fix(operator): bound AI alert card readback scans

apps/api/tests/test_awooop_operator_timeline_labels.py

@@ -1690,6 +1690,12 @@ async def test_unfiltered_query_selects_declared_effective_and_dispatch_receipts
     assert "AS declared_learning_writeback_ready_total" in summary_query
     assert summary_query.count("<> 'backup_restore_escrow_signal'") >= 2
     assert "-> 'agent99_dispatch_receipt' AS agent99_dispatch_receipt" in list_query
+    assert "WITH candidate_messages AS MATERIALIZED" in list_query
+    assert "agent99_runs AS MATERIALIZED" in list_query
+    assert "FROM agent99_runs ars" in list_query
+    assert list_query.index("LIMIT :limit OFFSET :offset") < list_query.index(
+        "LEFT JOIN LATERAL"
+    )
     assert "LEFT JOIN LATERAL" in list_query
     assert "agent99_current_receipt" in list_query
     assert payload["summary"]["declared_runtime_write_gate_open_count"] == 97
@@ -1967,6 +1973,19 @@ def test_ai_alert_card_summary_timeout_budget_is_bounded_and_receipted() -> None
     assert "query_timeout_seconds=_AI_ALERT_CARD_QUERY_TIMEOUT_SECONDS" in source
 
 
+def test_ai_alert_card_direct_readback_bounds_lateral_join_candidates() -> None:
+    source = inspect.getsource(
+        platform_operator_service._load_ai_alert_card_delivery_readback_direct
+    )
+
+    assert "WITH candidate_messages AS MATERIALIZED" in source
+    assert "agent99_runs AS MATERIALIZED" in source
+    assert "FROM agent99_runs ars" in source
+    assert source.index("LIMIT ${limit_param} OFFSET ${offset_param}") < source.index(
+        "LEFT JOIN LATERAL"
+    )
+
+
 @pytest.mark.asyncio
 async def test_list_ai_alert_card_delivery_readback_failsofts_db_unavailable(
     monkeypatch: pytest.MonkeyPatch,