fix(automation): fail closed unresolved VMware targets

apps/api/src/services/controlled_alert_target_router.py

@@ -291,7 +291,28 @@ def resolve_typed_alert_target(
             str(labels.get("instance") or ""),
             target_resource,
             alertname,
-        ) or _HOSTS["99"]
+        )
+        explicit_agent99_target = any(
+            marker in _text_token(target_resource)
+            for marker in ("agent99", "windows99", "windows 99")
+        )
+        if host_scope is None and explicit_agent99_target:
+            host_scope = _HOSTS["99"]
+        if host_scope is None:
+            identity = registry.resolve_identity(target_resource or alertname)
+            return _typed_route(
+                resolution_status="asset_identity_unresolved",
+                target_kind="unknown",
+                target_resource=target_resource,
+                namespace=namespace,
+                canonical_asset_id=None,
+                host=None,
+                executor=None,
+                verifier=None,
+                risk_class="high",
+                drift_work_item_id=identity["drift_work_item_id"],
+                stateful_level=StatefulLevel.UNRESOLVED.value,
+            )
         return _typed_route(
             resolution_status="resolved",
             target_kind="windows_vmware",