Merge remote-tracking branch 'origin/main' into codex/ai-automation-codebase-review-20260710

apps/api/tests/test_agent99_alert_dispatch_order_contract.py

@@ -243,9 +243,20 @@ def test_agent99_selfcheck_verifies_windows99_control_baseline_no_write() -> Non
     assert '"agent99-WindowsControlBaseline-$runId.json"' not in verifier
     assert 'receipt.evidenceIdentity.runToken -eq $evidenceRunToken' in verifier
     assert "$windowsControlBaseline = Test-AgentWindowsControlBaseline" in selfcheck
+    assert "$perfReadbackFailures = @($latestPerf.hosts" in selfcheck
+    assert '(@($_.reasons) -contains "perf_readback_failed")' in selfcheck
+    assert "if ($perfReadbackFailed) { $critical += 1 }" in selfcheck
+    assert 'if ($latestPerf.severity -eq "warning") { $warning += 1 }' not in selfcheck
+    assert "performanceReadbackOk = [bool](-not $perfReadbackFailed)" in selfcheck
     assert 'windowsControlBaseline = $windowsControlBaseline' in selfcheck
     assert 'windowsControlBaselineSeverity = $windowsControlBaseline.severity' in selfcheck
+    assert (
+        'New-AgentOutcomeCheck "fleet_performance_signal_clear" '
+        "$fleetPerformanceClear $false" in source
+    )
     assert 'New-AgentOutcomeCheck "windows99_control_baseline_no_write"' in source
+    assert '$selfCheckFleetWarningResolved.state -eq "resolved"' in source
+    assert '$selfCheckControlPlaneFailed.state -eq "degraded"' in source
     assert '"windows_control_baseline_evidence_ref"' in source