diff --git a/AGENT99-AI-WORKSTATION-SOP.md b/AGENT99-AI-WORKSTATION-SOP.md
index bbb4baba4..4c9b29b68 100644
--- a/AGENT99-AI-WORKSTATION-SOP.md
+++ b/AGENT99-AI-WORKSTATION-SOP.md
@@ -1,6 +1,6 @@
 # Agent99 AI Workstation SOP
 
-Last updated: 2026-07-10
+Last updated: 2026-07-11
 
 Canonical enterprise scope and work order:
 
@@ -26,6 +26,18 @@ Host 99 is not the only availability observer. An external watcher and maintenan
 - All `.ps1` runtime files are normalized to UTF-8 BOM by bootstrap so Windows PowerShell 5 cannot corrupt Traditional Chinese strings during parsing.
 - Staging verification on 99 must pass `-SelfTestOutcomeContract` and `runtimeMatched=true` before production Agent99 files are replaced.
 
+## 2026-07-11 P0-002 Actionable Alert Dispatch Contract
+
+This source candidate is test-green but not yet deployed to the Windows 99 runtime.
+
+- Direct Alertmanager events, `ai_automation_alert_card_v1`, `ACTION REQUIRED` incident cards, and failed `AWOOOI CI/CD` cards use one sanitized Agent99 dispatcher.
+- A cold-start or reboot gate is `kind=host_recovery`, `suggestedMode=Recover`; it must never become a fabricated Kubernetes deployment restart.
+- A failed CI/CD card is `kind=cicd_failure`, `suggestedMode=Status`; Agent99 collects status/evidence while the source event remains open until a later successful CD/deploy receipt resolves it.
+- Every dispatcher result writes a public-safe `agent99_dispatch_receipt` with alert id, kind, transport, HTTP status, `accepted`, and `inbox_triggered`. Raw response bodies, relay paths, tokens, chat ids, and workflow URLs are not stored.
+- `HTTP 202` alone is not success. The bridge reports `dispatched` only when the relay body confirms `ok=true`; an unaccepted receipt releases the single-flight lock so the event can retry.
+- Stateful verifier lanes may use `sourceEventResolutionPolicy=mode_verifier_can_resolve`. External-source lanes use `external_source_receipt_required` and cannot self-close from a local command exit.
+- Source/test receipt: the focused post-rebase suite passed 249 tests, and the expanded all-Telegram plus Agent99/RepairCandidate suite passed 262 tests after integrating the Telegram single-owner mainline; YAML, shell/Python syntax, runner pressure, document secret, backup-alert, and recovery-scorecard checks passed. Windows 99 package deployment, runtime manifest reconciliation, and exact live card replay remain required before this P0 can close.
+
 It must act as:
 
 - Secretary: reminders, status summaries, evidence packets, operator updates.
@@ -717,7 +729,7 @@ Agent99 now uses a source-trusted deployment path, a dedicated bounded SSH trans
 - Source authority and deployment:
   - Gitea commit SHA is the source revision; a local scratch checkout or a Windows file timestamp is not deployment truth.
   - `agent99-deploy.ps1` validates PowerShell parse, Agent99 contracts, synthetic checks, staging content, backup, atomic promotion, task registration, and rollback.
-  - `C:\Wooo\Agent99\runtime-manifest.json.sourceRevision` must match the deployed Gitea SHA. A successful source test without this runtime readback is not a completed deployment.
+  - `C:\Wooo\Agent99\state\runtime-manifest.json.sourceRevision` must match the deployed Gitea SHA. A successful source test without this runtime readback is not a completed deployment.
 - Dedicated transport:
   - Private identity: `C:\Wooo\Agent99\keys\agent99_ed25519`; it remains on 99, is ACL-restricted, and is never copied into evidence, Telegram, logs, or the repository.
   - Public-key authorization is limited with `from="192.168.0.99",restrict` on 110 user `wooo` and 112 user `kali`.
diff --git a/HOST-REBOOT-AI-AUTOMATION-SOP.md b/HOST-REBOOT-AI-AUTOMATION-SOP.md
index 23221ed32..ddba2f27c 100644
--- a/HOST-REBOOT-AI-AUTOMATION-SOP.md
+++ b/HOST-REBOOT-AI-AUTOMATION-SOP.md
@@ -1,6 +1,6 @@
 # Host Reboot AI Automation SOP
 
-Last updated: 2026-07-10
+Last updated: 2026-07-11
 
 Canonical enterprise scope and current work order:
 
@@ -183,6 +183,15 @@ Producer-side Agent99 bridge:
 - Provider freshness bridge output must run direct readback, then require provider window, last seen, direct reference, and verifier readback before dashboard green is trusted.
 - Provider freshness no-false-green rule: route 200 or dashboard up is not enough. The Agent99 verifier must read `https://awoooi.wooo.work/api/v1/platform/events/dossier/recurrence?project_id=awoooi&limit=20` and record `providerWindowMinutes`, `lastSeen`, `directReference`, and `verifierReadback`.
 
+2026-07-11 P0-002 source receipt, runtime deployment pending:
+
+- `ACTION REQUIRED` cards for `cold-start-gate` now enter the same Agent99 ingress as Alertmanager and route to `Recover` with the reboot/cold-start scorecard verifier.
+- Failed `AWOOOI CI/CD` cards enter Agent99 as `cicd_failure` in `Status` mode. Agent99 records evidence but waits for the next successful Gitea CD/deploy/runtime receipt before source-event closure.
+- The producer stores a sanitized relay acceptance receipt in the outbound source envelope before Telegram delivery; Telegram remains a human lifecycle surface, not the only queue or database.
+- Cold-start candidates use the Agent99 execution route and never synthesize `kubectl rollout restart deployment/cold-start-gate`.
+- A relay receipt with `accepted=false` releases the fingerprint single-flight lock and returns failed. This prevents a transport-level response from permanently suppressing an unprocessed incident.
+- Verification completed in source: 249 focused post-rebase tests and 262 expanded all-Telegram plus Agent99/RepairCandidate tests passed after integrating the Telegram single-owner mainline; the repository static governance suite also passed. This does not prove Windows 99 is running this revision; runtime manifest and exact do-not-page replay are still mandatory.
+
 Approved controlled actions for the 99 agent:
 
 - Start a missing VM.
diff --git a/agent99-control-plane.ps1 b/agent99-control-plane.ps1
index 37ac06a52..f8103809f 100644
--- a/agent99-control-plane.ps1
+++ b/agent99-control-plane.ps1
@@ -2665,7 +2665,8 @@ function Get-AgentOutcomeContract {
     [datetime]$StartedAt,
     [bool]$SourceEventResolutionRequired,
     [object]$SourceEventResolved = $null,
-    [string]$SourceEventEvidence = ""
+    [string]$SourceEventEvidence = "",
+    [string]$SourceEventResolutionPolicy = "external_source_receipt_required"
   )
 
   $checks = @()
@@ -2817,7 +2818,25 @@ function Get-AgentOutcomeContract {
 
   $basePassed = [bool]($transportOk -and $evidenceExists -and $evidenceParsed -and $evidenceFresh -and $modeMatches)
   $verifierPassed = [bool]($basePassed -and $modeVerifierPassed)
-  $sourceEventResolvedBool = if (-not $SourceEventResolutionRequired) { $true } else { [bool]($SourceEventResolved -eq $true) }
+  $sourceEventResolvedBool = if (-not $SourceEventResolutionRequired) {
+    $true
+  } elseif ($SourceEventResolved -eq $true) {
+    $true
+  } elseif ($SourceEventResolutionPolicy -eq "mode_verifier_can_resolve") {
+    [bool]$verifierPassed
+  } else {
+    $false
+  }
+  $effectiveSourceEventEvidence = if ($SourceEventEvidence) {
+    $SourceEventEvidence
+  } elseif ($SourceEventResolutionPolicy -eq "mode_verifier_can_resolve" -and $verifierPassed) {
+    [string]$LatestEvidence.path
+  } else {
+    ""
+  }
+  if ($SourceEventResolutionRequired) {
+    $checks += New-AgentOutcomeCheck "source_event_resolved" $sourceEventResolvedBool $true "policy=$SourceEventResolutionPolicy evidence=$effectiveSourceEventEvidence"
+  }
   $state = if (-not $transportOk) {
     "failed"
   } elseif (-not $basePassed) {
@@ -2844,8 +2863,9 @@ function Get-AgentOutcomeContract {
     evidenceFresh = $evidenceFresh
     evidenceModeMatched = $modeMatches
     sourceEventResolutionRequired = $SourceEventResolutionRequired
+    sourceEventResolutionPolicy = $SourceEventResolutionPolicy
     sourceEventResolved = $sourceEventResolvedBool
-    sourceEventEvidence = if ($SourceEventEvidence) { $SourceEventEvidence } else { $null }
+    sourceEventEvidence = if ($effectiveSourceEventEvidence) { $effectiveSourceEventEvidence } else { $null }
     failedChecks = $failedChecks
     checks = $checks
     verifiedAt = (Get-Date -Format o)
@@ -2902,6 +2922,8 @@ function Invoke-AgentOutcomeContractSelfTest {
 
   $operatorResolved = Get-AgentOutcomeContract "PublicSmoke" 0 $publicOkEvidence $startedAt $false
   $alertVerifying = Get-AgentOutcomeContract "PublicSmoke" 0 $publicOkEvidence $startedAt $true $false "selftest-source-event"
+  $alertResolvedByVerifier = Get-AgentOutcomeContract "PublicSmoke" 0 $publicOkEvidence $startedAt $true $false "" "mode_verifier_can_resolve"
+  $alertTransportFailedVerifier = Get-AgentOutcomeContract "PublicSmoke" 7 $publicOkEvidence $startedAt $true $false "" "mode_verifier_can_resolve"
   $failedPostCondition = Get-AgentOutcomeContract "PublicSmoke" 0 $publicFailedEvidence $startedAt $false
   $transportFailed = Get-AgentOutcomeContract "PublicSmoke" 7 $publicOkEvidence $startedAt $false
   $providerDegraded = Get-AgentOutcomeContract "ProviderFreshness" 0 $providerEvidence $startedAt $true $false
@@ -2909,6 +2931,8 @@ function Invoke-AgentOutcomeContractSelfTest {
   $ok = [bool](
     $operatorResolved.state -eq "resolved" -and $operatorResolved.verifierPassed -and
     $alertVerifying.state -eq "verifying" -and -not $alertVerifying.resolved -and
+    $alertResolvedByVerifier.state -eq "resolved" -and $alertResolvedByVerifier.sourceEventResolved -and
+    $alertTransportFailedVerifier.state -eq "failed" -and -not $alertTransportFailedVerifier.sourceEventResolved -and
     $failedPostCondition.state -eq "degraded" -and -not $failedPostCondition.verifierPassed -and
     $transportFailed.state -eq "failed" -and
     $providerDegraded.state -eq "degraded" -and
@@ -2921,6 +2945,8 @@ function Invoke-AgentOutcomeContractSelfTest {
     cases = [pscustomobject]@{
       operatorResolved = $operatorResolved
       alertVerifying = $alertVerifying
+      alertResolvedByVerifier = $alertResolvedByVerifier
+      alertTransportFailedVerifier = $alertTransportFailedVerifier
       failedPostCondition = $failedPostCondition
       transportFailed = $transportFailed
       providerDegraded = $providerDegraded
@@ -3440,6 +3466,7 @@ function Invoke-AgentQueuedCommands {
     $alertService = if ($command.PSObject.Properties["alertService"]) { [string]$command.alertService } else { $null }
     $alertHost = if ($command.PSObject.Properties["alertHost"]) { [string]$command.alertHost } else { $null }
     $sourceEventResolutionRequired = if ($command.PSObject.Properties["sourceEventResolutionRequired"]) { Convert-AgentBool $command.sourceEventResolutionRequired } else { [bool]$alertId }
+    $sourceEventResolutionPolicy = if ($command.PSObject.Properties["sourceEventResolutionPolicy"]) { [string]$command.sourceEventResolutionPolicy } else { "external_source_receipt_required" }
     $sourceEventResolved = if ($command.PSObject.Properties["sourceEventResolved"]) { [object](Convert-AgentBool $command.sourceEventResolved) } else { $null }
     $sourceEventEvidence = if ($command.PSObject.Properties["sourceEventEvidence"]) { [string]$command.sourceEventEvidence } else { "" }
     $replyChatId = if ($command.PSObject.Properties["replyChatId"]) { [string]$command.replyChatId } else { "" }
@@ -3480,7 +3507,7 @@ function Invoke-AgentQueuedCommands {
     } else {
       -3
     }
-    $outcome = Get-AgentOutcomeContract -ModeName $modeName -TransportExitCode $exitCode -LatestEvidence $latest -StartedAt $startTime -SourceEventResolutionRequired $sourceEventResolutionRequired -SourceEventResolved $sourceEventResolved -SourceEventEvidence $sourceEventEvidence
+    $outcome = Get-AgentOutcomeContract -ModeName $modeName -TransportExitCode $exitCode -LatestEvidence $latest -StartedAt $startTime -SourceEventResolutionRequired $sourceEventResolutionRequired -SourceEventResolved $sourceEventResolved -SourceEventEvidence $sourceEventEvidence -SourceEventResolutionPolicy $sourceEventResolutionPolicy
     $result = [pscustomobject]@{
       id = $id
       mode = $modeName
@@ -3500,6 +3527,7 @@ function Invoke-AgentQueuedCommands {
       outcomeState = $outcome.state
       verifierPassed = [bool]$outcome.verifierPassed
       sourceEventResolved = [bool]$outcome.sourceEventResolved
+      sourceEventResolutionPolicy = $sourceEventResolutionPolicy
       outcome = $outcome
       exitCode = $exitCode
       durationSeconds = [math]::Round(((Get-Date) - $startTime).TotalSeconds, 1)
diff --git a/agent99-sre-alert-inbox.ps1 b/agent99-sre-alert-inbox.ps1
index 951d2c678..eeef17a9b 100644
--- a/agent99-sre-alert-inbox.ps1
+++ b/agent99-sre-alert-inbox.ps1
@@ -123,6 +123,7 @@ function Resolve-AgentAlertRoute {
     "alert_chain_health" = "Status"
     "application_ai_config_error" = "Status"
     "repository_missing" = "Status"
+    "cicd_failure" = "Status"
   }
   if ($kind -and $kindModes.ContainsKey($kind)) {
     return [pscustomobject]@{ mode = [string]$kindModes[$kind]; source = "kind"; matched = $kind }
@@ -131,7 +132,7 @@ function Resolve-AgentAlertRoute {
   if ($text -match "502|site_502|public_route_502|route_down|website_down|nginx upstream") {
     return [pscustomobject]@{ mode = "Recover"; source = "text_fallback"; matched = "public_route" }
   }
-  if ($text -match "reboot-auto-recovery|reboot_auto_recovery|all_required_hosts_not_in_10_minute_reboot_window|host_down|host_reboot|reboot_detected|vm_not_running|powered_off|vmware|startup") {
+  if ($text -match "reboot-auto-recovery|reboot_auto_recovery|cold[-_ ]start|all_required_hosts_not_in_10_minute_reboot_window|host_down|host_reboot|reboot_detected|vm_not_running|powered_off|vmware|startup") {
     return [pscustomobject]@{ mode = "Recover"; source = "text_fallback"; matched = "host_recovery" }
   }
   if ($text -match "backup|snapshot|restore drill|cron") {
@@ -152,6 +153,9 @@ function Resolve-AgentAlertRoute {
   if ($text -match "harbor|registry") {
     return [pscustomobject]@{ mode = "HarborRepair"; source = "text_fallback"; matched = "harbor" }
   }
+  if ($text -match "ci/?cd|cicd|build-and-deploy|deploy failed|deployment failed|build failed|部署失敗|構建失敗") {
+    return [pscustomobject]@{ mode = "Status"; source = "text_fallback"; matched = "cicd_failure" }
+  }
   if ($text -match "k3s|imagepullbackoff|errimagepull|crashloopbackoff|pod|deployment") {
     return [pscustomobject]@{ mode = "AwoooRepair"; source = "text_fallback"; matched = "k3s" }
   }
@@ -720,6 +724,9 @@ foreach ($file in $files) {
   $hostName = [string](Get-AgentField $alert "host" "")
   $replyChatId = [string](Get-AgentField $alert "replyChatId" "")
   $suppressTelegram = Test-AgentAlertSuppressTelegram $alert
+  $resolution = Get-AgentField $alert "resolution" $null
+  $sourceEventResolutionPolicy = [string](Get-AgentField $resolution "policy" "external_source_receipt_required")
+  $sourceEventResolutionRequired = Convert-AgentBool (Get-AgentField $resolution "required" $true)
 
   $requestPath = Join-Path $RequestDir "$queueId.json"
   $queuePath = Join-Path $QueueDir "$queueId.json"
@@ -744,6 +751,8 @@ foreach ($file in $files) {
     alertHost = $hostName
     alertPath = $processedPath
     suppressTelegram = $suppressTelegram
+    sourceEventResolutionPolicy = $sourceEventResolutionPolicy
+    sourceEventResolutionRequired = $sourceEventResolutionRequired
     createdAt = (Get-Date -Format o)
   } | ConvertTo-Json -Depth 8 | Set-Content -Path $requestPath -Encoding UTF8
 
@@ -769,6 +778,8 @@ foreach ($file in $files) {
     alertPath = $processedPath
     replyChatId = $replyChatId
     suppressTelegram = $suppressTelegram
+    sourceEventResolutionPolicy = $sourceEventResolutionPolicy
+    sourceEventResolutionRequired = $sourceEventResolutionRequired
     createdAt = (Get-Date -Format o)
   } | ConvertTo-Json -Depth 8 | Set-Content -Path $queuePath -Encoding UTF8
 
@@ -808,6 +819,8 @@ foreach ($file in $files) {
     dedupeDecision = $dedupeDecision
     controlledApply = $controlled
     suppressTelegram = $suppressTelegram
+    sourceEventResolutionPolicy = $sourceEventResolutionPolicy
+    sourceEventResolutionRequired = $sourceEventResolutionRequired
     requestPath = $requestPath
     queuePath = $queuePath
     alertPath = $processedPath
diff --git a/agent99-telegram-inbox.ps1 b/agent99-telegram-inbox.ps1
index db3bbcecc..dbdbedd69 100644
--- a/agent99-telegram-inbox.ps1
+++ b/agent99-telegram-inbox.ps1
@@ -257,7 +257,7 @@ function Test-AgentMonitoringAlertText {
     return $false
   }
 
-  if ($lower -match "alertmanager|\bfiring\b|\bcritical\b|\bwarning\b|\bdegraded\b|\bdown\b|\b502\b|provider_freshness_signal|source_provider_freshness_triage|raw_signal_normalized|controlled_runtime_candidate|freshness|last_seen|last seen|ingestion|imagepullbackoff|errimagepull|crashloopbackoff|harbor|registry|k3s|backup|snapshot|cpu|load|memory|disk|hostdown|host_down|vm_not_running|vm_stuck|vmware|reboot-auto-recovery|postgres|postgresql|database|alertchain|alert_chain|monitoring pipeline|wazuh|siem|security|intrusion|malware|auth_failed|bruteforce|cve|ioc|gitea|repo_missing|repository_missing|ai support|locale guard|missing_key|e_ai_missing_key") {
+  if ($lower -match "alertmanager|action required|\bfiring\b|\bcritical\b|\bwarning\b|\bdegraded\b|\bdown\b|\b502\b|provider_freshness_signal|source_provider_freshness_triage|raw_signal_normalized|controlled_runtime_candidate|freshness|last_seen|last seen|ingestion|imagepullbackoff|errimagepull|crashloopbackoff|harbor|registry|k3s|backup|snapshot|cpu|load|memory|disk|hostdown|host_down|vm_not_running|vm_stuck|vmware|reboot-auto-recovery|cold[-_ ]start|\bci/?cd\b|\bcicd\b|build-and-deploy|deploy failed|deployment failed|build failed|部署失敗|構建失敗|postgres|postgresql|database|alertchain|alert_chain|monitoring pipeline|wazuh|siem|security|intrusion|malware|auth_failed|bruteforce|cve|ioc|gitea|repo_missing|repository_missing|ai support|locale guard|missing_key|e_ai_missing_key") {
     return $true
   }
 
@@ -284,21 +284,22 @@ function Get-AgentTelegramAlertSeverity {
   $lower = $Text.ToLowerInvariant()
   if ($lower -match "resolved|recovered" -or (Test-AgentTextContainsCode $Text @(0x6062, 0x89E3))) { return "resolved" }
   if ($lower -match "critical|p0|emergency|fatal|down" -or (Test-AgentTextContainsCode $Text @(0x56B4, 0x91CD, 0x7DCA, 0x6025))) { return "critical" }
+  if ($lower -match "failed" -or $Text -match "失敗") { return "critical" }
   if ($lower -match "warning|warn|degraded|readback_failed|missing_key|locale guard|ai support" -or (Test-AgentTextContainsCode $Text @(0x544A, 0x8B66, 0x7570, 0x5E38))) { return "warning" }
-  if ($lower -match "failed") { return "critical" }
   return "warning"
 }
 
 function Get-AgentTelegramAlertKind {
   param([string]$Text)
   $lower = $Text.ToLowerInvariant()
+  if ($lower -match "\bci/?cd\b|\bcicd\b|build-and-deploy|deploy failed|deployment failed|build failed|部署失敗|構建失敗") { return "cicd_failure" }
   if ($lower -match "backup|snapshot|cron" -or (Test-AgentTextContainsCode $Text @(0x5099, 0x4EFD))) { return "backup_health" }
   if ($lower -match "wazuh|siem|security|intrusion|malware|auth_failed|bruteforce|cve|ioc") { return "wazuh_security_alert" }
   if ($lower -match "gitea|repo_missing|repository_missing|repo missing|repository missing") { return "repository_missing" }
   if ($lower -match "provider_freshness_signal|source_provider_freshness_triage|raw_signal_normalized|controlled_runtime_candidate|last_seen|last seen|provider freshness|provider window|ingestion") { return "provider_freshness_signal" }
   if ($lower -match "postgres|postgresql|mysql|mariadb|database|db_connection|pg_isready|replication lag") { return "database_health" }
   if ($lower -match "alertchain|alert_chain|alert chain|monitoring pipeline|notification pipeline") { return "alert_chain_health" }
-  if ($lower -match "reboot-auto-recovery|reboot_auto_recovery|all_required_hosts_not_in_10_minute_reboot_window|hostdown|host_down|vm_not_running|vm_stuck|vmware|reboot|restart|powered_off" -or (Test-AgentTextContainsCode $Text @(0x91CD, 0x555F, 0x95DC, 0x6A5F))) { return "host_recovery" }
+  if ($lower -match "reboot-auto-recovery|reboot_auto_recovery|cold[-_ ]start|all_required_hosts_not_in_10_minute_reboot_window|hostdown|host_down|vm_not_running|vm_stuck|vmware|reboot|restart|powered_off" -or (Test-AgentTextContainsCode $Text @(0x91CD, 0x555F, 0x95DC, 0x6A5F))) { return "host_recovery" }
   if ($lower -match "502|site_502|public_route|website|route") { return "public_route_502" }
   if ($lower -match "missing_key|e_ai_missing_key|ai support|locale guard" -or (Test-AgentTextContainsCode $Text @(0x5BA2, 0x670D))) { return "application_ai_config_error" }
   if ($lower -match "cpu|load" -or (Test-AgentTextContainsCode $Text @(0x8CA0, 0x8F09))) { return "performance_cpu" }
@@ -342,7 +343,7 @@ function Get-AgentTelegramAlertTarget {
     [string]$Service,
     [string]$HostName
   )
-  $targetMatch = [regex]::Match($Text, "(?im)\bTarget\s*[:\uFF1A]\s*([^\r\n]+)")
+  $targetMatch = [regex]::Match($Text, "(?im)(?:\bTarget|資源)\s*[:\uFF1A]\s*([^\r\n]+)")
   if ($targetMatch.Success) {
     return $targetMatch.Groups[1].Value.Trim()
   }
@@ -369,11 +370,30 @@ function Get-AgentTelegramSuggestedMode {
     "alert_chain_health" = "Status"
     "application_ai_config_error" = "Status"
     "repository_missing" = "Status"
+    "cicd_failure" = "Status"
   }
   if ($modeByKind.ContainsKey($Kind)) { return [string]$modeByKind[$Kind] }
   return "Status"
 }
 
+function Get-AgentTelegramSourceEventResolutionPolicy {
+  param([string]$Kind)
+  if ($Kind -in @(
+    "provider_freshness_signal",
+    "backup_health",
+    "public_route_502",
+    "host_recovery",
+    "performance_cpu",
+    "performance_memory",
+    "performance_disk",
+    "harbor_registry",
+    "awoooi_k3s"
+  )) {
+    return "mode_verifier_can_resolve"
+  }
+  return "external_source_receipt_required"
+}
+
 function Convert-AgentTelegramRouteToken {
   param([string]$Value)
   $safe = [regex]::Replace($Value.ToLowerInvariant(), "[^a-z0-9_.-]+", "_").Trim([char[]]".-_")
@@ -411,6 +431,7 @@ function New-AgentMonitoringAlertFromTelegram {
   $hostName = Get-AgentTelegramAlertHost $text
   $target = Get-AgentTelegramAlertTarget $text $kind $service $hostName
   $suggestedMode = Get-AgentTelegramSuggestedMode $kind
+  $sourceEventResolutionPolicy = Get-AgentTelegramSourceEventResolutionPolicy $kind
   $correlationKey = @(
     (Convert-AgentTelegramRouteToken $kind),
     (Convert-AgentTelegramRouteToken $target),
@@ -446,6 +467,11 @@ function New-AgentMonitoringAlertFromTelegram {
       correlationKey = $correlationKey
       singleFlightWindowSeconds = 300
     }
+    resolution = [pscustomobject]@{
+      schemaVersion = "agent99_source_event_resolution_v1"
+      policy = $sourceEventResolutionPolicy
+      required = $true
+    }
     telegramUpdateId = $Update.update_id
     telegramMessageId = $Update.message_id
     telegramChatTitle = $Update.chat_title
@@ -602,6 +628,24 @@ function Invoke-AgentTelegramInboxSelfTest {
       expectedKind = "public_route_502"
       expectedService = "awoooi"
       expectedHost = ""
+    },
+    [pscustomobject]@{
+      name = "action required cold start"
+      text = "ACTION REQUIRED INC-20260710-5700F7 Target: cold-start-gate"
+      expectedMonitoring = $true
+      expectedSeverity = "warning"
+      expectedKind = "host_recovery"
+      expectedService = "unknown"
+      expectedHost = ""
+    },
+    [pscustomobject]@{
+      name = "failed ci cd stays diagnostic"
+      text = "[AWOOOI CI/CD] build-and-deploy AWOOOI 部署失敗"
+      expectedMonitoring = $true
+      expectedSeverity = "critical"
+      expectedKind = "cicd_failure"
+      expectedService = "awoooi"
+      expectedHost = ""
     }
   )
 
diff --git a/apps/api/src/services/agent99_sre_bridge.py b/apps/api/src/services/agent99_sre_bridge.py
index c6ccaf327..8484817e9 100644
--- a/apps/api/src/services/agent99_sre_bridge.py
+++ b/apps/api/src/services/agent99_sre_bridge.py
@@ -124,6 +124,7 @@ def resolve_agent99_alert_kind(
         return "alert_chain_health"
     if re.search(
         r"reboot-auto-recovery|reboot_auto_recovery|reboot recovery|"
+        r"cold[-_ ]start(?:[-_ ]gate)?|full[-_ ]stack[-_ ]cold[-_ ]start|"
         r"host_down|hostdown|host_reboot|vm_not_running|powered_off|"
         r"all_required_hosts_not_in_10_minute_reboot_window",
         text,
@@ -135,6 +136,13 @@ def resolve_agent99_alert_kind(
         return "performance_pressure"
     if re.search(r"harbor|registry", text):
         return "harbor_registry"
+    if re.search(
+        r"\bci/?cd\b|\bcicd\b|build-and-deploy|build_and_deploy|"
+        r"deploy(?:ment)?[_ -](?:failed|failure)|build[_ -](?:failed|failure)|"
+        r"部署失敗|構建失敗",
+        text,
+    ):
+        return "cicd_failure"
     if re.search(
         r"k3s|imagepullbackoff|errimagepull|crashloopbackoff|pod|deployment", text
     ):
@@ -161,9 +169,25 @@ def _suggested_mode_for_kind(kind: str) -> str | None:
         "awoooi_k3s": "AwoooRepair",
         "host_recovery": "Recover",
         "application_ai_config_error": "Status",
+        "cicd_failure": "Status",
+        "monitoring_alert": "Status",
     }.get(kind)
 
 
+def _resolution_policy_for_kind(kind: str) -> str:
+    if kind in {
+        "provider_freshness_signal",
+        "public_route_502",
+        "performance_pressure",
+        "backup_health",
+        "harbor_registry",
+        "awoooi_k3s",
+        "host_recovery",
+    }:
+        return "mode_verifier_can_resolve"
+    return "external_source_receipt_required"
+
+
 def _agent99_route_group_key(
     *,
     kind: str,
@@ -343,6 +367,11 @@ def build_agent99_sre_alert(
             "sourceFingerprint": _safe_text(fingerprint, max_length=160),
             "singleFlightWindowSeconds": AGENT99_SRE_SINGLE_FLIGHT_TTL_SECONDS,
         },
+        "resolution": {
+            "schemaVersion": "agent99_source_event_resolution_v1",
+            "policy": _resolution_policy_for_kind(kind),
+            "required": True,
+        },
         "awoooi": {
             "alertId": _safe_text(alert_id, max_length=160),
             "alertname": _safe_text(alertname, max_length=160),
@@ -453,14 +482,60 @@ def post_agent99_sre_alert(
 
 
 def dispatch_agent99_sre_alert(payload: dict[str, Any]) -> str:
+    receipt = dispatch_agent99_sre_alert_with_receipt(payload)
+    return str(receipt["transport"])
+
+
+def dispatch_agent99_sre_alert_with_receipt(
+    payload: dict[str, Any],
+) -> dict[str, Any]:
+    """Dispatch one alert and retain only public-safe acceptance evidence."""
+
+    alert_id = _safe_text(payload.get("id"), max_length=160)
+    kind = _safe_text(payload.get("kind"), max_length=120)
     if settings.AGENT99_SRE_ALERT_RELAY_URL:
-        post_agent99_sre_alert(payload)
-        return "relay"
+        raw_receipt = post_agent99_sre_alert(payload) or {}
+        response_payload: dict[str, Any] = {}
+        try:
+            parsed = json.loads(str(raw_receipt.get("body") or ""))
+            if isinstance(parsed, dict):
+                response_payload = parsed
+        except json.JSONDecodeError:
+            response_payload = {}
+        http_status = int(raw_receipt.get("status") or 0)
+        accepted = bool(200 <= http_status < 300 and response_payload.get("ok") is True)
+        inbox_triggered = bool(response_payload.get("inboxTriggered") is True)
+        return {
+            "schema_version": "agent99_sre_dispatch_receipt_v1",
+            "status": (
+                "accepted_inbox_triggered"
+                if accepted and inbox_triggered
+                else "accepted_inbox_pending"
+                if accepted
+                else "relay_response_not_accepted"
+            ),
+            "transport": "relay",
+            "alert_id": alert_id,
+            "kind": kind,
+            "http_status": http_status,
+            "accepted": accepted,
+            "inbox_triggered": inbox_triggered,
+            "stores_raw_response": False,
+        }
 
     if settings.AGENT99_SRE_ALERT_INBOX_PATH:
         written = write_agent99_sre_alert(payload)
         if written is not None:
-            return "file"
+            return {
+                "schema_version": "agent99_sre_dispatch_receipt_v1",
+                "status": "file_written",
+                "transport": "file",
+                "alert_id": alert_id,
+                "kind": kind,
+                "accepted": True,
+                "inbox_triggered": False,
+                "stores_raw_response": False,
+            }
 
     logger.info(
         "agent99_sre_bridge_disabled",
@@ -468,7 +543,16 @@ def dispatch_agent99_sre_alert(payload: dict[str, Any]) -> str:
         alert_id=payload.get("id"),
         kind=payload.get("kind"),
     )
-    return "disabled"
+    return {
+        "schema_version": "agent99_sre_dispatch_receipt_v1",
+        "status": "bridge_disabled",
+        "transport": "disabled",
+        "alert_id": alert_id,
+        "kind": kind,
+        "accepted": False,
+        "inbox_triggered": False,
+        "stores_raw_response": False,
+    }
 
 
 async def bridge_alertmanager_to_agent99(
@@ -527,19 +611,23 @@ async def bridge_alertmanager_to_agent99(
                 "fingerprint": single_flight_fingerprint,
                 "groupKey": routing.get("groupKey"),
             }
-        dispatch_result = await asyncio.to_thread(dispatch_agent99_sre_alert, payload)
-        if dispatch_result == "disabled":
+        dispatch_receipt = await asyncio.to_thread(
+            dispatch_agent99_sre_alert_with_receipt, payload
+        )
+        if not dispatch_receipt.get("accepted"):
             await release_agent99_sre_single_flight(single_flight_fingerprint, alert_id)
             single_flight_acquired = False
             return {
                 "status": "failed",
-                "reason": "bridge_disabled",
+                "reason": dispatch_receipt.get("status") or "dispatch_not_accepted",
+                "dispatchReceipt": dispatch_receipt,
                 "fingerprint": single_flight_fingerprint,
                 "groupKey": routing.get("groupKey"),
             }
         return {
             "status": "dispatched",
-            "dispatch": dispatch_result,
+            "dispatch": dispatch_receipt.get("transport"),
+            "dispatchReceipt": dispatch_receipt,
             "fingerprint": single_flight_fingerprint,
             "groupKey": routing.get("groupKey"),
             "kind": payload.get("kind"),
diff --git a/apps/api/src/services/repair_candidate_service.py b/apps/api/src/services/repair_candidate_service.py
index 8e56b4dd0..459c634d0 100644
--- a/apps/api/src/services/repair_candidate_service.py
+++ b/apps/api/src/services/repair_candidate_service.py
@@ -314,6 +314,28 @@ class RepairCandidateService:
         if not isinstance(promotion_contract, dict):
             return
 
+        route_id = str(promotion_contract.get("route_id") or "")
+        if route_id.startswith("agent99_"):
+            suggested_mode = "Recover" if route_id.startswith("agent99_recover") else "Status"
+            handoff = {
+                "schema_version": "repair_candidate_controlled_executor_handoff_v1",
+                "status": "agent99_dispatch_required_on_actionable_card_send",
+                "operation_type": "agent99_actionable_dispatch",
+                "executor": "Agent99",
+                "route_id": route_id,
+                "suggested_mode": suggested_mode,
+                "dispatch_receipt_required": True,
+                "post_condition_verifier_required": True,
+                "check_mode_queued": False,
+                "runtime_execution_authorized": False,
+            }
+            result.metadata["controlled_executor_handoff"] = handoff
+            draft_package["controlled_executor_handoff"] = handoff
+            work_item = draft_package.get("awooop_work_item")
+            if isinstance(work_item, dict):
+                work_item["controlled_executor_handoff"] = handoff
+            return
+
         proposal_data = {
             "source": "repair_candidate_controlled_queue",
             "risk_level": severity or getattr(getattr(incident, "severity", None), "value", ""),
@@ -1194,13 +1216,23 @@ class RepairCandidateService:
             return False
         if "mcp_evidence_missing" in set(blockers):
             return False
-        if "playbook_command_not_safely_routable" in set(blockers):
+        route = str(template.get("suggested_route") or "").strip()
+        repair_template = str(template.get("repair_command_template") or "").strip()
+        safe_agent99_route = bool(
+            route in {
+                "agent99_recover_after_owner_review",
+                "agent99_status_after_owner_review",
+            }
+            and repair_template.startswith("agent99-mode ")
+        )
+        if (
+            "playbook_command_not_safely_routable" in set(blockers)
+            and not safe_agent99_route
+        ):
             return False
         if not coverage_gap.get("mcp_evidence_ready"):
             return False
 
-        repair_template = str(template.get("repair_command_template") or "").strip()
-        route = str(template.get("suggested_route") or "").strip()
         if not repair_template or not route:
             return False
         if "<" in repair_template:
@@ -1241,7 +1273,35 @@ class RepairCandidateService:
             "publish_assets_to_runs_work_items_and_knowledge_base",
         ]
 
-        if target_kind == "k8s_workload":
+        if target_kind == "control_plane":
+            normalized_target = target.lower()
+            if any(
+                marker in normalized_target
+                for marker in (
+                    "cold-start",
+                    "cold_start",
+                    "reboot-auto-recovery",
+                    "reboot_auto_recovery",
+                )
+            ):
+                command_template = "agent99-mode Recover controlledApply=true"
+                rollback_template = "agent99-mode Status controlledApply=false"
+                route = "agent99_recover_after_owner_review"
+                verifier_plan.extend([
+                    "agent99 Recover outcome verifier must resolve",
+                    "rerun reboot-auto-recovery-slo-scorecard",
+                    "confirm required hosts, Harbor, K3s, and public routes are green",
+                ])
+            else:
+                command_template = "agent99-mode Status controlledApply=false"
+                rollback_template = "no runtime write; retain previous production deployment"
+                route = "agent99_status_after_owner_review"
+                verifier_plan.extend([
+                    "compare failed commit with current production deploy marker",
+                    "confirm public routes and current production services remain green",
+                    "keep source CI failure open until a later successful run is observed",
+                ])
+        elif target_kind == "k8s_workload":
             workload = target.replace("deployment/", "").replace("pod/", "").replace("svc/", "")
             workload_ref = workload or "<deployment>"
             namespace_ref = ns or "<namespace>"
@@ -1442,6 +1502,25 @@ class RepairCandidateService:
 
     def _infer_target_kind(self, *, target_resource: str, namespace: str) -> str:
         target = (target_resource or "").lower()
+        control_plane_context = f"{target} {(namespace or '').lower()}"
+        if any(
+            marker in control_plane_context
+            for marker in (
+                "cold-start",
+                "cold_start",
+                "reboot-auto-recovery",
+                "reboot_auto_recovery",
+                "provider_freshness",
+                "alert-chain",
+                "alert_chain",
+                "ci/cd",
+                "cicd",
+                "build-and-deploy",
+                "deployment failed",
+                "部署失敗",
+            )
+        ):
+            return "control_plane"
         if any(marker in target for marker in ("postgres", "postgresql", "pgbouncer", "database", "db-")):
             return "database"
         if any(marker in target for marker in ("node-exporter", "host", "188", "111", "168")):
diff --git a/apps/api/src/services/telegram_gateway.py b/apps/api/src/services/telegram_gateway.py
index 944d95a91..f282ec925 100644
--- a/apps/api/src/services/telegram_gateway.py
+++ b/apps/api/src/services/telegram_gateway.py
@@ -53,7 +53,7 @@ from src.services.approval_action_classifier import (
 )
 from src.services.agent99_sre_bridge import (
     build_agent99_sre_alert,
-    dispatch_agent99_sre_alert,
+    dispatch_agent99_sre_alert_with_receipt,
 )
 from src.services.chat_manager import get_chat_manager
 from src.services.operator_outcome import build_operator_outcome, normalize_operator_outcome
@@ -163,6 +163,17 @@ _AI_SIGNAL_TARGET_LABEL_RE = re.compile(
 _ALERT_CARD_CODE_VALUE_RE = re.compile(
     r"(?P<label>事件類型|Target|Lane)：<code>(?P<value>[^<]+)</code>"
 )
+_ACTION_REQUIRED_RESOURCE_RE = re.compile(
+    r"資源\s*[：:]\s*(?P<value>[^\r\n]+)", re.IGNORECASE
+)
+_ACTION_REQUIRED_CATEGORY_RE = re.compile(
+    r"分類\s*[：:]\s*(?P<value>[^\r\n]+)", re.IGNORECASE
+)
+_CICD_STAGE_RE = re.compile(
+    r"\[AWOOOI CI/CD\]\s*(?:\|\s*(?P<value>[^\r\n]+))?", re.IGNORECASE
+)
+_CICD_JOB_RE = re.compile(r"📦\s*(?P<value>[^\r\n]+)")
+_CICD_COMMIT_RE = re.compile(r"📋\s*(?P<value>[0-9a-f]{7,40})\b", re.IGNORECASE)
 
 
 @dataclass(frozen=True)
@@ -2285,6 +2296,60 @@ def _ai_automation_alert_card_metadata(text: str) -> dict[str, object] | None:
     return metadata
 
 
+def _agent99_actionable_outbound_metadata(text: str) -> dict[str, object] | None:
+    """Normalize every actionable SRE Telegram card into one Agent99 contract."""
+
+    ai_card = _ai_automation_alert_card_metadata(text)
+    if ai_card:
+        return ai_card
+
+    plain = _plain_text_from_html(text, limit=8000)
+    incident_match = _INCIDENT_ID_RE.search(plain)
+    if "ACTION REQUIRED" in plain and incident_match:
+        resource_match = _ACTION_REQUIRED_RESOURCE_RE.search(plain)
+        category_match = _ACTION_REQUIRED_CATEGORY_RE.search(plain)
+        target = (
+            resource_match.group("value").strip()
+            if resource_match
+            else "awooop-action-required"
+        )
+        lane = category_match.group("value").strip() if category_match else "general"
+        return {
+            "schema_version": "agent99_actionable_outbound_mirror_v1",
+            "card_schema": "awooop_action_required_v1",
+            "event_type": "awooop_action_required",
+            "lane": lane[:120] or "general",
+            "target": target[:240] or "awooop-action-required",
+            "incident_id": incident_match.group(0),
+            "runtime_write_gate_state": "controlled",
+            "delivery_receipt_readback_required": True,
+            "mirror_source": "legacy_telegram_gateway_outbound_message",
+        }
+
+    cicd_match = _CICD_STAGE_RE.search(plain)
+    failed_cicd = bool(
+        cicd_match
+        and any(token in plain.lower() for token in ("failed", "failure", "失敗"))
+    )
+    if failed_cicd:
+        job_match = _CICD_JOB_RE.search(plain)
+        commit_match = _CICD_COMMIT_RE.search(plain)
+        stage = (cicd_match.group("value") or "").strip() if cicd_match else ""
+        job = job_match.group("value").strip() if job_match else "AWOOOI CI/CD"
+        return {
+            "schema_version": "agent99_actionable_outbound_mirror_v1",
+            "card_schema": "awoooi_cicd_failure_v1",
+            "event_type": "cicd_failure",
+            "lane": stage[:120] or "build-and-deploy",
+            "target": job[:240] or "AWOOOI CI/CD",
+            "commit_sha": commit_match.group("value") if commit_match else "",
+            "runtime_write_gate_state": "external_source_receipt_required",
+            "delivery_receipt_readback_required": True,
+            "mirror_source": "legacy_telegram_gateway_outbound_message",
+        }
+    return None
+
+
 def _agent99_ai_alert_card_mirror_configured() -> bool:
     return bool(
         settings.AGENT99_SRE_ALERT_RELAY_URL
@@ -2302,20 +2367,20 @@ def _agent99_alert_card_severity(text: str) -> str:
             return "warning"
         return "info"
     lowered = text.lower()
-    if any(token in lowered for token in ("critical", "p0", "p1")):
+    if any(token in lowered for token in ("critical", "failed", "failure", "p0", "p1", "失敗")):
         return "critical"
     if any(token in lowered for token in ("warning", "warn", "p2")):
         return "warning"
     return "info"
 
 
-def _agent99_alert_from_ai_automation_card(
+def _agent99_alert_from_actionable_outbound(
     text: str,
     *,
     source: str = "telegram_gateway",
 ) -> dict[str, object] | None:
-    """Convert a Telegram AI alert card into a sanitized Agent99 action signal."""
-    metadata = _ai_automation_alert_card_metadata(text)
+    """Convert one actionable Telegram card into a sanitized Agent99 signal."""
+    metadata = _agent99_actionable_outbound_metadata(text)
     if not metadata:
         return None
 
@@ -2327,13 +2392,16 @@ def _agent99_alert_from_ai_automation_card(
 
     card_hash = hashlib.sha256(text.encode("utf-8")).hexdigest()[:16]
     runtime_gate = str(metadata.get("runtime_write_gate_state") or "unknown")
-    card_schema = str(metadata.get("card_schema") or "ai_automation_alert_card_v1")
-    alert_id = f"telegram-ai-card-{event_type}-{card_hash}"
-    fingerprint = f"telegram-ai-card:{event_type}:{lane}:{target}:{card_hash}"
+    card_schema = str(metadata.get("card_schema") or "agent99_actionable_outbound_v1")
+    incident_id = str(metadata.get("incident_id") or "")
+    commit_sha = str(metadata.get("commit_sha") or "")
+    alert_id = f"telegram-actionable-{event_type}-{card_hash}"
+    fingerprint = f"telegram-actionable:{event_type}:{lane}:{target}:{card_hash}"
     message = (
-        "Telegram AI automation alert card mirrored to Agent99; "
+        "Telegram actionable SRE card mirrored to Agent99; "
         f"event_type={event_type} lane={lane} target={target} "
-        f"runtime_write_gate={runtime_gate}"
+        f"runtime_write_gate={runtime_gate} incident_id={incident_id or '-'} "
+        f"commit_sha={commit_sha[:12] or '-'}"
     )
     payload = build_agent99_sre_alert(
         alert_id=alert_id,
@@ -2351,9 +2419,11 @@ def _agent99_alert_from_ai_automation_card(
             "target": target,
             "card_schema": card_schema,
             "runtime_write_gate_state": runtime_gate,
+            "incident_id": incident_id,
+            "commit_sha": commit_sha[:40],
         },
         annotations={
-            "summary": "AI automation alert card mirrored from TelegramGateway.",
+            "summary": "Actionable SRE card mirrored from TelegramGateway.",
             "lane": lane,
             "runtime_write_gate_state": runtime_gate,
         },
@@ -2362,27 +2432,49 @@ def _agent99_alert_from_ai_automation_card(
         notification_type=card_schema,
     )
     payload["source"] = "awoooi-api-telegram-gateway"
-    payload["title"] = f"Telegram AI alert card {event_type}"
-    payload["id"] = f"awoooi-telegram-alert-card-{event_type}-{card_hash}"
+    payload["title"] = f"Telegram actionable alert {event_type}"
+    payload["id"] = (
+        f"awoooi-telegram-alert-card-{event_type}-{card_hash}"
+        if card_schema == "ai_automation_alert_card_v1"
+        else f"awoooi-telegram-actionable-{event_type}-{card_hash}"
+    )
     if isinstance(payload.get("awoooi"), dict):
         payload["awoooi"]["alertId"] = alert_id
         payload["awoooi"]["telegramGatewaySource"] = source
         payload["awoooi"]["cardHash"] = card_hash
+        payload["awoooi"]["incidentId"] = incident_id
+        payload["awoooi"]["commitSha"] = commit_sha[:40]
+        payload["awoooi"]["cardSchema"] = card_schema
     return payload
 
 
+def _agent99_alert_from_ai_automation_card(
+    text: str,
+    *,
+    source: str = "telegram_gateway",
+) -> dict[str, object] | None:
+    """Backward-compatible AI-card-only adapter used by older call sites/tests."""
+
+    if not _ai_automation_alert_card_metadata(text):
+        return None
+    return _agent99_alert_from_actionable_outbound(text, source=source)
+
+
 async def _mirror_ai_automation_alert_card_to_agent99(
     text: str,
     *,
     source: str = "telegram_gateway",
-) -> str | None:
-    payload = _agent99_alert_from_ai_automation_card(text, source=source)
+) -> dict[str, object] | None:
+    payload = _agent99_alert_from_actionable_outbound(text, source=source)
     if not payload:
         return None
 
     alert_id = str(payload.get("id") or "")
     try:
-        dispatch_result = await asyncio.to_thread(dispatch_agent99_sre_alert, payload)
+        dispatch_receipt = await asyncio.to_thread(
+            dispatch_agent99_sre_alert_with_receipt,
+            payload,
+        )
     except Exception as exc:
         logger.warning(
             "telegram_agent99_alert_card_mirror_failed_fail_open",
@@ -2390,16 +2482,38 @@ async def _mirror_ai_automation_alert_card_to_agent99(
             kind=payload.get("kind"),
             error=str(exc),
         )
-        return None
+        return {
+            "schema_version": "telegram_agent99_dispatch_receipt_v1",
+            "status": "dispatch_failed",
+            "alert_id": alert_id,
+            "kind": str(payload.get("kind") or "monitoring_alert"),
+            "suggested_mode": str(payload.get("suggestedMode") or "Status"),
+            "accepted": False,
+            "inbox_triggered": False,
+            "error_type": type(exc).__name__,
+        }
 
     logger.info(
         "telegram_agent99_alert_card_mirrored",
         alert_id=alert_id,
         kind=payload.get("kind"),
         suggested_mode=payload.get("suggestedMode"),
-        dispatch_result=dispatch_result,
+        dispatch_result=dispatch_receipt.get("status"),
     )
-    return alert_id
+    awoooi = payload.get("awoooi") if isinstance(payload.get("awoooi"), dict) else {}
+    return {
+        "schema_version": "telegram_agent99_dispatch_receipt_v1",
+        "status": str(dispatch_receipt.get("status") or "unknown"),
+        "transport": str(dispatch_receipt.get("transport") or "unknown"),
+        "alert_id": alert_id,
+        "kind": str(payload.get("kind") or "monitoring_alert"),
+        "suggested_mode": str(payload.get("suggestedMode") or "Status"),
+        "accepted": bool(dispatch_receipt.get("accepted") is True),
+        "inbox_triggered": bool(dispatch_receipt.get("inbox_triggered") is True),
+        "incident_id": str(awoooi.get("incidentId") or ""),
+        "commit_sha": str(awoooi.get("commitSha") or ""),
+        "stores_raw_response": False,
+    }
 
 
 def _schedule_agent99_ai_alert_card_mirror(
@@ -2409,7 +2523,7 @@ def _schedule_agent99_ai_alert_card_mirror(
 ) -> bool:
     if not _agent99_ai_alert_card_mirror_configured():
         return False
-    if not _ai_automation_alert_card_metadata(text):
+    if not _agent99_actionable_outbound_metadata(text):
         return False
     try:
         asyncio.create_task(
@@ -2429,6 +2543,7 @@ def _outbound_source_envelope(method: str, payload: dict) -> dict[str, object]:
     """Build a redaction-friendly source envelope for Channel Hub replay."""
     text = str(payload.get("text") or payload.get("caption") or "")
     alert_card_metadata = _ai_automation_alert_card_metadata(text)
+    actionable_metadata = _agent99_actionable_outbound_metadata(text)
     incident_ids = sorted(
         set(_INCIDENT_ID_RE.findall(text))
         | set(_reply_markup_incident_ids(payload))
@@ -2448,19 +2563,24 @@ def _outbound_source_envelope(method: str, payload: dict) -> dict[str, object]:
         if key == "event_ids":
             continue
         source_refs[key] = values[:20]
-    if alert_card_metadata:
+    if actionable_metadata:
+        fingerprint_namespace = (
+            "ai_automation_alert_card"
+            if actionable_metadata.get("card_schema") == "ai_automation_alert_card_v1"
+            else "agent99_actionable_outbound"
+        )
         _append_source_ref(
             source_refs,
             "alert_ids",
-            alert_card_metadata.get("event_type"),
+            actionable_metadata.get("event_type"),
         )
         _append_source_ref(
             source_refs,
             "fingerprints",
             (
-                "ai_automation_alert_card:"
-                f"{alert_card_metadata.get('event_type')}:"
-                f"{alert_card_metadata.get('lane')}"
+                f"{fingerprint_namespace}:"
+                f"{actionable_metadata.get('event_type')}:"
+                f"{actionable_metadata.get('lane')}"
             ),
         )
 
@@ -2477,6 +2597,8 @@ def _outbound_source_envelope(method: str, payload: dict) -> dict[str, object]:
     }
     if alert_card_metadata:
         envelope["ai_automation_alert_card"] = alert_card_metadata
+    if actionable_metadata:
+        envelope["agent99_actionable_outbound"] = actionable_metadata
     return envelope
 
 
@@ -3066,6 +3188,10 @@ def _merge_outbound_source_envelope_extra(
     if isinstance(alert_notification, dict):
         envelope["alert_notification"] = alert_notification
 
+    agent99_dispatch_receipt = extra.get("agent99_dispatch_receipt")
+    if isinstance(agent99_dispatch_receipt, dict):
+        envelope["agent99_dispatch_receipt"] = agent99_dispatch_receipt
+
     km_stale_completion_summary = extra.get("km_stale_completion_summary")
     if isinstance(km_stale_completion_summary, dict):
         envelope["km_stale_completion_summary"] = km_stale_completion_summary
@@ -4947,10 +5073,18 @@ class TelegramGateway:
         payload = normalize_telegram_send_message_payload(method, payload)
         source_envelope_extra = payload.pop(_AWOOOP_SOURCE_ENVELOPE_EXTRA_KEY, None)
         await self._attach_incident_thread_reply(method, payload)
-        _schedule_agent99_ai_alert_card_mirror(
-            str(payload.get("text") or payload.get("caption") or ""),
-            source="send_request",
-        )
+        actionable_text = str(payload.get("text") or payload.get("caption") or "")
+        if (
+            _agent99_ai_alert_card_mirror_configured()
+            and _agent99_actionable_outbound_metadata(actionable_text)
+        ):
+            agent99_receipt = await _mirror_ai_automation_alert_card_to_agent99(
+                actionable_text,
+                source="send_request",
+            )
+            if isinstance(agent99_receipt, dict):
+                source_envelope_extra = dict(source_envelope_extra or {})
+                source_envelope_extra["agent99_dispatch_receipt"] = agent99_receipt
 
         url = f"{self.api_url}/{method}"
 
diff --git a/apps/api/tests/test_agent99_alert_dispatch_order_contract.py b/apps/api/tests/test_agent99_alert_dispatch_order_contract.py
index f905a8705..b3b292687 100644
--- a/apps/api/tests/test_agent99_alert_dispatch_order_contract.py
+++ b/apps/api/tests/test_agent99_alert_dispatch_order_contract.py
@@ -23,7 +23,9 @@ def test_agent99_bridge_has_fingerprint_single_flight_before_transport() -> None
     )
     bridge_at = source.index("async def bridge_alertmanager_to_agent99")
     lock_at = source.index("try_acquire_agent99_sre_single_flight", bridge_at)
-    dispatch_at = source.index("dispatch_agent99_sre_alert, payload", lock_at)
+    dispatch_at = source.index(
+        "dispatch_agent99_sre_alert_with_receipt, payload", lock_at
+    )
 
     assert lock_at < dispatch_at
 
@@ -39,6 +41,14 @@ def test_agent99_runtime_prioritizes_structured_route_over_text() -> None:
     assert '"database_health" = "Status"' in source
     assert '"alert_chain_health" = "Status"' in source
     assert '"host_recovery" = "Recover"' in source
+    assert '"cicd_failure" = "Status"' in source
+    assert "sourceEventResolutionPolicy = $sourceEventResolutionPolicy" in source
+    assert "sourceEventResolutionRequired = $sourceEventResolutionRequired" in source
+
+    telegram_source = TELEGRAM_INBOX.read_text(encoding="utf-8")
+    assert "function Get-AgentTelegramSourceEventResolutionPolicy" in telegram_source
+    assert '"cicd_failure" = "Status"' in telegram_source
+    assert 'policy = $sourceEventResolutionPolicy' in telegram_source
 
 
 def test_agent99_runtime_has_local_correlation_dedupe_and_lock() -> None:
diff --git a/apps/api/tests/test_agent99_control_plane_outcome_contract.py b/apps/api/tests/test_agent99_control_plane_outcome_contract.py
index afd50e60d..0dc45d3a2 100644
--- a/apps/api/tests/test_agent99_control_plane_outcome_contract.py
+++ b/apps/api/tests/test_agent99_control_plane_outcome_contract.py
@@ -54,6 +54,11 @@ def test_agent99_outcome_contract_has_runtime_self_test() -> None:
     assert "function Invoke-AgentOutcomeContractSelfTest" in source
     assert '$operatorResolved.state -eq "resolved"' in source
     assert '$alertVerifying.state -eq "verifying"' in source
+    assert '$alertResolvedByVerifier.state -eq "resolved"' in source
+    assert '$alertTransportFailedVerifier.state -eq "failed"' in source
+    assert "-not $alertTransportFailedVerifier.sourceEventResolved" in source
+    assert '"mode_verifier_can_resolve"' in source
+    assert "sourceEventResolutionPolicy" in source
     assert '$failedPostCondition.state -eq "degraded"' in source
     assert '$transportFailed.state -eq "failed"' in source
     assert '$securityCandidate.state -eq "candidate_ready"' in source
diff --git a/apps/api/tests/test_agent99_sre_bridge.py b/apps/api/tests/test_agent99_sre_bridge.py
index 336bb6997..f1e0580f4 100644
--- a/apps/api/tests/test_agent99_sre_bridge.py
+++ b/apps/api/tests/test_agent99_sre_bridge.py
@@ -8,6 +8,7 @@ from src.services.agent99_sre_bridge import (
     agent99_sre_single_flight_key,
     bridge_alertmanager_to_agent99,
     build_agent99_sre_alert,
+    dispatch_agent99_sre_alert_with_receipt,
     post_agent99_sre_alert,
     release_agent99_sre_single_flight,
     resolve_agent99_alert_kind,
@@ -112,6 +113,22 @@ def test_provider_freshness_alert_builds_agent99_contract() -> None:
             "awoooi_k3s",
             "AwoooRepair",
         ),
+        (
+            "ColdStartGateBlocked",
+            "cold-start-gate",
+            "full-stack cold-start recovery gate requires remediation",
+            {"service": "awoooi"},
+            "host_recovery",
+            "Recover",
+        ),
+        (
+            "AWOOOICICDFailed",
+            "AWOOOI deployment",
+            "build-and-deploy deployment failed",
+            {"service": "awoooi"},
+            "cicd_failure",
+            "Status",
+        ),
     ],
 )
 def test_agent99_routing_replay_corpus(
@@ -137,6 +154,28 @@ def test_agent99_routing_replay_corpus(
     assert payload["suggestedMode"] == expected_mode
 
 
+def test_agent99_resolution_policy_uses_mode_verifier_only_for_stateful_alerts() -> None:
+    cold_start = build_agent99_sre_alert(
+        alert_id="cold-start",
+        alertname="ColdStartGateBlocked",
+        severity="critical",
+        namespace="awoooi-prod",
+        target_resource="cold-start-gate",
+        message="cold-start gate blocked",
+    )
+    cicd = build_agent99_sre_alert(
+        alert_id="cicd-failure",
+        alertname="AWOOOICICDFailed",
+        severity="critical",
+        namespace="awoooi-prod",
+        target_resource="AWOOOI deployment",
+        message="build-and-deploy failed",
+    )
+
+    assert cold_start["resolution"]["policy"] == "mode_verifier_can_resolve"
+    assert cicd["resolution"]["policy"] == "external_source_receipt_required"
+
+
 def test_alert_kind_mapping_for_route_and_performance() -> None:
     assert (
         resolve_agent99_alert_kind(
@@ -234,6 +273,43 @@ def test_post_agent99_sre_alert_to_relay(monkeypatch) -> None:
     assert seen["headers"]["X-agent99-relay-token"] == "relay-token"
 
 
+def test_dispatch_receipt_keeps_relay_acceptance_without_raw_body(monkeypatch) -> None:
+    payload = build_agent99_sre_alert(
+        alert_id="receipt-smoke",
+        alertname="ColdStartGateBlocked",
+        severity="critical",
+        namespace="awoooi-prod",
+        target_resource="cold-start-gate",
+        message="cold-start gate blocked",
+    )
+    monkeypatch.setattr(
+        "src.services.agent99_sre_bridge.settings.AGENT99_SRE_ALERT_RELAY_URL",
+        "http://192.168.0.99:8787/agent99/sre-alert/",
+    )
+    monkeypatch.setattr(
+        "src.services.agent99_sre_bridge.post_agent99_sre_alert",
+        lambda _payload: {
+            "status": 202,
+            "body": '{"ok":true,"inboxTriggered":true,"incomingFile":"private-path"}',
+        },
+    )
+
+    receipt = dispatch_agent99_sre_alert_with_receipt(payload)
+
+    assert receipt == {
+        "schema_version": "agent99_sre_dispatch_receipt_v1",
+        "status": "accepted_inbox_triggered",
+        "transport": "relay",
+        "alert_id": "awoooi-alertmanager-receipt-smoke",
+        "kind": "host_recovery",
+        "http_status": 202,
+        "accepted": True,
+        "inbox_triggered": True,
+        "stores_raw_response": False,
+    }
+    assert "private-path" not in str(receipt)
+
+
 def test_agent99_single_flight_key_does_not_expose_fingerprint() -> None:
     key = agent99_sre_single_flight_key("private/source/fingerprint")
 
@@ -252,8 +328,14 @@ async def test_agent99_bridge_suppresses_duplicate_single_flight(monkeypatch) ->
         duplicate,
     )
     monkeypatch.setattr(
-        "src.services.agent99_sre_bridge.dispatch_agent99_sre_alert",
-        lambda payload: dispatched.append(payload) or "relay",
+        "src.services.agent99_sre_bridge.dispatch_agent99_sre_alert_with_receipt",
+        lambda payload: dispatched.append(payload)
+        or {
+            "status": "accepted_inbox_triggered",
+            "transport": "relay",
+            "accepted": True,
+            "inbox_triggered": True,
+        },
     )
 
     result = await bridge_alertmanager_to_agent99(
@@ -282,8 +364,14 @@ async def test_agent99_bridge_dispatches_single_flight_winner(monkeypatch) -> No
         winner,
     )
     monkeypatch.setattr(
-        "src.services.agent99_sre_bridge.dispatch_agent99_sre_alert",
-        lambda payload: dispatched.append(payload) or "relay",
+        "src.services.agent99_sre_bridge.dispatch_agent99_sre_alert_with_receipt",
+        lambda payload: dispatched.append(payload)
+        or {
+            "status": "accepted_inbox_triggered",
+            "transport": "relay",
+            "accepted": True,
+            "inbox_triggered": True,
+        },
     )
 
     result = await bridge_alertmanager_to_agent99(
@@ -298,10 +386,58 @@ async def test_agent99_bridge_dispatches_single_flight_winner(monkeypatch) -> No
 
     assert result["status"] == "dispatched"
     assert result["dispatch"] == "relay"
+    assert result["dispatchReceipt"]["accepted"] is True
+    assert result["dispatchReceipt"]["inbox_triggered"] is True
     assert result["suggestedMode"] == "Recover"
     assert len(dispatched) == 1
 
 
+@pytest.mark.asyncio
+async def test_agent99_bridge_releases_lock_when_receipt_is_not_accepted(
+    monkeypatch,
+) -> None:
+    async def winner(*_args, **_kwargs) -> bool:
+        return True
+
+    released: list[tuple[str, str]] = []
+
+    async def release(fingerprint: str, alert_id: str) -> None:
+        released.append((fingerprint, alert_id))
+
+    monkeypatch.setattr(
+        "src.services.agent99_sre_bridge.try_acquire_agent99_sre_single_flight",
+        winner,
+    )
+    monkeypatch.setattr(
+        "src.services.agent99_sre_bridge.release_agent99_sre_single_flight",
+        release,
+    )
+    monkeypatch.setattr(
+        "src.services.agent99_sre_bridge.dispatch_agent99_sre_alert_with_receipt",
+        lambda _payload: {
+            "status": "relay_response_not_accepted",
+            "transport": "relay",
+            "accepted": False,
+            "inbox_triggered": False,
+        },
+    )
+
+    result = await bridge_alertmanager_to_agent99(
+        alert_id="receipt-rejected",
+        alertname="HostDown",
+        severity="critical",
+        namespace="node",
+        target_resource="192.168.0.120",
+        message="host_down",
+        fingerprint="receipt-rejected-fingerprint",
+    )
+
+    assert result["status"] == "failed"
+    assert result["reason"] == "relay_response_not_accepted"
+    assert result["dispatchReceipt"]["accepted"] is False
+    assert released == [("receipt-rejected-fingerprint", "receipt-rejected")]
+
+
 @pytest.mark.asyncio
 async def test_agent99_bridge_releases_lock_when_transport_fails(monkeypatch) -> None:
     async def winner(*_args, **_kwargs) -> bool:
@@ -312,7 +448,7 @@ async def test_agent99_bridge_releases_lock_when_transport_fails(monkeypatch) ->
     async def release(fingerprint: str, alert_id: str) -> None:
         released.append((fingerprint, alert_id))
 
-    def fail_transport(_payload: dict[str, object]) -> str:
+    def fail_transport(_payload: dict[str, object]) -> dict[str, object]:
         raise RuntimeError("relay unavailable")
 
     monkeypatch.setattr(
@@ -324,7 +460,7 @@ async def test_agent99_bridge_releases_lock_when_transport_fails(monkeypatch) ->
         release,
     )
     monkeypatch.setattr(
-        "src.services.agent99_sre_bridge.dispatch_agent99_sre_alert",
+        "src.services.agent99_sre_bridge.dispatch_agent99_sre_alert_with_receipt",
         fail_transport,
     )
 
diff --git a/apps/api/tests/test_repair_candidate_service.py b/apps/api/tests/test_repair_candidate_service.py
index 59d8ab863..6975b5575 100644
--- a/apps/api/tests/test_repair_candidate_service.py
+++ b/apps/api/tests/test_repair_candidate_service.py
@@ -290,6 +290,80 @@ async def test_candidate_blocked_when_playbook_is_generic_fallback() -> None:
     assert "https://awoooi.wooo.work/zh-TW/awooop/work-items?" in work_item["work_item_url"]
 
 
+@pytest.mark.asyncio
+async def test_cold_start_gate_uses_agent99_recover_not_fake_k8s_deployment() -> None:
+    incident = _incident()
+    service = RepairCandidateService(
+        incident_service=FakeIncidentService(),
+        investigator=FakeInvestigator(_evidence(incident.incident_id)),
+        playbook_repository=FakePlaybookRepository(_generic_fallback_playbook()),
+        auto_repair_service=FakeAutoRepairService(),
+    )
+
+    result = await service.build_from_incident(
+        incident=incident,
+        alertname="ColdStartGateBlocked",
+        target_resource="cold-start-gate",
+        namespace="default",
+        message="full-stack cold-start recovery gate is blocked",
+        fallback_action="NO_ACTION - REPAIR_CANDIDATE_MISSING",
+        matched_playbook_id="PB-GENERIC-FALLBACK",
+        severity="low",
+    )
+
+    assert result.candidate_found is False
+    assert result.draft_ready_for_owner_review is True
+    draft_package = result.metadata["repair_candidate_draft_package"]
+    assert draft_package["coverage_gap"]["target_kind"] == "control_plane"
+    template = draft_package["playbook_draft_template"]
+    assert template["suggested_route"] == "agent99_recover_after_owner_review"
+    assert template["repair_command_template"] == (
+        "agent99-mode Recover controlledApply=true"
+    )
+    assert "kubectl rollout restart deployment/cold-start-gate" not in str(template)
+    handoff = result.metadata["controlled_executor_handoff"]
+    assert handoff["executor"] == "Agent99"
+    assert handoff["suggested_mode"] == "Recover"
+    assert handoff["status"] == (
+        "agent99_dispatch_required_on_actionable_card_send"
+    )
+    assert handoff["dispatch_receipt_required"] is True
+
+
+@pytest.mark.asyncio
+async def test_cicd_failure_namespace_uses_agent99_status_not_k8s_restart() -> None:
+    incident = _incident()
+    service = RepairCandidateService(
+        incident_service=FakeIncidentService(),
+        investigator=FakeInvestigator(_evidence(incident.incident_id)),
+        playbook_repository=FakePlaybookRepository(_generic_fallback_playbook()),
+        auto_repair_service=FakeAutoRepairService(),
+    )
+
+    result = await service.build_from_incident(
+        incident=incident,
+        alertname="AWOOOICICDFailed",
+        target_resource="AWOOOI 部署失敗",
+        namespace="build-and-deploy",
+        message="Gitea CI/CD deployment failed",
+        fallback_action="NO_ACTION - REPAIR_CANDIDATE_MISSING",
+        matched_playbook_id="PB-GENERIC-FALLBACK",
+        severity="critical",
+    )
+
+    draft_package = result.metadata["repair_candidate_draft_package"]
+    assert draft_package["coverage_gap"]["target_kind"] == "control_plane"
+    template = draft_package["playbook_draft_template"]
+    assert template["suggested_route"] == "agent99_status_after_owner_review"
+    assert template["repair_command_template"] == (
+        "agent99-mode Status controlledApply=false"
+    )
+    assert "kubectl rollout restart" not in str(template)
+    handoff = result.metadata["controlled_executor_handoff"]
+    assert handoff["executor"] == "Agent99"
+    assert handoff["suggested_mode"] == "Status"
+
+
 @pytest.mark.asyncio
 async def test_candidate_blocked_observe_only_prompts_repair_playbook_draft() -> None:
     incident = _incident()
diff --git a/apps/api/tests/test_telegram_gateway_error_sanitizer.py b/apps/api/tests/test_telegram_gateway_error_sanitizer.py
index 5d9f27dfb..df84691b5 100644
--- a/apps/api/tests/test_telegram_gateway_error_sanitizer.py
+++ b/apps/api/tests/test_telegram_gateway_error_sanitizer.py
@@ -1,7 +1,10 @@
 from __future__ import annotations
 
 from src.services.telegram_gateway import (
+    _agent99_actionable_outbound_metadata,
+    _agent99_alert_from_actionable_outbound,
     _agent99_alert_from_ai_automation_card,
+    _merge_outbound_source_envelope_extra,
     _outbound_source_envelope,
     _sanitize_telegram_error,
     format_aiops_signal_alert_card,
@@ -213,3 +216,91 @@ Authorization: Bearer abcdefghijklmnopqrstuvwxyz
     assert "provider-freshness" in payload["labels"]
     assert "no-false-green" in payload["labels"]
     assert "abcdefghijklmnopqrstuvwxyz" not in str(payload)
+
+
+def test_action_required_cold_start_card_routes_to_agent99_recover() -> None:
+    card = (
+        "ℹ️ ACTION REQUIRED | <b>低風險</b>\n"
+        "──────────────────────\n"
+        "📋 <code>INC-20260710-5700F7</code>\n"
+        "🎯 資源：<code>cold-start-gate</code>\n"
+        "🏷️ 分類：<b>general</b>\n"
+        "🧭 處置狀態：<b>AI 選擇不執行修復</b>\n"
+        "🤖 <b>AI 自動化鏈路</b>"
+    )
+
+    metadata = _agent99_actionable_outbound_metadata(card)
+    payload = _agent99_alert_from_actionable_outbound(card, source="unit-test")
+
+    assert metadata is not None
+    assert metadata["card_schema"] == "awooop_action_required_v1"
+    assert metadata["incident_id"] == "INC-20260710-5700F7"
+    assert metadata["target"] == "cold-start-gate"
+    assert payload is not None
+    assert payload["kind"] == "host_recovery"
+    assert payload["suggestedMode"] == "Recover"
+    assert payload["controlledApply"] is True
+    assert payload["resolution"]["policy"] == "mode_verifier_can_resolve"
+    assert payload["awoooi"]["incidentId"] == "INC-20260710-5700F7"
+
+
+def test_failed_cicd_card_routes_to_agent99_status_with_commit_receipt() -> None:
+    card = (
+        "❌ <b>[AWOOOI CI/CD]</b> | build-and-deploy\n"
+        "📦 AWOOOI 部署失敗\n"
+        "📋 <code>85159f25</code>\n"
+        "📝 fix(security): restrict executor SSH egress\n"
+        "🔗 <a href='https://gitea.example.invalid/run'>Workflow</a>"
+    )
+
+    metadata = _agent99_actionable_outbound_metadata(card)
+    payload = _agent99_alert_from_actionable_outbound(card, source="unit-test")
+
+    assert metadata is not None
+    assert metadata["card_schema"] == "awoooi_cicd_failure_v1"
+    assert metadata["commit_sha"] == "85159f25"
+    assert payload is not None
+    assert payload["kind"] == "cicd_failure"
+    assert payload["suggestedMode"] == "Status"
+    assert payload["controlledApply"] is False
+    assert payload["resolution"]["policy"] == "external_source_receipt_required"
+    assert payload["awoooi"]["commitSha"] == "85159f25"
+    assert "gitea.example.invalid" not in str(payload)
+
+
+def test_agent99_dispatch_receipt_is_persisted_without_raw_transport_body() -> None:
+    envelope = _outbound_source_envelope(
+        "sendMessage",
+        {
+            "chat_id": "chat",
+            "text": (
+                "ℹ️ ACTION REQUIRED | 低風險\n"
+                "📋 INC-20260710-5700F7\n"
+                "🎯 資源：cold-start-gate\n"
+                "🤖 AI 自動化鏈路"
+            ),
+        },
+    )
+    receipt = {
+        "schema_version": "telegram_agent99_dispatch_receipt_v1",
+        "status": "accepted_inbox_triggered",
+        "transport": "relay",
+        "alert_id": "awoooi-telegram-actionable-awooop_action_required-safehash",
+        "kind": "host_recovery",
+        "suggested_mode": "Recover",
+        "accepted": True,
+        "inbox_triggered": True,
+        "stores_raw_response": False,
+    }
+
+    merged = _merge_outbound_source_envelope_extra(
+        envelope,
+        {"agent99_dispatch_receipt": receipt},
+    )
+
+    assert merged["agent99_dispatch_receipt"] == receipt
+    assert merged["agent99_actionable_outbound"]["incident_id"] == (
+        "INC-20260710-5700F7"
+    )
+    assert "incomingFile" not in str(merged)
+    assert "private-path" not in str(merged)
diff --git a/apps/api/tests/test_telegram_message_templates.py b/apps/api/tests/test_telegram_message_templates.py
index a7b2289d4..e4963af8c 100644
--- a/apps/api/tests/test_telegram_message_templates.py
+++ b/apps/api/tests/test_telegram_message_templates.py
@@ -468,6 +468,7 @@ def test_send_request_payload_normalizer_blocks_direct_host_raw_dump() -> None:
 async def test_send_request_mirrors_direct_ai_alert_card_to_agent99(monkeypatch) -> None:
     """direct sendMessage AI cards must reach Agent99 even without wrapper helpers."""
     mirrored: list[dict[str, str]] = []
+    outbound_receipts: list[dict[str, object]] = []
     gateway = TelegramGateway()
     gateway._initialized = True
 
@@ -476,15 +477,25 @@ async def test_send_request_mirrors_direct_ai_alert_card_to_agent99(monkeypatch)
             return None
 
         def json(self) -> dict:
-            return {"ok": True, "result": True}
+            return {"ok": True, "result": {"message_id": 991}}
 
     class FakeHttpClient:
         async def post(self, url, json):  # type: ignore[no-untyped-def]
             return FakeResponse()
 
-    async def fake_mirror(text: str, *, source: str = "telegram_gateway") -> str:
+    async def fake_mirror(
+        text: str, *, source: str = "telegram_gateway"
+    ) -> dict[str, object]:
         mirrored.append({"text": text, "source": source})
-        return "mirrored"
+        return {
+            "schema_version": "telegram_agent99_dispatch_receipt_v1",
+            "status": "accepted_inbox_triggered",
+            "accepted": True,
+            "inbox_triggered": True,
+        }
+
+    async def fake_outbound_message(**kwargs) -> None:  # type: ignore[no-untyped-def]
+        outbound_receipts.append(kwargs)
 
     monkeypatch.setattr(TelegramGateway, "api_url", property(lambda _self: "https://telegram.test/botx"))
     monkeypatch.setattr(
@@ -497,6 +508,7 @@ async def test_send_request_mirrors_direct_ai_alert_card_to_agent99(monkeypatch)
         "_mirror_ai_automation_alert_card_to_agent99",
         fake_mirror,
     )
+    monkeypatch.setattr(gateway, "_mirror_outbound_message", fake_outbound_message)
     gateway._http_client = FakeHttpClient()
 
     result = await gateway._send_request(
@@ -513,12 +525,18 @@ async def test_send_request_mirrors_direct_ai_alert_card_to_agent99(monkeypatch)
     )
     await asyncio.sleep(0)
 
-    assert result == {"ok": True, "result": True}
+    assert result == {"ok": True, "result": {"message_id": 991}}
     assert mirrored
     assert mirrored[0]["source"] == "send_request"
     assert "ai_automation_alert_card_v1" in mirrored[0]["text"]
     assert "provider_freshness_signal" in mirrored[0]["text"]
     assert "runtime_write_gate=controlled" in mirrored[0]["text"]
+    assert outbound_receipts
+    receipt = outbound_receipts[0]["source_envelope_extra"][
+        "agent99_dispatch_receipt"
+    ]
+    assert receipt["status"] == "accepted_inbox_triggered"
+    assert receipt["accepted"] is True
 
 
 def test_weekly_report_marks_all_zero_as_low_trust_anomaly() -> None:
diff --git a/docs/operations/agent99-enterprise-ai-automation-work-items.snapshot.json b/docs/operations/agent99-enterprise-ai-automation-work-items.snapshot.json
index 3d96766e2..5de130668 100644
--- a/docs/operations/agent99-enterprise-ai-automation-work-items.snapshot.json
+++ b/docs/operations/agent99-enterprise-ai-automation-work-items.snapshot.json
@@ -1,6 +1,6 @@
 {
   "schema_version": "agent99_enterprise_ai_automation_work_items_v1",
-  "generated_at": "2026-07-10T19:40:00+08:00",
+  "generated_at": "2026-07-11T10:27:00+08:00",
   "status": "in_progress_p0_alert_routing_grouping_dedupe",
   "scope_complete": false,
   "north_star": "Make Windows host 192.168.0.99 the policy-controlled on-prem AI execution node for all hosts, VMs, services, products, sites, tools, packages, alerts and recovery workflows, with external monitoring when host 99 is unavailable.",
@@ -19,30 +19,51 @@
   "current_p0": {
     "id": "AG99-P0-002",
     "title": "Alert taxonomy, routing, grouping and dedupe",
-    "reason": "Explicit event kind and suggested mode are not consistently authoritative, and forwarding before grouping can create wrong-domain or duplicate Agent99 work.",
-    "implementation_status": "local_package_and_contract_green_runtime_deploy_pending",
-    "next_action": "Finish the current Gitea source receipt, atomically deploy the tested Agent99 package to Windows 99 when an authenticated no-secret management channel is available, then replay backup, provider, reboot, PostgreSQL, host and K3s events against the runtime manifest."
+    "reason": "Direct Alertmanager events and actionable Telegram cards did not share one receipt and resolution contract; cold-start could be misclassified as Kubernetes and failed CI/CD cards were not mirrored to Agent99.",
+    "implementation_status": "source_candidate_and_contract_green_runtime_deploy_pending",
+    "next_action": "Finish the Gitea source receipt and single-writer CD coordination, atomically deploy the tested package to Windows 99, verify the runtime manifest, then replay exact ACTION REQUIRED cold-start and CI/CD failure cards plus the existing alert corpus."
   },
   "current_runtime_truth": {
-    "observed_at": "2026-07-10T15:04:27+08:00",
+    "observed_at": "2026-07-11T10:27:41+08:00",
     "awoooi_health_http_status": 200,
     "awoooi_health_state": "degraded",
+    "awoooi_runtime_build_commit_sha": "4a4b95e5135e8cf71d807a54700a962f5490088f",
+    "gitea_main_observed_sha": "f102616f0",
+    "gitea_main_deployed_source_sha": "4a4b95e5135e8cf71d807a54700a962f5490088f",
+    "runtime_work_items_generated_at": "2026-07-10T19:40:00+08:00",
+    "windows99_agent99_manifest_observed_at": "2026-07-11T09:51:00+08:00",
+    "windows99_agent99_source_revision": "e478ee128dfa046a9ddad872d3f60446e4477486e",
+    "windows99_agent99_runtime_matched": true,
+    "windows99_agent99_runtime_file_count": 14,
+    "windows99_agent99_runtime_mismatch_count": 0,
     "reboot_slo_status": "blocked_reboot_auto_recovery_slo_not_ready",
-    "reboot_slo_readiness_percent": 60,
-    "reboot_slo_primary_blocker": "reboot_event_required_host_unreachable",
+    "reboot_slo_readiness_percent": 33,
+    "reboot_slo_primary_blocker": "fresh_all_host_reboot_event_missing",
     "reboot_slo_active_blockers": [
       "all_required_hosts_not_in_10_minute_reboot_window",
-      "fresh_all_host_reboot_event_missing",
       "host_boot_observation_older_than_target_window",
-      "host_unreachable_after_reboot",
       "host_uptime_unknown",
-      "reboot_event_required_host_unreachable",
       "windows99_vmware_guest_power_not_ready",
       "edge_public_maintenance_live_config_drift",
       "windows99_vmware_vmx_missing",
       "windows99_update_no_auto_reboot_policy_not_ready",
       "privileged_edge_apply_channel_unavailable",
-      "windows99_vmware_autostart_config_not_ready"
+      "stockplatform_freshness_blocked",
+      "stockplatform_ingestion_blocked",
+      "post_start_blocked_not_zero",
+      "service_green_not_1",
+      "fresh_all_host_reboot_event_missing",
+      "windows99_vmware_autostart_config_not_ready",
+      "product_data_green_not_1",
+      "stockplatform_freshness_core_market_index_daily_tw_stale",
+      "stockplatform_freshness_core_price_daily_missing",
+      "stockplatform_freshness_core_chips_daily_missing",
+      "stockplatform_freshness_core_margin_short_daily_missing",
+      "stockplatform_freshness_ai_recommendations_stale",
+      "stockplatform_ingestion_core.price_daily_incomplete",
+      "stockplatform_ingestion_core.chips_daily_incomplete",
+      "stockplatform_ingestion_core.margin_short_daily_incomplete",
+      "stockplatform_ingestion_core.market_index_daily.tw_incomplete"
     ],
     "claims_forbidden": [
       "all_services_recovered_within_10_minutes",
@@ -304,22 +325,29 @@
       "title": "Alert taxonomy, routing, grouping and dedupe",
       "owner_lane": "awoooi_alert_router_agent99_ingress",
       "dependencies": ["AG99-P0-001"],
-      "scope_refs": ["all:alerts", "platform:AWOOOI", "host:99"],
-      "problem": "Source text contaminates routing and the bridge forwards before grouping, creating wrong modes and duplicate incidents.",
-      "trigger": "Any normalized alert or Telegram monitoring event entering the AWOOOI-to-Agent99 bridge.",
+      "scope_refs": ["all:alerts", "platform:AWOOOI", "host:99", "surface:Telegram"],
+      "problem": "Source text can contaminate routing, actionable Telegram cards can bypass Agent99, transport responses can be mistaken for accepted work, and wrong modes or duplicate incidents can result.",
+      "trigger": "Any normalized Alertmanager event, AI automation card, ACTION REQUIRED incident card, or failed AWOOOI CI/CD card entering the AWOOOI-to-Agent99 bridge.",
       "ai_role": "Normalized incident classifier",
       "action_mode": "controlled_apply",
-      "evidence_sources": ["Alertmanager payload", "suggestedMode", "event kind", "fingerprint", "five-minute grouping window"],
-      "controlled_actions": ["prioritize explicit kind and suggested mode", "group before bridge", "single-flight by incident fingerprint"],
+      "evidence_sources": ["Alertmanager payload", "Telegram outbound source envelope", "relay acceptance receipt", "suggestedMode", "event kind", "fingerprint", "five-minute grouping window"],
+      "controlled_actions": ["prioritize explicit kind and suggested mode", "group before bridge", "single-flight by incident fingerprint", "mirror actionable cards", "retain sanitized dispatch receipt", "propagate source-event resolution policy"],
       "prohibited_actions": ["route from source name alone", "emit duplicate same-state incidents"],
       "rollback": "Restore previous router while keeping dedupe store and queued events intact.",
-      "verifier": "Replay routing corpus and assert one active incident and expected mode per fingerprint.",
+      "verifier": "Replay exact Alertmanager and Telegram card corpus; assert one active incident, expected mode, accepted relay receipt, runtime evidence and legal source-event closure per fingerprint.",
       "callback": "Publish normalized route decision and dedupe reason to AWOOOI and AwoooP.",
-      "acceptance": "Known backup, provider, reboot, PostgreSQL, host and K3s samples route to the correct lane with no duplicate same-state dispatch.",
-      "completion_percent": 80,
-      "implementation_progress": "Local Agent99 contract and synthetic replay are green; Windows 99 runtime deployment and runtime replay remain pending.",
-      "evidence_refs": ["local Agent99 PowerShell contract 19/19", "local Agent99 synthetic replay 8/8", "isolated atomic deploy test passed"],
-      "next_action": "Deploy the tested package atomically to Windows 99, verify the runtime manifest, and rerun the routing/dedupe corpus through the live ingress."
+      "acceptance": "Known ACTION REQUIRED cold-start, CI/CD failure, backup, provider, reboot, PostgreSQL, host and K3s samples route to the correct lane with no duplicate same-state dispatch; every accepted dispatch has a durable receipt and runtime verifier outcome.",
+      "completion_percent": 85,
+      "completion_dimensions": {
+        "source_contract_percent": 100,
+        "test_contract_percent": 100,
+        "gitea_cd_percent": 0,
+        "windows99_runtime_percent": 0,
+        "live_replay_percent": 0
+      },
+      "implementation_progress": "Source dispatcher, receipt, taxonomy and resolution-policy contracts are green; Gitea CD, Windows 99 runtime deployment and exact live replay remain pending.",
+      "evidence_refs": ["131 focused tests passed after Gitea main rebase", "276 expanded all-Telegram and Agent99/RepairCandidate tests passed after Telegram single-owner integration", "repository static governance suite passed", "synthetic relay HTTP 202 ok=true inboxTriggered=true", "runtime work-items endpoint still serves 2026-07-10 snapshot"],
+      "next_action": "Finish the Gitea source receipt and single-writer coordination, deploy atomically to Windows 99, verify the runtime manifest, and rerun the exact actionable-card and Alertmanager corpus through live ingress."
     },
     {
       "id": "AG99-P0-003",
diff --git a/docs/workplans/2026-07-10-agent99-enterprise-ai-automation-master-plan.md b/docs/workplans/2026-07-10-agent99-enterprise-ai-automation-master-plan.md
index fd0bb9c1a..fc4d832f7 100644
--- a/docs/workplans/2026-07-10-agent99-enterprise-ai-automation-master-plan.md
+++ b/docs/workplans/2026-07-10-agent99-enterprise-ai-automation-master-plan.md
@@ -1,6 +1,6 @@
 # Agent99 全域 AI 自動化主計畫
 
-> 建立時間：2026-07-10 15:05 CST；最近更新：2026-07-10 19:40 CST
+> 建立時間：2026-07-10 15:05 CST；最近更新：2026-07-11 10:12 CST
 > 狀態：P0 執行中，尚未達成全域 AI 自動化
 > 機器可讀總帳：`docs/operations/agent99-enterprise-ai-automation-work-items.snapshot.json`
 > 歷史需求來源：`docs/workplans/2026-07-02-commander-inserted-requirements-priority-ledger.md`
@@ -92,7 +92,7 @@
 | 順序 | ID | 工作 | 狀態 | 驗收 |
 | --- | --- | --- | --- | --- |
 | 1 | AG99-P0-001 | 修正 `exitCode=0 => resolved` 假綠，對齊 99 runtime script 與 Gitea source SHA | **完成** | Production 99 outcome self-test 通過；runtime manifest `7/7` matched、drift `0`；operator replay 為 verified resolved，alert replay 缺 source-event resolved 時維持 verifying |
-| 2 | AG99-P0-002 | 修正 alert taxonomy、wrong-domain routing、bridge-before-grouping 與重複事件 | **進行中，current P0；本機 package/contract 綠，99 runtime 待部署** | `suggestedMode`/kind 優先於 source 字串；5 分鐘先 group；同 fingerprint 只建立一個 active incident |
+| 2 | AG99-P0-002 | 修正 alert taxonomy、wrong-domain routing、bridge-before-grouping、actionable Telegram card 漏接與重複事件 | **進行中，current P0；source/test 綠，99 runtime 待部署** | Alertmanager、AI card、ACTION REQUIRED、CI/CD failure 共用 dispatcher；`suggestedMode`/kind 優先；5 分鐘先 group；同 fingerprint 只建立一個 active incident；保留 acceptance receipt |
 | 3 | AG99-P0-003 | 強化 ingress：relay token 必填、Telegram chat+sender allowlist、idempotency/single consumer | 待辦 | 未認證 LAN request 拒絕；producer `auto_repair`/policy 被保留；所有 request 可追 trace |
 | 4 | AG99-P0-004 | 新增 EvidenceCollect / RepairCandidate / MCP lane | 待辦 | 缺 evidence 的事件會建立可查 candidate，不再錯送 Perf/AwoooRepair；`INC-*` 可從收件追到 candidate |
 
@@ -150,6 +150,18 @@
 - Velero missed weekly restore dry-run 已由 controller 自動 backfill 成功；20:17 Prometheus guard 修復 bind-mount inode drift 後，source/canonical/active/runtime 四方 SHA 一致、145 rules healthy，Backup/Gitea active alerts 為 0。
 - 以上只關閉 `AG99-P0-012/014` 的 Gitea/backup 子切片；全域 backup domain、Harbor/Registry/CD DR、99 Agent runtime 與 10 分鐘 reboot SLO 仍未完成。
 
+### 2026-07-11 09:35 Current P0 增量與 live truth
+
+- 已補上 `ACTION REQUIRED` 與失敗 `AWOOOI CI/CD` 卡片的 Agent99 dispatcher；cold-start 明確走 `host_recovery/Recover`，不再產生不存在的 Kubernetes deployment restart。
+- Direct Alertmanager 與 Telegram outbound mirror 都保留 sanitized relay receipt；只有 `accepted=true` 才算 dispatched，未接受會釋放 single-flight 並允許重試。
+- Source event closure 分成 `mode_verifier_can_resolve` 與 `external_source_receipt_required`；CI/CD failure 不會因 Agent99 本機命令成功而假結案。
+- Rebase 到 Telegram single-owner mainline 後 focused 回歸 `131 passed`，擴大到全部 Telegram 與 Agent99/RepairCandidate 為 `276 passed`；repo static governance checks 綠。99 relay 的 no-page smoke 回覆 HTTP 202、`ok=true`、`inboxTriggered=true`，只證明 transport/inbox 可達，不證明新 runtime 已部署。
+- Windows 99 live manifest 為 `sourceRevision=e478ee128dfa046a9ddad872d3f60446e4477486e`、`runtimeMatched=true`、`14/14` files matched、mismatch `0`。這證明現行舊 package 內部一致，也明確證明本次 P0 source 尚未部署到 99。
+- 前一張 CD `#4899` 已 Success，Gitea deploy marker/main 是 `f102616f0`，production build readback 是 `4a4b95e513`；production Agent99 work-item endpoint 仍投影 2026-07-10 舊總帳，因此 current P0 runtime closure 尚未成立。
+- `#4898` 與 `#4899` rollout 初始階段都曾短暫回裸 502，下一次 health probe 才恢復 HTTP 200，deployment 後續成功。這是 maintenance fallback / zero-raw-502 仍需關閉的 runtime evidence，不得因最終成功而刪除。
+- Production health 仍為 `degraded`：API/PostgreSQL/Redis/OpenClaw 可用，SignOz down，GCP-A Ollama timeout，GCP-B/local fallback 可用。
+- Reboot SLO live scorecard 為 `blocked_reboot_auto_recovery_slo_not_ready`、readiness 33%、24 blockers；不得宣稱全主機 10 分鐘恢復完成。
+
 ## 7. 工作項強制欄位與治理
 
 每個工作項必須先有：`id`、priority/order/status、scope、owner lane、dependencies、acceptance 與 next action。任何工作項升到 `candidate_ready`、`in_progress` 或 `executing` 前，還必須補齊 problem、trigger、evidence sources、AI role、action mode、controlled actions、prohibited actions、rollback、mode-specific verifier、callback、evidence refs 與 last update；缺一不可執行。
@@ -165,4 +177,4 @@
 
 ## 8. 立即下一步
 
-目前唯一 P0 仍是 `AG99-P0-002`。本機 Agent99 package 已完成 routing/dedupe/card/reboot identity 契約與 synthetic replay；下一步是先完成本分支 source/test/Gitea receipt，再將測試過的 Agent99 package 原子部署到 99，重跑 backup、provider、reboot、PostgreSQL、host、K3s replay corpus 並讀回 runtime manifest。99 尚未取得可用的 no-secret authenticated management channel前，狀態只能是 local green/runtime pending；不能把 `exitCode=0` 或本機測試當 production resolved。其後依序做 secure ingress、RepairCandidate、mode verifier/callback，再回到 reboot state machine live rerun。
+目前唯一 P0 仍是 `AG99-P0-002`。source/test candidate 已完成 Alertmanager 與 Telegram actionable card 共用 dispatcher、acceptance receipt、cold-start/CI-CD taxonomy、resolution policy 與 synthetic relay smoke。下一步依序是：完成 Gitea source receipt；等待單一視窗 CD 協調；原子部署測試過的 Agent99 package 到 99；驗證 runtime manifest；以 do-not-page 重播 ACTION REQUIRED cold-start、CI/CD failure、backup、provider、PostgreSQL、host、K3s corpus；讀回 Agent99 evidence、source-event closure 與 outbound envelope receipt。完成前只能標示 source green/runtime pending。其後再依序做 secure ingress、RepairCandidate、mode verifier/callback，最後回到 reboot state machine live rerun。