diff --git a/apps/api/src/api/v1/agents.py b/apps/api/src/api/v1/agents.py
index b9e275c34..27d9a8e91 100644
--- a/apps/api/src/api/v1/agents.py
+++ b/apps/api/src/api/v1/agents.py
@@ -79,6 +79,9 @@ from src.services.ai_agent_redis_dry_run_gate import (
 from src.services.ai_agent_telegram_action_required_digest_policy import (
     load_latest_ai_agent_telegram_action_required_digest_policy,
 )
+from src.services.ai_agent_telegram_receipt_approval_package import (
+    load_latest_ai_agent_telegram_receipt_approval_package,
+)
 from src.services.ai_agent_tool_adoption_approval_package import (
     load_latest_ai_agent_tool_adoption_approval_package,
 )
@@ -693,6 +696,33 @@ async def get_agent_learning_writeback_approval_package() -> dict[str, Any]:
         ) from exc
 
 
+@router.get(
+    "/agent-telegram-receipt-approval-package",
+    response_model=dict[str, Any],
+    summary="取得 AI Agent Telegram receipt approval package",
+    description=(
+        "讀取最新已提交的 Telegram receipt / queue / delivery / ack / failure / retry 批准包；"
+        "此端點不寫 Gateway queue、不呼叫 Telegram Bot API、不改 receiver route、不發送通知、"
+        "不啟動 runtime worker、不回傳 Telegram token、raw chat id 或未脫敏 payload。"
+    ),
+)
+async def get_agent_telegram_receipt_approval_package() -> dict[str, Any]:
+    """Return the latest read-only AI Agent Telegram receipt approval package."""
+    try:
+        return await asyncio.to_thread(load_latest_ai_agent_telegram_receipt_approval_package)
+    except FileNotFoundError as exc:
+        raise HTTPException(
+            status_code=status.HTTP_404_NOT_FOUND,
+            detail=str(exc),
+        ) from exc
+    except (json.JSONDecodeError, ValueError) as exc:
+        logger.error("ai_agent_telegram_receipt_approval_package_invalid", error=str(exc))
+        raise HTTPException(
+            status_code=status.HTTP_500_INTERNAL_SERVER_ERROR,
+            detail="AI Agent Telegram receipt approval package 無效",
+        ) from exc
+
+
 @router.get(
     "/agent-proactive-operations-contract",
     response_model=dict[str, Any],
diff --git a/apps/api/src/services/ai_agent_telegram_receipt_approval_package.py b/apps/api/src/services/ai_agent_telegram_receipt_approval_package.py
new file mode 100644
index 000000000..b599c9e6a
--- /dev/null
+++ b/apps/api/src/services/ai_agent_telegram_receipt_approval_package.py
@@ -0,0 +1,163 @@
+"""
+AI Agent Telegram receipt approval package snapshot.
+
+Loads the latest committed P2-403E approval package for Telegram queue,
+delivery, acknowledgement, failure, and retry receipts. This module never
+writes gateway queues, calls Telegram Bot API, changes receiver routes, sends
+notifications, or starts runtime workers.
+"""
+
+from __future__ import annotations
+
+import json
+from pathlib import Path
+from typing import Any
+
+from src.services.snapshot_paths import default_evaluations_dir
+
+_DEFAULT_EVALUATIONS_DIR = default_evaluations_dir(Path(__file__))
+_SNAPSHOT_PATTERN = "ai_agent_telegram_receipt_approval_package_*.json"
+_SCHEMA_VERSION = "ai_agent_telegram_receipt_approval_package_v1"
+
+
+def load_latest_ai_agent_telegram_receipt_approval_package(
+    evaluations_dir: Path | None = None,
+) -> dict[str, Any]:
+    """Load the newest committed AI Agent Telegram receipt approval package."""
+    directory = evaluations_dir or _DEFAULT_EVALUATIONS_DIR
+    candidates = sorted(directory.glob(_SNAPSHOT_PATTERN))
+    if not candidates:
+        raise FileNotFoundError(
+            f"no AI Agent Telegram receipt approval package snapshots found in {directory}"
+        )
+
+    latest = candidates[-1]
+    with latest.open(encoding="utf-8") as handle:
+        payload = json.load(handle)
+
+    if not isinstance(payload, dict):
+        raise ValueError(f"{latest}: expected JSON object")
+    _require_schema(payload, str(latest))
+    _require_read_only_boundaries(payload, str(latest))
+    _require_package_safety(payload, str(latest))
+    _require_rollup_consistency(payload, str(latest))
+    return payload
+
+
+def _require_schema(payload: dict[str, Any], label: str) -> None:
+    actual = payload.get("schema_version")
+    if actual != _SCHEMA_VERSION:
+        raise ValueError(f"{label}: expected schema_version={_SCHEMA_VERSION}, got {actual!r}")
+    status = payload.get("program_status") or {}
+    if status.get("read_only_mode") is not True:
+        raise ValueError(f"{label}: program_status.read_only_mode must be true")
+    if status.get("runtime_authority") != "approval_package_only_no_telegram_send":
+        raise ValueError(f"{label}: runtime_authority must stay approval_package_only_no_telegram_send")
+
+
+def _require_read_only_boundaries(payload: dict[str, Any], label: str) -> None:
+    boundaries = payload.get("approval_boundaries") or {}
+    enabled = sorted(key for key, value in boundaries.items() if value is not False)
+    if enabled:
+        raise ValueError(f"{label}: approval boundaries must remain false: {enabled}")
+
+    truth = payload.get("telegram_truth") or {}
+    false_flags = {
+        "telegram_send_allowed",
+        "gateway_queue_write_allowed",
+        "direct_bot_api_allowed",
+        "receiver_route_change_allowed",
+        "runtime_worker_allowed",
+    }
+    unsafe = sorted(flag for flag in false_flags if truth.get(flag) is not False)
+    if unsafe:
+        raise ValueError(f"{label}: Telegram truth flags must remain false: {unsafe}")
+
+    zero_counts = {
+        "live_queued_receipt_count",
+        "live_delivered_receipt_count",
+        "live_acknowledged_receipt_count",
+        "live_failed_receipt_count",
+        "live_retry_count",
+    }
+    non_zero = sorted(key for key in zero_counts if truth.get(key) != 0)
+    if non_zero:
+        raise ValueError(f"{label}: live Telegram receipt counts must remain zero: {non_zero}")
+
+
+def _require_package_safety(payload: dict[str, Any], label: str) -> None:
+    package = payload.get("receipt_package") or {}
+    required_fields = set(package.get("required_fields") or [])
+    required_minimum = {
+        "receipt_event_id",
+        "incident_id",
+        "target_channel_alias",
+        "message_template_id",
+        "redacted_message_summary",
+        "delivery_correlation_id",
+        "retry_policy_ref",
+        "owner_review_required",
+    }
+    missing = sorted(required_minimum - required_fields)
+    if missing:
+        raise ValueError(f"{label}: receipt package missing required fields: {missing}")
+    if package.get("owner_review_required") is not True:
+        raise ValueError(f"{label}: owner review must be required")
+    if package.get("retry_policy_required") is not True:
+        raise ValueError(f"{label}: retry policy must be required")
+    if package.get("delivery_receipt_required") is not True:
+        raise ValueError(f"{label}: delivery receipt must be required")
+
+    redaction = payload.get("display_redaction_contract") or {}
+    if redaction.get("redaction_required") is not True:
+        raise ValueError(f"{label}: frontend redaction must be required")
+    for flag in ("raw_payload_display_allowed", "private_reasoning_display_allowed", "secret_value_display_allowed"):
+        if redaction.get(flag) is not False:
+            raise ValueError(f"{label}: {flag} must remain false")
+
+    retry = payload.get("retry_contract") or {}
+    if retry.get("retry_required") is not True:
+        raise ValueError(f"{label}: retry_contract.retry_required must be true")
+    if not retry.get("retry_steps"):
+        raise ValueError(f"{label}: retry steps must not be empty")
+
+
+def _require_rollup_consistency(payload: dict[str, Any], label: str) -> None:
+    rollups = payload.get("rollups") or {}
+    gates = payload.get("receipt_gates") or []
+    lanes = payload.get("receipt_lanes") or []
+    package = payload.get("receipt_package") or {}
+    truth = payload.get("telegram_truth") or {}
+    expected_counts = {
+        "receipt_gate_count": len(gates),
+        "receipt_lane_count": len(lanes),
+        "blocked_runtime_action_count": len({gate.get("blocked_runtime_action") for gate in gates}),
+        "required_field_count": len(package.get("required_fields") or []),
+        "forbidden_field_count": len(package.get("forbidden_fields") or []),
+    }
+    mismatched = {
+        key: {"expected": expected, "actual": rollups.get(key)}
+        for key, expected in expected_counts.items()
+        if rollups.get(key) != expected
+    }
+    if mismatched:
+        raise ValueError(f"{label}: rollup counts must match payload sections: {mismatched}")
+
+    approval_required = sorted(
+        gate.get("gate_id") for gate in gates if gate.get("status") == "approval_required"
+    )
+    if sorted(rollups.get("approval_required_gate_ids") or []) != approval_required:
+        raise ValueError(f"{label}: rollups.approval_required_gate_ids mismatch")
+
+    live_total = sum(
+        int(truth.get(key) or 0)
+        for key in (
+            "live_queued_receipt_count",
+            "live_delivered_receipt_count",
+            "live_acknowledged_receipt_count",
+            "live_failed_receipt_count",
+            "live_retry_count",
+        )
+    )
+    if rollups.get("live_receipt_count_total") != live_total:
+        raise ValueError(f"{label}: rollups.live_receipt_count_total mismatch")
diff --git a/apps/api/tests/test_ai_agent_interaction_learning_proof.py b/apps/api/tests/test_ai_agent_interaction_learning_proof.py
index df89d3892..809fbec8a 100644
--- a/apps/api/tests/test_ai_agent_interaction_learning_proof.py
+++ b/apps/api/tests/test_ai_agent_interaction_learning_proof.py
@@ -13,9 +13,9 @@ def test_load_latest_ai_agent_interaction_learning_proof_reads_committed_snapsho
     data = load_latest_ai_agent_interaction_learning_proof()
 
     assert data["schema_version"] == "ai_agent_interaction_learning_proof_v1"
-    assert data["program_status"]["overall_completion_percent"] == 72
-    assert data["program_status"]["current_task_id"] == "P2-403D"
-    assert data["program_status"]["next_task_id"] == "P2-403E"
+    assert data["program_status"]["overall_completion_percent"] == 80
+    assert data["program_status"]["current_task_id"] == "P2-403E"
+    assert data["program_status"]["next_task_id"] == "P2-403F"
     assert data["program_status"]["read_only_mode"] is True
     assert data["program_status"]["runtime_authority"] == "proof_surface_only_no_live_worker"
     assert data["live_truth"]["runtime_loop_enabled"] is False
@@ -31,9 +31,7 @@ def test_load_latest_ai_agent_interaction_learning_proof_reads_committed_snapsho
     assert data["rollups"]["operator_surface_count"] == len(data["operator_surfaces"]) == 5
     assert data["rollups"]["runtime_gate_count"] == len(data["runtime_gates"]) == 5
     assert data["rollups"]["live_signal_count"] == 0
-    assert set(data["rollups"]["live_pending_level_ids"]) == {
-        "telegram_receipts",
-    }
+    assert data["rollups"]["live_pending_level_ids"] == []
     assert {lane["agent_id"] for lane in data["agent_lanes"]} == {
         "openclaw",
         "hermes",
diff --git a/apps/api/tests/test_ai_agent_interaction_learning_proof_api.py b/apps/api/tests/test_ai_agent_interaction_learning_proof_api.py
index c748b97ae..734077a2f 100644
--- a/apps/api/tests/test_ai_agent_interaction_learning_proof_api.py
+++ b/apps/api/tests/test_ai_agent_interaction_learning_proof_api.py
@@ -16,9 +16,9 @@ def test_ai_agent_interaction_learning_proof_endpoint_returns_committed_snapshot
     assert response.status_code == 200
     data = response.json()
     assert data["schema_version"] == "ai_agent_interaction_learning_proof_v1"
-    assert data["program_status"]["overall_completion_percent"] == 72
-    assert data["program_status"]["current_task_id"] == "P2-403D"
-    assert data["program_status"]["next_task_id"] == "P2-403E"
+    assert data["program_status"]["overall_completion_percent"] == 80
+    assert data["program_status"]["current_task_id"] == "P2-403E"
+    assert data["program_status"]["next_task_id"] == "P2-403F"
     assert data["program_status"]["read_only_mode"] is True
     assert data["live_truth"]["runtime_loop_enabled"] is False
     assert data["live_truth"]["active_live_agent_sessions"] == 0
diff --git a/apps/api/tests/test_ai_agent_proactive_operations_contract.py b/apps/api/tests/test_ai_agent_proactive_operations_contract.py
index c7370e799..77589654c 100644
--- a/apps/api/tests/test_ai_agent_proactive_operations_contract.py
+++ b/apps/api/tests/test_ai_agent_proactive_operations_contract.py
@@ -14,8 +14,8 @@ def test_load_latest_ai_agent_proactive_operations_contract_reads_committed_snap
 
     assert data["schema_version"] == "ai_agent_proactive_operations_contract_v1"
     assert data["program_status"]["overall_completion_percent"] == 100
-    assert data["program_status"]["current_task_id"] == "P2-403D"
-    assert data["program_status"]["next_task_id"] == "P2-403E"
+    assert data["program_status"]["current_task_id"] == "P2-403E"
+    assert data["program_status"]["next_task_id"] == "P2-403F"
     assert data["program_status"]["read_only_mode"] is True
     assert data["program_status"]["runtime_authority"] == "contract_only_no_version_or_runtime_update"
     assert data["approval_boundaries"]["runtime_version_update_allowed"] is False
@@ -25,7 +25,7 @@ def test_load_latest_ai_agent_proactive_operations_contract_reads_committed_snap
     assert data["approval_boundaries"]["telegram_direct_send_allowed"] is False
     assert data["rollups"]["version_domain_count"] == len(data["version_lifecycle_domains"]) == 12
     assert data["rollups"]["delegable_capability_count"] == len(data["delegable_capabilities"]) == 24
-    assert data["rollups"]["rollout_task_count"] == len(data["rollout_tasks"]) == 11
+    assert data["rollups"]["rollout_task_count"] == len(data["rollout_tasks"]) == 12
     assert data["rollups"]["auto_execute_allowed_count"] == 0
     assert any(domain["domain_id"] == "ai_agents_models" for domain in data["version_lifecycle_domains"])
     assert any(
diff --git a/apps/api/tests/test_ai_agent_proactive_operations_contract_api.py b/apps/api/tests/test_ai_agent_proactive_operations_contract_api.py
index 822b668b1..8549bc08a 100644
--- a/apps/api/tests/test_ai_agent_proactive_operations_contract_api.py
+++ b/apps/api/tests/test_ai_agent_proactive_operations_contract_api.py
@@ -17,8 +17,8 @@ def test_ai_agent_proactive_operations_contract_endpoint_returns_committed_snaps
     data = response.json()
     assert data["schema_version"] == "ai_agent_proactive_operations_contract_v1"
     assert data["program_status"]["overall_completion_percent"] == 100
-    assert data["program_status"]["current_task_id"] == "P2-403D"
-    assert data["program_status"]["next_task_id"] == "P2-403E"
+    assert data["program_status"]["current_task_id"] == "P2-403E"
+    assert data["program_status"]["next_task_id"] == "P2-403F"
     assert data["program_status"]["read_only_mode"] is True
     assert data["approval_boundaries"]["runtime_version_update_allowed"] is False
     assert data["approval_boundaries"]["package_upgrade_allowed"] is False
@@ -26,7 +26,7 @@ def test_ai_agent_proactive_operations_contract_endpoint_returns_committed_snaps
     assert data["approval_boundaries"]["telegram_direct_send_allowed"] is False
     assert data["rollups"]["version_domain_count"] == 12
     assert data["rollups"]["delegable_capability_count"] == 24
-    assert data["rollups"]["rollout_task_count"] == 11
+    assert data["rollups"]["rollout_task_count"] == 12
     assert data["rollups"]["auto_execute_allowed_count"] == 0
     assert any(domain["domain_id"] == "host_os_packages" for domain in data["version_lifecycle_domains"])
     assert any(
diff --git a/apps/api/tests/test_ai_agent_telegram_receipt_approval_package.py b/apps/api/tests/test_ai_agent_telegram_receipt_approval_package.py
new file mode 100644
index 000000000..9ae823d3b
--- /dev/null
+++ b/apps/api/tests/test_ai_agent_telegram_receipt_approval_package.py
@@ -0,0 +1,52 @@
+import copy
+
+import pytest
+
+from src.services.ai_agent_telegram_receipt_approval_package import (
+    load_latest_ai_agent_telegram_receipt_approval_package,
+)
+
+
+def test_load_latest_ai_agent_telegram_receipt_approval_package():
+    data = load_latest_ai_agent_telegram_receipt_approval_package()
+
+    assert data["schema_version"] == "ai_agent_telegram_receipt_approval_package_v1"
+    assert data["program_status"]["current_task_id"] == "P2-403E"
+    assert data["program_status"]["next_task_id"] == "P2-403F"
+    assert data["telegram_truth"]["telegram_send_allowed"] is False
+    assert data["telegram_truth"]["gateway_queue_write_allowed"] is False
+    assert data["telegram_truth"]["live_delivered_receipt_count"] == 0
+    assert data["rollups"]["receipt_gate_count"] == len(data["receipt_gates"])
+
+
+def test_rejects_telegram_send_enabled(tmp_path):
+    data = load_latest_ai_agent_telegram_receipt_approval_package()
+    bad = copy.deepcopy(data)
+    bad["telegram_truth"]["telegram_send_allowed"] = True
+    path = tmp_path / "ai_agent_telegram_receipt_approval_package_2026-06-11.json"
+    path.write_text(__import__("json").dumps(bad), encoding="utf-8")
+
+    with pytest.raises(ValueError, match="Telegram truth flags"):
+        load_latest_ai_agent_telegram_receipt_approval_package(tmp_path)
+
+
+def test_rejects_missing_delivery_receipt(tmp_path):
+    data = load_latest_ai_agent_telegram_receipt_approval_package()
+    bad = copy.deepcopy(data)
+    bad["receipt_package"]["delivery_receipt_required"] = False
+    path = tmp_path / "ai_agent_telegram_receipt_approval_package_2026-06-11.json"
+    path.write_text(__import__("json").dumps(bad), encoding="utf-8")
+
+    with pytest.raises(ValueError, match="delivery receipt"):
+        load_latest_ai_agent_telegram_receipt_approval_package(tmp_path)
+
+
+def test_rejects_rollup_mismatch(tmp_path):
+    data = load_latest_ai_agent_telegram_receipt_approval_package()
+    bad = copy.deepcopy(data)
+    bad["rollups"]["receipt_gate_count"] = 999
+    path = tmp_path / "ai_agent_telegram_receipt_approval_package_2026-06-11.json"
+    path.write_text(__import__("json").dumps(bad), encoding="utf-8")
+
+    with pytest.raises(ValueError, match="rollup counts"):
+        load_latest_ai_agent_telegram_receipt_approval_package(tmp_path)
diff --git a/apps/api/tests/test_ai_agent_telegram_receipt_approval_package_api.py b/apps/api/tests/test_ai_agent_telegram_receipt_approval_package_api.py
new file mode 100644
index 000000000..9bb8232fd
--- /dev/null
+++ b/apps/api/tests/test_ai_agent_telegram_receipt_approval_package_api.py
@@ -0,0 +1,17 @@
+from fastapi.testclient import TestClient
+
+from src.main import app
+
+
+def test_get_ai_agent_telegram_receipt_approval_package_api():
+    client = TestClient(app)
+    response = client.get("/api/v1/agents/agent-telegram-receipt-approval-package")
+
+    assert response.status_code == 200
+    data = response.json()
+    assert data["schema_version"] == "ai_agent_telegram_receipt_approval_package_v1"
+    assert data["program_status"]["current_task_id"] == "P2-403E"
+    assert data["program_status"]["next_task_id"] == "P2-403F"
+    assert data["telegram_truth"]["telegram_send_allowed"] is False
+    assert data["telegram_truth"]["gateway_queue_write_allowed"] is False
+    assert data["rollups"]["live_receipt_count_total"] == 0
diff --git a/apps/web/messages/en.json b/apps/web/messages/en.json
index df171bdce..fb30f062a 100644
--- a/apps/web/messages/en.json
+++ b/apps/web/messages/en.json
@@ -3772,6 +3772,31 @@
           "locked": "已鎖定",
           "review_required": "需複核"
         }
+      },
+      "telegramReceiptPackage": {
+        "title": "P2-403E Telegram Receipt Approval",
+        "source": "{generated} · {current} → {next}",
+        "packageTitle": "Receipt 批准包",
+        "truthTitle": "目前通知真相",
+        "redactionTitle": "Telegram 顯示紅線",
+        "metrics": {
+          "overall": "P2-403E 進度",
+          "gates": "Receipt gates",
+          "lanes": "Receipt lanes",
+          "approval": "需批准 gates",
+          "blocked": "阻擋動作",
+          "live": "Live receipts"
+        },
+        "flags": {
+          "send": "Telegram send: {value}",
+          "queue": "Queue write: {value}",
+          "direct": "Direct Bot API: {value}"
+        },
+        "labels": {
+          "requiredFields": "必填欄位 {count}",
+          "forbiddenFields": "禁止欄位 {count}",
+          "retry": "retry policy: {value}"
+        }
       }
     }
   },
diff --git a/apps/web/messages/zh-TW.json b/apps/web/messages/zh-TW.json
index df171bdce..fb30f062a 100644
--- a/apps/web/messages/zh-TW.json
+++ b/apps/web/messages/zh-TW.json
@@ -3772,6 +3772,31 @@
           "locked": "已鎖定",
           "review_required": "需複核"
         }
+      },
+      "telegramReceiptPackage": {
+        "title": "P2-403E Telegram Receipt Approval",
+        "source": "{generated} · {current} → {next}",
+        "packageTitle": "Receipt 批准包",
+        "truthTitle": "目前通知真相",
+        "redactionTitle": "Telegram 顯示紅線",
+        "metrics": {
+          "overall": "P2-403E 進度",
+          "gates": "Receipt gates",
+          "lanes": "Receipt lanes",
+          "approval": "需批准 gates",
+          "blocked": "阻擋動作",
+          "live": "Live receipts"
+        },
+        "flags": {
+          "send": "Telegram send: {value}",
+          "queue": "Queue write: {value}",
+          "direct": "Direct Bot API: {value}"
+        },
+        "labels": {
+          "requiredFields": "必填欄位 {count}",
+          "forbiddenFields": "禁止欄位 {count}",
+          "retry": "retry policy: {value}"
+        }
       }
     }
   },
diff --git a/apps/web/src/app/[locale]/governance/tabs/automation-inventory-tab.tsx b/apps/web/src/app/[locale]/governance/tabs/automation-inventory-tab.tsx
index f2be4f86e..6d718838f 100644
--- a/apps/web/src/app/[locale]/governance/tabs/automation-inventory-tab.tsx
+++ b/apps/web/src/app/[locale]/governance/tabs/automation-inventory-tab.tsx
@@ -42,6 +42,7 @@ import {
   type AiAgentLiveReadModelGateSnapshot,
   type AiAgentProactiveOperationsContractSnapshot,
   type AiAgentRedisDryRunGateSnapshot,
+  type AiAgentTelegramReceiptApprovalPackageSnapshot,
   type AiProviderRouteMatrixSnapshot,
   type AiAgentAutomationBacklogSnapshot,
   type AiAgentAutomationInventorySnapshot,
@@ -324,6 +325,7 @@ export function AutomationInventoryTab() {
   const [liveReadModelGate, setLiveReadModelGate] = useState<AiAgentLiveReadModelGateSnapshot | null>(null)
   const [redisDryRunGate, setRedisDryRunGate] = useState<AiAgentRedisDryRunGateSnapshot | null>(null)
   const [learningWritebackPackage, setLearningWritebackPackage] = useState<AiAgentLearningWritebackApprovalPackageSnapshot | null>(null)
+  const [telegramReceiptPackage, setTelegramReceiptPackage] = useState<AiAgentTelegramReceiptApprovalPackageSnapshot | null>(null)
   const [hostStatefulInventory, setHostStatefulInventory] = useState<AiAgentHostStatefulVersionInventorySnapshot | null>(null)
   const [serviceHealthGapMatrix, setServiceHealthGapMatrix] = useState<ServiceHealthGapMatrixSnapshot | null>(null)
   const [serviceHealthNotificationPolicy, setServiceHealthNotificationPolicy] = useState<ServiceHealthFailureNotificationPolicySnapshot | null>(null)
@@ -349,6 +351,7 @@ export function AutomationInventoryTab() {
       apiClient.getAiAgentLiveReadModelGate(),
       apiClient.getAiAgentRedisDryRunGate(),
       apiClient.getAiAgentLearningWritebackApprovalPackage(),
+      apiClient.getAiAgentTelegramReceiptApprovalPackage(),
       apiClient.getAiAgentHostStatefulVersionInventory(),
       apiClient.getServiceHealthGapMatrix(),
       apiClient.getServiceHealthFailureNotificationPolicy(),
@@ -373,6 +376,7 @@ export function AutomationInventoryTab() {
           liveReadModelGateResult,
           redisDryRunGateResult,
           learningWritebackPackageResult,
+          telegramReceiptPackageResult,
           hostStatefulInventoryResult,
           serviceHealthGapMatrixResult,
           serviceHealthNotificationPolicyResult,
@@ -394,6 +398,7 @@ export function AutomationInventoryTab() {
         setLiveReadModelGate(liveReadModelGateResult.status === 'fulfilled' ? liveReadModelGateResult.value : null)
         setRedisDryRunGate(redisDryRunGateResult.status === 'fulfilled' ? redisDryRunGateResult.value : null)
         setLearningWritebackPackage(learningWritebackPackageResult.status === 'fulfilled' ? learningWritebackPackageResult.value : null)
+        setTelegramReceiptPackage(telegramReceiptPackageResult.status === 'fulfilled' ? telegramReceiptPackageResult.value : null)
         setHostStatefulInventory(hostStatefulInventoryResult.status === 'fulfilled' ? hostStatefulInventoryResult.value : null)
         setServiceHealthGapMatrix(serviceHealthGapMatrixResult.status === 'fulfilled' ? serviceHealthGapMatrixResult.value : null)
         setServiceHealthNotificationPolicy(serviceHealthNotificationPolicyResult.status === 'fulfilled' ? serviceHealthNotificationPolicyResult.value : null)
@@ -413,6 +418,7 @@ export function AutomationInventoryTab() {
           liveReadModelGateResult,
           redisDryRunGateResult,
           learningWritebackPackageResult,
+          telegramReceiptPackageResult,
           hostStatefulInventoryResult,
           serviceHealthGapMatrixResult,
           serviceHealthNotificationPolicyResult,
@@ -654,6 +660,30 @@ export function AutomationInventoryTab() {
       })
   }, [learningWritebackPackage])
 
+  const visibleTelegramReceiptGates = useMemo(() => {
+    if (!telegramReceiptPackage) return []
+    const priority = { approval_required: 0, blocked_by_runtime_gate: 1, contract_ready: 2 } as Record<string, number>
+    return [...telegramReceiptPackage.receipt_gates]
+      .sort((a, b) => {
+        const left = priority[a.status] ?? 3
+        const right = priority[b.status] ?? 3
+        if (left !== right) return left - right
+        return a.gate_id.localeCompare(b.gate_id)
+      })
+  }, [telegramReceiptPackage])
+
+  const visibleTelegramReceiptLanes = useMemo(() => {
+    if (!telegramReceiptPackage) return []
+    const priority = { blocked_by_runtime_gate: 0, approval_required: 1, contract_ready: 2 } as Record<string, number>
+    return [...telegramReceiptPackage.receipt_lanes]
+      .sort((a, b) => {
+        const left = priority[a.status] ?? 3
+        const right = priority[b.status] ?? 3
+        if (left !== right) return left - right
+        return a.lane_id.localeCompare(b.lane_id)
+      })
+  }, [telegramReceiptPackage])
+
   const visibleReadinessRows = useMemo(() => {
     if (!backupReadiness) return []
     const priority = { blocked: 0, action_required: 1, deferred: 2, ready: 3 } as Record<string, number>
@@ -797,7 +827,7 @@ export function AutomationInventoryTab() {
     )
   }
 
-  if (error || !snapshot || !backlog || !backupTargets || !backupReadiness || !backupPolicy || !offsiteEscrow || !giteaHealth || !observabilityMatrix || !providerRouteMatrix || !deploymentLayout || !proactiveOperations || !interactionLearningProof || !liveReadModelGate || !redisDryRunGate || !learningWritebackPackage || !hostStatefulInventory || !serviceHealthGapMatrix || !serviceHealthNotificationPolicy) {
+  if (error || !snapshot || !backlog || !backupTargets || !backupReadiness || !backupPolicy || !offsiteEscrow || !giteaHealth || !observabilityMatrix || !providerRouteMatrix || !deploymentLayout || !proactiveOperations || !interactionLearningProof || !liveReadModelGate || !redisDryRunGate || !learningWritebackPackage || !telegramReceiptPackage || !hostStatefulInventory || !serviceHealthGapMatrix || !serviceHealthNotificationPolicy) {
     return (
       <div style={{ padding: 20 }}>
         <GlassCard variant="subtle" padding="lg">
@@ -903,6 +933,12 @@ export function AutomationInventoryTab() {
   const learningWritebackApprovals = learningWritebackPackage.rollups.approval_required_gate_ids.length
   const learningWritebackBlockedWrites = learningWritebackPackage.rollups.blocked_write_action_count
   const learningWritebackLiveWrites = learningWritebackPackage.rollups.live_write_count_total
+  const telegramReceiptOverall = telegramReceiptPackage.program_status.overall_completion_percent
+  const telegramReceiptGates = telegramReceiptPackage.rollups.receipt_gate_count
+  const telegramReceiptLanes = telegramReceiptPackage.rollups.receipt_lane_count
+  const telegramReceiptApprovals = telegramReceiptPackage.rollups.approval_required_gate_ids.length
+  const telegramReceiptBlockedActions = telegramReceiptPackage.rollups.blocked_runtime_action_count
+  const telegramReceiptLiveTotal = telegramReceiptPackage.rollups.live_receipt_count_total
   const hostReadonlyDeniedCount = (
     hostStatefulInventory.rollups.ssh_login_allowed_count
     + hostStatefulInventory.rollups.kubectl_command_execution_allowed_count
@@ -1792,6 +1828,111 @@ export function AutomationInventoryTab() {
             </div>
           </div>
 
+          <div style={{ padding: 12, border: '0.5px solid #d8c6a6', borderRadius: 7, background: '#fffdf7', display: 'flex', flexDirection: 'column', gap: 12, minWidth: 0 }}>
+            <div style={{ display: 'flex', alignItems: 'center', justifyContent: 'space-between', gap: 10, flexWrap: 'wrap' }}>
+              <div style={{ display: 'flex', alignItems: 'center', gap: 7, minWidth: 0 }}>
+                <BellRing size={14} style={{ color: '#d97757' }} />
+                <span style={{ fontFamily: 'Syne, sans-serif', fontSize: 13, fontWeight: 700, color: '#141413' }}>
+                  {t('telegramReceiptPackage.title')}
+                </span>
+              </div>
+              <Chip
+                value={t('telegramReceiptPackage.source', {
+                  generated: formatDateTime(telegramReceiptPackage.generated_at),
+                  current: telegramReceiptPackage.program_status.current_task_id,
+                  next: telegramReceiptPackage.program_status.next_task_id,
+                })}
+                muted
+              />
+            </div>
+
+            <div style={{ display: 'grid', gridTemplateColumns: 'repeat(6, minmax(0, 1fr))', gap: 10 }} className="automation-inventory-live-read-kpi-grid">
+              <MetricCard label={t('telegramReceiptPackage.metrics.overall')} value={`${telegramReceiptOverall}%`} tone="warn" icon={<Gauge size={16} />} />
+              <MetricCard label={t('telegramReceiptPackage.metrics.gates')} value={telegramReceiptGates} tone="ok" icon={<ShieldCheck size={16} />} />
+              <MetricCard label={t('telegramReceiptPackage.metrics.lanes')} value={telegramReceiptLanes} tone="ok" icon={<Route size={16} />} />
+              <MetricCard label={t('telegramReceiptPackage.metrics.approval')} value={telegramReceiptApprovals} tone={telegramReceiptApprovals > 0 ? 'danger' : 'ok'} icon={<Lock size={16} />} />
+              <MetricCard label={t('telegramReceiptPackage.metrics.blocked')} value={telegramReceiptBlockedActions} tone={telegramReceiptBlockedActions > 0 ? 'danger' : 'ok'} icon={<ShieldAlert size={16} />} />
+              <MetricCard label={t('telegramReceiptPackage.metrics.live')} value={telegramReceiptLiveTotal} tone={telegramReceiptLiveTotal === 0 ? 'warn' : 'ok'} icon={<BellOff size={16} />} />
+            </div>
+
+            <div style={{ display: 'grid', gridTemplateColumns: 'minmax(0, 0.85fr) minmax(0, 1.15fr)', gap: 12 }} className="automation-inventory-live-read-grid">
+              <div style={{ display: 'flex', flexDirection: 'column', gap: 10, minWidth: 0 }}>
+                <div style={{ padding: 11, border: '0.5px solid #eee9dd', borderRadius: 7, background: '#faf9f3', display: 'flex', flexDirection: 'column', gap: 8, minWidth: 0 }}>
+                  <SmallLabel>{t('telegramReceiptPackage.packageTitle')}</SmallLabel>
+                  <span style={{ fontFamily: "'DM Mono', monospace", fontSize: 10, color: '#87867f', lineHeight: 1.5, overflowWrap: 'anywhere' }}>
+                    {telegramReceiptPackage.receipt_package.operator_meaning}
+                  </span>
+                  <div style={{ display: 'flex', flexWrap: 'wrap', gap: 6 }}>
+                    <Chip value={t('telegramReceiptPackage.labels.requiredFields', { count: telegramReceiptPackage.rollups.required_field_count })} />
+                    <Chip value={t('telegramReceiptPackage.labels.forbiddenFields', { count: telegramReceiptPackage.rollups.forbidden_field_count })} muted />
+                    <Chip value={t('telegramReceiptPackage.labels.retry', { value: String(telegramReceiptPackage.receipt_package.retry_policy_required) })} muted />
+                  </div>
+                </div>
+
+                <div style={{ padding: 11, border: '0.5px solid #eee9dd', borderRadius: 7, background: '#faf9f3', display: 'flex', flexDirection: 'column', gap: 8, minWidth: 0 }}>
+                  <SmallLabel>{t('telegramReceiptPackage.truthTitle')}</SmallLabel>
+                  <span style={{ fontFamily: "'DM Mono', monospace", fontSize: 10, color: '#87867f', lineHeight: 1.5, overflowWrap: 'anywhere' }}>
+                    {telegramReceiptPackage.telegram_truth.truth_note}
+                  </span>
+                  <div style={{ display: 'flex', flexWrap: 'wrap', gap: 6 }}>
+                    <Chip value={t('telegramReceiptPackage.flags.send', { value: String(telegramReceiptPackage.telegram_truth.telegram_send_allowed) })} />
+                    <Chip value={t('telegramReceiptPackage.flags.queue', { value: String(telegramReceiptPackage.telegram_truth.gateway_queue_write_allowed) })} muted />
+                    <Chip value={t('telegramReceiptPackage.flags.direct', { value: String(telegramReceiptPackage.telegram_truth.direct_bot_api_allowed) })} muted />
+                  </div>
+                </div>
+
+                <div style={{ padding: 11, border: '0.5px solid #eee9dd', borderRadius: 7, background: '#faf9f3', display: 'flex', flexDirection: 'column', gap: 8, minWidth: 0 }}>
+                  <SmallLabel>{t('telegramReceiptPackage.redactionTitle')}</SmallLabel>
+                  <span style={{ fontFamily: "'DM Mono', monospace", fontSize: 10, color: '#87867f', lineHeight: 1.5, overflowWrap: 'anywhere' }}>
+                    {telegramReceiptPackage.display_redaction_contract.frontend_display_policy}
+                  </span>
+                </div>
+              </div>
+
+              <div style={{ display: 'grid', gridTemplateColumns: 'repeat(2, minmax(0, 1fr))', gap: 10 }} className="automation-inventory-live-read-card-grid">
+                {visibleTelegramReceiptGates.map(gate => (
+                  <div key={gate.gate_id} style={{ padding: 10, border: '0.5px solid #eee9dd', borderRadius: 7, background: '#faf9f3', display: 'flex', flexDirection: 'column', gap: 7, minWidth: 0 }}>
+                    <div style={{ display: 'flex', justifyContent: 'space-between', gap: 8, alignItems: 'center', minWidth: 0 }}>
+                      <span style={{ fontFamily: "'DM Mono', monospace", fontSize: 11, fontWeight: 700, color: '#141413', overflowWrap: 'anywhere' }}>
+                        {gate.gate_id}
+                      </span>
+                      <Chip value={redisDryRunValueLabel('statuses', gate.status)} muted={gate.status === 'contract_ready'} />
+                    </div>
+                    <span style={{ fontFamily: 'Syne, sans-serif', fontSize: 12, fontWeight: 700, color: '#141413', lineHeight: 1.35 }}>
+                      {gate.display_name}
+                    </span>
+                    <span style={{ fontFamily: "'DM Mono', monospace", fontSize: 10, color: '#87867f', lineHeight: 1.45, overflowWrap: 'anywhere' }}>
+                      {gate.required_evidence}
+                    </span>
+                    <div style={{ display: 'flex', flexWrap: 'wrap', gap: 6 }}>
+                      <Chip value={redisDryRunValueLabel('agents', gate.owner_agent)} muted />
+                      <Chip value={gate.blocked_runtime_action} muted />
+                    </div>
+                  </div>
+                ))}
+              </div>
+            </div>
+
+            <div style={{ display: 'grid', gridTemplateColumns: 'repeat(3, minmax(0, 1fr))', gap: 10 }} className="automation-inventory-live-read-card-grid">
+              {visibleTelegramReceiptLanes.map(lane => (
+                <div key={lane.lane_id} style={{ padding: 10, border: '0.5px solid #eee9dd', borderRadius: 7, background: '#faf9f3', display: 'flex', flexDirection: 'column', gap: 7, minWidth: 0 }}>
+                  <div style={{ display: 'flex', justifyContent: 'space-between', gap: 8, alignItems: 'center', minWidth: 0 }}>
+                    <span style={{ fontFamily: 'Syne, sans-serif', fontSize: 12, fontWeight: 700, color: '#141413', overflowWrap: 'anywhere' }}>
+                      {lane.display_name}
+                    </span>
+                    <Chip value={redisDryRunValueLabel('statuses', lane.status)} muted={lane.status === 'contract_ready'} />
+                  </div>
+                  <span style={{ fontFamily: "'DM Mono', monospace", fontSize: 10, color: '#87867f', lineHeight: 1.45, overflowWrap: 'anywhere' }}>
+                    {redisDryRunValueLabel('agents', lane.owner_agent)} · {lane.target_surface} · {lane.review_owner}
+                  </span>
+                  <span style={{ fontFamily: "'DM Mono', monospace", fontSize: 10, color: '#87867f', lineHeight: 1.45, overflowWrap: 'anywhere' }}>
+                    {lane.required_review}
+                  </span>
+                </div>
+              ))}
+            </div>
+          </div>
+
           <div style={{ display: 'grid', gridTemplateColumns: 'minmax(0, 1.15fr) minmax(0, 0.85fr)', gap: 12 }} className="automation-inventory-proof-grid">
             <div style={{ display: 'flex', flexDirection: 'column', gap: 12, minWidth: 0 }}>
               <div style={{ padding: 12, border: '0.5px solid #e0ddd4', borderRadius: 7, background: '#fff', display: 'flex', flexDirection: 'column', gap: 10, minWidth: 0 }}>
diff --git a/apps/web/src/lib/api-client.ts b/apps/web/src/lib/api-client.ts
index d3fbbbf1f..2cc3d4b6f 100644
--- a/apps/web/src/lib/api-client.ts
+++ b/apps/web/src/lib/api-client.ts
@@ -292,6 +292,11 @@ export const apiClient = {
     return handleResponse<AiAgentLearningWritebackApprovalPackageSnapshot>(res)
   },
 
+  async getAiAgentTelegramReceiptApprovalPackage() {
+    const res = await fetch(`${API_BASE_URL}/agents/agent-telegram-receipt-approval-package`)
+    return handleResponse<AiAgentTelegramReceiptApprovalPackageSnapshot>(res)
+  },
+
   async getAiAgentHostStatefulVersionInventory() {
     const res = await fetch(`${API_BASE_URL}/agents/agent-host-stateful-version-inventory`)
     return handleResponse<AiAgentHostStatefulVersionInventorySnapshot>(res)
@@ -1429,6 +1434,82 @@ export interface AiAgentLearningWritebackApprovalPackageSnapshot {
   }
 }
 
+export interface AiAgentTelegramReceiptApprovalPackageSnapshot {
+  schema_version: 'ai_agent_telegram_receipt_approval_package_v1'
+  generated_at: string
+  program_status: {
+    overall_completion_percent: number
+    current_priority: 'P0' | 'P1' | 'P2' | 'P3'
+    current_task_id: string
+    next_task_id: string
+    read_only_mode: true
+    runtime_authority: 'approval_package_only_no_telegram_send'
+    status_note: string
+  }
+  source_refs: string[]
+  telegram_truth: {
+    telegram_send_allowed: false
+    gateway_queue_write_allowed: false
+    direct_bot_api_allowed: false
+    receiver_route_change_allowed: false
+    runtime_worker_allowed: false
+    live_queued_receipt_count: number
+    live_delivered_receipt_count: number
+    live_acknowledged_receipt_count: number
+    live_failed_receipt_count: number
+    live_retry_count: number
+    truth_note: string
+  }
+  receipt_package: {
+    required_fields: string[]
+    forbidden_fields: string[]
+    owner_review_required: true
+    retry_policy_required: true
+    delivery_receipt_required: true
+    operator_meaning: string
+  }
+  receipt_gates: Array<{
+    gate_id: string
+    display_name: string
+    owner_agent: 'openclaw' | 'hermes' | 'nemotron'
+    status: string
+    required_evidence: string
+    blocked_runtime_action: string
+  }>
+  receipt_lanes: Array<{
+    lane_id: string
+    display_name: string
+    target_surface: string
+    status: string
+    owner_agent: 'openclaw' | 'hermes' | 'nemotron'
+    review_owner: string
+    required_review: string
+  }>
+  retry_contract: {
+    retry_required: true
+    retry_steps: string[]
+  }
+  approval_boundaries: Record<string, false>
+  display_redaction_contract: {
+    redaction_required: true
+    raw_payload_display_allowed: false
+    private_reasoning_display_allowed: false
+    secret_value_display_allowed: false
+    allowed_frontend_content: string[]
+    forbidden_frontend_content: string[]
+    frontend_display_policy: string
+  }
+  rollups: {
+    receipt_gate_count: number
+    receipt_lane_count: number
+    approval_required_gate_ids: string[]
+    blocked_runtime_action_count: number
+    required_field_count: number
+    forbidden_field_count: number
+    live_receipt_count_total: number
+  }
+}
+
 export interface AiAgentHostStatefulVersionInventorySnapshot {
   schema_version: 'ai_agent_host_stateful_version_inventory_v1'
   generated_at: string
diff --git a/docs/LOGBOOK.md b/docs/LOGBOOK.md
index b71c40076..7cb321934 100644
--- a/docs/LOGBOOK.md
+++ b/docs/LOGBOOK.md
@@ -1,3 +1,34 @@
+## 2026-06-11｜P2-403E Telegram Receipt Approval Package
+
+**背景**：P2-403D 已把 learning writeback 拆成 owner review 批准包，但 Telegram 告警仍不能只靠「應該會送」或「已批准」這類文字。這一段先把 queue、delivery、ack、failure、retry 的 receipt approval package 固定為只讀契約；批准前不得寫 Gateway queue、不得呼叫 Telegram Bot API、不得改 receiver route、不得啟動 retry worker。
+
+**完成**：
+
+- 新增 `ai_agent_telegram_receipt_approval_package_v1` schema、committed snapshot、只讀 loader、API route 與測試。
+- 新增 `GET /api/v1/agents/agent-telegram-receipt-approval-package`，只回傳 committed approval package；不寫 Gateway queue、不呼叫 Bot API、不改 receiver route、不發 Telegram、不啟動 runtime worker。
+- Snapshot 固定 `12` 個 receipt 批准包必填欄位、`8` 個 forbidden fields、`4` 個 receipt gates、`3` 條 receipt lanes、retry contract、redaction contract 與 live receipt total `0`。
+- `agent-interaction-learning-proof` 與 `agent-proactive-operations-contract` 已同步 current / next：`P2-403E -> P2-403F`；三 Agent 互動學習證據完成度 `72% -> 80%`。
+- Governance automation inventory 頁新增 Telegram Receipt Approval Package 區塊，顯示 KPI、批准包欄位、禁止欄位、truth flags、receipt gates、receipt lanes 與 live receipt count，仍明確顯示 live receipt total 為 `0`。
+- MASTER §3.2.1c / §3.2.1d、AI Agent 自動化工作清單、互動學習證據報告與主動營運報告已同步 P2-403E；下一步為 `P2-403F` owner-approved learning writeback dry-run。
+
+**本地驗證**：
+
+- JSON parse：P2-403E schema / snapshot、P2-403 interaction snapshot、P2-403 proactive snapshot、`zh-TW.json`、`en.json` 通過。
+- `python3 -m py_compile apps/api/src/services/ai_agent_telegram_receipt_approval_package.py apps/api/src/api/v1/agents.py`：通過。
+- API/service pytest：P2-403E Telegram receipt approval package、P2-403D learning writeback approval package、P2-403 interaction proof、P2-403 proactive contract 目標測試 `21 passed`。
+- `pnpm --filter @awoooi/web typecheck`：通過。
+- `source-control-owner-response-guard.py`、`security-mirror-progress-guard.py`、`doc-secrets-sanity-check.py docs .gitea`、`git diff --check` 通過。
+
+**完成度同步**：
+
+- P2-403E Telegram receipt approval package：本地 `100%`。
+- 三 Agent 主動溝通、學習與成長證據：`80%`。
+- P2-403F owner-approved learning writeback dry-run：`0%`，尚未開始。
+- live queued、delivered、acknowledged、failed、retry、Telegram send、Gateway queue write、runtime worker：全部仍為 `0 / false`。
+- IwoooS 整體仍維持 `64%`；active runtime gate 仍 `0`。
+
+**邊界**：本段只做只讀批准包、snapshot、schema、API、測試、前端可視化與文件；未寫 Gateway queue、未呼叫 Telegram Bot API、未改 receiver route、未寫 delivery receipt、未啟動 retry worker、未發 Telegram、未 SSH、未 active scan、未收 secret value、未開 runtime gate、未建立任何 P2-403E 內容區執行按鈕。
+
 ## 2026-06-11｜IwoooS P1-1 Docker / systemd repo-only 清冊
 
 **背景**：統帥要求所有重要配置都要被資安控管，且 Nginx 之外的 Docker Compose、systemd、repair-bot、Ansible service role 與 host config backup 也不能落在鬆散口頭規範。本段延續「先建立框架、只讀證據、低摩擦流程，再階段性收攏」原則，只做 repo-only 清冊，不碰 live host。
diff --git a/docs/ai/AI_AGENT_AUTOMATION_WORKLIST_2026-06-04.md b/docs/ai/AI_AGENT_AUTOMATION_WORKLIST_2026-06-04.md
index 0dc66a572..772f17e15 100644
--- a/docs/ai/AI_AGENT_AUTOMATION_WORKLIST_2026-06-04.md
+++ b/docs/ai/AI_AGENT_AUTOMATION_WORKLIST_2026-06-04.md
@@ -12,7 +12,7 @@
 | Nemotron 實際整合應用 | 30% | 完整回放前仍被關卡擋下 | `blocked_needs_evidence`，下一關是 `refresh_source_evidence_then_5_record_smoke_only` |
 | 工具 / 服務 / 套件 AI 自動化 | 92% | P0 已完成；P1 服務 / runtime / 監控 / provider / service health / 備份 / DR / 套件與供應鏈只讀基線已完成；P1-007 失敗限定通知合約與前端 redaction 合約已完成；下一主線是 P2-004 依賴 / 供應鏈漂移監控 | 狀態分類、盤點 schema、權限矩陣、靜態盤點種子、只讀 API、UI 骨架、驗證、自動化待辦 schema / 快照 / API / 分組 UI、Backup / DR 目標盤點、準備度矩陣、備份通知政策、Backup / DR 證據 UI、復原演練批准包模板、異地 / escrow 準備度狀態、任務批准邊界、確定性進度彙總、Python 套件 / 供應鏈只讀基線、JS pnpm/npm 只讀基線、Docker build surface 只讀基線、CVE / license / drift 嚴重度政策、定期依賴漂移與外部資料來源檢查設計、依賴升級批准包模板、runtime_surface_inventory_v1 schema / snapshot / API / UI、gitea_workflow_runner_health_v1 schema / snapshot / API / UI、observability_contract_matrix_v1 schema / snapshot / API / UI、ai_provider_route_matrix_v1 schema / snapshot / API / UI、service_health_gap_matrix_v1 schema / snapshot / API / UI、service health evidence cards UI、service_health_failure_notification_policy_v1 schema / snapshot / API / UI 已完成 |
 | OpenClaw / Hermes / NemoTron 佈建布局 | 45% | P1-401 / P1-402 已完成；仍是只讀 layout 與治理頁顯示，不是 runtime deploy | `ai_agent_deployment_layout_v1` schema、`ai_agent_deployment_layout_2026-06-11.json`、`GET /api/v1/agents/agent-deployment-layout`、治理頁自動化盤點 UI、`AI_AGENT_DEPLOYMENT_LAYOUT_2026-06-11.md` |
-| OpenClaw / Hermes / NemoTron 主動溝通、學習與成長證據 | 72% | P2-401A 已完成只讀 contract；P2-403A 已完成互動 / 接手 / 學習 / 成長證據面板；P2-403B 已完成 AgentSession / Redis Streams live read model gate；P2-403C 已完成 Redis Streams consumer group dry-run、handoff envelope、ack / dead-letter / replay gate；P2-403D 已完成 learning writeback approval package。runtime worker、DB migration、production Redis consumer group、Telegram 實發、KM / PlayBook trust / timeline / replay score 寫入、SDK / 付費服務仍未開 gate | `ai_agent_communication_learning_contract_v1`、`ai_agent_interaction_learning_proof_v1`、`ai_agent_live_read_model_gate_v1`、`ai_agent_redis_dry_run_gate_v1`、`ai_agent_learning_writeback_approval_package_v1`、`GET /api/v1/agents/agent-communication-learning-contract`、`GET /api/v1/agents/agent-interaction-learning-proof`、`GET /api/v1/agents/agent-live-read-model-gate`、`GET /api/v1/agents/agent-redis-dry-run-gate`、`GET /api/v1/agents/agent-learning-writeback-approval-package`、`/zh-TW/governance?tab=automation-inventory`、MASTER §3.2.1b / §3.2.1d / §3.4.3 |
+| OpenClaw / Hermes / NemoTron 主動溝通、學習與成長證據 | 80% | P2-401A 已完成只讀 contract；P2-403A 已完成互動 / 接手 / 學習 / 成長證據面板；P2-403B 已完成 AgentSession / Redis Streams live read model gate；P2-403C 已完成 Redis Streams consumer group dry-run、handoff envelope、ack / dead-letter / replay gate；P2-403D 已完成 learning writeback approval package；P2-403E 已完成 Telegram receipt approval package。runtime worker、DB migration、production Redis consumer group、Telegram 實發、KM / PlayBook trust / timeline / replay score 寫入、SDK / 付費服務仍未開 gate | `ai_agent_communication_learning_contract_v1`、`ai_agent_interaction_learning_proof_v1`、`ai_agent_live_read_model_gate_v1`、`ai_agent_redis_dry_run_gate_v1`、`ai_agent_learning_writeback_approval_package_v1`、`ai_agent_telegram_receipt_approval_package_v1`、`GET /api/v1/agents/agent-communication-learning-contract`、`GET /api/v1/agents/agent-interaction-learning-proof`、`GET /api/v1/agents/agent-live-read-model-gate`、`GET /api/v1/agents/agent-redis-dry-run-gate`、`GET /api/v1/agents/agent-learning-writeback-approval-package`、`GET /api/v1/agents/agent-telegram-receipt-approval-package`、`/zh-TW/governance?tab=automation-inventory`、MASTER §3.2.1b / §3.2.1d / §3.4.3 |
 | AI Agent 主動營運委派與版本生命週期 | 100% | P2-402A / P2-402B / P2-402C / P2-402D / P2-402E / P2-402F / P2-402G 已完成；已建立 repo-only 版本新鮮度快照、工具採用批准包、Telegram action-required digest policy、Gitea PR 草案 lane、host / K3s / stateful 版本只讀盤點、API 與 governance UI。定期排程、外部版本查詢、工具安裝、CI 變更、套件升級、主機更新、container pull、實際 PR creation、auto merge、Telegram 實發、SSH、kubectl、重啟仍未開 gate | `ai_agent_proactive_operations_contract_v1`、`ai_agent_version_freshness_snapshot_v1`、`ai_agent_tool_adoption_approval_package_v1`、`ai_agent_telegram_action_required_digest_policy_v1`、`ai_agent_gitea_pr_draft_lane_v1`、`ai_agent_host_stateful_version_inventory_v1`、`GET /api/v1/agents/agent-proactive-operations-contract`、`GET /api/v1/agents/agent-version-freshness-snapshot`、`GET /api/v1/agents/agent-tool-adoption-approval-package`、`GET /api/v1/agents/agent-telegram-action-required-digest-policy`、`GET /api/v1/agents/agent-gitea-pr-draft-lane`、`GET /api/v1/agents/agent-host-stateful-version-inventory`、`/zh-TW/governance?tab=automation-inventory`、MASTER §3.2.1c |
 | 本工作清單與分析報告 | 100% | 已完成 | 本 MD 文件 |
 
@@ -20,9 +20,9 @@ AI Agent 自動化工作包目前完成度：**92%**。本工作清單文件本
 
 三 Agent 佈建布局目前完成度：**45%**。第一波已完成只讀 schema / snapshot / API / 測試 / 報告，第二波已接入治理頁自動化盤點 UI；正式 runtime 佈署、Telegram E2E 發送與 AgentSession 工作流仍需逐項 gate。
 
-三 Agent 主動溝通、學習與成長證據目前完成度：**72%**。已完成只讀契約、互動 / 接手 / 學習 / 成長證據面板、P2-403B live read model gate、P2-403C Redis dry-run gate、P2-403D learning writeback approval package、API、治理頁顯示、測試與 MASTER 同步；目前 live AgentSession、Agent message、handoff、learning write、Telegram receipt 仍全部為 `0`，下一步依優先順序推 `P2-403E` Telegram receipt approval package，但在批准前仍不得啟動 runtime loop。
+三 Agent 主動溝通、學習與成長證據目前完成度：**80%**。已完成只讀契約、互動 / 接手 / 學習 / 成長證據面板、P2-403B live read model gate、P2-403C Redis dry-run gate、P2-403D learning writeback approval package、P2-403E Telegram receipt approval package、API、治理頁顯示、測試與 MASTER 同步；目前 live AgentSession、Agent message、handoff、learning write、Telegram receipt 仍全部為 `0`，下一步依優先順序推 `P2-403F` owner-approved learning writeback dry-run，但在批准前仍不得啟動 runtime loop。
 
-AI Agent 主動營運委派與版本生命週期目前完成度：**100%**。已完成 12 類版本 domain、24 類可委派能力、5 種 cadence、8 類 MCP、4 類 RAG memory、只讀 API、`P2-402B` repo-only daily version freshness snapshot、`P2-402C` Renovate / OSV-Scanner / Trivy / Syft / Grype 工具採用批准包、`P2-402D` Telegram action-required digest policy、`P2-402E` Gitea PR 草案 lane、`P2-402F` host OS / K3s / stateful services 版本只讀盤點，以及 `P2-402G` governance UI 顯示可委派能力；`P2-403A`、`P2-403B`、`P2-403C` 與 `P2-403D` 已先補互動、學習證據面、live read model gate、Redis dry-run gate 與 learning writeback approval package。下一步是 `P2-403E` Telegram receipt approval package，外部 registry / package source / host probe / SSH / kubectl / 工具安裝 / CI 變更 / 實際 PR creation / Telegram 實發仍需 gate。
+AI Agent 主動營運委派與版本生命週期目前完成度：**100%**。已完成 12 類版本 domain、24 類可委派能力、5 種 cadence、8 類 MCP、4 類 RAG memory、只讀 API、`P2-402B` repo-only daily version freshness snapshot、`P2-402C` Renovate / OSV-Scanner / Trivy / Syft / Grype 工具採用批准包、`P2-402D` Telegram action-required digest policy、`P2-402E` Gitea PR 草案 lane、`P2-402F` host OS / K3s / stateful services 版本只讀盤點，以及 `P2-402G` governance UI 顯示可委派能力；`P2-403A`、`P2-403B`、`P2-403C`、`P2-403D` 與 `P2-403E` 已先補互動、學習證據面、live read model gate、Redis dry-run gate、learning writeback approval package 與 Telegram receipt approval package。下一步是 `P2-403F` owner-approved learning writeback dry-run，外部 registry / package source / host probe / SSH / kubectl / 工具安裝 / CI 變更 / 實際 PR creation / Telegram 實發仍需 gate。
 
 完成度計算模型：
 
@@ -76,7 +76,7 @@ AI Agent 主動營運委派與版本生命週期目前完成度：**100%**。已
 | AgentSession / Redis Streams runtime loop | 待辦：P2-401，需 migration / worker gate |
 | 主動溝通與學習契約 | 已完成：P2-401A，`ai_agent_communication_learning_contract_v1` + `GET /api/v1/agents/agent-communication-learning-contract` |
 | 主動營運委派與版本生命週期契約 | 已完成：P2-402A，`ai_agent_proactive_operations_contract_v1` + `GET /api/v1/agents/agent-proactive-operations-contract` |
-| 互動、接手、學習與成長證據面 | 已完成：P2-403A + P2-403B + P2-403C + P2-403D，`ai_agent_interaction_learning_proof_v1`、`ai_agent_live_read_model_gate_v1`、`ai_agent_redis_dry_run_gate_v1`、`GET /api/v1/agents/agent-interaction-learning-proof`、`GET /api/v1/agents/agent-live-read-model-gate`、`GET /api/v1/agents/agent-redis-dry-run-gate`、`GET /api/v1/agents/agent-learning-writeback-approval-package` + governance UI；live count 仍為 0 |
+| 互動、接手、學習與成長證據面 | 已完成：P2-403A + P2-403B + P2-403C + P2-403D + P2-403E，`ai_agent_interaction_learning_proof_v1`、`ai_agent_live_read_model_gate_v1`、`ai_agent_redis_dry_run_gate_v1`、`GET /api/v1/agents/agent-interaction-learning-proof`、`GET /api/v1/agents/agent-live-read-model-gate`、`GET /api/v1/agents/agent-redis-dry-run-gate`、`GET /api/v1/agents/agent-learning-writeback-approval-package`、`GET /api/v1/agents/agent-telegram-receipt-approval-package` + governance UI；live count 仍為 0 |
 | NemoTron 3 Ultra smoke | 待辦：P3-401，需 source refresh + cost/data approval |
 
 ## 4. 工作流總覽
@@ -963,6 +963,7 @@ UI：
 | P2-403B | 完成 | 100 | OpenClaw + Hermes | AgentSession / Redis Streams live read model 與 worker gate planning | `ai_agent_live_read_model_gate_v1` / snapshot / 只讀 API / governance UI；既有 `agent_sessions` safe fields、Redis envelope、worker gate、rollback plan、無寫入 smoke | DB / Redis approval；live DB query / Redis consumer / worker / Telegram / learning writeback 仍未啟用 |
 | P2-403C | 完成 | 100 | Hermes + OpenClaw + Nemotron | Redis Streams consumer group dry-run、handoff envelope、ack / dead-letter / replay gate | `ai_agent_redis_dry_run_gate_v1` / snapshot / 只讀 API / governance UI；fixture-only dry-run、handoff 必填欄位、idempotency、redacted evidence、ack / dead-letter / replay preconditions | 不連 Redis、不建立 consumer group、不 XADD / XREADGROUP / XACK、不寫 dead-letter、不 runtime replay、不發 Telegram、不 learning writeback |
 | P2-403D | 完成 | 100 | Hermes + OpenClaw + Nemotron | Learning writeback approval package、KM / PlayBook trust / timeline learning / replay score gate | `ai_agent_learning_writeback_approval_package_v1` / snapshot / 只讀 API / governance UI；owner review、rollback、redaction、blocked write actions | 不寫 KM、不更新 PlayBook trust、不寫 timeline learning、不寫 replay score、不發 Telegram、不啟動 runtime worker |
+| P2-403E | 完成 | 100 | OpenClaw + Hermes | Telegram receipt approval package、queue / delivery / ack / failure / retry gate | `ai_agent_telegram_receipt_approval_package_v1` / snapshot / 只讀 API / governance UI；owner review、delivery correlation、retry、redaction、blocked runtime actions | 不寫 Gateway queue、不呼叫 Bot API、不改 receiver route、不發 Telegram、不啟動 receipt worker |
 | P2-101 | 待辦 | 0 | OpenClaw | 定義操作類別權限模型 | 操作政策 schema | HITL 關卡 |
 | P2-102 | 待辦 | 0 | OpenClaw | 所有候選操作都要有 dry-run 證據 | dry-run 合約 | 不直接 apply |
 | P2-103 | 待辦 | 0 | Hermes | 把任務結果接回 KM / LOGBOOK / 稽核軌跡 | 證據寫入器 | 不洩漏 secret |
diff --git a/docs/ai/AI_AGENT_INTERACTION_LEARNING_PROOF_2026-06-11.md b/docs/ai/AI_AGENT_INTERACTION_LEARNING_PROOF_2026-06-11.md
index 0e87fe230..d8c845256 100644
--- a/docs/ai/AI_AGENT_INTERACTION_LEARNING_PROOF_2026-06-11.md
+++ b/docs/ai/AI_AGENT_INTERACTION_LEARNING_PROOF_2026-06-11.md
@@ -1,12 +1,12 @@
 # AI Agent 互動、溝通、學習與成長證據報告
 
 > 日期：2026-06-11（台北時間）
-> 文件定位：P2-403A 證據面 + P2-403B AgentSession / Redis Streams live read model gate + P2-403C Redis dry-run gate + P2-403D learning writeback approval package、API、治理頁 UI 與後續 runtime gate 分析。
+> 文件定位：P2-403A 證據面 + P2-403B AgentSession / Redis Streams live read model gate + P2-403C Redis dry-run gate + P2-403D learning writeback approval package + P2-403E Telegram receipt approval package、API、治理頁 UI 與後續 runtime gate 分析。
 > 事實邊界：本波只建立可見證據面與 read model gate，不啟動 runtime worker、不建立 DB migration、不開 Redis consumer group、不發 Telegram、不顯示工作視窗對話內容。
 
 ## 1. 結論
 
-已完成 P2-403A、P2-403B、P2-403C 與 P2-403D：讓統帥能在治理頁看到 OpenClaw / Hermes / NemoTron 的互動、接手、學習與成長是否真的有證據，並看到 live read model、Redis dry-run、handoff envelope、ack / dead-letter / replay、learning writeback approval 下一步要通過哪些 gate。
+已完成 P2-403A、P2-403B、P2-403C、P2-403D 與 P2-403E：讓統帥能在治理頁看到 OpenClaw / Hermes / NemoTron 的互動、接手、學習與成長是否真的有證據，並看到 live read model、Redis dry-run、handoff envelope、ack / dead-letter / replay、learning writeback approval、Telegram receipt approval 下一步要通過哪些 gate。
 
 目前真相：
 
@@ -51,24 +51,24 @@
 | 產物 | 內容 |
 |---|---|
 | `docs/schemas/ai_agent_interaction_learning_proof_v1.schema.json` | 強制 live flags / counts / Telegram / transcript / 私有推理維持安全邊界 |
-| `docs/evaluations/ai_agent_interaction_learning_proof_2026-06-11.json` | P2-403A + P2-403B + P2-403C + P2-403D committed snapshot，完成度 `72%`，live count 全為 `0` |
+| `docs/evaluations/ai_agent_interaction_learning_proof_2026-06-11.json` | P2-403A + P2-403B + P2-403C + P2-403D + P2-403E committed snapshot，完成度 `80%`，live count 全為 `0` |
 | `docs/schemas/ai_agent_live_read_model_gate_v1.schema.json` | 強制 DB / Redis / worker / Telegram / learning writeback gate 維持未批准 |
 | `docs/evaluations/ai_agent_live_read_model_gate_2026-06-11.json` | P2-403B committed snapshot，完成度 `55%`，live count 全為 `0` |
 | `docs/evaluations/ai_agent_redis_dry_run_gate_2026-06-11.json` | P2-403C committed snapshot，完成度 `65%`，live count 全為 `0` |
 | `docs/evaluations/ai_agent_learning_writeback_approval_package_2026-06-11.json` | P2-403D committed snapshot，完成度 `72%`，KM / PlayBook trust / timeline / replay score live write count 全為 `0` |
+| `docs/evaluations/ai_agent_telegram_receipt_approval_package_2026-06-11.json` | P2-403E committed snapshot，完成度 `80%`，queued / delivered / acknowledged / failed / retry live count 全為 `0` |
 | `apps/api/src/services/ai_agent_interaction_learning_proof.py` | 只讀 loader 與安全驗證 |
 | `apps/api/src/services/ai_agent_live_read_model_gate.py` | P2-403B 只讀 loader；拒絕 live DB query、Redis consumer、unsafe fields、Telegram 與 writeback |
 | `GET /api/v1/agents/agent-interaction-learning-proof` | 只讀 API，不啟動 worker、不碰 Redis / DB runtime、不發 Telegram |
 | `GET /api/v1/agents/agent-live-read-model-gate` | 只讀 API，不連 DB、不讀寫 Redis、不發 Telegram |
-| governance UI | 新增證據階梯、目前真相、P2-403B live read gate、P2-403C Redis dry-run gate、P2-403D learning writeback approval package、Agent lane、可觀測訊號、runtime gates、前端 redaction |
+| governance UI | 新增證據階梯、目前真相、P2-403B live read gate、P2-403C Redis dry-run gate、P2-403D learning writeback approval package、P2-403E Telegram receipt approval package、Agent lane、可觀測訊號、runtime gates、前端 redaction |
 
 ## 5. 後續優先順序
 
 | 優先 | ID | 工作 | gate |
 |---:|---|---|---|
-| 1 | P2-403E | Telegram gateway dry-run、E2E 送達與 receipt 顯示 | Telegram E2E approval |
-| 2 | P2-403F | owner-approved learning writeback dry-run、KM / PlayBook trust / replay score 趨勢 | writeback approval |
-| 3 | P2-403G | 成長趨勢週報與 operator feedback applied 指標 | trend evidence |
+| 1 | P2-403F | owner-approved learning writeback dry-run、KM / PlayBook trust / replay score 趨勢 | writeback approval |
+| 2 | P2-403G | 成長趨勢週報與 operator feedback applied 指標 | trend evidence |
 
 ## 6. 紅線
 
diff --git a/docs/ai/AI_AGENT_PROACTIVE_OPERATIONS_2026-06-11.md b/docs/ai/AI_AGENT_PROACTIVE_OPERATIONS_2026-06-11.md
index 026a825b4..f703d9955 100644
--- a/docs/ai/AI_AGENT_PROACTIVE_OPERATIONS_2026-06-11.md
+++ b/docs/ai/AI_AGENT_PROACTIVE_OPERATIONS_2026-06-11.md
@@ -1,7 +1,7 @@
 # AI Agent 主動營運委派與版本生命週期分析報告
 
 > 日期：2026-06-11（台北時間）
-> 文件定位：P2-402A / P2-402B / P2-402C / P2-402D / P2-402E / P2-402F / P2-402G / P2-403A / P2-403B / P2-403C / P2-403D 只讀契約與治理 UI 摘要。權威細節以 MASTER §3.2.1c / §3.2.1d、`ai_agent_proactive_operations_contract_v1`、`ai_agent_interaction_learning_proof_v1`、`ai_agent_live_read_model_gate_v1`、`ai_agent_redis_dry_run_gate_v1`、`ai_agent_learning_writeback_approval_package_v1`、`ai_agent_version_freshness_snapshot_v1`、`ai_agent_tool_adoption_approval_package_v1`、`ai_agent_telegram_action_required_digest_policy_v1`、`ai_agent_gitea_pr_draft_lane_v1` 與 `ai_agent_host_stateful_version_inventory_v1` 為準。
+> 文件定位：P2-402A / P2-402B / P2-402C / P2-402D / P2-402E / P2-402F / P2-402G / P2-403A / P2-403B / P2-403C / P2-403D / P2-403E 只讀契約與治理 UI 摘要。權威細節以 MASTER §3.2.1c / §3.2.1d、`ai_agent_proactive_operations_contract_v1`、`ai_agent_interaction_learning_proof_v1`、`ai_agent_live_read_model_gate_v1`、`ai_agent_redis_dry_run_gate_v1`、`ai_agent_learning_writeback_approval_package_v1`、`ai_agent_telegram_receipt_approval_package_v1`、`ai_agent_version_freshness_snapshot_v1`、`ai_agent_tool_adoption_approval_package_v1`、`ai_agent_telegram_action_required_digest_policy_v1`、`ai_agent_gitea_pr_draft_lane_v1` 與 `ai_agent_host_stateful_version_inventory_v1` 為準。
 
 ## 1. 本波完成度
 
@@ -17,7 +17,7 @@
 | Agent 互動與學習證據面 | 100% | P2-403A 已把目前真相、證據階梯、三 Agent lane、可觀測訊號、runtime gates 與 redaction policy 接入治理頁；live counts 全為 `0` |
 | Redis dry-run gate | 100% | P2-403C 已把 consumer group dry-run、handoff envelope、ack / dead-letter / replay idempotency 與治理頁顯示接入；live counts 全為 `0` |
 | Learning writeback approval package | 100% | P2-403D 已把 KM / PlayBook trust / timeline learning / replay score 的 owner review、rollback、redaction 與 blocked write actions 接入；live writes 全為 `0` |
-| 整體主動營運與版本生命週期 | 100% | P2-402A~G、P2-403A、P2-403B、P2-403C 與 P2-403D 只讀契約、snapshot、API、測試與治理 UI 已完成；runtime 排程、工具安裝、CI 變更、實際 PR 建立與更新、host probe、升級、重啟、learning write、Telegram receipt 仍未開 gate |
+| 整體主動營運與版本生命週期 | 100% | P2-402A~G、P2-403A、P2-403B、P2-403C、P2-403D 與 P2-403E 只讀契約、snapshot、API、測試與治理 UI 已完成；runtime 排程、工具安裝、CI 變更、實際 PR 建立與更新、host probe、升級、重啟、learning write、Telegram receipt 仍未開 gate |
 
 ## 2. 可交給 AI Agent 的工作分類
 
@@ -55,7 +55,7 @@
 | `docs/evaluations/ai_agent_host_stateful_version_inventory_2026-06-11.json` | 5 台主機、2 個 K3s 節點、12 個 stateful / ops 服務、6 個只讀 probe 步驟、maintenance window approval package |
 | `GET /api/v1/agents/agent-host-stateful-version-inventory` | 只讀 API；不 SSH、不 kubectl、不升級、不 drain、不 reboot、不重啟 stateful、不發 Telegram |
 | `docs/schemas/ai_agent_interaction_learning_proof_v1.schema.json` | P2-403A Agent 互動、接手、學習、成長與 Telegram receipt 證據面 schema |
-| `docs/evaluations/ai_agent_interaction_learning_proof_2026-06-11.json` | 證據階梯、live truth、三 Agent lane、可觀測訊號、runtime gates；P2-403D 後完成度 `72%`，live counts 全部 `0` |
+| `docs/evaluations/ai_agent_interaction_learning_proof_2026-06-11.json` | 證據階梯、live truth、三 Agent lane、可觀測訊號、runtime gates；P2-403E 後完成度 `80%`，live counts 全部 `0` |
 | `GET /api/v1/agents/agent-interaction-learning-proof` | 只讀 API；不啟動 worker、不開 Redis consumer、不 DB migration、不發 Telegram、不顯示工作視窗對話 |
 | `docs/schemas/ai_agent_live_read_model_gate_v1.schema.json` | P2-403B AgentSession / Redis Streams live read model gate schema |
 | `docs/evaluations/ai_agent_live_read_model_gate_2026-06-11.json` | AgentSession safe fields、Redis envelope、worker gate、rollback plan、no-write smoke、frontend redaction；live counts 全部 `0` |
@@ -70,7 +70,7 @@
 | Dockerfiles | Hermes | action_required | P2-402C 評估 Trivy / Syft / Grype / Docker Scout 採用，不 build / pull |
 | Committed evaluation snapshots | Hermes | action_required | 將 2026-06-04~06-05 舊基線列入 stale refs，不假裝是外部最新 |
 | Agent / model governance snapshots | NemoTron | action_required | 只做離線 freshness note，不進 shadow / canary / production route |
-| K8s / Gitea / observability / Ansible / backup / web surfaces | OpenClaw + Hermes | baseline_ready / planned_next | 下一步進入 P2-403E Telegram receipt approval package；現階段仍只讀 |
+| K8s / Gitea / observability / Ansible / backup / web surfaces | OpenClaw + Hermes | baseline_ready / planned_next | 下一步進入 P2-403F owner-approved learning writeback dry-run；現階段仍只讀 |
 
 本波只把「每天要看哪些 repo 內版本來源」定義成可驗證資料面。每日排程、外部 registry 查詢、主機/K3s live probe、Telegram digest 與 Gitea PR lane 都仍是下一階段 gate。
 
@@ -143,6 +143,7 @@ P2-402G 的重點是把前面六個資料契約接回治理頁，讓統帥可以
 | P2-403B | 5 | live AgentSession / Redis read model：safe fields、Redis envelope、worker gate、rollback、no-write smoke | 已完成，只讀；live DB query / Redis consumer / worker 未啟用 |
 | P2-403C | 6 | Redis Streams consumer group dry-run、handoff envelope、ack / dead letter / replay | 已完成，只讀；production Redis consumer / worker / ACK / replay 未啟用 |
 | P2-403D | 7 | Learning writeback approval package、資料保留、錯誤補償、人工回饋回滾 | 已完成，只讀；KM / PlayBook trust / timeline learning / replay score 寫入未啟用 |
+| P2-403E | 8 | Telegram receipt approval package、queue / delivery / ack / failure / retry | 已完成，只讀；Gateway queue / Bot API / delivery receipt / retry worker 未啟用 |
 
 ## 11. 仍維持 false 的安全邊界
 
diff --git a/docs/evaluations/ai_agent_interaction_learning_proof_2026-06-11.json b/docs/evaluations/ai_agent_interaction_learning_proof_2026-06-11.json
index e68564b8e..4e20b3f9d 100644
--- a/docs/evaluations/ai_agent_interaction_learning_proof_2026-06-11.json
+++ b/docs/evaluations/ai_agent_interaction_learning_proof_2026-06-11.json
@@ -2,13 +2,13 @@
   "schema_version": "ai_agent_interaction_learning_proof_v1",
   "generated_at": "2026-06-11T23:20:00+08:00",
   "program_status": {
-    "overall_completion_percent": 72,
+    "overall_completion_percent": 80,
     "current_priority": "P2",
-    "current_task_id": "P2-403D",
-    "next_task_id": "P2-403E",
+    "current_task_id": "P2-403E",
+    "next_task_id": "P2-403F",
     "read_only_mode": true,
     "runtime_authority": "proof_surface_only_no_live_worker",
-    "status_note": "P2-403D 已把 KM、PlayBook trust、timeline learning 與 replay score 的 learning writeback approval package 接入證據鏈；live learning write、PlayBook trust update、KM update 與 Telegram receipt 仍未開 gate。"
+    "status_note": "P2-403E 已把 Telegram receipt approval package 接入；live AgentSession、message、handoff、learning write、Telegram receipt 仍全部為 0。"
   },
   "live_truth": {
     "runtime_loop_enabled": false,
@@ -81,11 +81,11 @@
     {
       "level_id": "telegram_receipts",
       "display_name": "Telegram 摘要收據",
-      "status": "live_pending",
+      "status": "approval_required",
       "completion_percent": 0,
       "operator_meaning": "啟用後 Telegram 只推送需處置、需批准或失敗摘要，治理頁保留已排隊/已送達/已確認收據。",
       "source_of_truth": "telegram_gateway_queue + alert_operation_log",
-      "next_gate": "P2-403E Telegram receipt approval package。"
+      "next_gate": "P2-403E Telegram receipt approval package 已接入；實際 queue write、send、delivered、ack 與 retry 仍需 owner approval。"
     }
   ],
   "agent_lanes": [
@@ -368,9 +368,7 @@
   "rollups": {
     "proof_level_count": 7,
     "contract_ready_level_count": 5,
-    "live_pending_level_ids": [
-      "telegram_receipts"
-    ],
+    "live_pending_level_ids": [],
     "signal_count": 9,
     "live_signal_count": 0,
     "operator_surface_count": 5,
diff --git a/docs/evaluations/ai_agent_proactive_operations_contract_2026-06-11.json b/docs/evaluations/ai_agent_proactive_operations_contract_2026-06-11.json
index 0e380e2d2..88d296b8e 100644
--- a/docs/evaluations/ai_agent_proactive_operations_contract_2026-06-11.json
+++ b/docs/evaluations/ai_agent_proactive_operations_contract_2026-06-11.json
@@ -4,8 +4,8 @@
   "program_status": {
     "overall_completion_percent": 100,
     "current_priority": "P2",
-    "current_task_id": "P2-403D",
-    "next_task_id": "P2-403E",
+    "current_task_id": "P2-403E",
+    "next_task_id": "P2-403F",
     "read_only_mode": true,
     "runtime_authority": "contract_only_no_version_or_runtime_update",
     "status_note": "P2-403D 已把 learning writeback approval package 接入治理證據；live AgentSession / Redis consumer / runtime worker / learning write / Telegram receipt 目前全為 0，下一步是 P2-403E Telegram receipt approval package。"
@@ -855,6 +855,21 @@
       "owner_agent": "Hermes + OpenClaw + Nemotron",
       "summary": "建立 learning writeback approval package；固定 KM、PlayBook trust、timeline learning 與 replay score 回寫前的 owner review、redaction、rollback 與 blocked write actions。",
       "next_gate": "P2-403E_telegram_receipt_approval_package"
+    },
+    {
+      "task_id": "P2-403E",
+      "sequence": 8,
+      "display_name": "Telegram receipt approval package",
+      "status": "done",
+      "owner_agent": "openclaw",
+      "completion_percent": 100,
+      "runtime_authority": "approval_package_only_no_telegram_send",
+      "blocked_runtime_actions": [
+        "telegram_gateway_queue_write",
+        "telegram_direct_bot_api_call",
+        "telegram_delivery_receipt_write",
+        "telegram_retry_worker_start"
+      ]
     }
   ],
   "approval_boundaries": {
@@ -875,7 +890,7 @@
     "cadence_count": 5,
     "mcp_tool_count": 8,
     "rag_memory_count": 4,
-    "rollout_task_count": 11,
+    "rollout_task_count": 12,
     "auto_execute_allowed_count": 0,
     "approval_required_capability_count": 23,
     "blocked_update_domain_ids": [
diff --git a/docs/evaluations/ai_agent_telegram_receipt_approval_package_2026-06-11.json b/docs/evaluations/ai_agent_telegram_receipt_approval_package_2026-06-11.json
new file mode 100644
index 000000000..1f16011cf
--- /dev/null
+++ b/docs/evaluations/ai_agent_telegram_receipt_approval_package_2026-06-11.json
@@ -0,0 +1,179 @@
+{
+  "schema_version": "ai_agent_telegram_receipt_approval_package_v1",
+  "generated_at": "2026-06-11T23:59:50+08:00",
+  "program_status": {
+    "overall_completion_percent": 80,
+    "current_priority": "P2",
+    "current_task_id": "P2-403E",
+    "next_task_id": "P2-403F",
+    "read_only_mode": true,
+    "runtime_authority": "approval_package_only_no_telegram_send",
+    "status_note": "P2-403E 已把 Telegram receipt、queue、delivery、ack、failure 與 retry 的批准包固定為只讀契約；尚未發送 Telegram、未寫 Gateway queue、未啟動 receipt worker。"
+  },
+  "source_refs": [
+    "docs/evaluations/ai_agent_learning_writeback_approval_package_2026-06-11.json",
+    "docs/evaluations/ai_agent_telegram_action_required_digest_policy_2026-06-11.json",
+    "docs/superpowers/specs/2026-04-15-MASTER-ai-autonomous-flywheel-v2.md"
+  ],
+  "telegram_truth": {
+    "telegram_send_allowed": false,
+    "gateway_queue_write_allowed": false,
+    "direct_bot_api_allowed": false,
+    "receiver_route_change_allowed": false,
+    "runtime_worker_allowed": false,
+    "live_queued_receipt_count": 0,
+    "live_delivered_receipt_count": 0,
+    "live_acknowledged_receipt_count": 0,
+    "live_failed_receipt_count": 0,
+    "live_retry_count": 0,
+    "truth_note": "目前只允許產生 Telegram receipt 批准包與前台只讀證據；所有 queue write、send、ack、retry 與 receiver route 變更仍為 0 / false。"
+  },
+  "receipt_package": {
+    "required_fields": [
+      "receipt_event_id",
+      "incident_id",
+      "source_stage",
+      "channel_policy",
+      "target_channel_alias",
+      "message_template_id",
+      "redacted_message_summary",
+      "delivery_correlation_id",
+      "retry_policy_ref",
+      "failure_fallback_ref",
+      "owner_review_required",
+      "created_at"
+    ],
+    "forbidden_fields": [
+      "telegram_bot_token",
+      "telegram_chat_id_raw",
+      "authorization_header",
+      "secret_value",
+      "raw_message_payload",
+      "conversation_transcript",
+      "private_reasoning",
+      "raw_tool_output"
+    ],
+    "owner_review_required": true,
+    "retry_policy_required": true,
+    "delivery_receipt_required": true,
+    "operator_meaning": "每個 Telegram receipt 候選都必須說清楚來源事件、要送到哪個 channel alias、使用哪個模板、如何關聯 delivery receipt、失敗怎麼補償；批准前不得寫 Gateway queue 或直接呼叫 Bot API。"
+  },
+  "receipt_gates": [
+    {
+      "gate_id": "gateway_queue_owner_gate",
+      "display_name": "Gateway queue owner gate",
+      "owner_agent": "openclaw",
+      "status": "approval_required",
+      "required_evidence": "channel policy、message template、delivery correlation id、redacted summary、owner reviewer。",
+      "blocked_runtime_action": "telegram_gateway_queue_write"
+    },
+    {
+      "gate_id": "delivery_receipt_gate",
+      "display_name": "Delivery receipt gate",
+      "owner_agent": "hermes",
+      "status": "approval_required",
+      "required_evidence": "queued / sent / delivered / acknowledged 狀態 schema、failure fallback 與 replay ref。",
+      "blocked_runtime_action": "telegram_delivery_receipt_write"
+    },
+    {
+      "gate_id": "retry_failure_gate",
+      "display_name": "Retry / failure compensation gate",
+      "owner_agent": "openclaw",
+      "status": "approval_required",
+      "required_evidence": "retry policy、dead-letter threshold、AwoooP fallback、no-success-spam proof。",
+      "blocked_runtime_action": "telegram_retry_worker_start"
+    },
+    {
+      "gate_id": "direct_bot_api_gate",
+      "display_name": "Direct Bot API ban gate",
+      "owner_agent": "hermes",
+      "status": "contract_ready",
+      "required_evidence": "direct Bot API caller 必須維持 blocked；所有通知只能走 Gateway contract。",
+      "blocked_runtime_action": "telegram_direct_bot_api_call"
+    }
+  ],
+  "receipt_lanes": [
+    {
+      "lane_id": "action_required_receipt",
+      "display_name": "Action-required receipt",
+      "target_surface": "telegram_gateway_queue",
+      "status": "approval_required",
+      "owner_agent": "openclaw",
+      "review_owner": "sre_owner",
+      "required_review": "owner 必須確認中高風險 action-required 訊息模板、去重、delivery correlation 與 fallback。"
+    },
+    {
+      "lane_id": "approval_decision_receipt",
+      "display_name": "Approval decision receipt",
+      "target_surface": "awooop_operator_console",
+      "status": "approval_required",
+      "owner_agent": "hermes",
+      "review_owner": "operator_owner",
+      "required_review": "owner 必須確認批准 / 拒絕 / no-action 結果能回到 AwoooP timeline，Telegram 只保留摘要。"
+    },
+    {
+      "lane_id": "failure_only_digest_receipt",
+      "display_name": "Failure-only digest receipt",
+      "target_surface": "telegram_failure_digest",
+      "status": "blocked_by_runtime_gate",
+      "owner_agent": "openclaw",
+      "review_owner": "sre_owner",
+      "required_review": "owner 必須確認成功不洗版、失敗才通知、dead-letter 可回查、retry 不重複轟炸。"
+    }
+  ],
+  "retry_contract": {
+    "retry_required": true,
+    "retry_steps": [
+      "每筆 receipt 必須有 delivery_correlation_id",
+      "queued / delivered / acknowledged / failed 狀態必須可回查",
+      "retry 必須受 dedupe key 與 dead-letter threshold 控制",
+      "成功 smoke 不即時通知，避免 Telegram 洗版",
+      "failure fallback 必須回寫 AwoooP timeline 的 receipt_failed 事件"
+    ]
+  },
+  "approval_boundaries": {
+    "telegram_send_allowed": false,
+    "gateway_queue_write_allowed": false,
+    "direct_bot_api_allowed": false,
+    "receiver_route_change_allowed": false,
+    "runtime_worker_allowed": false,
+    "secret_plaintext_allowed": false,
+    "success_spam_allowed": false
+  },
+  "display_redaction_contract": {
+    "redaction_required": true,
+    "raw_payload_display_allowed": false,
+    "private_reasoning_display_allowed": false,
+    "secret_value_display_allowed": false,
+    "allowed_frontend_content": [
+      "receipt lane",
+      "target surface",
+      "owner review status",
+      "required evidence",
+      "blocked runtime action",
+      "retry requirement"
+    ],
+    "forbidden_frontend_content": [
+      "Telegram token",
+      "raw chat id",
+      "authorization header",
+      "未脫敏 message payload",
+      "未核准內部細節",
+      "raw tool output"
+    ],
+    "frontend_display_policy": "治理頁只顯示 receipt lane、目標 surface、owner review、阻擋 runtime action 與 retry 要求；Telegram token、raw chat id、authorization header、未脫敏 payload、未核准內部細節與 raw tool output 不進前端。"
+  },
+  "rollups": {
+    "receipt_gate_count": 4,
+    "receipt_lane_count": 3,
+    "approval_required_gate_ids": [
+      "gateway_queue_owner_gate",
+      "delivery_receipt_gate",
+      "retry_failure_gate"
+    ],
+    "blocked_runtime_action_count": 4,
+    "required_field_count": 12,
+    "forbidden_field_count": 8,
+    "live_receipt_count_total": 0
+  }
+}
diff --git a/docs/schemas/ai_agent_telegram_receipt_approval_package_v1.schema.json b/docs/schemas/ai_agent_telegram_receipt_approval_package_v1.schema.json
new file mode 100644
index 000000000..d563e64f7
--- /dev/null
+++ b/docs/schemas/ai_agent_telegram_receipt_approval_package_v1.schema.json
@@ -0,0 +1,165 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://awoooi.wooo.work/schemas/ai_agent_telegram_receipt_approval_package_v1.schema.json",
+  "title": "AI Agent Telegram Receipt Approval Package",
+  "type": "object",
+  "required": [
+    "schema_version",
+    "generated_at",
+    "program_status",
+    "telegram_truth",
+    "receipt_package",
+    "receipt_gates",
+    "receipt_lanes",
+    "retry_contract",
+    "approval_boundaries",
+    "display_redaction_contract",
+    "rollups"
+  ],
+  "properties": {
+    "schema_version": {
+      "const": "ai_agent_telegram_receipt_approval_package_v1"
+    },
+    "generated_at": {
+      "type": "string"
+    },
+    "program_status": {
+      "type": "object",
+      "required": [
+        "overall_completion_percent",
+        "current_task_id",
+        "next_task_id",
+        "read_only_mode",
+        "runtime_authority"
+      ],
+      "properties": {
+        "overall_completion_percent": { "type": "integer" },
+        "current_priority": { "type": "string" },
+        "current_task_id": { "const": "P2-403E" },
+        "next_task_id": { "const": "P2-403F" },
+        "read_only_mode": { "const": true },
+        "runtime_authority": { "const": "approval_package_only_no_telegram_send" },
+        "status_note": { "type": "string" }
+      },
+      "additionalProperties": false
+    },
+    "telegram_truth": {
+      "type": "object",
+      "properties": {
+        "telegram_send_allowed": { "const": false },
+        "gateway_queue_write_allowed": { "const": false },
+        "direct_bot_api_allowed": { "const": false },
+        "receiver_route_change_allowed": { "const": false },
+        "runtime_worker_allowed": { "const": false },
+        "live_queued_receipt_count": { "const": 0 },
+        "live_delivered_receipt_count": { "const": 0 },
+        "live_acknowledged_receipt_count": { "const": 0 },
+        "live_failed_receipt_count": { "const": 0 },
+        "live_retry_count": { "const": 0 },
+        "truth_note": { "type": "string" }
+      },
+      "additionalProperties": false
+    },
+    "receipt_package": {
+      "type": "object",
+      "required": [
+        "required_fields",
+        "forbidden_fields",
+        "owner_review_required",
+        "retry_policy_required",
+        "delivery_receipt_required"
+      ],
+      "properties": {
+        "required_fields": { "type": "array", "items": { "type": "string" } },
+        "forbidden_fields": { "type": "array", "items": { "type": "string" } },
+        "owner_review_required": { "const": true },
+        "retry_policy_required": { "const": true },
+        "delivery_receipt_required": { "const": true },
+        "operator_meaning": { "type": "string" }
+      },
+      "additionalProperties": false
+    },
+    "receipt_gates": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "required": ["gate_id", "display_name", "owner_agent", "status", "required_evidence", "blocked_runtime_action"],
+        "properties": {
+          "gate_id": { "type": "string" },
+          "display_name": { "type": "string" },
+          "owner_agent": { "enum": ["openclaw", "hermes", "nemotron"] },
+          "status": { "type": "string" },
+          "required_evidence": { "type": "string" },
+          "blocked_runtime_action": { "type": "string" }
+        },
+        "additionalProperties": false
+      }
+    },
+    "receipt_lanes": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "required": ["lane_id", "display_name", "target_surface", "status", "owner_agent", "review_owner", "required_review"],
+        "properties": {
+          "lane_id": { "type": "string" },
+          "display_name": { "type": "string" },
+          "target_surface": { "type": "string" },
+          "status": { "type": "string" },
+          "owner_agent": { "enum": ["openclaw", "hermes", "nemotron"] },
+          "review_owner": { "type": "string" },
+          "required_review": { "type": "string" }
+        },
+        "additionalProperties": false
+      }
+    },
+    "retry_contract": {
+      "type": "object",
+      "required": ["retry_required", "retry_steps"],
+      "properties": {
+        "retry_required": { "const": true },
+        "retry_steps": { "type": "array", "items": { "type": "string" } }
+      },
+      "additionalProperties": false
+    },
+    "approval_boundaries": {
+      "type": "object",
+      "additionalProperties": { "const": false }
+    },
+    "display_redaction_contract": {
+      "type": "object",
+      "properties": {
+        "redaction_required": { "const": true },
+        "raw_payload_display_allowed": { "const": false },
+        "private_reasoning_display_allowed": { "const": false },
+        "secret_value_display_allowed": { "const": false },
+        "allowed_frontend_content": { "type": "array", "items": { "type": "string" } },
+        "forbidden_frontend_content": { "type": "array", "items": { "type": "string" } },
+        "frontend_display_policy": { "type": "string" }
+      },
+      "additionalProperties": false
+    },
+    "rollups": {
+      "type": "object",
+      "required": [
+        "receipt_gate_count",
+        "receipt_lane_count",
+        "approval_required_gate_ids",
+        "blocked_runtime_action_count",
+        "required_field_count",
+        "forbidden_field_count",
+        "live_receipt_count_total"
+      ],
+      "properties": {
+        "receipt_gate_count": { "type": "integer" },
+        "receipt_lane_count": { "type": "integer" },
+        "approval_required_gate_ids": { "type": "array", "items": { "type": "string" } },
+        "blocked_runtime_action_count": { "type": "integer" },
+        "required_field_count": { "type": "integer" },
+        "forbidden_field_count": { "type": "integer" },
+        "live_receipt_count_total": { "const": 0 }
+      },
+      "additionalProperties": false
+    }
+  },
+  "additionalProperties": false
+}
diff --git a/docs/superpowers/specs/2026-04-15-MASTER-ai-autonomous-flywheel-v2.md b/docs/superpowers/specs/2026-04-15-MASTER-ai-autonomous-flywheel-v2.md
index 14dc7ca70..458a8af57 100644
--- a/docs/superpowers/specs/2026-04-15-MASTER-ai-autonomous-flywheel-v2.md
+++ b/docs/superpowers/specs/2026-04-15-MASTER-ai-autonomous-flywheel-v2.md
@@ -634,7 +634,7 @@ Alert / Sentry / SigNoz / Gitea / Market Watch / Operator
 | `docs/evaluations/ai_agent_communication_learning_contract_2026-06-11.json` | 2026-06-11 committed snapshot；完成度 `35%`，runtime worker / DB migration / Telegram direct send 全部 false |
 | `apps/api/src/services/ai_agent_communication_learning_contract.py` | 只讀 loader；強制驗證 runtime / migration / Telegram / SDK / route 權限都未開 |
 | `GET /api/v1/agents/agent-communication-learning-contract` | 治理 API；只回傳 committed contract，不啟動 worker、不碰 DB/Redis、不呼叫外部服務 |
-| `docs/evaluations/ai_agent_interaction_learning_proof_2026-06-11.json` + `GET /api/v1/agents/agent-interaction-learning-proof` | P2-403A / P2-403B / P2-403C / P2-403D 互動、接手、學習、成長、read model gate、Redis dry-run gate 與 learning writeback approval package 證據面；目前 live session、message、handoff、learning write、Telegram receipt 全部 `0`，下一步 P2-403E |
+| `docs/evaluations/ai_agent_interaction_learning_proof_2026-06-11.json` + `GET /api/v1/agents/agent-interaction-learning-proof` | P2-403A / P2-403B / P2-403C / P2-403D / P2-403E 互動、接手、學習、成長、read model gate、Redis dry-run gate、learning writeback approval package 與 Telegram receipt approval package 證據面；目前 live session、message、handoff、learning write、Telegram receipt 全部 `0`，下一步 P2-403F |
 | `docs/evaluations/ai_agent_live_read_model_gate_2026-06-11.json` + `GET /api/v1/agents/agent-live-read-model-gate` | P2-403B AgentSession / Redis Streams live read model gate；定義 safe fields、Redis envelope、worker gate、rollback plan 與 no-write smoke，不連 DB、不讀寫 Redis、不啟動 worker |
 
 #### 3.2.1c 2026-06-11 AI Agent 主動營運委派與版本生命週期契約
@@ -712,7 +712,8 @@ Repo / registry / release notes / K8s / host / observability / backup evidence
 7. 先建立可被統帥看見的互動 / 接手 / 學習 / 成長證據面。✅ P2-403A 已完成；live count 仍為 `0`，不宣稱 runtime 已運作。
 8. 建立 AgentSession / Redis live read model gate。✅ P2-403B 已完成；safe fields、Redis envelope、worker gate、rollback plan、no-write smoke 已接入治理頁，但 live DB query / Redis consumer / worker 仍未授權。
 9. 建立 Redis Streams consumer group dry-run、handoff envelope、ack / dead-letter / replay gate。✅ P2-403C 已完成；fixture-only dry-run、idempotency、redacted evidence 與治理頁已接入，但 Redis runtime consumer / ACK / replay 仍未授權。
-10. 建立 learning writeback approval package，先固定 owner review、rollback、redaction 與 blocked write actions。✅ P2-403D 已完成；KM / PlayBook trust / timeline learning / replay score live write 仍未授權。下一步 P2-403E Telegram receipt approval package。
+10. 建立 learning writeback approval package，先固定 owner review、rollback、redaction 與 blocked write actions。✅ P2-403D 已完成；KM / PlayBook trust / timeline learning / replay score live write 仍未授權。
+11. 建立 Telegram receipt approval package，先固定 queue、delivery、ack、failure、retry 與 redaction。✅ P2-403E 已完成；Gateway queue write、Bot API、delivery receipt write、retry worker 仍未授權。下一步 P2-403F owner-approved learning writeback dry-run。
 
 #### 3.2.1d 2026-06-11 Agent 互動、學習與成長證據面
 
@@ -728,14 +729,14 @@ Repo / registry / release notes / K8s / host / observability / backup evidence
 | 訊息收據 | 發話、收話、ack、dead letter、replay | P2-403C dry-run gate 已完成；live receipt count 仍為 `0` |
 | 接手紀錄 | OpenClaw / Hermes / NemoTron parent turn / handoff chain | P2-403C handoff envelope 已完成；runtime handoff count 仍為 `0` |
 | 學習回寫 | KM、Playbook trust、learning failure、replay score | P2-403D approval package 已完成；live learning write count 仍為 `0` |
-| Telegram 收據 | action-required / approval / failure digest queued / delivered / acknowledged | P2-403E 待辦 |
+| Telegram 收據 | action-required / approval / failure digest queued / delivered / acknowledged | P2-403E approval package 已完成；live receipt count 仍為 `0` |
 
 **本波已建立的可執行契約（只讀，不授權 runtime）：**
 
 | 檔案 / API | 用途 |
 |---|---|
 | `docs/schemas/ai_agent_interaction_learning_proof_v1.schema.json` | 互動、接手、學習、成長、Telegram receipt 與前端 redaction schema |
-| `docs/evaluations/ai_agent_interaction_learning_proof_2026-06-11.json` | P2-403A + P2-403B + P2-403C + P2-403D committed snapshot；完成度 `72%`，live truth counts 全部 `0` |
+| `docs/evaluations/ai_agent_interaction_learning_proof_2026-06-11.json` | P2-403A + P2-403B + P2-403C + P2-403D + P2-403E committed snapshot；完成度 `80%`，live truth counts 全部 `0` |
 | `apps/api/src/services/ai_agent_interaction_learning_proof.py` | 只讀 loader；強制 live flags / DB / Redis / Telegram / transcript / 私有推理全部關閉 |
 | `GET /api/v1/agents/agent-interaction-learning-proof` | 治理 API；只回傳證據面，不啟動 worker、不碰 live DB/Redis、不發 Telegram |
 | `docs/schemas/ai_agent_live_read_model_gate_v1.schema.json` | P2-403B live read model gate schema；強制 DB / Redis / worker / Telegram / learning writeback 仍需批准 |
@@ -750,6 +751,10 @@ Repo / registry / release notes / K8s / host / observability / backup evidence
 | `docs/evaluations/ai_agent_learning_writeback_approval_package_2026-06-11.json` | P2-403D committed snapshot；owner review、rollback、redaction、blocked write actions 與 live write total `0` |
 | `apps/api/src/services/ai_agent_learning_writeback_approval_package.py` | 只讀 loader；拒絕 KM write、PlayBook trust update、timeline learning、replay score write、Telegram send 與 runtime worker |
 | `GET /api/v1/agents/agent-learning-writeback-approval-package` | 治理 API；只回傳 learning writeback approval package，不寫 KM、不更新 PlayBook trust、不寫 timeline / replay score、不發 Telegram |
+| `docs/schemas/ai_agent_telegram_receipt_approval_package_v1.schema.json` | P2-403E Telegram receipt approval package schema；強制 Gateway queue write / Bot API / delivery receipt / retry worker / receiver route 全部維持未授權 |
+| `docs/evaluations/ai_agent_telegram_receipt_approval_package_2026-06-11.json` | P2-403E committed snapshot；owner review、delivery correlation、retry、redaction、blocked runtime actions 與 live receipt total `0` |
+| `apps/api/src/services/ai_agent_telegram_receipt_approval_package.py` | 只讀 loader；拒絕 Gateway queue write、Telegram direct send、delivery receipt write、receiver route change 與 retry worker |
+| `GET /api/v1/agents/agent-telegram-receipt-approval-package` | 治理 API；只回傳 Telegram receipt approval package，不寫 queue、不呼叫 Bot API、不改 route、不發 Telegram |
 | `/zh-TW/governance?tab=automation-inventory` | 顯示證據階梯、目前真相、三 Agent lane、可觀測訊號、runtime gates 與 redaction policy |
 
 **硬性紅線：**
@@ -1832,6 +1837,14 @@ Phase 6 完成後
 - 更新 `ai_agent_interaction_learning_proof_2026-06-11.json`：整體完成度 `72%`，current task `P2-403D`，next task `P2-403E`；live AgentSession / Redis events / handoff / learning write / Telegram digest receipt 全部仍為 `0`。
 - 本波仍不寫 KM、不更新 PlayBook trust、不寫 timeline learning、不寫 replay score、不發 Telegram、不啟動 runtime worker、不讀取或輸出 secret；下一步 P2-403E 才做 Telegram receipt approval package。
 
+
+### 2026-06-11 23:59 (台北) — §3.2 / §5 — 完成 P2-403E Telegram Receipt Approval Package — 先把通知收據鏈拆成批准包，不再把 Telegram 沒聲音包裝成成功
+
+- 新增 `ai_agent_telegram_receipt_approval_package_v1` schema / committed snapshot / loader / API / 測試，定義 queue、delivery、ack、failure、retry、owner review、delivery correlation、redaction 與 blocked runtime actions。
+- `apps/web/src/app/[locale]/governance/tabs/automation-inventory-tab.tsx` 接入 `GET /api/v1/agents/agent-telegram-receipt-approval-package`，顯示 Telegram receipt KPI、批准包欄位、禁止欄位、receipt gates、receipt lanes、truth flags 與 live receipt count。
+- 更新 `ai_agent_interaction_learning_proof_2026-06-11.json`：整體完成度 `80%`，current task `P2-403E`，next task `P2-403F`；live AgentSession / Redis events / handoff / learning write / Telegram digest receipt 全部仍為 `0`。
+- 本波仍不寫 Gateway queue、不呼叫 Telegram Bot API、不改 receiver route、不寫 delivery receipt、不啟動 retry worker、不讀取或輸出 secret；下一步 P2-403F 才做 owner-approved learning writeback dry-run。
+
 ### 2026-04-15 (台北) — 全檔 — 建立 v2 骨架，§0/§1 完成 — 統帥批准「單 MASTER + 4 道閘門」結構
 
 - 從 v1（plans/2026-04-15-MASTER-ai-autonomous-flywheel.md）繼承核心發現