From 5597aa1d34be45b1911ad205eb5b697b4647776b Mon Sep 17 00:00:00 2001
From: Your Name <you@example.com>
Date: Wed, 22 Jul 2026 18:40:32 +0800
Subject: [PATCH] fix(ansible): gate suppressed retry receipt

---
 apps/api/src/services/awooop_ansible_check_mode_service.py | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/apps/api/src/services/awooop_ansible_check_mode_service.py b/apps/api/src/services/awooop_ansible_check_mode_service.py
index 2363d3b14..9bde3a93c 100644
--- a/apps/api/src/services/awooop_ansible_check_mode_service.py
+++ b/apps/api/src/services/awooop_ansible_check_mode_service.py
@@ -4646,6 +4646,7 @@ async def _retry_telegram_receipt_acknowledged(
     project_id: str,
 ) -> bool:
     automation_run_id = _automation_run_id_for_claim(claim)
+    telegram_shadow_allowed = _claim_is_no_write_observation(claim)
     try:
         async with get_db_context(project_id) as db:
             result = await db.execute(
@@ -4661,7 +4662,8 @@ async def _retry_telegram_receipt_acknowledged(
                                     AND outbound.provider_message_id IS NOT NULL
                                 )
                                 OR (
-                                    outbound.send_status = 'shadow'
+                                    :telegram_shadow_allowed
+                                    AND outbound.send_status = 'shadow'
                                     AND outbound.provider_message_id IS NULL
                                     AND outbound.source_envelope #>>
                                         '{notification_policy,disposition}'
@@ -4714,6 +4716,7 @@ async def _retry_telegram_receipt_acknowledged(
                     "automation_run_id": automation_run_id,
                     "incident_id": claim.incident_id,
                     "apply_op_id": apply_op_id,
+                    "telegram_shadow_allowed": telegram_shadow_allowed,
                 },
             )
             return result.scalar() is True