feat(smoke): monitor pchome controlled apply final preflight

docs/guides/pchome_ai_automation_priority_backlog.md

@@ -9,7 +9,7 @@
 以下是使用者在主線推進期間插入、且必須保留在完整工作項目裡的要求。後續不得再把這些需求漏掉或變成口頭提醒。
 
 1. 正式環境才是最新版本真相；不得用本機檔案、舊筆記、舊分支蓋過 production truth。
-2. 版本不得搞錯；目前正式環境 `/health` 版本推進目標為 `V10.742`，完成條件必須包含明確版本 bump、部署與 readback。
+2. 版本不得搞錯；目前正式環境 `/health` 版本推進目標為 `V10.743`，完成條件必須包含明確版本 bump、部署與 readback。
 3. GitHub 全面 freeze；不得使用 GitHub、`gh`、GitHub API、GitHub Actions、PR、issue、mirror 或 read-only GitHub 流程。
 4. 實作結果必須推到 Gitea `dev` 與 `main`；若改到 runtime 行為，還必須部署到正式環境並回讀。
 5. 主方向是 AI 自動化，不是人工審核；人工欄位只能當 evidence / ledger / UI truth，不得阻擋低爆炸半徑、可驗證、可回滾的 controlled apply。
@@ -41,7 +41,7 @@
 
 已完成:
 
-- 正式環境版本真相 guard：`/health` 是最高真相，本輪推進目標為 `V10.742`。
+- 正式環境版本真相 guard：`/health` 是最高真相，本輪推進目標為 `V10.743`。
 - Gitea `dev` / `main` source truth 對齊。
 - Retry exception controlled apply executor 已落地，目標表為 `pchome_product_matches`。
 - 正式 DB 已 controlled apply 4 個 selectors:
@@ -204,10 +204,17 @@
   - `/api/ai-automation/scheduled-health-summary` 已輸出 `pchome_auto_policy_authorization_evidence_execution_closeout` family
   - `/metrics` 已輸出 `momo_ai_automation_scheduled_health_family_status{family="pchome_auto_policy_authorization_evidence_execution_closeout",...}`
   - 不執行 authorization evidence、不執行 database apply、不執行 detached signature verification、不持久化 verifier receipt、不包含 external signed receipt、不包含 signed receipt、不包含 signature material、不接受 plaintext secret、不讀 secret、不執行 SQL、不寫 DB、不簽發 apply authorization，下一個機器動作是 controlled-apply final preflight lane
+- PChome auto-policy controlled-apply final preflight runtime monitoring 已完成:
+  - `/api/ai-automation/smoke` 已加入 `PChome auto-policy controlled apply final preflight`
+  - 以本機 contract fixture + machine evidence adapter 自動推進 controlled dry-run package path
+  - 明確標記 `controlled_apply_final_preflight_check_count=12`、`controlled_apply_final_preflight_pass_count=12`、`controlled_apply_final_preflight_field_count=12`、`controlled_apply_final_preflight_acceptance_gate_count=10`、`rollback_binding_count=1`、`rollback_binding_field_count=8`、`post_apply_verifier_binding_count=1`、`post_apply_verifier_binding_field_count=8`、`dry_run_only=true`、`check_mode_only=true`、`writes_database_count=0`、`signs_database_apply_authorization_count=0`、`reads_secret_count=0`、`primary_human_gate_count=0`
+  - `/api/ai-automation/scheduled-health-summary` 已輸出 `pchome_auto_policy_controlled_apply_final_preflight` family
+  - `/metrics` 已輸出 `momo_ai_automation_scheduled_health_family_status{family="pchome_auto_policy_controlled_apply_final_preflight",...}`
+  - 不執行 authorization evidence、不執行 database apply、不執行 endpoint/SQL、不寫 DB、不讀 secret、不簽發 apply authorization，下一個機器動作是 controlled dry-run package lane
 
 進行中 / 下一步，必須照順序:
 
-1. 將 auto-policy authorization evidence execution closeout 往 controlled-apply final preflight lane 推進。
+1. 將 auto-policy controlled apply final preflight 往 controlled dry-run package lane 推進。
 
 完成標準:
 
@@ -374,7 +381,7 @@
 
 進行中 / 下一步，必須照順序:
 
-1. 將 auto-policy authorization evidence execution closeout 推進到 controlled-apply final preflight lane。
+1. 將 auto-policy controlled apply final preflight 推進到 controlled dry-run package lane。
 2. 對其他 safe mapping backlog lanes 套用 receipt / replay / drift verifier 模式。
 3. 為每一類 controlled apply 自動產生 rollback evidence package。
 4. 把 AI automation metrics 持續整合進既有 observability surfaces。
@@ -463,6 +470,7 @@
 | P3.19 | PChome auto-policy verifier receipt closeout monitoring | 已完成 | AI smoke + scheduled family + metrics family prove verifier receipt evidence handoff, 12 handoff fields, 10 handoff acceptance gates, no detached verification execution, no verifier receipt persist, no signed receipt, no signature material, no plaintext secret, no secret read, no DB write, no signing | P3.20 authorization evidence execution preflight monitoring |
 | P3.20 | PChome auto-policy authorization evidence execution preflight monitoring | 已完成 | AI smoke + scheduled family + metrics family prove database apply authorization verifier handoff, 12 execution fields, 10 execution acceptance gates, no authorization evidence execution, no detached verification execution, no verifier receipt persist, no signed receipt, no signature material, no plaintext secret, no secret read, no DB write, no signing | P3.21 authorization evidence execution closeout monitoring |
 | P3.21 | PChome auto-policy authorization evidence execution closeout monitoring | 已完成 | AI smoke + scheduled family + metrics family prove database apply authorization final verifier gate, 12 closeout fields, 10 closeout acceptance gates, no authorization evidence execution, no database apply, no detached verification execution, no verifier receipt persist, no signed receipt, no signature material, no plaintext secret, no secret read, no DB write, no signing | P3.22 controlled-apply final preflight monitoring |
+| P3.22 | PChome auto-policy controlled-apply final preflight monitoring | 已完成 | AI smoke + scheduled family + metrics family prove rollback binding, post-apply verifier binding, 12 final preflight fields, 10 acceptance gates, dry-run-only/check-mode-only, no authorization evidence execution, no database apply, no endpoint/SQL, no secret read, no DB write, no signing | P3.23 controlled dry-run package monitoring |
 | P4.1 | Source / deployment / runtime truth package | 已完成 | `scripts/ops/report_source_deploy_runtime_truth.py` + focused tests | 每次 Gitea push / production deploy 後執行 P4 report |
 | P2.2 | Benchmark guardrails applied to core AI surfaces | 已完成 | `/ai_intelligence` + `/observability/overview` golden-signal strips + focused tests | 後續 safe automation lanes 套同樣 first-viewport summary |