diff --git a/apps/api/src/api/v1/agents.py b/apps/api/src/api/v1/agents.py
index 50ad05f6b..16ad42129 100644
--- a/apps/api/src/api/v1/agents.py
+++ b/apps/api/src/api/v1/agents.py
@@ -82,6 +82,9 @@ from src.services.ai_agent_proactive_operations_contract import (
 from src.services.ai_agent_redis_dry_run_gate import (
     load_latest_ai_agent_redis_dry_run_gate,
 )
+from src.services.ai_agent_runtime_write_gate_review import (
+    load_latest_ai_agent_runtime_write_gate_review,
+)
 from src.services.ai_agent_telegram_action_required_digest_policy import (
     load_latest_ai_agent_telegram_action_required_digest_policy,
 )
@@ -757,6 +760,34 @@ async def get_agent_owner_approved_learning_dry_run() -> dict[str, Any]:
         ) from exc
 
 
+@router.get(
+    "/agent-runtime-write-gate-review",
+    response_model=dict[str, Any],
+    summary="取得 AI Agent runtime write gate review",
+    description=(
+        "讀取最新已提交的 runtime write gate review 契約；此端點只回傳雙重批准、"
+        "dry-run hash、post-write verifier 與 redaction 欄位檢查，"
+        "不寫 KM、不更新 PlayBook trust、不寫 timeline、不寫 replay score、不發 Telegram、"
+        "不啟動 runtime worker、不回傳未脫敏 payload。"
+    ),
+)
+async def get_agent_runtime_write_gate_review() -> dict[str, Any]:
+    """Return the latest read-only AI Agent runtime write gate review."""
+    try:
+        return await asyncio.to_thread(load_latest_ai_agent_runtime_write_gate_review)
+    except FileNotFoundError as exc:
+        raise HTTPException(
+            status_code=status.HTTP_404_NOT_FOUND,
+            detail=str(exc),
+        ) from exc
+    except (json.JSONDecodeError, ValueError) as exc:
+        logger.error("ai_agent_runtime_write_gate_review_invalid", error=str(exc))
+        raise HTTPException(
+            status_code=status.HTTP_500_INTERNAL_SERVER_ERROR,
+            detail="AI Agent runtime write gate review 無效",
+        ) from exc
+
+
 @router.get(
     "/agent-owner-approved-fixture-dry-run",
     response_model=dict[str, Any],
diff --git a/apps/api/src/services/ai_agent_runtime_write_gate_review.py b/apps/api/src/services/ai_agent_runtime_write_gate_review.py
new file mode 100644
index 000000000..3dc20da9a
--- /dev/null
+++ b/apps/api/src/services/ai_agent_runtime_write_gate_review.py
@@ -0,0 +1,147 @@
+"""
+AI Agent runtime write gate review snapshot.
+
+Loads the latest committed P2-403G runtime write gate review contract. This
+module never writes KM, PlayBook trust, timeline learning, replay scores, or
+Telegram receipts.
+"""
+
+from __future__ import annotations
+
+import json
+from pathlib import Path
+from typing import Any
+
+from src.services.snapshot_paths import default_evaluations_dir
+
+_DEFAULT_EVALUATIONS_DIR = default_evaluations_dir(Path(__file__))
+_SNAPSHOT_PATTERN = "ai_agent_runtime_write_gate_review_*.json"
+_SCHEMA_VERSION = "ai_agent_runtime_write_gate_review_v1"
+
+
+def load_latest_ai_agent_runtime_write_gate_review(
+    evaluations_dir: Path | None = None,
+) -> dict[str, Any]:
+    """Load the newest committed AI Agent runtime write gate review contract."""
+    directory = evaluations_dir or _DEFAULT_EVALUATIONS_DIR
+    candidates = sorted(directory.glob(_SNAPSHOT_PATTERN))
+    if not candidates:
+        raise FileNotFoundError(f"no AI Agent runtime write gate review snapshots found in {directory}")
+
+    latest = candidates[-1]
+    with latest.open(encoding="utf-8") as handle:
+        payload = json.load(handle)
+
+    if not isinstance(payload, dict):
+        raise ValueError(f"{latest}: expected JSON object")
+    _require_schema(payload, str(latest))
+    _require_write_boundaries(payload, str(latest))
+    _require_review_contract(payload, str(latest))
+    _require_rollup_consistency(payload, str(latest))
+    return payload
+
+
+def _require_schema(payload: dict[str, Any], label: str) -> None:
+    if payload.get("schema_version") != _SCHEMA_VERSION:
+        raise ValueError(f"{label}: expected schema_version={_SCHEMA_VERSION}")
+    status = payload.get("program_status") or {}
+    if status.get("read_only_mode") is not True:
+        raise ValueError(f"{label}: program_status.read_only_mode must be true")
+    if status.get("runtime_authority") != "write_gate_review_only_no_runtime_write":
+        raise ValueError(f"{label}: runtime_authority must remain write_gate_review_only_no_runtime_write")
+
+
+def _require_write_boundaries(payload: dict[str, Any], label: str) -> None:
+    boundaries = payload.get("approval_boundaries") or {}
+    enabled = sorted(key for key, value in boundaries.items() if value is not False)
+    if enabled:
+        raise ValueError(f"{label}: approval boundaries must remain false: {enabled}")
+
+    truth = payload.get("runtime_write_truth") or {}
+    false_flags = {
+        "runtime_write_allowed",
+        "km_write_allowed",
+        "playbook_trust_write_allowed",
+        "timeline_learning_write_allowed",
+        "agent_replay_score_write_allowed",
+        "telegram_send_allowed",
+    }
+    unsafe = sorted(flag for flag in false_flags if truth.get(flag) is not False)
+    if unsafe:
+        raise ValueError(f"{label}: runtime write flags must remain false: {unsafe}")
+
+    required_true = {
+        "dual_approval_required",
+        "dry_run_hash_required",
+        "post_write_verifier_required",
+    }
+    missing = sorted(flag for flag in required_true if truth.get(flag) is not True)
+    if missing:
+        raise ValueError(f"{label}: required write gates must remain true: {missing}")
+
+    zero_counts = {
+        "dual_approval_received_count",
+        "dry_run_hash_verified_count",
+        "post_write_verifier_pass_count",
+    }
+    non_zero = sorted(key for key in zero_counts if truth.get(key) != 0)
+    if non_zero:
+        raise ValueError(f"{label}: write gate counts must remain zero: {non_zero}")
+
+
+def _require_review_contract(payload: dict[str, Any], label: str) -> None:
+    review = payload.get("write_gate_review") or {}
+    required_fields = set(review.get("required_fields") or [])
+    required_minimum = {
+        "dual_approval_ids",
+        "dry_run_preview_hash",
+        "redacted_evidence_refs",
+        "target_write_surface",
+        "rollback_owner",
+        "post_write_verifier_ref",
+    }
+    missing = sorted(required_minimum - required_fields)
+    if missing:
+        raise ValueError(f"{label}: write gate review missing required fields: {missing}")
+
+    verification = payload.get("post_write_verification") or {}
+    if verification.get("verification_required") is not True:
+        raise ValueError(f"{label}: post-write verification must be required")
+    if verification.get("rollback_required") is not True:
+        raise ValueError(f"{label}: rollback must be required")
+    if not verification.get("verification_steps"):
+        raise ValueError(f"{label}: verification steps must not be empty")
+
+    redaction = payload.get("display_redaction_contract") or {}
+    if redaction.get("redaction_required") is not True:
+        raise ValueError(f"{label}: frontend redaction must be required")
+    for flag in ("raw_payload_display_allowed", "private_reasoning_display_allowed", "secret_value_display_allowed"):
+        if redaction.get(flag) is not False:
+            raise ValueError(f"{label}: {flag} must remain false")
+
+
+def _require_rollup_consistency(payload: dict[str, Any], label: str) -> None:
+    rollups = payload.get("rollups") or {}
+    targets = payload.get("write_targets") or []
+    gates = payload.get("approval_gates") or []
+    review = payload.get("write_gate_review") or {}
+    expected_counts = {
+        "write_target_count": len(targets),
+        "approval_gate_count": len(gates),
+        "blocked_runtime_action_count": len({gate.get("blocked_runtime_action") for gate in gates}),
+        "required_field_count": len(review.get("required_fields") or []),
+        "forbidden_field_count": len(review.get("forbidden_fields") or []),
+    }
+    mismatched = {
+        key: {"expected": expected, "actual": rollups.get(key)}
+        for key, expected in expected_counts.items()
+        if rollups.get(key) != expected
+    }
+    if mismatched:
+        raise ValueError(f"{label}: rollup counts must match payload sections: {mismatched}")
+
+    approval_required = sorted(gate.get("gate_id") for gate in gates if gate.get("status") == "approval_required")
+    if sorted(rollups.get("approval_required_gate_ids") or []) != approval_required:
+        raise ValueError(f"{label}: rollups.approval_required_gate_ids mismatch")
+    if rollups.get("live_write_count_total") != 0:
+        raise ValueError(f"{label}: live write count must remain zero")
diff --git a/apps/api/tests/test_ai_agent_interaction_learning_proof.py b/apps/api/tests/test_ai_agent_interaction_learning_proof.py
index 1189d54a2..cbe4a59ed 100644
--- a/apps/api/tests/test_ai_agent_interaction_learning_proof.py
+++ b/apps/api/tests/test_ai_agent_interaction_learning_proof.py
@@ -13,9 +13,9 @@ def test_load_latest_ai_agent_interaction_learning_proof_reads_committed_snapsho
     data = load_latest_ai_agent_interaction_learning_proof()
 
     assert data["schema_version"] == "ai_agent_interaction_learning_proof_v1"
-    assert data["program_status"]["overall_completion_percent"] == 88
-    assert data["program_status"]["current_task_id"] == "P2-403F"
-    assert data["program_status"]["next_task_id"] == "P2-403G"
+    assert data["program_status"]["overall_completion_percent"] == 94
+    assert data["program_status"]["current_task_id"] == "P2-403G"
+    assert data["program_status"]["next_task_id"] == "P2-403H"
     assert data["program_status"]["read_only_mode"] is True
     assert data["program_status"]["runtime_authority"] == "proof_surface_only_no_live_worker"
     assert data["live_truth"]["runtime_loop_enabled"] is False
diff --git a/apps/api/tests/test_ai_agent_interaction_learning_proof_api.py b/apps/api/tests/test_ai_agent_interaction_learning_proof_api.py
index a6a3763b0..1a7bb1964 100644
--- a/apps/api/tests/test_ai_agent_interaction_learning_proof_api.py
+++ b/apps/api/tests/test_ai_agent_interaction_learning_proof_api.py
@@ -16,9 +16,9 @@ def test_ai_agent_interaction_learning_proof_endpoint_returns_committed_snapshot
     assert response.status_code == 200
     data = response.json()
     assert data["schema_version"] == "ai_agent_interaction_learning_proof_v1"
-    assert data["program_status"]["overall_completion_percent"] == 88
-    assert data["program_status"]["current_task_id"] == "P2-403F"
-    assert data["program_status"]["next_task_id"] == "P2-403G"
+    assert data["program_status"]["overall_completion_percent"] == 94
+    assert data["program_status"]["current_task_id"] == "P2-403G"
+    assert data["program_status"]["next_task_id"] == "P2-403H"
     assert data["program_status"]["read_only_mode"] is True
     assert data["live_truth"]["runtime_loop_enabled"] is False
     assert data["live_truth"]["active_live_agent_sessions"] == 0
diff --git a/apps/api/tests/test_ai_agent_proactive_operations_contract.py b/apps/api/tests/test_ai_agent_proactive_operations_contract.py
index f33f2b97b..dae5ec29c 100644
--- a/apps/api/tests/test_ai_agent_proactive_operations_contract.py
+++ b/apps/api/tests/test_ai_agent_proactive_operations_contract.py
@@ -14,8 +14,8 @@ def test_load_latest_ai_agent_proactive_operations_contract_reads_committed_snap
 
     assert data["schema_version"] == "ai_agent_proactive_operations_contract_v1"
     assert data["program_status"]["overall_completion_percent"] == 100
-    assert data["program_status"]["current_task_id"] == "P2-403F"
-    assert data["program_status"]["next_task_id"] == "P2-403G"
+    assert data["program_status"]["current_task_id"] == "P2-403G"
+    assert data["program_status"]["next_task_id"] == "P2-403H"
     assert data["program_status"]["read_only_mode"] is True
     assert data["program_status"]["runtime_authority"] == "contract_only_no_version_or_runtime_update"
     assert data["approval_boundaries"]["runtime_version_update_allowed"] is False
@@ -25,7 +25,7 @@ def test_load_latest_ai_agent_proactive_operations_contract_reads_committed_snap
     assert data["approval_boundaries"]["telegram_direct_send_allowed"] is False
     assert data["rollups"]["version_domain_count"] == len(data["version_lifecycle_domains"]) == 12
     assert data["rollups"]["delegable_capability_count"] == len(data["delegable_capabilities"]) == 24
-    assert data["rollups"]["rollout_task_count"] == len(data["rollout_tasks"]) == 13
+    assert data["rollups"]["rollout_task_count"] == len(data["rollout_tasks"]) == 14
     assert data["rollups"]["auto_execute_allowed_count"] == 0
     assert any(domain["domain_id"] == "ai_agents_models" for domain in data["version_lifecycle_domains"])
     assert any(
diff --git a/apps/api/tests/test_ai_agent_proactive_operations_contract_api.py b/apps/api/tests/test_ai_agent_proactive_operations_contract_api.py
index ab6443805..90accfe56 100644
--- a/apps/api/tests/test_ai_agent_proactive_operations_contract_api.py
+++ b/apps/api/tests/test_ai_agent_proactive_operations_contract_api.py
@@ -17,8 +17,8 @@ def test_ai_agent_proactive_operations_contract_endpoint_returns_committed_snaps
     data = response.json()
     assert data["schema_version"] == "ai_agent_proactive_operations_contract_v1"
     assert data["program_status"]["overall_completion_percent"] == 100
-    assert data["program_status"]["current_task_id"] == "P2-403F"
-    assert data["program_status"]["next_task_id"] == "P2-403G"
+    assert data["program_status"]["current_task_id"] == "P2-403G"
+    assert data["program_status"]["next_task_id"] == "P2-403H"
     assert data["program_status"]["read_only_mode"] is True
     assert data["approval_boundaries"]["runtime_version_update_allowed"] is False
     assert data["approval_boundaries"]["package_upgrade_allowed"] is False
@@ -26,7 +26,7 @@ def test_ai_agent_proactive_operations_contract_endpoint_returns_committed_snaps
     assert data["approval_boundaries"]["telegram_direct_send_allowed"] is False
     assert data["rollups"]["version_domain_count"] == 12
     assert data["rollups"]["delegable_capability_count"] == 24
-    assert data["rollups"]["rollout_task_count"] == 13
+    assert data["rollups"]["rollout_task_count"] == 14
     assert data["rollups"]["auto_execute_allowed_count"] == 0
     assert any(domain["domain_id"] == "host_os_packages" for domain in data["version_lifecycle_domains"])
     assert any(
diff --git a/apps/api/tests/test_ai_agent_runtime_write_gate_review.py b/apps/api/tests/test_ai_agent_runtime_write_gate_review.py
new file mode 100644
index 000000000..602e3475f
--- /dev/null
+++ b/apps/api/tests/test_ai_agent_runtime_write_gate_review.py
@@ -0,0 +1,74 @@
+import copy
+import json
+
+import pytest
+
+from src.services.ai_agent_runtime_write_gate_review import (
+    load_latest_ai_agent_runtime_write_gate_review,
+)
+
+
+def _write_snapshot(tmp_path, payload):
+    path = tmp_path / "ai_agent_runtime_write_gate_review_2026-06-12.json"
+    path.write_text(json.dumps(payload), encoding="utf-8")
+    return path
+
+
+def test_load_latest_ai_agent_runtime_write_gate_review():
+    data = load_latest_ai_agent_runtime_write_gate_review()
+
+    assert data["schema_version"] == "ai_agent_runtime_write_gate_review_v1"
+    assert data["program_status"]["current_task_id"] == "P2-403G"
+    assert data["program_status"]["next_task_id"] == "P2-403H"
+    assert data["program_status"]["overall_completion_percent"] == 94
+    assert data["runtime_write_truth"]["runtime_write_allowed"] is False
+    assert data["runtime_write_truth"]["dual_approval_required"] is True
+    assert data["runtime_write_truth"]["dual_approval_received_count"] == 0
+    assert data["runtime_write_truth"]["dry_run_hash_verified_count"] == 0
+    assert data["runtime_write_truth"]["post_write_verifier_pass_count"] == 0
+    assert data["rollups"]["write_target_count"] == len(data["write_targets"])
+    assert data["rollups"]["approval_gate_count"] == len(data["approval_gates"])
+    assert data["rollups"]["live_write_count_total"] == 0
+
+
+def test_rejects_runtime_write_enabled(tmp_path):
+    data = load_latest_ai_agent_runtime_write_gate_review()
+    bad = copy.deepcopy(data)
+    bad["runtime_write_truth"]["runtime_write_allowed"] = True
+    _write_snapshot(tmp_path, bad)
+
+    with pytest.raises(ValueError, match="runtime write flags"):
+        load_latest_ai_agent_runtime_write_gate_review(tmp_path)
+
+
+def test_rejects_dual_approval_count_increment(tmp_path):
+    data = load_latest_ai_agent_runtime_write_gate_review()
+    bad = copy.deepcopy(data)
+    bad["runtime_write_truth"]["dual_approval_received_count"] = 1
+    _write_snapshot(tmp_path, bad)
+
+    with pytest.raises(ValueError, match="write gate counts"):
+        load_latest_ai_agent_runtime_write_gate_review(tmp_path)
+
+
+def test_rejects_missing_required_review_field(tmp_path):
+    data = load_latest_ai_agent_runtime_write_gate_review()
+    bad = copy.deepcopy(data)
+    bad["write_gate_review"]["required_fields"] = [
+        field for field in bad["write_gate_review"]["required_fields"] if field != "dry_run_preview_hash"
+    ]
+    bad["rollups"]["required_field_count"] = len(bad["write_gate_review"]["required_fields"])
+    _write_snapshot(tmp_path, bad)
+
+    with pytest.raises(ValueError, match="missing required fields"):
+        load_latest_ai_agent_runtime_write_gate_review(tmp_path)
+
+
+def test_rejects_rollup_mismatch(tmp_path):
+    data = load_latest_ai_agent_runtime_write_gate_review()
+    bad = copy.deepcopy(data)
+    bad["rollups"]["approval_gate_count"] = 999
+    _write_snapshot(tmp_path, bad)
+
+    with pytest.raises(ValueError, match="rollup counts"):
+        load_latest_ai_agent_runtime_write_gate_review(tmp_path)
diff --git a/apps/api/tests/test_ai_agent_runtime_write_gate_review_api.py b/apps/api/tests/test_ai_agent_runtime_write_gate_review_api.py
new file mode 100644
index 000000000..db972653c
--- /dev/null
+++ b/apps/api/tests/test_ai_agent_runtime_write_gate_review_api.py
@@ -0,0 +1,20 @@
+from fastapi.testclient import TestClient
+
+from src.main import app
+
+
+def test_get_ai_agent_runtime_write_gate_review_api():
+    client = TestClient(app)
+    response = client.get("/api/v1/agents/agent-runtime-write-gate-review")
+
+    assert response.status_code == 200
+    data = response.json()
+    assert data["schema_version"] == "ai_agent_runtime_write_gate_review_v1"
+    assert data["program_status"]["current_task_id"] == "P2-403G"
+    assert data["program_status"]["next_task_id"] == "P2-403H"
+    assert data["program_status"]["overall_completion_percent"] == 94
+    assert data["runtime_write_truth"]["runtime_write_allowed"] is False
+    assert data["runtime_write_truth"]["dual_approval_received_count"] == 0
+    assert data["runtime_write_truth"]["dry_run_hash_verified_count"] == 0
+    assert data["runtime_write_truth"]["post_write_verifier_pass_count"] == 0
+    assert data["rollups"]["live_write_count_total"] == 0
diff --git a/apps/web/messages/en.json b/apps/web/messages/en.json
index 915fbfee9..86e089c3e 100644
--- a/apps/web/messages/en.json
+++ b/apps/web/messages/en.json
@@ -3825,19 +3825,44 @@
           "previewAllowed": "preview contract: {value}"
         }
       },
+      "runtimeWriteGateReview": {
+        "title": "P2-403G Runtime Write Gate Review",
+        "source": "{generated} · {current} → {next}",
+        "reviewTitle": "寫入 gate 審查",
+        "truthTitle": "目前寫入真相",
+        "verificationTitle": "寫入後驗證",
+        "metrics": {
+          "overall": "P2-403G 進度",
+          "targets": "寫入目標",
+          "gates": "批准 gates",
+          "approval": "需批准 gates",
+          "blocked": "阻擋動作",
+          "live": "Live writes"
+        },
+        "flags": {
+          "dualApproval": "dual approval: {value}",
+          "hash": "dry-run hash: {value}",
+          "verifier": "verifier pass: {value}",
+          "runtime": "runtime write: {value}"
+        },
+        "labels": {
+          "requiredFields": "必填欄位 {count}",
+          "forbiddenFields": "禁止欄位 {count}"
+        }
+      },
       "ownerDryRunPackage": {
         "title": "P2-403F Owner-approved Fixture Dry-run",
         "source": "{generated} · {current} → {next}",
-        "packageTitle": "Fixture dry-run approval package",
-        "truthTitle": "Current dry-run truth",
-        "redactionTitle": "Frontend display boundaries",
+        "packageTitle": "Fixture dry-run 批准包",
+        "truthTitle": "目前乾跑真相",
+        "redactionTitle": "前端顯示紅線",
         "metrics": {
-          "overall": "P2-403F progress",
+          "overall": "P2-403F 進度",
           "fixtures": "Fixture sets",
           "gates": "Dry-run gates",
-          "approval": "Approval gates",
-          "blocked": "Blocked actions",
-          "live": "Live write/send total"
+          "approval": "需批准 gates",
+          "blocked": "阻擋動作",
+          "live": "Live 寫送合計"
         },
         "flags": {
           "fixture": "Fixture dry-run: {value}",
@@ -3847,8 +3872,8 @@
           "secret": "Secret display: {value}"
         },
         "labels": {
-          "requiredFields": "Required fields {count}",
-          "forbiddenFields": "Forbidden fields {count}",
+          "requiredFields": "必填欄位 {count}",
+          "forbiddenFields": "禁止欄位 {count}",
           "noWrite": "no-write proof: {value}"
         },
         "agents": {
@@ -3857,12 +3882,15 @@
           "nemotron": "NemoTron"
         },
         "statuses": {
-          "approved_for_fixture_only": "fixture only",
-          "approval_required": "approval required",
+          "approved_for_fixture_only": "僅 fixture",
+          "approval_required": "需批准",
           "fixture_only": "fixture-only",
-          "ready": "ready",
-          "blocked": "blocked",
-          "blocked_by_scope": "scope blocked"
+          "ready": "已就緒",
+          "blocked": "已阻擋",
+          "blocked_by_scope": "範圍阻擋",
+          "contract_ready": "合約就緒",
+          "blocked_by_runtime_gate": "Runtime gate 阻擋",
+          "ready_for_owner": "待 owner"
         }
       }
     }
diff --git a/apps/web/messages/zh-TW.json b/apps/web/messages/zh-TW.json
index bee007c76..86e089c3e 100644
--- a/apps/web/messages/zh-TW.json
+++ b/apps/web/messages/zh-TW.json
@@ -3825,6 +3825,31 @@
           "previewAllowed": "preview contract: {value}"
         }
       },
+      "runtimeWriteGateReview": {
+        "title": "P2-403G Runtime Write Gate Review",
+        "source": "{generated} · {current} → {next}",
+        "reviewTitle": "寫入 gate 審查",
+        "truthTitle": "目前寫入真相",
+        "verificationTitle": "寫入後驗證",
+        "metrics": {
+          "overall": "P2-403G 進度",
+          "targets": "寫入目標",
+          "gates": "批准 gates",
+          "approval": "需批准 gates",
+          "blocked": "阻擋動作",
+          "live": "Live writes"
+        },
+        "flags": {
+          "dualApproval": "dual approval: {value}",
+          "hash": "dry-run hash: {value}",
+          "verifier": "verifier pass: {value}",
+          "runtime": "runtime write: {value}"
+        },
+        "labels": {
+          "requiredFields": "必填欄位 {count}",
+          "forbiddenFields": "禁止欄位 {count}"
+        }
+      },
       "ownerDryRunPackage": {
         "title": "P2-403F Owner-approved Fixture Dry-run",
         "source": "{generated} · {current} → {next}",
@@ -3862,7 +3887,10 @@
           "fixture_only": "fixture-only",
           "ready": "已就緒",
           "blocked": "已阻擋",
-          "blocked_by_scope": "範圍阻擋"
+          "blocked_by_scope": "範圍阻擋",
+          "contract_ready": "合約就緒",
+          "blocked_by_runtime_gate": "Runtime gate 阻擋",
+          "ready_for_owner": "待 owner"
         }
       }
     }
diff --git a/apps/web/src/app/[locale]/governance/tabs/automation-inventory-tab.tsx b/apps/web/src/app/[locale]/governance/tabs/automation-inventory-tab.tsx
index c85522e1f..f556bde30 100644
--- a/apps/web/src/app/[locale]/governance/tabs/automation-inventory-tab.tsx
+++ b/apps/web/src/app/[locale]/governance/tabs/automation-inventory-tab.tsx
@@ -44,6 +44,7 @@ import {
   type AiAgentOwnerApprovedLearningDryRunSnapshot,
   type AiAgentProactiveOperationsContractSnapshot,
   type AiAgentRedisDryRunGateSnapshot,
+  type AiAgentRuntimeWriteGateReviewSnapshot,
   type AiAgentTelegramReceiptApprovalPackageSnapshot,
   type AiProviderRouteMatrixSnapshot,
   type AiAgentAutomationBacklogSnapshot,
@@ -329,6 +330,7 @@ export function AutomationInventoryTab() {
   const [learningWritebackPackage, setLearningWritebackPackage] = useState<AiAgentLearningWritebackApprovalPackageSnapshot | null>(null)
   const [telegramReceiptPackage, setTelegramReceiptPackage] = useState<AiAgentTelegramReceiptApprovalPackageSnapshot | null>(null)
   const [ownerApprovedLearningDryRun, setOwnerApprovedLearningDryRun] = useState<AiAgentOwnerApprovedLearningDryRunSnapshot | null>(null)
+  const [runtimeWriteGateReview, setRuntimeWriteGateReview] = useState<AiAgentRuntimeWriteGateReviewSnapshot | null>(null)
   const [ownerDryRunPackage, setOwnerDryRunPackage] = useState<AiAgentOwnerApprovedFixtureDryRunSnapshot | null>(null)
   const [hostStatefulInventory, setHostStatefulInventory] = useState<AiAgentHostStatefulVersionInventorySnapshot | null>(null)
   const [serviceHealthGapMatrix, setServiceHealthGapMatrix] = useState<ServiceHealthGapMatrixSnapshot | null>(null)
@@ -357,6 +359,7 @@ export function AutomationInventoryTab() {
       apiClient.getAiAgentLearningWritebackApprovalPackage(),
       apiClient.getAiAgentTelegramReceiptApprovalPackage(),
       apiClient.getAiAgentOwnerApprovedLearningDryRun(),
+      apiClient.getAiAgentRuntimeWriteGateReview(),
       apiClient.getAiAgentOwnerApprovedFixtureDryRun(),
       apiClient.getAiAgentHostStatefulVersionInventory(),
       apiClient.getServiceHealthGapMatrix(),
@@ -384,6 +387,7 @@ export function AutomationInventoryTab() {
           learningWritebackPackageResult,
           telegramReceiptPackageResult,
           ownerApprovedLearningDryRunResult,
+          runtimeWriteGateReviewResult,
           ownerDryRunPackageResult,
           hostStatefulInventoryResult,
           serviceHealthGapMatrixResult,
@@ -408,6 +412,7 @@ export function AutomationInventoryTab() {
         setLearningWritebackPackage(learningWritebackPackageResult.status === 'fulfilled' ? learningWritebackPackageResult.value : null)
         setTelegramReceiptPackage(telegramReceiptPackageResult.status === 'fulfilled' ? telegramReceiptPackageResult.value : null)
         setOwnerApprovedLearningDryRun(ownerApprovedLearningDryRunResult.status === 'fulfilled' ? ownerApprovedLearningDryRunResult.value : null)
+        setRuntimeWriteGateReview(runtimeWriteGateReviewResult.status === 'fulfilled' ? runtimeWriteGateReviewResult.value : null)
         setOwnerDryRunPackage(ownerDryRunPackageResult.status === 'fulfilled' ? ownerDryRunPackageResult.value : null)
         setHostStatefulInventory(hostStatefulInventoryResult.status === 'fulfilled' ? hostStatefulInventoryResult.value : null)
         setServiceHealthGapMatrix(serviceHealthGapMatrixResult.status === 'fulfilled' ? serviceHealthGapMatrixResult.value : null)
@@ -430,6 +435,7 @@ export function AutomationInventoryTab() {
           learningWritebackPackageResult,
           telegramReceiptPackageResult,
           ownerApprovedLearningDryRunResult,
+          runtimeWriteGateReviewResult,
           ownerDryRunPackageResult,
           hostStatefulInventoryResult,
           serviceHealthGapMatrixResult,
@@ -720,6 +726,30 @@ export function AutomationInventoryTab() {
       })
   }, [ownerApprovedLearningDryRun])
 
+  const visibleRuntimeWriteTargets = useMemo(() => {
+    if (!runtimeWriteGateReview) return []
+    const priority = { approval_required: 0, blocked_by_runtime_gate: 1, contract_ready: 2 } as Record<string, number>
+    return [...runtimeWriteGateReview.write_targets]
+      .sort((a, b) => {
+        const left = priority[a.status] ?? 3
+        const right = priority[b.status] ?? 3
+        if (left !== right) return left - right
+        return a.target_id.localeCompare(b.target_id)
+      })
+  }, [runtimeWriteGateReview])
+
+  const visibleRuntimeWriteGates = useMemo(() => {
+    if (!runtimeWriteGateReview) return []
+    const priority = { approval_required: 0, blocked_by_runtime_gate: 1, contract_ready: 2 } as Record<string, number>
+    return [...runtimeWriteGateReview.approval_gates]
+      .sort((a, b) => {
+        const left = priority[a.status] ?? 3
+        const right = priority[b.status] ?? 3
+        if (left !== right) return left - right
+        return a.gate_id.localeCompare(b.gate_id)
+      })
+  }, [runtimeWriteGateReview])
+
   const visibleOwnerDryRunGates = useMemo(() => {
     if (!ownerDryRunPackage) return []
     const priority = { approval_required: 0, approved_for_fixture_only: 1, fixture_only: 2, ready: 3 } as Record<string, number>
@@ -899,7 +929,7 @@ export function AutomationInventoryTab() {
     )
   }
 
-  if (error || !snapshot || !backlog || !backupTargets || !backupReadiness || !backupPolicy || !offsiteEscrow || !giteaHealth || !observabilityMatrix || !providerRouteMatrix || !deploymentLayout || !proactiveOperations || !interactionLearningProof || !liveReadModelGate || !redisDryRunGate || !learningWritebackPackage || !telegramReceiptPackage || !ownerApprovedLearningDryRun || !ownerDryRunPackage || !hostStatefulInventory || !serviceHealthGapMatrix || !serviceHealthNotificationPolicy) {
+  if (error || !snapshot || !backlog || !backupTargets || !backupReadiness || !backupPolicy || !offsiteEscrow || !giteaHealth || !observabilityMatrix || !providerRouteMatrix || !deploymentLayout || !proactiveOperations || !interactionLearningProof || !liveReadModelGate || !redisDryRunGate || !learningWritebackPackage || !telegramReceiptPackage || !ownerApprovedLearningDryRun || !runtimeWriteGateReview || !ownerDryRunPackage || !hostStatefulInventory || !serviceHealthGapMatrix || !serviceHealthNotificationPolicy) {
     return (
       <div style={{ padding: 20 }}>
         <GlassCard variant="subtle" padding="lg">
@@ -1018,6 +1048,12 @@ export function AutomationInventoryTab() {
   const ownerApprovedLearningBlockedWrites = ownerApprovedLearningDryRun.rollups.blocked_write_action_count
   const ownerApprovedLearningPreviewOutputs = ownerApprovedLearningDryRun.rollups.preview_output_count
   const ownerApprovedLearningGenerated = ownerApprovedLearningDryRun.rollups.dry_run_preview_generated_count
+  const runtimeWriteGateOverall = runtimeWriteGateReview.program_status.overall_completion_percent
+  const runtimeWriteTargets = runtimeWriteGateReview.rollups.write_target_count
+  const runtimeWriteGates = runtimeWriteGateReview.rollups.approval_gate_count
+  const runtimeWriteApprovals = runtimeWriteGateReview.rollups.approval_required_gate_ids.length
+  const runtimeWriteBlockedActions = runtimeWriteGateReview.rollups.blocked_runtime_action_count
+  const runtimeWriteLiveTotal = runtimeWriteGateReview.rollups.live_write_count_total
   const ownerDryRunOverall = ownerDryRunPackage.program_status.overall_completion_percent
   const ownerDryRunFixtures = ownerDryRunPackage.rollups.fixture_set_count
   const ownerDryRunGates = ownerDryRunPackage.rollups.dry_run_gate_count
@@ -1593,6 +1629,114 @@ export function AutomationInventoryTab() {
             </div>
           </div>
 
+          <div style={{ padding: 12, border: '0.5px solid #d8c6a6', borderRadius: 7, background: '#fffdf7', display: 'flex', flexDirection: 'column', gap: 12, minWidth: 0 }}>
+            <div style={{ display: 'flex', alignItems: 'center', justifyContent: 'space-between', gap: 10, flexWrap: 'wrap' }}>
+              <div style={{ display: 'flex', alignItems: 'center', gap: 7, minWidth: 0 }}>
+                <Lock size={14} style={{ color: '#d97757' }} />
+                <span style={{ fontFamily: 'Syne, sans-serif', fontSize: 13, fontWeight: 700, color: '#141413' }}>
+                  {t('runtimeWriteGateReview.title')}
+                </span>
+              </div>
+              <Chip
+                value={t('runtimeWriteGateReview.source', {
+                  generated: formatDateTime(runtimeWriteGateReview.generated_at),
+                  current: runtimeWriteGateReview.program_status.current_task_id,
+                  next: runtimeWriteGateReview.program_status.next_task_id,
+                })}
+                muted
+              />
+            </div>
+
+            <div style={{ display: 'grid', gridTemplateColumns: 'repeat(auto-fit, minmax(128px, 1fr))', gap: 10 }} className="automation-inventory-live-read-kpi-grid">
+              <MetricCard label={t('runtimeWriteGateReview.metrics.overall')} value={`${runtimeWriteGateOverall}%`} tone="warn" icon={<Gauge size={16} />} />
+              <MetricCard label={t('runtimeWriteGateReview.metrics.targets')} value={runtimeWriteTargets} tone="ok" icon={<Target size={16} />} />
+              <MetricCard label={t('runtimeWriteGateReview.metrics.gates')} value={runtimeWriteGates} tone="ok" icon={<ShieldCheck size={16} />} />
+              <MetricCard label={t('runtimeWriteGateReview.metrics.approval')} value={runtimeWriteApprovals} tone={runtimeWriteApprovals > 0 ? 'danger' : 'ok'} icon={<Lock size={16} />} />
+              <MetricCard label={t('runtimeWriteGateReview.metrics.blocked')} value={runtimeWriteBlockedActions} tone={runtimeWriteBlockedActions > 0 ? 'danger' : 'ok'} icon={<ShieldAlert size={16} />} />
+              <MetricCard label={t('runtimeWriteGateReview.metrics.live')} value={runtimeWriteLiveTotal} tone={runtimeWriteLiveTotal === 0 ? 'warn' : 'ok'} icon={<Database size={16} />} />
+            </div>
+
+            <div style={{ display: 'grid', gridTemplateColumns: 'minmax(0, 0.85fr) minmax(0, 1.15fr)', gap: 12 }} className="automation-inventory-live-read-grid">
+              <div style={{ display: 'flex', flexDirection: 'column', gap: 10, minWidth: 0 }}>
+                <div style={{ padding: 11, border: '0.5px solid #eee9dd', borderRadius: 7, background: '#faf9f3', display: 'flex', flexDirection: 'column', gap: 8, minWidth: 0 }}>
+                  <SmallLabel>{t('runtimeWriteGateReview.reviewTitle')}</SmallLabel>
+                  <span style={{ fontFamily: "'DM Mono', monospace", fontSize: 10, color: '#87867f', lineHeight: 1.5, overflowWrap: 'anywhere' }}>
+                    {runtimeWriteGateReview.write_gate_review.operator_meaning}
+                  </span>
+                  <div style={{ display: 'flex', flexWrap: 'wrap', gap: 6 }}>
+                    <Chip value={t('runtimeWriteGateReview.labels.requiredFields', { count: runtimeWriteGateReview.rollups.required_field_count })} />
+                    <Chip value={t('runtimeWriteGateReview.labels.forbiddenFields', { count: runtimeWriteGateReview.rollups.forbidden_field_count })} muted />
+                    <Chip value={redisDryRunValueLabel('agents', runtimeWriteGateReview.write_gate_review.owner_agent)} muted />
+                  </div>
+                </div>
+
+                <div style={{ padding: 11, border: '0.5px solid #eee9dd', borderRadius: 7, background: '#faf9f3', display: 'flex', flexDirection: 'column', gap: 8, minWidth: 0 }}>
+                  <SmallLabel>{t('runtimeWriteGateReview.truthTitle')}</SmallLabel>
+                  <span style={{ fontFamily: "'DM Mono', monospace", fontSize: 10, color: '#87867f', lineHeight: 1.5, overflowWrap: 'anywhere' }}>
+                    {runtimeWriteGateReview.runtime_write_truth.truth_note}
+                  </span>
+                  <div style={{ display: 'flex', flexWrap: 'wrap', gap: 6 }}>
+                    <Chip value={t('runtimeWriteGateReview.flags.dualApproval', { value: runtimeWriteGateReview.runtime_write_truth.dual_approval_received_count })} />
+                    <Chip value={t('runtimeWriteGateReview.flags.hash', { value: runtimeWriteGateReview.runtime_write_truth.dry_run_hash_verified_count })} muted />
+                    <Chip value={t('runtimeWriteGateReview.flags.verifier', { value: runtimeWriteGateReview.runtime_write_truth.post_write_verifier_pass_count })} muted />
+                    <Chip value={t('runtimeWriteGateReview.flags.runtime', { value: String(runtimeWriteGateReview.runtime_write_truth.runtime_write_allowed) })} muted />
+                  </div>
+                </div>
+
+                <div style={{ padding: 11, border: '0.5px solid #eee9dd', borderRadius: 7, background: '#faf9f3', display: 'flex', flexDirection: 'column', gap: 8, minWidth: 0 }}>
+                  <SmallLabel>{t('runtimeWriteGateReview.verificationTitle')}</SmallLabel>
+                  <div style={{ display: 'flex', flexDirection: 'column', gap: 5 }}>
+                    {runtimeWriteGateReview.post_write_verification.verification_steps.slice(0, 5).map(step => (
+                      <span key={step} style={{ fontFamily: "'DM Mono', monospace", fontSize: 10, color: '#87867f', lineHeight: 1.45, overflowWrap: 'anywhere' }}>
+                        {step}
+                      </span>
+                    ))}
+                  </div>
+                </div>
+              </div>
+
+              <div style={{ display: 'grid', gridTemplateColumns: 'repeat(2, minmax(0, 1fr))', gap: 10 }} className="automation-inventory-live-read-card-grid">
+                {visibleRuntimeWriteTargets.map(target => (
+                  <div key={target.target_id} style={{ padding: 10, border: '0.5px solid #eee9dd', borderRadius: 7, background: '#faf9f3', display: 'flex', flexDirection: 'column', gap: 7, minWidth: 0 }}>
+                    <div style={{ display: 'flex', justifyContent: 'space-between', gap: 8, alignItems: 'center', minWidth: 0 }}>
+                      <span style={{ fontFamily: "'DM Mono', monospace", fontSize: 11, fontWeight: 700, color: '#141413', overflowWrap: 'anywhere' }}>
+                        {target.target_id}
+                      </span>
+                      <Chip value={redisDryRunValueLabel('statuses', target.status)} muted={target.status === 'contract_ready'} />
+                    </div>
+                    <span style={{ fontFamily: 'Syne, sans-serif', fontSize: 12, fontWeight: 700, color: '#141413', lineHeight: 1.35 }}>
+                      {target.display_name}
+                    </span>
+                    <span style={{ fontFamily: "'DM Mono', monospace", fontSize: 10, color: '#87867f', lineHeight: 1.45, overflowWrap: 'anywhere' }}>
+                      {target.operator_instruction}
+                    </span>
+                    <div style={{ display: 'flex', flexWrap: 'wrap', gap: 6 }}>
+                      <Chip value={redisDryRunValueLabel('agents', target.owner_agent)} muted />
+                      <Chip value={target.blocked_runtime_action} muted />
+                    </div>
+                  </div>
+                ))}
+              </div>
+            </div>
+
+            <div style={{ display: 'grid', gridTemplateColumns: 'repeat(auto-fit, minmax(190px, 1fr))', gap: 10 }} className="automation-inventory-live-read-card-grid">
+              {visibleRuntimeWriteGates.map(gate => (
+                <div key={gate.gate_id} style={{ padding: 10, border: '0.5px solid #eee9dd', borderRadius: 7, background: '#faf9f3', display: 'flex', flexDirection: 'column', gap: 7, minWidth: 0 }}>
+                  <div style={{ display: 'flex', justifyContent: 'space-between', gap: 8, alignItems: 'center', minWidth: 0 }}>
+                    <span style={{ fontFamily: 'Syne, sans-serif', fontSize: 12, fontWeight: 700, color: '#141413', overflowWrap: 'anywhere' }}>
+                      {gate.display_name}
+                    </span>
+                    <Chip value={redisDryRunValueLabel('statuses', gate.status)} muted={gate.status === 'contract_ready'} />
+                  </div>
+                  <span style={{ fontFamily: "'DM Mono', monospace", fontSize: 10, color: '#87867f', lineHeight: 1.45, overflowWrap: 'anywhere' }}>
+                    {gate.required_evidence}
+                  </span>
+                  <Chip value={gate.blocked_runtime_action} muted />
+                </div>
+              ))}
+            </div>
+          </div>
+
           <div style={{ padding: 12, border: '0.5px solid #d8c6a6', borderRadius: 7, background: '#fffdf7', display: 'flex', flexDirection: 'column', gap: 12, minWidth: 0 }}>
             <div style={{ display: 'flex', alignItems: 'center', justifyContent: 'space-between', gap: 10, flexWrap: 'wrap' }}>
               <div style={{ display: 'flex', alignItems: 'center', gap: 7, minWidth: 0 }}>
diff --git a/apps/web/src/lib/api-client.ts b/apps/web/src/lib/api-client.ts
index 7c92554cc..9ad6bc5c6 100644
--- a/apps/web/src/lib/api-client.ts
+++ b/apps/web/src/lib/api-client.ts
@@ -302,6 +302,11 @@ export const apiClient = {
     return handleResponse<AiAgentOwnerApprovedLearningDryRunSnapshot>(res)
   },
 
+  async getAiAgentRuntimeWriteGateReview() {
+    const res = await fetch(`${API_BASE_URL}/agents/agent-runtime-write-gate-review`)
+    return handleResponse<AiAgentRuntimeWriteGateReviewSnapshot>(res)
+  },
+
   async getAiAgentOwnerApprovedFixtureDryRun() {
     const res = await fetch(`${API_BASE_URL}/agents/agent-owner-approved-fixture-dry-run`)
     return handleResponse<AiAgentOwnerApprovedFixtureDryRunSnapshot>(res)
@@ -1596,6 +1601,88 @@ export interface AiAgentOwnerApprovedLearningDryRunSnapshot {
   }
 }
 
+export interface AiAgentRuntimeWriteGateReviewSnapshot {
+  schema_version: 'ai_agent_runtime_write_gate_review_v1'
+  generated_at: string
+  program_status: {
+    overall_completion_percent: number
+    current_priority: 'P0' | 'P1' | 'P2' | 'P3'
+    current_task_id: string
+    next_task_id: string
+    read_only_mode: true
+    runtime_authority: 'write_gate_review_only_no_runtime_write'
+    status_note: string
+  }
+  source_refs: string[]
+  runtime_write_truth: {
+    runtime_write_allowed: false
+    dual_approval_required: true
+    dual_approval_received_count: number
+    dry_run_hash_required: true
+    dry_run_hash_verified_count: number
+    post_write_verifier_required: true
+    post_write_verifier_pass_count: number
+    km_write_allowed: false
+    playbook_trust_write_allowed: false
+    timeline_learning_write_allowed: false
+    agent_replay_score_write_allowed: false
+    telegram_send_allowed: false
+    truth_note: string
+  }
+  write_gate_review: {
+    review_id: string
+    display_name: string
+    owner_agent: 'openclaw' | 'hermes' | 'nemotron'
+    status: string
+    operator_meaning: string
+    required_fields: string[]
+    forbidden_fields: string[]
+  }
+  write_targets: Array<{
+    target_id: string
+    display_name: string
+    target_surface: string
+    status: string
+    owner_agent: 'openclaw' | 'hermes' | 'nemotron'
+    required_approval: string
+    blocked_runtime_action: string
+    operator_instruction: string
+  }>
+  approval_gates: Array<{
+    gate_id: string
+    display_name: string
+    status: string
+    required_evidence: string
+    blocked_runtime_action: string
+    operator_instruction: string
+  }>
+  post_write_verification: {
+    verification_required: true
+    rollback_required: true
+    verification_steps: string[]
+    failure_escalation: string
+  }
+  approval_boundaries: Record<string, false>
+  display_redaction_contract: {
+    redaction_required: true
+    raw_payload_display_allowed: false
+    private_reasoning_display_allowed: false
+    secret_value_display_allowed: false
+    allowed_frontend_content: string[]
+    forbidden_frontend_content: string[]
+    frontend_display_policy: string
+  }
+  rollups: {
+    write_target_count: number
+    approval_gate_count: number
+    approval_required_gate_ids: string[]
+    blocked_runtime_action_count: number
+    required_field_count: number
+    forbidden_field_count: number
+    live_write_count_total: number
+  }
+}
+
 export interface AiAgentOwnerApprovedFixtureDryRunSnapshot {
   schema_version: 'ai_agent_owner_approved_fixture_dry_run_v1'
   generated_at: string
diff --git a/docs/LOGBOOK.md b/docs/LOGBOOK.md
index 771458d1c..01222bd73 100644
--- a/docs/LOGBOOK.md
+++ b/docs/LOGBOOK.md
@@ -1,3 +1,33 @@
+## 2026-06-12｜P2-403G Runtime Write Gate Review
+
+**背景**：統帥指出 Telegram / AwoooP 批准後仍沒有真正自動化，也沒有清楚的人工作業選項。P2-403F 已先把 owner-approved learning dry-run preview 與 fixture-only dry-run 做成可審查證據；本段再把「批准後是否能進入真正寫入」前的最後 gate 固定成只讀 review 契約，避免把 UI 可見或 approval resolved 誤讀成 KM / PlayBook / timeline 已寫入。
+
+**完成**：
+
+- 新增 `ai_agent_runtime_write_gate_review_v1` schema、committed snapshot、只讀 loader、API route 與測試。
+- 新增 `GET /api/v1/agents/agent-runtime-write-gate-review`，只回傳 runtime write gate review；不寫 KM、不更新 PlayBook trust、不寫 timeline learning、不寫 replay score、不發 Telegram、不啟動 runtime worker。
+- Snapshot 固定 `4` 個 write target、`4` 個 approval gate、`9` 個必填欄位、`6` 個禁止欄位、post-write verification steps、rollback requirement 與 live write total `0`。
+- Governance automation inventory 頁新增 P2-403G 區塊，顯示雙重批准、dry-run hash、post-write verifier、write targets、approval gates 與 runtime write truth，仍不提供任何執行按鈕。
+- `agent-interaction-learning-proof` 與 `agent-proactive-operations-contract` 已同步 current / next：`P2-403G -> P2-403H`；三 Agent 互動學習證據完成度 `88% -> 94%`。
+- MASTER §3.2.1c / §3.2.1d、AI Agent 自動化工作清單、互動學習證據報告與主動營運報告已同步 P2-403G；下一步為 `P2-403H` post-write verifier implementation package。
+
+**本地驗證**：
+
+- JSON parse：P2-403G schema / snapshot、P2-403 interaction snapshot、P2-403 proactive snapshot、`zh-TW.json`、`en.json` 通過。
+- `python3 -m py_compile apps/api/src/services/ai_agent_runtime_write_gate_review.py apps/api/src/api/v1/agents.py`：通過。
+- API/service pytest：P2-403G runtime write gate review、P2-403F owner-approved learning dry-run、P2-403 interaction proof、P2-403 proactive contract 目標測試 `23 passed`。
+- `pnpm --filter @awoooi/web typecheck`：通過。
+- Next production build：編譯與 `92/92` static pages 產生完成，但最後 `collect-build-traces` 因本機磁碟 `ENOSPC` 無法寫 `.nft.json` 而失敗；正式 build 仍交由 Gitea CD 驗證。
+- `source-control-owner-response-guard.py`、`security-mirror-progress-guard.py`、`doc-secrets-sanity-check.py docs .gitea`、i18n mirror、`git diff --check` 通過.
+
+**完成度同步**：
+
+- P2-403G Runtime write gate review：本地 `100%`，正式站待部署驗證。
+- Three-Agent interaction learning evidence：`88% -> 94%`。
+- IwoooS 整體仍維持 `64%`；active runtime gate 仍 `0`。
+
+**邊界**：本段未寫 KM、未更新 PlayBook trust、未寫 incident timeline、未寫 replay score、未發 Telegram、未寫 Gateway queue、未啟動 runtime worker、未讀 secret value、未 SSH、未 active scan、未新增任何前端執行按鈕。
+
 ## 2026-06-11｜P2-403F Owner-approved Fixture Dry-run 正式驗證補強
 
 **背景**：P2-403F 已把 owner-approved learning dry-run preview 與 fixture-only dry-run API / 前端區塊接上正式站；本段補齊 fixture dry-run 的 final production evidence，並修正治理頁 KPI / gate / fixture 卡片在 `910px` 內嵌瀏覽器寬度下被壓成直排字的可讀性問題。
diff --git a/docs/ai/AI_AGENT_AUTOMATION_WORKLIST_2026-06-04.md b/docs/ai/AI_AGENT_AUTOMATION_WORKLIST_2026-06-04.md
index 1eca03b16..d0236f3bf 100644
--- a/docs/ai/AI_AGENT_AUTOMATION_WORKLIST_2026-06-04.md
+++ b/docs/ai/AI_AGENT_AUTOMATION_WORKLIST_2026-06-04.md
@@ -12,7 +12,7 @@
 | Nemotron 實際整合應用 | 30% | 完整回放前仍被關卡擋下 | `blocked_needs_evidence`，下一關是 `refresh_source_evidence_then_5_record_smoke_only` |
 | 工具 / 服務 / 套件 AI 自動化 | 92% | P0 已完成；P1 服務 / runtime / 監控 / provider / service health / 備份 / DR / 套件與供應鏈只讀基線已完成；P1-007 失敗限定通知合約與前端 redaction 合約已完成；下一主線是 P2-004 依賴 / 供應鏈漂移監控 | 狀態分類、盤點 schema、權限矩陣、靜態盤點種子、只讀 API、UI 骨架、驗證、自動化待辦 schema / 快照 / API / 分組 UI、Backup / DR 目標盤點、準備度矩陣、備份通知政策、Backup / DR 證據 UI、復原演練批准包模板、異地 / escrow 準備度狀態、任務批准邊界、確定性進度彙總、Python 套件 / 供應鏈只讀基線、JS pnpm/npm 只讀基線、Docker build surface 只讀基線、CVE / license / drift 嚴重度政策、定期依賴漂移與外部資料來源檢查設計、依賴升級批准包模板、runtime_surface_inventory_v1 schema / snapshot / API / UI、gitea_workflow_runner_health_v1 schema / snapshot / API / UI、observability_contract_matrix_v1 schema / snapshot / API / UI、ai_provider_route_matrix_v1 schema / snapshot / API / UI、service_health_gap_matrix_v1 schema / snapshot / API / UI、service health evidence cards UI、service_health_failure_notification_policy_v1 schema / snapshot / API / UI 已完成 |
 | OpenClaw / Hermes / NemoTron 佈建布局 | 45% | P1-401 / P1-402 已完成；仍是只讀 layout 與治理頁顯示，不是 runtime deploy | `ai_agent_deployment_layout_v1` schema、`ai_agent_deployment_layout_2026-06-11.json`、`GET /api/v1/agents/agent-deployment-layout`、治理頁自動化盤點 UI、`AI_AGENT_DEPLOYMENT_LAYOUT_2026-06-11.md` |
-| OpenClaw / Hermes / NemoTron 主動溝通、學習與成長證據 | 88% | P2-401A 已完成只讀 contract；P2-403A 已完成互動 / 接手 / 學習 / 成長證據面板；P2-403B 已完成 AgentSession / Redis Streams live read model gate；P2-403C 已完成 Redis Streams consumer group dry-run、handoff envelope、ack / dead-letter / replay gate；P2-403D 已完成 learning writeback approval package；P2-403E 已完成 Telegram receipt approval package；P2-403F 已完成 owner-approved learning dry-run preview、人工操作選項與 fixture-only dry-run 總包。runtime worker、DB migration、production Redis consumer group、Telegram 實發、KM / PlayBook trust / timeline / replay score 寫入、SDK / 付費服務仍未開 gate | `ai_agent_communication_learning_contract_v1`、`ai_agent_interaction_learning_proof_v1`、`ai_agent_live_read_model_gate_v1`、`ai_agent_redis_dry_run_gate_v1`、`ai_agent_learning_writeback_approval_package_v1`、`ai_agent_telegram_receipt_approval_package_v1`、`ai_agent_owner_approved_learning_dry_run_v1`、`ai_agent_owner_approved_fixture_dry_run_v1`、`GET /api/v1/agents/agent-communication-learning-contract`、`GET /api/v1/agents/agent-interaction-learning-proof`、`GET /api/v1/agents/agent-live-read-model-gate`、`GET /api/v1/agents/agent-redis-dry-run-gate`、`GET /api/v1/agents/agent-learning-writeback-approval-package`、`GET /api/v1/agents/agent-telegram-receipt-approval-package`、`GET /api/v1/agents/agent-owner-approved-learning-dry-run`、`GET /api/v1/agents/agent-owner-approved-fixture-dry-run`、`/zh-TW/governance?tab=automation-inventory`、MASTER §3.2.1b / §3.2.1d / §3.4.3 |
+| OpenClaw / Hermes / NemoTron 主動溝通、學習與成長證據 | 94% | P2-401A 已完成只讀 contract；P2-403A 已完成互動 / 接手 / 學習 / 成長證據面板；P2-403B 已完成 AgentSession / Redis Streams live read model gate；P2-403C 已完成 Redis Streams consumer group dry-run、handoff envelope、ack / dead-letter / replay gate；P2-403D 已完成 learning writeback approval package；P2-403E 已完成 Telegram receipt approval package；P2-403F 已完成 owner-approved learning dry-run preview、人工操作選項與 fixture-only dry-run 總包；P2-403G 已完成 runtime write gate review，固定雙重批准、dry-run hash、post-write verifier 與 redaction 欄位。runtime worker、DB migration、production Redis consumer group、Telegram 實發、KM / PlayBook trust / timeline / replay score 寫入、SDK / 付費服務仍未開 gate | `ai_agent_communication_learning_contract_v1`、`ai_agent_interaction_learning_proof_v1`、`ai_agent_live_read_model_gate_v1`、`ai_agent_redis_dry_run_gate_v1`、`ai_agent_learning_writeback_approval_package_v1`、`ai_agent_telegram_receipt_approval_package_v1`、`ai_agent_owner_approved_learning_dry_run_v1`、`ai_agent_owner_approved_fixture_dry_run_v1`、`GET /api/v1/agents/agent-communication-learning-contract`、`GET /api/v1/agents/agent-interaction-learning-proof`、`GET /api/v1/agents/agent-live-read-model-gate`、`GET /api/v1/agents/agent-redis-dry-run-gate`、`GET /api/v1/agents/agent-learning-writeback-approval-package`、`GET /api/v1/agents/agent-telegram-receipt-approval-package`、`GET /api/v1/agents/agent-owner-approved-learning-dry-run`、`GET /api/v1/agents/agent-owner-approved-fixture-dry-run`、`ai_agent_runtime_write_gate_review_v1`、`GET /api/v1/agents/agent-runtime-write-gate-review`、`/zh-TW/governance?tab=automation-inventory`、MASTER §3.2.1b / §3.2.1d / §3.4.3 |
 | AI Agent 主動營運委派與版本生命週期 | 100% | P2-402A / P2-402B / P2-402C / P2-402D / P2-402E / P2-402F / P2-402G 已完成；已建立 repo-only 版本新鮮度快照、工具採用批准包、Telegram action-required digest policy、Gitea PR 草案 lane、host / K3s / stateful 版本只讀盤點、API 與 governance UI。定期排程、外部版本查詢、工具安裝、CI 變更、套件升級、主機更新、container pull、實際 PR creation、auto merge、Telegram 實發、SSH、kubectl、重啟仍未開 gate | `ai_agent_proactive_operations_contract_v1`、`ai_agent_version_freshness_snapshot_v1`、`ai_agent_tool_adoption_approval_package_v1`、`ai_agent_telegram_action_required_digest_policy_v1`、`ai_agent_gitea_pr_draft_lane_v1`、`ai_agent_host_stateful_version_inventory_v1`、`GET /api/v1/agents/agent-proactive-operations-contract`、`GET /api/v1/agents/agent-version-freshness-snapshot`、`GET /api/v1/agents/agent-tool-adoption-approval-package`、`GET /api/v1/agents/agent-telegram-action-required-digest-policy`、`GET /api/v1/agents/agent-gitea-pr-draft-lane`、`GET /api/v1/agents/agent-host-stateful-version-inventory`、`/zh-TW/governance?tab=automation-inventory`、MASTER §3.2.1c |
 | 本工作清單與分析報告 | 100% | 已完成 | 本 MD 文件 |
 
@@ -20,9 +20,9 @@ AI Agent 自動化工作包目前完成度：**92%**。本工作清單文件本
 
 三 Agent 佈建布局目前完成度：**45%**。第一波已完成只讀 schema / snapshot / API / 測試 / 報告，第二波已接入治理頁自動化盤點 UI；正式 runtime 佈署、Telegram E2E 發送與 AgentSession 工作流仍需逐項 gate。
 
-三 Agent 主動溝通、學習與成長證據目前完成度：**88%**。已完成只讀契約、互動 / 接手 / 學習 / 成長證據面板、P2-403B live read model gate、P2-403C Redis dry-run gate、P2-403D learning writeback approval package、P2-403E Telegram receipt approval package、P2-403F owner-approved learning dry-run preview、人工操作選項與 fixture-only dry-run 總包、API、治理頁顯示、測試與 MASTER 同步；目前 live AgentSession、Agent message、handoff、learning write、Telegram receipt、Gateway queue write 與 Telegram send 仍全部為 `0`，下一步依優先順序推 `P2-403G` runtime write gate review，但在批准前仍不得啟動 runtime loop。
+三 Agent 主動溝通、學習與成長證據目前完成度：**94%**。已完成只讀契約、互動 / 接手 / 學習 / 成長證據面板、P2-403B live read model gate、P2-403C Redis dry-run gate、P2-403D learning writeback approval package、P2-403E Telegram receipt approval package、P2-403F owner-approved learning dry-run preview、人工操作選項與 fixture-only dry-run 總包、P2-403G runtime write gate review、API、治理頁顯示、測試與 MASTER 同步；目前 live AgentSession、Agent message、handoff、learning write、Telegram receipt、Gateway queue write 與 Telegram send 仍全部為 `0`，下一步依優先順序推 `P2-403H` post-write verifier implementation package，但在批准前仍不得啟動 runtime loop。
 
-AI Agent 主動營運委派與版本生命週期目前完成度：**100%**。已完成 12 類版本 domain、24 類可委派能力、5 種 cadence、8 類 MCP、4 類 RAG memory、只讀 API、`P2-402B` repo-only daily version freshness snapshot、`P2-402C` Renovate / OSV-Scanner / Trivy / Syft / Grype 工具採用批准包、`P2-402D` Telegram action-required digest policy、`P2-402E` Gitea PR 草案 lane、`P2-402F` host OS / K3s / stateful services 版本只讀盤點，以及 `P2-402G` governance UI 顯示可委派能力；`P2-403A`、`P2-403B`、`P2-403C`、`P2-403D`、`P2-403E` 與 `P2-403F` 已先補互動、學習證據面、live read model gate、Redis dry-run gate、learning writeback approval package、Telegram receipt approval package 與 owner-approved learning dry-run preview。下一步是 `P2-403G` runtime write gate review，外部 registry / package source / host probe / SSH / kubectl / 工具安裝 / CI 變更 / 實際 PR creation / Telegram 實發與 learning write 仍需 gate。
+AI Agent 主動營運委派與版本生命週期目前完成度：**100%**。已完成 12 類版本 domain、24 類可委派能力、5 種 cadence、8 類 MCP、4 類 RAG memory、只讀 API、`P2-402B` repo-only daily version freshness snapshot、`P2-402C` Renovate / OSV-Scanner / Trivy / Syft / Grype 工具採用批准包、`P2-402D` Telegram action-required digest policy、`P2-402E` Gitea PR 草案 lane、`P2-402F` host OS / K3s / stateful services 版本只讀盤點，以及 `P2-402G` governance UI 顯示可委派能力；`P2-403A`、`P2-403B`、`P2-403C`、`P2-403D`、`P2-403E`、`P2-403F` 與 `P2-403G` 已先補互動、學習證據面、live read model gate、Redis dry-run gate、learning writeback approval package、Telegram receipt approval package、owner-approved learning dry-run preview 與 runtime write gate review。下一步是 `P2-403H` post-write verifier implementation package，外部 registry / package source / host probe / SSH / kubectl / 工具安裝 / CI 變更 / 實際 PR creation / Telegram 實發與 learning write 仍需 gate。
 
 完成度計算模型：
 
@@ -76,7 +76,7 @@ AI Agent 主動營運委派與版本生命週期目前完成度：**100%**。已
 | AgentSession / Redis Streams runtime loop | 待辦：P2-401，需 migration / worker gate |
 | 主動溝通與學習契約 | 已完成：P2-401A，`ai_agent_communication_learning_contract_v1` + `GET /api/v1/agents/agent-communication-learning-contract` |
 | 主動營運委派與版本生命週期契約 | 已完成：P2-402A，`ai_agent_proactive_operations_contract_v1` + `GET /api/v1/agents/agent-proactive-operations-contract` |
-| 互動、接手、學習與成長證據面 | 已完成：P2-403A + P2-403B + P2-403C + P2-403D + P2-403E + P2-403F，`ai_agent_interaction_learning_proof_v1`、`ai_agent_live_read_model_gate_v1`、`ai_agent_redis_dry_run_gate_v1`、`GET /api/v1/agents/agent-interaction-learning-proof`、`GET /api/v1/agents/agent-live-read-model-gate`、`GET /api/v1/agents/agent-redis-dry-run-gate`、`GET /api/v1/agents/agent-learning-writeback-approval-package`、`GET /api/v1/agents/agent-telegram-receipt-approval-package` + governance UI；live count 仍為 0 |
+| 互動、接手、學習與成長證據面 | 已完成：P2-403A + P2-403B + P2-403C + P2-403D + P2-403E + P2-403F + P2-403G，`ai_agent_interaction_learning_proof_v1`、`ai_agent_live_read_model_gate_v1`、`ai_agent_redis_dry_run_gate_v1`、`GET /api/v1/agents/agent-interaction-learning-proof`、`GET /api/v1/agents/agent-live-read-model-gate`、`GET /api/v1/agents/agent-redis-dry-run-gate`、`GET /api/v1/agents/agent-learning-writeback-approval-package`、`GET /api/v1/agents/agent-telegram-receipt-approval-package` + governance UI；live count 仍為 0 |
 | NemoTron 3 Ultra smoke | 待辦：P3-401，需 source refresh + cost/data approval |
 
 ## 4. 工作流總覽
@@ -965,6 +965,7 @@ UI：
 | P2-403D | 完成 | 100 | Hermes + OpenClaw + Nemotron | Learning writeback approval package、KM / PlayBook trust / timeline learning / replay score gate | `ai_agent_learning_writeback_approval_package_v1` / snapshot / 只讀 API / governance UI；owner review、rollback、redaction、blocked write actions | 不寫 KM、不更新 PlayBook trust、不寫 timeline learning、不寫 replay score、不發 Telegram、不啟動 runtime worker |
 | P2-403E | 完成 | 100 | OpenClaw + Hermes | Telegram receipt approval package、queue / delivery / ack / failure / retry gate | `ai_agent_telegram_receipt_approval_package_v1` / snapshot / 只讀 API / governance UI；owner review、delivery correlation、retry、redaction、blocked runtime actions | 不寫 Gateway queue、不呼叫 Bot API、不改 receiver route、不發 Telegram、不啟動 receipt worker |
 | P2-403F | 完成 | 100 | Hermes + OpenClaw | Owner-approved learning dry-run preview、人工操作選項與驗證 / rollback gate | `ai_agent_owner_approved_learning_dry_run_v1` / snapshot / 只讀 API / governance UI；dry-run preview 欄位、operator actions、evidence gate、rollback / verification contract | 不產生 live preview、不寫 KM、不更新 PlayBook trust、不寫 timeline / replay score、不發 Telegram |
+| P2-403G | 完成 | 100 | OpenClaw | Runtime write gate review、雙重批准、dry-run hash、post-write verifier 與 redaction gate | `ai_agent_runtime_write_gate_review_v1` / snapshot / 只讀 API / governance UI；4 個 write target、4 個 approval gate、9 個必填欄位與 live write total `0` | 不寫 KM、不更新 PlayBook trust、不寫 timeline / replay score、不發 Telegram；runtime write 仍未授權 |
 | P2-101 | 待辦 | 0 | OpenClaw | 定義操作類別權限模型 | 操作政策 schema | HITL 關卡 |
 | P2-102 | 待辦 | 0 | OpenClaw | 所有候選操作都要有 dry-run 證據 | dry-run 合約 | 不直接 apply |
 | P2-103 | 待辦 | 0 | Hermes | 把任務結果接回 KM / LOGBOOK / 稽核軌跡 | 證據寫入器 | 不洩漏 secret |
diff --git a/docs/ai/AI_AGENT_INTERACTION_LEARNING_PROOF_2026-06-11.md b/docs/ai/AI_AGENT_INTERACTION_LEARNING_PROOF_2026-06-11.md
index 18ad3eb81..bc0ff62af 100644
--- a/docs/ai/AI_AGENT_INTERACTION_LEARNING_PROOF_2026-06-11.md
+++ b/docs/ai/AI_AGENT_INTERACTION_LEARNING_PROOF_2026-06-11.md
@@ -1,12 +1,12 @@
 # AI Agent 互動、溝通、學習與成長證據報告
 
 > 日期：2026-06-11（台北時間）
-> 文件定位：P2-403A 證據面 + P2-403B AgentSession / Redis Streams live read model gate + P2-403C Redis dry-run gate + P2-403D learning writeback approval package + P2-403E Telegram receipt approval package + P2-403F owner-approved learning dry-run / fixture dry-run、API、治理頁 UI 與後續 runtime gate 分析。
+> 文件定位：P2-403A 證據面 + P2-403B AgentSession / Redis Streams live read model gate + P2-403C Redis dry-run gate + P2-403D learning writeback approval package + P2-403E Telegram receipt approval package + P2-403F owner-approved learning dry-run / fixture dry-run、P2-403G runtime write gate review、API、治理頁 UI 與後續 post-write verifier 分析。
 > 事實邊界：本波只建立可見證據面與 read model gate，不啟動 runtime worker、不建立 DB migration、不開 Redis consumer group、不發 Telegram、不顯示工作視窗對話內容。
 
 ## 1. 結論
 
-已完成 P2-403A、P2-403B、P2-403C、P2-403D、P2-403E 與 P2-403F：讓統帥能在治理頁看到 OpenClaw / Hermes / NemoTron 的互動、接手、學習與成長是否真的有證據，並看到 live read model、Redis dry-run、handoff envelope、ack / dead-letter / replay、learning writeback approval、Telegram receipt approval 與 fixture dry-run 下一步要通過哪些 gate。
+已完成 P2-403A、P2-403B、P2-403C、P2-403D、P2-403E、P2-403F 與 P2-403G：讓統帥能在治理頁看到 OpenClaw / Hermes / NemoTron 的互動、接手、學習與成長是否真的有證據，並看到 live read model、Redis dry-run、handoff envelope、ack / dead-letter / replay、learning writeback approval、Telegram receipt approval、fixture dry-run 與 runtime write gate review 下一步要通過哪些 gate。
 
 目前真相：
 
@@ -51,24 +51,27 @@
 | 產物 | 內容 |
 |---|---|
 | `docs/schemas/ai_agent_interaction_learning_proof_v1.schema.json` | 強制 live flags / counts / Telegram / transcript / 私有推理維持安全邊界 |
-| `docs/evaluations/ai_agent_interaction_learning_proof_2026-06-11.json` | P2-403A + P2-403B + P2-403C + P2-403D + P2-403E + P2-403F committed snapshot，完成度 `88%`，live count 全為 `0` |
+| `docs/evaluations/ai_agent_interaction_learning_proof_2026-06-11.json` | P2-403A + P2-403B + P2-403C + P2-403D + P2-403E + P2-403F + P2-403G committed snapshot，完成度 `94%`，live count 全為 `0` |
 | `docs/schemas/ai_agent_live_read_model_gate_v1.schema.json` | 強制 DB / Redis / worker / Telegram / learning writeback gate 維持未批准 |
 | `docs/evaluations/ai_agent_live_read_model_gate_2026-06-11.json` | P2-403B committed snapshot，完成度 `55%`，live count 全為 `0` |
 | `docs/evaluations/ai_agent_redis_dry_run_gate_2026-06-11.json` | P2-403C committed snapshot，完成度 `65%`，live count 全為 `0` |
 | `docs/evaluations/ai_agent_learning_writeback_approval_package_2026-06-11.json` | P2-403D committed snapshot，完成度 `72%`，KM / PlayBook trust / timeline / replay score live write count 全為 `0` |
 | `docs/evaluations/ai_agent_telegram_receipt_approval_package_2026-06-11.json` | P2-403E committed snapshot，完成度 `80%`，queued / delivered / acknowledged / failed / retry live count 全為 `0` |
+| `docs/schemas/ai_agent_runtime_write_gate_review_v1.schema.json` | P2-403G runtime write gate review schema；強制 runtime write、KM / PlayBook / timeline / replay / Telegram 全部維持未授權 |
+| `docs/evaluations/ai_agent_runtime_write_gate_review_2026-06-12.json` | P2-403G committed snapshot，完成度 `94%`，4 個 write target、4 個 approval gate、雙重批准 / dry-run hash / post-write verifier counts 全為 `0` |
+| `GET /api/v1/agents/agent-runtime-write-gate-review` | 只讀 API；不寫 KM、不更新 PlayBook trust、不寫 timeline / replay score、不發 Telegram |
 | `apps/api/src/services/ai_agent_interaction_learning_proof.py` | 只讀 loader 與安全驗證 |
 | `apps/api/src/services/ai_agent_live_read_model_gate.py` | P2-403B 只讀 loader；拒絕 live DB query、Redis consumer、unsafe fields、Telegram 與 writeback |
 | `GET /api/v1/agents/agent-interaction-learning-proof` | 只讀 API，不啟動 worker、不碰 Redis / DB runtime、不發 Telegram |
 | `GET /api/v1/agents/agent-live-read-model-gate` | 只讀 API，不連 DB、不讀寫 Redis、不發 Telegram |
-| governance UI | 新增證據階梯、目前真相、P2-403B live read gate、P2-403C Redis dry-run gate、P2-403D learning writeback approval package、P2-403E Telegram receipt approval package、P2-403F owner-approved learning dry-run / fixture dry-run、Agent lane、可觀測訊號、runtime gates、前端 redaction |
+| governance UI | 新增證據階梯、目前真相、P2-403B live read gate、P2-403C Redis dry-run gate、P2-403D learning writeback approval package、P2-403E Telegram receipt approval package、P2-403F owner-approved learning dry-run / fixture dry-run、P2-403G runtime write gate review、Agent lane、可觀測訊號、runtime gates、前端 redaction |
 
 ## 5. 後續優先順序
 
 | 優先 | ID | 工作 | gate |
 |---:|---|---|---|
-| 1 | P2-403G | runtime write gate review、KM / PlayBook trust / timeline / replay score 寫入 gate | owner-approved dry-run |
-| 2 | P2-403H | 成長趨勢週報與 operator feedback applied 指標 | trend evidence |
+| 1 | P2-403H | post-write verifier implementation package、rollback owner 與 verifier evidence | runtime write gate review |
+| 2 | P2-403I | 成長趨勢週報與 operator feedback applied 指標 | trend evidence |
 
 ## 6. 紅線
 
diff --git a/docs/ai/AI_AGENT_PROACTIVE_OPERATIONS_2026-06-11.md b/docs/ai/AI_AGENT_PROACTIVE_OPERATIONS_2026-06-11.md
index 84665e097..8fa7321bf 100644
--- a/docs/ai/AI_AGENT_PROACTIVE_OPERATIONS_2026-06-11.md
+++ b/docs/ai/AI_AGENT_PROACTIVE_OPERATIONS_2026-06-11.md
@@ -1,7 +1,7 @@
 # AI Agent 主動營運委派與版本生命週期分析報告
 
 > 日期：2026-06-11（台北時間）
-> 文件定位：P2-402A / P2-402B / P2-402C / P2-402D / P2-402E / P2-402F / P2-402G / P2-403A / P2-403B / P2-403C / P2-403D / P2-403E / P2-403F 只讀契約與治理 UI 摘要。權威細節以 MASTER §3.2.1c / §3.2.1d、`ai_agent_proactive_operations_contract_v1`、`ai_agent_interaction_learning_proof_v1`、`ai_agent_live_read_model_gate_v1`、`ai_agent_redis_dry_run_gate_v1`、`ai_agent_learning_writeback_approval_package_v1`、`ai_agent_telegram_receipt_approval_package_v1`、`ai_agent_owner_approved_learning_dry_run_v1`、`ai_agent_owner_approved_fixture_dry_run_v1`、`ai_agent_version_freshness_snapshot_v1`、`ai_agent_tool_adoption_approval_package_v1`、`ai_agent_telegram_action_required_digest_policy_v1`、`ai_agent_gitea_pr_draft_lane_v1` 與 `ai_agent_host_stateful_version_inventory_v1` 為準。
+> 文件定位：P2-402A / P2-402B / P2-402C / P2-402D / P2-402E / P2-402F / P2-402G / P2-403A / P2-403B / P2-403C / P2-403D / P2-403E / P2-403F / P2-403G 只讀契約與治理 UI 摘要。權威細節以 MASTER §3.2.1c / §3.2.1d、`ai_agent_proactive_operations_contract_v1`、`ai_agent_interaction_learning_proof_v1`、`ai_agent_live_read_model_gate_v1`、`ai_agent_redis_dry_run_gate_v1`、`ai_agent_learning_writeback_approval_package_v1`、`ai_agent_telegram_receipt_approval_package_v1`、`ai_agent_owner_approved_learning_dry_run_v1`、`ai_agent_owner_approved_fixture_dry_run_v1`、`ai_agent_runtime_write_gate_review_v1`、`ai_agent_version_freshness_snapshot_v1`、`ai_agent_tool_adoption_approval_package_v1`、`ai_agent_telegram_action_required_digest_policy_v1`、`ai_agent_gitea_pr_draft_lane_v1` 與 `ai_agent_host_stateful_version_inventory_v1` 為準。
 
 ## 1. 本波完成度
 
@@ -17,7 +17,7 @@
 | Agent 互動與學習證據面 | 100% | P2-403A 已把目前真相、證據階梯、三 Agent lane、可觀測訊號、runtime gates 與 redaction policy 接入治理頁；live counts 全為 `0` |
 | Redis dry-run gate | 100% | P2-403C 已把 consumer group dry-run、handoff envelope、ack / dead-letter / replay idempotency 與治理頁顯示接入；live counts 全為 `0` |
 | Learning writeback approval package | 100% | P2-403D 已把 KM / PlayBook trust / timeline learning / replay score 的 owner review、rollback、redaction 與 blocked write actions 接入；live writes 全為 `0` |
-| 整體主動營運與版本生命週期 | 100% | P2-402A~G、P2-403A、P2-403B、P2-403C、P2-403D、P2-403E 與 P2-403F 只讀契約、snapshot、API、測試與治理 UI 已完成；runtime 排程、工具安裝、CI 變更、實際 PR 建立與更新、host probe、升級、重啟、learning write、Telegram receipt 仍未開 gate |
+| 整體主動營運與版本生命週期 | 100% | P2-402A~G、P2-403A、P2-403B、P2-403C、P2-403D、P2-403E、P2-403F 與 P2-403G 只讀契約、snapshot、API、測試與治理 UI 已完成；runtime 排程、工具安裝、CI 變更、實際 PR 建立與更新、host probe、升級、重啟、learning write、Telegram receipt 仍未開 gate |
 
 ## 2. 可交給 AI Agent 的工作分類
 
@@ -55,7 +55,7 @@
 | `docs/evaluations/ai_agent_host_stateful_version_inventory_2026-06-11.json` | 5 台主機、2 個 K3s 節點、12 個 stateful / ops 服務、6 個只讀 probe 步驟、maintenance window approval package |
 | `GET /api/v1/agents/agent-host-stateful-version-inventory` | 只讀 API；不 SSH、不 kubectl、不升級、不 drain、不 reboot、不重啟 stateful、不發 Telegram |
 | `docs/schemas/ai_agent_interaction_learning_proof_v1.schema.json` | P2-403A Agent 互動、接手、學習、成長與 Telegram receipt 證據面 schema |
-| `docs/evaluations/ai_agent_interaction_learning_proof_2026-06-11.json` | 證據階梯、live truth、三 Agent lane、可觀測訊號、runtime gates；P2-403F 後完成度 `88%`，live counts 全部 `0` |
+| `docs/evaluations/ai_agent_interaction_learning_proof_2026-06-11.json` | 證據階梯、live truth、三 Agent lane、可觀測訊號、runtime gates；P2-403G 後完成度 `94%`，live counts 全部 `0` |
 | `GET /api/v1/agents/agent-interaction-learning-proof` | 只讀 API；不啟動 worker、不開 Redis consumer、不 DB migration、不發 Telegram、不顯示工作視窗對話 |
 | `docs/schemas/ai_agent_live_read_model_gate_v1.schema.json` | P2-403B AgentSession / Redis Streams live read model gate schema |
 | `docs/evaluations/ai_agent_live_read_model_gate_2026-06-11.json` | AgentSession safe fields、Redis envelope、worker gate、rollback plan、no-write smoke、frontend redaction；live counts 全部 `0` |
@@ -70,7 +70,7 @@
 | Dockerfiles | Hermes | action_required | P2-402C 評估 Trivy / Syft / Grype / Docker Scout 採用，不 build / pull |
 | Committed evaluation snapshots | Hermes | action_required | 將 2026-06-04~06-05 舊基線列入 stale refs，不假裝是外部最新 |
 | Agent / model governance snapshots | NemoTron | action_required | 只做離線 freshness note，不進 shadow / canary / production route |
-| K8s / Gitea / observability / Ansible / backup / web surfaces | OpenClaw + Hermes | baseline_ready / planned_next | 下一步進入 P2-403G runtime write gate review；現階段仍只讀 |
+| K8s / Gitea / observability / Ansible / backup / web surfaces | OpenClaw + Hermes | baseline_ready / planned_next | 下一步進入 P2-403H post-write verifier implementation package；現階段仍只讀 |
 
 本波只把「每天要看哪些 repo 內版本來源」定義成可驗證資料面。每日排程、外部 registry 查詢、主機/K3s live probe、Telegram digest 與 Gitea PR lane 都仍是下一階段 gate。
 
@@ -145,6 +145,7 @@ P2-402G 的重點是把前面六個資料契約接回治理頁，讓統帥可以
 | P2-403D | 7 | Learning writeback approval package、資料保留、錯誤補償、人工回饋回滾 | 已完成，只讀；KM / PlayBook trust / timeline learning / replay score 寫入未啟用 |
 | P2-403E | 8 | Telegram receipt approval package、queue / delivery / ack / failure / retry | 已完成，只讀；Gateway queue / Bot API / delivery receipt / retry worker 未啟用 |
 | P2-403F | 9 | Owner-approved learning dry-run preview、fixture dry-run、人工操作選項、驗證與 rollback | 已完成，只讀；owner approval / dry-run preview generation / KM / PlayBook trust / timeline / replay score write / Gateway queue / Telegram send 未啟用 |
+| P2-403G | 10 | Runtime write gate review、雙重批准、dry-run hash、post-write verifier、redaction gate | 已完成，只讀；KM / PlayBook trust / timeline / replay score / Telegram send 未啟用，live write total `0` |
 
 ## 11. 仍維持 false 的安全邊界
 
diff --git a/docs/evaluations/ai_agent_interaction_learning_proof_2026-06-11.json b/docs/evaluations/ai_agent_interaction_learning_proof_2026-06-11.json
index 0612cdbe3..175264473 100644
--- a/docs/evaluations/ai_agent_interaction_learning_proof_2026-06-11.json
+++ b/docs/evaluations/ai_agent_interaction_learning_proof_2026-06-11.json
@@ -2,13 +2,13 @@
   "schema_version": "ai_agent_interaction_learning_proof_v1",
   "generated_at": "2026-06-11T23:20:00+08:00",
   "program_status": {
-    "overall_completion_percent": 88,
+    "overall_completion_percent": 94,
     "current_priority": "P2",
-    "current_task_id": "P2-403F",
-    "next_task_id": "P2-403G",
+    "current_task_id": "P2-403G",
+    "next_task_id": "P2-403H",
     "read_only_mode": true,
     "runtime_authority": "proof_surface_only_no_live_worker",
-    "status_note": "P2-403F 已把 owner-approved learning writeback dry-run preview、人工操作選項、驗證與 rollback 契約接入；live AgentSession、message、handoff、learning write、Telegram receipt 仍全部為 0。"
+    "status_note": "P2-403G 已把 runtime write gate review 接入；雙重批准、dry-run hash、post-write verifier 與 redaction 欄位齊備，但 live AgentSession、message、handoff、learning write、Telegram receipt 仍全部為 0。"
   },
   "live_truth": {
     "runtime_loop_enabled": false,
@@ -286,8 +286,8 @@
       "display_name": "Learning writeback 批准包",
       "status": "approval_required",
       "required_before_green": "必須定義可寫表、資料保留、錯誤補償、人工回饋回滾。",
-      "next_task_id": "P2-403F",
-      "next_gate": "P2-403F owner-approved learning dry-run 已接入；實際 writeback 仍需 runtime write gate。"
+      "next_task_id": "P2-403G",
+      "next_gate": "P2-403G runtime write gate review 已接入；實際 writeback 仍需雙重批准、dry-run hash 與 post-write verifier。"
     },
     {
       "gate_id": "telegram_receipt_gate",
diff --git a/docs/evaluations/ai_agent_proactive_operations_contract_2026-06-11.json b/docs/evaluations/ai_agent_proactive_operations_contract_2026-06-11.json
index 3f2b4e733..d3f368aee 100644
--- a/docs/evaluations/ai_agent_proactive_operations_contract_2026-06-11.json
+++ b/docs/evaluations/ai_agent_proactive_operations_contract_2026-06-11.json
@@ -4,11 +4,11 @@
   "program_status": {
     "overall_completion_percent": 100,
     "current_priority": "P2",
-    "current_task_id": "P2-403F",
-    "next_task_id": "P2-403G",
+    "current_task_id": "P2-403G",
+    "next_task_id": "P2-403H",
     "read_only_mode": true,
     "runtime_authority": "contract_only_no_version_or_runtime_update",
-    "status_note": "P2-403F 已把 owner-approved learning writeback dry-run preview 與人工操作選項接入治理證據；live AgentSession / Redis consumer / runtime worker / learning write / Telegram receipt 目前全為 0，下一步是 P2-403G runtime write gate review。"
+    "status_note": "P2-403G 已把 runtime write gate review 接入治理證據；live AgentSession / Redis consumer / runtime worker / learning write / Telegram receipt 目前全為 0，下一步是 P2-403H post-write verifier implementation package。"
   },
   "external_source_evidence": [
     {
@@ -885,6 +885,23 @@
         "timeline_learning_write",
         "telegram_send_or_receipt_write"
       ]
+    },
+    {
+      "task_id": "P2-403G",
+      "sequence": 10,
+      "display_name": "Runtime write gate review",
+      "status": "done",
+      "owner_agent": "openclaw",
+      "completion_percent": 100,
+      "runtime_authority": "write_gate_review_only_no_runtime_write",
+      "blocked_runtime_actions": [
+        "runtime_learning_write",
+        "knowledge_entries_canonical_write",
+        "playbook_trust_history_write",
+        "incident_timeline_learning_write",
+        "agent_replay_score_write",
+        "telegram_send_or_receipt_write"
+      ]
     }
   ],
   "approval_boundaries": {
@@ -905,7 +922,7 @@
     "cadence_count": 5,
     "mcp_tool_count": 8,
     "rag_memory_count": 4,
-    "rollout_task_count": 13,
+    "rollout_task_count": 14,
     "auto_execute_allowed_count": 0,
     "approval_required_capability_count": 23,
     "blocked_update_domain_ids": [
diff --git a/docs/evaluations/ai_agent_runtime_write_gate_review_2026-06-12.json b/docs/evaluations/ai_agent_runtime_write_gate_review_2026-06-12.json
new file mode 100644
index 000000000..c9ab0b5f9
--- /dev/null
+++ b/docs/evaluations/ai_agent_runtime_write_gate_review_2026-06-12.json
@@ -0,0 +1,178 @@
+{
+  "schema_version": "ai_agent_runtime_write_gate_review_v1",
+  "generated_at": "2026-06-12T00:22:00+08:00",
+  "program_status": {
+    "overall_completion_percent": 94,
+    "current_priority": "P2",
+    "current_task_id": "P2-403G",
+    "next_task_id": "P2-403H",
+    "read_only_mode": true,
+    "runtime_authority": "write_gate_review_only_no_runtime_write",
+    "status_note": "P2-403G 已把 KM、PlayBook trust、timeline learning 與 replay score 的 runtime write gate review 固定為只讀契約；尚未收到雙人批准、未驗證 dry-run hash、未執行 post-write verifier、未做任何 runtime write。"
+  },
+  "source_refs": [
+    "docs/evaluations/ai_agent_owner_approved_learning_dry_run_2026-06-11.json",
+    "docs/evaluations/ai_agent_interaction_learning_proof_2026-06-11.json",
+    "docs/superpowers/specs/2026-04-15-MASTER-ai-autonomous-flywheel-v2.md"
+  ],
+  "runtime_write_truth": {
+    "runtime_write_allowed": false,
+    "dual_approval_required": true,
+    "dual_approval_received_count": 0,
+    "dry_run_hash_required": true,
+    "dry_run_hash_verified_count": 0,
+    "post_write_verifier_required": true,
+    "post_write_verifier_pass_count": 0,
+    "km_write_allowed": false,
+    "playbook_trust_write_allowed": false,
+    "timeline_learning_write_allowed": false,
+    "agent_replay_score_write_allowed": false,
+    "telegram_send_allowed": false,
+    "truth_note": "目前只允許審查 runtime write gate；雙人批准、dry-run hash、post-write verifier 與 rollback owner 都尚未滿足，所以 live write 維持 0。"
+  },
+  "write_gate_review": {
+    "required_fields": [
+      "dual_approval_ids",
+      "owner_role",
+      "dry_run_preview_hash",
+      "redacted_evidence_refs",
+      "target_write_surface",
+      "rollback_owner",
+      "post_write_verifier_ref",
+      "audit_event_template",
+      "expiry_window"
+    ],
+    "forbidden_fields": [
+      "secret_value",
+      "authorization_header",
+      "raw_tool_output",
+      "private_reasoning",
+      "raw_telegram_payload",
+      "unredacted_incident_log"
+    ],
+    "operator_meaning": "這是正式寫入前的最後審查面：只有雙人批准、dry-run hash、rollback owner、post-write verifier 與 audit template 都存在時，下一階段才可討論 runtime write。"
+  },
+  "write_targets": [
+    {
+      "target_id": "km_draft_to_canonical",
+      "display_name": "KM draft -> canonical",
+      "status": "approval_required",
+      "owner_agent": "hermes",
+      "required_before_write": "雙人批准、dry-run diff hash、owner review reason、rollback owner。",
+      "blocked_write_action": "knowledge_entries_canonical_write"
+    },
+    {
+      "target_id": "playbook_trust_delta",
+      "display_name": "PlayBook trust delta",
+      "status": "approval_required",
+      "owner_agent": "openclaw",
+      "required_before_write": "verifier result 必須證明修復成功；no-action / no-repair 不得提升 trust。",
+      "blocked_write_action": "playbook_trust_history_write"
+    },
+    {
+      "target_id": "timeline_learning_event",
+      "display_name": "Timeline learning event",
+      "status": "contract_ready",
+      "owner_agent": "hermes",
+      "required_before_write": "event envelope、redacted evidence refs、audit event template。",
+      "blocked_write_action": "incident_timeline_learning_write"
+    },
+    {
+      "target_id": "agent_replay_score_delta",
+      "display_name": "Agent replay score delta",
+      "status": "blocked_by_runtime_gate",
+      "owner_agent": "nemotron",
+      "required_before_write": "replay job id、baseline score、candidate score、promotion gate decision。",
+      "blocked_write_action": "agent_replay_score_write"
+    }
+  ],
+  "approval_gates": [
+    {
+      "gate_id": "dual_owner_approval_gate",
+      "display_name": "Dual owner approval",
+      "status": "approval_required",
+      "required_evidence": "至少兩個 owner approval id、角色、理由與有效期限。",
+      "blocked_runtime_action": "runtime_learning_write"
+    },
+    {
+      "gate_id": "dry_run_hash_gate",
+      "display_name": "Dry-run hash verification",
+      "status": "approval_required",
+      "required_evidence": "P2-403F preview hash、diff summary、redacted evidence refs 必須一致。",
+      "blocked_runtime_action": "runtime_learning_write"
+    },
+    {
+      "gate_id": "post_write_verifier_gate",
+      "display_name": "Post-write verifier",
+      "status": "approval_required",
+      "required_evidence": "post-write verifier ref、failure rollback plan、audit event template。",
+      "blocked_runtime_action": "runtime_learning_write"
+    },
+    {
+      "gate_id": "telegram_receipt_gate",
+      "display_name": "Telegram receipt after write",
+      "status": "blocked_by_runtime_gate",
+      "required_evidence": "P2-403E receipt gate 仍未授權，不能把寫入結果直接推 Telegram。",
+      "blocked_runtime_action": "telegram_send_or_receipt_write"
+    }
+  ],
+  "post_write_verification": {
+    "verification_required": true,
+    "rollback_required": true,
+    "verification_steps": [
+      "寫入後必須讀回 canonical target 並比對 dry-run hash",
+      "PlayBook trust 只能依 verifier result 調整",
+      "timeline learning event 必須可回到 incident id 與 evidence refs",
+      "失敗時必須產生 rollback work item，不得靜默成功",
+      "Telegram 只允許 failure-only receipt，成功不得洗版"
+    ]
+  },
+  "approval_boundaries": {
+    "runtime_write_allowed": false,
+    "dual_approval_received": false,
+    "dry_run_hash_verified": false,
+    "km_write_allowed": false,
+    "playbook_trust_write_allowed": false,
+    "timeline_learning_write_allowed": false,
+    "agent_replay_score_write_allowed": false,
+    "telegram_send_allowed": false,
+    "runtime_worker_allowed": false,
+    "secret_plaintext_allowed": false
+  },
+  "display_redaction_contract": {
+    "redaction_required": true,
+    "raw_payload_display_allowed": false,
+    "private_reasoning_display_allowed": false,
+    "secret_value_display_allowed": false,
+    "allowed_frontend_content": [
+      "write target",
+      "approval gate",
+      "required evidence",
+      "blocked runtime action",
+      "post-write verification step",
+      "rollback requirement"
+    ],
+    "forbidden_frontend_content": [
+      "secret value",
+      "authorization header",
+      "raw tool output",
+      "private reasoning",
+      "raw Telegram payload",
+      "unredacted incident log"
+    ],
+    "frontend_display_policy": "治理頁只顯示 write target、approval gate、必要證據、阻擋 runtime action、post-write verifier 與 rollback；不顯示 secret、authorization header、raw tool output、private reasoning、raw Telegram payload 或未脫敏 incident log。"
+  },
+  "rollups": {
+    "write_target_count": 4,
+    "approval_gate_count": 4,
+    "approval_required_gate_ids": [
+      "dual_owner_approval_gate",
+      "dry_run_hash_gate",
+      "post_write_verifier_gate"
+    ],
+    "blocked_runtime_action_count": 2,
+    "required_field_count": 9,
+    "forbidden_field_count": 6,
+    "live_write_count_total": 0
+  }
+}
diff --git a/docs/schemas/ai_agent_runtime_write_gate_review_v1.schema.json b/docs/schemas/ai_agent_runtime_write_gate_review_v1.schema.json
new file mode 100644
index 000000000..ea74d00fb
--- /dev/null
+++ b/docs/schemas/ai_agent_runtime_write_gate_review_v1.schema.json
@@ -0,0 +1,159 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://awoooi.local/schemas/ai_agent_runtime_write_gate_review_v1.schema.json",
+  "title": "AI Agent Runtime Write Gate Review",
+  "type": "object",
+  "required": [
+    "schema_version",
+    "generated_at",
+    "program_status",
+    "source_refs",
+    "runtime_write_truth",
+    "write_gate_review",
+    "write_targets",
+    "approval_gates",
+    "post_write_verification",
+    "approval_boundaries",
+    "display_redaction_contract",
+    "rollups"
+  ],
+  "properties": {
+    "schema_version": { "const": "ai_agent_runtime_write_gate_review_v1" },
+    "generated_at": { "type": "string" },
+    "program_status": {
+      "type": "object",
+      "required": ["overall_completion_percent", "current_priority", "current_task_id", "next_task_id", "read_only_mode", "runtime_authority", "status_note"],
+      "properties": {
+        "overall_completion_percent": { "type": "integer", "minimum": 0, "maximum": 100 },
+        "current_priority": { "enum": ["P0", "P1", "P2", "P3"] },
+        "current_task_id": { "const": "P2-403G" },
+        "next_task_id": { "const": "P2-403H" },
+        "read_only_mode": { "const": true },
+        "runtime_authority": { "const": "write_gate_review_only_no_runtime_write" },
+        "status_note": { "type": "string" }
+      },
+      "additionalProperties": false
+    },
+    "source_refs": { "type": "array", "items": { "type": "string" }, "minItems": 1 },
+    "runtime_write_truth": {
+      "type": "object",
+      "required": [
+        "runtime_write_allowed",
+        "dual_approval_required",
+        "dual_approval_received_count",
+        "dry_run_hash_required",
+        "dry_run_hash_verified_count",
+        "post_write_verifier_required",
+        "post_write_verifier_pass_count",
+        "km_write_allowed",
+        "playbook_trust_write_allowed",
+        "timeline_learning_write_allowed",
+        "agent_replay_score_write_allowed",
+        "telegram_send_allowed",
+        "truth_note"
+      ],
+      "properties": {
+        "runtime_write_allowed": { "const": false },
+        "dual_approval_required": { "const": true },
+        "dual_approval_received_count": { "const": 0 },
+        "dry_run_hash_required": { "const": true },
+        "dry_run_hash_verified_count": { "const": 0 },
+        "post_write_verifier_required": { "const": true },
+        "post_write_verifier_pass_count": { "const": 0 },
+        "km_write_allowed": { "const": false },
+        "playbook_trust_write_allowed": { "const": false },
+        "timeline_learning_write_allowed": { "const": false },
+        "agent_replay_score_write_allowed": { "const": false },
+        "telegram_send_allowed": { "const": false },
+        "truth_note": { "type": "string" }
+      },
+      "additionalProperties": false
+    },
+    "write_gate_review": {
+      "type": "object",
+      "required": ["required_fields", "forbidden_fields", "operator_meaning"],
+      "properties": {
+        "required_fields": { "type": "array", "items": { "type": "string" }, "minItems": 1 },
+        "forbidden_fields": { "type": "array", "items": { "type": "string" }, "minItems": 1 },
+        "operator_meaning": { "type": "string" }
+      },
+      "additionalProperties": false
+    },
+    "write_targets": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "required": ["target_id", "display_name", "status", "owner_agent", "required_before_write", "blocked_write_action"],
+        "properties": {
+          "target_id": { "type": "string" },
+          "display_name": { "type": "string" },
+          "status": { "enum": ["approval_required", "blocked_by_runtime_gate", "contract_ready"] },
+          "owner_agent": { "enum": ["openclaw", "hermes", "nemotron"] },
+          "required_before_write": { "type": "string" },
+          "blocked_write_action": { "type": "string" }
+        },
+        "additionalProperties": false
+      },
+      "minItems": 1
+    },
+    "approval_gates": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "required": ["gate_id", "display_name", "status", "required_evidence", "blocked_runtime_action"],
+        "properties": {
+          "gate_id": { "type": "string" },
+          "display_name": { "type": "string" },
+          "status": { "enum": ["approval_required", "blocked_by_runtime_gate", "contract_ready"] },
+          "required_evidence": { "type": "string" },
+          "blocked_runtime_action": { "type": "string" }
+        },
+        "additionalProperties": false
+      },
+      "minItems": 1
+    },
+    "post_write_verification": {
+      "type": "object",
+      "required": ["verification_required", "rollback_required", "verification_steps"],
+      "properties": {
+        "verification_required": { "const": true },
+        "rollback_required": { "const": true },
+        "verification_steps": { "type": "array", "items": { "type": "string" }, "minItems": 1 }
+      },
+      "additionalProperties": false
+    },
+    "approval_boundaries": {
+      "type": "object",
+      "additionalProperties": { "const": false }
+    },
+    "display_redaction_contract": {
+      "type": "object",
+      "required": ["redaction_required", "raw_payload_display_allowed", "private_reasoning_display_allowed", "secret_value_display_allowed", "allowed_frontend_content", "forbidden_frontend_content", "frontend_display_policy"],
+      "properties": {
+        "redaction_required": { "const": true },
+        "raw_payload_display_allowed": { "const": false },
+        "private_reasoning_display_allowed": { "const": false },
+        "secret_value_display_allowed": { "const": false },
+        "allowed_frontend_content": { "type": "array", "items": { "type": "string" } },
+        "forbidden_frontend_content": { "type": "array", "items": { "type": "string" } },
+        "frontend_display_policy": { "type": "string" }
+      },
+      "additionalProperties": false
+    },
+    "rollups": {
+      "type": "object",
+      "required": ["write_target_count", "approval_gate_count", "approval_required_gate_ids", "blocked_runtime_action_count", "required_field_count", "forbidden_field_count", "live_write_count_total"],
+      "properties": {
+        "write_target_count": { "type": "integer", "minimum": 0 },
+        "approval_gate_count": { "type": "integer", "minimum": 0 },
+        "approval_required_gate_ids": { "type": "array", "items": { "type": "string" } },
+        "blocked_runtime_action_count": { "type": "integer", "minimum": 0 },
+        "required_field_count": { "type": "integer", "minimum": 0 },
+        "forbidden_field_count": { "type": "integer", "minimum": 0 },
+        "live_write_count_total": { "const": 0 }
+      },
+      "additionalProperties": false
+    }
+  },
+  "additionalProperties": false
+}
diff --git a/docs/superpowers/specs/2026-04-15-MASTER-ai-autonomous-flywheel-v2.md b/docs/superpowers/specs/2026-04-15-MASTER-ai-autonomous-flywheel-v2.md
index da985c580..f1efdbbde 100644
--- a/docs/superpowers/specs/2026-04-15-MASTER-ai-autonomous-flywheel-v2.md
+++ b/docs/superpowers/specs/2026-04-15-MASTER-ai-autonomous-flywheel-v2.md
@@ -634,7 +634,7 @@ Alert / Sentry / SigNoz / Gitea / Market Watch / Operator
 | `docs/evaluations/ai_agent_communication_learning_contract_2026-06-11.json` | 2026-06-11 committed snapshot；完成度 `35%`，runtime worker / DB migration / Telegram direct send 全部 false |
 | `apps/api/src/services/ai_agent_communication_learning_contract.py` | 只讀 loader；強制驗證 runtime / migration / Telegram / SDK / route 權限都未開 |
 | `GET /api/v1/agents/agent-communication-learning-contract` | 治理 API；只回傳 committed contract，不啟動 worker、不碰 DB/Redis、不呼叫外部服務 |
-| `docs/evaluations/ai_agent_interaction_learning_proof_2026-06-11.json` + `GET /api/v1/agents/agent-interaction-learning-proof` | P2-403A / P2-403B / P2-403C / P2-403D / P2-403E / P2-403F 互動、接手、學習、成長、read model gate、Redis dry-run gate、learning writeback approval package、Telegram receipt approval package、owner-approved learning dry-run 與 fixture dry-run 證據面；目前 live session、message、handoff、learning write、Gateway queue、Telegram send 全部 `0`，下一步 P2-403G |
+| `docs/evaluations/ai_agent_interaction_learning_proof_2026-06-11.json` + `GET /api/v1/agents/agent-interaction-learning-proof` | P2-403A / P2-403B / P2-403C / P2-403D / P2-403E / P2-403F / P2-403G 互動、接手、學習、成長、read model gate、Redis dry-run gate、learning writeback approval package、Telegram receipt approval package、owner-approved learning dry-run、fixture dry-run 與 runtime write gate review 證據面；目前 live session、message、handoff、learning write、Gateway queue、Telegram send 全部 `0`，下一步 P2-403H |
 | `docs/evaluations/ai_agent_live_read_model_gate_2026-06-11.json` + `GET /api/v1/agents/agent-live-read-model-gate` | P2-403B AgentSession / Redis Streams live read model gate；定義 safe fields、Redis envelope、worker gate、rollback plan 與 no-write smoke，不連 DB、不讀寫 Redis、不啟動 worker |
 
 #### 3.2.1c 2026-06-11 AI Agent 主動營運委派與版本生命週期契約
@@ -715,7 +715,8 @@ Repo / registry / release notes / K8s / host / observability / backup evidence
 10. 建立 learning writeback approval package，先固定 owner review、rollback、redaction 與 blocked write actions。✅ P2-403D 已完成；KM / PlayBook trust / timeline learning / replay score live write 仍未授權。
 11. 建立 Telegram receipt approval package，先固定 queue、delivery、ack、failure、retry 與 redaction。✅ P2-403E 已完成；Gateway queue write、Bot API、delivery receipt write、retry worker 仍未授權。
 12. 建立 owner-approved learning dry-run preview，先固定批准後可產生的 dry-run preview、人工操作選項、驗證與 rollback。✅ P2-403F 已完成；owner approval received、dry-run preview generated、KM / PlayBook trust / timeline / replay score write、Telegram send 仍為 `0 / false`。
-13. 建立 owner-approved fixture dry-run 總包，將 learning writeback、Telegram receipt、handoff replay、operator feedback 的乾跑證據收斂到治理頁。✅ P2-403F 補強完成；Gateway queue、Telegram send、Redis consumer、runtime worker 仍為 `0 / false`。下一步 P2-403G runtime write gate review。
+13. 建立 owner-approved fixture dry-run 總包，將 learning writeback、Telegram receipt、handoff replay、operator feedback 的乾跑證據收斂到治理頁。✅ P2-403F 補強完成；Gateway queue、Telegram send、Redis consumer、runtime worker 仍為 `0 / false`。
+14. 建立 runtime write gate review，固定雙重批准、dry-run hash、post-write verifier、rollback 與 redaction 欄位。✅ P2-403G 已完成；KM / PlayBook trust / timeline / replay score / Telegram live write 仍為 `0 / false`。下一步 P2-403H post-write verifier implementation package。
 
 #### 3.2.1d 2026-06-11 Agent 互動、學習與成長證據面
 
@@ -738,7 +739,7 @@ Repo / registry / release notes / K8s / host / observability / backup evidence
 | 檔案 / API | 用途 |
 |---|---|
 | `docs/schemas/ai_agent_interaction_learning_proof_v1.schema.json` | 互動、接手、學習、成長、Telegram receipt 與前端 redaction schema |
-| `docs/evaluations/ai_agent_interaction_learning_proof_2026-06-11.json` | P2-403A + P2-403B + P2-403C + P2-403D + P2-403E + P2-403F committed snapshot；完成度 `88%`，live truth counts 全部 `0` |
+| `docs/evaluations/ai_agent_interaction_learning_proof_2026-06-11.json` | P2-403A + P2-403B + P2-403C + P2-403D + P2-403E + P2-403F + P2-403G committed snapshot；完成度 `94%`，live truth counts 全部 `0` |
 | `apps/api/src/services/ai_agent_interaction_learning_proof.py` | 只讀 loader；強制 live flags / DB / Redis / Telegram / transcript / 私有推理全部關閉 |
 | `GET /api/v1/agents/agent-interaction-learning-proof` | 治理 API；只回傳證據面，不啟動 worker、不碰 live DB/Redis、不發 Telegram |
 | `docs/schemas/ai_agent_live_read_model_gate_v1.schema.json` | P2-403B live read model gate schema；強制 DB / Redis / worker / Telegram / learning writeback 仍需批准 |
@@ -763,7 +764,11 @@ Repo / registry / release notes / K8s / host / observability / backup evidence
 | `docs/schemas/ai_agent_owner_approved_fixture_dry_run_v1.schema.json` | P2-403F owner-approved fixture dry-run schema；強制 KM / PlayBook / timeline / replay / Gateway queue / Telegram / Redis / worker / workflow / host / secret / paid API 全部維持未授權 |
 | `docs/evaluations/ai_agent_owner_approved_fixture_dry_run_2026-06-11.json` | P2-403F committed snapshot；4 組 fixture set、5 個 dry-run gate、6 個 simulation step、no-write proof 與 live write / send / receipt total `0` |
 | `GET /api/v1/agents/agent-owner-approved-fixture-dry-run` | 治理 API；只回傳 owner-approved fixture dry-run 批准包，不寫 KM、不送 Telegram、不開 Redis consumer、不啟動 runtime worker |
-| `/zh-TW/governance?tab=automation-inventory` | 顯示證據階梯、目前真相、三 Agent lane、可觀測訊號、runtime gates 與 redaction policy |
+| `docs/schemas/ai_agent_runtime_write_gate_review_v1.schema.json` | P2-403G runtime write gate review schema；強制 runtime write、KM / PlayBook trust / timeline / replay score / Telegram 全部維持未授權 |
+| `docs/evaluations/ai_agent_runtime_write_gate_review_2026-06-12.json` | P2-403G committed snapshot；4 個 write target、4 個 approval gate、9 個必填欄位、6 個禁止欄位與 live write total `0` |
+| `apps/api/src/services/ai_agent_runtime_write_gate_review.py` | 只讀 loader；拒絕 runtime write、批准數假性增加、欄位缺失與 rollup 不一致 |
+| `GET /api/v1/agents/agent-runtime-write-gate-review` | 治理 API；只回傳 runtime write gate review，不寫 KM、不更新 PlayBook trust、不寫 timeline / replay score、不發 Telegram |
+| `/zh-TW/governance?tab=automation-inventory` | 顯示證據階梯、目前真相、三 Agent lane、可觀測訊號、P2-403G runtime write gate review、runtime gates 與 redaction policy |
 
 **硬性紅線：**
 
@@ -1847,6 +1852,14 @@ Phase 6 完成後
 
 
 
+### 2026-06-12 00:35 (台北) — §3.2 / §5 — 完成 P2-403G Runtime Write Gate Review — 把批准後可寫入前的最後安全閘門固定成可審查契約
+
+- 新增 `ai_agent_runtime_write_gate_review_v1` schema / committed snapshot / loader / API / 測試，定義雙重批准、dry-run hash、post-write verifier、rollback owner、target write surface 與 redaction 欄位。
+- `apps/web/src/app/[locale]/governance/tabs/automation-inventory-tab.tsx` 接入 `GET /api/v1/agents/agent-runtime-write-gate-review`，顯示 4 個 write target、4 個 approval gate、post-write verification steps、truth flags 與 live write total `0`。
+- 更新 `ai_agent_interaction_learning_proof_2026-06-11.json`：整體完成度 `94%`，current task `P2-403G`，next task `P2-403H`；live AgentSession / Redis events / handoff / learning write / Telegram digest receipt 全部仍為 `0`。
+- 更新 `ai_agent_proactive_operations_contract_2026-06-11.json`：新增 rollout task `P2-403G`，blocked runtime actions 包含 KM canonical write、PlayBook trust history write、timeline learning write、agent replay score write 與 Telegram send / receipt write。
+- 本波仍不寫 KM、不更新 PlayBook trust、不寫 timeline learning、不寫 replay score、不發 Telegram、不啟動 runtime worker、不讀取或輸出 secret；下一步 P2-403H 才進 post-write verifier implementation package。
+
 ### 2026-06-11 23:59 (台北) — §3.2 / §5 — 完成 P2-403F Owner-approved Learning Dry-run — 批准後先產生可審查 preview，不直接寫入錯誤知識
 
 - 新增 `ai_agent_owner_approved_learning_dry_run_v1` schema / committed snapshot / loader / API / 測試，定義 owner approval、dry-run preview inputs / outputs、operator actions、evidence gates、verification 與 rollback contract。