feat(delivery): expose production deploy readback blocker

docs/operations/awoooi-production-deploy-readback-blocker.snapshot.json

@@ -0,0 +1,64 @@
+{
+  "schema_version": "awoooi_production_deploy_readback_blocker_v1",
+  "generated_at": "2026-06-28T19:28:54+08:00",
+  "status": "blocked_waiting_authorized_gitea_workflow_dispatch",
+  "priority": "P0",
+  "scope": "awoooi_production_truth",
+  "readback": {
+    "source_control_main_sha": "b1da5cc7d32415667a1a74288874f817bb97f639",
+    "source_control_main_short_sha": "b1da5cc7d324",
+    "governance_closure_merge_sha": "27b96f0450d0e3ca6651d6b5f274a341dd727ef2",
+    "governance_closure_commit_sha": "9e3e7fbb6ba3ffd324b45abf3ad1e7b6ec826b22",
+    "production_image_tag_sha": "af45811e876fda322ee63c036fbc39c9f07ffd76",
+    "production_image_tag_short_sha": "af45811e87",
+    "production_image_tag_matches_main": false,
+    "production_preflight_http_status": 200,
+    "production_workbench_http_status": 200,
+    "production_internal_governance_writeback_present": false,
+    "production_workbench_governance_ready_present": false,
+    "latest_visible_cd_run_id": "3848",
+    "latest_visible_cd_run_commit_short_sha": "af45811e87",
+    "current_main_cd_run_visible": false,
+    "manual_run_button_visible": false,
+    "gitea_sign_in_required": true,
+    "dispatch_without_token_http_status": 401,
+    "dispatch_without_token_message": "token is required",
+    "authorized_dispatch_channel_ready": false
+  },
+  "blockers": [
+    {
+      "id": "authorized_gitea_workflow_dispatch_channel_missing",
+      "kind": "external_authorized_control_channel",
+      "severity": "P0",
+      "description": "Source 已進 Gitea main，但 production image tag 仍停在舊 SHA；目前沒有可用的已授權 Gitea workflow_dispatch channel 觸發 CD。",
+      "blocked_action": "deploy_current_gitea_main_to_production",
+      "safe_boundary": "不得讀 token/cookie/session，不得改 workflow 為 push trigger，不得手改 K8s tag，不得重開 110 runner 或 host/K8s runtime。"
+    }
+  ],
+  "next_actions": [
+    "使用已授權的 Gitea manual workflow_dispatch channel 觸發 cd.yaml ref=main。",
+    "CD 完成後讀回 production image tag，確認不再是 af45811e87。",
+    "重新讀回 /api/v1/agents/github-target-controlled-execution-preflight 與 /api/v1/agents/delivery-closure-workbench，確認 internal_governance_writeback 與 KM / PlayBook counters 出現。"
+  ],
+  "rollups": {
+    "hard_blocker_count": 1,
+    "next_action_count": 3,
+    "source_control_main_ready": true,
+    "production_image_tag_matches_main": false,
+    "production_governance_fields_present": false,
+    "authorized_dispatch_channel_ready": false,
+    "runtime_write_performed": false,
+    "secret_values_collected": false
+  },
+  "operation_boundaries": {
+    "read_only_api_allowed": true,
+    "deploy_trigger_allowed": false,
+    "workflow_modification_allowed": false,
+    "gitea_api_write_allowed": false,
+    "host_write_allowed": false,
+    "k8s_write_allowed": false,
+    "secret_read_allowed": false,
+    "github_api_allowed": false,
+    "raw_session_or_sqlite_read_allowed": false
+  }
+}