新增市場情報 review decision writer gate

tests/test_market_intel_skeleton.py

@@ -188,6 +188,69 @@ def _build_candidate_queue_writer_receipt_fixture(batch_id="sample-batch-receipt
     }
 
 
+def _build_ready_review_decision_transaction(
+    batch_id="sample-batch-review-decision-writer"
+):
+    from services.market_intel.candidate_queue_review_decision import (
+        build_candidate_queue_review_decision,
+    )
+    from services.market_intel.candidate_queue_review_decision_approval import (
+        build_candidate_queue_review_decision_approval,
+    )
+    from services.market_intel.candidate_queue_review_decision_transaction import (
+        build_candidate_queue_review_decision_transaction,
+    )
+
+    fixture = _build_candidate_queue_writer_receipt_fixture(batch_id)
+    inventory = {
+        "mode": "candidate_queue_review_inventory_preview",
+        "review_inventory_ready": True,
+        "expected_dedupe_keys": fixture["expected_keys"],
+        "row_summaries": [
+            {
+                "dedupe_key": fixture["expected_keys"][0],
+                "review_state": "needs_review",
+                "priority_lane": "watch",
+                "total_score": 82.5,
+            }
+        ],
+    }
+    decision_evidence = {
+        "reviewer_id": "operator-a",
+        "proposed_review_decision": "confirmed",
+        "decision_notes": "evidence reviewed manually",
+        "operator_confirmed_manual_decision_only": True,
+        "operator_confirmed_no_api_db_write": True,
+        "operator_confirmed_no_scheduler_attach": True,
+    }
+    approval_evidence = {
+        **decision_evidence,
+        "decision_approval_notes": "approved for cli-only transaction preview",
+        "operator_confirmed_decision_payload_reviewed": True,
+        "operator_confirmed_decision_apply_requires_cli": True,
+        "operator_confirmed_review_state_update_is_not_api": True,
+    }
+    transaction_evidence = {
+        **approval_evidence,
+        "decision_transaction_notes": "payload reviewed for shell transaction",
+        "operator_confirmed_transaction_payload_reviewed": True,
+        "operator_confirmed_cli_only_transaction": True,
+    }
+    decision = build_candidate_queue_review_decision(
+        review_inventory=inventory,
+        operator_evidence=decision_evidence,
+    )
+    approval = build_candidate_queue_review_decision_approval(
+        review_decision=decision,
+        operator_evidence=approval_evidence,
+    )
+    transaction = build_candidate_queue_review_decision_transaction(
+        decision_approval=approval,
+        operator_evidence=transaction_evidence,
+    )
+    return transaction, transaction_evidence
+
+
 def test_market_intel_defaults_are_safe():
     service = MarketIntelService()
     status = service.get_runtime_status().to_dict()
@@ -769,6 +832,14 @@ def test_market_intel_preview_template_uses_safe_fetch_false_endpoint():
         "data-market-intel-sample-candidate-queue-review-decision-transaction"
         in template
     )
+    assert (
+        "market_intel_review.market_intel_manual_sample_candidate_queue_review_decision_writer_status"
+        in template
+    )
+    assert (
+        "data-market-intel-sample-candidate-queue-review-decision-writer"
+        in template
+    )
     assert "X-CSRFToken" in template
     assert "market_intel.market_intel_scheduler_plan" in template
     assert "market_intel.market_intel_match_review_plan" in template
@@ -805,7 +876,7 @@ def test_legacy_source_bridge_default_is_planned_only():
     bridge = MarketIntelService().build_legacy_source_bridge()
 
     assert bridge["mode"] == "legacy_source_bridge_planned"
-    assert bridge["phase"] == "phase_68_candidate_queue_review_decision_transaction"
+    assert bridge["phase"] == "phase_69_candidate_queue_review_decision_writer_cli"
     assert bridge["execute_requested"] is False
     assert bridge["read_only_query_executed"] is False
     assert bridge["database_connection_opened"] is False
@@ -963,7 +1034,7 @@ def test_mcp_tool_contract_preview_is_read_only_and_whitelisted():
     contract = MarketIntelService().build_mcp_tool_contract()
 
     assert contract["mode"] == "mcp_tool_contract_preview"
-    assert contract["phase"] == "phase_68_candidate_queue_review_decision_transaction"
+    assert contract["phase"] == "phase_69_candidate_queue_review_decision_writer_cli"
     assert contract["caller"] == "market_intel"
     assert contract["contract_ready"] is True
     assert contract["blocked_reasons"] == []
@@ -1096,7 +1167,7 @@ def test_mcp_activation_runbook_route_is_preview_only():
 
     assert response.status_code == 200
     assert data["mode"] == "mcp_activation_runbook_preview"
-    assert data["phase"] == "phase_68_candidate_queue_review_decision_transaction"
+    assert data["phase"] == "phase_69_candidate_queue_review_decision_writer_cli"
     assert data["deployment_actions_executed"] is False
     assert data["docker_command_executed"] is False
     assert data["ssh_command_executed"] is False
@@ -1109,7 +1180,7 @@ def test_mcp_fetch_gate_default_blocks_external_fetch():
     gate = MarketIntelService().build_mcp_fetch_gate(fetch_requested=True)
 
     assert gate["mode"] == "mcp_fetch_gate_planned"
-    assert gate["phase"] == "phase_68_candidate_queue_review_decision_transaction"
+    assert gate["phase"] == "phase_69_candidate_queue_review_decision_writer_cli"
     assert gate["fetch_requested"] is True
     assert gate["manual_fetch_gate_open"] is False
     assert gate["network_request_allowed"] is False
@@ -1179,7 +1250,7 @@ def test_mcp_fetch_gate_route_is_preview_only():
 
     assert response.status_code == 200
     assert data["mode"] == "mcp_fetch_gate_planned"
-    assert data["phase"] == "phase_68_candidate_queue_review_decision_transaction"
+    assert data["phase"] == "phase_69_candidate_queue_review_decision_writer_cli"
     assert data["fetch_requested"] is False
     assert data["network_request_allowed"] is False
     assert data["external_network_executed"] is False
@@ -1191,7 +1262,7 @@ def test_manual_sample_plan_preview_blocks_fetch_and_write():
     plan = MarketIntelService().build_manual_sample_plan()
 
     assert plan["mode"] == "manual_sample_fetch_plan_preview"
-    assert plan["phase"] == "phase_68_candidate_queue_review_decision_transaction"
+    assert plan["phase"] == "phase_69_candidate_queue_review_decision_writer_cli"
     assert plan["ready_for_manual_sample_fetch"] is False
     assert plan["sample_fetch_executed"] is False
     assert plan["external_network_executed"] is False
@@ -1239,7 +1310,7 @@ def test_manual_sample_plan_route_is_preview_only():
 
     assert response.status_code == 200
     assert data["mode"] == "manual_sample_fetch_plan_preview"
-    assert data["phase"] == "phase_68_candidate_queue_review_decision_transaction"
+    assert data["phase"] == "phase_69_candidate_queue_review_decision_writer_cli"
     assert data["sample_fetch_executed"] is False
     assert data["external_network_executed"] is False
     assert data["database_write_executed"] is False
@@ -1250,7 +1321,7 @@ def test_manual_sample_acceptance_preview_blocks_candidate_import():
     acceptance = MarketIntelService().build_manual_sample_acceptance()
 
     assert acceptance["mode"] == "manual_sample_acceptance_preview"
-    assert acceptance["phase"] == "phase_68_candidate_queue_review_decision_transaction"
+    assert acceptance["phase"] == "phase_69_candidate_queue_review_decision_writer_cli"
     assert acceptance["contract_ready"] is True
     assert acceptance["sample_result_loaded"] is False
     assert acceptance["sample_result_accepted"] is False
@@ -1292,7 +1363,7 @@ def test_manual_sample_acceptance_route_is_preview_only():
 
     assert response.status_code == 200
     assert data["mode"] == "manual_sample_acceptance_preview"
-    assert data["phase"] == "phase_68_candidate_queue_review_decision_transaction"
+    assert data["phase"] == "phase_69_candidate_queue_review_decision_writer_cli"
     assert data["sample_result_loaded"] is False
     assert data["candidate_import_allowed"] is False
     assert data["external_network_executed"] is False
@@ -1304,7 +1375,7 @@ def test_manual_sample_review_preview_is_planned_until_result_loaded():
     review = MarketIntelService().build_manual_sample_review()
 
     assert review["mode"] == "manual_sample_review_preview"
-    assert review["phase"] == "phase_68_candidate_queue_review_decision_transaction"
+    assert review["phase"] == "phase_69_candidate_queue_review_decision_writer_cli"
     assert review["contract_ready"] is True
     assert review["sample_result_loaded"] is False
     assert review["sample_result_reviewed"] is False
@@ -1415,7 +1486,7 @@ def test_manual_sample_review_route_is_preview_only():
 
     assert response.status_code == 200
     assert data["mode"] == "manual_sample_review_preview"
-    assert data["phase"] == "phase_68_candidate_queue_review_decision_transaction"
+    assert data["phase"] == "phase_69_candidate_queue_review_decision_writer_cli"
     assert data["sample_result_loaded"] is False
     assert data["sample_result_reviewed"] is False
     assert data["candidate_import_allowed"] is False
@@ -1454,7 +1525,7 @@ def test_manual_sample_review_evaluation_preview_accepts_payload_without_persist
     )
 
     assert review["mode"] == "manual_sample_review_evaluation_preview"
-    assert review["phase"] == "phase_68_candidate_queue_review_decision_transaction"
+    assert review["phase"] == "phase_69_candidate_queue_review_decision_writer_cli"
     assert review["review_request_type"] == "operator_posted_json"
     assert review["payload_received"] is True
     assert review["payload_valid_json_object"] is True
@@ -1516,7 +1587,7 @@ def test_manual_sample_review_evaluate_route_is_post_only_and_no_write():
 
     assert response.status_code == 200
     assert data["mode"] == "manual_sample_review_evaluation_preview"
-    assert data["phase"] == "phase_68_candidate_queue_review_decision_transaction"
+    assert data["phase"] == "phase_69_candidate_queue_review_decision_writer_cli"
     assert data["payload_received"] is True
     assert data["payload_valid_json_object"] is True
     assert data["payload_persisted"] is False
@@ -1596,7 +1667,7 @@ def test_manual_sample_candidate_handoff_preview_creates_candidates_without_pers
     )
 
     assert handoff["mode"] == "manual_sample_candidate_handoff_preview"
-    assert handoff["phase"] == "phase_68_candidate_queue_review_decision_transaction"
+    assert handoff["phase"] == "phase_69_candidate_queue_review_decision_writer_cli"
     assert handoff["payload_received"] is True
     assert handoff["payload_valid_json_object"] is True
     assert handoff["payload_persisted"] is False
@@ -1660,7 +1731,7 @@ def test_manual_sample_candidate_handoff_route_is_post_only_and_no_write():
 
     assert response.status_code == 200
     assert data["mode"] == "manual_sample_candidate_handoff_preview"
-    assert data["phase"] == "phase_68_candidate_queue_review_decision_transaction"
+    assert data["phase"] == "phase_69_candidate_queue_review_decision_writer_cli"
     assert data["payload_received"] is True
     assert data["handoff_ready"] is True
     assert data["candidate_handoff_created"] is True
@@ -1719,7 +1790,7 @@ def test_manual_sample_candidate_queue_draft_preview_builds_review_items_without
     )
 
     assert queue_draft["mode"] == "manual_sample_candidate_queue_draft_preview"
-    assert queue_draft["phase"] == "phase_68_candidate_queue_review_decision_transaction"
+    assert queue_draft["phase"] == "phase_69_candidate_queue_review_decision_writer_cli"
     assert queue_draft["payload_received"] is True
     assert queue_draft["payload_valid_json_object"] is True
     assert queue_draft["payload_persisted"] is False
@@ -1793,7 +1864,7 @@ def test_manual_sample_candidate_queue_draft_route_is_post_only_and_no_write():
 
     assert response.status_code == 200
     assert data["mode"] == "manual_sample_candidate_queue_draft_preview"
-    assert data["phase"] == "phase_68_candidate_queue_review_decision_transaction"
+    assert data["phase"] == "phase_69_candidate_queue_review_decision_writer_cli"
     assert data["payload_received"] is True
     assert data["handoff_ready"] is True
     assert data["queue_draft_ready"] is True
@@ -1856,7 +1927,7 @@ def test_manual_sample_candidate_queue_approval_preview_blocks_write_and_maps_ro
     )
 
     assert approval["mode"] == "manual_sample_candidate_queue_approval_preview"
-    assert approval["phase"] == "phase_68_candidate_queue_review_decision_transaction"
+    assert approval["phase"] == "phase_69_candidate_queue_review_decision_writer_cli"
     assert approval["payload_received"] is True
     assert approval["payload_valid_json_object"] is True
     assert approval["payload_persisted"] is False
@@ -1934,7 +2005,7 @@ def test_manual_sample_candidate_queue_approval_route_is_post_only_and_no_write(
 
     assert response.status_code == 200
     assert data["mode"] == "manual_sample_candidate_queue_approval_preview"
-    assert data["phase"] == "phase_68_candidate_queue_review_decision_transaction"
+    assert data["phase"] == "phase_69_candidate_queue_review_decision_writer_cli"
     assert data["payload_received"] is True
     assert data["approval_preview_created"] is True
     assert data["approval_request_created"] is False
@@ -1997,7 +2068,7 @@ def test_manual_sample_candidate_queue_transaction_preview_blocks_execution():
     )
 
     assert transaction["mode"] == "manual_sample_candidate_queue_transaction_preview"
-    assert transaction["phase"] == "phase_68_candidate_queue_review_decision_transaction"
+    assert transaction["phase"] == "phase_69_candidate_queue_review_decision_writer_cli"
     assert transaction["payload_received"] is True
     assert transaction["payload_valid_json_object"] is True
     assert transaction["payload_persisted"] is False
@@ -2077,7 +2148,7 @@ def test_manual_sample_candidate_queue_transaction_route_is_post_only_and_no_wri
 
     assert response.status_code == 200
     assert data["mode"] == "manual_sample_candidate_queue_transaction_preview"
-    assert data["phase"] == "phase_68_candidate_queue_review_decision_transaction"
+    assert data["phase"] == "phase_69_candidate_queue_review_decision_writer_cli"
     assert data["payload_received"] is True
     assert data["transaction_preview_created"] is True
     assert data["transaction_ready"] is False
@@ -3737,6 +3808,65 @@ def test_candidate_queue_review_decision_transaction_preview_is_shell_only():
     )
 
 
+def test_candidate_queue_review_decision_writer_cli_gate_is_non_writing():
+    from services.market_intel.candidate_queue_review_decision_writer_cli import (
+        APPROVAL_ENV_VAR,
+        build_candidate_queue_review_decision_writer_cli_plan,
+    )
+
+    transaction, _ = _build_ready_review_decision_transaction()
+    plan = build_candidate_queue_review_decision_writer_cli_plan(
+        transaction_preview=transaction,
+        execute_requested=True,
+        apply_real_write=True,
+        approval_token=TEST_APPROVAL_TOKEN,
+        approval_token_secret=TEST_APPROVAL_TOKEN,
+        backup_verified=True,
+        review_inventory_smoke_passed=True,
+    )
+    payload = json.dumps(plan, ensure_ascii=False, sort_keys=True)
+
+    assert plan["mode"] == "candidate_queue_review_decision_writer_cli_blocked"
+    assert plan["target_table"] == "market_alert_review_queue"
+    assert plan["target_operation"] == "update_review_state"
+    assert plan["script_path"] == "scripts/market_intel_review_decision_writer.py"
+    assert plan["approval_env_var"] == APPROVAL_ENV_VAR
+    assert plan["execute_requested"] is True
+    assert plan["apply_real_write_requested"] is True
+    assert plan["approval_token_present"] is True
+    assert plan["approval_token_valid"] is True
+    assert plan["writer_implementation_enabled"] is False
+    assert plan["ready_for_real_write"] is False
+    assert plan["ready_for_api_review_state_update"] is False
+    assert plan["ready_for_api_database_write"] is False
+    assert plan["api_executes_cli"] is False
+    assert plan["api_reads_approval_token"] is False
+    assert plan["api_writes_database"] is False
+    assert plan["api_updates_review_state"] is False
+    assert plan["review_state_update_executed"] is False
+    assert plan["database_connection_opened"] is False
+    assert plan["database_session_created"] is False
+    assert plan["explicit_transaction_opened"] is False
+    assert plan["transaction_opened"] is False
+    assert plan["transaction_committed"] is False
+    assert plan["database_write_executed"] is False
+    assert plan["database_commit_executed"] is False
+    assert plan["scheduler_attached"] is False
+    assert plan["writes_executed"] is False
+    assert plan["would_write_database"] is False
+    assert plan["statement_summary"]["statement_count"] == 1
+    assert plan["statement_summary"]["review_state_updates"][0][
+        "next_review_state"
+    ] == "confirmed"
+    assert "review_decision_writer_implementation_enabled" in plan[
+        "blocked_reasons"
+    ]
+    assert "do_not_update_review_state_from_api_writer_status" in plan[
+        "safe_boundaries"
+    ]
+    assert TEST_APPROVAL_TOKEN not in payload
+
+
 def test_candidate_queue_writer_preflight_route_is_post_only_and_no_write():
     from routes.market_intel_routes import market_intel_bp
 
@@ -3779,7 +3909,7 @@ def test_candidate_queue_writer_preflight_route_is_post_only_and_no_write():
 
     assert response.status_code == 200
     assert data["mode"] == "candidate_queue_writer_preflight_planned"
-    assert data["phase"] == "phase_68_candidate_queue_review_decision_transaction"
+    assert data["phase"] == "phase_69_candidate_queue_review_decision_writer_cli"
     assert data["execute_requested"] is False
     assert data["read_only_query_executed"] is False
     assert data["database_connection_opened"] is False
@@ -3836,7 +3966,7 @@ def test_candidate_queue_writer_status_route_never_leaks_approval_token(monkeypa
 
     assert response.status_code == 200
     assert data["mode"] == "candidate_queue_writer_cli_blocked"
-    assert data["phase"] == "phase_68_candidate_queue_review_decision_transaction"
+    assert data["phase"] == "phase_69_candidate_queue_review_decision_writer_cli"
     assert data["execute_requested"] is True
     assert data["apply_real_write_requested"] is True
     assert data["approval_token_present"] is False
@@ -3925,7 +4055,7 @@ def test_candidate_queue_writer_postwrite_smoke_route_is_post_only_and_no_write(
 
     assert response.status_code == 200
     assert data["mode"] == "candidate_queue_writer_postwrite_smoke_planned"
-    assert data["phase"] == "phase_68_candidate_queue_review_decision_transaction"
+    assert data["phase"] == "phase_69_candidate_queue_review_decision_writer_cli"
     assert data["execute_requested"] is False
     assert data["read_only_query_executed"] is False
     assert data["database_connection_opened"] is False
@@ -3979,7 +4109,7 @@ def test_candidate_queue_writer_operator_drill_route_is_post_only_and_no_write()
 
     assert response.status_code == 200
     assert data["mode"] == "candidate_queue_writer_operator_drill_preview"
-    assert data["phase"] == "phase_68_candidate_queue_review_decision_transaction"
+    assert data["phase"] == "phase_69_candidate_queue_review_decision_writer_cli"
     assert data["operator_drill_ready"] is True
     assert data["api_executes_cli"] is False
     assert data["api_reads_approval_token"] is False
@@ -4035,7 +4165,7 @@ def test_candidate_queue_writer_run_package_route_is_post_only_and_no_write():
 
     assert response.status_code == 200
     assert data["mode"] == "candidate_queue_writer_run_package_preview"
-    assert data["phase"] == "phase_68_candidate_queue_review_decision_transaction"
+    assert data["phase"] == "phase_69_candidate_queue_review_decision_writer_cli"
     assert data["package_ready"] is True
     assert data["package_artifact_created"] is False
     assert data["api_writes_file"] is False
@@ -4101,7 +4231,7 @@ def test_candidate_queue_writer_run_readiness_route_is_post_only_and_no_write():
 
     assert response.status_code == 200
     assert data["mode"] == "candidate_queue_writer_run_readiness_preview"
-    assert data["phase"] == "phase_68_candidate_queue_review_decision_transaction"
+    assert data["phase"] == "phase_69_candidate_queue_review_decision_writer_cli"
     assert data["ready_for_cli_operator_run"] is True
     assert data["ready_for_api_database_write"] is False
     assert data["api_executes_cli"] is False
@@ -4403,7 +4533,7 @@ def test_candidate_queue_writer_run_receipt_route_accepts_inline_payload_no_writ
 
     assert response.status_code == 200
     assert data["mode"] == "candidate_queue_writer_run_receipt_preview"
-    assert data["phase"] == "phase_68_candidate_queue_review_decision_transaction"
+    assert data["phase"] == "phase_69_candidate_queue_review_decision_writer_cli"
     assert data["receipt_passed"] is True
     assert data["ready_for_api_database_write"] is False
     assert data["ready_for_scheduler_attach"] is False
@@ -4451,7 +4581,7 @@ def test_candidate_queue_writer_run_closeout_route_is_post_only_and_no_write():
 
     assert response.status_code == 200
     assert data["mode"] == "candidate_queue_writer_run_closeout_preview"
-    assert data["phase"] == "phase_68_candidate_queue_review_decision_transaction"
+    assert data["phase"] == "phase_69_candidate_queue_review_decision_writer_cli"
     assert data["closeout_passed"] is True
     assert data["ready_for_next_manual_phase"] is True
     assert data["ready_for_api_database_write"] is False
@@ -4500,7 +4630,7 @@ def test_candidate_queue_review_handoff_route_is_post_only_and_no_write():
 
     assert response.status_code == 200
     assert data["mode"] == "candidate_queue_review_handoff_preview"
-    assert data["phase"] == "phase_68_candidate_queue_review_decision_transaction"
+    assert data["phase"] == "phase_69_candidate_queue_review_decision_writer_cli"
     assert data["handoff_ready"] is True
     assert data["ready_for_manual_queue_review"] is True
     assert data["ready_for_api_database_write"] is False
@@ -4558,7 +4688,7 @@ def test_candidate_queue_review_inventory_route_is_post_only_and_no_write():
     assert get_response.status_code == 405
     assert response.status_code == 200
     assert data["mode"] == "candidate_queue_review_inventory_preview"
-    assert data["phase"] == "phase_68_candidate_queue_review_decision_transaction"
+    assert data["phase"] == "phase_69_candidate_queue_review_decision_writer_cli"
     assert data["execute_requested"] is False
     assert data["review_inventory_ready"] is False
     assert data["ready_for_human_decision_review"] is False
@@ -4624,7 +4754,7 @@ def test_candidate_queue_review_decision_route_is_post_only_and_no_write():
     assert get_response.status_code == 405
     assert response.status_code == 200
     assert data["mode"] == "candidate_queue_review_decision_preview"
-    assert data["phase"] == "phase_68_candidate_queue_review_decision_transaction"
+    assert data["phase"] == "phase_69_candidate_queue_review_decision_writer_cli"
     assert data["decision_ready"] is False
     assert data["ready_for_human_decision_record"] is False
     assert data["ready_for_api_review_state_update"] is False
@@ -4695,7 +4825,7 @@ def test_candidate_queue_review_decision_approval_route_is_post_only_and_no_writ
     assert get_response.status_code == 405
     assert response.status_code == 200
     assert data["mode"] == "candidate_queue_review_decision_approval_preview"
-    assert data["phase"] == "phase_68_candidate_queue_review_decision_transaction"
+    assert data["phase"] == "phase_69_candidate_queue_review_decision_writer_cli"
     assert data["approval_ready"] is False
     assert data["ready_for_review_state_transaction_preview"] is False
     assert data["ready_for_cli_decision_writer"] is False
@@ -4771,7 +4901,7 @@ def test_candidate_queue_review_decision_transaction_route_is_post_only_and_no_w
     assert get_response.status_code == 405
     assert response.status_code == 200
     assert data["mode"] == "candidate_queue_review_decision_transaction_preview"
-    assert data["phase"] == "phase_68_candidate_queue_review_decision_transaction"
+    assert data["phase"] == "phase_69_candidate_queue_review_decision_writer_cli"
     assert data["transaction_preview_created"] is False
     assert data["transaction_ready"] is False
     assert data["ready_for_manual_shell_update_window"] is False
@@ -4800,6 +4930,90 @@ def test_candidate_queue_review_decision_transaction_route_is_post_only_and_no_w
     ]
 
 
+def test_candidate_queue_review_decision_writer_status_route_is_post_only_and_no_write():
+    from routes.market_intel_routes import market_intel_bp
+    from routes.market_intel_review_routes import market_intel_review_bp
+
+    fixture = _build_candidate_queue_writer_receipt_fixture(
+        "sample-batch-review-decision-writer-route"
+    )
+    app = Flask(__name__)
+    app.secret_key = "test-secret"
+    app.register_blueprint(market_intel_bp)
+    app.register_blueprint(market_intel_review_bp)
+    client = app.test_client()
+    with client.session_transaction() as session:
+        session["logged_in"] = True
+
+    get_response = client.get(
+        "/api/market_intel/manual_sample_review/"
+        "candidate_queue_review_decision_writer_status"
+    )
+    response = client.post(
+        "/api/market_intel/manual_sample_review/"
+        "candidate_queue_review_decision_writer_status?execute=true"
+        "&apply_real_write=true",
+        json={
+            "sample_result": fixture["sample_result"],
+            "operator_evidence": {
+                **fixture["operator_evidence"],
+                "closeout_artifact_path": "artifacts/market_intel/closeout.json",
+                "operator_confirmed_queue_review_next": True,
+                "operator_confirmed_no_scheduler_attach": True,
+                "operator_confirmed_no_api_db_write": True,
+                "operator_confirmed_inventory_read_only": True,
+                "reviewer_id": "operator-a",
+                "proposed_review_decision": "confirmed",
+                "decision_notes": "manual review only",
+                "operator_confirmed_manual_decision_only": True,
+                "decision_approval_notes": "cli-only approval gate",
+                "operator_confirmed_decision_payload_reviewed": True,
+                "operator_confirmed_decision_apply_requires_cli": True,
+                "operator_confirmed_review_state_update_is_not_api": True,
+                "decision_transaction_notes": "shell-only transaction preview",
+                "operator_confirmed_transaction_payload_reviewed": True,
+                "operator_confirmed_cli_only_transaction": True,
+            },
+            "writer_output": fixture["writer_output"],
+            "postwrite_smoke_result": fixture["postwrite_smoke_result"],
+        },
+    )
+    data = response.get_json()
+
+    assert get_response.status_code == 405
+    assert response.status_code == 200
+    assert data["mode"] == "candidate_queue_review_decision_writer_cli_blocked"
+    assert data["phase"] == "phase_69_candidate_queue_review_decision_writer_cli"
+    assert data["execute_requested"] is True
+    assert data["apply_real_write_requested"] is True
+    assert data["approval_token_present"] is False
+    assert data["approval_token_valid"] is False
+    assert data["writer_implementation_enabled"] is False
+    assert data["ready_for_real_write"] is False
+    assert data["ready_for_api_review_state_update"] is False
+    assert data["api_executes_cli"] is False
+    assert data["api_reads_approval_token"] is False
+    assert data["api_writes_database"] is False
+    assert data["api_updates_review_state"] is False
+    assert data["review_state_update_executed"] is False
+    assert data["database_connection_opened"] is False
+    assert data["database_session_created"] is False
+    assert data["transaction_opened"] is False
+    assert data["transaction_committed"] is False
+    assert data["database_write_executed"] is False
+    assert data["database_commit_executed"] is False
+    assert data["scheduler_attached"] is False
+    assert data["writes_executed"] is False
+    assert data["would_write_database"] is False
+    assert "approval_token_present" in data["blocked_reasons"]
+    assert "review_decision_writer_implementation_enabled" in data[
+        "blocked_reasons"
+    ]
+    assert "do_not_execute_review_decision_writer_from_api" in data[
+        "safe_boundaries"
+    ]
+
+
 def test_candidate_queue_writer_run_receipt_route_is_post_only_and_no_write():
     from routes.market_intel_routes import market_intel_bp
 
@@ -4828,7 +5042,7 @@ def test_candidate_queue_writer_run_receipt_route_is_post_only_and_no_write():
 
     assert response.status_code == 200
     assert data["mode"] == "candidate_queue_writer_run_receipt_preview"
-    assert data["phase"] == "phase_68_candidate_queue_review_decision_transaction"
+    assert data["phase"] == "phase_69_candidate_queue_review_decision_writer_cli"
     assert data["receipt_passed"] is True
     assert data["ready_for_next_manual_review"] is True
     assert data["ready_for_api_database_write"] is False
@@ -4853,7 +5067,7 @@ def test_scheduler_plan_preview_blocks_job_attachment():
     plan = MarketIntelService().build_scheduler_plan()
 
     assert plan["mode"] == "scheduler_attach_plan_preview"
-    assert plan["phase"] == "phase_68_candidate_queue_review_decision_transaction"
+    assert plan["phase"] == "phase_69_candidate_queue_review_decision_writer_cli"
     assert plan["ready_to_attach_scheduler"] is False
     assert plan["scheduler_attached"] is False
     assert plan["scheduler_registration_executed"] is False
@@ -4891,7 +5105,7 @@ def test_scheduler_plan_route_is_preview_only():
 
     assert response.status_code == 200
     assert data["mode"] == "scheduler_attach_plan_preview"
-    assert data["phase"] == "phase_68_candidate_queue_review_decision_transaction"
+    assert data["phase"] == "phase_69_candidate_queue_review_decision_writer_cli"
     assert data["scheduler_registration_executed"] is False
     assert data["crawler_job_started"] is False
     assert data["external_network_executed"] is False
@@ -4902,7 +5116,7 @@ def test_match_review_plan_preview_blocks_auto_confirm():
     plan = MarketIntelService().build_match_review_plan()
 
     assert plan["mode"] == "match_review_plan_preview"
-    assert plan["phase"] == "phase_68_candidate_queue_review_decision_transaction"
+    assert plan["phase"] == "phase_69_candidate_queue_review_decision_writer_cli"
     assert plan["ready_for_review_queue"] is False
     assert plan["review_queue_created"] is False
     assert plan["auto_match_executed"] is False
@@ -4938,7 +5152,7 @@ def test_match_review_plan_route_is_preview_only():
 
     assert response.status_code == 200
     assert data["mode"] == "match_review_plan_preview"
-    assert data["phase"] == "phase_68_candidate_queue_review_decision_transaction"
+    assert data["phase"] == "phase_69_candidate_queue_review_decision_writer_cli"
     assert data["review_queue_created"] is False
     assert data["auto_confirm_executed"] is False
     assert data["external_network_executed"] is False
@@ -4949,7 +5163,7 @@ def test_opportunity_plan_preview_blocks_alerts_and_ai_summary():
     plan = MarketIntelService().build_opportunity_plan()
 
     assert plan["mode"] == "opportunity_plan_preview"
-    assert plan["phase"] == "phase_68_candidate_queue_review_decision_transaction"
+    assert plan["phase"] == "phase_69_candidate_queue_review_decision_writer_cli"
     assert plan["ready_for_opportunity_queue"] is False
     assert plan["opportunity_queue_created"] is False
     assert plan["threat_alert_dispatched"] is False
@@ -4990,7 +5204,7 @@ def test_opportunity_plan_route_is_preview_only():
 
     assert response.status_code == 200
     assert data["mode"] == "opportunity_plan_preview"
-    assert data["phase"] == "phase_68_candidate_queue_review_decision_transaction"
+    assert data["phase"] == "phase_69_candidate_queue_review_decision_writer_cli"
     assert data["opportunity_queue_created"] is False
     assert data["threat_alert_dispatched"] is False
     assert data["ai_summary_generated"] is False
@@ -5001,7 +5215,7 @@ def test_opportunity_scoring_plan_preview_blocks_scoring_and_alerts():
     plan = MarketIntelService().build_opportunity_scoring_plan()
 
     assert plan["mode"] == "opportunity_scoring_plan_preview"
-    assert plan["phase"] == "phase_68_candidate_queue_review_decision_transaction"
+    assert plan["phase"] == "phase_69_candidate_queue_review_decision_writer_cli"
     assert plan["ready_for_scoring_job"] is False
     assert plan["scoring_job_created"] is False
     assert plan["score_calculation_executed"] is False
@@ -5049,7 +5263,7 @@ def test_opportunity_scoring_plan_route_is_preview_only():
 
     assert response.status_code == 200
     assert data["mode"] == "opportunity_scoring_plan_preview"
-    assert data["phase"] == "phase_68_candidate_queue_review_decision_transaction"
+    assert data["phase"] == "phase_69_candidate_queue_review_decision_writer_cli"
     assert data["scoring_job_created"] is False
     assert data["score_calculation_executed"] is False
     assert data["sample_scores_generated"] is False
@@ -5061,7 +5275,7 @@ def test_opportunity_evidence_plan_preview_blocks_queries_and_alerts():
     plan = MarketIntelService().build_opportunity_evidence_plan()
 
     assert plan["mode"] == "opportunity_evidence_plan_preview"
-    assert plan["phase"] == "phase_68_candidate_queue_review_decision_transaction"
+    assert plan["phase"] == "phase_69_candidate_queue_review_decision_writer_cli"
     assert plan["ready_for_evidence_bundle"] is False
     assert plan["evidence_bundle_created"] is False
     assert plan["evidence_query_executed"] is False
@@ -5107,7 +5321,7 @@ def test_opportunity_evidence_plan_route_is_preview_only():
 
     assert response.status_code == 200
     assert data["mode"] == "opportunity_evidence_plan_preview"
-    assert data["phase"] == "phase_68_candidate_queue_review_decision_transaction"
+    assert data["phase"] == "phase_69_candidate_queue_review_decision_writer_cli"
     assert data["evidence_bundle_created"] is False
     assert data["evidence_query_executed"] is False
     assert data["sample_evidence_generated"] is False
@@ -5120,7 +5334,7 @@ def test_opportunity_alert_plan_preview_blocks_dispatch_and_llm_calls():
     plan = MarketIntelService().build_opportunity_alert_plan()
 
     assert plan["mode"] == "opportunity_alert_plan_preview"
-    assert plan["phase"] == "phase_68_candidate_queue_review_decision_transaction"
+    assert plan["phase"] == "phase_69_candidate_queue_review_decision_writer_cli"
     assert plan["ready_for_alert_candidates"] is False
     assert plan["alert_candidate_created"] is False
     assert plan["alert_queue_created"] is False
@@ -5205,7 +5419,7 @@ def test_opportunity_alert_plan_route_is_preview_only():
 
     assert response.status_code == 200
     assert data["mode"] == "opportunity_alert_plan_preview"
-    assert data["phase"] == "phase_68_candidate_queue_review_decision_transaction"
+    assert data["phase"] == "phase_69_candidate_queue_review_decision_writer_cli"
     assert data["alert_candidate_created"] is False
     assert data["alert_queue_created"] is False
     assert data["review_queue_created"] is False
@@ -5283,7 +5497,7 @@ def test_mcp_deploy_preflight_route_is_preview_only():
 
     assert response.status_code == 200
     assert data["mode"] == "mcp_external_deploy_preflight_preview"
-    assert data["phase"] == "phase_68_candidate_queue_review_decision_transaction"
+    assert data["phase"] == "phase_69_candidate_queue_review_decision_writer_cli"
     assert data["deployment_actions_executed"] is False
     assert data["docker_command_executed"] is False
     assert data["ssh_command_executed"] is False
@@ -5298,7 +5512,7 @@ def test_mcp_readiness_default_is_planned_only(monkeypatch):
     readiness = MarketIntelService().build_mcp_readiness()
 
     assert readiness["mode"] == "mcp_readiness_planned"
-    assert readiness["phase"] == "phase_68_candidate_queue_review_decision_transaction"
+    assert readiness["phase"] == "phase_69_candidate_queue_review_decision_writer_cli"
     assert readiness["execute_requested"] is False
     assert readiness["router_enabled"] is False
     assert readiness["external_mcp_complete"] is False
@@ -5746,7 +5960,7 @@ def test_deployment_readiness_reports_app_only_release_gate():
     )
     assert (
         readiness["checks"][
-            "candidate_queue_review_decision_transaction_preview_safe"
+            "candidate_queue_review_decision_writer_cli_status_safe"
         ]
         is True
     )
@@ -5840,7 +6054,7 @@ def test_deployment_readiness_reports_app_only_release_gate():
     )
     assert (
         "/api/market_intel/manual_sample_review/"
-        "candidate_queue_review_decision_transaction"
+        "candidate_queue_review_decision_writer_status"
         in readiness["production_smoke_targets"]
     )
     assert readiness["write_approval_runbook"]["ready_for_real_write"] is False
@@ -6623,6 +6837,52 @@ def test_deployment_readiness_reports_app_only_release_gate():
         ]
         is False
     )
+    assert (
+        readiness["candidate_queue_review_decision_writer_status"]["mode"]
+        == "candidate_queue_review_decision_writer_cli_blocked"
+    )
+    assert (
+        readiness["candidate_queue_review_decision_writer_status"][
+            "ready_for_real_write"
+        ]
+        is False
+    )
+    assert (
+        readiness["candidate_queue_review_decision_writer_status"][
+            "writer_implementation_enabled"
+        ]
+        is False
+    )
+    assert (
+        readiness["candidate_queue_review_decision_writer_status"][
+            "api_updates_review_state"
+        ]
+        is False
+    )
+    assert (
+        readiness["candidate_queue_review_decision_writer_status"][
+            "review_state_update_executed"
+        ]
+        is False
+    )
+    assert (
+        readiness["candidate_queue_review_decision_writer_status"][
+            "database_write_executed"
+        ]
+        is False
+    )
+    assert (
+        readiness["candidate_queue_review_decision_writer_status"][
+            "database_commit_executed"
+        ]
+        is False
+    )
+    assert (
+        readiness["candidate_queue_review_decision_writer_status"][
+            "scheduler_attached"
+        ]
+        is False
+    )
     assert readiness["scheduler_plan"]["scheduler_registration_executed"] is False
     assert readiness["scheduler_plan"]["crawler_job_started"] is False
     assert readiness["scheduler_plan"]["database_write_executed"] is False
@@ -6727,7 +6987,7 @@ def test_migration_apply_drill_planned_is_safe_and_manual_only():
     drill = MarketIntelService().build_migration_apply_drill()
 
     assert drill["mode"] == "migration_apply_drill_preview"
-    assert drill["phase"] == "phase_68_candidate_queue_review_decision_transaction"
+    assert drill["phase"] == "phase_69_candidate_queue_review_decision_writer_cli"
     assert drill["execute_requested"] is False
     assert drill["schema_state"] == "planned_no_db_probe"
     assert drill["drill_ready_for_operator_review"] is True
@@ -6842,7 +7102,7 @@ def test_migration_apply_drill_route_is_preview_only():
 
     assert response.status_code == 200
     assert data["mode"] == "migration_apply_drill_preview"
-    assert data["phase"] == "phase_68_candidate_queue_review_decision_transaction"
+    assert data["phase"] == "phase_69_candidate_queue_review_decision_writer_cli"
     assert data["execute_requested"] is False
     assert data["migration_executed"] is False
     assert data["rollback_executed"] is False
@@ -6854,7 +7114,7 @@ def test_migration_catalog_review_planned_is_safe_and_diagnostic():
     review = MarketIntelService().build_migration_catalog_review()
 
     assert review["mode"] == "migration_catalog_review_preview"
-    assert review["phase"] == "phase_68_candidate_queue_review_decision_transaction"
+    assert review["phase"] == "phase_69_candidate_queue_review_decision_writer_cli"
     assert review["execute_requested"] is False
     assert review["catalog_state"] == "planned_no_probe"
     assert review["seed_state"] == "planned_no_probe"
@@ -6969,7 +7229,7 @@ def test_migration_catalog_review_route_is_preview_only():
 
     assert response.status_code == 200
     assert data["mode"] == "migration_catalog_review_preview"
-    assert data["phase"] == "phase_68_candidate_queue_review_decision_transaction"
+    assert data["phase"] == "phase_69_candidate_queue_review_decision_writer_cli"
     assert data["execute_requested"] is False
     assert data["catalog_state"] == "planned_no_probe"
     assert data["migration_executed"] is False
@@ -6982,7 +7242,7 @@ def test_migration_live_smoke_planned_is_preview_only():
     smoke = MarketIntelService().build_migration_live_smoke()
 
     assert smoke["mode"] == "migration_live_smoke_preview"
-    assert smoke["phase"] == "phase_68_candidate_queue_review_decision_transaction"
+    assert smoke["phase"] == "phase_69_candidate_queue_review_decision_writer_cli"
     assert smoke["execute_requested"] is False
     assert smoke["smoke_result"] == "planned_no_execution"
     assert smoke["live_smoke_passed"] is False
@@ -7044,7 +7304,7 @@ def test_migration_live_smoke_route_is_preview_only():
 
     assert response.status_code == 200
     assert data["mode"] == "migration_live_smoke_preview"
-    assert data["phase"] == "phase_68_candidate_queue_review_decision_transaction"
+    assert data["phase"] == "phase_69_candidate_queue_review_decision_writer_cli"
     assert data["execute_requested"] is False
     assert data["smoke_result"] == "planned_no_execution"
     assert data["migration_executed"] is False
@@ -7057,7 +7317,7 @@ def test_live_db_inventory_planned_is_preview_only():
     inventory = MarketIntelService().build_live_db_inventory()
 
     assert inventory["mode"] == "live_db_inventory_planned"
-    assert inventory["phase"] == "phase_68_candidate_queue_review_decision_transaction"
+    assert inventory["phase"] == "phase_69_candidate_queue_review_decision_writer_cli"
     assert inventory["execute_requested"] is False
     assert inventory["read_only_query_executed"] is False
     assert inventory["database_connection_opened"] is False
@@ -7201,7 +7461,7 @@ def test_live_db_inventory_route_is_preview_only():
 
     assert response.status_code == 200
     assert data["mode"] == "live_db_inventory_planned"
-    assert data["phase"] == "phase_68_candidate_queue_review_decision_transaction"
+    assert data["phase"] == "phase_69_candidate_queue_review_decision_writer_cli"
     assert data["execute_requested"] is False
     assert data["read_only_query_executed"] is False
     assert data["database_write_executed"] is False
@@ -7428,7 +7688,7 @@ def test_candidate_queue_writer_cli_script_outputs_blocked_gate(tmp_path):
 
     assert result.returncode == 0
     assert data["mode"] == "candidate_queue_writer_cli_blocked"
-    assert data["phase"] == "phase_68_candidate_queue_review_decision_transaction"
+    assert data["phase"] == "phase_69_candidate_queue_review_decision_writer_cli"
     assert data["execute_requested"] is False
     assert data["apply_real_write_requested"] is False
     assert data["writes_executed"] is False