強化 P4 source deployment runtime truth 回報

docs/guides/pchome_ai_automation_priority_backlog.md

@@ -198,6 +198,16 @@
 - 不意外 bump version。
 - 不 recreate / destroy / prune `momo-db`。
 - source-control success、deployment success、production runtime readback 必須分開回報。
+- `scripts/ops/report_source_deploy_runtime_truth.py` 必須可輸出 machine-readable P4 report，明確拆開 local / origin / Gitea refs、部署檔案 hash、正式 `/health`、容器狀態與安全紅線。
+
+已完成:
+
+- Source / deploy / runtime truth report 已建立:
+  - policy: `p4_source_deployment_runtime_truth_v1`
+  - source truth: local HEAD、origin `main` / `dev`、Gitea SSH `main` / `dev`
+  - deployment truth: tracked file SHA256 readback
+  - runtime truth: production `/health` version/status 與 optional container readback
+  - safety truth: GitHub freeze、`momo-db` protected、no `--remove-orphans`、no secret read、no DB write
 
 完成標準:
 
@@ -224,6 +234,7 @@
 | P3.2 | Scheduled automation health summaries | 已完成 | `/api/ai-automation/scheduled-health-summary` + smoke service focused tests | P3.3 rollback evidence packages |
 | P3.3 | Rollback evidence packages | 已完成 | controlled apply rollback evidence route + focused tests | P3.4 observability metrics integration |
 | P3.4 | Observability metrics integration | 已完成 | `/metrics` exports scheduled health summary gauges + focused tests | P4 source / deployment governance ongoing |
+| P4.1 | Source / deployment / runtime truth package | 已完成 | `scripts/ops/report_source_deploy_runtime_truth.py` + focused tests | 每次 Gitea push / production deploy 後執行 P4 report |
 
 ## 後續回報格式