fix(sre): type backup learning as read-only

apps/api/tests/test_agent99_controlled_dispatch_reconciler_job.py

@@ -51,6 +51,26 @@ def test_agent99_playbook_identity_is_project_scoped() -> None:
     assert job._playbook_id(IDENTITY) != job._playbook_id(other)
 
 
+def test_backup_learning_profile_is_typed_and_no_write() -> None:
+    identity = build_agent99_dispatch_identity(
+        project_id="awoooi",
+        incident_id="INC-20260719-BACKUP-LEARNING",
+        source_fingerprint="backup-learning-fingerprint",
+        route_id="agent99:backup_health:BackupCheck",
+    )
+
+    profile = job._learning_profile(identity, mode="BackupCheck")
+
+    assert profile["affected_services"] == ["backup_restore"]
+    assert profile["action_type"] == "agent99_readonly_check"
+    assert profile["rollback_command"] == "not_applicable_no_write"
+    assert profile["km_category"] == "資料保護/DR Scorecard"
+    assert "verified backup readback" in profile["km_title"]
+    assert "LLM had no runtime authority" in profile["km_content"]
+    assert "cold-start" not in str(profile)
+    assert "verified recovery" not in profile["km_title"]
+
+
 class _Context:
     def __init__(self, db) -> None:  # type: ignore[no-untyped-def]
         self.db = db