## 1. Task boundaries and contracts

- [x] 1.1 正向提示词：让授权操作者在编辑已停止服务器时读取完整已保存部署配置；让 Run 执行并确认同一冻结修订；开启本机诊断后可直接打印目录和启动命令，且所有成功路径都有自动化验证。
- [x] 1.2 方向提示词：在 `platform/` 与 `platform_web/` 沿用现有部署 DTO/生命周期/编辑工作流模式；在独立 `run.git` 的协议和生命周期执行器中实现匹配契约；验证 `go test ./...`、前端测试/类型检查、`scripts/check-structure.sh` 与严格 OpenSpec 校验。
- [x] 1.3 任务边界：不把 Run 源码移入 browser 仓库；不输出凭据、运行绑定或环境变量；不让原始目录/命令进入 Platform API、日志回传、任务结果、工件、审计或插件接口；不增加计费、云主机或无关 SaaS 能力。

## 2. Platform deployment contract

- [x] 2.1 Add typed deployment execution version/receipt contracts and validation for frozen lifecycle jobs.
- [x] 2.2 Require compatible Run capability before lifecycle dispatch and project validated Run confirmation in deployment views.
- [ ] 2.3 Add explicit deployment-field clearing and preserve omitted shell values; cover service/API behavior with tests.

## 3. Platform editor workflow

- [x] 3.1 Automatically retrieve authorized saved inputs when the deployment editor opens and clear them on close.
- [x] 3.2 Display dispatch revision separately from Run-confirmed revision and update frontend tests/types.

## 4. Independent Run execution

- [x] 4.1 Extend independent `run.git` protocol and validation with the typed deployment envelope and safe execution receipt.
- [x] 4.2 Execute deployment-aware lifecycle actions using the frozen root, working directory, shell, and commands.
- [x] 4.3 Add opt-in local-only raw startup diagnostics that bypass the upload log sink and exclude credentials/environment values.
- [ ] 4.4 Add Run protocol/runtime tests covering execution, receipt fences, enabled diagnostics, and remote-channel redaction.

## 5. Verification and delivery

- [x] 5.1 Run browser Platform/backend/frontend validation and strict OpenSpec validation.
- [x] 5.2 Run independent Run test suite and inspect both worktrees for scoped changes only.
- [ ] 5.3 Stage, commit, and push scoped changes on `main` in both repositories.