAT_ID",
        "owner_agent": "hermes",
        "risk_tier": "medium",
        "status": "preview_ready_no_send",
        "dedup_key": "awoooi:agent-report:weekly:{iso-week}:v1",
        "receipt_expectation_id": "p2_405b_receipt_weekly_governance_summary_v1",
        "approval_required_before_send": false,
        "canary_required_before_live": true,
        "send_enabled": false,
        "gateway_queue_write_enabled": false,
        "bot_api_call_enabled": false,
        "delivery_receipt_write_enabled": false,
        "sanitized_body_lines": [
          "AWOOOI AI Agent 週報",
          "本週專業任務、模型市場 watch、治理 gate 與未完成 owner response 摘要。",
          "中風險項目只列 proposal / dry-run，不列正式執行結果。",
          "任何需要批准的項目改送 action-required digest 草案。"
        ],
        "redaction_checks": [
          "不含機密明文",
          "不含未遮罩工作上下文",
          "不含未遮罩 runtime payload",
          "不含可執行修復指令",
          "不含誤導性成功宣告"
        ]
      },
      {
        "preview_id": "p2_405b_preview_monthly_growth_report_v1",
        "message_type": "monthly_growth_report",
        "title": "AI Agent 月報 無發送 預覽",
        "target_room_alias": "awoooi_sre_war_room_env_ref",
        "target_room_env": "SRE_GROUP_CHAT_ID",
        "owner_agent": "hermes",
        "risk_tier": "medium",
        "status": "preview_ready_no_send",
        "dedup_key": "awoooi:agent-report:monthly:{yyyy-mm}:v1",
        "receipt_expectation_id": "p2_405b_receipt_monthly_growth_report_v1",
        "approval_required_before_send": true,
        "canary_required_before_live": true,
        "send_enabled": false,
        "gateway_queue_write_enabled": false,
        "bot_api_call_enabled": false,
        "delivery_receipt_write_enabled": false,
        "sanitized_body_lines": [
          "AWOOOI AI Agent 月報",
          "智慧成長指標、PlayBook 更新、replay 分數變化與 blocked action 防護數。",
          "成本、容量、版本更新與外部 Agent 市場候選以審核建議呈現。",
          "月報首次實發前需要 owner review 與 canary receipt。"
        ],
        "redaction_checks": [
          "不含機密明文",
          "不含未遮罩工作上下文",
          "不含未遮罩 runtime payload",
          "不含可執行修復指令",
          "不含誤導性成功宣告"
        ]
      },
      {
        "preview_id": "p2_405b_preview_high_risk_approval_card_v1",
        "message_type": "high_risk_approval_card",
        "title": "高風險審核卡 無發送 預覽",
        "target_room_alias": "awoooi_sre_war_room_env_ref",
        "target_room_env": "SRE_GROUP_CHAT_ID",
        "owner_agent": "openclaw",
        "risk_tier": "high",
        "status": "preview_ready_no_send",
        "dedup_key": "awoooi:agent-approval:{risk}:{work-item-id}:v1",
        "receipt_expectation_id": "p2_405b_receipt_high_risk_approval_card_v1",
        "approval_required_before_send": true,
        "canary_required_before_live": true,
        "send_enabled": false,
        "gateway_queue_write_enabled": false,
        "bot_api_call_enabled": false,
        "delivery_receipt_write_enabled": false,
        "sanitized_body_lines": [
          "AWOOOI 高風險 AI Agent 審核卡",
          "列出候選動作、風險、rollback plan、verifier plan 與 owner 缺口。",
          "審核卡不等於 runtime authorization，按鈕與指令預設不顯示。",
          "OpenClaw 仲裁、Security gate 與 QA verifier 必須全部通過。"
        ],
        "redaction_checks": [
          "不含機密明文",
          "不含未遮罩工作上下文",
          "不含未遮罩 runtime payload",
          "不含可執行修復指令",
          "不含誤導性成功宣告"
        ]
      },
      {
        "preview_id": "p2_405b_preview_failure_only_escalation_v1",
        "message_type": "failure_only_escalation",
        "title": "Failure-only 升級 無發送 預覽",
        "target_room_alias": "awoooi_sre_war_room_env_ref",
        "target_room_env": "SRE_GROUP_CHAT_ID",
        "owner_agent": "sre_sentinel",
        "risk_tier": "critical",
        "status": "preview_ready_no_send",
        "dedup_key": "awoooi:agent-failure:{alertname}:{target}:{window}:v1",
        "receipt_expectation_id": "p2_405b_receipt_failure_only_escalation_v1",
        "approval_required_before_send": true,
        "canary_required_before_live": true,
        "send_enabled": false,
        "gateway_queue_write_enabled": false,
        "bot_api_call_enabled": false,
        "delivery_receipt_write_enabled": false,
        "sanitized_body_lines": [
          "AWOOOI failure-only 升級通知",
          "只在失敗、阻擋或高風險審核缺口時產生，不發成功噪音。",
          "包含 blocker summary、下一步、owner 欄位與 verifier plan。",
          "任何修復執行仍需獨立批准與 post-action verifier。"
        ],
        "redaction_checks": [
          "不含機密明文",
          "不含未遮罩工作上下文",
          "不含未遮罩 runtime payload",
          "不含可執行修復指令",
          "不含誤導性成功宣告"
        ]
      },
      {
        "preview_id": "p2_405b_preview_report_receipt_gap_alert_v1",
        "message_type": "report_receipt_gap_alert",
        "title": "報表回執缺口 無發送 預覽",
        "target_room_alias": "awoooi_sre_war_room_env_ref",
        "target_room_env": "SRE_GROUP_CHAT_ID",
        "owner_agent": "telegram_ops_liaison",
        "risk_tier": "medium",
        "status": "preview_ready_no_send",
        "dedup_key": "awoooi:agent-receipt-gap:{message-type}:{window}:v1",
        "receipt_expectation_id": "p2_405b_receipt_report_receipt_gap_alert_v1",
        "approval_required_before_send": true,
        "canary_required_before_live": true,
        "send_enabled": false,
        "gateway_queue_write_enabled": false,
        "bot_api_call_enabled": false,
        "delivery_receipt_write_enabled": false,
        "sanitized_body_lines": [
          "AWOOOI 報表回執缺口提示",
          "用來指出 preview hash、dedup key、canary receipt 或 readback evidence 不完整。",
          "此提示本身仍是 無發送 preview，不寫 delivery receipt。",
          "修復方向只產生 owner review 項目，不自動改 Gateway。"
        ],
        "redaction_checks": [
          "不含機密明文",
          "不含未遮罩工作上下文",
          "不含未遮罩 runtime payload",
          "不含可執行修復指令",
          "不含誤導性成功宣告"
        ]
      }
    ],
    "dedup_policy": {
      "required": true,
      "key_count": 6,
      "collision_policy": "drop_duplicate_and_raise_preview_gap_without_send",
      "preview_hash_algorithm": "sha256_preview_only",
      "live_cache_write_enabled": false,
      "keys": [
        {
          "message_type": "daily_agent_workload_digest",
          "key_template": "awoooi:agent-report:daily:{yyyy-mm-dd}:v1",
          "owner_agent": "hermes",
          "risk_tier": "low",
          "window": "daily",
          "live_cache_write_enabled": false
        },
        {
          "message_type": "weekly_governance_summary",
          "key_template": "awoooi:agent-report:weekly:{iso-week}:v1",
          "owner_agent": "hermes",
          "risk_tier": "medium",
          "window": "event_or_cadence_window",
          "live_cache_write_enabled": false
        },
        {
          "message_type": "monthly_growth_report",
          "key_template": "awoooi:agent-report:monthly:{yyyy-mm}:v1",
          "owner_agent": "hermes",
          "risk_tier": "medium",
          "window": "event_or_cadence_window",
          "live_cache_write_enabled": false
        },
        {
          "message_type": "high_risk_approval_card",
          "key_template": "awoooi:agent-approval:{risk}:{work-item-id}:v1",
          "owner_agent": "openclaw",
          "risk_tier": "high",
          "window": "event_or_cadence_window",
          "live_cache_write_enabled": false
        },
        {
          "message_type": "failure_only_escalation",
          "key_template": "awoooi:agent-failure:{alertname}:{target}:{window}:v1",
          "owner_agent": "sre_sentinel",
          "risk_tier": "critical",
          "window": "event_or_cadence_window",
          "live_cache_write_enabled": false
        },
        {
          "message_type": "report_receipt_gap_alert",
          "key_template": "awoooi:agent-receipt-gap:{message-type}:{window}:v1",
          "owner_agent": "telegram_ops_liaison",
          "risk_tier": "medium",
          "window": "event_or_cadence_window",
          "live_cache_write_enabled": false
        }
      ]
    },
    "queue_preview_readback": {
      "enabled": true,
      "preview_only": true,
      "write_enabled": false,
      "readback_enabled": true,
      "envelope_fields": [
        "message_type",
        "dedup_key",
        "sanitized_preview_hash",
        "target_room_env_ref",
        "risk_tier",
        "approval_gate"
      ],
      "readback_checks": [
        "preview hash 必須與治理頁顯示一致",
        "dedup key 必須唯一",
        "target room 只能顯示 env ref",
        "所有 send / queue / bot flags 必須為 false"
      ]
    },
    "receipt_expectations": [
      {
        "receipt_id": "p2_405b_receipt_daily_agent_workload_digest_v1",
        "message_type": "daily_agent_workload_digest",
        "preview_id": "p2_405b_preview_daily_agent_workload_digest_v1",
        "expected_signal": "preview_hash_and_dedup_key_match_after_approved_canary",
        "required_evidence_refs": [
          "sanitized_preview_hash",
          "dedup_key",
          "target_room_env_ref",
          "canary_window_ref",
          "gateway_preview_readback_ref"
        ],
        "receipt_write_enabled": false,
        "production_receipt_readback_enabled": false,
        "missing_receipt_policy": "create_report_receipt_gap_alert_preview_only"
      },
      {
        "receipt_id": "p2_405b_receipt_weekly_governance_summary_v1",
        "message_type": "weekly_governance_summary",
        "preview_id": "p2_405b_preview_weekly_governance_summary_v1",
        "expected_signal": "preview_hash_and_dedup_key_match_after_approved_canary",
        "required_evidence_refs": [
          "sanitized_preview_hash",
          "dedup_key",
          "target_room_env_ref",
          "canary_window_ref",
          "gateway_preview_readback_ref"
        ],
        "receipt_write_enabled": false,
        "production_receipt_readback_enabled": false,
        "missing_receipt_policy": "create_report_receipt_gap_alert_preview_only"
      },
      {
        "receipt_id": "p2_405b_receipt_monthly_growth_report_v1",
        "message_type": "monthly_growth_report",
        "preview_id": "p2_405b_preview_monthly_growth_report_v1",
        "expected_signal": "preview_hash_and_dedup_key_match_after_approved_canary",
        "required_evidence_refs": [
          "sanitized_preview_hash",
          "dedup_key",
          "target_room_env_ref",
          "canary_window_ref",
          "gateway_preview_readback_ref"
        ],
        "receipt_write_enabled": false,
        "production_receipt_readback_enabled": false,
        "missing_receipt_policy": "create_report_receipt_gap_alert_preview_only"
      },
      {
        "receipt_id": "p2_405b_receipt_high_risk_approval_card_v1",
        "message_type": "high_risk_approval_card",
        "preview_id": "p2_405b_preview_high_risk_approval_card_v1",
        "expected_signal": "preview_hash_and_dedup_key_match_after_approved_canary",
        "required_evidence_refs": [
          "sanitized_preview_hash",
          "dedup_key",
          "target_room_env_ref",
          "canary_window_ref",
          "gateway_preview_readback_ref"
        ],
        "receipt_write_enabled": false,
        "production_receipt_readback_enabled": false,
        "missing_receipt_policy": "create_report_receipt_gap_alert_preview_only"
      },
      {
        "receipt_id": "p2_405b_receipt_failure_only_escalation_v1",
        "message_type": "failure_only_escalation",
        "preview_id": "p2_405b_preview_failure_only_escalation_v1",
        "expected_signal": "preview_hash_and_dedup_key_match_after_approved_canary",
        "required_evidence_refs": [
          "sanitized_preview_hash",
          "dedup_key",
          "target_room_env_ref",
          "canary_window_ref",
          "gateway_preview_readback_ref"
        ],
        "receipt_write_enabled": false,
        "production_receipt_readback_enabled": false,
        "missing_receipt_policy": "create_report_receipt_gap_alert_preview_only"
      },
      {
        "receipt_id": "p2_405b_receipt_report_receipt_gap_alert_v1",
        "message_type": "report_receipt_gap_alert",
        "preview_id": "p2_405b_preview_report_receipt_gap_alert_v1",
        "expected_signal": "preview_hash_and_dedup_key_match_after_approved_canary",
        "required_evidence_refs": [
          "sanitized_preview_hash",
          "dedup_key",
          "target_room_env_ref",
          "canary_window_ref",
          "gateway_preview_readback_ref"
        ],
        "receipt_write_enabled": false,
        "production_receipt_readback_enabled": false,
        "missing_receipt_policy": "create_report_receipt_gap_alert_preview_only"
      }
    ],
    "canary_approval_package": {
      "package_id": "p2_405b_telegram_canary_approval_package_v1",
      "status": "blocked_until_explicit_approval",
      "package_ready": true,
      "approval_required": true,
      "target_room_alias": "awoooi_sre_war_room_env_ref",
      "target_room_env": "SRE_GROUP_CHAT_ID",
      "arbiter": "openclaw",
      "owner_agent": "telegram_ops_liaison",
      "reviewers": [
        "security_sentinel",
        "qa_verifier",
        "hermes"
      ],
      "message_type_scope": [
        "daily_agent_workload_digest",
        "weekly_governance_summary",
        "monthly_growth_report",
        "high_risk_approval_card",
        "failure_only_escalation",
        "report_receipt_gap_alert"
      ],
      "required_approval_inputs": [
        "統帥批准 canary 時間窗",
        "可接受的單一訊息類型",
        "mute / rollback plan",
        "receipt readback owner",
        "失敗時停止條件"
      ],
      "approval_checklist": [
        "OpenClaw 仲裁通過",
        "Security redaction gate 通過",
        "QA verifier 確認 無發送 preview 與 receipt expectation",
        "Hermes 確認報告真實性 gate",
        "Telegram Ops 確認 dedup 與 rate-limit plan"
      ],
      "live_send_enabled": false,
      "gateway_queue_write_enabled": false,
      "bot_api_call_enabled": false,
      "delivery_receipt_write_enabled": false,
      "production_write_enabled": false
    },
    "no_send_preview_completion_percent": 100,
    "canary_approval_package_completion_percent": 100,
    "canary_send_approval_packet": {
      "packet_id": "p2_405c_approved_canary_send_approval_packet_v1",
      "status": "waiting_explicit_commander_approval",
      "packet_ready": true,
      "approval_required": true,
      "approval_granted": false,
      "recommended_first_message_type": "daily_agent_workload_digest",
      "selected_message_type": "not_selected",
      "eligible_message_types": [
        "daily_agent_workload_digest",
        "weekly_governance_summary",
        "monthly_growth_report",
        "high_risk_approval_card",
        "failure_only_escalation",
        "report_receipt_gap_alert"
      ],
      "target_room_alias": "awoooi_sre_war_room_env_ref",
      "target_room_env": "SRE_GROUP_CHAT_ID",
      "target_room_value_visible": false,
      "proposed_time_window": "waiting_commander_input",
      "owner_agent": "telegram_ops_liaison",
      "arbiter": "openclaw",
      "reviewers": [
        "security_sentinel",
        "qa_verifier",
        "hermes"
      ],
      "operator_approval_fields": [
        {
          "field_id": "commander_approval",
          "label": "統帥批准 canary 實發",
          "required": true,
          "current_value_status": "waiting_input",
          "value_display_allowed": false
        },
        {
          "field_id": "selected_message_type",
          "label": "單一訊息類型",
          "required": true,
          "current_value_status": "waiting_input",
          "value_display_allowed": false
        },
        {
          "field_id": "scheduled_window",
          "label": "發送時間窗",
          "required": true,
          "current_value_status": "waiting_input",
          "value_display_allowed": false
        },
        {
          "field_id": "target_room_env_ref",
          "label": "目標群組 env ref",
          "required": true,
          "current_value_status": "waiting_input",
          "value_display_allowed": false
        },
        {
          "field_id": "mute_rollback_plan",
          "label": "mute / rollback plan",
          "required": true,
          "current_value_status": "waiting_input",
          "value_display_allowed": false
        },
        {
          "field_id": "receipt_readback_owner",
          "label": "receipt readback owner",
          "required": true,
          "current_value_status": "waiting_input",
          "value_display_allowed": false
        },
        {
          "field_id": "failure_stop_condition",
          "label": "失敗停止條件",
          "required": true,
          "current_value_status": "waiting_input",
          "value_display_allowed": false
        }
      ],
      "rate_limit_plan": {
        "max_messages": 1,
        "window": "single_canary_only",
        "cooldown_after_attempt_minutes": 60,
        "duplicate_policy": "dedup_key_must_drop_duplicate_before_send",
        "live_rate_limit_write_enabled": false
      },
      "mute_rollback_plan": [
        "若 preview hash 與 approval packet 不一致，停止 canary。",
        "若 dedup key collision 或 receipt expectation 缺欄位，停止 canary。",
        "若 Telegram Gateway 回報未知錯誤，停止後只產 report_receipt_gap_alert preview。",
        "若訊息內容被 Security / QA 判定含敏感或誤導語意，停止 canary。",
        "若超過指定時間窗未發送，批准自動過期。"
      ],
      "receipt_readback_plan": {
        "owner_agent": "hermes",
        "required_checks": [
          "preview_id 對應已批准 message_type",
          "dedup_key 對應 approved packet",
          "target_room 只以 env ref 比對",
          "gateway envelope hash 對應 無發送 preview hash",
          "delivery receipt 不含 token 或 chat id value",
          "failure path 只產 無發送 receipt gap preview"
        ],
        "production_receipt_write_enabled": false,
        "receipt_readback_enabled_before_send": false
      },
      "stop_conditions": [
        "未取得統帥明確批准",
        "未選定單一訊息類型",
        "未指定時間窗",
        "redaction / QA / OpenClaw 任一 gate 失敗",
        "dedup key 不唯一或 preview hash 不一致",
        "Gateway、Bot API 或 receipt write 任一 flag 不是 false"
      ],
      "execution_flags": {
        "canary_send_execution_enabled": false,
        "gateway_queue_write_enabled": false,
        "bot_api_call_enabled": false,
        "delivery_receipt_write_enabled": false,
        "production_write_enabled": false,
        "secret_read_enabled": false,
        "paid_api_enabled": false
      },
      "approval_decision_log": []
    },
    "canary_send_approval_packet_ready": true,
    "canary_send_approval_granted": false,
    "canary_send_execution_enabled": false,
    "canary_send_approval_packet_completion_percent": 100,
    "canary_delivery_gate": {
      "gate_id": "p2_405d_canary_delivery_gate_v1",
      "status": "blocked_waiting_commander_delivery_fields",
      "gate_ready": true,
      "delivery_approved": false,
      "delivery_attempt_allowed": false,
      "selected_message_type": "not_selected",
      "selected_message_type_source": "waiting_commander_input",
      "target_room_alias": "AwoooI SRE 戰情室",
      "target_room_env": "SRE_GROUP_CHAT_ID",
      "target_room_value_visible": false,
      "target_room_verified": false,
      "proposed_time_window": "waiting_commander_input",
      "approved_time_window": "not_approved",
      "owner_agent": "telegram_ops_liaison",
      "arbiter": "openclaw",
      "reviewers": [
        "security_sentinel",
        "qa_verifier",
        "hermes",
        "sre_sentinel"
      ],
      "required_delivery_fields": [
        {
          "field_id": "commander_delivery_approval",
          "label": "統帥批准本次 canary delivery",
          "required": true,
          "current_value_status": "waiting_input",
          "value_display_allowed": false
        },
        {
          "field_id": "selected_message_type",
          "label": "單一訊息類型",
          "required": true,
          "current_value_status": "waiting_input",
          "value_display_allowed": false
        },
        {
          "field_id": "delivery_time_window",
          "label": "交付時間窗",
          "required": true,
          "current_value_status": "waiting_input",
          "value_display_allowed": false
        },
        {
          "field_id": "target_room_env_ref",
          "label": "目標群組 env ref",
          "required": true,
          "current_value_status": "waiting_input",
          "value_display_allowed": false
        },
        {
          "field_id": "receipt_readback_owner",
          "label": "receipt readback owner",
          "required": true,
          "current_value_status": "waiting_input",
          "value_display_allowed": false
        },
        {
          "field_id": "mute_rollback_plan",
          "label": "mute / rollback plan",
          "required": true,
          "current_value_status": "waiting_input",
          "value_display_allowed": false
        },
        {
          "field_id": "failure_stop_condition",
          "label": "失敗停止條件",
          "required": true,
          "current_value_status": "waiting_input",
          "value_display_allowed": false
        },
        {
          "field_id": "dry_run_readback_ref",
          "label": "dry-run readback evidence ref",
          "required": true,
          "current_value_status": "waiting_input",
          "value_display_allowed": false
        }
      ],
      "preflight_checks": [
        "packet_ready_true",
        "approval_fields_complete",
        "single_message_type_selected",
        "time_window_approved",
        "target_room_env_ref_only",
        "dedup_key_reserved_preview_only",
        "receipt_readback_owner_assigned",
        "stop_condition_confirmed"
      ],
      "hold_reasons": [
        "commander_delivery_approval_missing",
        "selected_message_type_missing",
        "delivery_time_window_missing",
        "receipt_readback_owner_missing",
        "target_room_value_hidden",
        "gateway_queue_write_disabled",
        "bot_api_call_disabled"
      ],
      "delivery_attempt_plan": {
        "max_messages": 1,
        "dry_run_message_type": "daily_agent_workload_digest",
        "dedup_key_template": "awoooi:agent-report:daily:{yyyy-mm-dd}:v1",
        "send_mode": "blocked_no_send",
        "live_delivery_enabled": false,
        "gateway_queue_write_enabled": false,
        "bot_api_call_enabled": false,
        "delivery_receipt_write_enabled": false,
        "production_write_enabled": false,
        "secret_read_enabled": false,
        "paid_api_enabled": false
      },
      "readback_after_approval_plan": {
        "owner_agent": "hermes",
        "enabled_before_delivery": false,
        "production_receipt_write_enabled": false,
        "required_checks": [
          "approved_packet_id_matches_delivery_gate",
          "selected_message_type_matches_preview",
          "dedup_key_matches_reserved_template",
          "target_room_checked_by_env_ref_only",
          "gateway_envelope_hash_matches_preview",
          "receipt_owner_acknowledged",
          "failure_path_keeps_no_send_receipt_gap_preview"
        ]
      },
      "rollback_mute_controls": [
        "approval_expires_outside_time_window",
        "mute_if_gateway_error_unknown",
        "mute_if_receipt_missing_after_window",
        "rollback_to_no_send_preview_only",
        "escalate_action_required_preview_only"
      ],
      "execution_flags": {
        "live_delivery_enabled": false,
        "gateway_queue_write_enabled": false,
        "bot_api_call_enabled": false,
        "delivery_receipt_write_enabled": false,
        "production_write_enabled": false,
        "secret_read_enabled": false,
        "paid_api_enabled": false
      },
      "delivery_decision_log": []
    },
    "canary_delivery_gate_ready": true,
    "canary_delivery_approved": false,
    "canary_delivery_attempt_allowed": false,
    "canary_delivery_gate_completion_percent": 100
  },
  "professional_task_domains": [
    {
      "domain_id": "sre_observability",
      "label": "SRE / Observability",
      "owner_agent": "sre_sentinel"
    },
    {
      "domain_id": "security_iwooos",
      "label": "Security / IwoooS",
      "owner_agent": "security_sentinel"
    },
    {
      "domain_id": "devops_release",
      "label": "DevOps / Release",
      "owner_agent": "devops_commander"
    },
    {
      "domain_id": "data_dr",
      "label": "Data / Backup / DR",
      "owner_agent": "data_dr_guardian"
    },
    {
      "domain_id": "supply_chain",
      "label": "Supply Chain / Versions",
      "owner_agent": "supply_chain_scout"
    },
    {
      "domain_id": "product_quality",
      "label": "Product / UI / QA",
      "owner_agent": "product_ui_curator"
    },
    {
      "domain_id": "ai_governance",
      "label": "AI Governance / Replay / Market",
      "owner_agent": "openclaw"
    },
    {
      "domain_id": "telegram_reporting",
      "label": "Telegram / Reports / Receipts",
      "owner_agent": "telegram_ops_liaison"
    }
  ],
  "professional_tasks": [
    {
      "task_id": "pro_task_001_incident_correlation",
      "title": "跨來源 incident correlation 與根因候選排序",
      "domain_id": "sre_observability",
      "owner_agent": "sre_sentinel",
      "supporting_agents": [
        "openclaw",
        "hermes"
      ],
      "risk_tier": "medium",
      "automation_mode": "no_write_dry_run",
      "telegram_policy": "action_required_preview",
      "required_mcp": [
        "observability",
        "gitea",
        "browser"
      ],
      "required_rag": [
        "incident_traces",
        "runbooks"
      ],
      "approval_required": true,
      "current_live_count_24h": 0,
      "blocked_actions": [
        "alert_rule_change",
        "silence_change",
        "restart_service"
      ]
    },
    {
      "task_id": "pro_task_002_alert_noise_budget",
      "title": "告警噪音預算與降噪提案",
      "domain_id": "sre_observability",
      "owner_agent": "sre_sentinel",
      "supporting_agents": [
        "hermes",
        "openclaw"
      ],
      "risk_tier": "medium",
      "automation_mode": "proposal_only",
      "telegram_policy": "weekly_digest",
      "required_mcp": [
        "prometheus",
        "alertmanager"
      ],
      "required_rag": [
        "alert_traces",
        "runbooks"
      ],
      "approval_required": true,
      "current_live_count_24h": 0,
      "blocked_actions": [
        "receiver_route_change",
        "silence_policy_change",
        "prometheus_reload"
      ]
    },
    {
      "task_id": "pro_task_003_synthetic_check_plan",
      "title": "公開路由 synthetic check 與失敗分類計畫",
      "domain_id": "sre_observability",
      "owner_agent": "qa_verifier",
      "supporting_agents": [
        "product_ui_curator",
        "sre_sentinel"
      ],
      "risk_tier": "low",
      "automation_mode": "auto_summary_after_guard",
      "telegram_policy": "daily_digest",
      "required_mcp": [
        "browser",
        "http_probe"
      ],
      "required_rag": [
        "route_runbooks"
      ],
      "approval_required": false,
      "current_live_count_24h": 0,
      "blocked_actions": [
        "active_scan",
        "production_write"
      ]
    },
    {
      "task_id": "pro_task_004_backup_restore_readiness",
      "title": "備份 freshness、restore drill 與 DR readiness 報告",
      "domain_id": "data_dr",
      "owner_agent": "data_dr_guardian",
      "supporting_agents": [
        "hermes",
        "openclaw"
      ],
      "risk_tier": "high",
      "automation_mode": "approval_required_before_execution",
      "telegram_policy": "action_required_preview",
      "required_mcp": [
        "backup_status",
        "gitea"
      ],
      "required_rag": [
        "dr_runbooks"
      ],
      "approval_required": true,
      "current_live_count_24h": 0,
      "blocked_actions": [
        "restore_run",
        "offsite_sync",
        "credential_escrow_marker_write"
      ]
    },
    {
      "task_id": "pro_task_005_non_secret_escrow_evidence",
      "title": "credential escrow 非敏感證據補件路由",
      "domain_id": "data_dr",
      "owner_agent": "data_dr_guardian",
      "supporting_agents": [
        "security_sentinel",
        "hermes"
      ],
      "risk_tier": "critical",
      "automation_mode": "blocked_until_owner_response",
      "telegram_policy": "action_required_preview",
      "required_mcp": [
        "gitea"
      ],
      "required_rag": [
        "dr_runbooks",
        "hard_rules"
      ],
      "approval_required": true,
      "current_live_count_24h": 0,
      "blocked_actions": [
        "secret_value_collection",
        "credential_read",
        "marker_write_without_owner"
      ]
    },
    {
      "task_id": "pro_task_006_dependency_cve_triage",
      "title": "依賴 CVE / EOL / license 風險分流",
      "domain_id": "supply_chain",
      "owner_agent": "supply_chain_scout",
      "supporting_agents": [
        "openclaw",
        "security_sentinel"
      ],
      "risk_tier": "medium",
      "automation_mode": "proposal_only",
      "telegram_policy": "weekly_digest",
      "required_mcp": [
        "package_registry",
        "osv"
      ],
      "required_rag": [
        "dependency_policy"
      ],
      "approval_required": true,
      "current_live_count_24h": 0,
      "blocked_actions": [
        "package_upgrade",
        "lockfile_write",
        "external_scan_without_approval"
      ]
    },
    {
      "task_id": "pro_task_007_sbom_license_drift",
      "title": "SBOM / license / Docker surface drift 批准包",
      "domain_id": "supply_chain",
      "owner_agent": "supply_chain_scout",
      "supporting_agents": [
        "hermes",
        "security_sentinel"
      ],
      "risk_tier": "medium",
      "automation_mode": "proposal_only",
      "telegram_policy": "weekly_digest",
      "required_mcp": [
        "syft",
        "trivy"
      ],
      "required_rag": [
        "supply_chain_runbooks"
      ],
      "approval_required": true,
      "current_live_count_24h": 0,
      "blocked_actions": [
        "tool_install",
        "image_pull",
        "sbom_upload"
      ]
    },
    {
      "task_id": "pro_task_008_image_digest_pin_plan",
      "title": "Docker image digest pinning 與 rollback 計畫",
      "domain_id": "supply_chain",
      "owner_agent": "devops_commander",
      "supporting_agents": [
        "supply_chain_scout",
        "qa_verifier"
      ],
      "risk_tier": "high",
      "automation_mode": "approval_required_before_execution",
      "telegram_policy": "action_required_preview",
      "required_mcp": [
        "registry",
        "gitea"
      ],
      "required_rag": [
        "release_runbooks"
      ],
      "approval_required": true,
      "current_live_count_24h": 0,
      "blocked_actions": [
        "image_pull",
        "image_push",
        "kustomization_write_without_review"
      ]
    },
    {
      "task_id": "pro_task_009_gitops_diff_review",
      "title": "K8s / ArgoCD manifest diff 與 blast-radius review",
      "domain_id": "devops_release",
      "owner_agent": "devops_commander",
      "supporting_agents": [
        "openclaw",
        "qa_verifier"
      ],
      "risk_tier": "critical",
      "automation_mode": "approval_required_before_execution",
      "telegram_policy": "action_required_preview",
      "required_mcp": [
        "gitea",
        "argocd"
      ],
      "required_rag": [
        "gitops_runbooks"
      ],
      "approval_required": true,
      "current_live_count_24h": 0,
      "blocked_actions": [
        "argocd_sync",
        "kubectl_apply",
        "helm_upgrade"
      ]
    },
    {
      "task_id": "pro_task_010_gateway_route_impact",
      "title": "Nginx / public gateway route impact analysis",
      "domain_id": "devops_release",
      "owner_agent": "devops_commander",
      "supporting_agents": [
        "security_sentinel",
        "qa_verifier"
      ],
      "risk_tier": "critical",
      "automation_mode": "approval_required_before_execution",
      "telegram_policy": "action_required_preview",
      "required_mcp": [
        "gitea",
        "browser"
      ],
      "required_rag": [
        "gateway_runbooks"
      ],
      "approval_required": true,
      "current_live_count_24h": 0,
      "blocked_actions": [
        "nginx_reload",
        "route_change",
        "certbot_renew"
      ]
    },
    {
      "task_id": "pro_task_011_public_bundle_redaction",
      "title": "前台 bundle / DOM / i18n 敏感資訊防洩漏掃描",
      "domain_id": "security_iwooos",
      "owner_agent": "security_sentinel",
      "supporting_agents": [
        "product_ui_curator",
        "qa_verifier"
      ],
      "risk_tier": "medium",
      "automation_mode": "no_write_dry_run",
      "telegram_policy": "daily_digest",
      "required_mcp": [
        "browser",
        "gitea"
      ],
      "required_rag": [
        "hard_rules"
      ],
      "approval_required": true,
      "current_live_count_24h": 0,
      "blocked_actions": [
        "frontend_deploy_without_smoke",
        "secret_storage"
      ]
    },
    {
      "task_id": "pro_task_012_secret_metadata_parity",
      "title": "Secret name parity、injection route 與 redaction gate",
      "domain_id": "security_iwooos",
      "owner_agent": "security_sentinel",
      "supporting_agents": [
        "devops_commander",
        "openclaw"
      ],
      "risk_tier": "critical",
      "automation_mode": "blocked_until_owner_response",
      "telegram_policy": "action_required_preview",
      "required_mcp": [
        "gitea"
      ],
      "required_rag": [
        "secret_runbooks"
      ],
      "approval_required": true,
      "current_live_count_24h": 0,
      "blocked_actions": [
        "secret_value_read",
        "secret_rotation",
        "workflow_modification"
      ]
    },
    {
      "task_id": "pro_task_013_telegram_digest_preview",
      "title": "AI Agent 日週月報 Telegram 無發送 preview",
      "domain_id": "telegram_reporting",
      "owner_agent": "telegram_ops_liaison",
      "supporting_agents": [
        "hermes",
        "qa_verifier"
      ],
      "risk_tier": "medium",
      "automation_mode": "no_write_dry_run",
      "telegram_policy": "no_direct_telegram",
      "required_mcp": [
        "telegram_gateway"
      ],
      "required_rag": [
        "logbook_chunks"
      ],
      "approval_required": true,
      "current_live_count_24h": 0,
      "blocked_actions": [
        "telegram_send",
        "bot_api_call",
        "gateway_queue_write"
      ]
    },
    {
      "task_id": "pro_task_014_report_truth_gate",
      "title": "日報 / 週報 / 月報 truth gate 與可處置性審查",
      "domain_id": "telegram_reporting",
      "owner_agent": "hermes",
      "supporting_agents": [
        "openclaw",
        "sre_sentinel"
      ],
      "risk_tier": "medium",
      "automation_mode": "auto_summary_after_guard",
      "telegram_policy": "weekly_digest",
      "required_mcp": [
        "gitea",
        "observability"
      ],
      "required_rag": [
        "logbook_chunks",
        "incident_traces"
      ],
      "approval_required": false,
      "current_live_count_24h": 0,
      "blocked_actions": [
        "false_green_report",
        "report_send_without_truth_gate"
      ]
    },
    {
      "task_id": "pro_task_015_agent_market_watch",
      "title": "主流 AI Agent / SDK / 模型版本市場雷達",
      "domain_id": "ai_governance",
      "owner_agent": "market_scout",
      "supporting_agents": [
        "openclaw",
        "nemotron"
      ],
      "risk_tier": "medium",
      "automation_mode": "proposal_only",
      "telegram_policy": "weekly_digest",
      "required_mcp": [
        "web_primary_sources",
        "gitea"
      ],
      "required_rag": [
        "agent_market_evidence"
      ],
      "approval_required": true,
      "current_live_count_24h": 0,
      "blocked_actions": [
        "sdk_install",
        "paid_api_call",
        "production_route_change"
      ]
    },
    {
      "task_id": "pro_task_016_model_replay_scorecard",
      "title": "NemoTron / 候選模型 replay scorecard 與 failure mode 分析",
      "domain_id": "ai_governance",
      "owner_agent": "nemotron",
      "supporting_agents": [
        "openclaw",
        "qa_verifier"
      ],
      "risk_tier": "high",
      "automation_mode": "no_write_dry_run",
      "telegram_policy": "action_required_preview",
      "required_mcp": [
        "fixture_store",
        "gitea"
      ],
      "required_rag": [
        "replay_fixtures"
      ],
      "approval_required": true,
      "current_live_count_24h": 0,
      "blocked_actions": [
        "shadow_route",
        "canary_route",
        "full_replay_without_approval"
      ]
    },
    {
      "task_id": "pro_task_017_cost_capacity_forecast",
      "title": "AI provider、主機、K3s 與外部服務成本 / 容量預測",
      "domain_id": "ai_governance",
      "owner_agent": "openclaw",
      "supporting_agents": [
        "supply_chain_scout",
        "sre_sentinel"
      ],
      "risk_tier": "high",
      "automation_mode": "proposal_only",
      "telegram_policy": "monthly_digest",
      "required_mcp": [
        "observability",
        "billing_metadata"
      ],
      "required_rag": [
        "cost_policy"
      ],
      "approval_required": true,
      "current_live_count_24h": 0,
      "blocked_actions": [
        "paid_provider_switch",
        "limit_increase",
        "paid_api_call"
      ]
    },
    {
      "task_id": "pro_task_018_db_query_triage",
      "title": "PostgreSQL 慢查詢、索引與資料新鮮度異常 triage",
      "domain_id": "sre_observability",
      "owner_agent": "sre_sentinel",
      "supporting_agents": [
        "data_dr_guardian",
        "openclaw"
      ],
      "risk_tier": "high",
      "automation_mode": "proposal_only",
      "telegram_policy": "action_required_preview",
      "required_mcp": [
        "database_readonly",
        "observability"
      ],
      "required_rag": [
        "db_runbooks"
      ],
      "approval_required": true,
      "current_live_count_24h": 0,
      "blocked_actions": [
        "migration",
        "reindex",
        "write_query"
      ]
    },
    {
      "task_id": "pro_task_019_data_freshness_source_reliability",
      "title": "資料來源新鮮度、fallback 與來源可信度監控",
      "domain_id": "data_dr",
      "owner_agent": "hermes",
      "supporting_agents": [
        "sre_sentinel",
        "qa_verifier"
      ],
      "risk_tier": "medium",
      "automation_mode": "auto_summary_after_guard",
      "telegram_policy": "daily_digest",
      "required_mcp": [
        "http_probe",
        "database_readonly"
      ],
      "required_rag": [
        "data_quality_runbooks"
      ],
      "approval_required": false,
      "current_live_count_24h": 0,
      "blocked_actions": [
        "source_switch_without_owner",
        "data_write"
      ]
    },
    {
      "task_id": "pro_task_020_ui_accessibility_regression",
      "title": "前後台 mobile overflow、console error、可讀性與 a11y regression",
      "domain_id": "product_quality",
      "owner_agent": "product_ui_curator",
      "supporting_agents": [
        "qa_verifier",
        "security_sentinel"
      ],
      "risk_tier": "low",
      "automation_mode": "auto_summary_after_guard",
      "telegram_policy": "daily_digest",
      "required_mcp": [
        "browser"
      ],
      "required_rag": [
        "frontend_guidelines"
      ],
      "approval_required": false,
      "current_live_count_24h": 0,
      "blocked_actions": [
        "unrelated_redesign",
        "public_secret_display"
      ]
    },
    {
      "task_id": "pro_task_021_runbook_postmortem_draft",
      "title": "Runbook、postmortem 與 owner handoff 草稿",
      "domain_id": "ai_governance",
      "owner_agent": "hermes",
      "supporting_agents": [
        "openclaw",
        "sre_sentinel"
      ],
      "risk_tier": "low",
      "automation_mode": "auto_summary_after_guard",
      "telegram_policy": "weekly_digest",
      "required_mcp": [
        "gitea"
      ],
      "required_rag": [
        "logbook_chunks",
        "runbooks"
      ],
      "approval_required": false,
      "current_live_count_24h": 0,
      "blocked_actions": [
        "canonical_km_write_without_review",
        "secret_in_doc"
      ]
    },
    {
      "task_id": "pro_task_022_owner_response_completeness",
      "title": "Owner response 欄位完整性、補件與拒收分流",
      "domain_id": "security_iwooos",
      "owner_agent": "security_sentinel",
      "supporting_agents": [
        "hermes",
        "openclaw"
      ],
      "risk_tier": "high",
      "automation_mode": "proposal_only",
      "telegram_policy": "action_required_preview",
      "required_mcp": [
        "gitea"
      ],
      "required_rag": [
        "owner_response_templates"
      ],
      "approval_required": true,
      "current_live_count_24h": 0,
      "blocked_actions": [
        "mark_accepted_without_reviewer",
        "runtime_gate_open"
      ]
    },
    {
      "task_id": "pro_task_023_candidate_pr_draft_packaging",
      "title": "低 / 中風險候選 PR 草案、測試與 rollback 封包",
      "domain_id": "devops_release",
      "owner_agent": "devops_commander",
      "supporting_agents": [
        "qa_verifier",
        "openclaw"
      ],
      "risk_tier": "medium",
      "automation_mode": "proposal_only",
      "telegram_policy": "action_required_preview",
      "required_mcp": [
        "gitea"
      ],
      "required_rag": [
        "release_runbooks"
      ],
      "approval_required": true,
      "current_live_count_24h": 0,
      "blocked_actions": [
        "branch_push_without_approval",
        "auto_merge",
        "workflow_trigger"
      ]
    },
    {
      "task_id": "pro_task_024_post_action_verifier",
      "title": "Post-action verifier、rollback trigger 與 receipt reconciliation",
      "domain_id": "telegram_reporting",
      "owner_agent": "openclaw",
      "supporting_agents": [
        "telegram_ops_liaison",
        "qa_verifier"
      ],
      "risk_tier": "critical",
      "automation_mode": "approval_required_before_execution",
      "telegram_policy": "failure_only_preview",
      "required_mcp": [
        "telegram_gateway",
        "observability",
        "gitea"
      ],
      "required_rag": [
        "verification_runbooks"
      ],
      "approval_required": true,
      "current_live_count_24h": 0,
      "blocked_actions": [
        "verifier_live_readback_without_gate",
        "rollback_without_owner",
        "telegram_send_without_receipt"
      ]
    }
  ],
  "mcp_rag_stack": {
    "mcp_connectors": [
      "gitea",
      "browser",
      "observability",
      "telegram_gateway",
      "package_registry",
      "database_readonly",
      "backup_status",
      "argocd_readonly",
      "http_probe",
      "fixture_store"
    ],
    "rag_sources": [
      "LOGBOOK chunks",
      "HARD_RULES / ADR chunks",
      "runbook chunks",
      "incident / alert traces",
      "agent market evidence",
      "owner response templates"
    ],
    "growth_metrics": [
      "km_entries_created",
      "playbook_updates",
      "recommendations_created",
      "replay_score_delta",
      "blocked_action_prevented_count",
      "receipt_missing_count"
    ]
  },
  "risk_policy": {
    "low": "文件、報表、UI smoke 與只讀摘要可在 guard 後自動處理並進每日 digest。",
    "medium": "中風險只能先產 proposal、無寫入 dry-run 或 PR 草案；涉及設定、外部服務、成本、路由或未知狀態時升級審核。",
    "high": "高風險必須 OpenClaw 仲裁、QA / Security gate、allowlist、check-mode、rollback 與 verifier；通過後由 AI Agent 受控自動執行。",
    "critical": "production write、kubectl、ArgoCD sync、Telegram 實發、secret、付費 API、restore、rollback、host write 均維持 blocked until explicit approval。"
  },
  "reporting_contract": {
    "daily": {
      "required": true,
      "owner_agent": "hermes",
      "telegram_stage": "tg_bridge_04_daily_weekly_monthly_digest"
    },
    "weekly": {
      "required": true,
      "owner_agent": "hermes",
      "telegram_stage": "tg_bridge_04_daily_weekly_monthly_digest"
    },
    "monthly": {
      "required": true,
      "owner_agent": "hermes",
      "telegram_stage": "tg_bridge_04_daily_weekly_monthly_digest"
    },
    "action_required": {
      "required": true,
      "owner_agent": "openclaw",
      "telegram_stage": "tg_bridge_05_action_required_digest"
    }
  },
  "redaction_contract": {
    "redaction_required": true,
    "conversation_transcript_display_allowed": false,
    "raw_prompt_display_allowed": false,
    "private_reasoning_display_allowed": false,
    "secret_value_display_allowed": false,
    "raw_runtime_payload_display_allowed": false,
    "telegram_message_must_be_sanitized": true,
    "forbidden_terms": [
      "work_window_transcript",
      "raw prompt",
      "private reasoning",
      "chain-of-thought",
      "telegram token",
      "authorization header",
      "secret value"
    ],
    "frontend_display_policy": "前端與 Telegram preview 只顯示脫敏摘要、env ref、dedup key、preview hash 與審核狀態；不得顯示工作視窗對話、未遮罩提示、私有推理、機密明文或未遮罩 runtime payload。",
    "message_preview_redaction_checks": [
      "conversation_context_redacted",
      "prompt_surface_redacted",
      "runtime_payload_redacted",
      "credential_material_absent",
      "action_button_absent",
      "execution_claim_absent"
    ],
    "canary_packet_redaction_checks": [
      "target_room_value_hidden",
      "bot_token_absent",
      "operator_input_value_hidden",
      "no_runtime_payload",
      "collaboration_context_redacted",
      "no_action_button"
    ],
    "canary_delivery_redaction_checks": [
      "target_room_value_hidden",
      "operator_input_value_hidden",
      "runtime_payload_redacted",
      "collaboration_context_redacted",
      "credential_material_absent",
      "action_button_absent"
    ]
  },
  "rollups": {
    "professional_task_count": 24,
    "domain_count": 8,
    "telegram_stage_count": 5,
    "telegram_message_type_count": 6,
    "approval_required_count": 19,
    "low_risk_task_count": 3,
    "medium_risk_task_count": 10,
    "high_risk_task_count": 6,
    "critical_risk_task_count": 5,
    "current_live_count": 0,
    "gateway_queue_write_count": 0,
    "telegram_send_count": 0,
    "bot_api_call_count": 0,
    "delivery_receipt_write_count": 0,
    "production_write_count": 0,
    "secret_read_count": 0,
    "paid_api_call_count": 0,
    "host_write_count": 0,
    "kubectl_action_count": 0,
    "no_send_preview_count": 6,
    "dedup_key_count": 6,
    "receipt_expectation_count": 6,
    "canary_approval_package_count": 1,
    "queue_preview_envelope_field_count": 6,
    "canary_required_preview_count": 6,
    "approval_required_preview_count": 4,
    "preview_send_enabled_count": 0,
    "preview_queue_write_enabled_count": 0,
    "preview_bot_api_call_enabled_count": 0,
    "receipt_live_write_enabled_count": 0,
    "canary_live_send_enabled_count": 0,
    "canary_send_approval_packet_count": 1,
    "canary_operator_approval_field_count": 7,
    "canary_stop_condition_count": 6,
    "canary_rollback_mute_step_count": 5,
    "canary_receipt_readback_check_count": 6,
    "canary_approval_granted_count": 0,
    "canary_selected_message_type_count": 0,
    "canary_approved_time_window_count": 0,
    "canary_send_execution_enabled_count": 0,
    "canary_gateway_queue_write_enabled_count": 0,
    "canary_bot_api_call_enabled_count": 0,
    "canary_delivery_receipt_write_enabled_count": 0,
    "canary_secret_read_enabled_count": 0,
    "canary_delivery_gate_count": 1,
    "canary_delivery_required_field_count": 8,
    "canary_delivery_preflight_check_count": 8,
    "canary_delivery_hold_reason_count": 7,
    "canary_delivery_readback_check_count": 7,
    "canary_delivery_rollback_mute_control_count": 5,
    "canary_delivery_approved_count": 0,
    "canary_delivery_attempt_allowed_count": 0,
    "canary_delivery_live_send_enabled_count": 0,
    "canary_delivery_gateway_queue_write_enabled_count": 0,
    "canary_delivery_bot_api_call_enabled_count": 0,
    "canary_delivery_secret_read_enabled_count": 0,
    "canary_delivery_paid_api_enabled_count": 0
  }
}
