diff --git a/k8s/awoooi-prod/02-network-policy.yaml b/k8s/awoooi-prod/02-network-policy.yaml
index c0b48ebc3..2836aa5bc 100644
--- a/k8s/awoooi-prod/02-network-policy.yaml
+++ b/k8s/awoooi-prod/02-network-policy.yaml
@@ -183,6 +183,16 @@ spec:
         - protocol: TCP
           port: 8080
 
+    # 允許 AWOOI API 將脫敏 Alertmanager 告警送到 99 Agent99 relay
+    # 2026-07-10 Codex: Agent99 SRE relay consumes sanitized JSON only, then
+    # queues allowlisted remediation via the 99-side control loop.
+    - to:
+        - ipBlock:
+            cidr: 192.168.0.99/32
+      ports:
+        - protocol: TCP
+          port: 8787
+
     # 允許訪問 K8s API + K3s master SSH (Executor 執行 kubectl/host diagnosis)
     # 2026-03-23 修復: Y 按鈕執行超時
     # 重要: ClusterIP (10.43.0.1:443) 會路由到實際端點 (192.168.0.120:6443)