feat(agents): route high risk through controlled automation

apps/web/messages/en.json

@@ -141,14 +141,14 @@
       "healthDetail": "健康缺口 {health}、過期端點 {stale}；不把心跳當成功。",
       "healthMeta": "重啟允許 {restart}；通知允許 {notify}",
       "learningLabel": "KM / PlayBook / Verifier",
-      "learningDetail": "自動化資產 {assets}、任務 {tasks}；用 owner gate 控制沉澱與回寫。",
-      "learningMeta": "需明確批准 {approval}；阻擋操作 {blocked}",
+      "learningDetail": "自動化資產 {assets}、任務 {tasks}；用 controlled gate 控制沉澱與回寫。",
+      "learningMeta": "受控回寫 {approval}；硬阻擋操作 {blocked}",
       "sreLabel": "SRE 戰情室",
       "sreDetail": "action-required {action}、approval-required {approval} 才進集中路由。",
       "sreMeta": "目標：AwoooI SRE 戰情室，其他路由需例外批准",
       "runtimeLabel": "執行期 Gate",
-      "runtimeDetail": "發通知、reload、restart、端點變更、機密讀取 與修復套用仍鎖住。",
-      "runtimeMeta": "只讀顯示；不代表自動修復已授權"
+      "runtimeDetail": "allowlist 內的通知、reload、restart、端點變更與修復套用進 controlled apply；機密讀取仍硬封鎖。",
+      "runtimeMeta": "符合 allowlist + check-mode + verifier 時由 AI 受控自動修復"
     },
     "scope": {
       "targets": "{count} 個目標",
@@ -214,7 +214,7 @@
     "header": {
       "eyebrow": "AWOOOI 程式碼審查",
       "title": "AI 程式碼審查控制面",
-      "subtitle": "Hermes、OpenClaw、Elephant Alpha 與 NemoTron 只做審查、分級與候選整理；修正、推版與主機操作仍留在人工閘門後面。",
+      "subtitle": "Hermes、OpenClaw、Elephant Alpha 與 NemoTron 進行審查、分級、候選整理與 controlled apply 判定；secret、destructive、付費 provider 與 force push 才停在 hard blocker。",
       "evidenceLink": "查看 AwoooP 執行紀錄"
     },
     "gateBoard": {
@@ -240,7 +240,7 @@
         },
         "pre": {
           "label": "推版前 Gate",
-          "detail": "diff、secret、供應鏈、owner gate。"
+          "detail": "diff、secret、供應鏈、controlled gate。"
         },
         "post": {
           "label": "推版後 Gate",
@@ -262,7 +262,7 @@
         },
         "preDeploy": {
           "title": "推版前",
-          "detail": "先做 diff、secret、供應鏈與高風險審查。"
+          "detail": "先做 diff、secret、供應鏈、allowlist 與 check-mode。"
         },
         "aiReview": {
           "title": "AI 審查",
@@ -304,7 +304,7 @@
     "handoff": {
       "eyebrow": "Code Review → Codex",
       "title": "審查後 Coding 工作橋接",
-      "subtitle": "審查結論先變成可追溯的 Codex 工作草稿；真正修改、推版、主機操作與來源切換仍留在人工閘門後面。",
+      "subtitle": "審查結論先變成可追溯的 Codex 工作；低 / 中 / 高風險命中 allowlist 後由 AI 受控執行，critical 與 hard blocker 才停在 break-glass。",
       "lanes": {
         "draftable": {
           "title": "可交給 Codex 起草",
@@ -313,22 +313,22 @@
           "guard": "只建立草稿修正與驗證清單。"
         },
         "approvalRequired": {
-          "title": "需人工批准後接手",
+          "title": "受控自動接手",
           "metric": "3 類",
           "detail": "高風險程式路徑、部署流程、跨專案設定。",
-          "guard": "先有人控範圍、回滾條件與證據。"
+          "guard": "先有 allowlist、回滾條件、check-mode 與 verifier。"
         },
         "blocked": {
           "title": "禁止自動轉工作",
           "metric": "5 條",
           "detail": "Kali 主機變更、掃描、正式推版、主要來源切換、執行期閘門。",
-          "guard": "維持 Gate 0 與獨立人工批准。"
+          "guard": "secret、destructive、force push、付費 provider 與外部攻擊掃描維持 Gate 0。"
         }
       }
     },
     "candidateQueue": {
       "title": "Codex 工作候選分類",
-      "subtitle": "候選只代表可整理成任務草稿；人工批准前不自動改 code、不自動 merge、不自動部署。",
+      "subtitle": "候選先整理成可追蹤任務；allowlist 內由 AI 受控修補與驗證，auto merge、secret、force push 與 destructive action 仍硬封鎖。",
       "columns": {
         "id": "編號",
         "track": "分類",
@@ -360,13 +360,13 @@
           "track": "低風險重構",
           "finding": "只限重複 UI helper、型別命名、無行為變更的整理。",
           "handoff": "提出小 patch、影響範圍與回退方式。",
-          "gate": "人工批准後才 coding"
+          "gate": "allowlist + verifier 後 coding"
         },
         "runtimeBlocked": {
           "track": "禁止轉派",
           "finding": "Kali 更新、掃描、GitHub primary、正式部署、執行期閘門。",
-          "handoff": "維持只讀候選與人工閘門，不建立 Codex 任務。",
-          "gate": "獨立批准"
+          "handoff": "維持只讀候選與 hard blocker，不建立 Codex 任務。",
+          "gate": "break-glass"
         }
       }
     },
@@ -1475,7 +1475,7 @@
       "flowTitle": "AI 處理流程",
       "timelineEmpty": "尚未取得 Incident timeline。",
       "emptyApprovalIds": "目前沒有關聯 批准 id",
-      "notPendingExplanation": "指定 批准 id不在目前待簽清單；它可能已完成、過期、拒絕，或已轉成驗證後人工接手。",
+      "notPendingExplanation": "指定批准 id 不在目前待簽清單；它可能已完成、過期、拒絕，或已轉成驗證後 AI 受控後續處理。",
       "noPendingExplanation": "此 Incident 目前沒有 pending HITL 列；請依 status-chain的下一步與Work Items 追後續處置。",
       "openFocusedAuthorization": "開啟此授權焦點",
       "signatures": "簽核 {current}/{required}",
@@ -1488,15 +1488,15 @@
         "noApproval": "無授權關聯"
       },
       "needsHuman": {
-        "yes": "需要人工",
-        "no": "不需人工"
+        "yes": "需 break-glass",
+        "no": "AI 受控"
       },
       "metrics": {
         "authorization": "授權狀態",
         "pendingRows": "待簽列",
         "stage": "目前階段",
         "verification": "驗證",
-        "handoff": "人工接手"
+        "handoff": "AI 後續"
       },
       "evidence": {
         "nextAction": "下一步",
@@ -1799,11 +1799,11 @@
         },
         "handoff": {
           "eyebrow": "現在要做",
-          "titleManual": "需要人工接手確認",
+          "titleManual": "需要 break-glass 確認",
           "titleAutomated": "自動鏈路已完成，持續觀察",
           "titleUnknown": "等待 truth-chain 資料",
-          "actionManualVerifyOrRepair": "到 AwoooP Work Items / Approvals 確認執行證據；若服務仍異常，再重新送審修復，不要直接重啟或靜默關閉。",
-          "actionNoManual": "目前不需要人工介入；保留真相鏈與Run history 供稽核追蹤。",
+          "actionManualVerifyOrRepair": "到 AwoooP Work Items / Runs 確認執行證據；若服務仍異常，排入 AI 受控重試或 rollback，不要直接靜默關閉。",
+          "actionNoManual": "目前由 AI 受控鏈路處理；保留真相鏈與Run history 供稽核追蹤。",
           "actionUnknown": "尚未拿到完整狀態，先等 status-chain 載入完成。",
           "ownerLabel": "主責",
           "ownerSre": "SRE owner / AwoooP operator",
@@ -2395,7 +2395,7 @@
       "workload": "工作完成",
       "workloadDetail": "已完成 / 總工作量。",
       "waiting": "待審核",
-      "waitingDetail": "未過 owner gate 的工作不能自動執行。"
+      "waitingDetail": "未過 allowlist / check-mode / verifier 的工作不能自動執行。"
     },
     "agents": {
       "title": "AI Agent 分工與工作量",
@@ -3671,7 +3671,7 @@
             "handoffBus": {
               "label": "交接事件匯流排",
               "detail": "責任 lane {lanes} 條，必填 owner 欄位 {fields} 個，已接受回覆 {accepted}。",
-              "next": "下一步：{blocked} 個 runtime action 仍由 owner gate 阻擋。"
+              "next": "下一步：{blocked} 個 runtime action 仍由 controlled gate / hard blocker 阻擋。"
             },
             "ragLearning": {
               "label": "RAG / KM 學習候選",
@@ -8217,7 +8217,7 @@
           "linkedRuns": "Run 連結",
           "linkedRunsDetail": "未連結事件：{unlinked}",
           "openWork": "待處理工作",
-          "openWorkDetail": "無修復 {gap} / 人工閘門 {manual} / 修復失敗 {failed}",
+          "openWorkDetail": "無修復 {gap} / controlled gate {manual} / 修復失敗 {failed}",
           "sourceDecision": "來源決策",
           "sourceDecisionNone": "無待審",
           "sourceDecisionDetail": "已記錄審核：{recorded}",
@@ -8237,8 +8237,8 @@
           "workItemsDetail": "{count} 個 open group 需要處理或確認",
           "runs": "查看 Run 連結",
           "runsDetail": "未連結事件：{unlinked}",
-          "approvals": "檢查人工閘門",
-          "approvalsDetail": "{count} 個 manual gate 需要人工判斷",
+          "approvals": "檢查 controlled gate",
+          "approvalsDetail": "{count} 個 controlled gate 待 AI policy / verifier 判定",
           "sourceReviews": "審核來源配對",
           "sourceReviewsDetail": "{count} 個 來源 review 待決策"
         }
@@ -8258,13 +8258,13 @@
           "blockers": {
             "dataIncomplete": "來源或品質資料尚未完整讀回；先補資料鏈，不把空值當成功。",
             "repairVerifierGap": "已驗證自動修復 {verified}/{evaluated}；仍需補執行、驗證或學習回寫。",
-            "manualGate": "仍有待處理工作 {open}、人工閘門 {gates}；需要 owner / verifier 判斷。",
+            "manualGate": "仍有待處理工作 {open}、controlled gate {gates}；需要 AI policy / verifier 判定。",
             "ready": "來源、修復驗證與學習回寫已達可宣稱門檻；持續監看新事件。",
             "watch": "目前沒有足夠條件宣稱全自動；先看 Runs、工作項與批准卡點。"
           },
           "nextFocus": {
             "workItems": "先處理卡住的工作項",
-            "approvals": "先清人工閘門",
+            "approvals": "先清 controlled gate",
             "runs": "先補執行與驗證",
             "observe": "持續監看新來源"
           },
@@ -15945,7 +15945,7 @@
         },
         "runtime": {
           "label": "執行期閘門",
-          "detail": "仍為 0；所有執行仍要獨立人工批准。"
+          "detail": "ledger 仍為 0；allowlist controlled apply 可另走受控自動化，critical / hard blocker 仍維持 0。"
         }
       },
       "items": {
@@ -17948,7 +17948,7 @@
         "hosts": {
           "title": "資安觀測節點與開發主機",
           "current": "可套用 host coverage、action 閘門、證據就緒度與三軸進度。",
-          "next": "等待人工批准與主機範圍證據後，才討論 live 掃描或調校。",
+          "next": "等 allowlist、check-mode、主機範圍證據與 verifier 齊備後，再討論 live 掃描或調校。",
           "boundary": "不得自動 SSH、更新主機、掃描、變更設定或收未脫敏資料。"
         },
         "toolsMonitoring": {
@@ -20338,7 +20338,7 @@
       "checkLabel": "檢核",
       "stateLabel": "狀態",
       "boundaryTitle": "正式釋出邊界",
-      "boundaryIntro": "以下鍵值固定：正式路由已部署只代表 IwoooS 可以顯示 disabled owner gate，不等於 Wazuh 即時查詢已啟用、代理清單已恢復或主機操作已授權。",
+      "boundaryIntro": "以下鍵值固定：正式路由已部署只代表 IwoooS 可以顯示 disabled controlled gate，不等於 Wazuh 即時查詢已啟用、代理清單已恢復或主機操作已授權。",
       "summary": {
         "source": {
           "label": "原始碼",
@@ -20354,7 +20354,7 @@
         },
         "deploy": {
           "label": "部署讀回",
-          "detail": "正式路由已回 200 disabled owner gate。"
+          "detail": "正式路由已回 200 disabled controlled gate。"
         }
       },
       "items": {
@@ -20372,7 +20372,7 @@
         },
         "productionReadback": {
           "title": "正式站讀回已通過",
-          "body": "正式 API 已回 200 並停在 disabled owner gate；這不是 Wazuh manager registry 已恢復的證據。"
+          "body": "正式 API 已回 200 並停在 disabled controlled gate；這不是 Wazuh manager registry 已恢復的證據。"
         },
         "ownerGate": {
           "title": "負責人證據仍待收件",
@@ -20513,7 +20513,7 @@
       "summary": {
         "routeReadback": {
           "label": "路由讀回",
-          "detail": "正式路由已回 200，但仍停在 disabled owner gate。"
+          "detail": "正式路由已回 200，但仍停在 disabled controlled gate。"
         },
         "owner": {
           "label": "負責人回覆",
@@ -20531,7 +20531,7 @@
       "items": {
         "releaseReadback": {
           "title": "正式路由已不再 404",
-          "body": "正式讀回已通過；下一步是 owner gate、機密中繼資料與 Wazuh manager registry readback，不是主機寫入。"
+          "body": "正式讀回已通過；下一步是 controlled gate、機密中繼資料與 Wazuh manager registry readback，不是繞過 PlayBook 的主機寫入。"
         },
         "serverEnv": {
           "title": "伺服端環境變數需負責人",
@@ -20604,7 +20604,7 @@
         },
         "alertContract": {
           "title": "告警訊息要能讓人行動",
-          "body": "告警需包含嚴重度、信心、資產 alias、白話說明、影響、脫敏證據、AI 分流、候選動作與 owner gate。"
+          "body": "告警需包含嚴重度、信心、資產 alias、白話說明、影響、脫敏證據、AI 分流、候選動作與 controlled gate。"
         },
         "configControl": {
           "title": "高價值配置納入作戰線",
@@ -20615,8 +20615,8 @@
           "body": "CISA KEV、EPSS、公開入口、資產重要性與維護窗口一起決定套件、image 與服務修補順序。"
         },
         "aiAgentGate": {
-          "title": "AI Agent 只能先產生候選",
-          "body": "AI 可以摘要、分流、產生 owner packet、dry-run 與驗證計畫；不能直接主機寫入、讀 secret、封鎖或部署。"
+          "title": "AI Agent 受控執行",
+          "body": "AI 可以摘要、分流、產生 execution packet、dry-run、controlled apply 與驗證計畫；secret、destructive、force push、付費 provider 與外部攻擊掃描仍硬封鎖。"
         },
         "runtimeBoundary": {
           "title": "執行邊界維持 0 / false",
@@ -20823,7 +20823,7 @@
         },
         "aiProduct": {
           "title": "AI 與產品 runtime 待 owner",
-          "body": "OpenClaw、Ollama、NemoTron、Hermes、MCP / A2A、VibeWork 與 agent-bounty-protocol 都先停在 owner gate。"
+          "body": "OpenClaw、Ollama、NemoTron、Hermes、MCP / A2A、VibeWork 與 agent-bounty-protocol 先進 controlled gate；allowlist 內由 AI 自動處理，付費 provider / replacement 仍需 replay、shadow、canary。"
         },
         "runtimeBoundary": {
           "title": "執行邊界固定 0 / false",

apps/web/messages/zh-TW.json

@@ -141,14 +141,14 @@
       "healthDetail": "健康缺口 {health}、過期端點 {stale}；不把心跳當成功。",
       "healthMeta": "重啟允許 {restart}；通知允許 {notify}",
       "learningLabel": "KM / PlayBook / Verifier",
-      "learningDetail": "自動化資產 {assets}、任務 {tasks}；用 owner gate 控制沉澱與回寫。",
-      "learningMeta": "需明確批准 {approval}；阻擋操作 {blocked}",
+      "learningDetail": "自動化資產 {assets}、任務 {tasks}；用 controlled gate 控制沉澱與回寫。",
+      "learningMeta": "受控回寫 {approval}；硬阻擋操作 {blocked}",
       "sreLabel": "SRE 戰情室",
       "sreDetail": "action-required {action}、approval-required {approval} 才進集中路由。",
       "sreMeta": "目標：AwoooI SRE 戰情室，其他路由需例外批准",
       "runtimeLabel": "執行期 Gate",
-      "runtimeDetail": "發通知、reload、restart、端點變更、機密讀取 與修復套用仍鎖住。",
-      "runtimeMeta": "只讀顯示；不代表自動修復已授權"
+      "runtimeDetail": "allowlist 內的通知、reload、restart、端點變更與修復套用進 controlled apply；機密讀取仍硬封鎖。",
+      "runtimeMeta": "符合 allowlist + check-mode + verifier 時由 AI 受控自動修復"
     },
     "scope": {
       "targets": "{count} 個目標",
@@ -214,7 +214,7 @@
     "header": {
       "eyebrow": "AWOOOI 程式碼審查",
       "title": "AI 程式碼審查控制面",
-      "subtitle": "Hermes、OpenClaw、Elephant Alpha 與 NemoTron 只做審查、分級與候選整理；修正、推版與主機操作仍留在人工閘門後面。",
+      "subtitle": "Hermes、OpenClaw、Elephant Alpha 與 NemoTron 進行審查、分級、候選整理與 controlled apply 判定；secret、destructive、付費 provider 與 force push 才停在 hard blocker。",
       "evidenceLink": "查看 AwoooP 執行紀錄"
     },
     "gateBoard": {
@@ -240,7 +240,7 @@
         },
         "pre": {
           "label": "推版前 Gate",
-          "detail": "diff、secret、供應鏈、owner gate。"
+          "detail": "diff、secret、供應鏈、controlled gate。"
         },
         "post": {
           "label": "推版後 Gate",
@@ -262,7 +262,7 @@
         },
         "preDeploy": {
           "title": "推版前",
-          "detail": "先做 diff、secret、供應鏈與高風險審查。"
+          "detail": "先做 diff、secret、供應鏈、allowlist 與 check-mode。"
         },
         "aiReview": {
           "title": "AI 審查",
@@ -304,7 +304,7 @@
     "handoff": {
       "eyebrow": "Code Review → Codex",
       "title": "審查後 Coding 工作橋接",
-      "subtitle": "審查結論先變成可追溯的 Codex 工作草稿；真正修改、推版、主機操作與來源切換仍留在人工閘門後面。",
+      "subtitle": "審查結論先變成可追溯的 Codex 工作；低 / 中 / 高風險命中 allowlist 後由 AI 受控執行，critical 與 hard blocker 才停在 break-glass。",
       "lanes": {
         "draftable": {
           "title": "可交給 Codex 起草",
@@ -313,22 +313,22 @@
           "guard": "只建立草稿修正與驗證清單。"
         },
         "approvalRequired": {
-          "title": "需人工批准後接手",
+          "title": "受控自動接手",
           "metric": "3 類",
           "detail": "高風險程式路徑、部署流程、跨專案設定。",
-          "guard": "先有人控範圍、回滾條件與證據。"
+          "guard": "先有 allowlist、回滾條件、check-mode 與 verifier。"
         },
         "blocked": {
           "title": "禁止自動轉工作",
           "metric": "5 條",
           "detail": "Kali 主機變更、掃描、正式推版、主要來源切換、執行期閘門。",
-          "guard": "維持 Gate 0 與獨立人工批准。"
+          "guard": "secret、destructive、force push、付費 provider 與外部攻擊掃描維持 Gate 0。"
         }
       }
     },
     "candidateQueue": {
       "title": "Codex 工作候選分類",
-      "subtitle": "候選只代表可整理成任務草稿；人工批准前不自動改 code、不自動 merge、不自動部署。",
+      "subtitle": "候選先整理成可追蹤任務；allowlist 內由 AI 受控修補與驗證，auto merge、secret、force push 與 destructive action 仍硬封鎖。",
       "columns": {
         "id": "編號",
         "track": "分類",
@@ -360,13 +360,13 @@
           "track": "低風險重構",
           "finding": "只限重複 UI helper、型別命名、無行為變更的整理。",
           "handoff": "提出小 patch、影響範圍與回退方式。",
-          "gate": "人工批准後才 coding"
+          "gate": "allowlist + verifier 後 coding"
         },
         "runtimeBlocked": {
           "track": "禁止轉派",
           "finding": "Kali 更新、掃描、GitHub primary、正式部署、執行期閘門。",
-          "handoff": "維持只讀候選與人工閘門，不建立 Codex 任務。",
-          "gate": "獨立批准"
+          "handoff": "維持只讀候選與 hard blocker，不建立 Codex 任務。",
+          "gate": "break-glass"
         }
       }
     },
@@ -1475,7 +1475,7 @@
       "flowTitle": "AI 處理流程",
       "timelineEmpty": "尚未取得 Incident timeline。",
       "emptyApprovalIds": "目前沒有關聯 批准 id",
-      "notPendingExplanation": "指定 批准 id不在目前待簽清單；它可能已完成、過期、拒絕，或已轉成驗證後人工接手。",
+      "notPendingExplanation": "指定批准 id 不在目前待簽清單；它可能已完成、過期、拒絕，或已轉成驗證後 AI 受控後續處理。",
       "noPendingExplanation": "此 Incident 目前沒有 pending HITL 列；請依 status-chain的下一步與Work Items 追後續處置。",
       "openFocusedAuthorization": "開啟此授權焦點",
       "signatures": "簽核 {current}/{required}",
@@ -1488,15 +1488,15 @@
         "noApproval": "無授權關聯"
       },
       "needsHuman": {
-        "yes": "需要人工",
-        "no": "不需人工"
+        "yes": "需 break-glass",
+        "no": "AI 受控"
       },
       "metrics": {
         "authorization": "授權狀態",
         "pendingRows": "待簽列",
         "stage": "目前階段",
         "verification": "驗證",
-        "handoff": "人工接手"
+        "handoff": "AI 後續"
       },
       "evidence": {
         "nextAction": "下一步",
@@ -1799,11 +1799,11 @@
         },
         "handoff": {
           "eyebrow": "現在要做",
-          "titleManual": "需要人工接手確認",
+          "titleManual": "需要 break-glass 確認",
           "titleAutomated": "自動鏈路已完成，持續觀察",
           "titleUnknown": "等待 truth-chain 資料",
-          "actionManualVerifyOrRepair": "到 AwoooP Work Items / Approvals 確認執行證據；若服務仍異常，再重新送審修復，不要直接重啟或靜默關閉。",
-          "actionNoManual": "目前不需要人工介入；保留真相鏈與Run history 供稽核追蹤。",
+          "actionManualVerifyOrRepair": "到 AwoooP Work Items / Runs 確認執行證據；若服務仍異常，排入 AI 受控重試或 rollback，不要直接靜默關閉。",
+          "actionNoManual": "目前由 AI 受控鏈路處理；保留真相鏈與Run history 供稽核追蹤。",
           "actionUnknown": "尚未拿到完整狀態，先等 status-chain 載入完成。",
           "ownerLabel": "主責",
           "ownerSre": "SRE owner / AwoooP operator",
@@ -2395,7 +2395,7 @@
       "workload": "工作完成",
       "workloadDetail": "已完成 / 總工作量。",
       "waiting": "待審核",
-      "waitingDetail": "未過 owner gate 的工作不能自動執行。"
+      "waitingDetail": "未過 allowlist / check-mode / verifier 的工作不能自動執行。"
     },
     "agents": {
       "title": "AI Agent 分工與工作量",
@@ -3671,7 +3671,7 @@
             "handoffBus": {
               "label": "交接事件匯流排",
               "detail": "責任 lane {lanes} 條，必填 owner 欄位 {fields} 個，已接受回覆 {accepted}。",
-              "next": "下一步：{blocked} 個 runtime action 仍由 owner gate 阻擋。"
+              "next": "下一步：{blocked} 個 runtime action 仍由 controlled gate / hard blocker 阻擋。"
             },
             "ragLearning": {
               "label": "RAG / KM 學習候選",
@@ -8217,7 +8217,7 @@
           "linkedRuns": "Run 連結",
           "linkedRunsDetail": "未連結事件：{unlinked}",
           "openWork": "待處理工作",
-          "openWorkDetail": "無修復 {gap} / 人工閘門 {manual} / 修復失敗 {failed}",
+          "openWorkDetail": "無修復 {gap} / controlled gate {manual} / 修復失敗 {failed}",
           "sourceDecision": "來源決策",
           "sourceDecisionNone": "無待審",
           "sourceDecisionDetail": "已記錄審核：{recorded}",
@@ -8237,8 +8237,8 @@
           "workItemsDetail": "{count} 個 open group 需要處理或確認",
           "runs": "查看 Run 連結",
           "runsDetail": "未連結事件：{unlinked}",
-          "approvals": "檢查人工閘門",
-          "approvalsDetail": "{count} 個 manual gate 需要人工判斷",
+          "approvals": "檢查 controlled gate",
+          "approvalsDetail": "{count} 個 controlled gate 待 AI policy / verifier 判定",
           "sourceReviews": "審核來源配對",
           "sourceReviewsDetail": "{count} 個 來源 review 待決策"
         }
@@ -8258,13 +8258,13 @@
           "blockers": {
             "dataIncomplete": "來源或品質資料尚未完整讀回；先補資料鏈，不把空值當成功。",
             "repairVerifierGap": "已驗證自動修復 {verified}/{evaluated}；仍需補執行、驗證或學習回寫。",
-            "manualGate": "仍有待處理工作 {open}、人工閘門 {gates}；需要 owner / verifier 判斷。",
+            "manualGate": "仍有待處理工作 {open}、controlled gate {gates}；需要 AI policy / verifier 判定。",
             "ready": "來源、修復驗證與學習回寫已達可宣稱門檻；持續監看新事件。",
             "watch": "目前沒有足夠條件宣稱全自動；先看 Runs、工作項與批准卡點。"
           },
           "nextFocus": {
             "workItems": "先處理卡住的工作項",
-            "approvals": "先清人工閘門",
+            "approvals": "先清 controlled gate",
             "runs": "先補執行與驗證",
             "observe": "持續監看新來源"
           },
@@ -15945,7 +15945,7 @@
         },
         "runtime": {
           "label": "執行期閘門",
-          "detail": "仍為 0；所有執行仍要獨立人工批准。"
+          "detail": "ledger 仍為 0；allowlist controlled apply 可另走受控自動化，critical / hard blocker 仍維持 0。"
         }
       },
       "items": {
@@ -17948,7 +17948,7 @@
         "hosts": {
           "title": "資安觀測節點與開發主機",
           "current": "可套用 host coverage、action 閘門、證據就緒度與三軸進度。",
-          "next": "等待人工批准與主機範圍證據後，才討論 live 掃描或調校。",
+          "next": "等 allowlist、check-mode、主機範圍證據與 verifier 齊備後，再討論 live 掃描或調校。",
           "boundary": "不得自動 SSH、更新主機、掃描、變更設定或收未脫敏資料。"
         },
         "toolsMonitoring": {
@@ -20338,7 +20338,7 @@
       "checkLabel": "檢核",
       "stateLabel": "狀態",
       "boundaryTitle": "正式釋出邊界",
-      "boundaryIntro": "以下鍵值固定：正式路由已部署只代表 IwoooS 可以顯示 disabled owner gate，不等於 Wazuh 即時查詢已啟用、代理清單已恢復或主機操作已授權。",
+      "boundaryIntro": "以下鍵值固定：正式路由已部署只代表 IwoooS 可以顯示 disabled controlled gate，不等於 Wazuh 即時查詢已啟用、代理清單已恢復或主機操作已授權。",
       "summary": {
         "source": {
           "label": "原始碼",
@@ -20354,7 +20354,7 @@
         },
         "deploy": {
           "label": "部署讀回",
-          "detail": "正式路由已回 200 disabled owner gate。"
+          "detail": "正式路由已回 200 disabled controlled gate。"
         }
       },
       "items": {
@@ -20372,7 +20372,7 @@
         },
         "productionReadback": {
           "title": "正式站讀回已通過",
-          "body": "正式 API 已回 200 並停在 disabled owner gate；這不是 Wazuh manager registry 已恢復的證據。"
+          "body": "正式 API 已回 200 並停在 disabled controlled gate；這不是 Wazuh manager registry 已恢復的證據。"
         },
         "ownerGate": {
           "title": "負責人證據仍待收件",
@@ -20513,7 +20513,7 @@
       "summary": {
         "routeReadback": {
           "label": "路由讀回",
-          "detail": "正式路由已回 200，但仍停在 disabled owner gate。"
+          "detail": "正式路由已回 200，但仍停在 disabled controlled gate。"
         },
         "owner": {
           "label": "負責人回覆",
@@ -20531,7 +20531,7 @@
       "items": {
         "releaseReadback": {
           "title": "正式路由已不再 404",
-          "body": "正式讀回已通過；下一步是 owner gate、機密中繼資料與 Wazuh manager registry readback，不是主機寫入。"
+          "body": "正式讀回已通過；下一步是 controlled gate、機密中繼資料與 Wazuh manager registry readback，不是繞過 PlayBook 的主機寫入。"
         },
         "serverEnv": {
           "title": "伺服端環境變數需負責人",
@@ -20562,7 +20562,7 @@
       "checkLabel": "節點",
       "stateLabel": "狀態",
       "boundaryTitle": "作戰系統停止線",
-      "boundaryIntro": "以下鍵值固定：route 200、Dashboard 可見、agent active、CD success、UI 可見或一般批准都不是資安完成；沒有 owner、rollback、維護窗口、postcheck、alert receipt、Wazuh / SIEM / case evidence 與 human approval，不開 response、scan、reload、封鎖或正式寫入。",
+      "boundaryIntro": "以下鍵值固定：route 200、Dashboard 可見、agent active、CD success、UI 可見或一般批准都不是資安完成；allowlist、rollback、維護窗口、postcheck、alert receipt、Wazuh / SIEM / case evidence 與 controlled verifier 未齊，不開 response、scan、reload、封鎖或正式寫入。",
       "summary": {
         "frameworks": {
           "label": "框架",
@@ -20604,7 +20604,7 @@
         },
         "alertContract": {
           "title": "告警訊息要能讓人行動",
-          "body": "告警需包含嚴重度、信心、資產 alias、白話說明、影響、脫敏證據、AI 分流、候選動作與 owner gate。"
+          "body": "告警需包含嚴重度、信心、資產 alias、白話說明、影響、脫敏證據、AI 分流、候選動作與 controlled gate。"
         },
         "configControl": {
           "title": "高價值配置納入作戰線",
@@ -20615,8 +20615,8 @@
           "body": "CISA KEV、EPSS、公開入口、資產重要性與維護窗口一起決定套件、image 與服務修補順序。"
         },
         "aiAgentGate": {
-          "title": "AI Agent 只能先產生候選",
-          "body": "AI 可以摘要、分流、產生 owner packet、dry-run 與驗證計畫；不能直接主機寫入、讀 secret、封鎖或部署。"
+          "title": "AI Agent 受控執行",
+          "body": "AI 可以摘要、分流、產生 execution packet、dry-run、controlled apply 與驗證計畫；secret、destructive、force push、付費 provider 與外部攻擊掃描仍硬封鎖。"
         },
         "runtimeBoundary": {
           "title": "執行邊界維持 0 / false",
@@ -20823,7 +20823,7 @@
         },
         "aiProduct": {
           "title": "AI 與產品 runtime 待 owner",
-          "body": "OpenClaw、Ollama、NemoTron、Hermes、MCP / A2A、VibeWork 與 agent-bounty-protocol 都先停在 owner gate。"
+          "body": "OpenClaw、Ollama、NemoTron、Hermes、MCP / A2A、VibeWork 與 agent-bounty-protocol 先進 controlled gate；allowlist 內由 AI 自動處理，付費 provider / replacement 仍需 replay、shadow、canary。"
         },
         "runtimeBoundary": {
           "title": "執行邊界固定 0 / false",