docs(agent99): record callback deployment gate

docs/operations/agent99-enterprise-ai-automation-work-items.snapshot.json

@@ -20,8 +20,8 @@
     "id": "AG99-P0-006",
     "title": "Agent99 canonical completion callback and cross-system incident closure",
     "reason": "P0-001 is now runtime-verified on Windows 99: required evidence is fresh, parseable and content-healthy; a production-principal Recover passed all seven phases and produced a real Telegram visual receipt. The next missing link is canonical Agent99-to-AWOOOI/AwoooP/IWOOOS writeback, because Telegram delivery alone is not a durable incident closure.",
-    "implementation_status": "api_and_agent99_callback_source_ready_39_tests_passed_production_cd_and_runtime_callback_pending",
-    "next_action": "Commit the authenticated idempotent callback source, wait for the coordinated Gitea push slot, deploy through Gitea CD, then replay one SRE alert and require identical callback/run/trace plus AWOOOI operation and AwoooP run readback."
+    "implementation_status": "commit_d140e35d3_windows_validate_only_green_production_route_404_and_principal_token_provisioning_pending",
+    "next_action": "Wait for the coordinated single-writer slot, rebase d140e35d3 onto latest Gitea main, deploy the API through Gitea CD, provision or verify callback authentication without exposing the token, then deploy the Windows client and replay one same-trace SRE alert."
   },
   "current_runtime_truth": {
     "observed_at": "2026-07-11T20:25:26+08:00",
@@ -52,7 +52,14 @@
     "windows99_agent99_recovery_phase_count": 7,
     "windows99_agent99_recovery_telegram_sent": true,
     "windows99_agent99_recovery_visual_sent": true,
-    "agent99_completion_callback_runtime_status": "source_ready_production_api_and_windows_client_not_yet_deployed",
+    "agent99_completion_callback_runtime_status": "source_validated_production_route_404_windows_client_not_promoted_callback_auth_principal_scope_pending",
+    "agent99_completion_callback_source_commit": "d140e35d3",
+    "agent99_completion_callback_focused_tests_passed": 40,
+    "agent99_completion_callback_windows_validate_only_ok": true,
+    "agent99_completion_callback_windows_validate_only_evidence": "C:\\Wooo\\Agent99\\evidence\\agent99-deploy-20260711-204625.json",
+    "agent99_completion_callback_production_route_http_status": 404,
+    "agent99_completion_callback_administrator_visible_token_present": false,
+    "agent99_completion_callback_secret_value_read": false,
     "windows99_agent99_startup_recovery_execution_limit": "PT20M",
     "windows99_vmware_running_guests": "5/5",
     "public_surface_matrix": "23/23_http_2xx_or_expected_3xx",
@@ -456,8 +463,9 @@
       "verifier": "Read back identical trace, final state and verifier evidence from AWOOOI and AwoooP.",
       "callback": "This work item creates the canonical callback contract.",
       "acceptance": "One trace is visible from alert receipt through final verifier, notification and recurrence counters.",
-      "implementation_progress": "Recover lifecycle visibility is runtime verified on Windows 99. Source now adds an authenticated callback endpoint using the existing Agent99 relay token, idempotent AWOOOI operation receipts, an AwoooP completed shadow run, durable DB readback, bounded Agent99 pending retries and no-secret payload validation. Focused callback/recovery tests pass 39/39; production Gitea CD and one live same-trace replay remain open.",
-      "next_action": "Commit the callback source, obtain the coordinated single-writer push slot, deploy API and Agent99 client in order, then replay one SRE alert and verify AWOOOI/AwoooP/IWOOOS plus Telegram receipts share the same trace."
+      "implementation_progress": "Recover lifecycle visibility is runtime verified on Windows 99. Commit d140e35d3 adds an authenticated callback endpoint, idempotent AWOOOI operation receipts, an AwoooP completed shadow run, durable DB readback, bounded Agent99 pending retries and no-secret payload validation. Focused callback/recovery tests pass 40/40 and Windows ValidateOnly passed parse/contract/synthetic/14-file staging. Production route is still HTTP 404 and the callback token is not visible to the Administrator/Machine scope, so API CD, production-principal auth verification and one live same-trace replay remain open.",
+      "evidence_refs": ["commit d140e35d3", "40 focused tests passed", "ruff and JSON/diff checks passed", "C:\\Wooo\\Agent99\\evidence\\agent99-deploy-20260711-204625.json ValidateOnly ok", "production callback route HTTP 404", "Administrator/Machine scope token presence 0 with SECRET_VALUE_READ=0"],
+      "next_action": "Wait for the coordinated single-writer slot, rebase and deploy the API through Gitea CD, verify or provision callback authentication under the production principal without exposing values, deploy the Windows client, then replay one SRE alert and verify AWOOOI/AwoooP/IWOOOS plus Telegram receipts share the same trace."
     },
     {
       "id": "AG99-P0-007",

docs/workplans/2026-07-10-agent99-enterprise-ai-automation-master-plan.md

@@ -205,7 +205,7 @@
 - Agent99 原子部署 receipt `agent99-deploy-20260711-202021.json` 回報 source revision `06509e071c8b7c538feb112e4e4774ee22abf7d1`、14/14 runtime files matched，rollback 是 `backup-20260711-202021`。
 - 新版 live preflight 在 20:20:51 回報 9/9 tasks、relay=1、queue=0，required evidence `fresh=7/7`、`usable=7/7`、parse/content failure 都是 0；不再用檔案時間掩蓋 inbox JSON 解析失敗。
 - Production-principal Recover `agent99-recovery-20260711-202159-3404b5b3` 完成 5/5 VM、5/5 host、5/5 public 與 7/7 recovery phases；42.9 秒、coordinator verified、service-recovery only。TG receipt 是 `sent=1`、`visualSent=1`，實際 1200×760 圖卡顯示七階段時間軸。後續同狀態 run 以 `dedupe_window` suppressed 並保留 receipt。
-- `P0-006` source 已新增 token-authenticated callback、idempotent channel event、AWOOOI operation receipts、AwoooP completed shadow run、durable DB readback，以及 99 pending/processed retry queue；payload 禁止 secret、raw log 與完整 evidence path。Focused tests 39 passed、ruff green。此段尚未經 Gitea CD 與 production replay，所以維持 in progress。
+- `P0-006` commit `d140e35d3` 已新增 token-authenticated callback、idempotent channel event、AWOOOI operation receipts、AwoooP completed shadow run、durable DB readback，以及 99 pending/processed retry queue；payload 禁止 secret、raw log 與完整 evidence path。Focused tests 40 passed、ruff green；Windows `ValidateOnly` 通過 PowerShell parse/contract/synthetic/14-file staging，evidence 是 `agent99-deploy-20260711-204625.json`。Production callback route 仍為 HTTP 404，且 Administrator/Machine scope 僅證明 token presence=0、未讀值；API CD、production-principal auth verifier 與 live replay 尚未完成，所以維持 in progress。
 
 ## 7. 工作項強制欄位與治理