Sanitized delivery proof需人工确认
来源：客户授权
隐私：客户授权
人工确认：需要
Matches objection_handling stage and can support the current customer review.
Customer-authorized asset: verify authorization before any manual use.
工作台
AI 精聊建议只进入人工确认；真实平台发送保持关闭。
CP
Admin
在线
审批队列
3
需接管
1
运行中
0
L3 候选
1
警报
6
复核
4
记忆
2
Auth boundary
boundary ready
No route request context
Trusted headers
enabled_ready
enabled=true; ready=true
Local session
disabled
canInject=false; localSimulationOnly=true
Membership source
source ready
orgMembership=mock memory; rbac=preflight dry-run; role header is validated
Internal login
better_auth
state=selected_ready_to_mount; emailPassword=true
Schema gate
awaiting_evidence
env=true; evidenceReady=false
Validation gate
blocked
Validation Review Gate Blocked
Staging evidence
none recorded
latest=none; conflicts=0; rollbackVisible=false
Route rehearsal
waiting_for_live_membership
next=GET /api/readiness; candidate=needs_evidence; owner=auth-readiness-route
Auth audit
no events
latest=none; latestFailure=none
Staging import
disabled
secretConfigured=false; mode=secret_or_trusted_admin
Migration path
not_requested
Record reviewed command metadata before preparing a staging migration run.
Staging decision
blocked
Record reviewed command metadata before preparing a staging migration run.
Live membership
missing_foundation
subjectLookup=false; probe=false; requestPaths=5
Schema drift
drift_detected
reviewed=true; isolated=false
Production auth
not implemented
orgMembership=false; rbac=false
Identity provider
none
provider=none; ready=false
DB membership
mock memory
dbConfigured=true; canQuery=false; bySubject=false
Current Operator Focus
Resolve Blocking Evidence
Schema drift or reviewed SQL isolation issues block staging review.
Record reviewed command metadata before preparing a staging migration run.validationGate=blocked; title=Validation Review Gate BlockedschemaDrift=drift_detected
Validation Review Gate
Validation Review Gate Blocked
Live membership proof is blocking staging validation. state=missing_foundation; subjectLookup=false; probe=false; requestPaths=5.
Schema dual gate: pendingReviewed execution: pendingLive membership proof: blocked
Execution Milestones
Staging Execution Milestones
Record reviewed command metadata before preparing a staging migration run.
Human approval: blockedReviewed command: blockedStaging verification: blocked
Next Operator Action
Complete Approval Owner Coverage
Name the staging approvers and record reviewed approval evidence before execution. nextRoute=GET /api/readiness; owner=auth-readiness-route; risk=low; stage=proof_point; missingEvidence=2; blocker=Live membership proof is missing_foundation.; milestones=0/5; focus=Human approval.
blocker: approval_owner_gaphumanApproval: blocked; owners=0/4; missing=execution_owner, rollback_owner, validation_owner, environment_ownerRoute Review Gate On Hold
Operator Release Packet
Complete Approval Owner Coverage; route=GET /api/readiness; freshness=missing; reviewer=none.
Activation Verdict
Verdict
Activation Verdict: Blocked
The internal activation gate is blocked by Human approval while GET /api/readiness remains under review.
Lead Blocker
Human approval
Name the staging approvers and record reviewed approval evidence before execution.
Canary Posture
GET /api/readiness
reviewState=waiting_for_live_membership; lockState=none; selectionMode=ranked_top_candidate
Recertification
blocked
sessionProof=watch; liveMembershipProof=blocked; reviewedEvidence=blocked. Record reviewed command metadata before preparing a staging migration run. After that, Complete subject lookup readiness before treating Better Auth request-path proof as current. After that, Attach a reviewed Prisma membership delegate before treating live membership proof as in progress. freshnessState=missing.
State
pending
Complete Approval Owner Coverage
Chatwoot Activation Freeze
frozen_preview_only
activationAuthority=false; canaryAuthority=false; recertificationAuthority=false.
Blocker
approval_owner_gap
Name the staging approvers and record reviewed approval evidence before execution. nextRoute=GET /api/readiness; owner=auth-readiness-route; risk=low; stage=proof_point; missingEvidence=2; blocker=Live membership proof is missing_foundation.; milestones=0/5; focus=Human approval.
Reviewer
none
No reviewed migration command metadata is recorded yet.
Approval
0/4
Name the staging approvers and record reviewed approval evidence before execution.
Route
GET /api/readiness
reviewState=waiting_for_live_membership; lockState=none; selectionMode=ranked_top_candidate
Rollback
reviewed
rollbackBlocking=false; rollbackVisible=false; Disable hosted auth enforcement to return this route to local-compatible preview behavior.
Freeze Gate Summary
Freeze Gate
blocked
ready=1; hold=4; blocked=3
Lead Blocker
Human approval
Name the staging approvers and record reviewed approval evidence before execution.
Lead Blocker Code
human_approval
label=Human approval
Blocker Ledger
Reviewed bundle intake
blocked
No reviewed bundle intake evidence is recorded yet.
Reviewed evidence freshness
hold
No reviewed staging evidence timeline is recorded yet.
Validation review
blocked
state=missing_foundation; subjectLookup=false; probe=false; requestPaths=5.
Session validity
hold
Trusted-header guardrails, Better Auth runtime readiness, or membership-by-subject bridge wiring are present, but no active trusted workspace session was proven for this request.
Membership validity
hold
This summary models reviewed live membership proof readiness only and never enables production login by itself.; Prisma membership delegate is not available.; Direct authSubjectId -> active membership query capability is not yet available.; No reviewed PostgreSQL probe evidence is recorded yet.; This helper models reviewed staging execution only and never runs a real migration.; Production login remains incomplete even when staging verification evidence is present.; Human approval is still missing or not approved.; Named approval owners are incomplete (0/4); missing=execution_owner, rollback_owner, validation_owner, environment_owner.; Reviewed migration command metadata has not been recorded.; Sanitized probe evidence is not yet ready.; Synthetic verification evidence is not yet complete.; CLIENTPILOT_BETTER_AUTH_SCHEMA_READY is only an input gate.; Production login remains incomplete even when staging evidence is present.; Human-reviewed migration approval evidence is still missing.; Named human approval owners are still missing from staging approval evidence.; Sanitized PostgreSQL probe readiness evidence is still missing.; Synthetic acceptance or route-cutover verification evidence is still missing.
Human approval
blocked
Name the staging approvers and record reviewed approval evidence before execution.
Route lock
hold
The next hosted route is currently following the ranked cutover candidate flow instead of a reviewed lock.
Rollback posture
ready
rollbackVisible=false; Disable hosted auth enforcement to return this route to local-compatible preview behavior.
Release Packet Comparison
Accepted Release Packet
pending
reviewer=none; blocker=approval_owner_gap; freshness=missing.
Current Release Packet
pending
reviewer=none; blocker=approval_owner_gap; freshness=missing.
Release Packet Alignment
aligned
Accepted Release Packet Matches Current Packet
Accepted Freeze Gate
blocked
ready=1; hold=4; blocked=3
Current Freeze Gate
blocked
ready=1; hold=4; blocked=3
Freeze Gate Alignment
aligned
Accepted Freeze Gate Matches Current Packet
Freeze Gate Transition
blocked
Freeze Gate Remains Stable
The accepted receipt packet still matches the current operator release packet. accepted=pending; current=pending.
The accepted freeze-gate summary still matches the current packet. accepted=blocked; current=blocked.
The accepted freeze gate still matches the current packet at blocked.
- accepted: blocked; ready=1; hold=4; blocked=3
- current: blocked; ready=1; hold=4; blocked=3
- leadBlocker: accepted=Human approval; current=Human approval
- leadBlockerCode: accepted=human_approval; current=human_approval
Route Review Gate
Route Review Gate On Hold
Keep GET /api/readiness on hold. reviewReady=false; missingEvidence=2; reconciliation=reconciled.
Route selected: completeEvidence complete: pendingRollback clear: complete
Reviewed Evidence Acceptance
Reviewed Evidence Acceptance Blocked
canaryDecision=retired; blocker=reviewed_external_proof_missing. Resolve the reviewed evidence, live membership, or Chatwoot freeze blocker before advancing.
reviewedExternalProof: blockedliveMembership: checkedcanaryKeepActive: pending
Reviewed Evidence Handoff
proof=missing; acceptance=blocked; membership=missing_foundation; chatwootFreeze=frozen_preview_only. Resolve the reviewed evidence, live membership, or Chatwoot freeze blocker before advancing. Internal handoff only; no live-send or Chatwoot writeback authority.
proof=missing; acceptance=blocked; membership=missing_foundation; chatwootFreeze=frozen_preview_only. Resolve the reviewed evidence, live membership, or Chatwoot freeze blocker before advancing. Internal handoff only; no live-send or Chatwoot writeback authority.
authority: internal-only previewproof: missingacceptance: blocked
AG42 Real Staging Prep
AG42 Real Staging Prep Missing Evidence; blocker=reviewed_external_proof_missing
state=missing; blocker=reviewed_external_proof_missing; canary=POST /api/customers/[id]/notes; decision=retired. Import sanitized reviewed Better Auth/PostgreSQL staging evidence before advancing. Internal-only: no live send, no Chatwoot writeback, no production rollout.
betterAuthSession: checkedpostgresMembership: checkedreviewedEvidence: missing
Hosted Write Canary
none; state=held
Keep the shared canary on hold until reviewed route and proof blockers are cleared.
operatingMode: retiredmeaning: canary path is intentionally retired from activationroute: none
Evidence freshness
Proof Recertification Blocked
Record reviewed command metadata before preparing a staging migration run. After that, Complete subject lookup readiness before treating Better Auth request-path proof as current. After that, Attach a reviewed Prisma membership delegate before treating live membership proof as in progress.
sessionProof: watchliveMembershipProof: blockedreviewedEvidence: blocked
Reviewed command
none
Record reviewed command metadata before preparing a staging migration run.
commandId: nonereviewer: nonereviewedAt: none
Reviewed bundle audit
missing
No reviewed bundle audit is recorded yet.
source: unknownreviewer: missingredactionConfirmed: false
Reviewed execution evidence
unknown
No accepted synthetic or reviewed external execution evidence is recorded yet.
meaning: no reviewed external execution evidence is availableaccepted: falseevidenceRef: none
Bundle attachments
missing
No reviewed bundle attachment contract is recorded yet.
attachments: nonemissing: noneredactionConfirmed: false
Production Auth Posture
missing=7; liveMembership=missing_foundation; routeReview=waiting_for_live_membership; nextRoute=GET /api/readiness.
liveMembership=missing_foundation; missing=7. Production login/session/membership/RBAC/tenant admin remain tracked but not enabled.
missing: 7liveMembership: missing_foundationnextRoute: GET /api/readiness
Server-session bridge
authSource=none; requestPaths=5
Trusted-header guardrails, Better Auth runtime readiness, or membership-by-subject bridge wiring are present, but no active trusted workspace session was proven for this request.
trustedSession: not_readyruntimeMountable: truesubjectLookup: false
Next Hosted Route
GET /api/readiness
No reviewed route lock is active. The next hosted route is currently following the ranked cutover candidate flow instead of a reviewed lock. Attach a reviewed Prisma membership delegate before treating live membership proof as in progress.
lock: noneowner: auth-readiness-routeselection: ranked_top_candidate
Shared Staging Receipt
Route Packet Still Needs Evidence
nextRoute=GET /api/readiness; owner=auth-readiness-route; risk=low; stage=proof_point; missingEvidence=2; blocker=Live membership proof is missing_foundation.; milestones=0/5; focus=Human approval.
Route Review Gate On HoldValidation Review Gate Blockedreconciliation: reconciled
所有对话
按接管、风险、审批、紧急跟进、记忆和 L3 候选排序。
Hi
High-risk guarantee
异议处理高风险立即接管High-risk guarantee is at objection_handling; main need: 理解产品是否适合当前业务场景.
ManualHigh-risk guarantee需接管最近联系 2026-10-09 19:59preview_only · no auto-send
处理页需人工接管
对话客户资料互动历史备注
立即接管
score 100需人工接管Review now and keep human takeover active.
Human takeover is currently required.
接管状态下只允许人工处理；平台写回仍保持 preview_only。
TakeoverTakeover memoryalert critical
Safety Evidence
preview-only / no-sendNext operator action
立即接管
Review now and keep human takeover active.
Latest safety evidence
critical: Takeover required
Contains hard-risk terms that require human takeover before any reply. Safety category: guarantee/outcome. Absolute promises, profit claims, or guaranteed outcomes need verified facts and human takeover.
Preview-only / no-send
preview_only · shadow
noAutoSend=true · localOnly=true · Chatwoot=not generated · latest event=takeover_required · ClientPilot platform send=blocked
Orchestrator
尚未运行本轮 shadow orchestration。
意向42
信任48
匹配56
成交概率33
Rate Limit
0/6 events
Recent automation event volume is inside the advisory L1 limit.
Intent Whitelist
unknown
Guarantee or outcome-claim intent requires fact verification and cannot become a shadow L3 candidate.
安全警报
critical: Takeover required
critical: High risk signal
warning: Intent not whitelisted
Customer Memory
- 主要需求
- 理解产品是否适合当前业务场景
- 主要异议
- 暂未出现明确异议
- 情绪状态
- neutral
Memory review: critical · 100
Review memory before any AI-assisted reply.
Takeover memory: Conversation memory should be reviewed while human takeover is active.
人工备注
暂无人工备注。
事实台账
客户需求: 理解产品是否适合当前业务场景
客户异议: 暂未出现明确异议
preview only · no auto-send
AI 建议
推荐回复置信度 64%
这个点我先不直接给结论，避免误导你。我需要确认一下具体情况和相关规则，再给你准确回复。
本轮策略
先复述需求，再给一个不夸张的下一步。
安全边界
当前会话或候选草稿触发高风险，草稿只能作为人工接管参考。
证据依据
理解产品是否适合当前业务场景
下一步建议
追问围绕当前需求追问一个关键限制条件
边界不主动承诺价格、退款、合同或结果保证
接管如果客户继续追问敏感条款，转人工接管
节奏保持长期关系推进，不急于成交
风险提示
高风险Takeover required
最近客户消息：I need a guarantee before paying.
客户概览
编辑客户等级
培养中 · 信任 48
当前阶段
异议处理
导入标签
High-risk guarantee
导入时间
2026-10-09 20:00
导入消息
4 条
脱敏替换
0 次
未完成跟进
0 · 下一步 立即人工接管
当前结果
未记录
语言偏好
未标注
主要需求
理解产品是否适合当前业务场景
主要异议
暂未出现明确异议
团队技能审核
跨客户候选仅供人工审阅；不含客户正文。
暂无待审核候选技能。
技能效果对比
只读结果关联，不产生自动升级、降级或退休。
暂无可比较的已审核技能检索记录。
Business Metrics
本地派生指标，只用于人工复盘。
0%
采用率
0%
修改率
25%
接管率
0
撤回数
20%
标注完整
0/4
完整客户
标注完整度
后台安全员复盘准备度，不阻塞人工流程。
20% 完整
Outcomemissing
No outcome recorded yet.
Feedbackmissing
No draft feedback captured yet.
Follow-upmissing
No follow-up task recorded yet.
Human notemissing
No human note recorded yet.
Fact ledgerready
2 fact ledger entries present.
Sales Adaptation
跨语言话术适配，结果只进入人工确认。
Asset Recommendations
素材建议只供人工确认，不自动发送。
Reply Review
L1 模式下全部进入人工确认；操作只记录人工决策，不调用外部平台。
人工反馈记录
人工采用、修改、拒绝和手动发送记录。
撤回记录
只记录本地撤回意图，不调用平台撤回 API。
Outcome
人工记录成交结果，用于后续复盘学习。
当前结果：未记录
相似案例
来自人工记录结果的可解释参考。
复盘学习
候选复盘学习，只供人工审核，不自动改写回复。
跟进任务
人工创建跟进任务，不自动发送。待处理 0 · 已完成 0
暂无待跟进任务。
AI 决策记录
未来 L3 接管和回放会直接依赖这里。
自动化事件
自动化候选、审批队列和接管请求的事件流。
状态时间线
客户状态轨迹，供安全员快速回放。
审计轨迹
人类、AI、系统动作都写入可回放审计。
Chatwoot 预览
只生成本地私有备注、标签和字段预览；ClientPilot 不调用 Chatwoot API，也不会发送。
Safety Controls