feat(governance): 新增 TG canary owner review gate

docs/LOGBOOK.md

@@ -1,3 +1,27 @@
+## 2026-06-18｜P2-405F Telegram Canary Owner Review Gate 本地收斂
+
+**背景**：P2-405E 已完成 dry-run delivery rehearsal 與正式站驗證，但 Telegram 真正要打通不能直接從「演練通過」跳到 Bot API 實發；必須先把 owner review、receipt readback、拒收條件、mute / rollback 與單一 canary 實發邊界固定成可審核契約，避免再次出現「批准後看似執行、實際沒有自動化流程」或「只發報表但沒有 receipt / actionability」的斷鏈。
+
+**完成內容**：
+- 新增 committed snapshot `docs/evaluations/ai_agent_professional_task_expansion_2026-06-18_1430_p2_405f.json`，current `P2-405F`、next `P2-406B`、completion `99%`。
+- 新增 `telegram_runtime_bridge.canary_live_delivery_owner_review_gate`，承接 P2-405E rehearsal `8 / 8` readback、failed `0`，但 `owner_review_received=false`、`owner_review_accepted=false`、`live_canary_delivery_approved=false`、`delivery_attempt_allowed=false`。
+- Owner review gate 固定 9 個 owner 必填欄位、9 個 acceptance check、8 個 rejection reason、6 個 reviewer action、8 個 receipt readback check。
+- API service guard 強制 P2-405F owner review gate 的 Gateway queue write、Bot API call、Telegram send、delivery receipt write、production write、secret read、paid API 全部維持 `false / 0`。
+- Governance automation inventory 新增 P2-405F owner review gate KPI 與卡片，顯示 owner 收件 / accepted / live approved / attempt allowed 全部為 `false`，並列出必填欄位、驗收檢查、拒收原因與 receipt readback owner。
+- i18n 兩份 locale 仍維持繁體中文鏡像，沒有引入英文 fallback 文案。
+
+**本地驗證**：
+- JSON parse：P2-405F snapshot、schema、`zh-TW.json`、`en.json` 通過。
+- `python3 -m py_compile apps/api/src/services/ai_agent_professional_task_expansion.py apps/api/src/api/v1/agents.py` 通過。
+- `PYTHONPATH=apps/api /Users/ogt/awoooi/apps/api/.venv/bin/python -m pytest apps/api/tests/test_ai_agent_professional_task_expansion.py apps/api/tests/test_ai_agent_professional_task_expansion_api.py` → `26 passed`。
+
+**完成度同步**：
+- P2-405F Telegram Canary Owner Review Gate：本地實作 `100%`，待 Gitea CD / production verification。
+- AI Agent 專業任務擴展與 Telegram Runtime Bridge：`98% -> 99%`。
+- Telegram 實發、Gateway queue 寫入、Bot API call、delivery receipt production write、AI analysis runtime、中低風險 auto worker、production optimization write：全部仍維持 `0 / false`。
+
+**邊界**：本段不送 Telegram、不寫 Gateway queue、不呼叫 Bot API、不寫讀報回執、不啟動排程、不啟動 AI analysis runtime、不啟動中低風險自動處理、不讀 secret、不新增批准或發送按鈕；不得把 owner review gate ready 解讀成 live canary 已批准或 runtime gate 已開啟。
+
 ## 2026-06-18｜P2-405E / P2-406A AI Agent Telegram 派送演練與前段主看板
 
 **背景**：統帥已明確指出 Telegram 告警與日週月報不能停在「報表都是 0」或「批准後沒有自動化」，也不能讓日報、週報、月報埋在長頁面後段。既有 P2-405D 已把 Canary Delivery Gate、必填欄位、preflight、hold reason 與 rollback / mute 控制固定；既有 P2-111 也已有日報、週報、月報、failure-only 摘要與讀報回執的實發批准包。本階段一方面把下一步推進成可重放的 dry-run delivery rehearsal，另一方面把 P2-111 報告派送批准包拉到治理頁前段，讓 operator 能看見單一訊息如何被選定、如何形成 Gateway envelope preview、如何由 Hermes 做 receipt readback drill、哪些條件會停止，以及報告會送往哪個 TG 戰情室。此段仍不實發 Telegram、不寫 Gateway queue、不呼叫 Bot API。

docs/ai/AI_AGENT_AUTOMATION_WORKLIST_2026-06-04.md

@@ -15,13 +15,18 @@
 | OpenClaw / Hermes / NemoTron 主動溝通、學習與成長證據 | 100% | P2-401A 到 P2-144 已完成只讀證據面、runtime / report / result-capture gates、no-write readback、promotion review、writer implementation review、writer dry-run fixture、writer dry-run readback、owner promotion execution gate、owner-approved execution rehearsal、owner acceptance / maintenance window gate、owner acceptance readback / preflight hold、owner-approved preflight release package、owner-approved release readiness readback、owner release approval gate、post-release verifier / rollback gate、final release candidate readback、release authorization hold / readback gate、release verifier preflight / owner review packet、release decision hold / readback、release decision next handoff、release decision input prep、12-Agent War Room、owner response 預檢與 owner response 回讀；P2-141 基線與 S4.9 owner release packet 補強皆已正式驗證，P2-142 12-Agent War Room 已完成 production readback 與 desktop / mobile smoke，P2-143 owner response 預檢已完成 production readback 與 in-app browser smoke，P2-144 owner response 回讀已完成 production API readback 與 desktop / mobile smoke。runtime worker、DB migration、production Redis consumer group、canonical runtime readback、live query、runtime score、result capture write、Telegram 實發、delivery receipt E2E、live report delivery、reviewer queue write、Gateway queue write、AI analysis runtime、中低風險 auto worker、KM / LOGBOOK / audit DB / timeline / PlayBook trust 寫入、SDK / 付費服務仍未開 gate | `ai_agent_result_capture_release_decision_owner_response_readback_v1`、`GET /api/v1/agents/agent-result-capture-release-decision-owner-response-readback`、`docs/evaluations/ai_agent_result_capture_release_decision_owner_response_readback_2026-06-14.json`、feature commit `8795f100`、deploy marker `ac938037`、Gitea code-review `2965` / CD `2964` success、5 個回覆讀回 lane、18 個 owner 必填欄位、6 個 readback validation check、6 個 rejection guard、5 個 operator action、等待外部回覆 `5`、未收件 lane `5`、正式寫入 / 發送 `0`；P2-142 feature commit `5de4b3f3`、deploy marker `1a2c9e36`、Gitea CD run `4232` success、production API readback、desktop / mobile in-app browser smoke；P2-143 feature commit `755b0a8d`、deploy marker `667d6329`、Gitea code-review `2961` / CD `2960` success、production API readback、desktop / mobile in-app browser smoke；MASTER §3.2.1b / §3.2.1d / §3.4.3 |
 | AI Agent 主動營運委派與版本生命週期 | 100% | P2-402A / P2-402B / P2-402C / P2-402D / P2-402E / P2-402F / P2-402G 已完成；已建立 repo-only 版本新鮮度快照、工具採用批准包、Telegram action-required digest policy、Gitea PR 草案 lane、host / K3s / stateful 版本只讀盤點、API 與 governance UI。定期排程、外部版本查詢、工具安裝、CI 變更、套件升級、主機更新、container pull、實際 PR creation、auto merge、Telegram 實發、SSH、kubectl、重啟仍未開 gate | `ai_agent_proactive_operations_contract_v1`、`ai_agent_version_freshness_snapshot_v1`、`ai_agent_tool_adoption_approval_package_v1`、`ai_agent_telegram_action_required_digest_policy_v1`、`ai_agent_gitea_pr_draft_lane_v1`、`ai_agent_host_stateful_version_inventory_v1`、`GET /api/v1/agents/agent-proactive-operations-contract`、`GET /api/v1/agents/agent-version-freshness-snapshot`、`GET /api/v1/agents/agent-tool-adoption-approval-package`、`GET /api/v1/agents/agent-telegram-action-required-digest-policy`、`GET /api/v1/agents/agent-gitea-pr-draft-lane`、`GET /api/v1/agents/agent-host-stateful-version-inventory`、`/zh-TW/governance?tab=automation-inventory`、MASTER §3.2.1c |
 | 12-Agent War Room 編組 | 72% | 12 個邏輯工位與分批派工規則已正式部署；OpenClaw / Hermes / NemoTron / SRE / Security / DevOps / Data/DR / Supply Chain / Product/UI / QA / Market / Telegram 共 12 份只讀審查已回收；schema / committed snapshot / API / tests / governance UI 區塊 / production API readback / desktop + mobile in-app browser smoke 已完成；runtime writer、Telegram send、Bot API、production write 仍未批准 | `ai_agent_12_agent_war_room_v1`、`docs/evaluations/ai_agent_12_agent_war_room_2026-06-14.json`、`GET /api/v1/agents/agent-12-agent-war-room`、feature commit `5de4b3f3`、deploy marker `1a2c9e36`、Gitea CD run `4232` success、`/zh-TW/governance?tab=automation-inventory`、12 份 Codex sub-agent 只讀回饋 |
-| AI Agent 專業任務擴展與 Telegram Runtime Bridge | 98% | P2-405E 已完成只讀契約、正式 API、治理頁 P2-405E 乾跑派送演練卡、production API readback、desktop / mobile browser smoke、6 種 Telegram no-send preview、6 個 dedup key、6 組 receipt expectation、1 份 canary approval package、1 份 canary send approval packet、1 份 canary delivery gate、1 份 canary dry-run delivery rehearsal、6 個乾跑步驟、8 個 receipt readback check、7 個 stop condition、5 個 rollback / mute control；P2-406A 已把 P2-111 日報 / 週報 / 月報實發批准包、AwoooI SRE 戰情室 route、TG Bot / Gateway / receipt / AI analysis 邊界拉到治理頁前段主看板；24 類專業任務、8 個領域、5 段 Telegram bridge、6 種訊息類型、MCP/RAG stack、日報 / 週報 / 月報 / action-required 報告契約已固定；Telegram 實發、Gateway queue、Bot API、delivery receipt production write、secret read、paid API、host write、kubectl action 仍全部關閉 | `ai_agent_professional_task_expansion_v1`、`docs/evaluations/ai_agent_professional_task_expansion_2026-06-18_1200_p2_405e.json`、`GET /api/v1/agents/agent-professional-task-expansion`、`GET /api/v1/agents/agent-report-live-delivery-approval-package`、`/zh-TW/governance?tab=automation-inventory`、feature commit `2500496f`、deploy marker `f5be4cb8`、Gitea code-review `3084` / CD `3083` success、production API readback、desktop / mobile browser smoke、`docs/ai/AI_AGENT_PROFESSIONAL_TASK_EXPANSION_2026-06-15.md`、需批准任務 `19`、no-send preview `6`、dedup key `6`、receipt expectation `6`、canary package `1`、canary send approval packet `1`、delivery gate `1`、dry-run rehearsal `1`、P2-111 delivery approval packet `5`、route gate `4`、no-send receipt `4`、交付欄位 `8`、preflight `8`、hold reason `7`、preview / canary / delivery / rehearsal live write `0`；下一步 P2-405F / P2-406B receipt readback owner review |
+| AI Agent 專業任務擴展與 Telegram Runtime Bridge | 99% | P2-405F 已完成只讀契約、API service guard、治理頁 P2-405F owner review gate、9 個 owner 必填欄位、9 個 acceptance check、8 個 rejection reason、6 個 reviewer action、8 個 receipt readback check；P2-405E 已正式驗證 dry-run delivery rehearsal；P2-406A 已把 P2-111 日報 / 週報 / 月報實發批准包、AwoooI SRE 戰情室 route、TG Bot / Gateway / receipt / AI analysis 邊界拉到治理頁前段主看板；24 類專業任務、8 個領域、5 段 Telegram bridge、6 種訊息類型、MCP/RAG stack、日報 / 週報 / 月報 / action-required 報告契約已固定；owner review received / accepted、Telegram 實發、Gateway queue、Bot API、delivery receipt production write、secret read、paid API、host write、kubectl action 仍全部關閉 | `ai_agent_professional_task_expansion_v1`、`docs/evaluations/ai_agent_professional_task_expansion_2026-06-18_1430_p2_405f.json`、`docs/evaluations/ai_agent_professional_task_expansion_2026-06-18_1200_p2_405e.json`、`GET /api/v1/agents/agent-professional-task-expansion`、`GET /api/v1/agents/agent-report-live-delivery-approval-package`、`/zh-TW/governance?tab=automation-inventory`、feature commit `2500496f`、deploy marker `f5be4cb8`、Gitea code-review `3084` / CD `3083` success、P2-405E production API readback、desktop / mobile browser smoke、P2-405F local API regression `26 passed`、`docs/ai/AI_AGENT_PROFESSIONAL_TASK_EXPANSION_2026-06-15.md`、需批准任務 `19`、no-send preview `6`、dedup key `6`、receipt expectation `6`、canary package `1`、canary send approval packet `1`、delivery gate `1`、dry-run rehearsal `1`、owner review gate `1`、P2-111 delivery approval packet `5`、route gate `4`、no-send receipt `4`、owner review received / accepted `0 / 0`、live delivery approved / attempt allowed `0 / 0`、preview / canary / delivery / rehearsal / owner review live write `0`；下一步 P2-406B receipt readback owner review production verification |
 | Owner response 預檢與拒收邊界 | 100% | P2-143 已完成正式部署與 production readback；承接 P2-141 input prep 與 P2-142 War Room，只建立 owner / verifier / rollback / maintenance / live-apply 五類外部回覆的 intake 預檢、必填欄位與拒收規則；正式 owner response 尚未收到、未接受、未寫入 | `ai_agent_result_capture_release_decision_owner_response_preflight_v1`、`GET /api/v1/agents/agent-result-capture-release-decision-owner-response-preflight`、feature commit `755b0a8d`、deploy marker `667d6329`、Gitea code-review `2961` / CD `2960` success、5 個 response intake lane、18 個 required owner field、6 個 validation check、6 個 rejection guard、5 個 operator action；owner response received / accepted / redacted payload / reviewer queue / Gateway / Telegram / Bot API / production write / secret read / destructive operation 全為 `0` |
 | Owner response 回讀狀態 | 100% | P2-144 已完成正式部署與 production readback；承接 P2-143 preflight，只讀回五類外部回覆仍未收到、未接受、未拒絕、未保存 | `ai_agent_result_capture_release_decision_owner_response_readback_v1`、`GET /api/v1/agents/agent-result-capture-release-decision-owner-response-readback`、feature commit `8795f100`、deploy marker `ac938037`、Gitea code-review `2965` / CD `2964` success、5 個 response readback lane、18 個 required owner field、6 個 readback validation check、6 個 readback rejection guard、5 個 operator action、waiting external response `5`、no external response received `5`；owner response received / accepted / redacted payload / reviewer queue / Gateway / Telegram / Bot API / production write / secret read / destructive operation 全為 `0` |
 | 本工作清單與分析報告 | 100% | 已完成 | 本 MD 文件 |
 
 ### 2026-06-18 12:00 狀態同步
 
+- `P2-405F` AI Agent TG Canary owner review gate 已本地完成：新增 `docs/evaluations/ai_agent_professional_task_expansion_2026-06-18_1430_p2_405f.json`，current `P2-405F`、next `P2-406B`、completion `99`。
+- P2-405F 固定 1 份 owner review gate、9 個 owner 必填欄位、9 個 acceptance check、8 個 rejection reason、6 個 reviewer action、8 個 receipt readback check。
+- 治理頁 `automation-inventory` 已顯示 P2-405F owner review gate、owner 必填欄位、receipt readback owner review、acceptance checks、rejection reasons、queue / Bot API / Telegram send / receipt write 狀態。
+- 本地證據：JSON parse、Python compile、AI Agent professional task expansion API/service regression `26 passed`。
+- owner review received / accepted、live delivery approved / attempt allowed、Telegram send、Gateway queue write、Bot API call、delivery receipt production write、secret read、paid API、host write、kubectl action、production write 全部仍為 `0 / false`；P2-406B 才能進入 receipt readback owner review 正式驗證，且仍不得實發。
 - `P2-405E` AI Agent TG Canary 乾跑派送演練已正式完成：新增 `docs/evaluations/ai_agent_professional_task_expansion_2026-06-18_1200_p2_405e.json`，current `P2-405E`、next `P2-405F`、completion `98`。
 - P2-405E 固定 1 份 canary dry-run delivery rehearsal、6 個 dry-run step、8 個 receipt readback check、7 個 stop condition、5 個 rollback / mute control。
 - 治理頁 `automation-inventory` 已顯示 P2-405E 乾跑派送演練、Gateway envelope 演練、回執讀回演練、dry-run step、stop condition、queue / Bot API / Telegram send / receipt write 狀態。

docs/ai/AI_AGENT_PROFESSIONAL_TASK_EXPANSION_2026-06-15.md

@@ -1,12 +1,12 @@
 # AI Agent 專業任務擴展與 Telegram Runtime Bridge 工作報告
 
 > 日期：2026-06-18（台北時間）
-> 狀態：P2-405E 已完成 Telegram Canary Dry-run Delivery Rehearsal、6 個 rehearsal step、8 個 readback check、7 個 stop condition、5 個 rollback / mute 控制、API guard、測試、治理頁可視化與正式站 API / desktop / mobile smoke；Telegram 實發仍未啟用。
+> 狀態：P2-405F 已完成 Telegram Canary Owner Review Gate、9 個 owner 必填欄位、9 個 acceptance check、8 個 rejection reason、6 個 reviewer action、8 個 receipt readback check、API guard、測試與治理頁可視化；Telegram 實發仍未啟用。
 > 事實來源：`ai_agent_professional_task_expansion_v1`
 
 ## 1. 結論
 
-本輪把「AI Agent 還能處理哪些專業工作」正式產品化成 24 類專業任務，並把 Telegram 群組 / TG Bot 整合拆成 5 段啟動前閘門。P2-405D 已把第一次 Canary delivery 前必須由統帥確認的交付欄位、preflight、hold reason、rollback / mute 與 readback plan 顯示到治理頁；P2-405E 進一步把第一個 `daily_agent_workload_digest` dry-run delivery rehearsal 固定成可重放證據，包含 preview hash、dedup key、Gateway envelope preview、Hermes receipt readback drill 與停止條件。
+本輪把「AI Agent 還能處理哪些專業工作」正式產品化成 24 類專業任務，並把 Telegram 群組 / TG Bot 整合拆成 5 段啟動前閘門。P2-405D 已把第一次 Canary delivery 前必須由統帥確認的交付欄位、preflight、hold reason、rollback / mute 與 readback plan 顯示到治理頁；P2-405E 進一步把第一個 `daily_agent_workload_digest` dry-run delivery rehearsal 固定成可重放證據；P2-405F 再把這份演練轉成 owner review gate，要求 owner 回覆、Hermes receipt readback、OpenClaw / Security / QA 驗收與拒收條件全部清楚可見。
 
 這不是直接讓 AI Agent 發 Telegram 或改 production；目前只允許 no-send preview、queue preview readback、owner review、canary approval package、canary send approval packet、canary delivery gate 與 dry-run delivery rehearsal。真正送到 **AwoooI SRE 戰情室** 必須先通過 owner-approved P2-405F live canary approval、dedup、receipt、redaction、OpenClaw 仲裁、Security gate 與 QA verifier。
 
@@ -20,8 +20,9 @@
 | Canary 發送批准包 | 100% | 1 份 canary send approval packet、7 個批准欄位、6 個停止條件、5 步 mute / rollback、6 個 receipt readback check 已固定 |
 | Canary Delivery Gate | 100% | 1 份 delivery gate、8 個交付必填欄位、8 個 preflight、7 個 hold reason、7 個 readback check、5 個 rollback / mute 控制已固定 |
 | Canary Dry-run Delivery Rehearsal | 100% | 1 份 dry-run rehearsal、6 個 step、8 個 readback check、7 個 stop condition、5 個 rollback / mute 控制已固定 |
+| Canary Owner Review Gate | 100% | 1 份 owner review gate、9 個 owner 欄位、9 個 acceptance check、8 個 rejection reason、6 個 reviewer action、8 個 receipt check 已固定 |
 | API / loader | 100% | `GET /api/v1/agents/agent-professional-task-expansion` 只讀輸出 |
-| 治理頁可視化 | 100% | `/zh-TW/governance?tab=automation-inventory` 顯示任務、風險、TG bridge、preview、dedup、receipt、canary、delivery gate、rehearsal 與 live/send/write=0 |
+| 治理頁可視化 | 100% | `/zh-TW/governance?tab=automation-inventory` 顯示任務、風險、TG bridge、preview、dedup、receipt、canary、delivery gate、rehearsal、owner review gate 與 live/send/write=0 |
 | Telegram 實發 | 0% | `telegram_send_count=0`、`bot_api_call_count=0`、`gateway_queue_write_count=0` |
 | Runtime 自動優化 | 0% | production write、host write、kubectl、paid API、secret read 全部維持 0 |
 
@@ -110,7 +111,26 @@ Canary delivery gate 固定 8 個 preflight check、7 個 hold reason、7 個 re
 
 Rehearsal 固定 6 個 dry-run step、8 個 readback check、7 個 stop condition 與 5 個 rollback / mute control；`live_delivery_enabled`、`gateway_queue_write_enabled`、`bot_api_call_enabled`、`telegram_send_enabled`、`delivery_receipt_write_enabled`、`production_write_enabled`、`secret_read_enabled`、`paid_api_enabled` 全部仍為 `false`。
 
-## 9. 專業任務總覽
+## 9. P2-405F Canary Owner Review Gate
+
+目前 canary live delivery owner review gate 狀態為 `ready_for_owner_review_no_send`，`gate_ready=true`，但 `owner_review_received=false`、`owner_review_accepted=false`、`live_canary_delivery_approved=false`、`delivery_attempt_allowed=false`。它承接 P2-405E rehearsal `8 / 8` readback 與 failed `0`，但只把證據推進到 owner review，不做任何實發。
+
+| 項目 | 值 | 邊界 |
+|---|---|---|
+| selected message | `daily_agent_workload_digest` | 只允許單一訊息型別 |
+| target room | `SRE_GROUP_CHAT_ID` | 只顯示 env ref，不顯示 chat id value |
+| owner agent | `telegram_ops_liaison` | 只做 owner review gate |
+| receipt owner | `hermes` | 只做 receipt readback plan |
+| arbiter | `openclaw` | 仲裁是否可進下一關 |
+| owner fields | `9` | 全部等待 owner response |
+| acceptance checks | `9` | 未通過不得進 live canary |
+| rejection reasons | `8` | 任一命中即退回 no-send |
+| reviewer actions | `6` | 只能 approve next gate / request fix / reject / mute / manual review / hold |
+| receipt checks | `8` | completed `0`、failed `0`，尚未讀正式 receipt |
+
+Owner review gate 固定 `live_delivery_enabled`、`gateway_queue_write_enabled`、`bot_api_call_enabled`、`telegram_send_enabled`、`delivery_receipt_write_enabled`、`production_write_enabled`、`secret_read_enabled`、`paid_api_enabled` 全部為 `false`。P2-406B 才能進入 receipt readback owner review 正式驗證，仍不得直接實發。
+
+## 10. 專業任務總覽
 
 | 領域 | 任務數 | 代表任務 | 主責 |
 |---|---:|---|---|
@@ -123,7 +143,7 @@ Rehearsal 固定 6 個 dry-run step、8 個 readback check、7 個 stop conditio
 | AI Governance / Replay / Market | 4 | market watch、NemoTron replay、cost forecast、runbook/postmortem | OpenClaw / NemoTron / Hermes |
 | Telegram / Reports / Receipts | 3 | digest preview、report truth gate、post-action verifier | Telegram Ops / Hermes / OpenClaw |
 
-## 10. 專業能力層級
+## 11. 專業能力層級
 
 | 層級 | AI Agent 可自動做 | Gate |
 |---|---|---|
@@ -132,7 +152,7 @@ Rehearsal 固定 6 個 dry-run step、8 個 readback check、7 個 stop conditio
 | 高風險 | 只產批准包、rollback plan、failure-only digest 草案 | 統帥批准 |
 | Critical | production write、kubectl、ArgoCD sync、Telegram 實發、secret、restore、host write | 預設 blocked |
 
-## 11. MCP / RAG
+## 12. MCP / RAG
 
 首批 MCP：Gitea、Browser、Observability、Telegram Gateway、Package Registry、Database Readonly、Backup Status、ArgoCD Readonly、HTTP Probe、Fixture Store。
 
@@ -140,7 +160,7 @@ Rehearsal 固定 6 個 dry-run step、8 個 readback check、7 個 stop conditio
 
 成長指標：KM entries、PlayBook updates、recommendations、replay score delta、blocked action prevented count、receipt missing count。
 
-## 12. 邊界
+## 13. 邊界
 
 - 不直接發 Telegram。
 - 不寫 Telegram Gateway queue。
@@ -149,9 +169,9 @@ Rehearsal 固定 6 個 dry-run step、8 個 readback check、7 個 stop conditio
 - 不把工作視窗對話、未遮罩提示、私人推理或未遮罩 runtime payload 放進前端或 Telegram。
 - 不做 production write、host write、kubectl、ArgoCD sync、restore、rollback、paid API、SDK install。
 
-## 13. 下一步
+## 14. 下一步
 
-1. P2-405F：以 P2-405E rehearsal readback 為證據，產出 owner-approved single canary live delivery approval package。
+1. P2-406B：以 P2-405F owner review gate 為基線，做 receipt readback owner review production verification。
 2. P2-405G：canary 通過後才開日報 / 週報 / 月報 digest delivery。
 3. P2-405H：Action-required digest 只對 failure / high-risk / approval-required 事件開啟。
 4. P2-405H：把 receipt readback 與 report status board 串起來，但仍需 canary gate 後才能寫正式 receipt。

docs/schemas/ai_agent_professional_task_expansion_v1.schema.json

@@ -46,10 +46,10 @@
           ]
         },
         "current_task_id": {
-          "const": "P2-405E"
+          "const": "P2-405F"
         },
         "next_task_id": {
-          "const": "P2-405F"
+          "const": "P2-406B"
         },
         "overall_completion_percent": {
           "type": "integer",
@@ -99,7 +99,8 @@
         "canary_approval_package",
         "canary_send_approval_packet",
         "canary_delivery_gate",
-        "canary_delivery_rehearsal"
+        "canary_delivery_rehearsal",
+        "canary_live_delivery_owner_review_gate"
       ],
       "properties": {
         "canonical_room": {
@@ -710,6 +711,174 @@
             }
           },
           "additionalProperties": true
+        },
+        "canary_live_delivery_owner_review_gate": {
+          "type": "object",
+          "required": [
+            "gate_id",
+            "status",
+            "gate_ready",
+            "approval_required",
+            "owner_review_received",
+            "owner_review_accepted",
+            "live_canary_delivery_approved",
+            "delivery_attempt_allowed",
+            "prior_rehearsal_id",
+            "prior_readback_completed_check_count",
+            "prior_readback_failed_check_count",
+            "selected_message_type",
+            "target_room_env",
+            "target_room_value_visible",
+            "dedup_key",
+            "sanitized_preview_hash",
+            "owner_agent",
+            "receipt_readback_owner",
+            "arbiter",
+            "required_owner_fields",
+            "acceptance_checks",
+            "rejection_reasons",
+            "reviewer_actions",
+            "receipt_readback_plan",
+            "execution_flags",
+            "owner_decision_log",
+            "next_gate"
+          ],
+          "properties": {
+            "status": {
+              "const": "ready_for_owner_review_no_send"
+            },
+            "gate_ready": {
+              "const": true
+            },
+            "approval_required": {
+              "const": true
+            },
+            "owner_review_received": {
+              "const": false
+            },
+            "owner_review_accepted": {
+              "const": false
+            },
+            "live_canary_delivery_approved": {
+              "const": false
+            },
+            "delivery_attempt_allowed": {
+              "const": false
+            },
+            "prior_readback_completed_check_count": {
+              "const": 8
+            },
+            "prior_readback_failed_check_count": {
+              "const": 0
+            },
+            "selected_message_type": {
+              "const": "daily_agent_workload_digest"
+            },
+            "target_room_env": {
+              "const": "SRE_GROUP_CHAT_ID"
+            },
+            "target_room_value_visible": {
+              "const": false
+            },
+            "owner_agent": {
+              "const": "telegram_ops_liaison"
+            },
+            "receipt_readback_owner": {
+              "const": "hermes"
+            },
+            "arbiter": {
+              "const": "openclaw"
+            },
+            "required_owner_fields": {
+              "type": "array",
+              "minItems": 9,
+              "maxItems": 9
+            },
+            "acceptance_checks": {
+              "type": "array",
+              "minItems": 9,
+              "maxItems": 9
+            },
+            "rejection_reasons": {
+              "type": "array",
+              "minItems": 8,
+              "maxItems": 8
+            },
+            "reviewer_actions": {
+              "type": "array",
+              "minItems": 6,
+              "maxItems": 6
+            },
+            "receipt_readback_plan": {
+              "type": "object",
+              "required": [
+                "owner_agent",
+                "required_checks",
+                "completed_check_count",
+                "failed_check_count",
+                "production_receipt_write_enabled",
+                "live_receipt_readback_enabled"
+              ],
+              "properties": {
+                "owner_agent": {
+                  "const": "hermes"
+                },
+                "required_checks": {
+                  "type": "array",
+                  "minItems": 8,
+                  "maxItems": 8
+                },
+                "completed_check_count": {
+                  "const": 0
+                },
+                "failed_check_count": {
+                  "const": 0
+                },
+                "production_receipt_write_enabled": {
+                  "const": false
+                },
+                "live_receipt_readback_enabled": {
+                  "const": false
+                }
+              },
+              "additionalProperties": true
+            },
+            "execution_flags": {
+              "type": "object",
+              "properties": {
+                "live_delivery_enabled": {
+                  "const": false
+                },
+                "gateway_queue_write_enabled": {
+                  "const": false
+                },
+                "bot_api_call_enabled": {
+                  "const": false
+                },
+                "telegram_send_enabled": {
+                  "const": false
+                },
+                "delivery_receipt_write_enabled": {
+                  "const": false
+                },
+                "production_write_enabled": {
+                  "const": false
+                },
+                "secret_read_enabled": {
+                  "const": false
+                },
+                "paid_api_enabled": {
+                  "const": false
+                }
+              },
+              "additionalProperties": true
+            },
+            "owner_decision_log": {
+              "type": "array",
+              "maxItems": 0
+            }
+          },
+          "additionalProperties": true
         }
       },
       "additionalProperties": true
@@ -887,7 +1056,21 @@
         "canary_delivery_rehearsal_live_send_enabled_count",
         "canary_delivery_rehearsal_gateway_queue_write_enabled_count",
         "canary_delivery_rehearsal_bot_api_call_enabled_count",
-        "canary_delivery_rehearsal_receipt_write_enabled_count"
+        "canary_delivery_rehearsal_receipt_write_enabled_count",
+        "canary_live_delivery_owner_review_gate_count",
+        "canary_live_delivery_owner_review_required_field_count",
+        "canary_live_delivery_owner_review_acceptance_check_count",
+        "canary_live_delivery_owner_review_rejection_reason_count",
+        "canary_live_delivery_owner_review_reviewer_action_count",
+        "canary_live_delivery_owner_review_receipt_check_count",
+        "canary_live_delivery_owner_review_received_count",
+        "canary_live_delivery_owner_review_accepted_count",
+        "canary_live_delivery_approved_count",
+        "canary_live_delivery_attempt_allowed_count",
+        "canary_live_delivery_gateway_queue_write_enabled_count",
+        "canary_live_delivery_bot_api_call_enabled_count",
+        "canary_live_delivery_telegram_send_enabled_count",
+        "canary_live_delivery_receipt_write_enabled_count"
       ],
       "properties": {
         "professional_task_count": {
@@ -1084,6 +1267,48 @@
         },
         "canary_delivery_rehearsal_receipt_write_enabled_count": {
           "const": 0
+        },
+        "canary_live_delivery_owner_review_gate_count": {
+          "const": 1
+        },
+        "canary_live_delivery_owner_review_required_field_count": {
+          "const": 9
+        },
+        "canary_live_delivery_owner_review_acceptance_check_count": {
+          "const": 9
+        },
+        "canary_live_delivery_owner_review_rejection_reason_count": {
+          "const": 8
+        },
+        "canary_live_delivery_owner_review_reviewer_action_count": {
+          "const": 6
+        },
+        "canary_live_delivery_owner_review_receipt_check_count": {
+          "const": 8
+        },
+        "canary_live_delivery_owner_review_received_count": {
+          "const": 0
+        },
+        "canary_live_delivery_owner_review_accepted_count": {
+          "const": 0
+        },
+        "canary_live_delivery_approved_count": {
+          "const": 0
+        },
+        "canary_live_delivery_attempt_allowed_count": {
+          "const": 0
+        },
+        "canary_live_delivery_gateway_queue_write_enabled_count": {
+          "const": 0
+        },
+        "canary_live_delivery_bot_api_call_enabled_count": {
+          "const": 0
+        },
+        "canary_live_delivery_telegram_send_enabled_count": {
+          "const": 0
+        },
+        "canary_live_delivery_receipt_write_enabled_count": {
+          "const": 0
         }
       },
       "additionalProperties": true