diff --git a/.cursor/skills/codebase-to-course/references/design-system.md b/.cursor/skills/codebase-to-course/references/design-system.md
index 5cb13ae..e900283 100644
--- a/.cursor/skills/codebase-to-course/references/design-system.md
+++ b/.cursor/skills/codebase-to-course/references/design-system.md
@@ -149,12 +149,15 @@ Complete CSS design tokens for the course. Copy this entire `:root` block into t
   padding: var(--space-16) var(--space-6);
   padding-top: calc(var(--nav-height) + var(--space-12));
 }
-.module-content {
+.module-content,
+.module-inner {
   max-width: var(--content-width);
   margin: 0 auto;
 }
 ```
 
+Use **`.module-inner`** in assembled module HTML (matches `build_all.py` output); **`.module-content`** remains an alias for older templates.
+
 ---
 
 ## Shadows & Depth
@@ -280,7 +283,7 @@ document.addEventListener('keydown', (e) => {
 **HTML template for each module:**
 ```html
 <section class="module" id="module-N" style="background: var(--color-bg or --color-bg-warm)">
-  <div class="module-content">
+  <div class="module-inner">
     <header class="module-header animate-in">
       <span class="module-number">0N</span>
       <h1 class="module-title">Module Title</h1>
diff --git a/.cursor/skills/codebase-to-course/references/interactive-elements.md b/.cursor/skills/codebase-to-course/references/interactive-elements.md
index 62ef616..665a274 100644
--- a/.cursor/skills/codebase-to-course/references/interactive-elements.md
+++ b/.cursor/skills/codebase-to-course/references/interactive-elements.md
@@ -418,13 +418,15 @@ Full-system diagram where hovering/clicking a component shows a description tool
 
 Shows how different layers (e.g., HTML/CSS/JS, or data/logic/UI) build on each other. Three tabs switch between views.
 
+**`showLayer(layerId, btn)`:** pass the clicked tab as second arg (`this`). If omitted, falls back to `window.event.currentTarget` (inline `onclick` only). Layer nodes use `id="layer-{layerId}"` inside `.layer-demo`; lookup is scoped to that demo.
+
 **HTML:**
 ```html
 <div class="layer-demo">
   <div class="layer-tabs">
-    <button class="layer-tab active" onclick="showLayer('html')">HTML</button>
-    <button class="layer-tab" onclick="showLayer('css')">+ CSS</button>
-    <button class="layer-tab" onclick="showLayer('js')">+ JS</button>
+    <button class="layer-tab active" onclick="showLayer('html', this)">HTML</button>
+    <button class="layer-tab" onclick="showLayer('css', this)">+ CSS</button>
+    <button class="layer-tab" onclick="showLayer('js', this)">+ JS</button>
   </div>
   <div class="layer-viewport">
     <div class="layer" id="layer-html" style="display:block">
diff --git a/.cursor/skills/codebase-to-course/references/main.js b/.cursor/skills/codebase-to-course/references/main.js
index 7150a69..410548e 100644
--- a/.cursor/skills/codebase-to-course/references/main.js
+++ b/.cursor/skills/codebase-to-course/references/main.js
@@ -486,13 +486,17 @@
 
   /* ── LAYER TOGGLE ──────────────────────────────────────────── */
   window.showLayer = function (layerId, btn) {
-    const demo = btn ? btn.closest('.layer-demo') : null;
+    const tab = btn || (window.event && window.event.currentTarget);
+    if (!tab || !tab.closest) return;
+    const demo = tab.closest('.layer-demo');
     if (!demo) return;
-    $$('.layer', demo).forEach(l => l.style.display = 'none');
+    $$('.layer', demo).forEach(l => { l.style.display = 'none'; });
     $$('.layer-tab', demo).forEach(t => t.classList.remove('active'));
-    const layer = $('#' + layerId);
+    const esc = typeof CSS !== 'undefined' && CSS.escape ? CSS.escape(layerId) : layerId.replace(/[^\w-]/g, '');
+    let layer = demo.querySelector('#' + esc);
+    if (!layer) layer = demo.querySelector('#layer-' + esc);
     if (layer) layer.style.display = 'block';
-    btn.classList.add('active');
+    tab.classList.add('active');
   };
 
 })();
diff --git a/.cursor/skills/codebase-to-course/references/styles.css b/.cursor/skills/codebase-to-course/references/styles.css
index 544669c..68d0e39 100644
--- a/.cursor/skills/codebase-to-course/references/styles.css
+++ b/.cursor/skills/codebase-to-course/references/styles.css
@@ -254,7 +254,8 @@ pre::-webkit-scrollbar { display: none; }
   padding-top: calc(var(--nav-height) + var(--space-12));
 }
 
-.module-content {
+.module-content,
+.module-inner {
   max-width: var(--content-width);
   margin: 0 auto;
 }
diff --git a/AGENTS.md b/AGENTS.md
index b5a1b5c..0426fa7 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -38,6 +38,6 @@ app/repository/core_ro.py # Core 只读 + check_suitability（R-02）
 scripts/core/reset.ps1    # 本地灌 Core 模拟库
 ```
 
-**当前分支：** `merger` · **测试基线：** `python -m pytest` → 730 passed · **Redis：** Docker `6380` · **前端：** `cd web && npm run build/test`
+**当前分支：** `merger` · **测试基线：** `python -m pytest` → 786 passed · **Redis：** Docker `6380` · **前端：** `cd web && npm run build/test`
 
 技术选型硬阀门见 MEMORY 第 3、7 节。Cursor 以 `.cursor/rules/project-memory.mdc` 为准。
diff --git a/app/config/profile_slots.py b/app/config/profile_slots.py
index 4a8eced..36435be 100644
--- a/app/config/profile_slots.py
+++ b/app/config/profile_slots.py
@@ -142,6 +142,16 @@ SLOTS: list[SlotSpec] = [
         "description": "1-2 年内的具体生活/财务目标，短文本",
         "examples": ["明年准备买车", "下半年要装修", "近期想凑首付"],
     },
+    {
+        "path": "investment.allocation_target",
+        "name": "资产配置目标",
+        "allowed_source": "chat",
+        "sensitivity": "medium",
+        "merge_mode": "latest",
+        "value_format": "text",
+        "description": "客户自述的目标股债/大类比例（C-08 规划偏好，非正式调仓指令）",
+        "examples": ["股债比例6:4", "希望债券占七成", "想多配一点稳健型"],
+    },
     {
         "path": "threshold_pref_summary",
         "name": "阈值提醒偏好",
diff --git a/app/config/settings.py b/app/config/settings.py
index 17ea701..a211197 100644
--- a/app/config/settings.py
+++ b/app/config/settings.py
@@ -52,6 +52,9 @@ class Settings(BaseSettings):
     profile_confidence_high: float = 0.9
     profile_confidence_default: float = 0.7
     profile_window_max_msgs: int = 40
+    profile_preference_top_k: int = 3
+    profile_preference_inject_ttl_days: int = 90
+    profile_preference_decay_half_life_days: int = 30
     archive_idle_minutes: int = 120
     archive_idle_scan_limit: int = 3
     archive_summary_max_msgs: int = 30
diff --git a/app/repository/threshold_repository.py b/app/repository/threshold_repository.py
new file mode 100644
index 0000000..941e9b5
--- /dev/null
+++ b/app/repository/threshold_repository.py
@@ -0,0 +1,89 @@
+"""客户亏损阈值配置与提醒留痕（jinrong_agent.customer_threshold_config / customer_notify_log）。"""
+
+from __future__ import annotations
+
+import json
+from decimal import Decimal
+from typing import Any
+
+from sqlalchemy import text
+
+from app.config.database import get_agent_engine
+
+
+class ThresholdRepository:
+    def __init__(self, engine=None) -> None:
+        self._engine = engine or get_agent_engine()
+
+    def list_enabled(self, customer_id: str) -> list[dict[str, Any]]:
+        sql = text(
+            """
+            SELECT id, customer_id, scope_type, scope_ref, loss_threshold_pct,
+                   notify_channel, is_enabled
+            FROM customer_threshold_config
+            WHERE customer_id = :cid AND is_enabled = 1
+            """
+        )
+        with self._engine.connect() as conn:
+            return [dict(r) for r in conn.execute(sql, {"cid": customer_id}).mappings()]
+
+    def upsert_portfolio(self, customer_id: str, loss_threshold_pct: Decimal) -> int:
+        """组合级阈值：同一客户仅保留一条 portfolio 配置（更新或插入）。"""
+        sel = text(
+            """
+            SELECT id FROM customer_threshold_config
+            WHERE customer_id = :cid AND scope_type = 'portfolio' AND scope_ref IS NULL
+            LIMIT 1
+            """
+        )
+        with self._engine.begin() as conn:
+            row = conn.execute(sel, {"cid": customer_id}).mappings().first()
+            if row:
+                upd = text(
+                    """
+                    UPDATE customer_threshold_config
+                    SET loss_threshold_pct = :pct, is_enabled = 1
+                    WHERE id = :id
+                    """
+                )
+                conn.execute(upd, {"pct": loss_threshold_pct, "id": row["id"]})
+                return int(row["id"])
+            ins = text(
+                """
+                INSERT INTO customer_threshold_config
+                    (customer_id, scope_type, scope_ref, loss_threshold_pct, notify_channel, is_enabled)
+                VALUES (:cid, 'portfolio', NULL, :pct, 'app', 1)
+                """
+            )
+            result = conn.execute(ins, {"cid": customer_id, "pct": loss_threshold_pct})
+            return int(result.lastrowid)
+
+    def insert_notify_log(
+        self,
+        *,
+        customer_id: str,
+        trace_id: str,
+        threshold_config_id: int | None,
+        payload: dict,
+        channel: str = "app",
+        send_status: str = "sent",
+    ) -> None:
+        sql = text(
+            """
+            INSERT INTO customer_notify_log
+                (customer_id, trace_id, notify_type, threshold_config_id, payload, channel, send_status)
+            VALUES (:cid, :tid, 'loss_threshold', :cfg_id, :payload, :channel, :status)
+            """
+        )
+        with self._engine.begin() as conn:
+            conn.execute(
+                sql,
+                {
+                    "cid": customer_id,
+                    "tid": trace_id or "threshold-check",
+                    "cfg_id": threshold_config_id,
+                    "payload": json.dumps(payload, ensure_ascii=False),
+                    "channel": channel,
+                    "status": send_status,
+                },
+            )
diff --git a/app/service/customer_prompts.py b/app/service/customer_prompts.py
index 95c9a76..8726ea8 100644
--- a/app/service/customer_prompts.py
+++ b/app/service/customer_prompts.py
@@ -19,6 +19,7 @@ INTENT_SYSTEM = """你是金融客服（已登录客户模式）意图分类器
 - transaction_query：查询本人交易流水（交易记录/申购赎回记录/最近买卖/账单/流水）
 - risk_assessment_query：查询本人风险测评（我的风评/风险等级/测评结果/问卷得分/风险承受能力）
 - suitability_check：本人购买适当性匹配（我能买XX吗/R几产品适合我吗/买这个匹配吗/适当性）
+- nav_query：查询具体产品最新净值（XX基金净值多少/单位净值/产品净值；系统只读库，非实时盘口）
 - product_consult：咨询具体产品知识（基金、理财、费用、风险等级含义、产品分类等非个人账户问题）
 - policy_interpret：咨询政策法规（投资者适当性、反洗钱、KYC、销售合规、投诉处理、冷静期、双录）
 - faq：常见问答（开户、身份认证、账户操作、App 使用等通用问题）
@@ -34,10 +35,11 @@ INTENT_SYSTEM = """你是金融客服（已登录客户模式）意图分类器
 4. 涉及"明天会涨/收益预测/能赚多少/走势"等走势预测一律 reject
 5. 涉及"和其他平台比/哪个平台好"等竞品对比一律 reject
 6. 涉及实时行情/实时价格查询一律 reject
-7. "能买/可以买/适合买/匹配吗"是适当性查询（suitability_check），不是投资建议
-8. 查询本人账户/持仓/流水/风评是已登录客户的合法功能，不要输出 reject
+7. "能买/可以买/适合买/匹配吗/我能买什么/哪些产品我能买"是适当性查询（suitability_check），不是投资建议
+8. 查询本人账户/持仓/流水/风评/产品净值是已登录客户的合法功能，不要输出 reject
 9. 仅当用户明确要求"转人工/人工客服"，或涉及投诉/纠纷/账户异常/被盗等安全问题时，才输出 transfer_human
-10. 用户明确要求"你要记住/帮我记/记一下/别忘了/记着"等记忆指令时，输出 save_note"""
+10. 用户明确要求"你要记住/帮我记/记一下/别忘了/记着"等记忆指令时，输出 save_note
+11. "重新测评/重做风评/更新风评"→ risk_assessment_query（引导至 App/网点正式流程，Agent 不代填问卷）"""
 
 INTENT_USER_TEMPLATE = "用户输入：{message}"
 
@@ -46,6 +48,7 @@ VALID_INTENTS = frozenset({
     "transaction_query",
     "risk_assessment_query",
     "suitability_check",
+    "nav_query",
     "product_consult",
     "policy_interpret",
     "faq",
@@ -62,6 +65,7 @@ DATA_QUERY_INTENTS = frozenset({
     "transaction_query",
     "risk_assessment_query",
     "suitability_check",
+    "nav_query",
 })
 
 
@@ -88,7 +92,18 @@ _REJECT_COMPARE_KW = (
 )
 _REJECT_REALTIME_KW = (
     "实时行情", "实时价格", "现在价格", "当前价格", "最新行情",
-    "今日净值", "实时净值", "最新净值",
+    "今日行情",
+)
+
+# C-11：匹配说明类（走 suitability，不走 reject）
+_ELIGIBLE_PRODUCTS_KW = (
+    "我能买什么", "可以买什么", "哪些产品我能买", "适合买什么", "匹配的产品",
+    "有什么产品适合我",
+)
+
+# C-05：产品净值（Core 只读库，非实时盘口）
+_NAV_KW = (
+    "净值", "单位净值", "最新净值", "基金净值", "产品净值",
 )
 
 # 数据查询关键词（本人数据）
@@ -105,6 +120,7 @@ _TRADE_KW = (
 _RISK_KW = (
     "我的风评", "风评", "风险测评", "风险评估", "风险等级", "风险承受能力",
     "测评结果", "测评问卷", "问卷得分", "我是稳健", "我是保守", "C1", "C2", "C3", "C4", "C5",
+    "重新测评", "重做风评", "更新风评",
 )
 _SUITABILITY_KW = (
     "能买", "可以买", "可买", "适合买", "适合我", "匹配吗", "能不能买",
@@ -137,8 +153,10 @@ def keyword_route(message: str) -> tuple[str, str] | None:
         return ("reject", "compare")
     if any(k in msg for k in _REJECT_REALTIME_KW):
         return ("reject", "realtime")
+    if "实时净值" in msg:
+        return ("reject", "realtime")
 
-    # 数据查询类（本人数据）
+    # 数据查询类（本人数据，优先于 save_note）
     if any(k in msg for k in _TRADE_KW):
         return ("transaction_query", "")
     if any(k in msg for k in _RISK_KW):
@@ -148,10 +166,15 @@ def keyword_route(message: str) -> tuple[str, str] | None:
     if any(k in msg for k in _HOLDING_KW):
         return ("holding_query", "")
 
-    # 备注（用户主动要求记忆，优先级低于数据查询）
     if any(k in msg for k in _SAVE_NOTE_KW):
         return ("save_note", "")
 
+    # C-11 / C-05：数据查询扩展
+    if any(k in msg for k in _ELIGIBLE_PRODUCTS_KW):
+        return ("suitability_check", "")
+    if any(k in msg for k in _NAV_KW):
+        return ("nav_query", "")
+
     return None
 
 
@@ -171,7 +194,8 @@ PARAM_EXTRACT_SYSTEM = """你是金融客服的查询参数抽取器。从用户
 2. months 范围 1~36；超出按边界裁剪；无法判断时间一律 null
 3. product_keyword 去掉"产品/基金/理财"等无区分度尾词前后的多余称呼，保留产品名核心片段，最长 32 字
 4. 用户说"我能买R3的吗"→risk_level="R3"，product_keyword=null
-5. 无法抽取任何参数时输出 {}"""
+5. 用户问"005827净值多少"→product_keyword="005827"
+6. 无法抽取任何参数时输出 {}"""
 
 PARAM_EXTRACT_USER_TEMPLATE = "用户输入：{message}"
 
diff --git a/app/service/customer_service.py b/app/service/customer_service.py
index e99058f..2f9f1f0 100644
--- a/app/service/customer_service.py
+++ b/app/service/customer_service.py
@@ -62,11 +62,13 @@ from app.service.profile_service import (
 from app.service.rag_service import VisitorRagService
 from app.tool.core_ro_tool import (
     query_holdings,
+    query_product_nav,
     query_risk_profile,
     query_suitability,
     query_trades,
 )
-from app.utils.compliance_guard import RISK_DISCLAIMER, sanitize_reply, should_add_disclaimer
+from app.utils.compliance_guard import RISK_DISCLAIMER, should_add_disclaimer
+from app.utils.sanitize_postprocess import finalize_sanitized_reply
 
 # ---------------------------------------------------------------------------
 # LLM 调用
@@ -125,8 +127,11 @@ _TOOL_BY_INTENT = {
     "transaction_query": query_trades,
     "risk_assessment_query": query_risk_profile,
     "suitability_check": query_suitability,
+    "nav_query": query_product_nav,
 }
 
+_DATA_QUERY_INTENTS = frozenset(_TOOL_BY_INTENT.keys())
+
 _R_LEVEL_FULL_RE = re.compile(r"[Rr]\s*([1-5])")
 
 
@@ -201,7 +206,7 @@ def rag_search(state: CustomerState) -> CustomerState:
 
 def param_extract(state: CustomerState) -> CustomerState:
     intent = state["intent"]
-    if intent not in ("transaction_query", "suitability_check"):
+    if intent not in ("transaction_query", "suitability_check", "nav_query"):
         return {"params": {}}
 
     try:
@@ -250,6 +255,8 @@ def tool_call(state: CustomerState) -> CustomerState:
                 product_keyword=params.get("product_keyword"),
                 risk_level=params.get("risk_level"),
             )
+        elif intent == "nav_query":
+            result = fn(cid, product_keyword=params.get("product_keyword"))
         else:
             result = fn(cid)
     except Exception:
@@ -288,16 +295,13 @@ def interpret(state: CustomerState) -> CustomerState:
     except Exception:
         reply = fact_text  # LLM 不可用时直接返回脱敏事实文本
 
-    reply, need_transfer = sanitize_reply(reply)
+    reply, need_transfer = finalize_sanitized_reply(
+        reply, intent=state.get("intent"), fact_text=fact_text,
+    )
     if need_transfer:
         return {"reply": reply, "transfer_to_human": True, "has_disclaimer": False}
     return {"reply": reply, "has_disclaimer": False}
 
-
-# ---------------------------------------------------------------------------
-# 节点 7：RAG 生成（画像红线在 GENERATE_SYSTEM）
-# ---------------------------------------------------------------------------
-
 def generate(state: CustomerState) -> CustomerState:
     if not state.get("rag_context"):
         return {"reply": state.get("reply") or FALLBACK_TEXT, "has_disclaimer": False}
@@ -319,7 +323,7 @@ def generate(state: CustomerState) -> CustomerState:
     except Exception:
         return {"reply": FALLBACK_TEXT, "intent": "fallback"}
 
-    reply, need_transfer = sanitize_reply(reply)
+    reply, need_transfer = finalize_sanitized_reply(reply, intent=state.get("intent"))
     if need_transfer:
         return {"reply": reply, "transfer_to_human": True, "has_disclaimer": False}
 
@@ -351,7 +355,7 @@ def chitchat(state: CustomerState) -> CustomerState:
     except Exception:
         return {"reply": FALLBACK_TEXT, "intent": "fallback"}
 
-    reply, need_transfer = sanitize_reply(reply)
+    reply, need_transfer = finalize_sanitized_reply(reply, intent=state.get("intent"))
     if need_transfer:
         return {"reply": reply, "transfer_to_human": True, "has_disclaimer": False}
     return {"reply": reply, "has_disclaimer": False}
diff --git a/app/service/profile_service.py b/app/service/profile_service.py
index 1d8dba6..3e2b80d 100644
--- a/app/service/profile_service.py
+++ b/app/service/profile_service.py
@@ -13,6 +13,7 @@
 from __future__ import annotations
 
 import json
+import math
 import re
 import threading
 import time
@@ -212,7 +213,87 @@ def _set_entry(tags: dict, path: str, entry: dict) -> None:
         tags[path] = entry
 
 
-def render_profile_context(tags: dict) -> str:
+_PREFERENCE_LIST_PATHS = frozenset({"investment.product_preferences", "investment.excluded_products"})
+
+
+def _touch_items_meta(
+    old_meta: dict | None,
+    additions: list[str],
+    confidence: float,
+    *,
+    now: datetime | None = None,
+) -> dict:
+    now_iso = (now or datetime.now()).isoformat(timespec="seconds")
+    meta = dict(old_meta or {})
+    for item in additions:
+        key = str(item)
+        prev = meta.get(key, {})
+        meta[key] = {
+            "updated_at": now_iso,
+            "mention_count": int(prev.get("mention_count") or 0) + 1,
+            "confidence": round(confidence, 2),
+        }
+    return meta
+
+
+def _days_between(iso_ts: str, now: datetime) -> float:
+    try:
+        parsed = datetime.fromisoformat(iso_ts)
+    except ValueError:
+        return 0.0
+    return max(0.0, (now - parsed).total_seconds() / 86400.0)
+
+
+def _preference_inject_score(meta: dict, *, now: datetime) -> float:
+    days = _days_between(str(meta.get("updated_at") or ""), now)
+    if days > settings.profile_preference_inject_ttl_days:
+        return -1.0
+    conf = float(meta.get("confidence") or settings.profile_confidence_default)
+    mentions = int(meta.get("mention_count") or 1)
+    half = settings.profile_preference_decay_half_life_days
+    decay = 0.5 ** (days / half) if half > 0 else 1.0
+    return conf * decay * (1.0 + math.log1p(max(0, mentions - 1)))
+
+
+def _top_k_preference_values(
+    values: list,
+    items_meta: dict,
+    *,
+    now: datetime | None = None,
+) -> list[str]:
+    now = now or datetime.now()
+    scored: list[tuple[float, str]] = []
+    for v in values:
+        key = str(v)
+        meta = items_meta.get(key)
+        if not meta:
+            scored.append((1.0, key))
+            continue
+        score = _preference_inject_score(meta, now=now)
+        if score < 0:
+            continue
+        scored.append((score, key))
+    scored.sort(key=lambda x: (-x[0], x[1]))
+    return [v for _, v in scored[: settings.profile_preference_top_k]]
+
+
+def _sync_threshold_config(customer_id: str, tags: dict) -> None:
+    """画像 threshold_pref_summary 更新时同步 customer_threshold_config（C-04）。"""
+    entry = _get_entry(tags, "threshold_pref_summary")
+    if not entry:
+        return
+    value = entry.get("value")
+    if not value:
+        return
+    try:
+        from app.service.threshold_service import sync_threshold_from_summary
+
+        sync_threshold_from_summary(customer_id, str(value))
+    except Exception:
+        pass
+
+
+def render_profile_context(tags: dict, *, now: datetime | None = None) -> str:
     """带元数据结构 → 纯值文本（注入 generate/chitchat prompt 的客户画像参考）。"""
     if not tags:
         return ""
@@ -222,7 +303,13 @@ def render_profile_context(tags: dict) -> str:
         if not entry:
             continue
         value = entry.get("value")
-        if isinstance(value, list):
+        if path in _PREFERENCE_LIST_PATHS and isinstance(value, list):
+            items_meta = entry.get("items_meta") or {}
+            picked = _top_k_preference_values(value, items_meta, now=now)
+            if not picked:
+                continue
+            value = "、".join(picked)
+        elif isinstance(value, list):
             value = "、".join(str(v) for v in value)
         if value in (None, ""):
             continue
@@ -307,9 +394,18 @@ def merge_candidates(old_tags: dict, candidates: list[dict]) -> tuple[dict, list
         else:
             value = normalized
 
+        entry_payload: dict[str, Any] = {
+            "value": value,
+            "source": source,
+            "confidence": round(confidence, 2),
+        }
+        if slot["merge_mode"] == "set_union" and str(path) in _PREFERENCE_LIST_PATHS:
+            old_meta = (old_entry or {}).get("items_meta")
+            entry_payload["items_meta"] = _touch_items_meta(old_meta, additions, confidence)
+
         _set_entry(
             new_tags, str(path),
-            {"value": value, "source": source, "confidence": round(confidence, 2)},
+            entry_payload,
         )
         diff.append(
             f"{path}: {'（空）' if old_display in (None, '', []) else old_display} → {value}"
@@ -410,6 +506,7 @@ def extract_profile(customer_id: str, window_text: str, trace_id: str = "") -> l
                 input_summary={"diff": diff, "version": version + 1},
                 decision="success",
             )
+            _sync_threshold_config(customer_id, new_tags)
             return diff
     return []
 
diff --git a/app/service/threshold_service.py b/app/service/threshold_service.py
new file mode 100644
index 0000000..265d000
--- /dev/null
+++ b/app/service/threshold_service.py
@@ -0,0 +1,108 @@
+"""客户亏损阈值提醒（C-04）。
+
+从 L1 槽位 threshold_pref_summary 解析百分比并写入 customer_threshold_config；
+持仓查询时按组合浮动盈亏与配置比对，命中则追加提醒并写 customer_notify_log。
+"""
+
+from __future__ import annotations
+
+import re
+from decimal import Decimal
+from typing import Any
+
+from app.repository.threshold_repository import ThresholdRepository
+
+_LOSS_PCT_RE = re.compile(r"(\d+(?:\.\d+)?)\s*%")
+
+
+def parse_loss_threshold_pct(summary: str) -> Decimal | None:
+    """从「亏10%提醒我」类摘要解析正数阈值（百分点）。"""
+    m = _LOSS_PCT_RE.search(summary or "")
+    if not m:
+        return None
+    pct = Decimal(m.group(1))
+    if pct <= 0 or pct > 100:
+        return None
+    return pct
+
+
+def sync_threshold_from_summary(customer_id: str, summary: str) -> int | None:
+    """画像摘要 → 组合级 customer_threshold_config（upsert）。"""
+    pct = parse_loss_threshold_pct(summary)
+    if pct is None:
+        return None
+    return ThresholdRepository().upsert_portfolio(customer_id, pct)
+
+
+def portfolio_pnl_pct(holdings: list[dict[str, Any]]) -> float | None:
+    """按市值加权计算组合浮动盈亏率（%）。"""
+    if not holdings:
+        return None
+    total_mv = sum(float(r.get("market_value") or 0) for r in holdings)
+    if total_mv <= 0:
+        return None
+    weighted = sum(
+        float(r.get("market_value") or 0) * float(r.get("pnl_pct") or 0)
+        for r in holdings
+    )
+    return weighted / total_mv
+
+
+def build_threshold_alert(
+    customer_id: str,
+    holdings: list[dict[str, Any]],
+    *,
+    trace_id: str = "",
+) -> str | None:
+    """若组合亏损达到配置阈值，返回提醒文案并留痕；否则 None。"""
+    repo = ThresholdRepository()
+    configs = repo.list_enabled(customer_id)
+    portfolio_cfg = next((c for c in configs if c.get("scope_type") == "portfolio"), None)
+    if not portfolio_cfg:
+        return None
+
+    pnl = portfolio_pnl_pct(holdings)
+    if pnl is None or pnl >= 0:
+        return None
+
+    threshold = float(portfolio_cfg["loss_threshold_pct"])
+    loss_pct = abs(pnl)
+    if loss_pct < threshold:
+        return None
+
+    alert = (
+        f"【阈值提醒】您的持仓组合浮动亏损约 {loss_pct:.2f}%，"
+        f"已达到您设置的 {threshold:.0f}% 提醒线。"
+        "以上为系统只读计算，不构成投资建议；如需调整提醒条件，可告诉我新的亏损提醒比例。"
+    )
+    repo.insert_notify_log(
+        customer_id=customer_id,
+        trace_id=trace_id,
+        threshold_config_id=int(portfolio_cfg["id"]),
+        payload={
+            "portfolio_pnl_pct": round(pnl, 4),
+            "threshold_pct": threshold,
+            "holding_count": len(holdings),
+        },
+    )
+    return alert
+
+
+def append_threshold_to_tool_result(
+    customer_id: str,
+    tool_result: dict[str, Any],
+    *,
+    trace_id: str = "",
+) -> dict[str, Any]:
+    """持仓 tool 成功后追加阈值提醒到 fact_text。"""
+    if tool_result.get("tool") != "holding_query" or not tool_result.get("ok"):
+        return tool_result
+    facts = tool_result.get("facts")
+    if not isinstance(facts, list):
+        return tool_result
+    alert = build_threshold_alert(customer_id, facts, trace_id=trace_id)
+    if not alert:
+        return tool_result
+    out = dict(tool_result)
+    out["fact_text"] = f"{out.get('fact_text', '')}\n\n{alert}"
+    return out
diff --git a/app/service/visitor_service.py b/app/service/visitor_service.py
index 65fdda2..3909cd4 100644
--- a/app/service/visitor_service.py
+++ b/app/service/visitor_service.py
@@ -29,9 +29,9 @@ from app.utils.compliance_guard import (
     REJECT_PREDICT,
     REJECT_REALTIME,
     RISK_DISCLAIMER,
-    sanitize_reply,
     should_add_disclaimer,
 )
+from app.utils.sanitize_postprocess import finalize_sanitized_reply
 
 
 # ---------------------------------------------------------------------------
@@ -205,8 +205,8 @@ def generate(state: VisitorState) -> VisitorState:
     except Exception:
         return {"reply": FALLBACK_TEXT, "intent": "fallback"}
 
-    # 合规护栏
-    reply, need_transfer = sanitize_reply(reply)
+    # 合规护栏（1B：命中不自动 transfer）
+    reply, need_transfer = finalize_sanitized_reply(reply, intent=state.get("intent"))
     if need_transfer:
         return {"reply": reply, "transfer_to_human": True, "has_disclaimer": False}
 
@@ -236,7 +236,7 @@ def chitchat(state: VisitorState) -> VisitorState:
         return {"reply": FALLBACK_TEXT, "intent": "fallback"}
 
     # 合规护栏
-    reply, need_transfer = sanitize_reply(reply)
+    reply, need_transfer = finalize_sanitized_reply(reply, intent=state.get("intent"))
     if need_transfer:
         return {"reply": reply, "transfer_to_human": True, "has_disclaimer": False}
 
diff --git a/app/tool/core_ro_tool.py b/app/tool/core_ro_tool.py
index 6c2c406..8f86eca 100644
--- a/app/tool/core_ro_tool.py
+++ b/app/tool/core_ro_tool.py
@@ -130,6 +130,13 @@ def query_holdings(customer_id: str, repo: CoreReadOnlyRepository | None = None)
         )
     lines.append(f"持仓合计市值约 {_money(total_mv)} 元。")
 
+    from app.service.threshold_service import build_threshold_alert
+
+    alert = build_threshold_alert(cid, rows)
+    if alert:
+        lines.append("")
+        lines.append(alert)
+
     return ToolResult(
         tool="holding_query",
         ok=True,
@@ -447,3 +454,64 @@ def query_suitability(
         facts=_masked(products),
         fact_text="\n".join(lines),
     )
+
+
+# ---------------------------------------------------------------------------
+# 工具 5：产品净值查询（C-05 · Core 只读，非实时行情接口）
+# ---------------------------------------------------------------------------
+
+def query_product_nav(
+    customer_id: str,
+    product_keyword: str | None = None,
+    repo: CoreReadOnlyRepository | None = None,
+) -> ToolResult:
+    """查询在售产品最新净值（core_product_nav 种子/同步数据，非第三方实时盘口）。"""
+    _require_customer(customer_id)
+    ro = repo or CoreReadOnlyRepository()
+    keyword = (product_keyword or "").strip()
+    if not keyword:
+        return ToolResult(
+            tool="nav_query",
+            ok=True,
+            facts=[],
+            fact_text="请告诉我具体产品名称或代码片段，例如「005827 的净值是多少」。",
+        )
+
+    products = ro.find_products(keyword, limit=3)
+    if not products:
+        return ToolResult(
+            tool="nav_query",
+            ok=True,
+            facts=[],
+            fact_text=f"未找到名称包含「{keyword}」的在售产品，请核对产品名称后重试。",
+        )
+
+    lines = [f"以下为系统记录的最新净值（非实时交易盘口）："]
+    facts: list[dict[str, Any]] = []
+    for p in products[:3]:
+        nav_row = ro.get_latest_nav(p["product_id"])
+        name = p.get("product_name") or p.get("product_id")
+        if not nav_row:
+            lines.append(f"- {name}：暂未查询到净值记录。")
+            continue
+        facts.append(
+            {
+                "product_id": p.get("product_id"),
+                "product_name": name,
+                "nav": nav_row.get("nav"),
+                "nav_date": _date_str(nav_row.get("nav_date")),
+                "daily_chg_pct": nav_row.get("daily_chg_pct"),
+            }
+        )
+        chg = nav_row.get("daily_chg_pct")
+        chg_text = f"，日涨跌 {_pct(float(chg))}" if chg is not None else ""
+        lines.append(
+            f"- {name}：单位净值 {nav_row.get('nav')}（净值日期 {_date_str(nav_row.get('nav_date'))}{chg_text}）"
+        )
+    lines.append("以上净值来自代销平台只读库，仅供参考，不构成投资建议。")
+    return ToolResult(
+        tool="nav_query",
+        ok=True,
+        facts=_masked(facts),
+        fact_text="\n".join(lines),
+    )
diff --git a/app/utils/sanitize_postprocess.py b/app/utils/sanitize_postprocess.py
new file mode 100644
index 0000000..46005ef
--- /dev/null
+++ b/app/utils/sanitize_postprocess.py
@@ -0,0 +1,34 @@
+"""客服/游客编排层：违禁词扫描后的分治（1B 拍板）。
+
+底层 compliance_guard.sanitize_reply 仍返回 need_transfer=True；
+本模块在 customer/visitor 编排层决定是否真的转人工。
+"""
+
+from __future__ import annotations
+
+from app.utils.compliance_guard import COMPLIANCE_REJECT, sanitize_reply
+
+DATA_QUERY_INTENTS = frozenset({
+    "holding_query",
+    "transaction_query",
+    "risk_assessment_query",
+    "suitability_check",
+    "nav_query",
+})
+
+
+def finalize_sanitized_reply(
+    reply: str,
+    *,
+    intent: str | None = None,
+    fact_text: str | None = None,
+    data_query_intents: frozenset[str] | None = None,
+) -> tuple[str, bool]:
+    """数据查询 intent 命中违禁词 → 回退 fact_text；其余 → COMPLIANCE_REJECT；均不自动 transfer。"""
+    allowed = data_query_intents or DATA_QUERY_INTENTS
+    safe, hit = sanitize_reply(reply)
+    if not hit:
+        return safe, False
+    if intent in allowed and fact_text:
+        return fact_text, False
+    return COMPLIANCE_REJECT, False
diff --git a/docs/course/index.html b/docs/course/index.html
index 9413c6a..b634b2d 100644
--- a/docs/course/index.html
+++ b/docs/course/index.html
@@ -129,7 +129,7 @@
         <span class="card-accent" style="background:#2A7B9B"></span>
         <h2>JinRong 项目现状</h2>
         <p>四角色、JWT 双通道、数据从哪来、merger 分支做到哪——5 分钟建立仓库地图。</p>
-        <span class="tag">5 模块 · 入门首选</span>
+        <span class="tag">7 模块 · 入门首选</span>
       </a>
     </div>
 
@@ -138,44 +138,44 @@
       <a class="card" href="jinrong-module-customer/index.html">
         <span class="card-accent" style="background:#2D8B55"></span>
         <h2>客户财富 Agent 深潜</h2>
-        <p>客户 SSE 对话、14 节点 LangGraph、Core 只读 Tool、游客试聊与铁律边界。</p>
-        <span class="tag">customer_service</span>
+        <p>客户 SSE 对话、14 节点 LangGraph、口吻护栏、两套 RAG、合规 vs 一期拒答。</p>
+        <span class="tag">customer_service · 5 模块</span>
       </a>
       <a class="card" href="jinrong-module-advisor/index.html">
         <span class="card-accent" style="background:#8B6B4A"></span>
         <h2>代理人助手 Agent 深潜</h2>
-        <p>理财师顾问线、名下客户查询、Neo4j/Cypher 与 chat 分流接缝。</p>
-        <span class="tag">advisor · agent_service</span>
+        <p>理财师顾问线、名下客户查询、G-01 归属；T-20 未做 · Neo4j 是同步脚本非 Tool。</p>
+        <span class="tag">advisor · agent_service · 4 模块</span>
       </a>
       <a class="card" href="jinrong-module-analyst/index.html">
         <span class="card-accent" style="background:#6B5B95"></span>
         <h2>数据分析 Agent 深潜</h2>
-        <p>问数 NL2SQL、dashboard 指标、平台鉴权下的 analyst 专属 REST。</p>
-        <span class="tag">analyst · /api/analyst</span>
+        <p>问数 NL2SQL、dashboard 指标、问数红线、口径种子排障。</p>
+        <span class="tag">analyst · /api/analyst · 4 模块</span>
       </a>
       <a class="card" href="jinrong-module-risk/index.html">
         <span class="card-accent" style="background:#B84A4A"></span>
         <h2>风控监测 Agent 深潜</h2>
-        <p>预警台账、AML 只读 Tool、模拟交易与 risk_demo 权限口径。</p>
-        <span class="tag">risk · X-Agent-Type: risk</span>
+        <p>预警台账、AML 只读 Tool、模拟交易、cron/空台账演示边界。</p>
+        <span class="tag">risk · X-Agent-Type: risk · 4 模块</span>
       </a>
       <a class="card" href="jinrong-module-platform/index.html">
         <span class="card-accent" style="background:#E06B56"></span>
         <h2>代销平台 API 深潜</h2>
-        <p>v0.1 路由 customers/products/advisors/compliance、canonical 重复能力、脱敏开关。</p>
-        <span class="tag">get_platform_auth_context</span>
+        <p>v0.1 路由、适当性 canonical、空壳 API、行情 Phase B 草案。</p>
+        <span class="tag">get_platform_auth_context · 4 模块</span>
       </a>
       <a class="card" href="jinrong-module-frontend/index.html">
         <span class="card-accent" style="background:#132B3A"></span>
         <h2>前端 web 深潜</h2>
-        <p>四角色 HashRouter、ChatPanel 鉴权差异、Vite proxy 8000 与 401 排障。</p>
-        <span class="tag">web/ · React</span>
+        <p>四角色 HashRouter、Chat 鉴权差异、未接线清单、会话 B 三端点。</p>
+        <span class="tag">web/ · React · 4 模块</span>
       </a>
       <a class="card" href="jinrong-module-shared/index.html">
         <span class="card-accent" style="background:#5A9DB8"></span>
         <h2>共用底座与鉴权 深潜</h2>
-        <p>JWT 双栈 deps/gateway、Redis 会话窗口、input_guard 与 audit_middleware。</p>
-        <span class="tag">deps · memory_service</span>
+        <p>JWT 双栈 deps/gateway、Redis 会话、审计只 INSERT、6380 fail-open。</p>
+        <span class="tag">deps · memory_service · 4 模块</span>
       </a>
     </div>
 
diff --git a/docs/course/jinrong-module-advisor/_base.html b/docs/course/jinrong-module-advisor/_base.html
index d9dba83..51c2d59 100644
--- a/docs/course/jinrong-module-advisor/_base.html
+++ b/docs/course/jinrong-module-advisor/_base.html
@@ -32,6 +32,7 @@
         <button class="nav-dot" data-target="module-1" data-tooltip="理财师场景" role="tab" aria-label="模块 1: 理财师场景"></button>
         <button class="nav-dot" data-target="module-2" data-tooltip="tool→llm→guard" role="tab" aria-label="模块 2: 编排群聊"></button>
         <button class="nav-dot" data-target="module-3" data-tooltip="归属与 run_tool" role="tab" aria-label="模块 3: 归属与 run_tool"></button>
+        <button class="nav-dot" data-target="module-4" data-tooltip="T-20 与 Neo4j" role="tab" aria-label="模块 4: T-20 与 Neo4j"></button>
       </div>
     </div>
   </nav>
diff --git a/docs/course/jinrong-module-advisor/index.html b/docs/course/jinrong-module-advisor/index.html
index 84d9520..46f1104 100644
--- a/docs/course/jinrong-module-advisor/index.html
+++ b/docs/course/jinrong-module-advisor/index.html
@@ -32,6 +32,7 @@
         <button class="nav-dot" data-target="module-1" data-tooltip="理财师场景" role="tab" aria-label="模块 1: 理财师场景"></button>
         <button class="nav-dot" data-target="module-2" data-tooltip="tool→llm→guard" role="tab" aria-label="模块 2: 编排群聊"></button>
         <button class="nav-dot" data-target="module-3" data-tooltip="归属与 run_tool" role="tab" aria-label="模块 3: 归属与 run_tool"></button>
+        <button class="nav-dot" data-target="module-4" data-tooltip="T-20 与 Neo4j" role="tab" aria-label="模块 4: T-20 与 Neo4j"></button>
       </div>
     </div>
   </nav>
@@ -52,7 +53,7 @@
       <div class="pattern-cards">
         <div class="pattern-card">
           <h3>编排入口</h3>
-          <p>走 <code>agent_service.py</code> 通用 LangGraph（tool → llm → guard），<strong>不是</strong> <code>customer_service</code> 14 节点图。</p>
+          <p>走 顾问通用 tool→llm→guard 编排（<code>agent_service.py</code>）顾问通用 tool→llm→guard 编排，<strong>不是</strong> 登录客户 14 节点编排（<code>customer_service.py</code>）登录客户 14 节点编排。</p>
         </div>
         <div class="pattern-card">
           <h3>客户范围</h3>
@@ -101,15 +102,15 @@
       <div class="quiz-container" id="quiz-advisor-m1">
         <div class="quiz-question-block"
              data-correct="option-b"
-             data-explanation-right="对。advisor 走 agent_service 的 tool→llm→guard；customer 才走 customer_service 14 节点。"
-             data-explanation-wrong="理财师线和客户线是 chat.py 里两个 if 分支，编排文件不同。">
+             data-explanation-right="对。advisor 走 顾问通用 tool→llm→guard 编排（agent_service.py）的 tool→llm→guard；customer 才走 登录客户 14 节点编排（customer_service.py）14 节点。"
+             data-explanation-wrong="理财师线和客户线是 四 Agent 对话 HTTP 入口（chat.py）里两个 if 分支，编排文件不同。">
           <h3 class="quiz-question">理财师打开「代理人助手」对话，编排跑在哪？</h3>
           <div class="quiz-options">
             <button class="quiz-option" data-value="option-a" onclick="selectOption(this)">
-              <div class="quiz-option-radio"></div><span>customer_service.py</span>
+              <div class="quiz-option-radio"></div><span>登录客户 14 节点编排（customer_service.py）</span>
             </button>
             <button class="quiz-option" data-value="option-b" onclick="selectOption(this)">
-              <div class="quiz-option-radio"></div><span>agent_service.py</span>
+              <div class="quiz-option-radio"></div><span>顾问通用 tool→llm→guard 编排（agent_service.py）</span>
             </button>
             <button class="quiz-option" data-value="option-c" onclick="selectOption(this)">
               <div class="quiz-option-radio"></div><span>analyst_agent 问数</span>
@@ -129,8 +130,8 @@
     <h1 class="module-title animate-in">tool → llm → guard<br>群聊走一遍</h1>
     <p class="module-lead animate-in">
       顾问线 LangGraph 只有三个业务节点（加 START/END）：
-      <span class="term" data-definition="tool 节点 = 根据用户消息关键词匹配 Tool 名，调 run_tool 查库并落 agent_tool_call 留痕。">tool</span>
-      → llm → guard。比客户 14 节点图短，但<strong>归属校验在 tool_service.run_tool 里</strong>，和客户线铁律口径一致。
+      <span class="term" data-definition="tool 节点 = 根据用户消息关键词匹配 Tool 名，调 对话 Tool 编排（tool_service.py）run_tool 查库并落 agent_tool_call 留痕。">tool</span>
+      → llm → guard。比客户 14 节点图短，但<strong>归属校验在 对话 Tool 编排（tool_service.py）run_tool 里</strong>，和客户线铁律口径一致。
     </p>
 
     <div class="screen animate-in">
@@ -138,7 +139,7 @@
       <div class="pattern-cards">
         <div class="pattern-card">
           <h3>tool_node</h3>
-          <p><code>match_intent("advisor", message)</code> 命中关键词 → <code>run_tool</code> 查 Core / 知识库 → 结果写入 <code>tool_results</code>。</p>
+          <p><code>match_intent("advisor", message)</code> 命中关键词 → 对话 Tool 编排（<code>tool_service.py</code>）<code>run_tool</code> 查 Core / 知识库 → 结果写入 <code>tool_results</code>。</p>
         </div>
         <div class="pattern-card">
           <h3>llm_node</h3>
@@ -153,7 +154,7 @@
 
     <div class="screen animate-in">
       <h2>群聊：理财师问「客户 CUST-9527 持仓如何」</h2>
-      <p>简化播放 tool → llm → guard 全链路（前面 chat.py 已验 JWT + G-01）。</p>
+      <p>简化播放 tool → llm → guard 全链路（前面 四 Agent 对话 HTTP 入口（chat.py）已验 JWT + G-01）。</p>
 
       <div class="chat-window" id="chat-advisor-m2">
         <div class="chat-messages">
@@ -167,7 +168,7 @@
           <div class="chat-message" data-msg="1" data-sender="chat" style="display:none">
             <div class="chat-avatar" style="background:#B8922F">API</div>
             <div class="chat-bubble">
-              <span class="chat-sender" style="color:#B8922F">chat.py</span>
+              <span class="chat-sender" style="color:#B8922F">四 Agent 对话 HTTP 入口（chat.py）</span>
               <p>验 JWT → assert_customer_access（G-01：名下客户）→ 建/续 session</p>
             </div>
           </div>
@@ -175,7 +176,7 @@
             <div class="chat-avatar" style="background:#E0C06A">Tool</div>
             <div class="chat-bubble">
               <span class="chat-sender" style="color:#E0C06A">tool_node</span>
-              <p>关键词「持仓」→ <code>query_holdings</code> → tool_service.run_tool</p>
+              <p>关键词「持仓」→ <code>query_holdings</code> → 对话 Tool 编排（tool_service.py）run_tool</p>
             </div>
           </div>
           <div class="chat-message" data-msg="3" data-sender="core" style="display:none">
@@ -223,7 +224,7 @@
     <div class="screen animate-in">
       <div class="translation-block">
         <div class="translation-code">
-          <span class="translation-label">CODE · agent_service.tool_node</span>
+          <span class="translation-label">CODE · 顾问通用 tool→llm→guard 编排（agent_service.py）tool_node</span>
           <pre><code><span class="code-line">tool_name = tool_service.match_intent(</span>
 <span class="code-line">    state[<span class="code-string">"agent_type"</span>], state[<span class="code-string">"user_message"</span>]</span>
 <span class="code-line">)</span>
@@ -238,8 +239,8 @@
           <span class="translation-label">白话</span>
           <div class="translation-lines">
             <p class="tl">先靠关键词判断要不要查库；闲聊不命中就 tool_results 为空，LLM 纯聊。</p>
-            <p class="tl">customer_id 来自会话绑定（chat.py 归属校验后的值），不是 LLM 生成的。</p>
-            <p class="tl">query_holdings 和 customer 线共用 core_tools 定义，但跑在 agent_service 图里。</p>
+            <p class="tl">customer_id 来自会话绑定（四 Agent 对话 HTTP 入口（chat.py）归属校验后的值），不是 LLM 生成的。</p>
+            <p class="tl">query_holdings 和 customer 线共用 Core 只读 Tool 定义（core_tools.py）定义，但跑在 顾问通用 tool→llm→guard 编排（agent_service.py）图里。</p>
           </div>
         </div>
       </div>
@@ -276,7 +277,7 @@
     <p class="module-lead animate-in">
       理财师能查谁的数据，由
       <span class="term" data-definition="G-01 = 平台客户数据归属规则：customer 只能本人；advisor 只能名下 active 客户；risk_officer 全量只读。">G-01 归属校验</span>
-      决定。API 层越权抛 403；对话 Tool 层拒绝则落 <code>blocked</code> 行留痕，不抛异常挡整条链路。
+      决定。API 层越权抛 403；对话 Tool 层（对话 Tool 编排（tool_service.py））拒绝则落 <code>blocked</code> 行留痕，不抛异常挡整条链路。
     </p>
 
     <div class="screen animate-in">
@@ -284,8 +285,8 @@
       <table style="width:100%; border-collapse:collapse; margin: 1.5rem 0; font-size: 0.95rem;">
         <thead><tr><th>层级</th><th>位置</th><th>拒绝时</th></tr></thead>
         <tbody>
-          <tr><td>API（chat.py）</td><td><code>assert_customer_access</code></td><td>HTTP 403 + 鉴权审计</td></tr>
-          <tr><td>Tool（tool_service）</td><td><code>run_tool</code> 内归属检查</td><td><code>status='blocked'</code> + agent_tool_call 留痕</td></tr>
+          <tr><td>API（四 Agent 对话 HTTP 入口（chat.py））</td><td><code>assert_customer_access</code></td><td>HTTP 403 + 鉴权审计</td></tr>
+          <tr><td>Tool（对话 Tool 编排（tool_service.py））</td><td><code>run_tool</code> 内归属检查</td><td><code>status='blocked'</code> + agent_tool_call 留痕</td></tr>
         </tbody>
       </table>
       <div class="callout callout-accent">
@@ -296,16 +297,16 @@
     <div class="screen animate-in">
       <div class="translation-block">
         <div class="translation-code">
-          <span class="translation-label">CODE · tool_service.run_tool（节选）</span>
+          <span class="translation-label">CODE · 对话 Tool 编排（tool_service.py）run_tool（节选）</span>
           <pre><code><span class="code-line"><span class="code-keyword">def</span> run_tool(</span>
 <span class="code-line">    tool_name, agent_type, actor, customer_id,</span>
 <span class="code-line">    tool_input, session_id, trace_id=<span class="code-keyword">None</span></span>
 <span class="code-line">) -> dict:</span>
-<span class="code-line">    <span class="code-comment"># 1. 归属校验（对齐 deps.assert_customer_access）</span></span>
+<span class="code-line">    <span class="code-comment"># 1. 归属校验（对齐 模块鉴权工厂（deps.py）assert_customer_access）</span></span>
 <span class="code-line">    denial = _check_access(agent_type, actor, customer_id)</span>
 <span class="code-line">    <span class="code-keyword">if</span> denial:</span>
 <span class="code-line">        <span class="code-keyword">return</span> _blocked_record(denial, ...)</span>
-<span class="code-line">    <span class="code-comment"># 2. 执行 core_tools.func</span></span>
+<span class="code-line">    <span class="code-comment"># 2. 执行 Core 只读 Tool 定义（core_tools.py）func</span></span>
 <span class="code-line">    data = spec[<span class="code-string">"func"</span>](customer_id, ...)</span>
 <span class="code-line">    <span class="code-comment"># 3. agent_tool_call 落库（失败降级 warning）</span></span>
 <span class="code-line">    _persist_tool_call(status=<span class="code-string">"success"</span>, ...)</span></code></pre>
@@ -315,7 +316,7 @@
           <div class="translation-lines">
             <p class="tl">run_tool 是顾问线查数据的唯一编排入口：先验你有没有资格看这个 customer_id。</p>
             <p class="tl">blocked 不是 403——对话里会呈现「查询被拒绝」，同时 MySQL 留一行 tool 调用记录。</p>
-            <p class="tl">customer_id 参数由 chat.py 会话注入；Tool 不信 LLM 或用户消息里随便写的客户号。</p>
+            <p class="tl">customer_id 参数由 四 Agent 对话 HTTP 入口（chat.py）会话注入；Tool 不信 LLM 或用户消息里随便写的客户号。</p>
           </div>
         </div>
       </div>
@@ -325,21 +326,21 @@
       <h2>相关文件</h2>
       <div class="file-tree animate-in">
         <div class="tree-item tree-folder">app/api/</div>
-        <div class="tree-item tree-indent">deps.py — assert_customer_access（G-01 权威口径）</div>
-        <div class="tree-item tree-indent">chat.py — 会话绑定 customer_id + 入口归属</div>
+        <div class="tree-item tree-indent">模块鉴权工厂（deps.py）模块鉴权工厂 — app/api/deps.py · assert_customer_access（G-01 权威口径）</div>
+        <div class="tree-item tree-indent">四 Agent 对话 HTTP 入口（chat.py）四 Agent 对话 HTTP 入口 — app/api/chat.py · 会话绑定 customer_id + 入口归属</div>
         <div class="tree-item tree-folder">app/service/</div>
-        <div class="tree-item tree-indent">tool_service.py — match_intent + run_tool</div>
-        <div class="tree-item tree-indent">agent_service.py — tool_node 调用 run_tool</div>
+        <div class="tree-item tree-indent">对话 Tool 编排（tool_service.py）Tool 编排 — match_intent + run_tool</div>
+        <div class="tree-item tree-indent">顾问通用 tool→llm→guard 编排（agent_service.py）顾问通用 tool→llm→guard 编排 — tool_node 调用 run_tool</div>
         <div class="tree-item tree-folder">app/tool/</div>
-        <div class="tree-item tree-indent">core_tools.py — query_holdings 等只读 Tool 定义</div>
+        <div class="tree-item tree-indent">Core 只读 Tool 定义（core_tools.py）Core 只读 Tool 定义 — query_holdings 等</div>
       </div>
 
       <div class="quiz-container" id="quiz-advisor-m3">
         <div class="quiz-question-block"
              data-correct="option-b"
              data-explanation-right="对。Tool 层归属拒绝落 agent_tool_call status=blocked，对话继续；API 层才抛 403。"
-             data-explanation-wrong="run_tool 的 blocked 是留痕位，不是 HTTP 403；和 deps 抛异常是两层。">
-          <h3 class="quiz-question">理财师在对话里查非名下客户，tool_service 会怎么做？</h3>
+             data-explanation-wrong="run_tool 的 blocked 是留痕位，不是 HTTP 403；和 模块鉴权工厂（deps.py）抛异常是两层。">
+          <h3 class="quiz-question">理财师在对话里查非名下客户，对话 Tool 编排（tool_service.py）会怎么做？</h3>
           <div class="quiz-options">
             <button class="quiz-option" data-value="option-a" onclick="selectOption(this)">
               <div class="quiz-option-radio"></div><span>抛 PermissionDenied 整请求 403</span>
@@ -358,6 +359,123 @@
       </div>
     </div>
   </div>
+</section>
+<section class="module" id="module-4">
+  <div class="module-inner">
+    <p class="eyebrow animate-in">模块 4 · 未做与误区</p>
+    <h1 class="module-title animate-in">T-20 还没做<br>Neo4j 也不是对话 Tool</h1>
+    <p class="module-lead animate-in">
+      顾问线 chat 骨架已通，但<strong>草稿复核工作台、合规巡检、Neo4j 实时查询</strong>都还没进对话链路。
+      课程中心卡片写 Neo4j，容易让 AI 去改不存在的 Cypher 节点——这模块专门纠偏。
+    </p>
+
+    <div class="screen animate-in">
+      <h2>T-20 未实现清单（2026-09 快照）</h2>
+      <div class="pattern-cards">
+        <div class="pattern-card">
+          <h3>A-03 话术草稿</h3>
+          <p>无 <code>advisor_draft</code> 表流程 · 无复核 UI · prompt 里「草稿不外发」≠ 有工作台。</p>
+        </div>
+        <div class="pattern-card">
+          <h3>A-05 合规巡检</h3>
+          <p>合规专员抽检全量顾问会话 — 无前端/API。</p>
+        </div>
+        <div class="pattern-card">
+          <h3>A-06 跟进日志</h3>
+          <p>确认后回写 L2 — 对话线未入库跟进草稿。</p>
+        </div>
+        <div class="pattern-card">
+          <h3>已有</h3>
+          <p>顾问通用 tool→llm→guard 编排（<code>agent_service.py</code>）tool→llm→guard · G-01 归属 · <code>search_knowledge</code>（kb_product_rules）。</p>
+        </div>
+      </div>
+      <div class="callout callout-accent">
+        <strong>prompt 禁外发 ≠ 系统禁外发：</strong> 代码里没有「发给客户」API，但也没有强制 <code>review_status</code> 门禁——上线前必须补 T-20。
+      </div>
+    </div>
+
+    <div class="screen animate-in">
+      <h2>Neo4j：同步脚本，不是 LangGraph 节点</h2>
+      <div class="translation-block">
+        <div class="translation-code">
+          <span class="translation-label">实际存在 · Neo4j 关系图离线同步（sync_neo4j.py）/ 顾问归属离线同步（sync_advisor_rel.py）离线同步脚本</span>
+          <pre><code><span class="code-line">python scripts/sync/sync_neo4j.py</span>
+<span class="code-line">python scripts/sync/sync_advisor_rel.py</span>
+<span class="code-line"><span class="code-comment"># Neo4j 关系图离线同步（sync_neo4j.py）/ 顾问归属离线同步（sync_advisor_rel.py）离线同步脚本</span></span></code></pre>
+        </div>
+        <div class="translation-english">
+          <span class="translation-label">白话</span>
+          <div class="translation-lines">
+            <p class="tl">顾问对话<strong>不</strong>在运行时发 Cypher；名下客户靠 G-01 + Core 只读 Tool（<code>core_ro_tool.py</code>）。</p>
+            <p class="tl">指挥 AI「加 Neo4j Tool 查客户关系」= 新需求，不是修现有 bug。</p>
+            <p class="tl">Neo4j 数据来自 Neo4j 关系图离线同步（sync_neo4j.py）/ 顾问归属离线同步（sync_advisor_rel.py）batch sync，和 Chat 会话无实时联动。</p>
+          </div>
+        </div>
+      </div>
+    </div>
+
+    <div class="screen animate-in">
+      <h2>群聊：顾问想「一键发给客户」</h2>
+      <div class="chat-window" id="chat-advisor-m4">
+        <div class="chat-messages">
+          <div class="chat-message" data-msg="0" data-sender="adv" style="display:none">
+            <div class="chat-avatar" style="background:#8B6B4A">顾</div>
+            <div class="chat-bubble">
+              <span class="chat-sender" style="color:#8B6B4A">理财师</span>
+              <p>帮客户写一段持仓说明，我要发微信</p>
+            </div>
+          </div>
+          <div class="chat-message" data-msg="1" data-sender="llm" style="display:none">
+            <div class="chat-avatar" style="background:#6B5B4A">AI</div>
+            <div class="chat-bubble">
+              <span class="chat-sender" style="color:#6B5B4A">顾问通用 tool→llm→guard 编排（agent_service.py）</span>
+              <p>生成草稿文本（引用 fact_text）· 系统<strong>无</strong>外发通道</p>
+            </div>
+          </div>
+          <div class="chat-message" data-msg="2" data-sender="you" style="display:none">
+            <div class="chat-avatar" style="background:#2A7B9B">你</div>
+            <div class="chat-bubble">
+              <span class="chat-sender" style="color:#2A7B9B">正确指挥</span>
+              <p>先补 T-20 草稿表 + review_status，不要加 POST /send-to-customer</p>
+            </div>
+          </div>
+        </div>
+        <div class="chat-typing" id="chat-advisor-m4-typing" style="display:none">
+          <div class="chat-avatar" id="chat-advisor-m4-typing-avatar">…</div>
+          <div class="chat-typing-dots"><span class="typing-dot"></span><span class="typing-dot"></span><span class="typing-dot"></span></div>
+        </div>
+        <div class="chat-controls">
+          <button class="btn chat-next-btn">下一条</button>
+          <button class="btn chat-all-btn">全部播放</button>
+          <button class="btn chat-reset-btn">重播</button>
+          <span class="chat-progress"></span>
+        </div>
+      </div>
+
+      <div class="quiz-container" id="quiz-advisor-m4">
+        <div class="quiz-question-block"
+             data-correct="option-c"
+             data-explanation-right="对。Neo4j 是 Neo4j 关系图离线同步（sync_neo4j.py）/ 顾问归属离线同步（sync_advisor_rel.py）离线灌图；顾问 runtime 走 core_ro + G-01，不是 Cypher Tool。"
+             data-explanation-wrong="Neo4j 不在 顾问通用 tool→llm→guard 编排（agent_service.py）LangGraph 里，别按课程卡片字面去加 Cypher 节点。">
+          <h3 class="quiz-question">顾问 Chat 查「我名下有哪些客户」，代码走哪？</h3>
+          <div class="quiz-options">
+            <button class="quiz-option" data-value="option-a" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>Neo4j Cypher Tool</span>
+            </button>
+            <button class="quiz-option" data-value="option-b" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>POST /api/chat/visitor</span>
+            </button>
+            <button class="quiz-option" data-value="option-c" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>顾问通用编排（agent_service.py）+ Core 只读 Tool（core_ro_tool.py）+ G-01 归属</span>
+            </button>
+          </div>
+          <div class="quiz-feedback"></div>
+        </div>
+        <button class="quiz-check-btn" onclick="checkQuiz('quiz-advisor-m4')">检查答案</button>
+        <button class="quiz-reset-btn" onclick="resetQuiz('quiz-advisor-m4')">重做</button>
+      </div>
+    </div>
+  </div>
 </section>
   </main>
 
diff --git a/docs/course/jinrong-module-advisor/main.js b/docs/course/jinrong-module-advisor/main.js
index 7150a69..410548e 100644
--- a/docs/course/jinrong-module-advisor/main.js
+++ b/docs/course/jinrong-module-advisor/main.js
@@ -486,13 +486,17 @@
 
   /* ── LAYER TOGGLE ──────────────────────────────────────────── */
   window.showLayer = function (layerId, btn) {
-    const demo = btn ? btn.closest('.layer-demo') : null;
+    const tab = btn || (window.event && window.event.currentTarget);
+    if (!tab || !tab.closest) return;
+    const demo = tab.closest('.layer-demo');
     if (!demo) return;
-    $$('.layer', demo).forEach(l => l.style.display = 'none');
+    $$('.layer', demo).forEach(l => { l.style.display = 'none'; });
     $$('.layer-tab', demo).forEach(t => t.classList.remove('active'));
-    const layer = $('#' + layerId);
+    const esc = typeof CSS !== 'undefined' && CSS.escape ? CSS.escape(layerId) : layerId.replace(/[^\w-]/g, '');
+    let layer = demo.querySelector('#' + esc);
+    if (!layer) layer = demo.querySelector('#layer-' + esc);
     if (layer) layer.style.display = 'block';
-    btn.classList.add('active');
+    tab.classList.add('active');
   };
 
 })();
diff --git a/docs/course/jinrong-module-advisor/modules/01-scenario.html b/docs/course/jinrong-module-advisor/modules/01-scenario.html
index e3aee8c..e0bfdf3 100644
--- a/docs/course/jinrong-module-advisor/modules/01-scenario.html
+++ b/docs/course/jinrong-module-advisor/modules/01-scenario.html
@@ -13,7 +13,7 @@
       <div class="pattern-cards">
         <div class="pattern-card">
           <h3>编排入口</h3>
-          <p>走 <code>agent_service.py</code> 通用 LangGraph（tool → llm → guard），<strong>不是</strong> <code>customer_service</code> 14 节点图。</p>
+          <p>走 顾问通用 tool→llm→guard 编排（<code>agent_service.py</code>）顾问通用 tool→llm→guard 编排，<strong>不是</strong> 登录客户 14 节点编排（<code>customer_service.py</code>）登录客户 14 节点编排。</p>
         </div>
         <div class="pattern-card">
           <h3>客户范围</h3>
@@ -62,15 +62,15 @@
       <div class="quiz-container" id="quiz-advisor-m1">
         <div class="quiz-question-block"
              data-correct="option-b"
-             data-explanation-right="对。advisor 走 agent_service 的 tool→llm→guard；customer 才走 customer_service 14 节点。"
-             data-explanation-wrong="理财师线和客户线是 chat.py 里两个 if 分支，编排文件不同。">
+             data-explanation-right="对。advisor 走 顾问通用 tool→llm→guard 编排（agent_service.py）的 tool→llm→guard；customer 才走 登录客户 14 节点编排（customer_service.py）14 节点。"
+             data-explanation-wrong="理财师线和客户线是 四 Agent 对话 HTTP 入口（chat.py）里两个 if 分支，编排文件不同。">
           <h3 class="quiz-question">理财师打开「代理人助手」对话，编排跑在哪？</h3>
           <div class="quiz-options">
             <button class="quiz-option" data-value="option-a" onclick="selectOption(this)">
-              <div class="quiz-option-radio"></div><span>customer_service.py</span>
+              <div class="quiz-option-radio"></div><span>登录客户 14 节点编排（customer_service.py）</span>
             </button>
             <button class="quiz-option" data-value="option-b" onclick="selectOption(this)">
-              <div class="quiz-option-radio"></div><span>agent_service.py</span>
+              <div class="quiz-option-radio"></div><span>顾问通用 tool→llm→guard 编排（agent_service.py）</span>
             </button>
             <button class="quiz-option" data-value="option-c" onclick="selectOption(this)">
               <div class="quiz-option-radio"></div><span>analyst_agent 问数</span>
diff --git a/docs/course/jinrong-module-advisor/modules/02-agent-flow.html b/docs/course/jinrong-module-advisor/modules/02-agent-flow.html
index ad00500..301ec98 100644
--- a/docs/course/jinrong-module-advisor/modules/02-agent-flow.html
+++ b/docs/course/jinrong-module-advisor/modules/02-agent-flow.html
@@ -4,8 +4,8 @@
     <h1 class="module-title animate-in">tool → llm → guard<br>群聊走一遍</h1>
     <p class="module-lead animate-in">
       顾问线 LangGraph 只有三个业务节点（加 START/END）：
-      <span class="term" data-definition="tool 节点 = 根据用户消息关键词匹配 Tool 名，调 run_tool 查库并落 agent_tool_call 留痕。">tool</span>
-      → llm → guard。比客户 14 节点图短，但<strong>归属校验在 tool_service.run_tool 里</strong>，和客户线铁律口径一致。
+      <span class="term" data-definition="tool 节点 = 根据用户消息关键词匹配 Tool 名，调 对话 Tool 编排（tool_service.py）run_tool 查库并落 agent_tool_call 留痕。">tool</span>
+      → llm → guard。比客户 14 节点图短，但<strong>归属校验在 对话 Tool 编排（tool_service.py）run_tool 里</strong>，和客户线铁律口径一致。
     </p>
 
     <div class="screen animate-in">
@@ -13,7 +13,7 @@
       <div class="pattern-cards">
         <div class="pattern-card">
           <h3>tool_node</h3>
-          <p><code>match_intent("advisor", message)</code> 命中关键词 → <code>run_tool</code> 查 Core / 知识库 → 结果写入 <code>tool_results</code>。</p>
+          <p><code>match_intent("advisor", message)</code> 命中关键词 → 对话 Tool 编排（<code>tool_service.py</code>）<code>run_tool</code> 查 Core / 知识库 → 结果写入 <code>tool_results</code>。</p>
         </div>
         <div class="pattern-card">
           <h3>llm_node</h3>
@@ -28,7 +28,7 @@
 
     <div class="screen animate-in">
       <h2>群聊：理财师问「客户 CUST-9527 持仓如何」</h2>
-      <p>简化播放 tool → llm → guard 全链路（前面 chat.py 已验 JWT + G-01）。</p>
+      <p>简化播放 tool → llm → guard 全链路（前面 四 Agent 对话 HTTP 入口（chat.py）已验 JWT + G-01）。</p>
 
       <div class="chat-window" id="chat-advisor-m2">
         <div class="chat-messages">
@@ -42,7 +42,7 @@
           <div class="chat-message" data-msg="1" data-sender="chat" style="display:none">
             <div class="chat-avatar" style="background:#B8922F">API</div>
             <div class="chat-bubble">
-              <span class="chat-sender" style="color:#B8922F">chat.py</span>
+              <span class="chat-sender" style="color:#B8922F">四 Agent 对话 HTTP 入口（chat.py）</span>
               <p>验 JWT → assert_customer_access（G-01：名下客户）→ 建/续 session</p>
             </div>
           </div>
@@ -50,7 +50,7 @@
             <div class="chat-avatar" style="background:#E0C06A">Tool</div>
             <div class="chat-bubble">
               <span class="chat-sender" style="color:#E0C06A">tool_node</span>
-              <p>关键词「持仓」→ <code>query_holdings</code> → tool_service.run_tool</p>
+              <p>关键词「持仓」→ <code>query_holdings</code> → 对话 Tool 编排（tool_service.py）run_tool</p>
             </div>
           </div>
           <div class="chat-message" data-msg="3" data-sender="core" style="display:none">
@@ -98,7 +98,7 @@
     <div class="screen animate-in">
       <div class="translation-block">
         <div class="translation-code">
-          <span class="translation-label">CODE · agent_service.tool_node</span>
+          <span class="translation-label">CODE · 顾问通用 tool→llm→guard 编排（agent_service.py）tool_node</span>
           <pre><code><span class="code-line">tool_name = tool_service.match_intent(</span>
 <span class="code-line">    state[<span class="code-string">"agent_type"</span>], state[<span class="code-string">"user_message"</span>]</span>
 <span class="code-line">)</span>
@@ -113,8 +113,8 @@
           <span class="translation-label">白话</span>
           <div class="translation-lines">
             <p class="tl">先靠关键词判断要不要查库；闲聊不命中就 tool_results 为空，LLM 纯聊。</p>
-            <p class="tl">customer_id 来自会话绑定（chat.py 归属校验后的值），不是 LLM 生成的。</p>
-            <p class="tl">query_holdings 和 customer 线共用 core_tools 定义，但跑在 agent_service 图里。</p>
+            <p class="tl">customer_id 来自会话绑定（四 Agent 对话 HTTP 入口（chat.py）归属校验后的值），不是 LLM 生成的。</p>
+            <p class="tl">query_holdings 和 customer 线共用 Core 只读 Tool 定义（core_tools.py）定义，但跑在 顾问通用 tool→llm→guard 编排（agent_service.py）图里。</p>
           </div>
         </div>
       </div>
diff --git a/docs/course/jinrong-module-advisor/modules/03-ownership.html b/docs/course/jinrong-module-advisor/modules/03-ownership.html
index 251df13..47d4d96 100644
--- a/docs/course/jinrong-module-advisor/modules/03-ownership.html
+++ b/docs/course/jinrong-module-advisor/modules/03-ownership.html
@@ -5,7 +5,7 @@
     <p class="module-lead animate-in">
       理财师能查谁的数据，由
       <span class="term" data-definition="G-01 = 平台客户数据归属规则：customer 只能本人；advisor 只能名下 active 客户；risk_officer 全量只读。">G-01 归属校验</span>
-      决定。API 层越权抛 403；对话 Tool 层拒绝则落 <code>blocked</code> 行留痕，不抛异常挡整条链路。
+      决定。API 层越权抛 403；对话 Tool 层（对话 Tool 编排（tool_service.py））拒绝则落 <code>blocked</code> 行留痕，不抛异常挡整条链路。
     </p>
 
     <div class="screen animate-in">
@@ -13,8 +13,8 @@
       <table style="width:100%; border-collapse:collapse; margin: 1.5rem 0; font-size: 0.95rem;">
         <thead><tr><th>层级</th><th>位置</th><th>拒绝时</th></tr></thead>
         <tbody>
-          <tr><td>API（chat.py）</td><td><code>assert_customer_access</code></td><td>HTTP 403 + 鉴权审计</td></tr>
-          <tr><td>Tool（tool_service）</td><td><code>run_tool</code> 内归属检查</td><td><code>status='blocked'</code> + agent_tool_call 留痕</td></tr>
+          <tr><td>API（四 Agent 对话 HTTP 入口（chat.py））</td><td><code>assert_customer_access</code></td><td>HTTP 403 + 鉴权审计</td></tr>
+          <tr><td>Tool（对话 Tool 编排（tool_service.py））</td><td><code>run_tool</code> 内归属检查</td><td><code>status='blocked'</code> + agent_tool_call 留痕</td></tr>
         </tbody>
       </table>
       <div class="callout callout-accent">
@@ -25,16 +25,16 @@
     <div class="screen animate-in">
       <div class="translation-block">
         <div class="translation-code">
-          <span class="translation-label">CODE · tool_service.run_tool（节选）</span>
+          <span class="translation-label">CODE · 对话 Tool 编排（tool_service.py）run_tool（节选）</span>
           <pre><code><span class="code-line"><span class="code-keyword">def</span> run_tool(</span>
 <span class="code-line">    tool_name, agent_type, actor, customer_id,</span>
 <span class="code-line">    tool_input, session_id, trace_id=<span class="code-keyword">None</span></span>
 <span class="code-line">) -> dict:</span>
-<span class="code-line">    <span class="code-comment"># 1. 归属校验（对齐 deps.assert_customer_access）</span></span>
+<span class="code-line">    <span class="code-comment"># 1. 归属校验（对齐 模块鉴权工厂（deps.py）assert_customer_access）</span></span>
 <span class="code-line">    denial = _check_access(agent_type, actor, customer_id)</span>
 <span class="code-line">    <span class="code-keyword">if</span> denial:</span>
 <span class="code-line">        <span class="code-keyword">return</span> _blocked_record(denial, ...)</span>
-<span class="code-line">    <span class="code-comment"># 2. 执行 core_tools.func</span></span>
+<span class="code-line">    <span class="code-comment"># 2. 执行 Core 只读 Tool 定义（core_tools.py）func</span></span>
 <span class="code-line">    data = spec[<span class="code-string">"func"</span>](customer_id, ...)</span>
 <span class="code-line">    <span class="code-comment"># 3. agent_tool_call 落库（失败降级 warning）</span></span>
 <span class="code-line">    _persist_tool_call(status=<span class="code-string">"success"</span>, ...)</span></code></pre>
@@ -44,7 +44,7 @@
           <div class="translation-lines">
             <p class="tl">run_tool 是顾问线查数据的唯一编排入口：先验你有没有资格看这个 customer_id。</p>
             <p class="tl">blocked 不是 403——对话里会呈现「查询被拒绝」，同时 MySQL 留一行 tool 调用记录。</p>
-            <p class="tl">customer_id 参数由 chat.py 会话注入；Tool 不信 LLM 或用户消息里随便写的客户号。</p>
+            <p class="tl">customer_id 参数由 四 Agent 对话 HTTP 入口（chat.py）会话注入；Tool 不信 LLM 或用户消息里随便写的客户号。</p>
           </div>
         </div>
       </div>
@@ -54,21 +54,21 @@
       <h2>相关文件</h2>
       <div class="file-tree animate-in">
         <div class="tree-item tree-folder">app/api/</div>
-        <div class="tree-item tree-indent">deps.py — assert_customer_access（G-01 权威口径）</div>
-        <div class="tree-item tree-indent">chat.py — 会话绑定 customer_id + 入口归属</div>
+        <div class="tree-item tree-indent">模块鉴权工厂（deps.py）模块鉴权工厂 — app/api/deps.py · assert_customer_access（G-01 权威口径）</div>
+        <div class="tree-item tree-indent">四 Agent 对话 HTTP 入口（chat.py）四 Agent 对话 HTTP 入口 — app/api/chat.py · 会话绑定 customer_id + 入口归属</div>
         <div class="tree-item tree-folder">app/service/</div>
-        <div class="tree-item tree-indent">tool_service.py — match_intent + run_tool</div>
-        <div class="tree-item tree-indent">agent_service.py — tool_node 调用 run_tool</div>
+        <div class="tree-item tree-indent">对话 Tool 编排（tool_service.py）Tool 编排 — match_intent + run_tool</div>
+        <div class="tree-item tree-indent">顾问通用 tool→llm→guard 编排（agent_service.py）顾问通用 tool→llm→guard 编排 — tool_node 调用 run_tool</div>
         <div class="tree-item tree-folder">app/tool/</div>
-        <div class="tree-item tree-indent">core_tools.py — query_holdings 等只读 Tool 定义</div>
+        <div class="tree-item tree-indent">Core 只读 Tool 定义（core_tools.py）Core 只读 Tool 定义 — query_holdings 等</div>
       </div>
 
       <div class="quiz-container" id="quiz-advisor-m3">
         <div class="quiz-question-block"
              data-correct="option-b"
              data-explanation-right="对。Tool 层归属拒绝落 agent_tool_call status=blocked，对话继续；API 层才抛 403。"
-             data-explanation-wrong="run_tool 的 blocked 是留痕位，不是 HTTP 403；和 deps 抛异常是两层。">
-          <h3 class="quiz-question">理财师在对话里查非名下客户，tool_service 会怎么做？</h3>
+             data-explanation-wrong="run_tool 的 blocked 是留痕位，不是 HTTP 403；和 模块鉴权工厂（deps.py）抛异常是两层。">
+          <h3 class="quiz-question">理财师在对话里查非名下客户，对话 Tool 编排（tool_service.py）会怎么做？</h3>
           <div class="quiz-options">
             <button class="quiz-option" data-value="option-a" onclick="selectOption(this)">
               <div class="quiz-option-radio"></div><span>抛 PermissionDenied 整请求 403</span>
diff --git a/docs/course/jinrong-module-advisor/modules/04-not-done.html b/docs/course/jinrong-module-advisor/modules/04-not-done.html
new file mode 100644
index 0000000..62dd2d6
--- /dev/null
+++ b/docs/course/jinrong-module-advisor/modules/04-not-done.html
@@ -0,0 +1,117 @@
+<section class="module" id="module-4">
+  <div class="module-inner">
+    <p class="eyebrow animate-in">模块 4 · 未做与误区</p>
+    <h1 class="module-title animate-in">T-20 还没做<br>Neo4j 也不是对话 Tool</h1>
+    <p class="module-lead animate-in">
+      顾问线 chat 骨架已通，但<strong>草稿复核工作台、合规巡检、Neo4j 实时查询</strong>都还没进对话链路。
+      课程中心卡片写 Neo4j，容易让 AI 去改不存在的 Cypher 节点——这模块专门纠偏。
+    </p>
+
+    <div class="screen animate-in">
+      <h2>T-20 未实现清单（2026-09 快照）</h2>
+      <div class="pattern-cards">
+        <div class="pattern-card">
+          <h3>A-03 话术草稿</h3>
+          <p>无 <code>advisor_draft</code> 表流程 · 无复核 UI · prompt 里「草稿不外发」≠ 有工作台。</p>
+        </div>
+        <div class="pattern-card">
+          <h3>A-05 合规巡检</h3>
+          <p>合规专员抽检全量顾问会话 — 无前端/API。</p>
+        </div>
+        <div class="pattern-card">
+          <h3>A-06 跟进日志</h3>
+          <p>确认后回写 L2 — 对话线未入库跟进草稿。</p>
+        </div>
+        <div class="pattern-card">
+          <h3>已有</h3>
+          <p>顾问通用 tool→llm→guard 编排（<code>agent_service.py</code>）tool→llm→guard · G-01 归属 · <code>search_knowledge</code>（kb_product_rules）。</p>
+        </div>
+      </div>
+      <div class="callout callout-accent">
+        <strong>prompt 禁外发 ≠ 系统禁外发：</strong> 代码里没有「发给客户」API，但也没有强制 <code>review_status</code> 门禁——上线前必须补 T-20。
+      </div>
+    </div>
+
+    <div class="screen animate-in">
+      <h2>Neo4j：同步脚本，不是 LangGraph 节点</h2>
+      <div class="translation-block">
+        <div class="translation-code">
+          <span class="translation-label">实际存在 · Neo4j 关系图离线同步（sync_neo4j.py）/ 顾问归属离线同步（sync_advisor_rel.py）离线同步脚本</span>
+          <pre><code><span class="code-line">python scripts/sync/sync_neo4j.py</span>
+<span class="code-line">python scripts/sync/sync_advisor_rel.py</span>
+<span class="code-line"><span class="code-comment"># Neo4j 关系图离线同步（sync_neo4j.py）/ 顾问归属离线同步（sync_advisor_rel.py）离线同步脚本</span></span></code></pre>
+        </div>
+        <div class="translation-english">
+          <span class="translation-label">白话</span>
+          <div class="translation-lines">
+            <p class="tl">顾问对话<strong>不</strong>在运行时发 Cypher；名下客户靠 G-01 + Core 只读 Tool（<code>core_ro_tool.py</code>）。</p>
+            <p class="tl">指挥 AI「加 Neo4j Tool 查客户关系」= 新需求，不是修现有 bug。</p>
+            <p class="tl">Neo4j 数据来自 Neo4j 关系图离线同步（sync_neo4j.py）/ 顾问归属离线同步（sync_advisor_rel.py）batch sync，和 Chat 会话无实时联动。</p>
+          </div>
+        </div>
+      </div>
+    </div>
+
+    <div class="screen animate-in">
+      <h2>群聊：顾问想「一键发给客户」</h2>
+      <div class="chat-window" id="chat-advisor-m4">
+        <div class="chat-messages">
+          <div class="chat-message" data-msg="0" data-sender="adv" style="display:none">
+            <div class="chat-avatar" style="background:#8B6B4A">顾</div>
+            <div class="chat-bubble">
+              <span class="chat-sender" style="color:#8B6B4A">理财师</span>
+              <p>帮客户写一段持仓说明，我要发微信</p>
+            </div>
+          </div>
+          <div class="chat-message" data-msg="1" data-sender="llm" style="display:none">
+            <div class="chat-avatar" style="background:#6B5B4A">AI</div>
+            <div class="chat-bubble">
+              <span class="chat-sender" style="color:#6B5B4A">顾问通用 tool→llm→guard 编排（agent_service.py）</span>
+              <p>生成草稿文本（引用 fact_text）· 系统<strong>无</strong>外发通道</p>
+            </div>
+          </div>
+          <div class="chat-message" data-msg="2" data-sender="you" style="display:none">
+            <div class="chat-avatar" style="background:#2A7B9B">你</div>
+            <div class="chat-bubble">
+              <span class="chat-sender" style="color:#2A7B9B">正确指挥</span>
+              <p>先补 T-20 草稿表 + review_status，不要加 POST /send-to-customer</p>
+            </div>
+          </div>
+        </div>
+        <div class="chat-typing" id="chat-advisor-m4-typing" style="display:none">
+          <div class="chat-avatar" id="chat-advisor-m4-typing-avatar">…</div>
+          <div class="chat-typing-dots"><span class="typing-dot"></span><span class="typing-dot"></span><span class="typing-dot"></span></div>
+        </div>
+        <div class="chat-controls">
+          <button class="btn chat-next-btn">下一条</button>
+          <button class="btn chat-all-btn">全部播放</button>
+          <button class="btn chat-reset-btn">重播</button>
+          <span class="chat-progress"></span>
+        </div>
+      </div>
+
+      <div class="quiz-container" id="quiz-advisor-m4">
+        <div class="quiz-question-block"
+             data-correct="option-c"
+             data-explanation-right="对。Neo4j 是 Neo4j 关系图离线同步（sync_neo4j.py）/ 顾问归属离线同步（sync_advisor_rel.py）离线灌图；顾问 runtime 走 core_ro + G-01，不是 Cypher Tool。"
+             data-explanation-wrong="Neo4j 不在 顾问通用 tool→llm→guard 编排（agent_service.py）LangGraph 里，别按课程卡片字面去加 Cypher 节点。">
+          <h3 class="quiz-question">顾问 Chat 查「我名下有哪些客户」，代码走哪？</h3>
+          <div class="quiz-options">
+            <button class="quiz-option" data-value="option-a" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>Neo4j Cypher Tool</span>
+            </button>
+            <button class="quiz-option" data-value="option-b" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>POST /api/chat/visitor</span>
+            </button>
+            <button class="quiz-option" data-value="option-c" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>顾问通用编排（agent_service.py）+ Core 只读 Tool（core_ro_tool.py）+ G-01 归属</span>
+            </button>
+          </div>
+          <div class="quiz-feedback"></div>
+        </div>
+        <button class="quiz-check-btn" onclick="checkQuiz('quiz-advisor-m4')">检查答案</button>
+        <button class="quiz-reset-btn" onclick="resetQuiz('quiz-advisor-m4')">重做</button>
+      </div>
+    </div>
+  </div>
+</section>
diff --git a/docs/course/jinrong-module-advisor/styles.css b/docs/course/jinrong-module-advisor/styles.css
index 544669c..68d0e39 100644
--- a/docs/course/jinrong-module-advisor/styles.css
+++ b/docs/course/jinrong-module-advisor/styles.css
@@ -254,7 +254,8 @@ pre::-webkit-scrollbar { display: none; }
   padding-top: calc(var(--nav-height) + var(--space-12));
 }
 
-.module-content {
+.module-content,
+.module-inner {
   max-width: var(--content-width);
   margin: 0 auto;
 }
diff --git a/docs/course/jinrong-module-analyst/_base.html b/docs/course/jinrong-module-analyst/_base.html
index 7f672f8..92db22f 100644
--- a/docs/course/jinrong-module-analyst/_base.html
+++ b/docs/course/jinrong-module-analyst/_base.html
@@ -32,6 +32,7 @@
         <button class="nav-dot" data-target="module-1" data-tooltip="问数入口" role="tab" aria-label="模块 1: 问数入口"></button>
         <button class="nav-dot" data-target="module-2" data-tooltip="NL→SQL" role="tab" aria-label="模块 2: NL→SQL"></button>
         <button class="nav-dot" data-target="module-3" data-tooltip="Agent 与页面" role="tab" aria-label="模块 3: Agent 与页面"></button>
+        <button class="nav-dot" data-target="module-4" data-tooltip="红线与排障" role="tab" aria-label="模块 4: 红线与排障"></button>
       </div>
     </div>
   </nav>
diff --git a/docs/course/jinrong-module-analyst/index.html b/docs/course/jinrong-module-analyst/index.html
index bb36a72..99a71ec 100644
--- a/docs/course/jinrong-module-analyst/index.html
+++ b/docs/course/jinrong-module-analyst/index.html
@@ -32,6 +32,7 @@
         <button class="nav-dot" data-target="module-1" data-tooltip="问数入口" role="tab" aria-label="模块 1: 问数入口"></button>
         <button class="nav-dot" data-target="module-2" data-tooltip="NL→SQL" role="tab" aria-label="模块 2: NL→SQL"></button>
         <button class="nav-dot" data-target="module-3" data-tooltip="Agent 与页面" role="tab" aria-label="模块 3: Agent 与页面"></button>
+        <button class="nav-dot" data-target="module-4" data-tooltip="红线与排障" role="tab" aria-label="模块 4: 红线与排障"></button>
       </div>
     </div>
   </nav>
@@ -62,18 +63,18 @@
         </div>
       </div>
       <div class="callout callout-accent">
-        <strong>指挥 AI 改功能时：</strong> 要表格和 SQL 就改 <code>analyst.py</code> / <code>analyst_agent.py</code>；
+        <strong>指挥 AI 改功能时：</strong> 要表格和 SQL 就改 问数 REST（<code>analyst.py</code>） / NL→SQL 编排（<code>analyst_agent.py</code>）；
         要聊天体验才碰 <code>analytics/chat</code> 占位页，别和问数混成一个接口。
       </div>
       <div class="callout callout-warning">
         <strong>customer self 域：</strong> 客户 token 进问数 → <code>domain=self</code>，
-        <code>sql_guard</code> 强制 SQL 带本人 <code>customer_id</code>；免责声明追加 <code>CUSTOMER_AI_RISK_NOTE</code>。
+        SQL 安全校验（<code>sql_guard.py</code>）强制 SQL 带本人 <code>customer_id</code>；免责声明追加 <code>CUSTOMER_AI_RISK_NOTE</code>。
       </div>
     </div>
 
     <div class="screen animate-in">
       <h2>后端「四件套」路由</h2>
-      <p>全部挂在 <code>app/api/analyst.py</code>，前缀 <code>/api/analyst</code>：</p>
+      <p>全部挂在 问数 REST（<code>app/api/analyst.py</code>），前缀 <code>/api/analyst</code>：</p>
       <div class="file-tree animate-in">
         <div class="tree-item tree-folder">POST /chat</div>
         <div class="tree-item tree-indent">问数主入口 → AnalystAgent.run()</div>
@@ -102,7 +103,7 @@
           <div class="chat-message" data-msg="1" data-sender="api" style="display:none">
             <div class="chat-avatar" style="background:#5A9DB8">API</div>
             <div class="chat-bubble">
-              <span class="chat-sender" style="color:#5A9DB8">analyst.py</span>
+              <span class="chat-sender" style="color:#5A9DB8">问数 REST（analyst.py）</span>
               <p>get_platform_auth_context → analyst_auth_from_deps</p>
             </div>
           </div>
@@ -110,7 +111,7 @@
             <div class="chat-avatar" style="background:#1F6280">Agent</div>
             <div class="chat-bubble">
               <span class="chat-sender" style="color:#1F6280">AnalystAgent</span>
-              <p>消歧 → 生成 SQL → sql_guard → 执行 → 解读</p>
+              <p>消歧 → 生成 SQL → SQL 安全校验（sql_guard.py） → 执行 → 解读</p>
             </div>
           </div>
           <div class="chat-message" data-msg="3" data-sender="browser" style="display:none">
@@ -183,7 +184,7 @@
     <p class="eyebrow animate-in">模块 2 · NL→SQL 管线</p>
     <h1 class="module-title animate-in">一句话怎么变成<br>可审计的表格？</h1>
     <p class="module-lead animate-in">
-      <code>app/service/analyst_agent.py</code> 把用户问题拆成可测试步骤。
+      NL→SQL 编排（<code>app/service/analyst_agent.py</code>）把用户问题拆成可测试步骤。
       像<strong>翻译官 + 安检 + 记账员</strong>：先弄清指标含义，再生成 SQL，层层校验后才执行，最后解读并留痕。
     </p>
 
@@ -194,7 +195,7 @@
       <div class="flow-animation" data-steps='[
         {"highlight":"flow-actor-1","label":"① 消歧：口径字典命中多义指标 → 返回 suggestions 让用户选"},
         {"highlight":"flow-actor-2","label":"② 生成 SQL：DeepSeek + SCHEMA_PROMPT + 权限域提示","packet":true,"from":"1","to":"2"},
-        {"highlight":"flow-actor-3","label":"③ sql_guard 五层校验：只读 / 表白名单 / 行级归属…","packet":true,"from":"2","to":"3"},
+        {"highlight":"flow-actor-3","label":"③ SQL 安全校验（sql_guard.py）五层校验：只读 / 表白名单 / 行级归属…","packet":true,"from":"2","to":"3"},
         {"highlight":"flow-actor-4","label":"④ 执行：AnalyticsRepo 只读查询（Redis 缓存可命中）","packet":true,"from":"3","to":"4"},
         {"highlight":"flow-actor-5","label":"⑤ guardrail：解读数字必须与表格一致，不过则降级","packet":true,"from":"4","to":"5"},
         {"highlight":"flow-actor-1","label":"⑥ 留痕：analytics_query_log 写入 SQL/耗时/护栏结果","packet":true,"from":"5","to":"1"}
@@ -202,7 +203,7 @@
         <div class="flow-actors">
           <div class="flow-actor" id="flow-actor-1"><span class="flow-actor-icon">📖</span><span>消歧 dict</span></div>
           <div class="flow-actor" id="flow-actor-2"><span class="flow-actor-icon">🤖</span><span>LLM 生成</span></div>
-          <div class="flow-actor" id="flow-actor-3"><span class="flow-actor-icon">🛡</span><span>sql_guard</span></div>
+          <div class="flow-actor" id="flow-actor-3"><span class="flow-actor-icon">🛡</span><span>SQL 安全校验</span></div>
           <div class="flow-actor" id="flow-actor-4"><span class="flow-actor-icon">🗄</span><span>execute</span></div>
           <div class="flow-actor" id="flow-actor-5"><span class="flow-actor-icon">✓</span><span>guardrail</span></div>
         </div>
@@ -215,7 +216,7 @@
     </div>
 
     <div class="screen animate-in">
-      <h2>sql_guard 在拦什么</h2>
+      <h2>SQL 安全校验（sql_guard.py）在拦什么</h2>
       <div class="pattern-cards">
         <div class="pattern-card">
           <h3>只读白名单</h3>
@@ -239,7 +240,7 @@
     <div class="screen animate-in">
       <div class="translation-block">
         <div class="translation-code">
-          <span class="translation-label">CODE · analyst_agent.run</span>
+          <span class="translation-label">CODE · NL→SQL 编排（analyst_agent.py）.run</span>
           <pre><code><span class="code-line">amb = self._detect_ambiguity(question)</span>
 <span class="code-line"><span class="code-keyword">if</span> amb: <span class="code-keyword">return</span> self._clarify(amb, trace_id)</span>
 <span class="code-line">sql_text, usage = self._generate_sql(...)</span>
@@ -252,7 +253,7 @@
           <span class="translation-label">白话</span>
           <div class="translation-lines">
             <p class="tl">指标说不清就先反问，不瞎猜 SQL。</p>
-            <p class="tl">生成后必须过 sql_guard，执行只走只读连接。</p>
+            <p class="tl">生成后必须过 SQL 安全校验（sql_guard.py），执行只走只读连接。</p>
             <p class="tl">AI 解读若数字对不上表，降级为「请看表格」；全程写入查询日志备查。</p>
           </div>
         </div>
@@ -360,7 +361,7 @@
       <div class="quiz-container" id="quiz-analyst-m3">
         <div class="quiz-question-block"
              data-correct="option-a"
-             data-explanation-right="POST /assets 在 analyst.py 硬校验 analyst 角色，advisor 或 customer 会 403。"
+             data-explanation-right="POST /assets 在 问数 REST（analyst.py）硬校验 analyst 角色，advisor 或 customer 会 403。"
              data-explanation-wrong="资产沉淀是分析员专属写操作，其他角色只能问数或看 dashboard。">
           <h3 class="quiz-question">理财师 STAFF-10086 能调用 POST /api/analyst/assets 沉淀口径吗？</h3>
           <div class="quiz-options">
@@ -381,6 +382,84 @@
       </div>
     </div>
   </div>
+</section>
+<section class="module" id="module-4">
+  <div class="module-inner">
+    <p class="eyebrow animate-in">模块 4 · 红线与排障</p>
+    <h1 class="module-title animate-in">问数只统计不处置<br>还有几个常见空结果坑</h1>
+    <p class="module-lead animate-in">
+      问数 Agent 能出表格和解读，但<strong>不能关预警、不能当投顾、不能改画像</strong>。
+      另外「消歧总空」「改占位 Chat 没用」是 vibe coder 高频踩坑——这模块专门讲清。
+    </p>
+
+    <div class="screen animate-in">
+      <h2>问数三条红线（合规 §4.3）</h2>
+      <div class="step-cards">
+        <div class="step-card">
+          <span class="step-num">①</span>
+          <p><strong>不处置预警</strong> — 不能调用 <code>POST /api/risk/alerts/{id}/handle</code>；台账只读统计。</p>
+        </div>
+        <div class="step-card">
+          <span class="step-num">②</span>
+          <p><strong>不当投顾</strong> — 输出带免责声明；禁止生成可执行买卖/处置指令。</p>
+        </div>
+        <div class="step-card">
+          <span class="step-num">③</span>
+          <p><strong>不改 L0/L1 画像</strong> — SQL 只读；customer 域仅 <code>self</code> 趋势统计，不下钻他人。</p>
+        </div>
+      </div>
+      <div class="callout callout-warning">
+        <strong>和风控对话线的区别：</strong> 风控 Chat 用 RISK_TOOL_REGISTRY 只读查台账；问数走 <code>/api/analyst/chat</code> + SQL 安全校验（sql_guard.py），<strong>不要</strong>混接口。
+      </div>
+    </div>
+
+    <div class="screen animate-in">
+      <h2>排障：消歧为什么总空？</h2>
+      <p>口径字典在 MySQL，<strong>本机须执行一次</strong> <code>scripts/agent/seed-analyst-metric-dict.sql</code>。没灌种子 → NL2SQL 消歧永远不命中，不是 LLM 「坏了」。</p>
+
+      <div class="translation-block">
+        <div class="translation-code">
+          <span class="translation-label">占位页 vs 真问数</span>
+          <pre><code><span class="code-line">AnalystChatShell  → 占位 UI，未接问数 API</span>
+<span class="code-line">AnalystQueryPage  → POST /api/analyst/chat</span>
+<span class="code-line">改 Shell 不会出 SQL 表格</span></code></pre>
+        </div>
+        <div class="translation-english">
+          <span class="translation-label">白话</span>
+          <div class="translation-lines">
+            <p class="tl">菜单里两个「分析」入口可能让人改错文件——问数逻辑在 NL→SQL 编排（<code>analyst_agent.py</code>） + 问数页。</p>
+            <p class="tl">Redis 问数缓存键含<strong>权限指纹</strong>，别只 hash SQL 字符串，否则可能串权。</p>
+          </div>
+        </div>
+      </div>
+    </div>
+
+    <div class="screen animate-in">
+      <div class="quiz-container" id="quiz-analyst-m4">
+        <div class="quiz-question-block"
+             data-correct="option-b"
+             data-explanation-right="对。问数线无 X-Agent-Type，走 get_platform_auth_context；加 analyst 头会走错栈。"
+             data-explanation-wrong="问数和 Chat 是两套鉴权，见总览模块 7 速查表。">
+          <h3 class="quiz-question">问数 401，AI 建议给 analyst.ts 加 X-Agent-Type: analyst，你怎么回？</h3>
+          <div class="quiz-options">
+            <button class="quiz-option" data-value="option-a" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>好，和 Chat 统一</span>
+            </button>
+            <button class="quiz-option" data-value="option-b" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>不对，问数不要 Agent 头，查 Bearer + 平台鉴权</span>
+            </button>
+            <button class="quiz-option" data-value="option-c" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>去掉 JWT，全用 debug 头</span>
+            </button>
+          </div>
+          <div class="quiz-feedback"></div>
+        </div>
+        <button class="quiz-check-btn" onclick="checkQuiz('quiz-analyst-m4')">检查答案</button>
+        <button class="quiz-reset-btn" onclick="resetQuiz('quiz-analyst-m4')">重做</button>
+      </div>
+      <p class="module-footer-note">相关：NL→SQL 编排（<code>app/service/analyst_agent.py</code>） · SQL 安全校验（<code>app/service/analyst/sql_guard.py</code>）</p>
+    </div>
+  </div>
 </section>
   </main>
 
diff --git a/docs/course/jinrong-module-analyst/main.js b/docs/course/jinrong-module-analyst/main.js
index 7150a69..410548e 100644
--- a/docs/course/jinrong-module-analyst/main.js
+++ b/docs/course/jinrong-module-analyst/main.js
@@ -486,13 +486,17 @@
 
   /* ── LAYER TOGGLE ──────────────────────────────────────────── */
   window.showLayer = function (layerId, btn) {
-    const demo = btn ? btn.closest('.layer-demo') : null;
+    const tab = btn || (window.event && window.event.currentTarget);
+    if (!tab || !tab.closest) return;
+    const demo = tab.closest('.layer-demo');
     if (!demo) return;
-    $$('.layer', demo).forEach(l => l.style.display = 'none');
+    $$('.layer', demo).forEach(l => { l.style.display = 'none'; });
     $$('.layer-tab', demo).forEach(t => t.classList.remove('active'));
-    const layer = $('#' + layerId);
+    const esc = typeof CSS !== 'undefined' && CSS.escape ? CSS.escape(layerId) : layerId.replace(/[^\w-]/g, '');
+    let layer = demo.querySelector('#' + esc);
+    if (!layer) layer = demo.querySelector('#layer-' + esc);
     if (layer) layer.style.display = 'block';
-    btn.classList.add('active');
+    tab.classList.add('active');
   };
 
 })();
diff --git a/docs/course/jinrong-module-analyst/modules/01-entry.html b/docs/course/jinrong-module-analyst/modules/01-entry.html
index 0a06d54..c3a48ca 100644
--- a/docs/course/jinrong-module-analyst/modules/01-entry.html
+++ b/docs/course/jinrong-module-analyst/modules/01-entry.html
@@ -23,18 +23,18 @@
         </div>
       </div>
       <div class="callout callout-accent">
-        <strong>指挥 AI 改功能时：</strong> 要表格和 SQL 就改 <code>analyst.py</code> / <code>analyst_agent.py</code>；
+        <strong>指挥 AI 改功能时：</strong> 要表格和 SQL 就改 问数 REST（<code>analyst.py</code>） / NL→SQL 编排（<code>analyst_agent.py</code>）；
         要聊天体验才碰 <code>analytics/chat</code> 占位页，别和问数混成一个接口。
       </div>
       <div class="callout callout-warning">
         <strong>customer self 域：</strong> 客户 token 进问数 → <code>domain=self</code>，
-        <code>sql_guard</code> 强制 SQL 带本人 <code>customer_id</code>；免责声明追加 <code>CUSTOMER_AI_RISK_NOTE</code>。
+        SQL 安全校验（<code>sql_guard.py</code>）强制 SQL 带本人 <code>customer_id</code>；免责声明追加 <code>CUSTOMER_AI_RISK_NOTE</code>。
       </div>
     </div>
 
     <div class="screen animate-in">
       <h2>后端「四件套」路由</h2>
-      <p>全部挂在 <code>app/api/analyst.py</code>，前缀 <code>/api/analyst</code>：</p>
+      <p>全部挂在 问数 REST（<code>app/api/analyst.py</code>），前缀 <code>/api/analyst</code>：</p>
       <div class="file-tree animate-in">
         <div class="tree-item tree-folder">POST /chat</div>
         <div class="tree-item tree-indent">问数主入口 → AnalystAgent.run()</div>
@@ -63,7 +63,7 @@
           <div class="chat-message" data-msg="1" data-sender="api" style="display:none">
             <div class="chat-avatar" style="background:#5A9DB8">API</div>
             <div class="chat-bubble">
-              <span class="chat-sender" style="color:#5A9DB8">analyst.py</span>
+              <span class="chat-sender" style="color:#5A9DB8">问数 REST（analyst.py）</span>
               <p>get_platform_auth_context → analyst_auth_from_deps</p>
             </div>
           </div>
@@ -71,7 +71,7 @@
             <div class="chat-avatar" style="background:#1F6280">Agent</div>
             <div class="chat-bubble">
               <span class="chat-sender" style="color:#1F6280">AnalystAgent</span>
-              <p>消歧 → 生成 SQL → sql_guard → 执行 → 解读</p>
+              <p>消歧 → 生成 SQL → SQL 安全校验（sql_guard.py） → 执行 → 解读</p>
             </div>
           </div>
           <div class="chat-message" data-msg="3" data-sender="browser" style="display:none">
diff --git a/docs/course/jinrong-module-analyst/modules/02-pipeline.html b/docs/course/jinrong-module-analyst/modules/02-pipeline.html
index c97bf10..dee8548 100644
--- a/docs/course/jinrong-module-analyst/modules/02-pipeline.html
+++ b/docs/course/jinrong-module-analyst/modules/02-pipeline.html
@@ -3,7 +3,7 @@
     <p class="eyebrow animate-in">模块 2 · NL→SQL 管线</p>
     <h1 class="module-title animate-in">一句话怎么变成<br>可审计的表格？</h1>
     <p class="module-lead animate-in">
-      <code>app/service/analyst_agent.py</code> 把用户问题拆成可测试步骤。
+      NL→SQL 编排（<code>app/service/analyst_agent.py</code>）把用户问题拆成可测试步骤。
       像<strong>翻译官 + 安检 + 记账员</strong>：先弄清指标含义，再生成 SQL，层层校验后才执行，最后解读并留痕。
     </p>
 
@@ -14,7 +14,7 @@
       <div class="flow-animation" data-steps='[
         {"highlight":"flow-actor-1","label":"① 消歧：口径字典命中多义指标 → 返回 suggestions 让用户选"},
         {"highlight":"flow-actor-2","label":"② 生成 SQL：DeepSeek + SCHEMA_PROMPT + 权限域提示","packet":true,"from":"1","to":"2"},
-        {"highlight":"flow-actor-3","label":"③ sql_guard 五层校验：只读 / 表白名单 / 行级归属…","packet":true,"from":"2","to":"3"},
+        {"highlight":"flow-actor-3","label":"③ SQL 安全校验（sql_guard.py）五层校验：只读 / 表白名单 / 行级归属…","packet":true,"from":"2","to":"3"},
         {"highlight":"flow-actor-4","label":"④ 执行：AnalyticsRepo 只读查询（Redis 缓存可命中）","packet":true,"from":"3","to":"4"},
         {"highlight":"flow-actor-5","label":"⑤ guardrail：解读数字必须与表格一致，不过则降级","packet":true,"from":"4","to":"5"},
         {"highlight":"flow-actor-1","label":"⑥ 留痕：analytics_query_log 写入 SQL/耗时/护栏结果","packet":true,"from":"5","to":"1"}
@@ -22,7 +22,7 @@
         <div class="flow-actors">
           <div class="flow-actor" id="flow-actor-1"><span class="flow-actor-icon">📖</span><span>消歧 dict</span></div>
           <div class="flow-actor" id="flow-actor-2"><span class="flow-actor-icon">🤖</span><span>LLM 生成</span></div>
-          <div class="flow-actor" id="flow-actor-3"><span class="flow-actor-icon">🛡</span><span>sql_guard</span></div>
+          <div class="flow-actor" id="flow-actor-3"><span class="flow-actor-icon">🛡</span><span>SQL 安全校验</span></div>
           <div class="flow-actor" id="flow-actor-4"><span class="flow-actor-icon">🗄</span><span>execute</span></div>
           <div class="flow-actor" id="flow-actor-5"><span class="flow-actor-icon">✓</span><span>guardrail</span></div>
         </div>
@@ -35,7 +35,7 @@
     </div>
 
     <div class="screen animate-in">
-      <h2>sql_guard 在拦什么</h2>
+      <h2>SQL 安全校验（sql_guard.py）在拦什么</h2>
       <div class="pattern-cards">
         <div class="pattern-card">
           <h3>只读白名单</h3>
@@ -59,7 +59,7 @@
     <div class="screen animate-in">
       <div class="translation-block">
         <div class="translation-code">
-          <span class="translation-label">CODE · analyst_agent.run</span>
+          <span class="translation-label">CODE · NL→SQL 编排（analyst_agent.py）.run</span>
           <pre><code><span class="code-line">amb = self._detect_ambiguity(question)</span>
 <span class="code-line"><span class="code-keyword">if</span> amb: <span class="code-keyword">return</span> self._clarify(amb, trace_id)</span>
 <span class="code-line">sql_text, usage = self._generate_sql(...)</span>
@@ -72,7 +72,7 @@
           <span class="translation-label">白话</span>
           <div class="translation-lines">
             <p class="tl">指标说不清就先反问，不瞎猜 SQL。</p>
-            <p class="tl">生成后必须过 sql_guard，执行只走只读连接。</p>
+            <p class="tl">生成后必须过 SQL 安全校验（sql_guard.py），执行只走只读连接。</p>
             <p class="tl">AI 解读若数字对不上表，降级为「请看表格」；全程写入查询日志备查。</p>
           </div>
         </div>
diff --git a/docs/course/jinrong-module-analyst/modules/03-agent-api.html b/docs/course/jinrong-module-analyst/modules/03-agent-api.html
index 21b334a..d7a9ca5 100644
--- a/docs/course/jinrong-module-analyst/modules/03-agent-api.html
+++ b/docs/course/jinrong-module-analyst/modules/03-agent-api.html
@@ -75,7 +75,7 @@
       <div class="quiz-container" id="quiz-analyst-m3">
         <div class="quiz-question-block"
              data-correct="option-a"
-             data-explanation-right="POST /assets 在 analyst.py 硬校验 analyst 角色，advisor 或 customer 会 403。"
+             data-explanation-right="POST /assets 在 问数 REST（analyst.py）硬校验 analyst 角色，advisor 或 customer 会 403。"
              data-explanation-wrong="资产沉淀是分析员专属写操作，其他角色只能问数或看 dashboard。">
           <h3 class="quiz-question">理财师 STAFF-10086 能调用 POST /api/analyst/assets 沉淀口径吗？</h3>
           <div class="quiz-options">
diff --git a/docs/course/jinrong-module-analyst/modules/04-redlines.html b/docs/course/jinrong-module-analyst/modules/04-redlines.html
new file mode 100644
index 0000000..d57203d
--- /dev/null
+++ b/docs/course/jinrong-module-analyst/modules/04-redlines.html
@@ -0,0 +1,78 @@
+<section class="module" id="module-4">
+  <div class="module-inner">
+    <p class="eyebrow animate-in">模块 4 · 红线与排障</p>
+    <h1 class="module-title animate-in">问数只统计不处置<br>还有几个常见空结果坑</h1>
+    <p class="module-lead animate-in">
+      问数 Agent 能出表格和解读，但<strong>不能关预警、不能当投顾、不能改画像</strong>。
+      另外「消歧总空」「改占位 Chat 没用」是 vibe coder 高频踩坑——这模块专门讲清。
+    </p>
+
+    <div class="screen animate-in">
+      <h2>问数三条红线（合规 §4.3）</h2>
+      <div class="step-cards">
+        <div class="step-card">
+          <span class="step-num">①</span>
+          <p><strong>不处置预警</strong> — 不能调用 <code>POST /api/risk/alerts/{id}/handle</code>；台账只读统计。</p>
+        </div>
+        <div class="step-card">
+          <span class="step-num">②</span>
+          <p><strong>不当投顾</strong> — 输出带免责声明；禁止生成可执行买卖/处置指令。</p>
+        </div>
+        <div class="step-card">
+          <span class="step-num">③</span>
+          <p><strong>不改 L0/L1 画像</strong> — SQL 只读；customer 域仅 <code>self</code> 趋势统计，不下钻他人。</p>
+        </div>
+      </div>
+      <div class="callout callout-warning">
+        <strong>和风控对话线的区别：</strong> 风控 Chat 用 RISK_TOOL_REGISTRY 只读查台账；问数走 <code>/api/analyst/chat</code> + SQL 安全校验（sql_guard.py），<strong>不要</strong>混接口。
+      </div>
+    </div>
+
+    <div class="screen animate-in">
+      <h2>排障：消歧为什么总空？</h2>
+      <p>口径字典在 MySQL，<strong>本机须执行一次</strong> <code>scripts/agent/seed-analyst-metric-dict.sql</code>。没灌种子 → NL2SQL 消歧永远不命中，不是 LLM 「坏了」。</p>
+
+      <div class="translation-block">
+        <div class="translation-code">
+          <span class="translation-label">占位页 vs 真问数</span>
+          <pre><code><span class="code-line">AnalystChatShell  → 占位 UI，未接问数 API</span>
+<span class="code-line">AnalystQueryPage  → POST /api/analyst/chat</span>
+<span class="code-line">改 Shell 不会出 SQL 表格</span></code></pre>
+        </div>
+        <div class="translation-english">
+          <span class="translation-label">白话</span>
+          <div class="translation-lines">
+            <p class="tl">菜单里两个「分析」入口可能让人改错文件——问数逻辑在 NL→SQL 编排（<code>analyst_agent.py</code>） + 问数页。</p>
+            <p class="tl">Redis 问数缓存键含<strong>权限指纹</strong>，别只 hash SQL 字符串，否则可能串权。</p>
+          </div>
+        </div>
+      </div>
+    </div>
+
+    <div class="screen animate-in">
+      <div class="quiz-container" id="quiz-analyst-m4">
+        <div class="quiz-question-block"
+             data-correct="option-b"
+             data-explanation-right="对。问数线无 X-Agent-Type，走 get_platform_auth_context；加 analyst 头会走错栈。"
+             data-explanation-wrong="问数和 Chat 是两套鉴权，见总览模块 7 速查表。">
+          <h3 class="quiz-question">问数 401，AI 建议给 analyst.ts 加 X-Agent-Type: analyst，你怎么回？</h3>
+          <div class="quiz-options">
+            <button class="quiz-option" data-value="option-a" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>好，和 Chat 统一</span>
+            </button>
+            <button class="quiz-option" data-value="option-b" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>不对，问数不要 Agent 头，查 Bearer + 平台鉴权</span>
+            </button>
+            <button class="quiz-option" data-value="option-c" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>去掉 JWT，全用 debug 头</span>
+            </button>
+          </div>
+          <div class="quiz-feedback"></div>
+        </div>
+        <button class="quiz-check-btn" onclick="checkQuiz('quiz-analyst-m4')">检查答案</button>
+        <button class="quiz-reset-btn" onclick="resetQuiz('quiz-analyst-m4')">重做</button>
+      </div>
+      <p class="module-footer-note">相关：NL→SQL 编排（<code>app/service/analyst_agent.py</code>） · SQL 安全校验（<code>app/service/analyst/sql_guard.py</code>）</p>
+    </div>
+  </div>
+</section>
diff --git a/docs/course/jinrong-module-analyst/styles.css b/docs/course/jinrong-module-analyst/styles.css
index 544669c..68d0e39 100644
--- a/docs/course/jinrong-module-analyst/styles.css
+++ b/docs/course/jinrong-module-analyst/styles.css
@@ -254,7 +254,8 @@ pre::-webkit-scrollbar { display: none; }
   padding-top: calc(var(--nav-height) + var(--space-12));
 }
 
-.module-content {
+.module-content,
+.module-inner {
   max-width: var(--content-width);
   margin: 0 auto;
 }
diff --git a/docs/course/jinrong-module-customer/_base.html b/docs/course/jinrong-module-customer/_base.html
index cccf722..6b5e2cd 100644
--- a/docs/course/jinrong-module-customer/_base.html
+++ b/docs/course/jinrong-module-customer/_base.html
@@ -32,6 +32,10 @@
         <button class="nav-dot" data-target="module-1" data-tooltip="能做什么" role="tab" aria-label="模块 1: 能做什么"></button>
         <button class="nav-dot" data-target="module-2" data-tooltip="14 节点图" role="tab" aria-label="模块 2: 14 节点图"></button>
         <button class="nav-dot" data-target="module-3" data-tooltip="流式与铁律" role="tab" aria-label="模块 3: 流式与铁律"></button>
+        <button class="nav-dot" data-target="module-4" data-tooltip="口吻与转人工" role="tab" aria-label="模块 4: 口吻与转人工"></button>
+        <button class="nav-dot" data-target="module-5" data-tooltip="边界与接缝" role="tab" aria-label="模块 5: 边界与接缝"></button>
+        <button class="nav-dot" data-target="module-6" data-tooltip="L0 与 L1 画像" role="tab" aria-label="模块 6: L0 与 L1 画像"></button>
+        <button class="nav-dot" data-target="module-7" data-tooltip="Wave3 查询" role="tab" aria-label="模块 7: Wave3 查询"></button>
       </div>
     </div>
   </nav>
diff --git a/docs/course/jinrong-module-customer/index.html b/docs/course/jinrong-module-customer/index.html
index 540d0fd..3942a31 100644
--- a/docs/course/jinrong-module-customer/index.html
+++ b/docs/course/jinrong-module-customer/index.html
@@ -32,6 +32,10 @@
         <button class="nav-dot" data-target="module-1" data-tooltip="能做什么" role="tab" aria-label="模块 1: 能做什么"></button>
         <button class="nav-dot" data-target="module-2" data-tooltip="14 节点图" role="tab" aria-label="模块 2: 14 节点图"></button>
         <button class="nav-dot" data-target="module-3" data-tooltip="流式与铁律" role="tab" aria-label="模块 3: 流式与铁律"></button>
+        <button class="nav-dot" data-target="module-4" data-tooltip="口吻与转人工" role="tab" aria-label="模块 4: 口吻与转人工"></button>
+        <button class="nav-dot" data-target="module-5" data-tooltip="边界与接缝" role="tab" aria-label="模块 5: 边界与接缝"></button>
+        <button class="nav-dot" data-target="module-6" data-tooltip="L0 与 L1 画像" role="tab" aria-label="模块 6: L0 与 L1 画像"></button>
+        <button class="nav-dot" data-target="module-7" data-tooltip="Wave3 查询" role="tab" aria-label="模块 7: Wave3 查询"></button>
       </div>
     </div>
   </nav>
@@ -45,7 +49,7 @@
       登录客户（如 <code>CUST-9527</code>）打开「客户助手」后，可走<strong>同步</strong>或
       <span class="term" data-definition="SSE = Server-Sent Events，服务器像打字一样一段段把回复推给浏览器，不用等整段话生成完。">SSE 流式</span>
       对话。未登录访客另有<strong>游客试聊</strong>（只 RAG、不查持仓）。
-      2026-09 <code>merger</code> 分支：客户线 SSE 已接通，测试基线 774 passed。
+      2026-09 <code>merger</code> 分支：客户线 SSE 已接通，测试基线 **786 passed**。
     </p>
 
     <div class="screen animate-in">
@@ -56,8 +60,8 @@
           <p><code>POST /api/chat/stream</code> 或 <code>POST /api/chat</code>，请求头 <code>X-Agent-Type: customer</code> + Bearer JWT。</p>
         </div>
         <div class="pattern-card">
-          <h3>持仓 / 流水 / 风评</h3>
-          <p>意图命中后走 <code>core_ro_tool</code> 查 Core 模拟库；<code>customer_id</code> 只来自 JWT，不信用户口述客户号。</p>
+          <h3>持仓 / 流水 / 风评 / 净值</h3>
+          <p>意图命中后走 Core 模拟库只读查询 Tool（<code>core_ro_tool.py</code>）；含 C-05 最新净值（非实时）；C-04 查持仓时可 inline 阈值提醒。</p>
         </div>
         <div class="pattern-card">
           <h3>产品规则 RAG</h3>
@@ -65,28 +69,28 @@
         </div>
         <div class="pattern-card">
           <h3>游客试聊</h3>
-          <p><code>POST /api/chat/visitor</code> 免登录，<code>visitor_service</code> 9 节点图，不写客户会话表。</p>
+          <p><code>POST /api/chat/visitor</code> 免登录，游客试聊 9 节点编排（<code>visitor_service.py</code>），不写客户会话表。</p>
         </div>
       </div>
       <div class="callout callout-accent">
-        <strong>和理财师线的区别：</strong> 客户走独立 <code>customer_service.py</code>（14 节点 LangGraph），<strong>不走</strong> <code>agent_service</code> 那条 tool→llm→guard 通用图。
+        <strong>和理财师线的区别：</strong> 客户线走登录客户 14 节点 LangGraph 编排（<code>customer_service.py</code>），<strong>不走</strong> 顾问通用 tool→llm→guard 编排（<code>agent_service.py</code>）。
       </div>
     </div>
 
     <div class="screen animate-in">
       <h2>数据流：浏览器问「我持仓多少」</h2>
-      <p>客户发消息后，<code>chat.py</code> 按 <code>X-Agent-Type</code> 分流到客户编排，再查 Core。</p>
+      <p>客户发消息后，四 Agent 对话 HTTP 入口（<code>chat.py</code>）按 <code>X-Agent-Type</code> 分流到客户编排，再查 Core。</p>
 
       <div class="flow-animation" data-steps='[
         {"highlight":"flow-actor-1","label":"浏览器：ChatPanel 带 JWT + X-Agent-Type: customer"},
-        {"highlight":"flow-actor-2","label":"chat.py：鉴权、建 session、分流 customer 分支","packet":true,"from":"1","to":"2"},
+        {"highlight":"flow-actor-2","label":"四 Agent 对话 HTTP 入口（chat.py）：鉴权、建 session、分流 customer 分支","packet":true,"from":"1","to":"2"},
         {"highlight":"flow-actor-3","label":"customer_service：意图→tool_call→interpret（数值来自 Core）","packet":true,"from":"2","to":"3"},
-        {"highlight":"flow-actor-4","label":"core_ro_tool：SQL 只读 + fact_text 脱敏模板","packet":true,"from":"3","to":"4"},
+        {"highlight":"flow-actor-4","label":"Core 只读查询 Tool（core_ro_tool.py）：SQL 只读 + fact_text 脱敏模板","packet":true,"from":"3","to":"4"},
         {"highlight":"flow-actor-1","label":"SSE 分块推送完整回复 + MySQL 落会话","packet":true,"from":"4","to":"1"}
       ]'>
         <div class="flow-actors">
           <div class="flow-actor" id="flow-actor-1"><span class="flow-actor-icon">🖥</span><span>浏览器</span></div>
-          <div class="flow-actor" id="flow-actor-2"><span class="flow-actor-icon">🚪</span><span>chat.py</span></div>
+          <div class="flow-actor" id="flow-actor-2"><span class="flow-actor-icon">🚪</span><span>对话 HTTP 入口（chat.py）</span></div>
           <div class="flow-actor" id="flow-actor-3"><span class="flow-actor-icon">🤖</span><span>customer_service</span></div>
           <div class="flow-actor" id="flow-actor-4"><span class="flow-actor-icon">🗄</span><span>core_ro_tool</span></div>
         </div>
@@ -101,7 +105,7 @@
     <div class="screen animate-in">
       <div class="translation-block">
         <div class="translation-code">
-          <span class="translation-label">入口 · chat.py</span>
+          <span class="translation-label">入口 · 四 Agent 对话 HTTP 入口（chat.py）</span>
           <pre><code><span class="code-line"><span class="code-keyword">if</span> agent_type == <span class="code-string">"customer"</span>:</span>
 <span class="code-line">    host_ctx = host_auth_for_customer_service(auth, trace_id=trace_id)</span>
 <span class="code-line">    customer_prep = prepare_customer_stream(</span>
@@ -149,8 +153,8 @@
     <p class="eyebrow animate-in">模块 2 · 编排内核</p>
     <h1 class="module-title animate-in">14 节点 LangGraph：<br>从回忆到归档</h1>
     <p class="module-lead animate-in">
-      客户线不走 <code>agent_service</code> 那张三张牌（tool→llm→guard），而是
-      <code>customer_service.py</code> 里一张更大的
+      客户线不走顾问通用 tool→llm→guard 编排（<code>agent_service.py</code>），而是
+      登录客户 14 节点 LangGraph 编排（<code>customer_service.py</code>）里一张更大的
       <span class="term" data-definition="LangGraph = 用「节点 + 边」画出的对话流程图；每个节点是一段 Python 函数，边决定下一步走哪条分支。">LangGraph</span>。
       入口永远是 <code>recall_memory</code>，出口经 <code>save_memory</code> 写记忆后收尾。
     </p>
@@ -162,7 +166,7 @@
         <div class="badge-item"><span class="badge-code">2</span><span class="badge-desc">intent_classify · LLM 分意图</span></div>
         <div class="badge-item"><span class="badge-code">3</span><span class="badge-desc">rag_search · fin_* Milvus</span></div>
         <div class="badge-item"><span class="badge-code">4</span><span class="badge-desc">param_extract · 抽查询参数</span></div>
-        <div class="badge-item"><span class="badge-code">5</span><span class="badge-desc">tool_call · core_ro_tool</span></div>
+        <div class="badge-item"><span class="badge-code">5</span><span class="badge-desc">tool_call · Core 只读 Tool（core_ro_tool.py）</span></div>
         <div class="badge-item"><span class="badge-code">6</span><span class="badge-desc">interpret · 解读 fact_text</span></div>
         <div class="badge-item"><span class="badge-code">7</span><span class="badge-desc">generate · RAG 拼回复</span></div>
         <div class="badge-item"><span class="badge-code">8</span><span class="badge-desc">chitchat · 闲聊</span></div>
@@ -175,6 +179,7 @@
       </div>
       <div class="callout callout-accent">
         <strong>分支规则：</strong> <code>intent_classify</code> 之后走 RAG（产品/政策/FAQ）、走 Tool（持仓/流水/风评）、或走静态话术（拒绝/转人工/闲聊）。所有生成分支最后都汇入 <code>save_memory</code>。
+        <strong>口吻护栏与转人工决策</strong>见模块 4。
       </div>
     </div>
 
@@ -278,7 +283,7 @@
     <div class="screen animate-in">
       <div class="translation-block">
         <div class="translation-code">
-          <span class="translation-label">图构建 · customer_service.py</span>
+          <span class="translation-label">图构建 · 登录客户 14 节点 LangGraph 编排（customer_service.py）</span>
           <pre><code><span class="code-line">g.set_entry_point(<span class="code-string">"recall_memory"</span>)</span>
 <span class="code-line">g.add_edge(<span class="code-string">"recall_memory"</span>, <span class="code-string">"intent_classify"</span>)</span>
 <span class="code-line">g.add_conditional_edges(<span class="code-string">"intent_classify"</span>, _route, {...})</span>
@@ -336,15 +341,15 @@
       <div class="pattern-cards">
         <div class="pattern-card">
           <h3>铁律 1 · 数值不经过 LLM 编造</h3>
-          <p>持仓、流水、风评等查询结果 100% 来自 <code>core_ro_tool</code> 的 <code>fact_text</code>。LLM 在 <code>interpret</code> / <code>generate</code> 里只做解读与组织语言，不能自己算数。</p>
+          <p>持仓、流水、风评等查询结果 100% 来自 Core 只读查询 Tool（<code>core_ro_tool.py</code>）的 <code>fact_text</code>。LLM 在 <code>interpret</code> / <code>generate</code> 里只做解读与组织语言，不能自己算数。</p>
         </div>
         <div class="pattern-card">
           <h3>铁律 2 · customer_id 只来自 JWT</h3>
-          <p><code>chat.py</code> 在进图之前已从令牌解析客户号并做归属校验。图内 <code>state["customer_id"]</code> 不信用户消息里的「帮我查 CUST-xxx」。</p>
+          <p>四 Agent 对话 HTTP 入口（<code>chat.py</code>）在进图之前已从令牌解析客户号并做归属校验。图内 <code>state["customer_id"]</code> 不信用户消息里的「帮我查 CUST-xxx」。</p>
         </div>
       </div>
       <div class="callout callout-warning">
-        <strong>和 advisor 线的差异：</strong> 理财师走 <code>agent_service</code> 的 tool→llm→guard；客户走独立 14 节点图。别混用 <code>run_tool</code> 关键词意图那套来改客户 RAG 分支。
+        <strong>和 advisor 线的差异：</strong> 理财师走顾问通用编排（<code>agent_service.py</code>）的 tool→llm→guard；客户走独立 14 节点图。别混用对话 Tool 编排（<code>tool_service.py</code>）关键词意图那套来改客户 RAG 分支。
       </div>
     </div>
 
@@ -372,7 +377,7 @@
         <div class="translation-english">
           <span class="translation-label">白话</span>
           <div class="translation-lines">
-            <p class="tl">入参里的 customer_id 是 chat.py 验完 JWT 后塞进来的，函数内部不再解析用户文本。</p>
+            <p class="tl">入参里的 customer_id 是四 Agent 对话 HTTP 入口（<code>chat.py</code>）验完 JWT 后塞进来的，函数内部不再解析用户文本。</p>
             <p class="tl">先拿到完整 reply（含 intent、是否转人工、是否附免责），再切片给 SSE 层逐块写。</p>
             <p class="tl">改「真流式」要先动 LangGraph 执行模型，不是只改前端 ChatPanel。</p>
           </div>
@@ -384,14 +389,14 @@
       <h2>相关文件（改流式 / 铁律时打开这些）</h2>
       <div class="file-tree animate-in">
         <div class="tree-item tree-folder">app/service/</div>
-        <div class="tree-item tree-indent">customer_service.py — 14 节点图 + prepare_customer_stream</div>
-        <div class="tree-item tree-indent">visitor_service.py — 游客 9 节点（无 Tool 查持仓）</div>
-        <div class="tree-item tree-indent">rag_service.py — fin_faq / fin_product / fin_policy</div>
+        <div class="tree-item tree-indent">登录客户 14 节点 LangGraph 编排（customer_service.py）— prepare_customer_stream</div>
+        <div class="tree-item tree-indent">游客试聊 9 节点 LangGraph 编排（visitor_service.py）— 无 Tool 查持仓</div>
+        <div class="tree-item tree-indent">RAG 检索层（rag_service.py）— fin_faq / fin_product / fin_policy</div>
         <div class="tree-item tree-folder">app/api/</div>
-        <div class="tree-item tree-indent">chat.py — customer 分支分流 + SSE 写帧</div>
-        <div class="tree-item tree-indent">auth_adapter.py — host_auth_for_customer_service</div>
+        <div class="tree-item tree-indent">四 Agent 对话 HTTP 入口（chat.py）— customer 分支分流 + SSE 写帧</div>
+        <div class="tree-item tree-indent">宿主 AuthContext → 模块 AuthContext 适配（auth_adapter.py）— host_auth_for_customer_service</div>
         <div class="tree-item tree-folder">app/tool/</div>
-        <div class="tree-item tree-indent">core_ro_tool.py — query_holdings / query_trades 等</div>
+        <div class="tree-item tree-indent">客户 Agent Core 只读查询工具（core_ro_tool.py）— query_holdings / query_trades 等</div>
       </div>
 
       <div class="quiz-container" id="quiz-customer-m3">
@@ -418,6 +423,533 @@
       </div>
     </div>
   </div>
+</section>
+<section class="module" id="module-4">
+  <div class="module-inner">
+    <p class="eyebrow animate-in">模块 4 · 口吻与转人工</p>
+    <h1 class="module-title animate-in">专业口吻怎么「锁住」？<br>什么时候该转人工？</h1>
+    <p class="module-lead animate-in">
+      机制课讲了 LangGraph 怎么走，但客服线还有两条你指挥 AI 时最常碰的线：
+      <strong>回复别漂成投顾/推销员</strong>，以及<strong>什么时候打「建议转人工」</strong>。
+      代码里不是单靠「写个好 prompt」，而是<strong>三层滤网 + 一条主动转人工路径</strong>（sanitize 命中<strong>不再</strong>自动转人工，拍板 1B）。
+    </p>
+
+    <div class="screen animate-in">
+      <h2>三层滤网：防止口吻漂移</h2>
+      <p>可以把客服回复想成「过三道闸」——前面两道尽量写对，最后一道不管 LLM 说什么都要拦违规词。</p>
+      <div class="step-cards">
+        <div class="step-card">
+          <span class="step-num">①</span>
+          <p><strong>Prompt 层</strong> · 客户线各分支 System Prompt 模板（<code>customer_prompts.py</code>）<br>
+          每个生成分支有独立 system 模板（<code>INTERPRET_SYSTEM</code> / <code>GENERATE_SYSTEM</code> / <code>CHITCHAT_SYSTEM</code>），开头就定身份：「金融客服助手（已登录客户模式）」——禁止投顾话术、禁止预测、画像只调措辞<strong>不能念出</strong>。</p>
+        </div>
+        <div class="step-card">
+          <span class="step-num">②</span>
+          <p><strong>记忆层</strong> · <code>recall_memory</code><br>
+          咨询走 <code>consult_memory</code>、闲聊走 <code>chitchat_memory</code>，再注入 <code>profile_context</code>。让回复有连续语境，但 prompt 里写死：不得主动复述年龄/收入等画像字段。</p>
+        </div>
+        <div class="step-card">
+          <span class="step-num">③</span>
+          <p><strong>事后扫描</strong> · <code>finalize_sanitized_reply()</code>（<code>sanitize_postprocess.py</code>）<br>
+          <code>interpret</code> / <code>generate</code> / <code>chitchat</code> 产出后过违禁词正则。命中后：<strong>数据查询类</strong>（含 nav_query）回退 Core <code>fact_text</code>；RAG/闲聊替换 <code>COMPLIANCE_REJECT</code>——<strong>均不</strong>自动 <code>transfer_to_human</code>。<strong>游客线已对齐</strong>。</p>
+        </div>
+      </div>
+      <div class="callout callout-accent">
+        <strong>入口还有第 0 道闸：</strong> 四 Agent 对话 HTTP 入口（<code>chat.py</code>）的 <span class="term" data-definition="input_guard = 进 LangGraph 之前对用户输入做检查：注入短语、超长、频率限制；命中直接拒答并写 input_guard_log。">input_guard</span> 在进图之前就拦注入/超长——这类请求根本到不了 LLM。
+      </div>
+    </div>
+
+    <div class="screen animate-in">
+      <div class="translation-block">
+        <div class="translation-code">
+          <span class="translation-label">事后扫描 · 共用分治（sanitize_postprocess.py）</span>
+          <pre><code><span class="code-line"><span class="code-keyword">def</span> finalize_sanitized_reply(reply, *, intent, fact_text):</span>
+<span class="code-line">    safe, hit = sanitize_reply(reply)</span>
+<span class="code-line">    <span class="code-keyword">if not</span> hit: <span class="code-keyword">return</span> safe, <span class="code-keyword">False</span></span>
+<span class="code-line">    <span class="code-keyword">if</span> intent <span class="code-keyword">in</span> DATA_QUERY <span class="code-keyword">and</span> fact_text:</span>
+<span class="code-line">        <span class="code-keyword">return</span> fact_text, <span class="code-keyword">False</span>  <span class="code-comment"># 1B：保真账，不转人工</span></span>
+<span class="code-line">    <span class="code-keyword">return</span> COMPLIANCE_REJECT, <span class="code-keyword">False</span></span></code></pre>
+        </div>
+        <div class="translation-english">
+          <span class="translation-label">白话</span>
+          <div class="translation-lines">
+            <p class="tl">数据查询分支：LLM 嘴瓢时<strong>回退 Core fact_text</strong>，客户仍能看到「持有 3 只产品」等真数。</p>
+            <p class="tl">RAG/闲聊分支：替换为固定拒答，但<strong>不打</strong>转人工标志——除非用户原话已是投诉/转人工。</p>
+            <p class="tl">底层 <code>sanitize_reply</code> 仍负责扫违禁词；分治逻辑在 customer 编排层。</p>
+          </div>
+        </div>
+      </div>
+    </div>
+
+    <div class="screen animate-in">
+      <h2>转人工 vs 直接拒绝：别混成一条线</h2>
+      <p>模块 2 列出了 <code>reject</code> 和 <code>transfer_human</code> 两个节点，但<strong>触发条件完全不同</strong>。指挥 AI 改逻辑时最容易搞混这里。</p>
+
+      <div class="flow-animation" data-steps='[
+        {"highlight":"flow-g-1","label":"用户输入进入 intent_classify（关键词优先，再 LLM）"},
+        {"highlight":"flow-g-2","label":"命中「转人工/投诉/纠纷/账户异常/被盗」→ transfer_human 节点","packet":true,"from":"1","to":"2"},
+        {"highlight":"flow-g-3","label":"命中「推荐/预测/竞品/实时行情」→ reject 节点（静态拒答，不自动打转人工标志）","packet":true,"from":"1","to":"3"},
+        {"highlight":"flow-g-4","label":"正常走 interpret/generate/chitchat → sanitize 分治（1B）","packet":true,"from":"1","to":"4"},
+        {"highlight":"flow-g-4","label":"数据查询命中 → 回退 fact_text；RAG/闲聊 → COMPLIANCE_REJECT；均 transfer=false","packet":true,"from":"4","to":"4"}
+      ]'>
+        <div class="flow-actors">
+          <div class="flow-actor" id="flow-g-1"><span class="flow-actor-icon">💬</span><span>intent_classify</span></div>
+          <div class="flow-actor" id="flow-g-2"><span class="flow-actor-icon">👤</span><span>transfer_human</span></div>
+          <div class="flow-actor" id="flow-g-3"><span class="flow-actor-icon">🚫</span><span>reject</span></div>
+          <div class="flow-actor" id="flow-g-4"><span class="flow-actor-icon">🔍</span><span>sanitize_reply</span></div>
+        </div>
+        <p class="flow-step-label">点击「下一步」看决策分叉</p>
+        <div class="flow-controls">
+          <button class="btn flow-next-btn">下一步</button>
+          <button class="btn flow-reset-btn">重来</button>
+        </div>
+      </div>
+
+      <div class="pattern-cards">
+        <div class="pattern-card">
+          <h3>路径 A · 主动转人工</h3>
+          <p>关键词：<code>转人工</code>、<code>投诉</code>、<code>纠纷</code>、<code>账户异常</code>、<code>被盗</code> 等 → <code>TRANSFER_TEXT</code> + <code>transfer_to_human=True</code>。</p>
+        </div>
+        <div class="pattern-card">
+          <h3>路径 B · LLM 越界被拦（1B）</h3>
+          <p>数据查询 interpret 违禁 → <strong>回退 fact_text</strong>，transfer=false。RAG/闲聊违禁 → <code>COMPLIANCE_REJECT</code>，transfer=false。</p>
+        </div>
+        <div class="pattern-card">
+          <h3>路径 C · 边界外但不必转人工</h3>
+          <p>问「推荐稳赚基金」「明天会涨吗」→ <code>reject</code> 静态话术（如 <code>REJECT_ADVICE_TEXT</code>）。<strong>不</strong>自动打转人工标志；话术中可引导用户自行说「转人工」。</p>
+        </div>
+      </div>
+      <div class="callout callout-warning">
+        <strong>演示环境边界：</strong> 「建议转人工」只是 API 字段 + 前端橙色 Tag（<code>ChatPanel</code>），<strong>不会</strong>真的排队接入真人坐席——真转接要接呼叫中心/工单系统，那是产品层后续工作。
+      </div>
+    </div>
+
+    <div class="screen animate-in">
+      <h2>群聊动画：LLM 嘴瓢后被扫描层拦住</h2>
+      <p>客户问持仓，Tool 返回正常 fact_text，但 interpret 的 LLM 多嘴加了「建议您加仓」——扫描层介入。</p>
+
+      <div class="chat-window" id="chat-customer-m4">
+        <div class="chat-messages">
+          <div class="chat-message" data-msg="0" data-sender="user" style="display:none">
+            <div class="chat-avatar" style="background:#2D8B55">客</div>
+            <div class="chat-bubble">
+              <span class="chat-sender" style="color:#2D8B55">客户</span>
+              <p>我持仓情况怎么样？</p>
+            </div>
+          </div>
+          <div class="chat-message" data-msg="1" data-sender="tool" style="display:none">
+            <div class="chat-avatar" style="background:#1a5235">⑤</div>
+            <div class="chat-bubble">
+              <span class="chat-sender" style="color:#1a5235">tool_call</span>
+              <p>Core 返回 fact_text（脱敏模板，数字 100% 来自只读库）</p>
+            </div>
+          </div>
+          <div class="chat-message" data-msg="2" data-sender="llm" style="display:none">
+            <div class="chat-avatar" style="background:#7B6DAA">⑥</div>
+            <div class="chat-bubble">
+              <span class="chat-sender" style="color:#7B6DAA">interpret · LLM 草稿</span>
+              <p>「您目前持有 3 只基金…<strong>建议您加仓医药板块</strong>…」</p>
+            </div>
+          </div>
+          <div class="chat-message" data-msg="3" data-sender="guard" style="display:none">
+            <div class="chat-avatar" style="background:#B84A4A">③</div>
+            <div class="chat-bubble">
+              <span class="chat-sender" style="color:#B84A4A">sanitize 分治</span>
+              <p>命中「建议…加仓」→ <strong>丢弃 LLM 草稿，回退 Core fact_text</strong>（仍含「3 只产品」）</p>
+            </div>
+          </div>
+          <div class="chat-message" data-msg="4" data-sender="api" style="display:none">
+            <div class="chat-avatar" style="background:#2A7B9B">API</div>
+            <div class="chat-bubble">
+              <span class="chat-sender" style="color:#2A7B9B">返回前端</span>
+              <p><code>transfer_to_human: false</code> · 客户看到脱敏持仓事实，无橙色转人工 Tag</p>
+            </div>
+          </div>
+        </div>
+        <div class="chat-typing" id="chat-customer-m4-typing" style="display:none">
+          <div class="chat-avatar" id="chat-customer-m4-typing-avatar">…</div>
+          <div class="chat-typing-dots"><span class="typing-dot"></span><span class="typing-dot"></span><span class="typing-dot"></span></div>
+        </div>
+        <div class="chat-controls">
+          <button class="btn chat-next-btn">下一条</button>
+          <button class="btn chat-all-btn">全部播放</button>
+          <button class="btn chat-reset-btn">重播</button>
+          <span class="chat-progress"></span>
+        </div>
+      </div>
+    </div>
+
+    <div class="screen animate-in">
+      <h2>RAG 咨询还要加风险提示</h2>
+      <p>产品/政策/FAQ 类意图在 <code>generate</code> 通过后，若 intent 属于咨询类，会追加 <code>RISK_DISCLAIMER</code>（<code>should_add_disclaimer</code>）。这是「口吻」的另一面：<strong>该免责时必须免责</strong>，不是只有拦违规词。</p>
+
+      <div class="quiz-container" id="quiz-customer-m4">
+        <div class="quiz-question-block"
+             data-correct="option-b"
+             data-explanation-right="对。reject 走静态 REJECT_* 话术，不自动设 transfer_to_human；只有 transfer_human 节点（用户主动投诉/转人工等）才会打转人工标志。sanitize 命中也不再自动 transfer（1B）。"
+             data-explanation-wrong="reject 和 transfer_human 是两条线：边界外拒答 ≠ 自动转人工。">
+          <h3 class="quiz-question">客户说「推荐一个稳赚不赔的基金」，系统会怎么标记？</h3>
+          <div class="quiz-options">
+            <button class="quiz-option" data-value="option-a" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>transfer_to_human=True，直接排队人工</span>
+            </button>
+            <button class="quiz-option" data-value="option-b" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>走 reject 静态拒答，transfer 标志为 false（话术中可引导说「转人工」）</span>
+            </button>
+            <button class="quiz-option" data-value="option-c" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>走 RAG generate，正常回答产品列表</span>
+            </button>
+          </div>
+          <div class="quiz-feedback"></div>
+        </div>
+        <button class="quiz-check-btn" onclick="checkQuiz('quiz-customer-m4')">检查答案</button>
+        <button class="quiz-reset-btn" onclick="resetQuiz('quiz-customer-m4')">重做</button>
+      </div>
+
+      <div class="callout">
+        <strong>指挥 AI 改客服时的检查清单：</strong>
+        ① 改口吻 → 动客户线各分支 System Prompt 模板（<code>customer_prompts.py</code>）对应 SYSTEM，别只改前端；
+        ② 加新禁语 → 同时更新 <code>FORBIDDEN_TERMS</code> 和意图关键词路由；
+        ③ 加「必须转人工」场景 → 改 <code>_TRANSFER_KEYWORDS</code> 或 INTENT_SYSTEM 规则，别误放进 reject。
+      </div>
+
+      <p class="module-footer-note">相关文件：客户线各分支 System Prompt 模板（<code>app/service/customer_prompts.py</code>）· 回复违禁词合规扫描（<code>app/utils/compliance_guard.py</code>）· <code>web/src/components/chat/ChatPanel.tsx</code></p>
+    </div>
+  </div>
+</section>
+<section class="module" id="module-5">
+  <div class="module-inner">
+    <p class="eyebrow animate-in">模块 5 · 边界与接缝</p>
+    <h1 class="module-title animate-in">两套知识库、合规口径<br>和一期代码差在哪？</h1>
+    <p class="module-lead animate-in">
+      客服线「能答什么」不只看 LangGraph，还看<strong>知识库分家</strong>和<strong>合规文档 vs 一期实现</strong>。
+      指挥 AI 改 RAG 或「放开推荐」前，先对齐下面这张差分表。
+    </p>
+
+    <div class="screen animate-in">
+      <h2>两套 RAG：别灌错库</h2>
+      <div class="pattern-cards">
+        <div class="pattern-card">
+          <h3>客服 · fin_* 三库</h3>
+          <p>登录客户的对话编排（<code>customer_service.py</code>）和游客试聊编排（<code>visitor_service.py</code>）遇到产品/政策/FAQ 类问题时，都会交给 RAG 检索层（<code>rag_service.py</code>：把问题向量化后查 Milvus），从 <code>fin_product</code> · <code>fin_policy</code> · <code>fin_faq</code> 三个知识集合取片段。</p>
+        </div>
+        <div class="pattern-card">
+          <h3>顾问 · kb_product_rules</h3>
+          <p>理财师/风控通用 tool→llm→guard 编排（<code>agent_service.py</code>）的 <code>search_knowledge</code> Tool → 知识库对话 Tool 注册与分发（<code>kb_tools.py</code>）· 集合名不同，<strong>不能</strong>把顾问文档灌进 fin_*。</p>
+        </div>
+        <div class="pattern-card">
+          <h3>风控 · 不开放 search_knowledge</h3>
+          <p>知识库对话 Tool 注册与分发（<code>kb_tools.py</code>）注册表对 risk 关闭——风控对话走 RISK_TOOL_REGISTRY 四只读 Tool。</p>
+        </div>
+      </div>
+      <div class="callout callout-warning">
+        <strong>指挥 AI 误区：</strong> 「统一成一个知识库」听起来省事，但会破坏各 Agent 合规过滤与检索策略——要改先对契约和 <code>scripts/kb/</code> 脚本。
+      </div>
+    </div>
+
+    <div class="screen animate-in">
+      <h2>合规允许 vs 一期拒答（你拍板要讲的）</h2>
+      <p>合规文档里，客户 Agent 在<strong>过 R-02 + 附免责 + 标注需持证审核</strong>时，可以做「匹配说明」——但一期代码对<strong>主动推荐/预测类</strong>问题走 <code>reject</code> 静态拒答，更保守。</p>
+
+      <div class="translation-block">
+        <div class="translation-code">
+          <span class="translation-label">合规文档 · 允许方向</span>
+          <pre><code><span class="code-line">适当性匹配说明（C-11）</span>
+<span class="code-line">→ 系统判定 + 规则解读 + 免责声明</span>
+<span class="code-line">→ 禁止具体操作指令</span></code></pre>
+        </div>
+        <div class="translation-english">
+          <span class="translation-label">一期代码 · 实际行为</span>
+          <div class="translation-lines">
+            <p class="tl"><code>suitability_check</code> Tool：「我能买 R3 吗」「有哪些匹配产品」——<strong>允许</strong>。</p>
+            <p class="tl">「推荐稳赚基金」「买什么好」→ <code>reject</code> + <code>REJECT_ADVICE_TEXT</code>——<strong>直接拒</strong>。</p>
+            <p class="tl">要「放开推荐」= 产品决策 + 改 intent 路由 + 合规评审，不是只改 prompt 一句。</p>
+          </div>
+        </div>
+      </div>
+    </div>
+
+    <div class="screen animate-in">
+      <h2>群聊：同一客户，两种问法</h2>
+      <div class="chat-window" id="chat-customer-m5">
+        <div class="chat-messages">
+          <div class="chat-message" data-msg="0" data-sender="user" style="display:none">
+            <div class="chat-avatar" style="background:#2D8B55">客</div>
+            <div class="chat-bubble">
+              <span class="chat-sender" style="color:#2D8B55">客户 A</span>
+              <p>我能买 R3 产品吗？</p>
+            </div>
+          </div>
+          <div class="chat-message" data-msg="1" data-sender="ok" style="display:none">
+            <div class="chat-avatar" style="background:#236B44">✓</div>
+            <div class="chat-bubble">
+              <span class="chat-sender" style="color:#236B44">suitability_check</span>
+              <p>意图 <code>suitability_check</code> → Core 只读判定 → interpret 解释规则（合规允许路径）</p>
+            </div>
+          </div>
+          <div class="chat-message" data-msg="2" data-sender="user2" style="display:none">
+            <div class="chat-avatar" style="background:#2D8B55">客</div>
+            <div class="chat-bubble">
+              <span class="chat-sender" style="color:#2D8B55">客户 B</span>
+              <p>推荐一个稳赚的基金</p>
+            </div>
+          </div>
+          <div class="chat-message" data-msg="3" data-sender="rej" style="display:none">
+            <div class="chat-avatar" style="background:#B84A4A">⑨</div>
+            <div class="chat-bubble">
+              <span class="chat-sender" style="color:#B84A4A">reject</span>
+              <p><code>REJECT_ADVICE_TEXT</code> · transfer 标志 false · 话术中可引导「转人工」</p>
+            </div>
+          </div>
+        </div>
+        <div class="chat-typing" id="chat-customer-m5-typing" style="display:none">
+          <div class="chat-avatar" id="chat-customer-m5-typing-avatar">…</div>
+          <div class="chat-typing-dots"><span class="typing-dot"></span><span class="typing-dot"></span><span class="typing-dot"></span></div>
+        </div>
+        <div class="chat-controls">
+          <button class="btn chat-next-btn">下一条</button>
+          <button class="btn chat-all-btn">全部播放</button>
+          <button class="btn chat-reset-btn">重播</button>
+          <span class="chat-progress"></span>
+        </div>
+      </div>
+    </div>
+
+    <div class="screen animate-in">
+      <h2>游客与画像：客户看不见 L2/L3</h2>
+      <p>游客走游客试聊 9 节点编排（<code>visitor_service.py</code>）：无 JWT、无 Core 持仓查询、不写登录客户会话表。L1 画像由客服线后台抽槽写入；<span class="term" data-definition="L2 = 代理人侧 enrich 画像；L3 = 风控监测标签。客户 Agent 不可读 L3，也不应把 L2 内容念给客户。">L2/L3</span> 对客户不可见——合规上客户只能 enrich L1，不能替代正式风评。</p>
+
+      <div class="quiz-container" id="quiz-customer-m5">
+        <div class="quiz-question-block"
+             data-correct="option-a"
+             data-explanation-right="对。顾问 kb_product_rules 与客服 fin_* 是两套集合；混改会导致检索策略和合规过滤错乱。"
+             data-explanation-wrong="两套 RAG 分 Agent 是有意的，不能为了「统一」直接合并 Milvus 集合。">
+          <h3 class="quiz-question">AI 建议「把 kb 和 fin 合成一个 Milvus 集合简化维护」，你怎么回？</h3>
+          <div class="quiz-options">
+            <button class="quiz-option" data-value="option-a" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>不行，两套库各服务 customer/advisor，先对 scripts/kb 和契约</span>
+            </button>
+            <button class="quiz-option" data-value="option-b" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>好，合并后客服也能搜顾问话术</span>
+            </button>
+            <button class="quiz-option" data-value="option-c" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>好，让风控也开放 search_knowledge</span>
+            </button>
+          </div>
+          <div class="quiz-feedback"></div>
+        </div>
+        <button class="quiz-check-btn" onclick="checkQuiz('quiz-customer-m5')">检查答案</button>
+        <button class="quiz-reset-btn" onclick="resetQuiz('quiz-customer-m5')">重做</button>
+      </div>
+    </div>
+  </div>
+</section>
+<section class="module" id="module-6">
+  <div class="module-inner">
+    <p class="eyebrow animate-in">模块 6 · L0 与 L1 画像</p>
+    <h1 class="module-title animate-in">正式风评 vs 抽槽画像<br>Top-K 怎么注入 prompt？</h1>
+    <p class="module-lead animate-in">
+      客户线除了查 Core 真账，还有后台<strong>画像抽槽</strong>（L1）调措辞。
+      拍板铁律：<strong>L0 永远优先</strong>——正式 C1~C5、持仓数字、适当性判定听 Core，L1 不能覆盖。
+      偏好类槽位注入 prompt 时走 <strong>Top-K + 时间衰减</strong>（R1），不是全量平铺。
+    </p>
+
+    <div class="screen animate-in">
+      <h2>L0 vs L1：谁说了算？</h2>
+      <div class="pattern-cards">
+        <div class="pattern-card">
+          <h3>L0 · Core 正式数据</h3>
+          <p>风评 C1~C5、持仓/流水数字、适当性矩阵判定——100% 来自 Core 只读查询 Tool（<code>core_ro_tool.py</code>）的 <code>fact_text</code>。LLM 只解读，不能改写。</p>
+        </div>
+        <div class="pattern-card">
+          <h3>L1 · 对话 enrich 画像</h3>
+          <p>登录客户每 5 轮节流，后台线程跑画像抽槽与合并（<code>profile_service.py</code>）→ 写入 MySQL <code>style_tags</code> + Redis 热缓存。只影响 generate/chitchat 的措辞语境，<strong>不能</strong>替代正式风评。</p>
+        </div>
+        <div class="pattern-card">
+          <h3>撞车规则</h3>
+          <p>抽槽若与 L0 字段冲突（例如用户口述「我是 R5」但 Core 是 R3）→ <strong>永远听 L0</strong>。合并规则 D7：用户显式 <code>user_declared</code> 不被 <code>inferred</code> 覆盖。</p>
+        </div>
+      </div>
+    </div>
+
+    <div class="screen animate-in">
+      <h2>13 槽位 + confidence 门槛</h2>
+      <p>槽位表唯一来源：画像槽位定义（<code>profile_slots.py</code>）——13 个 path（含 C-08 <code>investment.allocation_target</code>），含 merge_mode 与 sensitivity。</p>
+      <div class="step-cards">
+        <div class="step-card">
+          <span class="step-num">①</span>
+          <p><strong>归一</strong> · <code>normalize_value</code><br>
+          例如「我喜欢货币基金」→ 映射到 9 类 <code>PRODUCT_TYPE_VOCAB</code>（不是具体 SKU 代码）。</p>
+        </div>
+        <div class="step-card">
+          <span class="step-num">②</span>
+          <p><strong>阈值</strong> · confidence ≥0.7（默认）/ ≥0.9（高敏）才写入；高敏 <code>inferred</code> 一律丢弃。</p>
+        </div>
+        <div class="step-card">
+          <span class="step-num">③</span>
+          <p><strong>合并</strong> · <code>merge_candidates</code><br>
+          单值 latest 覆盖；偏好/排除类 set_union 并集，并写 <code>items_meta</code>（R1）。</p>
+        </div>
+      </div>
+      <div class="callout callout-accent">
+        <strong>谁写 L1：</strong> 仅<strong>登录</strong>客户线（<code>customer_service.profile_maybe_extract</code>）；游客试聊不写画像。<br>
+        <strong>C-04 阈值槽：</strong> <code>threshold_pref_summary</code> → <code>customer_threshold_config</code>；达线提醒仅在查持仓时 inline。
+      </div>
+    </div>
+
+    <div class="screen animate-in">
+      <h2>R1 · 偏好 Top-K 注入</h2>
+      <div class="translation-block">
+        <div class="translation-code">
+          <span class="translation-label">注入前筛选 · 画像上下文渲染（profile_service.py）</span>
+          <pre><code><span class="code-line"><span class="code-comment"># settings 默认：top_k=3 · ttl=90d · half_life=30d</span></span>
+<span class="code-line">score = confidence × decay × (1 + log(mention_count))</span>
+<span class="code-line"><span class="code-comment"># 超 TTL 的偏好不进 prompt；取得分 Top-K 条</span></span></code></pre>
+        </div>
+        <div class="translation-english">
+          <span class="translation-label">白话</span>
+          <div class="translation-lines">
+            <p class="tl">客户说过很多偏好类型，但 prompt 里只带<strong>最近、反复提到</strong>的前几条，避免画像越积越长带偏 LLM。</p>
+            <p class="tl">很久没提过的偏好（超过 90 天）不再注入，但 MySQL 里仍保留，下次提到会刷新。</p>
+            <p class="tl">改 K 或 TTL → 动环境配置（<code>settings.py</code> 的 <code>profile_preference_*</code>），别在 prompt 里硬编码。</p>
+          </div>
+        </div>
+      </div>
+
+      <div class="quiz-container" id="quiz-customer-m6">
+        <div class="quiz-question-block"
+             data-correct="option-b"
+             data-explanation-right="对。L1 偏好只 enrich 措辞；持仓数字、正式风评、适当性结论必须来自 Core L0，画像不能覆盖。"
+             data-explanation-wrong="L0 正式数据优先级高于 L1 抽槽——这是合规硬阀门。">
+          <h3 class="quiz-question">客户口述「我是激进型 R5」，但 Core 风评是 R3，持仓查询应信谁？</h3>
+          <div class="quiz-options">
+            <button class="quiz-option" data-value="option-a" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>信 L1 抽槽，按 R5 解读</span>
+            </button>
+            <button class="quiz-option" data-value="option-b" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>信 Core L0 的 R3；L1 最多调闲聊措辞</span>
+            </button>
+            <button class="quiz-option" data-value="option-c" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>取两者平均</span>
+            </button>
+          </div>
+          <div class="quiz-feedback"></div>
+        </div>
+        <button class="quiz-check-btn" onclick="checkQuiz('quiz-customer-m6')">检查答案</button>
+        <button class="quiz-reset-btn" onclick="resetQuiz('quiz-customer-m6')">重做</button>
+      </div>
+
+      <p class="module-footer-note">相关文件：画像抽槽与合并（<code>app/service/profile_service.py</code>）· 槽位表（<code>app/config/profile_slots.py</code>）· 环境配置（<code>app/config/settings.py</code>）</p>
+    </div>
+  </div>
+</section>
+<section class="module" id="module-7">
+  <div class="module-inner">
+    <p class="eyebrow animate-in">模块 7 · Wave3 数据查询扩展</p>
+    <h1 class="module-title animate-in">净值、阈值、匹配说明<br>关键词怎么分流？</h1>
+    <p class="module-lead animate-in">
+      2026-09-10 批次在持仓/流水/风评/适当性之外，又接了<strong>净值查询（C-05）</strong>、<strong>亏损阈值（C-04）</strong>和<strong>「我能买什么」（C-11）</strong>。
+      指挥 AI 改意图时，先看<strong>关键词路由顺序</strong>——数据查询类必须优先于「帮我记住」类 save_note。
+    </p>
+
+    <div class="screen animate-in">
+      <h2>新增 intent 一览</h2>
+      <div class="pattern-cards">
+        <div class="pattern-card">
+          <h3>C-05 · nav_query</h3>
+          <p>「最新净值 / 单位净值 / 基金净值」→ Core 只读 <code>get_latest_nav</code>（快照）。<strong>「实时净值」</strong>仍走 <code>reject</code>（禁止实时盘口）。</p>
+        </div>
+        <div class="pattern-card">
+          <h3>C-04 · 阈值提醒</h3>
+          <p>用户说「亏 10% 提醒我」→ L1 槽 <code>threshold_pref_summary</code> + 写 <code>customer_threshold_config</code>；下次<strong>查持仓</strong>时组合加权盈亏达线 → 追加提醒 + <code>customer_notify_log</code>。</p>
+        </div>
+        <div class="pattern-card">
+          <h3>C-11 · 匹配说明</h3>
+          <p>「我能买什么 / 匹配产品 / 有哪些我能买」→ <code>suitability_check</code> + Core 可购列表。<strong>「推荐稳赚」</strong>仍 <code>reject</code>。</p>
+        </div>
+        <div class="pattern-card">
+          <h3>C-07 · 风评重测</h3>
+          <p>「重新测评 / 重做风评」扩进风评关键词 → 引导 App/网点；Agent 内<strong>不做</strong>问卷。</p>
+        </div>
+      </div>
+    </div>
+
+    <div class="screen animate-in">
+      <h2>关键词优先级（易踩坑）</h2>
+      <p>客户线各分支 System Prompt 模板（<code>customer_prompts.py</code>）里 <code>keyword_route</code> 顺序：</p>
+      <div class="step-cards">
+        <div class="step-card">
+          <span class="step-num">1</span>
+          <p>转人工 / reject（实时净值、推荐稳赚等）</p>
+        </div>
+        <div class="step-card">
+          <span class="step-num">2</span>
+          <p><strong>数据查询</strong>：流水 · 风评 · 适当性 · 持仓（含「最近的流水」）</p>
+        </div>
+        <div class="step-card">
+          <span class="step-num">3</span>
+          <p><code>save_note</code>（「帮我记住…」——但不含上面已命中的数据词）</p>
+        </div>
+        <div class="step-card">
+          <span class="step-num">4</span>
+          <p>匹配说明 · 净值查询</p>
+        </div>
+      </div>
+      <div class="callout callout-warning">
+        <strong>回归用例：</strong> 「帮我记住最近的流水」必须走 <code>transaction_query</code>，不能误进 save_note——见 <code>test_wave5_notes.py</code>。
+      </div>
+    </div>
+
+    <div class="screen animate-in">
+      <div class="translation-block">
+        <div class="translation-code">
+          <span class="translation-label">C-04 · 亏损阈值服务（threshold_service.py）</span>
+          <pre><code><span class="code-line"><span class="code-comment"># 画像抽槽 → sync_threshold_from_summary</span></span>
+<span class="code-line"><span class="code-comment"># query_holdings 末尾 → build_threshold_alert</span></span>
+<span class="code-line"><span class="code-keyword">if</span> loss_pct >= threshold:</span>
+<span class="code-line">    append alert + insert_notify_log</span></code></pre>
+        </div>
+        <div class="translation-english">
+          <span class="translation-label">白话</span>
+          <div class="translation-lines">
+            <p class="tl">阈值不是 push 通知——只有客户<strong>再来问持仓</strong>时才 inline 提醒。</p>
+            <p class="tl">组合盈亏按持仓<strong>市值加权</strong>算，不是单只基金。</p>
+            <p class="tl">改阈值：口述新比例 → 画像摘要更新 → config upsert。</p>
+          </div>
+        </div>
+      </div>
+    </div>
+
+    <div class="screen animate-in">
+      <h2>1B 仍覆盖 nav_query</h2>
+      <p>违禁词扫描后的分治（<code>sanitize_postprocess.py</code>）把 <code>nav_query</code> 算进数据查询 intent——interpret 嘴瓢时仍回退 Core <code>fact_text</code>。</p>
+
+      <div class="quiz-container" id="quiz-customer-m7">
+        <div class="quiz-question-block"
+             data-correct="option-b"
+             data-explanation-right="对。C-05 走 Core 最新净值快照；「实时净值」是 reject 关键词，不是 nav_query。"
+             data-explanation-wrong="实时盘口/爬虫不在一期范围；见 C-05 选型文档。">
+          <h3 class="quiz-question">客户问「这只基金实时净值多少」，系统怎么走？</h3>
+          <div class="quiz-options">
+            <button class="quiz-option" data-value="option-a" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>nav_query → Core get_latest_nav</span>
+            </button>
+            <button class="quiz-option" data-value="option-b" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>reject · 实时净值禁止</span>
+            </button>
+            <button class="quiz-option" data-value="option-c" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>RAG fin_product 查费率</span>
+            </button>
+          </div>
+          <div class="quiz-feedback"></div>
+        </div>
+        <button class="quiz-check-btn" onclick="checkQuiz('quiz-customer-m7')">检查答案</button>
+        <button class="quiz-reset-btn" onclick="resetQuiz('quiz-customer-m7')">重做</button>
+      </div>
+
+      <p class="module-footer-note">相关文件：客户线意图模板（<code>customer_prompts.py</code>）· Core 只读 Tool（<code>core_ro_tool.py</code>）· 阈值服务（<code>threshold_service.py</code>）· 测试 <code>test_threshold_service.py</code> · <code>test_wave2_prompts.py</code></p>
+    </div>
+  </div>
 </section>
   </main>
 
diff --git a/docs/course/jinrong-module-customer/main.js b/docs/course/jinrong-module-customer/main.js
index 7150a69..410548e 100644
--- a/docs/course/jinrong-module-customer/main.js
+++ b/docs/course/jinrong-module-customer/main.js
@@ -486,13 +486,17 @@
 
   /* ── LAYER TOGGLE ──────────────────────────────────────────── */
   window.showLayer = function (layerId, btn) {
-    const demo = btn ? btn.closest('.layer-demo') : null;
+    const tab = btn || (window.event && window.event.currentTarget);
+    if (!tab || !tab.closest) return;
+    const demo = tab.closest('.layer-demo');
     if (!demo) return;
-    $$('.layer', demo).forEach(l => l.style.display = 'none');
+    $$('.layer', demo).forEach(l => { l.style.display = 'none'; });
     $$('.layer-tab', demo).forEach(t => t.classList.remove('active'));
-    const layer = $('#' + layerId);
+    const esc = typeof CSS !== 'undefined' && CSS.escape ? CSS.escape(layerId) : layerId.replace(/[^\w-]/g, '');
+    let layer = demo.querySelector('#' + esc);
+    if (!layer) layer = demo.querySelector('#layer-' + esc);
     if (layer) layer.style.display = 'block';
-    btn.classList.add('active');
+    tab.classList.add('active');
   };
 
 })();
diff --git a/docs/course/jinrong-module-customer/modules/01-capabilities.html b/docs/course/jinrong-module-customer/modules/01-capabilities.html
index cdbbe06..d720947 100644
--- a/docs/course/jinrong-module-customer/modules/01-capabilities.html
+++ b/docs/course/jinrong-module-customer/modules/01-capabilities.html
@@ -6,7 +6,7 @@
       登录客户（如 <code>CUST-9527</code>）打开「客户助手」后，可走<strong>同步</strong>或
       <span class="term" data-definition="SSE = Server-Sent Events，服务器像打字一样一段段把回复推给浏览器，不用等整段话生成完。">SSE 流式</span>
       对话。未登录访客另有<strong>游客试聊</strong>（只 RAG、不查持仓）。
-      2026-09 <code>merger</code> 分支：客户线 SSE 已接通，测试基线 774 passed。
+      2026-09 <code>merger</code> 分支：客户线 SSE 已接通，测试基线 **786 passed**。
     </p>
 
     <div class="screen animate-in">
@@ -17,8 +17,8 @@
           <p><code>POST /api/chat/stream</code> 或 <code>POST /api/chat</code>，请求头 <code>X-Agent-Type: customer</code> + Bearer JWT。</p>
         </div>
         <div class="pattern-card">
-          <h3>持仓 / 流水 / 风评</h3>
-          <p>意图命中后走 <code>core_ro_tool</code> 查 Core 模拟库；<code>customer_id</code> 只来自 JWT，不信用户口述客户号。</p>
+          <h3>持仓 / 流水 / 风评 / 净值</h3>
+          <p>意图命中后走 Core 模拟库只读查询 Tool（<code>core_ro_tool.py</code>）；含 C-05 最新净值（非实时）；C-04 查持仓时可 inline 阈值提醒。</p>
         </div>
         <div class="pattern-card">
           <h3>产品规则 RAG</h3>
@@ -26,28 +26,28 @@
         </div>
         <div class="pattern-card">
           <h3>游客试聊</h3>
-          <p><code>POST /api/chat/visitor</code> 免登录，<code>visitor_service</code> 9 节点图，不写客户会话表。</p>
+          <p><code>POST /api/chat/visitor</code> 免登录，游客试聊 9 节点编排（<code>visitor_service.py</code>），不写客户会话表。</p>
         </div>
       </div>
       <div class="callout callout-accent">
-        <strong>和理财师线的区别：</strong> 客户走独立 <code>customer_service.py</code>（14 节点 LangGraph），<strong>不走</strong> <code>agent_service</code> 那条 tool→llm→guard 通用图。
+        <strong>和理财师线的区别：</strong> 客户线走登录客户 14 节点 LangGraph 编排（<code>customer_service.py</code>），<strong>不走</strong> 顾问通用 tool→llm→guard 编排（<code>agent_service.py</code>）。
       </div>
     </div>
 
     <div class="screen animate-in">
       <h2>数据流：浏览器问「我持仓多少」</h2>
-      <p>客户发消息后，<code>chat.py</code> 按 <code>X-Agent-Type</code> 分流到客户编排，再查 Core。</p>
+      <p>客户发消息后，四 Agent 对话 HTTP 入口（<code>chat.py</code>）按 <code>X-Agent-Type</code> 分流到客户编排，再查 Core。</p>
 
       <div class="flow-animation" data-steps='[
         {"highlight":"flow-actor-1","label":"浏览器：ChatPanel 带 JWT + X-Agent-Type: customer"},
-        {"highlight":"flow-actor-2","label":"chat.py：鉴权、建 session、分流 customer 分支","packet":true,"from":"1","to":"2"},
+        {"highlight":"flow-actor-2","label":"四 Agent 对话 HTTP 入口（chat.py）：鉴权、建 session、分流 customer 分支","packet":true,"from":"1","to":"2"},
         {"highlight":"flow-actor-3","label":"customer_service：意图→tool_call→interpret（数值来自 Core）","packet":true,"from":"2","to":"3"},
-        {"highlight":"flow-actor-4","label":"core_ro_tool：SQL 只读 + fact_text 脱敏模板","packet":true,"from":"3","to":"4"},
+        {"highlight":"flow-actor-4","label":"Core 只读查询 Tool（core_ro_tool.py）：SQL 只读 + fact_text 脱敏模板","packet":true,"from":"3","to":"4"},
         {"highlight":"flow-actor-1","label":"SSE 分块推送完整回复 + MySQL 落会话","packet":true,"from":"4","to":"1"}
       ]'>
         <div class="flow-actors">
           <div class="flow-actor" id="flow-actor-1"><span class="flow-actor-icon">🖥</span><span>浏览器</span></div>
-          <div class="flow-actor" id="flow-actor-2"><span class="flow-actor-icon">🚪</span><span>chat.py</span></div>
+          <div class="flow-actor" id="flow-actor-2"><span class="flow-actor-icon">🚪</span><span>对话 HTTP 入口（chat.py）</span></div>
           <div class="flow-actor" id="flow-actor-3"><span class="flow-actor-icon">🤖</span><span>customer_service</span></div>
           <div class="flow-actor" id="flow-actor-4"><span class="flow-actor-icon">🗄</span><span>core_ro_tool</span></div>
         </div>
@@ -62,7 +62,7 @@
     <div class="screen animate-in">
       <div class="translation-block">
         <div class="translation-code">
-          <span class="translation-label">入口 · chat.py</span>
+          <span class="translation-label">入口 · 四 Agent 对话 HTTP 入口（chat.py）</span>
           <pre><code><span class="code-line"><span class="code-keyword">if</span> agent_type == <span class="code-string">"customer"</span>:</span>
 <span class="code-line">    host_ctx = host_auth_for_customer_service(auth, trace_id=trace_id)</span>
 <span class="code-line">    customer_prep = prepare_customer_stream(</span>
diff --git a/docs/course/jinrong-module-customer/modules/02-langgraph.html b/docs/course/jinrong-module-customer/modules/02-langgraph.html
index 9a9b619..04dda82 100644
--- a/docs/course/jinrong-module-customer/modules/02-langgraph.html
+++ b/docs/course/jinrong-module-customer/modules/02-langgraph.html
@@ -3,8 +3,8 @@
     <p class="eyebrow animate-in">模块 2 · 编排内核</p>
     <h1 class="module-title animate-in">14 节点 LangGraph：<br>从回忆到归档</h1>
     <p class="module-lead animate-in">
-      客户线不走 <code>agent_service</code> 那张三张牌（tool→llm→guard），而是
-      <code>customer_service.py</code> 里一张更大的
+      客户线不走顾问通用 tool→llm→guard 编排（<code>agent_service.py</code>），而是
+      登录客户 14 节点 LangGraph 编排（<code>customer_service.py</code>）里一张更大的
       <span class="term" data-definition="LangGraph = 用「节点 + 边」画出的对话流程图；每个节点是一段 Python 函数，边决定下一步走哪条分支。">LangGraph</span>。
       入口永远是 <code>recall_memory</code>，出口经 <code>save_memory</code> 写记忆后收尾。
     </p>
@@ -16,7 +16,7 @@
         <div class="badge-item"><span class="badge-code">2</span><span class="badge-desc">intent_classify · LLM 分意图</span></div>
         <div class="badge-item"><span class="badge-code">3</span><span class="badge-desc">rag_search · fin_* Milvus</span></div>
         <div class="badge-item"><span class="badge-code">4</span><span class="badge-desc">param_extract · 抽查询参数</span></div>
-        <div class="badge-item"><span class="badge-code">5</span><span class="badge-desc">tool_call · core_ro_tool</span></div>
+        <div class="badge-item"><span class="badge-code">5</span><span class="badge-desc">tool_call · Core 只读 Tool（core_ro_tool.py）</span></div>
         <div class="badge-item"><span class="badge-code">6</span><span class="badge-desc">interpret · 解读 fact_text</span></div>
         <div class="badge-item"><span class="badge-code">7</span><span class="badge-desc">generate · RAG 拼回复</span></div>
         <div class="badge-item"><span class="badge-code">8</span><span class="badge-desc">chitchat · 闲聊</span></div>
@@ -29,6 +29,7 @@
       </div>
       <div class="callout callout-accent">
         <strong>分支规则：</strong> <code>intent_classify</code> 之后走 RAG（产品/政策/FAQ）、走 Tool（持仓/流水/风评）、或走静态话术（拒绝/转人工/闲聊）。所有生成分支最后都汇入 <code>save_memory</code>。
+        <strong>口吻护栏与转人工决策</strong>见模块 4。
       </div>
     </div>
 
@@ -132,7 +133,7 @@
     <div class="screen animate-in">
       <div class="translation-block">
         <div class="translation-code">
-          <span class="translation-label">图构建 · customer_service.py</span>
+          <span class="translation-label">图构建 · 登录客户 14 节点 LangGraph 编排（customer_service.py）</span>
           <pre><code><span class="code-line">g.set_entry_point(<span class="code-string">"recall_memory"</span>)</span>
 <span class="code-line">g.add_edge(<span class="code-string">"recall_memory"</span>, <span class="code-string">"intent_classify"</span>)</span>
 <span class="code-line">g.add_conditional_edges(<span class="code-string">"intent_classify"</span>, _route, {...})</span>
diff --git a/docs/course/jinrong-module-customer/modules/03-stream-rules.html b/docs/course/jinrong-module-customer/modules/03-stream-rules.html
index 5e56885..6fc5a3f 100644
--- a/docs/course/jinrong-module-customer/modules/03-stream-rules.html
+++ b/docs/course/jinrong-module-customer/modules/03-stream-rules.html
@@ -13,15 +13,15 @@
       <div class="pattern-cards">
         <div class="pattern-card">
           <h3>铁律 1 · 数值不经过 LLM 编造</h3>
-          <p>持仓、流水、风评等查询结果 100% 来自 <code>core_ro_tool</code> 的 <code>fact_text</code>。LLM 在 <code>interpret</code> / <code>generate</code> 里只做解读与组织语言，不能自己算数。</p>
+          <p>持仓、流水、风评等查询结果 100% 来自 Core 只读查询 Tool（<code>core_ro_tool.py</code>）的 <code>fact_text</code>。LLM 在 <code>interpret</code> / <code>generate</code> 里只做解读与组织语言，不能自己算数。</p>
         </div>
         <div class="pattern-card">
           <h3>铁律 2 · customer_id 只来自 JWT</h3>
-          <p><code>chat.py</code> 在进图之前已从令牌解析客户号并做归属校验。图内 <code>state["customer_id"]</code> 不信用户消息里的「帮我查 CUST-xxx」。</p>
+          <p>四 Agent 对话 HTTP 入口（<code>chat.py</code>）在进图之前已从令牌解析客户号并做归属校验。图内 <code>state["customer_id"]</code> 不信用户消息里的「帮我查 CUST-xxx」。</p>
         </div>
       </div>
       <div class="callout callout-warning">
-        <strong>和 advisor 线的差异：</strong> 理财师走 <code>agent_service</code> 的 tool→llm→guard；客户走独立 14 节点图。别混用 <code>run_tool</code> 关键词意图那套来改客户 RAG 分支。
+        <strong>和 advisor 线的差异：</strong> 理财师走顾问通用编排（<code>agent_service.py</code>）的 tool→llm→guard；客户走独立 14 节点图。别混用对话 Tool 编排（<code>tool_service.py</code>）关键词意图那套来改客户 RAG 分支。
       </div>
     </div>
 
@@ -49,7 +49,7 @@
         <div class="translation-english">
           <span class="translation-label">白话</span>
           <div class="translation-lines">
-            <p class="tl">入参里的 customer_id 是 chat.py 验完 JWT 后塞进来的，函数内部不再解析用户文本。</p>
+            <p class="tl">入参里的 customer_id 是四 Agent 对话 HTTP 入口（<code>chat.py</code>）验完 JWT 后塞进来的，函数内部不再解析用户文本。</p>
             <p class="tl">先拿到完整 reply（含 intent、是否转人工、是否附免责），再切片给 SSE 层逐块写。</p>
             <p class="tl">改「真流式」要先动 LangGraph 执行模型，不是只改前端 ChatPanel。</p>
           </div>
@@ -61,14 +61,14 @@
       <h2>相关文件（改流式 / 铁律时打开这些）</h2>
       <div class="file-tree animate-in">
         <div class="tree-item tree-folder">app/service/</div>
-        <div class="tree-item tree-indent">customer_service.py — 14 节点图 + prepare_customer_stream</div>
-        <div class="tree-item tree-indent">visitor_service.py — 游客 9 节点（无 Tool 查持仓）</div>
-        <div class="tree-item tree-indent">rag_service.py — fin_faq / fin_product / fin_policy</div>
+        <div class="tree-item tree-indent">登录客户 14 节点 LangGraph 编排（customer_service.py）— prepare_customer_stream</div>
+        <div class="tree-item tree-indent">游客试聊 9 节点 LangGraph 编排（visitor_service.py）— 无 Tool 查持仓</div>
+        <div class="tree-item tree-indent">RAG 检索层（rag_service.py）— fin_faq / fin_product / fin_policy</div>
         <div class="tree-item tree-folder">app/api/</div>
-        <div class="tree-item tree-indent">chat.py — customer 分支分流 + SSE 写帧</div>
-        <div class="tree-item tree-indent">auth_adapter.py — host_auth_for_customer_service</div>
+        <div class="tree-item tree-indent">四 Agent 对话 HTTP 入口（chat.py）— customer 分支分流 + SSE 写帧</div>
+        <div class="tree-item tree-indent">宿主 AuthContext → 模块 AuthContext 适配（auth_adapter.py）— host_auth_for_customer_service</div>
         <div class="tree-item tree-folder">app/tool/</div>
-        <div class="tree-item tree-indent">core_ro_tool.py — query_holdings / query_trades 等</div>
+        <div class="tree-item tree-indent">客户 Agent Core 只读查询工具（core_ro_tool.py）— query_holdings / query_trades 等</div>
       </div>
 
       <div class="quiz-container" id="quiz-customer-m3">
diff --git a/docs/course/jinrong-module-customer/modules/04-guardrails.html b/docs/course/jinrong-module-customer/modules/04-guardrails.html
new file mode 100644
index 0000000..1299f44
--- /dev/null
+++ b/docs/course/jinrong-module-customer/modules/04-guardrails.html
@@ -0,0 +1,193 @@
+<section class="module" id="module-4">
+  <div class="module-inner">
+    <p class="eyebrow animate-in">模块 4 · 口吻与转人工</p>
+    <h1 class="module-title animate-in">专业口吻怎么「锁住」？<br>什么时候该转人工？</h1>
+    <p class="module-lead animate-in">
+      机制课讲了 LangGraph 怎么走，但客服线还有两条你指挥 AI 时最常碰的线：
+      <strong>回复别漂成投顾/推销员</strong>，以及<strong>什么时候打「建议转人工」</strong>。
+      代码里不是单靠「写个好 prompt」，而是<strong>三层滤网 + 一条主动转人工路径</strong>（sanitize 命中<strong>不再</strong>自动转人工，拍板 1B）。
+    </p>
+
+    <div class="screen animate-in">
+      <h2>三层滤网：防止口吻漂移</h2>
+      <p>可以把客服回复想成「过三道闸」——前面两道尽量写对，最后一道不管 LLM 说什么都要拦违规词。</p>
+      <div class="step-cards">
+        <div class="step-card">
+          <span class="step-num">①</span>
+          <p><strong>Prompt 层</strong> · 客户线各分支 System Prompt 模板（<code>customer_prompts.py</code>）<br>
+          每个生成分支有独立 system 模板（<code>INTERPRET_SYSTEM</code> / <code>GENERATE_SYSTEM</code> / <code>CHITCHAT_SYSTEM</code>），开头就定身份：「金融客服助手（已登录客户模式）」——禁止投顾话术、禁止预测、画像只调措辞<strong>不能念出</strong>。</p>
+        </div>
+        <div class="step-card">
+          <span class="step-num">②</span>
+          <p><strong>记忆层</strong> · <code>recall_memory</code><br>
+          咨询走 <code>consult_memory</code>、闲聊走 <code>chitchat_memory</code>，再注入 <code>profile_context</code>。让回复有连续语境，但 prompt 里写死：不得主动复述年龄/收入等画像字段。</p>
+        </div>
+        <div class="step-card">
+          <span class="step-num">③</span>
+          <p><strong>事后扫描</strong> · <code>finalize_sanitized_reply()</code>（<code>sanitize_postprocess.py</code>）<br>
+          <code>interpret</code> / <code>generate</code> / <code>chitchat</code> 产出后过违禁词正则。命中后：<strong>数据查询类</strong>（含 nav_query）回退 Core <code>fact_text</code>；RAG/闲聊替换 <code>COMPLIANCE_REJECT</code>——<strong>均不</strong>自动 <code>transfer_to_human</code>。<strong>游客线已对齐</strong>。</p>
+        </div>
+      </div>
+      <div class="callout callout-accent">
+        <strong>入口还有第 0 道闸：</strong> 四 Agent 对话 HTTP 入口（<code>chat.py</code>）的 <span class="term" data-definition="input_guard = 进 LangGraph 之前对用户输入做检查：注入短语、超长、频率限制；命中直接拒答并写 input_guard_log。">input_guard</span> 在进图之前就拦注入/超长——这类请求根本到不了 LLM。
+      </div>
+    </div>
+
+    <div class="screen animate-in">
+      <div class="translation-block">
+        <div class="translation-code">
+          <span class="translation-label">事后扫描 · 共用分治（sanitize_postprocess.py）</span>
+          <pre><code><span class="code-line"><span class="code-keyword">def</span> finalize_sanitized_reply(reply, *, intent, fact_text):</span>
+<span class="code-line">    safe, hit = sanitize_reply(reply)</span>
+<span class="code-line">    <span class="code-keyword">if not</span> hit: <span class="code-keyword">return</span> safe, <span class="code-keyword">False</span></span>
+<span class="code-line">    <span class="code-keyword">if</span> intent <span class="code-keyword">in</span> DATA_QUERY <span class="code-keyword">and</span> fact_text:</span>
+<span class="code-line">        <span class="code-keyword">return</span> fact_text, <span class="code-keyword">False</span>  <span class="code-comment"># 1B：保真账，不转人工</span></span>
+<span class="code-line">    <span class="code-keyword">return</span> COMPLIANCE_REJECT, <span class="code-keyword">False</span></span></code></pre>
+        </div>
+        <div class="translation-english">
+          <span class="translation-label">白话</span>
+          <div class="translation-lines">
+            <p class="tl">数据查询分支：LLM 嘴瓢时<strong>回退 Core fact_text</strong>，客户仍能看到「持有 3 只产品」等真数。</p>
+            <p class="tl">RAG/闲聊分支：替换为固定拒答，但<strong>不打</strong>转人工标志——除非用户原话已是投诉/转人工。</p>
+            <p class="tl">底层 <code>sanitize_reply</code> 仍负责扫违禁词；分治逻辑在 customer 编排层。</p>
+          </div>
+        </div>
+      </div>
+    </div>
+
+    <div class="screen animate-in">
+      <h2>转人工 vs 直接拒绝：别混成一条线</h2>
+      <p>模块 2 列出了 <code>reject</code> 和 <code>transfer_human</code> 两个节点，但<strong>触发条件完全不同</strong>。指挥 AI 改逻辑时最容易搞混这里。</p>
+
+      <div class="flow-animation" data-steps='[
+        {"highlight":"flow-g-1","label":"用户输入进入 intent_classify（关键词优先，再 LLM）"},
+        {"highlight":"flow-g-2","label":"命中「转人工/投诉/纠纷/账户异常/被盗」→ transfer_human 节点","packet":true,"from":"1","to":"2"},
+        {"highlight":"flow-g-3","label":"命中「推荐/预测/竞品/实时行情」→ reject 节点（静态拒答，不自动打转人工标志）","packet":true,"from":"1","to":"3"},
+        {"highlight":"flow-g-4","label":"正常走 interpret/generate/chitchat → sanitize 分治（1B）","packet":true,"from":"1","to":"4"},
+        {"highlight":"flow-g-4","label":"数据查询命中 → 回退 fact_text；RAG/闲聊 → COMPLIANCE_REJECT；均 transfer=false","packet":true,"from":"4","to":"4"}
+      ]'>
+        <div class="flow-actors">
+          <div class="flow-actor" id="flow-g-1"><span class="flow-actor-icon">💬</span><span>intent_classify</span></div>
+          <div class="flow-actor" id="flow-g-2"><span class="flow-actor-icon">👤</span><span>transfer_human</span></div>
+          <div class="flow-actor" id="flow-g-3"><span class="flow-actor-icon">🚫</span><span>reject</span></div>
+          <div class="flow-actor" id="flow-g-4"><span class="flow-actor-icon">🔍</span><span>sanitize_reply</span></div>
+        </div>
+        <p class="flow-step-label">点击「下一步」看决策分叉</p>
+        <div class="flow-controls">
+          <button class="btn flow-next-btn">下一步</button>
+          <button class="btn flow-reset-btn">重来</button>
+        </div>
+      </div>
+
+      <div class="pattern-cards">
+        <div class="pattern-card">
+          <h3>路径 A · 主动转人工</h3>
+          <p>关键词：<code>转人工</code>、<code>投诉</code>、<code>纠纷</code>、<code>账户异常</code>、<code>被盗</code> 等 → <code>TRANSFER_TEXT</code> + <code>transfer_to_human=True</code>。</p>
+        </div>
+        <div class="pattern-card">
+          <h3>路径 B · LLM 越界被拦（1B）</h3>
+          <p>数据查询 interpret 违禁 → <strong>回退 fact_text</strong>，transfer=false。RAG/闲聊违禁 → <code>COMPLIANCE_REJECT</code>，transfer=false。</p>
+        </div>
+        <div class="pattern-card">
+          <h3>路径 C · 边界外但不必转人工</h3>
+          <p>问「推荐稳赚基金」「明天会涨吗」→ <code>reject</code> 静态话术（如 <code>REJECT_ADVICE_TEXT</code>）。<strong>不</strong>自动打转人工标志；话术中可引导用户自行说「转人工」。</p>
+        </div>
+      </div>
+      <div class="callout callout-warning">
+        <strong>演示环境边界：</strong> 「建议转人工」只是 API 字段 + 前端橙色 Tag（<code>ChatPanel</code>），<strong>不会</strong>真的排队接入真人坐席——真转接要接呼叫中心/工单系统，那是产品层后续工作。
+      </div>
+    </div>
+
+    <div class="screen animate-in">
+      <h2>群聊动画：LLM 嘴瓢后被扫描层拦住</h2>
+      <p>客户问持仓，Tool 返回正常 fact_text，但 interpret 的 LLM 多嘴加了「建议您加仓」——扫描层介入。</p>
+
+      <div class="chat-window" id="chat-customer-m4">
+        <div class="chat-messages">
+          <div class="chat-message" data-msg="0" data-sender="user" style="display:none">
+            <div class="chat-avatar" style="background:#2D8B55">客</div>
+            <div class="chat-bubble">
+              <span class="chat-sender" style="color:#2D8B55">客户</span>
+              <p>我持仓情况怎么样？</p>
+            </div>
+          </div>
+          <div class="chat-message" data-msg="1" data-sender="tool" style="display:none">
+            <div class="chat-avatar" style="background:#1a5235">⑤</div>
+            <div class="chat-bubble">
+              <span class="chat-sender" style="color:#1a5235">tool_call</span>
+              <p>Core 返回 fact_text（脱敏模板，数字 100% 来自只读库）</p>
+            </div>
+          </div>
+          <div class="chat-message" data-msg="2" data-sender="llm" style="display:none">
+            <div class="chat-avatar" style="background:#7B6DAA">⑥</div>
+            <div class="chat-bubble">
+              <span class="chat-sender" style="color:#7B6DAA">interpret · LLM 草稿</span>
+              <p>「您目前持有 3 只基金…<strong>建议您加仓医药板块</strong>…」</p>
+            </div>
+          </div>
+          <div class="chat-message" data-msg="3" data-sender="guard" style="display:none">
+            <div class="chat-avatar" style="background:#B84A4A">③</div>
+            <div class="chat-bubble">
+              <span class="chat-sender" style="color:#B84A4A">sanitize 分治</span>
+              <p>命中「建议…加仓」→ <strong>丢弃 LLM 草稿，回退 Core fact_text</strong>（仍含「3 只产品」）</p>
+            </div>
+          </div>
+          <div class="chat-message" data-msg="4" data-sender="api" style="display:none">
+            <div class="chat-avatar" style="background:#2A7B9B">API</div>
+            <div class="chat-bubble">
+              <span class="chat-sender" style="color:#2A7B9B">返回前端</span>
+              <p><code>transfer_to_human: false</code> · 客户看到脱敏持仓事实，无橙色转人工 Tag</p>
+            </div>
+          </div>
+        </div>
+        <div class="chat-typing" id="chat-customer-m4-typing" style="display:none">
+          <div class="chat-avatar" id="chat-customer-m4-typing-avatar">…</div>
+          <div class="chat-typing-dots"><span class="typing-dot"></span><span class="typing-dot"></span><span class="typing-dot"></span></div>
+        </div>
+        <div class="chat-controls">
+          <button class="btn chat-next-btn">下一条</button>
+          <button class="btn chat-all-btn">全部播放</button>
+          <button class="btn chat-reset-btn">重播</button>
+          <span class="chat-progress"></span>
+        </div>
+      </div>
+    </div>
+
+    <div class="screen animate-in">
+      <h2>RAG 咨询还要加风险提示</h2>
+      <p>产品/政策/FAQ 类意图在 <code>generate</code> 通过后，若 intent 属于咨询类，会追加 <code>RISK_DISCLAIMER</code>（<code>should_add_disclaimer</code>）。这是「口吻」的另一面：<strong>该免责时必须免责</strong>，不是只有拦违规词。</p>
+
+      <div class="quiz-container" id="quiz-customer-m4">
+        <div class="quiz-question-block"
+             data-correct="option-b"
+             data-explanation-right="对。reject 走静态 REJECT_* 话术，不自动设 transfer_to_human；只有 transfer_human 节点（用户主动投诉/转人工等）才会打转人工标志。sanitize 命中也不再自动 transfer（1B）。"
+             data-explanation-wrong="reject 和 transfer_human 是两条线：边界外拒答 ≠ 自动转人工。">
+          <h3 class="quiz-question">客户说「推荐一个稳赚不赔的基金」，系统会怎么标记？</h3>
+          <div class="quiz-options">
+            <button class="quiz-option" data-value="option-a" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>transfer_to_human=True，直接排队人工</span>
+            </button>
+            <button class="quiz-option" data-value="option-b" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>走 reject 静态拒答，transfer 标志为 false（话术中可引导说「转人工」）</span>
+            </button>
+            <button class="quiz-option" data-value="option-c" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>走 RAG generate，正常回答产品列表</span>
+            </button>
+          </div>
+          <div class="quiz-feedback"></div>
+        </div>
+        <button class="quiz-check-btn" onclick="checkQuiz('quiz-customer-m4')">检查答案</button>
+        <button class="quiz-reset-btn" onclick="resetQuiz('quiz-customer-m4')">重做</button>
+      </div>
+
+      <div class="callout">
+        <strong>指挥 AI 改客服时的检查清单：</strong>
+        ① 改口吻 → 动客户线各分支 System Prompt 模板（<code>customer_prompts.py</code>）对应 SYSTEM，别只改前端；
+        ② 加新禁语 → 同时更新 <code>FORBIDDEN_TERMS</code> 和意图关键词路由；
+        ③ 加「必须转人工」场景 → 改 <code>_TRANSFER_KEYWORDS</code> 或 INTENT_SYSTEM 规则，别误放进 reject。
+      </div>
+
+      <p class="module-footer-note">相关文件：客户线各分支 System Prompt 模板（<code>app/service/customer_prompts.py</code>）· 回复违禁词合规扫描（<code>app/utils/compliance_guard.py</code>）· <code>web/src/components/chat/ChatPanel.tsx</code></p>
+    </div>
+  </div>
+</section>
diff --git a/docs/course/jinrong-module-customer/modules/05-boundaries.html b/docs/course/jinrong-module-customer/modules/05-boundaries.html
new file mode 100644
index 0000000..c7df909
--- /dev/null
+++ b/docs/course/jinrong-module-customer/modules/05-boundaries.html
@@ -0,0 +1,127 @@
+<section class="module" id="module-5">
+  <div class="module-inner">
+    <p class="eyebrow animate-in">模块 5 · 边界与接缝</p>
+    <h1 class="module-title animate-in">两套知识库、合规口径<br>和一期代码差在哪？</h1>
+    <p class="module-lead animate-in">
+      客服线「能答什么」不只看 LangGraph，还看<strong>知识库分家</strong>和<strong>合规文档 vs 一期实现</strong>。
+      指挥 AI 改 RAG 或「放开推荐」前，先对齐下面这张差分表。
+    </p>
+
+    <div class="screen animate-in">
+      <h2>两套 RAG：别灌错库</h2>
+      <div class="pattern-cards">
+        <div class="pattern-card">
+          <h3>客服 · fin_* 三库</h3>
+          <p>登录客户的对话编排（<code>customer_service.py</code>）和游客试聊编排（<code>visitor_service.py</code>）遇到产品/政策/FAQ 类问题时，都会交给 RAG 检索层（<code>rag_service.py</code>：把问题向量化后查 Milvus），从 <code>fin_product</code> · <code>fin_policy</code> · <code>fin_faq</code> 三个知识集合取片段。</p>
+        </div>
+        <div class="pattern-card">
+          <h3>顾问 · kb_product_rules</h3>
+          <p>理财师/风控通用 tool→llm→guard 编排（<code>agent_service.py</code>）的 <code>search_knowledge</code> Tool → 知识库对话 Tool 注册与分发（<code>kb_tools.py</code>）· 集合名不同，<strong>不能</strong>把顾问文档灌进 fin_*。</p>
+        </div>
+        <div class="pattern-card">
+          <h3>风控 · 不开放 search_knowledge</h3>
+          <p>知识库对话 Tool 注册与分发（<code>kb_tools.py</code>）注册表对 risk 关闭——风控对话走 RISK_TOOL_REGISTRY 四只读 Tool。</p>
+        </div>
+      </div>
+      <div class="callout callout-warning">
+        <strong>指挥 AI 误区：</strong> 「统一成一个知识库」听起来省事，但会破坏各 Agent 合规过滤与检索策略——要改先对契约和 <code>scripts/kb/</code> 脚本。
+      </div>
+    </div>
+
+    <div class="screen animate-in">
+      <h2>合规允许 vs 一期拒答（你拍板要讲的）</h2>
+      <p>合规文档里，客户 Agent 在<strong>过 R-02 + 附免责 + 标注需持证审核</strong>时，可以做「匹配说明」——但一期代码对<strong>主动推荐/预测类</strong>问题走 <code>reject</code> 静态拒答，更保守。</p>
+
+      <div class="translation-block">
+        <div class="translation-code">
+          <span class="translation-label">合规文档 · 允许方向</span>
+          <pre><code><span class="code-line">适当性匹配说明（C-11）</span>
+<span class="code-line">→ 系统判定 + 规则解读 + 免责声明</span>
+<span class="code-line">→ 禁止具体操作指令</span></code></pre>
+        </div>
+        <div class="translation-english">
+          <span class="translation-label">一期代码 · 实际行为</span>
+          <div class="translation-lines">
+            <p class="tl"><code>suitability_check</code> Tool：「我能买 R3 吗」「有哪些匹配产品」——<strong>允许</strong>。</p>
+            <p class="tl">「推荐稳赚基金」「买什么好」→ <code>reject</code> + <code>REJECT_ADVICE_TEXT</code>——<strong>直接拒</strong>。</p>
+            <p class="tl">要「放开推荐」= 产品决策 + 改 intent 路由 + 合规评审，不是只改 prompt 一句。</p>
+          </div>
+        </div>
+      </div>
+    </div>
+
+    <div class="screen animate-in">
+      <h2>群聊：同一客户，两种问法</h2>
+      <div class="chat-window" id="chat-customer-m5">
+        <div class="chat-messages">
+          <div class="chat-message" data-msg="0" data-sender="user" style="display:none">
+            <div class="chat-avatar" style="background:#2D8B55">客</div>
+            <div class="chat-bubble">
+              <span class="chat-sender" style="color:#2D8B55">客户 A</span>
+              <p>我能买 R3 产品吗？</p>
+            </div>
+          </div>
+          <div class="chat-message" data-msg="1" data-sender="ok" style="display:none">
+            <div class="chat-avatar" style="background:#236B44">✓</div>
+            <div class="chat-bubble">
+              <span class="chat-sender" style="color:#236B44">suitability_check</span>
+              <p>意图 <code>suitability_check</code> → Core 只读判定 → interpret 解释规则（合规允许路径）</p>
+            </div>
+          </div>
+          <div class="chat-message" data-msg="2" data-sender="user2" style="display:none">
+            <div class="chat-avatar" style="background:#2D8B55">客</div>
+            <div class="chat-bubble">
+              <span class="chat-sender" style="color:#2D8B55">客户 B</span>
+              <p>推荐一个稳赚的基金</p>
+            </div>
+          </div>
+          <div class="chat-message" data-msg="3" data-sender="rej" style="display:none">
+            <div class="chat-avatar" style="background:#B84A4A">⑨</div>
+            <div class="chat-bubble">
+              <span class="chat-sender" style="color:#B84A4A">reject</span>
+              <p><code>REJECT_ADVICE_TEXT</code> · transfer 标志 false · 话术中可引导「转人工」</p>
+            </div>
+          </div>
+        </div>
+        <div class="chat-typing" id="chat-customer-m5-typing" style="display:none">
+          <div class="chat-avatar" id="chat-customer-m5-typing-avatar">…</div>
+          <div class="chat-typing-dots"><span class="typing-dot"></span><span class="typing-dot"></span><span class="typing-dot"></span></div>
+        </div>
+        <div class="chat-controls">
+          <button class="btn chat-next-btn">下一条</button>
+          <button class="btn chat-all-btn">全部播放</button>
+          <button class="btn chat-reset-btn">重播</button>
+          <span class="chat-progress"></span>
+        </div>
+      </div>
+    </div>
+
+    <div class="screen animate-in">
+      <h2>游客与画像：客户看不见 L2/L3</h2>
+      <p>游客走游客试聊 9 节点编排（<code>visitor_service.py</code>）：无 JWT、无 Core 持仓查询、不写登录客户会话表。L1 画像由客服线后台抽槽写入；<span class="term" data-definition="L2 = 代理人侧 enrich 画像；L3 = 风控监测标签。客户 Agent 不可读 L3，也不应把 L2 内容念给客户。">L2/L3</span> 对客户不可见——合规上客户只能 enrich L1，不能替代正式风评。</p>
+
+      <div class="quiz-container" id="quiz-customer-m5">
+        <div class="quiz-question-block"
+             data-correct="option-a"
+             data-explanation-right="对。顾问 kb_product_rules 与客服 fin_* 是两套集合；混改会导致检索策略和合规过滤错乱。"
+             data-explanation-wrong="两套 RAG 分 Agent 是有意的，不能为了「统一」直接合并 Milvus 集合。">
+          <h3 class="quiz-question">AI 建议「把 kb 和 fin 合成一个 Milvus 集合简化维护」，你怎么回？</h3>
+          <div class="quiz-options">
+            <button class="quiz-option" data-value="option-a" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>不行，两套库各服务 customer/advisor，先对 scripts/kb 和契约</span>
+            </button>
+            <button class="quiz-option" data-value="option-b" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>好，合并后客服也能搜顾问话术</span>
+            </button>
+            <button class="quiz-option" data-value="option-c" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>好，让风控也开放 search_knowledge</span>
+            </button>
+          </div>
+          <div class="quiz-feedback"></div>
+        </div>
+        <button class="quiz-check-btn" onclick="checkQuiz('quiz-customer-m5')">检查答案</button>
+        <button class="quiz-reset-btn" onclick="resetQuiz('quiz-customer-m5')">重做</button>
+      </div>
+    </div>
+  </div>
+</section>
diff --git a/docs/course/jinrong-module-customer/modules/06-profile-l0.html b/docs/course/jinrong-module-customer/modules/06-profile-l0.html
new file mode 100644
index 0000000..1c36c8c
--- /dev/null
+++ b/docs/course/jinrong-module-customer/modules/06-profile-l0.html
@@ -0,0 +1,99 @@
+<section class="module" id="module-6">
+  <div class="module-inner">
+    <p class="eyebrow animate-in">模块 6 · L0 与 L1 画像</p>
+    <h1 class="module-title animate-in">正式风评 vs 抽槽画像<br>Top-K 怎么注入 prompt？</h1>
+    <p class="module-lead animate-in">
+      客户线除了查 Core 真账，还有后台<strong>画像抽槽</strong>（L1）调措辞。
+      拍板铁律：<strong>L0 永远优先</strong>——正式 C1~C5、持仓数字、适当性判定听 Core，L1 不能覆盖。
+      偏好类槽位注入 prompt 时走 <strong>Top-K + 时间衰减</strong>（R1），不是全量平铺。
+    </p>
+
+    <div class="screen animate-in">
+      <h2>L0 vs L1：谁说了算？</h2>
+      <div class="pattern-cards">
+        <div class="pattern-card">
+          <h3>L0 · Core 正式数据</h3>
+          <p>风评 C1~C5、持仓/流水数字、适当性矩阵判定——100% 来自 Core 只读查询 Tool（<code>core_ro_tool.py</code>）的 <code>fact_text</code>。LLM 只解读，不能改写。</p>
+        </div>
+        <div class="pattern-card">
+          <h3>L1 · 对话 enrich 画像</h3>
+          <p>登录客户每 5 轮节流，后台线程跑画像抽槽与合并（<code>profile_service.py</code>）→ 写入 MySQL <code>style_tags</code> + Redis 热缓存。只影响 generate/chitchat 的措辞语境，<strong>不能</strong>替代正式风评。</p>
+        </div>
+        <div class="pattern-card">
+          <h3>撞车规则</h3>
+          <p>抽槽若与 L0 字段冲突（例如用户口述「我是 R5」但 Core 是 R3）→ <strong>永远听 L0</strong>。合并规则 D7：用户显式 <code>user_declared</code> 不被 <code>inferred</code> 覆盖。</p>
+        </div>
+      </div>
+    </div>
+
+    <div class="screen animate-in">
+      <h2>13 槽位 + confidence 门槛</h2>
+      <p>槽位表唯一来源：画像槽位定义（<code>profile_slots.py</code>）——13 个 path（含 C-08 <code>investment.allocation_target</code>），含 merge_mode 与 sensitivity。</p>
+      <div class="step-cards">
+        <div class="step-card">
+          <span class="step-num">①</span>
+          <p><strong>归一</strong> · <code>normalize_value</code><br>
+          例如「我喜欢货币基金」→ 映射到 9 类 <code>PRODUCT_TYPE_VOCAB</code>（不是具体 SKU 代码）。</p>
+        </div>
+        <div class="step-card">
+          <span class="step-num">②</span>
+          <p><strong>阈值</strong> · confidence ≥0.7（默认）/ ≥0.9（高敏）才写入；高敏 <code>inferred</code> 一律丢弃。</p>
+        </div>
+        <div class="step-card">
+          <span class="step-num">③</span>
+          <p><strong>合并</strong> · <code>merge_candidates</code><br>
+          单值 latest 覆盖；偏好/排除类 set_union 并集，并写 <code>items_meta</code>（R1）。</p>
+        </div>
+      </div>
+      <div class="callout callout-accent">
+        <strong>谁写 L1：</strong> 仅<strong>登录</strong>客户线（<code>customer_service.profile_maybe_extract</code>）；游客试聊不写画像。<br>
+        <strong>C-04 阈值槽：</strong> <code>threshold_pref_summary</code> → <code>customer_threshold_config</code>；达线提醒仅在查持仓时 inline。
+      </div>
+    </div>
+
+    <div class="screen animate-in">
+      <h2>R1 · 偏好 Top-K 注入</h2>
+      <div class="translation-block">
+        <div class="translation-code">
+          <span class="translation-label">注入前筛选 · 画像上下文渲染（profile_service.py）</span>
+          <pre><code><span class="code-line"><span class="code-comment"># settings 默认：top_k=3 · ttl=90d · half_life=30d</span></span>
+<span class="code-line">score = confidence × decay × (1 + log(mention_count))</span>
+<span class="code-line"><span class="code-comment"># 超 TTL 的偏好不进 prompt；取得分 Top-K 条</span></span></code></pre>
+        </div>
+        <div class="translation-english">
+          <span class="translation-label">白话</span>
+          <div class="translation-lines">
+            <p class="tl">客户说过很多偏好类型，但 prompt 里只带<strong>最近、反复提到</strong>的前几条，避免画像越积越长带偏 LLM。</p>
+            <p class="tl">很久没提过的偏好（超过 90 天）不再注入，但 MySQL 里仍保留，下次提到会刷新。</p>
+            <p class="tl">改 K 或 TTL → 动环境配置（<code>settings.py</code> 的 <code>profile_preference_*</code>），别在 prompt 里硬编码。</p>
+          </div>
+        </div>
+      </div>
+
+      <div class="quiz-container" id="quiz-customer-m6">
+        <div class="quiz-question-block"
+             data-correct="option-b"
+             data-explanation-right="对。L1 偏好只 enrich 措辞；持仓数字、正式风评、适当性结论必须来自 Core L0，画像不能覆盖。"
+             data-explanation-wrong="L0 正式数据优先级高于 L1 抽槽——这是合规硬阀门。">
+          <h3 class="quiz-question">客户口述「我是激进型 R5」，但 Core 风评是 R3，持仓查询应信谁？</h3>
+          <div class="quiz-options">
+            <button class="quiz-option" data-value="option-a" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>信 L1 抽槽，按 R5 解读</span>
+            </button>
+            <button class="quiz-option" data-value="option-b" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>信 Core L0 的 R3；L1 最多调闲聊措辞</span>
+            </button>
+            <button class="quiz-option" data-value="option-c" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>取两者平均</span>
+            </button>
+          </div>
+          <div class="quiz-feedback"></div>
+        </div>
+        <button class="quiz-check-btn" onclick="checkQuiz('quiz-customer-m6')">检查答案</button>
+        <button class="quiz-reset-btn" onclick="resetQuiz('quiz-customer-m6')">重做</button>
+      </div>
+
+      <p class="module-footer-note">相关文件：画像抽槽与合并（<code>app/service/profile_service.py</code>）· 槽位表（<code>app/config/profile_slots.py</code>）· 环境配置（<code>app/config/settings.py</code>）</p>
+    </div>
+  </div>
+</section>
diff --git a/docs/course/jinrong-module-customer/modules/07-wave3-queries.html b/docs/course/jinrong-module-customer/modules/07-wave3-queries.html
new file mode 100644
index 0000000..ddbe5c5
--- /dev/null
+++ b/docs/course/jinrong-module-customer/modules/07-wave3-queries.html
@@ -0,0 +1,108 @@
+<section class="module" id="module-7">
+  <div class="module-inner">
+    <p class="eyebrow animate-in">模块 7 · Wave3 数据查询扩展</p>
+    <h1 class="module-title animate-in">净值、阈值、匹配说明<br>关键词怎么分流？</h1>
+    <p class="module-lead animate-in">
+      2026-09-10 批次在持仓/流水/风评/适当性之外，又接了<strong>净值查询（C-05）</strong>、<strong>亏损阈值（C-04）</strong>和<strong>「我能买什么」（C-11）</strong>。
+      指挥 AI 改意图时，先看<strong>关键词路由顺序</strong>——数据查询类必须优先于「帮我记住」类 save_note。
+    </p>
+
+    <div class="screen animate-in">
+      <h2>新增 intent 一览</h2>
+      <div class="pattern-cards">
+        <div class="pattern-card">
+          <h3>C-05 · nav_query</h3>
+          <p>「最新净值 / 单位净值 / 基金净值」→ Core 只读 <code>get_latest_nav</code>（快照）。<strong>「实时净值」</strong>仍走 <code>reject</code>（禁止实时盘口）。</p>
+        </div>
+        <div class="pattern-card">
+          <h3>C-04 · 阈值提醒</h3>
+          <p>用户说「亏 10% 提醒我」→ L1 槽 <code>threshold_pref_summary</code> + 写 <code>customer_threshold_config</code>；下次<strong>查持仓</strong>时组合加权盈亏达线 → 追加提醒 + <code>customer_notify_log</code>。</p>
+        </div>
+        <div class="pattern-card">
+          <h3>C-11 · 匹配说明</h3>
+          <p>「我能买什么 / 匹配产品 / 有哪些我能买」→ <code>suitability_check</code> + Core 可购列表。<strong>「推荐稳赚」</strong>仍 <code>reject</code>。</p>
+        </div>
+        <div class="pattern-card">
+          <h3>C-07 · 风评重测</h3>
+          <p>「重新测评 / 重做风评」扩进风评关键词 → 引导 App/网点；Agent 内<strong>不做</strong>问卷。</p>
+        </div>
+      </div>
+    </div>
+
+    <div class="screen animate-in">
+      <h2>关键词优先级（易踩坑）</h2>
+      <p>客户线各分支 System Prompt 模板（<code>customer_prompts.py</code>）里 <code>keyword_route</code> 顺序：</p>
+      <div class="step-cards">
+        <div class="step-card">
+          <span class="step-num">1</span>
+          <p>转人工 / reject（实时净值、推荐稳赚等）</p>
+        </div>
+        <div class="step-card">
+          <span class="step-num">2</span>
+          <p><strong>数据查询</strong>：流水 · 风评 · 适当性 · 持仓（含「最近的流水」）</p>
+        </div>
+        <div class="step-card">
+          <span class="step-num">3</span>
+          <p><code>save_note</code>（「帮我记住…」——但不含上面已命中的数据词）</p>
+        </div>
+        <div class="step-card">
+          <span class="step-num">4</span>
+          <p>匹配说明 · 净值查询</p>
+        </div>
+      </div>
+      <div class="callout callout-warning">
+        <strong>回归用例：</strong> 「帮我记住最近的流水」必须走 <code>transaction_query</code>，不能误进 save_note——见 <code>test_wave5_notes.py</code>。
+      </div>
+    </div>
+
+    <div class="screen animate-in">
+      <div class="translation-block">
+        <div class="translation-code">
+          <span class="translation-label">C-04 · 亏损阈值服务（threshold_service.py）</span>
+          <pre><code><span class="code-line"><span class="code-comment"># 画像抽槽 → sync_threshold_from_summary</span></span>
+<span class="code-line"><span class="code-comment"># query_holdings 末尾 → build_threshold_alert</span></span>
+<span class="code-line"><span class="code-keyword">if</span> loss_pct >= threshold:</span>
+<span class="code-line">    append alert + insert_notify_log</span></code></pre>
+        </div>
+        <div class="translation-english">
+          <span class="translation-label">白话</span>
+          <div class="translation-lines">
+            <p class="tl">阈值不是 push 通知——只有客户<strong>再来问持仓</strong>时才 inline 提醒。</p>
+            <p class="tl">组合盈亏按持仓<strong>市值加权</strong>算，不是单只基金。</p>
+            <p class="tl">改阈值：口述新比例 → 画像摘要更新 → config upsert。</p>
+          </div>
+        </div>
+      </div>
+    </div>
+
+    <div class="screen animate-in">
+      <h2>1B 仍覆盖 nav_query</h2>
+      <p>违禁词扫描后的分治（<code>sanitize_postprocess.py</code>）把 <code>nav_query</code> 算进数据查询 intent——interpret 嘴瓢时仍回退 Core <code>fact_text</code>。</p>
+
+      <div class="quiz-container" id="quiz-customer-m7">
+        <div class="quiz-question-block"
+             data-correct="option-b"
+             data-explanation-right="对。C-05 走 Core 最新净值快照；「实时净值」是 reject 关键词，不是 nav_query。"
+             data-explanation-wrong="实时盘口/爬虫不在一期范围；见 C-05 选型文档。">
+          <h3 class="quiz-question">客户问「这只基金实时净值多少」，系统怎么走？</h3>
+          <div class="quiz-options">
+            <button class="quiz-option" data-value="option-a" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>nav_query → Core get_latest_nav</span>
+            </button>
+            <button class="quiz-option" data-value="option-b" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>reject · 实时净值禁止</span>
+            </button>
+            <button class="quiz-option" data-value="option-c" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>RAG fin_product 查费率</span>
+            </button>
+          </div>
+          <div class="quiz-feedback"></div>
+        </div>
+        <button class="quiz-check-btn" onclick="checkQuiz('quiz-customer-m7')">检查答案</button>
+        <button class="quiz-reset-btn" onclick="resetQuiz('quiz-customer-m7')">重做</button>
+      </div>
+
+      <p class="module-footer-note">相关文件：客户线意图模板（<code>customer_prompts.py</code>）· Core 只读 Tool（<code>core_ro_tool.py</code>）· 阈值服务（<code>threshold_service.py</code>）· 测试 <code>test_threshold_service.py</code> · <code>test_wave2_prompts.py</code></p>
+    </div>
+  </div>
+</section>
diff --git a/docs/course/jinrong-module-customer/styles.css b/docs/course/jinrong-module-customer/styles.css
index 544669c..68d0e39 100644
--- a/docs/course/jinrong-module-customer/styles.css
+++ b/docs/course/jinrong-module-customer/styles.css
@@ -254,7 +254,8 @@ pre::-webkit-scrollbar { display: none; }
   padding-top: calc(var(--nav-height) + var(--space-12));
 }
 
-.module-content {
+.module-content,
+.module-inner {
   max-width: var(--content-width);
   margin: 0 auto;
 }
diff --git a/docs/course/jinrong-module-frontend/_base.html b/docs/course/jinrong-module-frontend/_base.html
index d03705c..5ed8588 100644
--- a/docs/course/jinrong-module-frontend/_base.html
+++ b/docs/course/jinrong-module-frontend/_base.html
@@ -32,6 +32,7 @@
         <button class="nav-dot" data-target="module-1" data-tooltip="四角色路由" role="tab" aria-label="模块 1: 四角色路由"></button>
         <button class="nav-dot" data-target="module-2" data-tooltip="Chat 鉴权" role="tab" aria-label="模块 2: Chat 鉴权"></button>
         <button class="nav-dot" data-target="module-3" data-tooltip="本地调试" role="tab" aria-label="模块 3: 本地调试"></button>
+        <button class="nav-dot" data-target="module-4" data-tooltip="未接线" role="tab" aria-label="模块 4: 未接线"></button>
       </div>
     </div>
   </nav>
diff --git a/docs/course/jinrong-module-frontend/index.html b/docs/course/jinrong-module-frontend/index.html
index ecea412..5a3ac2c 100644
--- a/docs/course/jinrong-module-frontend/index.html
+++ b/docs/course/jinrong-module-frontend/index.html
@@ -32,6 +32,7 @@
         <button class="nav-dot" data-target="module-1" data-tooltip="四角色路由" role="tab" aria-label="模块 1: 四角色路由"></button>
         <button class="nav-dot" data-target="module-2" data-tooltip="Chat 鉴权" role="tab" aria-label="模块 2: Chat 鉴权"></button>
         <button class="nav-dot" data-target="module-3" data-tooltip="本地调试" role="tab" aria-label="模块 3: 本地调试"></button>
+        <button class="nav-dot" data-target="module-4" data-tooltip="未接线" role="tab" aria-label="模块 4: 未接线"></button>
       </div>
     </div>
   </nav>
@@ -165,14 +166,14 @@
         {"highlight":"flow-actor-1","label":"ChatPanel(agentType=advisor, mode=stream)"},
         {"highlight":"flow-actor-2","label":"useChatPanel → listChatSessions(token, advisor)","packet":true,"from":"1","to":"2"},
         {"highlight":"flow-actor-3","label":"chat.ts：Bearer + X-Agent-Type: advisor","packet":true,"from":"2","to":"3"},
-        {"highlight":"flow-actor-4","label":"chat.py：get_auth_context + 准入矩阵","packet":true,"from":"3","to":"4"},
+        {"highlight":"flow-actor-4","label":"对话 HTTP 入口（chat.py）：get_auth_context + 准入矩阵","packet":true,"from":"3","to":"4"},
         {"highlight":"flow-actor-1","label":"SSE 流式 delta → UI 逐字显示","packet":true,"from":"4","to":"1"}
       ]'>
         <div class="flow-actors">
           <div class="flow-actor" id="flow-actor-1"><span class="flow-actor-icon">💬</span><span>ChatPanel</span></div>
           <div class="flow-actor" id="flow-actor-2"><span class="flow-actor-icon">🪝</span><span>useChatPanel</span></div>
           <div class="flow-actor" id="flow-actor-3"><span class="flow-actor-icon">📡</span><span>api/chat.ts</span></div>
-          <div class="flow-actor" id="flow-actor-4"><span class="flow-actor-icon">🚪</span><span>chat.py</span></div>
+          <div class="flow-actor" id="flow-actor-4"><span class="flow-actor-icon">🚪</span><span>对话 HTTP 入口（chat.py）</span></div>
         </div>
         <p class="flow-step-label">对比：问数走 analyst.ts，无 X-Agent-Type</p>
         <div class="flow-controls">
@@ -249,7 +250,7 @@
       <div class="numbered-steps">
         <div class="step-card">
           <span class="step-num">1</span>
-          <div><strong>后端</strong>：<code>uvicorn app.main:app --reload --port 8000</code>（Core 模拟库 + Redis 6380 按需）</div>
+          <div><strong>后端</strong> · 应用入口（<code>main.py</code>）：<code>uvicorn app.main:app --reload --port 8000</code>（Core 模拟库 + Redis 6380 按需）</div>
         </div>
         <div class="step-card">
           <span class="step-num">2</span>
@@ -347,6 +348,83 @@
       </div>
     </div>
   </div>
+</section>
+<section class="module" id="module-4">
+  <div class="module-inner">
+    <p class="eyebrow animate-in">模块 4 · 未接线</p>
+    <h1 class="module-title animate-in">菜单有 ≠ API 已接<br>Chat 还有 B 方案三端点</h1>
+    <p class="module-lead animate-in">
+      前端 P0 主链路已真接，但和后端课对照，仍有<strong>页面占位、风控/平台按钮缺失、SSE 行为</strong>等缝。
+      改 URL 进别人工作台，前端藏菜单<strong>拦不住</strong>，后端才是闸。
+    </p>
+
+    <div class="screen animate-in">
+      <h2>前端未全接清单（2026-09）</h2>
+      <div class="pattern-cards">
+        <div class="pattern-card">
+          <h3>风控</h3>
+          <p>AML scan · 适当性校验按钮 · 台账高级筛选 — 部分 API 有，UI 简版或未接。</p>
+        </div>
+        <div class="pattern-card">
+          <h3>问数</h3>
+          <p><code>AnalystChatShell</code> 占位 · 真问数在 <code>AnalystQueryPage</code> + dashboard/assets。</p>
+        </div>
+        <div class="pattern-card">
+          <h3>游客</h3>
+          <p><code>VisitorChatWidget</code> 首页试聊 · 与登录 ChatPanel 不同 API。</p>
+        </div>
+      </div>
+    </div>
+
+    <div class="screen animate-in">
+      <h2>Chat 方案 B：三端点 + SSE 注意点</h2>
+      <div class="translation-block">
+        <div class="translation-code">
+          <span class="translation-label">会话 API</span>
+          <pre><code><span class="code-line">GET  /api/chat/sessions</span>
+<span class="code-line">GET  /api/chat/sessions/{id}/messages</span>
+<span class="code-line">POST /api/chat/sessions/{id}/close</span>
+<span class="code-line">POST /api/chat/stream  → customer SSE</span></code></pre>
+        </div>
+        <div class="translation-english">
+          <span class="translation-label">白话</span>
+          <div class="translation-lines">
+            <p class="tl">列表/历史/关闭与发消息共用同一套鉴权（Bearer + X-Agent-Type）。</p>
+            <p class="tl">SSE 无心跳：断连可能留下半空回合——排障时查 session 表 + 是否 uvicorn 重启。</p>
+            <p class="tl">HashRouter：URL 带 <code>#</code>，生产 Nginx 要配 SPA fallback。</p>
+          </div>
+        </div>
+      </div>
+    </div>
+
+    <div class="screen animate-in">
+      <h2>改 URL 进别人工作台</h2>
+      <p><code>RequireAuth</code> 只验「有没有 token」，<strong>不</strong>验「这个角色能不能进 /app/risk」。菜单隐藏 ≠ 安全——后端 <code>AGENT_ACCESS_MATRIX</code> 和平台 RBAC 才拒 403。</p>
+
+      <div class="quiz-container" id="quiz-frontend-m4">
+        <div class="quiz-question-block"
+             data-correct="option-b"
+             data-explanation-right="对。前端藏菜单是 UX；越权要靠后端模块鉴权（deps.py）矩阵和 SessionGuard 403。"
+             data-explanation-wrong="仅改前端路由守卫不够，必须对后端入口断言。">
+          <h3 class="quiz-question">客户账号手动打开 /app/risk/alerts，只靠前端能拦住吗？</h3>
+          <div class="quiz-options">
+            <button class="quiz-option" data-value="option-a" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>能，RequireAuth 够了</span>
+            </button>
+            <button class="quiz-option" data-value="option-b" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>不能，必须后端 risk 角色 + X-Agent-Type: risk</span>
+            </button>
+            <button class="quiz-option" data-value="option-c" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>能，Hash 路由自动 404</span>
+            </button>
+          </div>
+          <div class="quiz-feedback"></div>
+        </div>
+        <button class="quiz-check-btn" onclick="checkQuiz('quiz-frontend-m4')">检查答案</button>
+        <button class="quiz-reset-btn" onclick="resetQuiz('quiz-frontend-m4')">重做</button>
+      </div>
+    </div>
+  </div>
 </section>
   </main>
 
diff --git a/docs/course/jinrong-module-frontend/main.js b/docs/course/jinrong-module-frontend/main.js
index 7150a69..410548e 100644
--- a/docs/course/jinrong-module-frontend/main.js
+++ b/docs/course/jinrong-module-frontend/main.js
@@ -486,13 +486,17 @@
 
   /* ── LAYER TOGGLE ──────────────────────────────────────────── */
   window.showLayer = function (layerId, btn) {
-    const demo = btn ? btn.closest('.layer-demo') : null;
+    const tab = btn || (window.event && window.event.currentTarget);
+    if (!tab || !tab.closest) return;
+    const demo = tab.closest('.layer-demo');
     if (!demo) return;
-    $$('.layer', demo).forEach(l => l.style.display = 'none');
+    $$('.layer', demo).forEach(l => { l.style.display = 'none'; });
     $$('.layer-tab', demo).forEach(t => t.classList.remove('active'));
-    const layer = $('#' + layerId);
+    const esc = typeof CSS !== 'undefined' && CSS.escape ? CSS.escape(layerId) : layerId.replace(/[^\w-]/g, '');
+    let layer = demo.querySelector('#' + esc);
+    if (!layer) layer = demo.querySelector('#layer-' + esc);
     if (layer) layer.style.display = 'block';
-    btn.classList.add('active');
+    tab.classList.add('active');
   };
 
 })();
diff --git a/docs/course/jinrong-module-frontend/modules/02-chat-auth.html b/docs/course/jinrong-module-frontend/modules/02-chat-auth.html
index 7c519d4..ad33fe4 100644
--- a/docs/course/jinrong-module-frontend/modules/02-chat-auth.html
+++ b/docs/course/jinrong-module-frontend/modules/02-chat-auth.html
@@ -30,14 +30,14 @@
         {"highlight":"flow-actor-1","label":"ChatPanel(agentType=advisor, mode=stream)"},
         {"highlight":"flow-actor-2","label":"useChatPanel → listChatSessions(token, advisor)","packet":true,"from":"1","to":"2"},
         {"highlight":"flow-actor-3","label":"chat.ts：Bearer + X-Agent-Type: advisor","packet":true,"from":"2","to":"3"},
-        {"highlight":"flow-actor-4","label":"chat.py：get_auth_context + 准入矩阵","packet":true,"from":"3","to":"4"},
+        {"highlight":"flow-actor-4","label":"对话 HTTP 入口（chat.py）：get_auth_context + 准入矩阵","packet":true,"from":"3","to":"4"},
         {"highlight":"flow-actor-1","label":"SSE 流式 delta → UI 逐字显示","packet":true,"from":"4","to":"1"}
       ]'>
         <div class="flow-actors">
           <div class="flow-actor" id="flow-actor-1"><span class="flow-actor-icon">💬</span><span>ChatPanel</span></div>
           <div class="flow-actor" id="flow-actor-2"><span class="flow-actor-icon">🪝</span><span>useChatPanel</span></div>
           <div class="flow-actor" id="flow-actor-3"><span class="flow-actor-icon">📡</span><span>api/chat.ts</span></div>
-          <div class="flow-actor" id="flow-actor-4"><span class="flow-actor-icon">🚪</span><span>chat.py</span></div>
+          <div class="flow-actor" id="flow-actor-4"><span class="flow-actor-icon">🚪</span><span>对话 HTTP 入口（chat.py）</span></div>
         </div>
         <p class="flow-step-label">对比：问数走 analyst.ts，无 X-Agent-Type</p>
         <div class="flow-controls">
diff --git a/docs/course/jinrong-module-frontend/modules/03-dev-debug.html b/docs/course/jinrong-module-frontend/modules/03-dev-debug.html
index e9334aa..ac36d89 100644
--- a/docs/course/jinrong-module-frontend/modules/03-dev-debug.html
+++ b/docs/course/jinrong-module-frontend/modules/03-dev-debug.html
@@ -13,7 +13,7 @@
       <div class="numbered-steps">
         <div class="step-card">
           <span class="step-num">1</span>
-          <div><strong>后端</strong>：<code>uvicorn app.main:app --reload --port 8000</code>（Core 模拟库 + Redis 6380 按需）</div>
+          <div><strong>后端</strong> · 应用入口（<code>main.py</code>）：<code>uvicorn app.main:app --reload --port 8000</code>（Core 模拟库 + Redis 6380 按需）</div>
         </div>
         <div class="step-card">
           <span class="step-num">2</span>
diff --git a/docs/course/jinrong-module-frontend/modules/04-unwired.html b/docs/course/jinrong-module-frontend/modules/04-unwired.html
new file mode 100644
index 0000000..4f8f2d8
--- /dev/null
+++ b/docs/course/jinrong-module-frontend/modules/04-unwired.html
@@ -0,0 +1,77 @@
+<section class="module" id="module-4">
+  <div class="module-inner">
+    <p class="eyebrow animate-in">模块 4 · 未接线</p>
+    <h1 class="module-title animate-in">菜单有 ≠ API 已接<br>Chat 还有 B 方案三端点</h1>
+    <p class="module-lead animate-in">
+      前端 P0 主链路已真接，但和后端课对照，仍有<strong>页面占位、风控/平台按钮缺失、SSE 行为</strong>等缝。
+      改 URL 进别人工作台，前端藏菜单<strong>拦不住</strong>，后端才是闸。
+    </p>
+
+    <div class="screen animate-in">
+      <h2>前端未全接清单（2026-09）</h2>
+      <div class="pattern-cards">
+        <div class="pattern-card">
+          <h3>风控</h3>
+          <p>AML scan · 适当性校验按钮 · 台账高级筛选 — 部分 API 有，UI 简版或未接。</p>
+        </div>
+        <div class="pattern-card">
+          <h3>问数</h3>
+          <p><code>AnalystChatShell</code> 占位 · 真问数在 <code>AnalystQueryPage</code> + dashboard/assets。</p>
+        </div>
+        <div class="pattern-card">
+          <h3>游客</h3>
+          <p><code>VisitorChatWidget</code> 首页试聊 · 与登录 ChatPanel 不同 API。</p>
+        </div>
+      </div>
+    </div>
+
+    <div class="screen animate-in">
+      <h2>Chat 方案 B：三端点 + SSE 注意点</h2>
+      <div class="translation-block">
+        <div class="translation-code">
+          <span class="translation-label">会话 API</span>
+          <pre><code><span class="code-line">GET  /api/chat/sessions</span>
+<span class="code-line">GET  /api/chat/sessions/{id}/messages</span>
+<span class="code-line">POST /api/chat/sessions/{id}/close</span>
+<span class="code-line">POST /api/chat/stream  → customer SSE</span></code></pre>
+        </div>
+        <div class="translation-english">
+          <span class="translation-label">白话</span>
+          <div class="translation-lines">
+            <p class="tl">列表/历史/关闭与发消息共用同一套鉴权（Bearer + X-Agent-Type）。</p>
+            <p class="tl">SSE 无心跳：断连可能留下半空回合——排障时查 session 表 + 是否 uvicorn 重启。</p>
+            <p class="tl">HashRouter：URL 带 <code>#</code>，生产 Nginx 要配 SPA fallback。</p>
+          </div>
+        </div>
+      </div>
+    </div>
+
+    <div class="screen animate-in">
+      <h2>改 URL 进别人工作台</h2>
+      <p><code>RequireAuth</code> 只验「有没有 token」，<strong>不</strong>验「这个角色能不能进 /app/risk」。菜单隐藏 ≠ 安全——后端 <code>AGENT_ACCESS_MATRIX</code> 和平台 RBAC 才拒 403。</p>
+
+      <div class="quiz-container" id="quiz-frontend-m4">
+        <div class="quiz-question-block"
+             data-correct="option-b"
+             data-explanation-right="对。前端藏菜单是 UX；越权要靠后端模块鉴权（deps.py）矩阵和 SessionGuard 403。"
+             data-explanation-wrong="仅改前端路由守卫不够，必须对后端入口断言。">
+          <h3 class="quiz-question">客户账号手动打开 /app/risk/alerts，只靠前端能拦住吗？</h3>
+          <div class="quiz-options">
+            <button class="quiz-option" data-value="option-a" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>能，RequireAuth 够了</span>
+            </button>
+            <button class="quiz-option" data-value="option-b" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>不能，必须后端 risk 角色 + X-Agent-Type: risk</span>
+            </button>
+            <button class="quiz-option" data-value="option-c" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>能，Hash 路由自动 404</span>
+            </button>
+          </div>
+          <div class="quiz-feedback"></div>
+        </div>
+        <button class="quiz-check-btn" onclick="checkQuiz('quiz-frontend-m4')">检查答案</button>
+        <button class="quiz-reset-btn" onclick="resetQuiz('quiz-frontend-m4')">重做</button>
+      </div>
+    </div>
+  </div>
+</section>
diff --git a/docs/course/jinrong-module-frontend/styles.css b/docs/course/jinrong-module-frontend/styles.css
index 544669c..68d0e39 100644
--- a/docs/course/jinrong-module-frontend/styles.css
+++ b/docs/course/jinrong-module-frontend/styles.css
@@ -254,7 +254,8 @@ pre::-webkit-scrollbar { display: none; }
   padding-top: calc(var(--nav-height) + var(--space-12));
 }
 
-.module-content {
+.module-content,
+.module-inner {
   max-width: var(--content-width);
   margin: 0 auto;
 }
diff --git a/docs/course/jinrong-module-platform/_base.html b/docs/course/jinrong-module-platform/_base.html
index 6553b8a..eeab6f3 100644
--- a/docs/course/jinrong-module-platform/_base.html
+++ b/docs/course/jinrong-module-platform/_base.html
@@ -32,6 +32,7 @@
         <button class="nav-dot" data-target="module-1" data-tooltip="v0.1 路由" role="tab" aria-label="模块 1: v0.1 路由"></button>
         <button class="nav-dot" data-target="module-2" data-tooltip="平台鉴权" role="tab" aria-label="模块 2: 平台鉴权"></button>
         <button class="nav-dot" data-target="module-3" data-tooltip="脱敏开关" role="tab" aria-label="模块 3: 脱敏开关"></button>
+        <button class="nav-dot" data-target="module-4" data-tooltip="接缝与草案" role="tab" aria-label="模块 4: 接缝与草案"></button>
       </div>
     </div>
   </nav>
diff --git a/docs/course/jinrong-module-platform/index.html b/docs/course/jinrong-module-platform/index.html
index f6f3343..78c0405 100644
--- a/docs/course/jinrong-module-platform/index.html
+++ b/docs/course/jinrong-module-platform/index.html
@@ -32,6 +32,7 @@
         <button class="nav-dot" data-target="module-1" data-tooltip="v0.1 路由" role="tab" aria-label="模块 1: v0.1 路由"></button>
         <button class="nav-dot" data-target="module-2" data-tooltip="平台鉴权" role="tab" aria-label="模块 2: 平台鉴权"></button>
         <button class="nav-dot" data-target="module-3" data-tooltip="脱敏开关" role="tab" aria-label="模块 3: 脱敏开关"></button>
+        <button class="nav-dot" data-target="module-4" data-tooltip="接缝与草案" role="tab" aria-label="模块 4: 接缝与草案"></button>
       </div>
     </div>
   </nav>
@@ -53,7 +54,7 @@
       <div class="pattern-cards">
         <div class="pattern-card">
           <h3>/api/customers/*</h3>
-          <p>客户 L0 档案、持仓、流水。<code>customers.py</code> → <code>platform/customer_service</code> → <code>core_ro</code>。</p>
+          <p>客户 L0 档案、持仓、流水。平台客户 REST 薄路由（<code>customers.py</code>） → <code>platform/customer_service</code> → <code>core_ro</code>。</p>
         </div>
         <div class="pattern-card">
           <h3>/api/products/*</h3>
@@ -76,7 +77,7 @@
     <div class="screen animate-in">
       <h2>三层分工（别让 AI 在路由里写 SQL）</h2>
       <div class="flow-animation" data-steps='[
-        {"highlight":"flow-actor-1","label":"HTTP 请求进入 customers.py"},
+        {"highlight":"flow-actor-1","label":"HTTP 请求进入 平台客户 REST 薄路由（customers.py）"},
         {"highlight":"flow-actor-2","label":"get_platform_auth_context：验 JWT + 归属","packet":true,"from":"1","to":"2"},
         {"highlight":"flow-actor-3","label":"platform_service：组装、分页、脱敏开关","packet":true,"from":"2","to":"3"},
         {"highlight":"flow-actor-4","label":"core_ro：SELECT 只读，不感知 HTTP","packet":true,"from":"3","to":"4"},
@@ -99,7 +100,7 @@
     <div class="screen animate-in">
       <div class="translation-block">
         <div class="translation-code">
-          <span class="translation-label">薄路由 · customers.py</span>
+          <span class="translation-label">平台客户 REST 薄路由（customers.py）</span>
           <pre><code><span class="code-line"><span class="code-comment">"""代销平台 · 客户 L0 与资产读 API（canonical · 不要求 X-Agent-Type）。"""</span></span>
 <span class="code-line">@router.get(<span class="code-string">"/{customer_id}/holdings"</span>)</span>
 <span class="code-line"><span class="code-keyword">def</span> <span class="code-function">list_holdings</span>(</span>
@@ -185,7 +186,7 @@
           <div class="chat-message" data-msg="1" data-sender="api" style="display:none">
             <div class="chat-avatar" style="background: #5A9DB8">🚪</div>
             <div class="chat-bubble">
-              <span class="chat-sender" style="color: #5A9DB8">customers.py</span>
+              <span class="chat-sender" style="color: #5A9DB8">平台客户 REST 薄路由（customers.py）</span>
               <p>Depends(get_platform_auth_context) → JWT 验签 OK<br>assert_platform_customer_access：STAFF-10086 名下有 CUST-1001 ✓</p>
             </div>
           </div>
@@ -294,14 +295,14 @@
         </tbody>
       </table>
       <div class="callout callout-accent">
-        <strong>实现位置：</strong> <code>app/service/platform/common.py</code> 的 <code>maybe_desensitize_row</code> → <code>prepare_row</code>。REST 与 Agent 适配层都应走这里，不要在路由里手写 mask。
+        <strong>实现位置：</strong> 响应脱敏（<code>app/service/platform/common.py</code>）的 <code>maybe_desensitize_row</code> → <code>prepare_row</code>。REST 与 Agent 适配层都应走这里，不要在路由里手写 mask。
       </div>
     </div>
 
     <div class="screen animate-in">
       <div class="translation-block">
         <div class="translation-code">
-          <span class="translation-label">platform/common.py</span>
+          <span class="translation-label">响应脱敏（platform/common.py）</span>
           <pre><code><span class="code-line"><span class="code-keyword">def</span> <span class="code-function">maybe_desensitize_row</span>(row: dict | None) -> dict | None:</span>
 <span class="code-line">    <span class="code-keyword">if</span> row <span class="code-keyword">is</span> None <span class="code-keyword">or not</span> settings.platform_response_desensitize:</span>
 <span class="code-line">        <span class="code-keyword">return</span> row</span>
@@ -332,11 +333,11 @@
         <div class="quiz-question-block"
              data-correct="option-c"
              data-explanation-right="对。默认 false 是为了模拟库联调；上真库时在 .env 设 PLATFORM_RESPONSE_DESENSITIZE=true，脱敏在 Service 层自动生效。"
-             data-explanation-wrong="不要在每个路由里 copy 打码逻辑；开关在 settings，行为在 platform/common.py。">
+             data-explanation-wrong="不要在每个路由里 copy 打码逻辑；开关在 settings，行为在 响应脱敏（platform/common.py）。">
           <h3 class="quiz-question">准备接真 Core，要让出参打码手机号，最省事的做法是？</h3>
           <div class="quiz-options">
             <button class="quiz-option" data-value="option-a" onclick="selectOption(this)">
-              <div class="quiz-option-radio"></div><span>在每个 customers.py 返回前手写 replace</span>
+              <div class="quiz-option-radio"></div><span>在平台客户 REST 薄路由（customers.py）返回前手写 replace</span>
             </button>
             <button class="quiz-option" data-value="option-b" onclick="selectOption(this)">
               <div class="quiz-option-radio"></div><span>让前端自己 mask 手机号</span>
@@ -367,6 +368,78 @@
       </div>
     </div>
   </div>
+</section>
+<section class="module" id="module-4">
+  <div class="module-inner">
+    <p class="eyebrow animate-in">模块 4 · 接缝与草案</p>
+    <h1 class="module-title animate-in">适当性只准一条 canonical<br>还有空壳与行情草案</h1>
+    <p class="module-lead animate-in">
+      平台 API 是 v0.1 的「对外标准」，但仓库里已有<strong>重复能力、空壳路由、Phase B 草案</strong>。
+      指挥 AI 加第三条适当性 URL 或前端直连行情源，都会踩接缝。
+    </p>
+
+    <div class="screen animate-in">
+      <h2>路由补全：staff 与空壳</h2>
+      <div class="pattern-cards">
+        <div class="pattern-card">
+          <h3>已实现 · v0.1 四域 + staff</h3>
+          <p><code>/api/customers</code> · <code>products</code> · <code>advisors</code> · <code>compliance</code> · <code>staff</code></p>
+        </div>
+        <div class="pattern-card">
+          <h3>空壳 · 一期不做</h3>
+          <p>知识库空壳 API（<code>knowledge.py</code>） · 管理空壳 API（<code>admin.py</code>） — T-21 拍板：脚本入库，无上传/重建 HTTP。</p>
+        </div>
+      </div>
+    </div>
+
+    <div class="screen animate-in">
+      <h2>适当性：两条 URL，别再开第三条</h2>
+      <div class="translation-block">
+        <div class="translation-code">
+          <span class="translation-label">canonical（平台）</span>
+          <pre><code><span class="code-line">POST /api/compliance/suitability-check</span>
+<span class="code-line">→ get_platform_auth_context</span>
+<span class="code-line">→ app/service/platform/</span></code></pre>
+        </div>
+        <div class="translation-english">
+          <span class="translation-label">风控专用（对话/演示）</span>
+          <div class="translation-lines">
+            <p class="tl"><code>POST /api/risk/suitability/check</code> — 风控 REST + X-Agent-Type: risk。</p>
+            <p class="tl">客服 <code>suitability_check</code> Tool 走 <code>core_ro.check_suitability</code>，是第三条<strong>对话内</strong>路径，但底层同一判定内核。</p>
+            <p class="tl">新增 HTTP 路由前先查契约迁移表，避免四个入口四个口径。</p>
+          </div>
+        </div>
+      </div>
+    </div>
+
+    <div class="screen animate-in">
+      <h2>行情 Phase B（草案 · 未落地）</h2>
+      <p>v0.2 草案：<code>nav-snapshot</code> · <code>sync_market_nav</code>。C-05 硬规则：<strong>禁止爬虫、禁止前端直连第三方行情</strong>——净值须走后端同步管道。</p>
+
+      <div class="quiz-container" id="quiz-platform-m4">
+        <div class="quiz-question-block"
+             data-correct="option-c"
+             data-explanation-right="对。PLATFORM_RESPONSE_DESENSITIZE 默认关是为了联调看原值；上真 Core 再开，customer_id 仍不打码。"
+             data-explanation-wrong="脱敏开关是环境策略，不是「忘了做脱敏」。">
+          <h3 class="quiz-question">联调时响应是明文 ID，AI 说「脱敏坏了」，你怎么回？</h3>
+          <div class="quiz-options">
+            <button class="quiz-option" data-value="option-a" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>是 bug，强制默认开脱敏</span>
+            </button>
+            <button class="quiz-option" data-value="option-b" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>让前端自己 mask</span>
+            </button>
+            <button class="quiz-option" data-value="option-c" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>模拟库默认关是拍板；真 Core 再开 PLATFORM_RESPONSE_DESENSITIZE</span>
+            </button>
+          </div>
+          <div class="quiz-feedback"></div>
+        </div>
+        <button class="quiz-check-btn" onclick="checkQuiz('quiz-platform-m4')">检查答案</button>
+        <button class="quiz-reset-btn" onclick="resetQuiz('quiz-platform-m4')">重做</button>
+      </div>
+    </div>
+  </div>
 </section>
   </main>
 
diff --git a/docs/course/jinrong-module-platform/main.js b/docs/course/jinrong-module-platform/main.js
index 7150a69..410548e 100644
--- a/docs/course/jinrong-module-platform/main.js
+++ b/docs/course/jinrong-module-platform/main.js
@@ -486,13 +486,17 @@
 
   /* ── LAYER TOGGLE ──────────────────────────────────────────── */
   window.showLayer = function (layerId, btn) {
-    const demo = btn ? btn.closest('.layer-demo') : null;
+    const tab = btn || (window.event && window.event.currentTarget);
+    if (!tab || !tab.closest) return;
+    const demo = tab.closest('.layer-demo');
     if (!demo) return;
-    $$('.layer', demo).forEach(l => l.style.display = 'none');
+    $$('.layer', demo).forEach(l => { l.style.display = 'none'; });
     $$('.layer-tab', demo).forEach(t => t.classList.remove('active'));
-    const layer = $('#' + layerId);
+    const esc = typeof CSS !== 'undefined' && CSS.escape ? CSS.escape(layerId) : layerId.replace(/[^\w-]/g, '');
+    let layer = demo.querySelector('#' + esc);
+    if (!layer) layer = demo.querySelector('#layer-' + esc);
     if (layer) layer.style.display = 'block';
-    btn.classList.add('active');
+    tab.classList.add('active');
   };
 
 })();
diff --git a/docs/course/jinrong-module-platform/modules/01-routes.html b/docs/course/jinrong-module-platform/modules/01-routes.html
index 8ceab97..30c9063 100644
--- a/docs/course/jinrong-module-platform/modules/01-routes.html
+++ b/docs/course/jinrong-module-platform/modules/01-routes.html
@@ -14,7 +14,7 @@
       <div class="pattern-cards">
         <div class="pattern-card">
           <h3>/api/customers/*</h3>
-          <p>客户 L0 档案、持仓、流水。<code>customers.py</code> → <code>platform/customer_service</code> → <code>core_ro</code>。</p>
+          <p>客户 L0 档案、持仓、流水。平台客户 REST 薄路由（<code>customers.py</code>） → <code>platform/customer_service</code> → <code>core_ro</code>。</p>
         </div>
         <div class="pattern-card">
           <h3>/api/products/*</h3>
@@ -37,7 +37,7 @@
     <div class="screen animate-in">
       <h2>三层分工（别让 AI 在路由里写 SQL）</h2>
       <div class="flow-animation" data-steps='[
-        {"highlight":"flow-actor-1","label":"HTTP 请求进入 customers.py"},
+        {"highlight":"flow-actor-1","label":"HTTP 请求进入 平台客户 REST 薄路由（customers.py）"},
         {"highlight":"flow-actor-2","label":"get_platform_auth_context：验 JWT + 归属","packet":true,"from":"1","to":"2"},
         {"highlight":"flow-actor-3","label":"platform_service：组装、分页、脱敏开关","packet":true,"from":"2","to":"3"},
         {"highlight":"flow-actor-4","label":"core_ro：SELECT 只读，不感知 HTTP","packet":true,"from":"3","to":"4"},
@@ -60,7 +60,7 @@
     <div class="screen animate-in">
       <div class="translation-block">
         <div class="translation-code">
-          <span class="translation-label">薄路由 · customers.py</span>
+          <span class="translation-label">平台客户 REST 薄路由（customers.py）</span>
           <pre><code><span class="code-line"><span class="code-comment">"""代销平台 · 客户 L0 与资产读 API（canonical · 不要求 X-Agent-Type）。"""</span></span>
 <span class="code-line">@router.get(<span class="code-string">"/{customer_id}/holdings"</span>)</span>
 <span class="code-line"><span class="code-keyword">def</span> <span class="code-function">list_holdings</span>(</span>
diff --git a/docs/course/jinrong-module-platform/modules/02-auth-flow.html b/docs/course/jinrong-module-platform/modules/02-auth-flow.html
index a9398a8..381d9e5 100644
--- a/docs/course/jinrong-module-platform/modules/02-auth-flow.html
+++ b/docs/course/jinrong-module-platform/modules/02-auth-flow.html
@@ -38,7 +38,7 @@
           <div class="chat-message" data-msg="1" data-sender="api" style="display:none">
             <div class="chat-avatar" style="background: #5A9DB8">🚪</div>
             <div class="chat-bubble">
-              <span class="chat-sender" style="color: #5A9DB8">customers.py</span>
+              <span class="chat-sender" style="color: #5A9DB8">平台客户 REST 薄路由（customers.py）</span>
               <p>Depends(get_platform_auth_context) → JWT 验签 OK<br>assert_platform_customer_access：STAFF-10086 名下有 CUST-1001 ✓</p>
             </div>
           </div>
diff --git a/docs/course/jinrong-module-platform/modules/03-desensitize.html b/docs/course/jinrong-module-platform/modules/03-desensitize.html
index 4b1be6c..ac08c63 100644
--- a/docs/course/jinrong-module-platform/modules/03-desensitize.html
+++ b/docs/course/jinrong-module-platform/modules/03-desensitize.html
@@ -21,14 +21,14 @@
         </tbody>
       </table>
       <div class="callout callout-accent">
-        <strong>实现位置：</strong> <code>app/service/platform/common.py</code> 的 <code>maybe_desensitize_row</code> → <code>prepare_row</code>。REST 与 Agent 适配层都应走这里，不要在路由里手写 mask。
+        <strong>实现位置：</strong> 响应脱敏（<code>app/service/platform/common.py</code>）的 <code>maybe_desensitize_row</code> → <code>prepare_row</code>。REST 与 Agent 适配层都应走这里，不要在路由里手写 mask。
       </div>
     </div>
 
     <div class="screen animate-in">
       <div class="translation-block">
         <div class="translation-code">
-          <span class="translation-label">platform/common.py</span>
+          <span class="translation-label">响应脱敏（platform/common.py）</span>
           <pre><code><span class="code-line"><span class="code-keyword">def</span> <span class="code-function">maybe_desensitize_row</span>(row: dict | None) -> dict | None:</span>
 <span class="code-line">    <span class="code-keyword">if</span> row <span class="code-keyword">is</span> None <span class="code-keyword">or not</span> settings.platform_response_desensitize:</span>
 <span class="code-line">        <span class="code-keyword">return</span> row</span>
@@ -59,11 +59,11 @@
         <div class="quiz-question-block"
              data-correct="option-c"
              data-explanation-right="对。默认 false 是为了模拟库联调；上真库时在 .env 设 PLATFORM_RESPONSE_DESENSITIZE=true，脱敏在 Service 层自动生效。"
-             data-explanation-wrong="不要在每个路由里 copy 打码逻辑；开关在 settings，行为在 platform/common.py。">
+             data-explanation-wrong="不要在每个路由里 copy 打码逻辑；开关在 settings，行为在 响应脱敏（platform/common.py）。">
           <h3 class="quiz-question">准备接真 Core，要让出参打码手机号，最省事的做法是？</h3>
           <div class="quiz-options">
             <button class="quiz-option" data-value="option-a" onclick="selectOption(this)">
-              <div class="quiz-option-radio"></div><span>在每个 customers.py 返回前手写 replace</span>
+              <div class="quiz-option-radio"></div><span>在平台客户 REST 薄路由（customers.py）返回前手写 replace</span>
             </button>
             <button class="quiz-option" data-value="option-b" onclick="selectOption(this)">
               <div class="quiz-option-radio"></div><span>让前端自己 mask 手机号</span>
diff --git a/docs/course/jinrong-module-platform/modules/04-seams.html b/docs/course/jinrong-module-platform/modules/04-seams.html
new file mode 100644
index 0000000..4ee80d9
--- /dev/null
+++ b/docs/course/jinrong-module-platform/modules/04-seams.html
@@ -0,0 +1,72 @@
+<section class="module" id="module-4">
+  <div class="module-inner">
+    <p class="eyebrow animate-in">模块 4 · 接缝与草案</p>
+    <h1 class="module-title animate-in">适当性只准一条 canonical<br>还有空壳与行情草案</h1>
+    <p class="module-lead animate-in">
+      平台 API 是 v0.1 的「对外标准」，但仓库里已有<strong>重复能力、空壳路由、Phase B 草案</strong>。
+      指挥 AI 加第三条适当性 URL 或前端直连行情源，都会踩接缝。
+    </p>
+
+    <div class="screen animate-in">
+      <h2>路由补全：staff 与空壳</h2>
+      <div class="pattern-cards">
+        <div class="pattern-card">
+          <h3>已实现 · v0.1 四域 + staff</h3>
+          <p><code>/api/customers</code> · <code>products</code> · <code>advisors</code> · <code>compliance</code> · <code>staff</code></p>
+        </div>
+        <div class="pattern-card">
+          <h3>空壳 · 一期不做</h3>
+          <p>知识库空壳 API（<code>knowledge.py</code>） · 管理空壳 API（<code>admin.py</code>） — T-21 拍板：脚本入库，无上传/重建 HTTP。</p>
+        </div>
+      </div>
+    </div>
+
+    <div class="screen animate-in">
+      <h2>适当性：两条 URL，别再开第三条</h2>
+      <div class="translation-block">
+        <div class="translation-code">
+          <span class="translation-label">canonical（平台）</span>
+          <pre><code><span class="code-line">POST /api/compliance/suitability-check</span>
+<span class="code-line">→ get_platform_auth_context</span>
+<span class="code-line">→ app/service/platform/</span></code></pre>
+        </div>
+        <div class="translation-english">
+          <span class="translation-label">风控专用（对话/演示）</span>
+          <div class="translation-lines">
+            <p class="tl"><code>POST /api/risk/suitability/check</code> — 风控 REST + X-Agent-Type: risk。</p>
+            <p class="tl">客服 <code>suitability_check</code> Tool 走 <code>core_ro.check_suitability</code>，是第三条<strong>对话内</strong>路径，但底层同一判定内核。</p>
+            <p class="tl">新增 HTTP 路由前先查契约迁移表，避免四个入口四个口径。</p>
+          </div>
+        </div>
+      </div>
+    </div>
+
+    <div class="screen animate-in">
+      <h2>行情 Phase B（草案 · 未落地）</h2>
+      <p>v0.2 草案：<code>nav-snapshot</code> · <code>sync_market_nav</code>。C-05 硬规则：<strong>禁止爬虫、禁止前端直连第三方行情</strong>——净值须走后端同步管道。</p>
+
+      <div class="quiz-container" id="quiz-platform-m4">
+        <div class="quiz-question-block"
+             data-correct="option-c"
+             data-explanation-right="对。PLATFORM_RESPONSE_DESENSITIZE 默认关是为了联调看原值；上真 Core 再开，customer_id 仍不打码。"
+             data-explanation-wrong="脱敏开关是环境策略，不是「忘了做脱敏」。">
+          <h3 class="quiz-question">联调时响应是明文 ID，AI 说「脱敏坏了」，你怎么回？</h3>
+          <div class="quiz-options">
+            <button class="quiz-option" data-value="option-a" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>是 bug，强制默认开脱敏</span>
+            </button>
+            <button class="quiz-option" data-value="option-b" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>让前端自己 mask</span>
+            </button>
+            <button class="quiz-option" data-value="option-c" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>模拟库默认关是拍板；真 Core 再开 PLATFORM_RESPONSE_DESENSITIZE</span>
+            </button>
+          </div>
+          <div class="quiz-feedback"></div>
+        </div>
+        <button class="quiz-check-btn" onclick="checkQuiz('quiz-platform-m4')">检查答案</button>
+        <button class="quiz-reset-btn" onclick="resetQuiz('quiz-platform-m4')">重做</button>
+      </div>
+    </div>
+  </div>
+</section>
diff --git a/docs/course/jinrong-module-platform/styles.css b/docs/course/jinrong-module-platform/styles.css
index 544669c..68d0e39 100644
--- a/docs/course/jinrong-module-platform/styles.css
+++ b/docs/course/jinrong-module-platform/styles.css
@@ -254,7 +254,8 @@ pre::-webkit-scrollbar { display: none; }
   padding-top: calc(var(--nav-height) + var(--space-12));
 }
 
-.module-content {
+.module-content,
+.module-inner {
   max-width: var(--content-width);
   margin: 0 auto;
 }
diff --git a/docs/course/jinrong-module-risk/_base.html b/docs/course/jinrong-module-risk/_base.html
index bd1751e..054730d 100644
--- a/docs/course/jinrong-module-risk/_base.html
+++ b/docs/course/jinrong-module-risk/_base.html
@@ -32,6 +32,7 @@
         <button class="nav-dot" data-target="module-1" data-tooltip="四条能力线" role="tab" aria-label="模块 1: 四条能力线"></button>
         <button class="nav-dot" data-target="module-2" data-tooltip="交易链路" role="tab" aria-label="模块 2: 交易链路"></button>
         <button class="nav-dot" data-target="module-3" data-tooltip="台账与对话" role="tab" aria-label="模块 3: 台账与对话"></button>
+        <button class="nav-dot" data-target="module-4" data-tooltip="演示与缺口" role="tab" aria-label="模块 4: 演示与缺口"></button>
       </div>
     </div>
   </nav>
diff --git a/docs/course/jinrong-module-risk/index.html b/docs/course/jinrong-module-risk/index.html
index 2f1ed08..302faa0 100644
--- a/docs/course/jinrong-module-risk/index.html
+++ b/docs/course/jinrong-module-risk/index.html
@@ -32,6 +32,7 @@
         <button class="nav-dot" data-target="module-1" data-tooltip="四条能力线" role="tab" aria-label="模块 1: 四条能力线"></button>
         <button class="nav-dot" data-target="module-2" data-tooltip="交易链路" role="tab" aria-label="模块 2: 交易链路"></button>
         <button class="nav-dot" data-target="module-3" data-tooltip="台账与对话" role="tab" aria-label="模块 3: 台账与对话"></button>
+        <button class="nav-dot" data-target="module-4" data-tooltip="演示与缺口" role="tab" aria-label="模块 4: 演示与缺口"></button>
       </div>
     </div>
   </nav>
@@ -64,7 +65,7 @@
         </div>
         <div class="pattern-card">
           <h3>模拟交易 FR-1</h3>
-          <p><code>POST /api/simulate/trade</code>：risk_demo 或客户本人可提交；走 trade_gateway → 适当性 → 规则引擎。</p>
+          <p><code>POST /api/simulate/trade</code>：risk_demo 或客户本人可提交；走 模拟写 Core 网关（trade_gateway.py） → 适当性 → 规则引擎（risk_engine.py）。</p>
         </div>
       </div>
       <div class="callout callout-accent">
@@ -123,7 +124,7 @@
     <div class="screen animate-in">
       <div class="translation-block">
         <div class="translation-code">
-          <span class="translation-label">CODE · simulate.py 鉴权</span>
+          <span class="translation-label">CODE · 模拟交易入口（simulate.py）鉴权</span>
           <pre><code><span class="code-line"><span class="code-keyword">if not</span> (auth.has_role(<span class="code-string">"risk_demo"</span>)</span>
 <span class="code-line">        <span class="code-keyword">or</span> (auth.is_customer()</span>
 <span class="code-line">            <span class="code-keyword">and</span> auth.customer_id == req.customer_id)):</span>
@@ -170,8 +171,8 @@
     <p class="eyebrow animate-in">模块 2 · 模拟交易链路</p>
     <h1 class="module-title animate-in">一笔演示交易<br>怎么长出预警单？</h1>
     <p class="module-lead animate-in">
-      <code>RiskSimulatePage</code> 提交表单 → <code>simulate.py</code> 验权 → <code>trade_gateway</code> 写库 →
-      <code>risk_engine</code> 扫规则 → 聚合进 <code>risk_alert</code>。
+      <code>RiskSimulatePage</code> 提交表单 → 模拟交易入口（<code>simulate.py</code>）验权 → 模拟写 Core 网关（<code>trade_gateway.py</code>）写库 →
+      规则引擎（<code>risk_engine.py</code>）扫规则 → 聚合进 <code>risk_alert</code>。
       像演示用的「假收银台」：钱是假的，但风控流程是真的。
     </p>
 
@@ -179,16 +180,16 @@
       <h2>四段链路（动画）</h2>
       <div class="flow-animation" data-steps='[
         {"highlight":"flow-actor-1","label":"RiskSimulatePage：submitSimulateTrade(token, \"risk\", body)"},
-        {"highlight":"flow-actor-2","label":"POST /api/simulate/trade → 鉴权 risk_demo 或客户本人","packet":true,"from":"1","to":"2"},
-        {"highlight":"flow-actor-3","label":"trade_gateway：R-02 适当性 → INSERT core_trade（唯一写 Core 路径）","packet":true,"from":"2","to":"3"},
-        {"highlight":"flow-actor-4","label":"risk_engine 扫描 → 写 risk_alert（大额/集中度等）","packet":true,"from":"3","to":"4"},
+        {"highlight":"flow-actor-2","label":"模拟交易入口（simulate.py）：POST /api/simulate/trade → 鉴权 risk_demo 或客户本人","packet":true,"from":"1","to":"2"},
+        {"highlight":"flow-actor-3","label":"模拟写 Core 网关（trade_gateway.py）：R-02 适当性 → INSERT core_trade（唯一写 Core 路径）","packet":true,"from":"2","to":"3"},
+        {"highlight":"flow-actor-4","label":"规则引擎（risk_engine.py）扫描 → 写 risk_alert（大额/集中度等）","packet":true,"from":"3","to":"4"},
         {"highlight":"flow-actor-1","label":"台账 GET /api/risk/alerts 可见 + 固定 disclaimer","packet":true,"from":"4","to":"1"}
       ]'>
         <div class="flow-actors">
           <div class="flow-actor" id="flow-actor-1"><span class="flow-actor-icon">🧪</span><span>模拟交易 UI</span></div>
-          <div class="flow-actor" id="flow-actor-2"><span class="flow-actor-icon">🚪</span><span>simulate.py</span></div>
-          <div class="flow-actor" id="flow-actor-3"><span class="flow-actor-icon">⚙</span><span>trade_gateway</span></div>
-          <div class="flow-actor" id="flow-actor-4"><span class="flow-actor-icon">🛡</span><span>risk_engine</span></div>
+          <div class="flow-actor" id="flow-actor-2"><span class="flow-actor-icon">🚪</span><span>模拟交易入口</span></div>
+          <div class="flow-actor" id="flow-actor-3"><span class="flow-actor-icon">⚙</span><span>模拟写 Core 网关</span></div>
+          <div class="flow-actor" id="flow-actor-4"><span class="flow-actor-icon">🛡</span><span>规则引擎</span></div>
         </div>
         <p class="flow-step-label">Preset A-3：CUST-3001 · 50 万 → 大额预警 · Preset A-1：适当性阻断</p>
         <div class="flow-controls">
@@ -201,12 +202,12 @@
     <div class="screen animate-in">
       <h2>代码地图</h2>
       <div class="file-tree animate-in">
-        <div class="tree-item tree-folder">app/api/simulate.py</div>
+        <div class="tree-item tree-folder">模拟交易入口（app/api/simulate.py）</div>
         <div class="tree-item tree-indent">薄路由：鉴权 + 调 submit_trade</div>
-        <div class="tree-item tree-folder">app/gateway/trade_gateway.py</div>
+        <div class="tree-item tree-folder">模拟写 Core 网关（app/gateway/trade_gateway.py）</div>
         <div class="tree-item tree-indent">适当性 → 写 core_trade → 调 risk 引擎</div>
         <div class="tree-item tree-folder">app/service/risk/</div>
-        <div class="tree-item tree-indent">risk_engine.py · alert_service.py · 规则聚合</div>
+        <div class="tree-item tree-indent">规则引擎（risk_engine.py） · alert_service.py · 规则聚合</div>
         <div class="tree-item tree-folder">web/src/pages/risk/RiskSimulatePage.tsx</div>
         <div class="tree-item tree-indent">预设 A-1 / A-3 一键填表</div>
       </div>
@@ -215,7 +216,7 @@
     <div class="screen animate-in">
       <div class="translation-block">
         <div class="translation-code">
-          <span class="translation-label">CODE · simulate.py</span>
+          <span class="translation-label">CODE · 模拟交易入口（simulate.py）</span>
           <pre><code><span class="code-line"><span class="code-keyword">if not</span> (auth.has_role(<span class="code-string">"risk_demo"</span>)</span>
 <span class="code-line">        <span class="code-keyword">or</span> (auth.is_customer() <span class="code-keyword">and</span></span>
 <span class="code-line">            auth.customer_id == req.customer_id)):</span>
@@ -234,18 +235,18 @@
       <div class="quiz-container" id="quiz-risk-m2">
         <div class="quiz-question-block"
              data-correct="option-c"
-             data-explanation-right="trade_gateway 是唯一允许向 jinrong_core 写 INSERT 的路径（模拟成交）；Agent 画像不能直接改 Core 正式字段。"
+             data-explanation-right="模拟写 Core 网关（trade_gateway.py）是唯一允许向 jinrong_core 写 INSERT 的路径（模拟成交）；Agent 画像不能直接改 Core 正式字段。"
              data-explanation-wrong="问数和其他 Agent 对 Core 是只读；只有网关模拟交易可写 core_trade。">
           <h3 class="quiz-question">Demo 里谁可以把新成交写进 core_trade？</h3>
           <div class="quiz-options">
             <button class="quiz-option" data-value="option-a" onclick="selectOption(this)">
-              <div class="quiz-option-radio"></div><span>analyst_agent 问数 SQL</span>
+              <div class="quiz-option-radio"></div><span>NL→SQL 编排（analyst_agent.py）问数 SQL</span>
             </button>
             <button class="quiz-option" data-value="option-b" onclick="selectOption(this)">
               <div class="quiz-option-radio"></div><span>风控对话 Tool</span>
             </button>
             <button class="quiz-option" data-value="option-c" onclick="selectOption(this)">
-              <div class="quiz-option-radio"></div><span>trade_gateway（经 simulate/trade）</span>
+              <div class="quiz-option-radio"></div><span>模拟写 Core 网关（trade_gateway.py，经 simulate/trade）</span>
             </button>
           </div>
           <div class="quiz-feedback"></div>
@@ -263,7 +264,7 @@
     <p class="module-lead animate-in">
       风控<span class="term" data-definition="REST：用 URL + HTTP 方法（GET/POST）访问的后端接口，浏览器和脚本都能调。">REST</span>
       走 <code>get_auth_context</code>，前端必须带 <code>X-Agent-Type: risk</code>。
-      风控对话则通过 <code>chat_tools</code> 注册五只只读 Tool + <code>query_agent_behavior</code>，由 <code>tool_service</code> 统一分发。
+      风控对话则通过风控对话 Tool 注册表（<code>chat_tools.py</code>）注册五只只读 Tool + <code>query_agent_behavior</code>，由对话 Tool 编排（<code>tool_service.py</code>）统一分发。
     </p>
 
     <div class="screen animate-in">
@@ -285,9 +286,9 @@
     </div>
 
     <div class="screen animate-in">
-      <h2>chat_tools 注册表（C1 + 扩展）</h2>
+      <h2>风控对话 Tool（chat_tools.py）注册表（C1 + 扩展）</h2>
       <div class="file-tree animate-in">
-        <div class="tree-item tree-folder">app/service/risk/chat_tools.py</div>
+        <div class="tree-item tree-folder">风控对话 Tool（app/service/risk/chat_tools.py）</div>
         <div class="tree-item tree-indent">alert_query — 客户或全量待审预警</div>
         <div class="tree-item tree-indent">customer_context — L0 + L3 + 待审预警</div>
         <div class="tree-item tree-indent">suitability_check — 只读校验 + 审计落库</div>
@@ -390,6 +391,86 @@
       </p>
     </div>
   </div>
+</section>
+<section class="module" id="module-4">
+  <div class="module-inner">
+    <p class="eyebrow animate-in">模块 4 · 演示与缺口</p>
+    <h1 class="module-title animate-in">后端有、前端没有<br>cron 和空台账怎么理解</h1>
+    <p class="module-lead animate-in">
+      风控引擎和 REST 大多已实现，但<strong>演示运维、cron 升级、部分前端按钮</strong>仍开放。
+      reset 后台账为空是正常现象——不是「风控坏了」。
+    </p>
+
+    <div class="screen animate-in">
+      <h2>后端有 · 前端未全接（2026-09）</h2>
+      <div class="pattern-cards">
+        <div class="pattern-card">
+          <h3>AML scan</h3>
+          <p><code>POST /api/risk/aml/scan</code> — API 有，<code>web/</code> 无专用操作页。</p>
+        </div>
+        <div class="pattern-card">
+          <h3>适当性双 URL</h3>
+          <p>平台 canonical <code>/api/compliance/suitability-check</code> vs 风控 <code>/api/risk/suitability/check</code> — 别再加第三条。</p>
+        </div>
+        <div class="pattern-card">
+          <h3>台账筛选</h3>
+          <p>类型/客户/日期高级筛选 — 后端能力部分有，UI 简版。</p>
+        </div>
+      </div>
+    </div>
+
+    <div class="screen animate-in">
+      <h2>FR-9/10：引擎在，cron 无 UI</h2>
+      <div class="flow-animation" data-steps='[
+        {"highlight":"flow-r-1","label":"对话 Tool query_overdue_alerts → 查库内已有超期单"},
+        {"highlight":"flow-r-2","label":"FR-9 超期升级 cron（escalation_scan.py）→ 定时扫描 pending_review 超阈值","packet":true,"from":"1","to":"2"},
+        {"highlight":"flow-r-3","label":"FR-10 行为扫描 cron（agent_behavior_scan.py）→ 行为模式扫描","packet":true,"from":"2","to":"3"},
+        {"highlight":"flow-r-1","label":"须运维手动跑脚本；Chat 里问不到「帮我跑 cron」","packet":true,"from":"3","to":"1"}
+      ]'>
+        <div class="flow-actors">
+          <div class="flow-actor" id="flow-r-1"><span class="flow-actor-icon">💬</span><span>风控 Chat</span></div>
+          <div class="flow-actor" id="flow-r-2"><span class="flow-actor-icon">⏰</span><span>cron 脚本</span></div>
+          <div class="flow-actor" id="flow-r-3"><span class="flow-actor-icon">📊</span><span>MySQL 台账</span></div>
+        </div>
+        <p class="flow-step-label">点击「下一步」</p>
+        <div class="flow-controls">
+          <button class="btn flow-next-btn">下一步</button>
+          <button class="btn flow-reset-btn">重来</button>
+        </div>
+      </div>
+      <div class="callout callout-accent">
+        <strong>reset 后台账空：</strong> <code>reset.ps1</code> 只重建 <code>jinrong_core</code>；<code>risk_alert</code> 要跑 <code>prepare_risk_demo.sql</code> + AML 种子才有演示数据。
+      </div>
+    </div>
+
+    <div class="screen animate-in">
+      <h2>合规硬边界（再强调）</h2>
+      <p>预警默认 <code>pending_review</code> · 仅风控专员 <code>handle</code> 改状态 · <strong>不自动冻户</strong> · 不自动上报监管 · 不改正式 C1~C5。</p>
+
+      <div class="quiz-container" id="quiz-risk-m4">
+        <div class="quiz-question-block"
+             data-correct="option-a"
+             data-explanation-right="对。FR-9 升级靠 escalation_scan 脚本扫库，不是对话里触发定时任务。"
+             data-explanation-wrong="对话 Tool 只能查询已有数据，不能替代 cron 运维。">
+          <h3 class="quiz-question">风控专员说「在 Chat 里说一句就自动跑超期升级」，能实现吗？</h3>
+          <div class="quiz-options">
+            <button class="quiz-option" data-value="option-a" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>不能，要部署/手动跑 FR-9 超期升级 cron（escalation_scan.py）</span>
+            </button>
+            <button class="quiz-option" data-value="option-b" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>能，加 LangGraph 节点调 cron</span>
+            </button>
+            <button class="quiz-option" data-value="option-c" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>能，让客服 Agent 代跑</span>
+            </button>
+          </div>
+          <div class="quiz-feedback"></div>
+        </div>
+        <button class="quiz-check-btn" onclick="checkQuiz('quiz-risk-m4')">检查答案</button>
+        <button class="quiz-reset-btn" onclick="resetQuiz('quiz-risk-m4')">重做</button>
+      </div>
+    </div>
+  </div>
 </section>
   </main>
 
diff --git a/docs/course/jinrong-module-risk/main.js b/docs/course/jinrong-module-risk/main.js
index 7150a69..410548e 100644
--- a/docs/course/jinrong-module-risk/main.js
+++ b/docs/course/jinrong-module-risk/main.js
@@ -486,13 +486,17 @@
 
   /* ── LAYER TOGGLE ──────────────────────────────────────────── */
   window.showLayer = function (layerId, btn) {
-    const demo = btn ? btn.closest('.layer-demo') : null;
+    const tab = btn || (window.event && window.event.currentTarget);
+    if (!tab || !tab.closest) return;
+    const demo = tab.closest('.layer-demo');
     if (!demo) return;
-    $$('.layer', demo).forEach(l => l.style.display = 'none');
+    $$('.layer', demo).forEach(l => { l.style.display = 'none'; });
     $$('.layer-tab', demo).forEach(t => t.classList.remove('active'));
-    const layer = $('#' + layerId);
+    const esc = typeof CSS !== 'undefined' && CSS.escape ? CSS.escape(layerId) : layerId.replace(/[^\w-]/g, '');
+    let layer = demo.querySelector('#' + esc);
+    if (!layer) layer = demo.querySelector('#layer-' + esc);
     if (layer) layer.style.display = 'block';
-    btn.classList.add('active');
+    tab.classList.add('active');
   };
 
 })();
diff --git a/docs/course/jinrong-module-risk/modules/01-capabilities.html b/docs/course/jinrong-module-risk/modules/01-capabilities.html
index 3619fd5..903e49e 100644
--- a/docs/course/jinrong-module-risk/modules/01-capabilities.html
+++ b/docs/course/jinrong-module-risk/modules/01-capabilities.html
@@ -25,7 +25,7 @@
         </div>
         <div class="pattern-card">
           <h3>模拟交易 FR-1</h3>
-          <p><code>POST /api/simulate/trade</code>：risk_demo 或客户本人可提交；走 trade_gateway → 适当性 → 规则引擎。</p>
+          <p><code>POST /api/simulate/trade</code>：risk_demo 或客户本人可提交；走 模拟写 Core 网关（trade_gateway.py） → 适当性 → 规则引擎（risk_engine.py）。</p>
         </div>
       </div>
       <div class="callout callout-accent">
@@ -84,7 +84,7 @@
     <div class="screen animate-in">
       <div class="translation-block">
         <div class="translation-code">
-          <span class="translation-label">CODE · simulate.py 鉴权</span>
+          <span class="translation-label">CODE · 模拟交易入口（simulate.py）鉴权</span>
           <pre><code><span class="code-line"><span class="code-keyword">if not</span> (auth.has_role(<span class="code-string">"risk_demo"</span>)</span>
 <span class="code-line">        <span class="code-keyword">or</span> (auth.is_customer()</span>
 <span class="code-line">            <span class="code-keyword">and</span> auth.customer_id == req.customer_id)):</span>
diff --git a/docs/course/jinrong-module-risk/modules/02-engine.html b/docs/course/jinrong-module-risk/modules/02-engine.html
index 4d4d539..6bca6d8 100644
--- a/docs/course/jinrong-module-risk/modules/02-engine.html
+++ b/docs/course/jinrong-module-risk/modules/02-engine.html
@@ -3,8 +3,8 @@
     <p class="eyebrow animate-in">模块 2 · 模拟交易链路</p>
     <h1 class="module-title animate-in">一笔演示交易<br>怎么长出预警单？</h1>
     <p class="module-lead animate-in">
-      <code>RiskSimulatePage</code> 提交表单 → <code>simulate.py</code> 验权 → <code>trade_gateway</code> 写库 →
-      <code>risk_engine</code> 扫规则 → 聚合进 <code>risk_alert</code>。
+      <code>RiskSimulatePage</code> 提交表单 → 模拟交易入口（<code>simulate.py</code>）验权 → 模拟写 Core 网关（<code>trade_gateway.py</code>）写库 →
+      规则引擎（<code>risk_engine.py</code>）扫规则 → 聚合进 <code>risk_alert</code>。
       像演示用的「假收银台」：钱是假的，但风控流程是真的。
     </p>
 
@@ -12,16 +12,16 @@
       <h2>四段链路（动画）</h2>
       <div class="flow-animation" data-steps='[
         {"highlight":"flow-actor-1","label":"RiskSimulatePage：submitSimulateTrade(token, \"risk\", body)"},
-        {"highlight":"flow-actor-2","label":"POST /api/simulate/trade → 鉴权 risk_demo 或客户本人","packet":true,"from":"1","to":"2"},
-        {"highlight":"flow-actor-3","label":"trade_gateway：R-02 适当性 → INSERT core_trade（唯一写 Core 路径）","packet":true,"from":"2","to":"3"},
-        {"highlight":"flow-actor-4","label":"risk_engine 扫描 → 写 risk_alert（大额/集中度等）","packet":true,"from":"3","to":"4"},
+        {"highlight":"flow-actor-2","label":"模拟交易入口（simulate.py）：POST /api/simulate/trade → 鉴权 risk_demo 或客户本人","packet":true,"from":"1","to":"2"},
+        {"highlight":"flow-actor-3","label":"模拟写 Core 网关（trade_gateway.py）：R-02 适当性 → INSERT core_trade（唯一写 Core 路径）","packet":true,"from":"2","to":"3"},
+        {"highlight":"flow-actor-4","label":"规则引擎（risk_engine.py）扫描 → 写 risk_alert（大额/集中度等）","packet":true,"from":"3","to":"4"},
         {"highlight":"flow-actor-1","label":"台账 GET /api/risk/alerts 可见 + 固定 disclaimer","packet":true,"from":"4","to":"1"}
       ]'>
         <div class="flow-actors">
           <div class="flow-actor" id="flow-actor-1"><span class="flow-actor-icon">🧪</span><span>模拟交易 UI</span></div>
-          <div class="flow-actor" id="flow-actor-2"><span class="flow-actor-icon">🚪</span><span>simulate.py</span></div>
-          <div class="flow-actor" id="flow-actor-3"><span class="flow-actor-icon">⚙</span><span>trade_gateway</span></div>
-          <div class="flow-actor" id="flow-actor-4"><span class="flow-actor-icon">🛡</span><span>risk_engine</span></div>
+          <div class="flow-actor" id="flow-actor-2"><span class="flow-actor-icon">🚪</span><span>模拟交易入口</span></div>
+          <div class="flow-actor" id="flow-actor-3"><span class="flow-actor-icon">⚙</span><span>模拟写 Core 网关</span></div>
+          <div class="flow-actor" id="flow-actor-4"><span class="flow-actor-icon">🛡</span><span>规则引擎</span></div>
         </div>
         <p class="flow-step-label">Preset A-3：CUST-3001 · 50 万 → 大额预警 · Preset A-1：适当性阻断</p>
         <div class="flow-controls">
@@ -34,12 +34,12 @@
     <div class="screen animate-in">
       <h2>代码地图</h2>
       <div class="file-tree animate-in">
-        <div class="tree-item tree-folder">app/api/simulate.py</div>
+        <div class="tree-item tree-folder">模拟交易入口（app/api/simulate.py）</div>
         <div class="tree-item tree-indent">薄路由：鉴权 + 调 submit_trade</div>
-        <div class="tree-item tree-folder">app/gateway/trade_gateway.py</div>
+        <div class="tree-item tree-folder">模拟写 Core 网关（app/gateway/trade_gateway.py）</div>
         <div class="tree-item tree-indent">适当性 → 写 core_trade → 调 risk 引擎</div>
         <div class="tree-item tree-folder">app/service/risk/</div>
-        <div class="tree-item tree-indent">risk_engine.py · alert_service.py · 规则聚合</div>
+        <div class="tree-item tree-indent">规则引擎（risk_engine.py） · alert_service.py · 规则聚合</div>
         <div class="tree-item tree-folder">web/src/pages/risk/RiskSimulatePage.tsx</div>
         <div class="tree-item tree-indent">预设 A-1 / A-3 一键填表</div>
       </div>
@@ -48,7 +48,7 @@
     <div class="screen animate-in">
       <div class="translation-block">
         <div class="translation-code">
-          <span class="translation-label">CODE · simulate.py</span>
+          <span class="translation-label">CODE · 模拟交易入口（simulate.py）</span>
           <pre><code><span class="code-line"><span class="code-keyword">if not</span> (auth.has_role(<span class="code-string">"risk_demo"</span>)</span>
 <span class="code-line">        <span class="code-keyword">or</span> (auth.is_customer() <span class="code-keyword">and</span></span>
 <span class="code-line">            auth.customer_id == req.customer_id)):</span>
@@ -67,18 +67,18 @@
       <div class="quiz-container" id="quiz-risk-m2">
         <div class="quiz-question-block"
              data-correct="option-c"
-             data-explanation-right="trade_gateway 是唯一允许向 jinrong_core 写 INSERT 的路径（模拟成交）；Agent 画像不能直接改 Core 正式字段。"
+             data-explanation-right="模拟写 Core 网关（trade_gateway.py）是唯一允许向 jinrong_core 写 INSERT 的路径（模拟成交）；Agent 画像不能直接改 Core 正式字段。"
              data-explanation-wrong="问数和其他 Agent 对 Core 是只读；只有网关模拟交易可写 core_trade。">
           <h3 class="quiz-question">Demo 里谁可以把新成交写进 core_trade？</h3>
           <div class="quiz-options">
             <button class="quiz-option" data-value="option-a" onclick="selectOption(this)">
-              <div class="quiz-option-radio"></div><span>analyst_agent 问数 SQL</span>
+              <div class="quiz-option-radio"></div><span>NL→SQL 编排（analyst_agent.py）问数 SQL</span>
             </button>
             <button class="quiz-option" data-value="option-b" onclick="selectOption(this)">
               <div class="quiz-option-radio"></div><span>风控对话 Tool</span>
             </button>
             <button class="quiz-option" data-value="option-c" onclick="selectOption(this)">
-              <div class="quiz-option-radio"></div><span>trade_gateway（经 simulate/trade）</span>
+              <div class="quiz-option-radio"></div><span>模拟写 Core 网关（trade_gateway.py，经 simulate/trade）</span>
             </button>
           </div>
           <div class="quiz-feedback"></div>
diff --git a/docs/course/jinrong-module-risk/modules/03-tools-rest.html b/docs/course/jinrong-module-risk/modules/03-tools-rest.html
index 974ec80..8bfa841 100644
--- a/docs/course/jinrong-module-risk/modules/03-tools-rest.html
+++ b/docs/course/jinrong-module-risk/modules/03-tools-rest.html
@@ -5,7 +5,7 @@
     <p class="module-lead animate-in">
       风控<span class="term" data-definition="REST：用 URL + HTTP 方法（GET/POST）访问的后端接口，浏览器和脚本都能调。">REST</span>
       走 <code>get_auth_context</code>，前端必须带 <code>X-Agent-Type: risk</code>。
-      风控对话则通过 <code>chat_tools</code> 注册五只只读 Tool + <code>query_agent_behavior</code>，由 <code>tool_service</code> 统一分发。
+      风控对话则通过风控对话 Tool 注册表（<code>chat_tools.py</code>）注册五只只读 Tool + <code>query_agent_behavior</code>，由对话 Tool 编排（<code>tool_service.py</code>）统一分发。
     </p>
 
     <div class="screen animate-in">
@@ -27,9 +27,9 @@
     </div>
 
     <div class="screen animate-in">
-      <h2>chat_tools 注册表（C1 + 扩展）</h2>
+      <h2>风控对话 Tool（chat_tools.py）注册表（C1 + 扩展）</h2>
       <div class="file-tree animate-in">
-        <div class="tree-item tree-folder">app/service/risk/chat_tools.py</div>
+        <div class="tree-item tree-folder">风控对话 Tool（app/service/risk/chat_tools.py）</div>
         <div class="tree-item tree-indent">alert_query — 客户或全量待审预警</div>
         <div class="tree-item tree-indent">customer_context — L0 + L3 + 待审预警</div>
         <div class="tree-item tree-indent">suitability_check — 只读校验 + 审计落库</div>
diff --git a/docs/course/jinrong-module-risk/modules/04-gaps.html b/docs/course/jinrong-module-risk/modules/04-gaps.html
new file mode 100644
index 0000000..5486b19
--- /dev/null
+++ b/docs/course/jinrong-module-risk/modules/04-gaps.html
@@ -0,0 +1,80 @@
+<section class="module" id="module-4">
+  <div class="module-inner">
+    <p class="eyebrow animate-in">模块 4 · 演示与缺口</p>
+    <h1 class="module-title animate-in">后端有、前端没有<br>cron 和空台账怎么理解</h1>
+    <p class="module-lead animate-in">
+      风控引擎和 REST 大多已实现，但<strong>演示运维、cron 升级、部分前端按钮</strong>仍开放。
+      reset 后台账为空是正常现象——不是「风控坏了」。
+    </p>
+
+    <div class="screen animate-in">
+      <h2>后端有 · 前端未全接（2026-09）</h2>
+      <div class="pattern-cards">
+        <div class="pattern-card">
+          <h3>AML scan</h3>
+          <p><code>POST /api/risk/aml/scan</code> — API 有，<code>web/</code> 无专用操作页。</p>
+        </div>
+        <div class="pattern-card">
+          <h3>适当性双 URL</h3>
+          <p>平台 canonical <code>/api/compliance/suitability-check</code> vs 风控 <code>/api/risk/suitability/check</code> — 别再加第三条。</p>
+        </div>
+        <div class="pattern-card">
+          <h3>台账筛选</h3>
+          <p>类型/客户/日期高级筛选 — 后端能力部分有，UI 简版。</p>
+        </div>
+      </div>
+    </div>
+
+    <div class="screen animate-in">
+      <h2>FR-9/10：引擎在，cron 无 UI</h2>
+      <div class="flow-animation" data-steps='[
+        {"highlight":"flow-r-1","label":"对话 Tool query_overdue_alerts → 查库内已有超期单"},
+        {"highlight":"flow-r-2","label":"FR-9 超期升级 cron（escalation_scan.py）→ 定时扫描 pending_review 超阈值","packet":true,"from":"1","to":"2"},
+        {"highlight":"flow-r-3","label":"FR-10 行为扫描 cron（agent_behavior_scan.py）→ 行为模式扫描","packet":true,"from":"2","to":"3"},
+        {"highlight":"flow-r-1","label":"须运维手动跑脚本；Chat 里问不到「帮我跑 cron」","packet":true,"from":"3","to":"1"}
+      ]'>
+        <div class="flow-actors">
+          <div class="flow-actor" id="flow-r-1"><span class="flow-actor-icon">💬</span><span>风控 Chat</span></div>
+          <div class="flow-actor" id="flow-r-2"><span class="flow-actor-icon">⏰</span><span>cron 脚本</span></div>
+          <div class="flow-actor" id="flow-r-3"><span class="flow-actor-icon">📊</span><span>MySQL 台账</span></div>
+        </div>
+        <p class="flow-step-label">点击「下一步」</p>
+        <div class="flow-controls">
+          <button class="btn flow-next-btn">下一步</button>
+          <button class="btn flow-reset-btn">重来</button>
+        </div>
+      </div>
+      <div class="callout callout-accent">
+        <strong>reset 后台账空：</strong> <code>reset.ps1</code> 只重建 <code>jinrong_core</code>；<code>risk_alert</code> 要跑 <code>prepare_risk_demo.sql</code> + AML 种子才有演示数据。
+      </div>
+    </div>
+
+    <div class="screen animate-in">
+      <h2>合规硬边界（再强调）</h2>
+      <p>预警默认 <code>pending_review</code> · 仅风控专员 <code>handle</code> 改状态 · <strong>不自动冻户</strong> · 不自动上报监管 · 不改正式 C1~C5。</p>
+
+      <div class="quiz-container" id="quiz-risk-m4">
+        <div class="quiz-question-block"
+             data-correct="option-a"
+             data-explanation-right="对。FR-9 升级靠 escalation_scan 脚本扫库，不是对话里触发定时任务。"
+             data-explanation-wrong="对话 Tool 只能查询已有数据，不能替代 cron 运维。">
+          <h3 class="quiz-question">风控专员说「在 Chat 里说一句就自动跑超期升级」，能实现吗？</h3>
+          <div class="quiz-options">
+            <button class="quiz-option" data-value="option-a" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>不能，要部署/手动跑 FR-9 超期升级 cron（escalation_scan.py）</span>
+            </button>
+            <button class="quiz-option" data-value="option-b" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>能，加 LangGraph 节点调 cron</span>
+            </button>
+            <button class="quiz-option" data-value="option-c" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>能，让客服 Agent 代跑</span>
+            </button>
+          </div>
+          <div class="quiz-feedback"></div>
+        </div>
+        <button class="quiz-check-btn" onclick="checkQuiz('quiz-risk-m4')">检查答案</button>
+        <button class="quiz-reset-btn" onclick="resetQuiz('quiz-risk-m4')">重做</button>
+      </div>
+    </div>
+  </div>
+</section>
diff --git a/docs/course/jinrong-module-risk/styles.css b/docs/course/jinrong-module-risk/styles.css
index 544669c..68d0e39 100644
--- a/docs/course/jinrong-module-risk/styles.css
+++ b/docs/course/jinrong-module-risk/styles.css
@@ -254,7 +254,8 @@ pre::-webkit-scrollbar { display: none; }
   padding-top: calc(var(--nav-height) + var(--space-12));
 }
 
-.module-content {
+.module-content,
+.module-inner {
   max-width: var(--content-width);
   margin: 0 auto;
 }
diff --git a/docs/course/jinrong-module-shared/_base.html b/docs/course/jinrong-module-shared/_base.html
index 5169a95..2a68e76 100644
--- a/docs/course/jinrong-module-shared/_base.html
+++ b/docs/course/jinrong-module-shared/_base.html
@@ -32,6 +32,7 @@
         <button class="nav-dot" data-target="module-1" data-tooltip="双栈鉴权" role="tab" aria-label="模块 1: 双栈鉴权"></button>
         <button class="nav-dot" data-target="module-2" data-tooltip="会话 Redis" role="tab" aria-label="模块 2: 会话 Redis"></button>
         <button class="nav-dot" data-target="module-3" data-tooltip="防护审计" role="tab" aria-label="模块 3: 防护审计"></button>
+        <button class="nav-dot" data-target="module-4" data-tooltip="生产认知" role="tab" aria-label="模块 4: 生产认知"></button>
       </div>
     </div>
   </nav>
diff --git a/docs/course/jinrong-module-shared/index.html b/docs/course/jinrong-module-shared/index.html
index a6dbf98..9ca12a6 100644
--- a/docs/course/jinrong-module-shared/index.html
+++ b/docs/course/jinrong-module-shared/index.html
@@ -32,6 +32,7 @@
         <button class="nav-dot" data-target="module-1" data-tooltip="双栈鉴权" role="tab" aria-label="模块 1: 双栈鉴权"></button>
         <button class="nav-dot" data-target="module-2" data-tooltip="会话 Redis" role="tab" aria-label="模块 2: 会话 Redis"></button>
         <button class="nav-dot" data-target="module-3" data-tooltip="防护审计" role="tab" aria-label="模块 3: 防护审计"></button>
+        <button class="nav-dot" data-target="module-4" data-tooltip="生产认知" role="tab" aria-label="模块 4: 生产认知"></button>
       </div>
     </div>
   </nav>
@@ -40,10 +41,10 @@
 <section class="module" id="module-1">
   <div class="module-inner">
     <p class="eyebrow animate-in">模块 1 · 双栈鉴权</p>
-    <h1 class="module-title animate-in">JWT 双栈：<br>deps 与 gateway 各管一线</h1>
+    <h1 class="module-title animate-in">JWT 双栈：<br>模块鉴权（deps.py）与宿主网关鉴权（gateway/auth_deps.py）各管一线</h1>
     <p class="module-lead animate-in">
-      模块 API 走 <code>app/api/deps.py</code>（<code>get_auth_context</code> / <code>get_platform_auth_context</code>）；
-      宿主 Wave 0 网关走 <code>app/gateway/auth_deps.py</code>。
+      模块 API 走模块鉴权（<code>app/api/deps.py</code>）（<code>get_auth_context</code> / <code>get_platform_auth_context</code>）；
+      宿主 Wave 0 网关走宿主网关鉴权（<code>app/gateway/auth_deps.py</code>）。
       <strong>模块禁止 import gateway</strong>——指挥 AI 改鉴权时，先确认改的是哪条栈。
     </p>
 
@@ -54,7 +55,7 @@
         <tbody>
           <tr><td>Agent / 对话</td><td><code>get_auth_context</code></td><td>JWT 通道<strong>必填</strong> + 准入矩阵</td><td>/api/chat, /api/risk/*, simulate</td></tr>
           <tr><td>平台只读</td><td><code>get_platform_auth_context</code></td><td><strong>不要</strong></td><td>/api/customers/*, /api/analyst/*</td></tr>
-          <tr><td>宿主网关</td><td><code>gateway/auth_deps.get_auth_context</code></td><td>宿主口径</td><td>Wave 0 四件套（模块不 import）</td></tr>
+          <tr><td>宿主网关</td><td>宿主网关鉴权（<code>gateway/auth_deps.py</code>）· <code>get_auth_context</code></td><td>宿主口径</td><td>Wave 0 四件套（模块不 import）</td></tr>
         </tbody>
       </table>
       <div class="callout callout-warning">
@@ -65,7 +66,7 @@
     <div class="screen animate-in">
       <div class="translation-block">
         <div class="translation-code">
-          <span class="translation-label">deps.py · 对话线</span>
+          <span class="translation-label">模块鉴权（deps.py）· 对话线</span>
           <pre><code><span class="code-line">agent_type = request.headers.get(<span class="code-string">"X-Agent-Type"</span>)</span>
 <span class="code-line"><span class="code-keyword">if not</span> agent_type:</span>
 <span class="code-line">    raise ApiError(<span class="code-number">401</span>, <span class="code-string">"AUTH_401_MISSING_AGENT_TYPE"</span>)</span>
@@ -81,7 +82,7 @@
             <p class="tl">对话线：验完 JWT 还要读 Agent 头，并对照 AGENT_ACCESS_MATRIX。</p>
             <p class="tl">例如客户 token 不能带 X-Agent-Type: risk，否则 403。</p>
             <p class="tl">平台线：验 JWT 就放行到归属断言，不问你走哪条 Agent。</p>
-            <p class="tl">gateway 栈是宿主合并用，和 deps 双栈并存，别在模块里混 import。</p>
+            <p class="tl">宿主网关鉴权（gateway/auth_deps.py）栈是宿主合并用，和模块鉴权（deps.py）双栈并存，别在模块里混 import。</p>
           </div>
         </div>
       </div>
@@ -99,8 +100,8 @@
       <div class="quiz-container" id="quiz-shared-m1">
         <div class="quiz-question-block"
              data-correct="option-b"
-             data-explanation-right="平台读 API 用 get_platform_auth_context，文件在 deps.py，与 gateway 无关。"
-             data-explanation-wrong="gateway 是宿主 Wave 0；模块平台路由只 Depends deps 里的函数。">
+             data-explanation-right="平台读 API 用 get_platform_auth_context，文件在模块鉴权（deps.py），与宿主网关鉴权（gateway/auth_deps.py）无关。"
+             data-explanation-wrong="宿主网关鉴权（gateway/auth_deps.py）是宿主 Wave 0；模块平台路由只 Depends 模块鉴权（deps.py）里的函数。">
           <h3 class="quiz-question">customers.py 的 Depends 应该从哪 import？</h3>
           <div class="quiz-options">
             <button class="quiz-option" data-value="option-a" onclick="selectOption(this)">
@@ -110,7 +111,7 @@
               <div class="quiz-option-radio"></div><span>app.api.deps.get_platform_auth_context</span>
             </button>
             <button class="quiz-option" data-value="option-c" onclick="selectOption(this)">
-              <div class="quiz-option-radio"></div><span>chat.py 里的解析函数</span>
+              <div class="quiz-option-radio"></div><span>对话 HTTP 入口（chat.py）里的解析函数</span>
             </button>
           </div>
           <div class="quiz-feedback"></div>
@@ -124,7 +125,7 @@
 <section class="module" id="module-2">
   <div class="module-inner">
     <p class="eyebrow animate-in">模块 2 · 会话记忆</p>
-    <h1 class="module-title animate-in">session_repository + memory_service：<br>Redis 窗口，MySQL 权威</h1>
+    <h1 class="module-title animate-in">session_repository + Redis 会话窗口（memory_service.py）：<br>Redis 窗口，MySQL 权威</h1>
     <p class="module-lead animate-in">
       对话每轮消息<strong>同步写 MySQL</strong>（权威），同时用
       <span class="term" data-definition="Redis = 内存数据库，适合存最近几条消息当「滑动窗口」，丢了可从 MySQL 重建。">Redis</span>
@@ -135,17 +136,17 @@
     <div class="screen animate-in">
       <h2>数据流：用户发第二条消息</h2>
       <div class="flow-animation" data-steps='[
-        {"highlight":"flow-actor-1","label":"chat.py 收到 POST /api/chat"},
+        {"highlight":"flow-actor-1","label":"对话 HTTP 入口（chat.py）收到 POST /api/chat"},
         {"highlight":"flow-actor-2","label":"session_repository：INSERT agent_message（MySQL 权威）","packet":true,"from":"1","to":"2"},
-        {"highlight":"flow-actor-3","label":"memory_service.append_window → Redis RPUSH","packet":true,"from":"2","to":"3"},
+        {"highlight":"flow-actor-3","label":"Redis 会话窗口（memory_service.py）.append_window → Redis RPUSH","packet":true,"from":"2","to":"3"},
         {"highlight":"flow-actor-3","label":"LTRIM 保留最近 20 条 + EXPIRE 2h"},
         {"highlight":"flow-actor-2","label":"get_recent：先 Redis LRANGE，miss 回源 list_messages","packet":true,"from":"3","to":"2"},
         {"highlight":"flow-actor-1","label":"拼进 LLM 上下文，生成回复","packet":true,"from":"2","to":"1"}
       ]'>
         <div class="flow-actors">
-          <div class="flow-actor" id="flow-actor-1"><span class="flow-actor-icon">🚪</span><span>chat.py</span></div>
+          <div class="flow-actor" id="flow-actor-1"><span class="flow-actor-icon">🚪</span><span>对话 HTTP 入口（chat.py）</span></div>
           <div class="flow-actor" id="flow-actor-2"><span class="flow-actor-icon">🗄</span><span>session_repository</span></div>
-          <div class="flow-actor" id="flow-actor-3"><span class="flow-actor-icon">⚡</span><span>memory_service · Redis</span></div>
+          <div class="flow-actor" id="flow-actor-3"><span class="flow-actor-icon">⚡</span><span>Redis 会话窗口（memory_service.py）</span></div>
         </div>
         <p class="flow-step-label">Key 格式：sess:{agent}:{session_id}:msgs</p>
         <div class="flow-controls">
@@ -161,7 +162,7 @@
     <div class="screen animate-in">
       <div class="translation-block">
         <div class="translation-code">
-          <span class="translation-label">memory_service.py</span>
+          <span class="translation-label">Redis 会话窗口（memory_service.py）</span>
           <pre><code><span class="code-line"><span class="code-keyword">def</span> <span class="code-function">window_key</span>(agent_type, session_id):</span>
 <span class="code-line">    <span class="code-keyword">return</span> <span class="code-string">f"sess:{agent_type}:{session_id}:msgs"</span></span>
 <span class="code-line"></span>
@@ -212,12 +213,12 @@
 <section class="module" id="module-3">
   <div class="module-inner">
     <p class="eyebrow animate-in">模块 3 · 防护与审计</p>
-    <h1 class="module-title animate-in">input_guard 限流注入、<br>audit_middleware 留痕</h1>
+    <h1 class="module-title animate-in">input_guard 限流注入、<br>审计中间件（audit_middleware.py）留痕</h1>
     <p class="module-lead animate-in">
       用户消息进 LLM 前要经过
       <span class="term" data-definition="input_guard = 输入防护：检查注入短语、超长、频率限制，命中就拒答并写 input_guard_log。">input_guard</span>；
       每个 HTTP 请求经过
-      <span class="term" data-definition="middleware = 请求进业务代码前的统一关卡，像机场安检，所有人都要过一遍。">audit_middleware</span>
+      <span class="term" data-definition="审计中间件（audit_middleware.py）= 请求进业务代码前的统一关卡，像机场安检，所有人都要过一遍；写 audit_log 访问审计。">审计中间件（audit_middleware.py）</span>
       写访问审计。鉴权 403 还会双写 audit_log + input_guard_log（平台线部分跳过 ENUM 限制）。
     </p>
 
@@ -267,7 +268,7 @@
           <div class="chat-message" data-msg="3" data-sender="api" style="display:none">
             <div class="chat-avatar" style="background: #2D8B55">🚪</div>
             <div class="chat-bubble">
-              <span class="chat-sender" style="color: #2D8B55">chat.py</span>
+              <span class="chat-sender" style="color: #2D8B55">对话 HTTP 入口（chat.py）</span>
               <p>返回 400 + 友好拒答文案；trace_id 可对照审计</p>
             </div>
           </div>
@@ -290,7 +291,7 @@
     <div class="screen animate-in">
       <div class="translation-block">
         <div class="translation-code">
-          <span class="translation-label">chat.py + audit_middleware</span>
+          <span class="translation-label">对话 HTTP 入口（chat.py）+ 审计中间件（audit_middleware.py）</span>
           <pre><code><span class="code-line"><span class="code-keyword">if not</span> input_guard.check_rate_limit(agent_type, auth.actor_id):</span>
 <span class="code-line">    insert_input_guard_log(..., guard_type=GUARD_RATE_LIMIT)</span>
 <span class="code-line">    raise ApiError(...)</span>
@@ -299,7 +300,7 @@
 <span class="code-line"><span class="code-keyword">if</span> verdict.reject:</span>
 <span class="code-line">    insert_input_guard_log(..., guard_type=verdict.guard_type)</span>
 <span class="code-line"></span>
-<span class="code-line"><span class="code-comment"># main.py 挂载</span></span>
+<span class="code-line"><span class="code-comment"># 应用入口（main.py）挂载</span></span>
 <span class="code-line">async <span class="code-keyword">def</span> <span class="code-function">audit_middleware</span>(request, call_next):</span>
 <span class="code-line">    <span class="code-comment"># INSERT audit_log 单请求访问记录</span></span></code></pre>
         </div>
@@ -308,8 +309,8 @@
           <div class="translation-lines">
             <p class="tl">先发消息前查频率：同 actor 刷太快就拒，并记限流日志。</p>
             <p class="tl">再扫内容：注入/超长命中就不调 LLM，直接拒答+留痕。</p>
-            <p class="tl">audit_middleware 包在更外层：每个 HTTP 进来都记一条访问审计。</p>
-            <p class="tl">deps.deny 鉴权失败也会双写——平台 agent_type 时 input_guard_log 可能跳过 ENUM 限制。</p>
+            <p class="tl">审计中间件（audit_middleware.py）包在更外层：每个 HTTP 进来都记一条访问审计。</p>
+            <p class="tl">模块鉴权（deps.py）.deny 鉴权失败也会双写——平台 agent_type 时 input_guard_log 可能跳过 ENUM 限制。</p>
           </div>
         </div>
       </div>
@@ -335,12 +336,12 @@
         </div>
         <div class="quiz-question-block"
              data-correct="option-a"
-             data-explanation-right="audit_middleware 记录每个请求的访问轨迹；input_guard_log 专记输入防护命中。"
-             data-explanation-wrong="两者不同表、不同触发点；middleware 不替 guard 做注入检测。">
-          <h3 class="quiz-question">audit_middleware 和 input_guard 的关系？</h3>
+             data-explanation-right="审计中间件（audit_middleware.py）记录每个请求的访问轨迹；input_guard_log 专记输入防护命中。"
+             data-explanation-wrong="两者不同表、不同触发点；审计中间件（audit_middleware.py）不替 guard 做注入检测。">
+          <h3 class="quiz-question">审计中间件（audit_middleware.py）和 input_guard 的关系？</h3>
           <div class="quiz-options">
             <button class="quiz-option" data-value="option-a" onclick="selectOption(this)">
-              <div class="quiz-option-radio"></div><span>middleware 记访问；guard 在 chat 业务里拦恶意输入</span>
+              <div class="quiz-option-radio"></div><span>审计中间件（audit_middleware.py）记访问；guard 在对话 HTTP 入口（chat.py）业务里拦恶意输入</span>
             </button>
             <button class="quiz-option" data-value="option-b" onclick="selectOption(this)">
               <div class="quiz-option-radio"></div><span>同一个函数，名字不同</span>
@@ -353,6 +354,89 @@
       </div>
     </div>
   </div>
+</section>
+<section class="module" id="module-4">
+  <div class="module-inner">
+    <p class="eyebrow animate-in">模块 4 · 生产认知</p>
+    <h1 class="module-title animate-in">审计只 INSERT<br>Redis 6380 与 fail-open</h1>
+    <p class="module-lead animate-in">
+      共用底座课讲了双栈鉴权与 input_guard，这模块补<strong>生产环境行为</strong>和<strong>画像/cache 接缝</strong>——
+      指挥 AI 改「吊销 fail-closed」或「审计可改」前必看。
+    </p>
+
+    <div class="screen animate-in">
+      <h2>G-02：审计表只 INSERT</h2>
+      <p><code>audit_log</code> · <code>input_guard_log</code> · <code>risk_suitability_log</code> 等合规留痕表<strong>禁止 UPDATE/DELETE</strong>。任何「改历史审计」需求都应被拒绝，改为追加更正记录。</p>
+      <div class="callout callout-warning">
+        <strong>input_guard 命中：</strong> fail-fast，<strong>不建会话</strong>——和 LangGraph 内 fallback 不同，没有 reply 回合入库。
+      </div>
+    </div>
+
+    <div class="screen animate-in">
+      <h2>fail-open 与 debug 双闸门</h2>
+      <div class="step-cards">
+        <div class="step-card">
+          <span class="step-num">①</span>
+          <p><strong>Redis 会话窗口 fail-open</strong> — Redis 挂了对话仍能回，只是少短期记忆（客服线同样策略）。</p>
+        </div>
+        <div class="step-card">
+          <span class="step-num">②</span>
+          <p><strong>jti 吊销 fail-open</strong> — 吊销服务异常时 token 仍可能通过；生产要监控 Redis。</p>
+        </div>
+        <div class="step-card">
+          <span class="step-num">③</span>
+          <p><strong>debug 头</strong> — 仅 <code>APP_ENV=development</code> 且<strong>无 RS256 公钥</strong>；生产有公钥时 debug 头失效。</p>
+        </div>
+        <div class="step-card">
+          <span class="step-num">④</span>
+          <p><strong>Redis 6380 + RESP2</strong> — Docker 映射 6380；Windows 本机 6379 旧 Redis 3 不兼容。</p>
+        </div>
+      </div>
+    </div>
+
+    <div class="screen animate-in">
+      <h2>L1/L2 热缓存：谁接了谁没接</h2>
+      <div class="translation-block">
+        <div class="translation-code">
+          <span class="translation-label">接缝快照</span>
+          <pre><code><span class="code-line">客服 profile_maybe_extract → L1 抽槽 ✓</span>
+<span class="code-line">ProfileHotCache → 部分读 ✓</span>
+<span class="code-line">L2 Repository / 全量 Redis L1 → 开放项</span>
+<span class="code-line">宿主 POST /api/chat 非 customer → 未全接 L1 热缓存</span></code></pre>
+        </div>
+        <div class="translation-english">
+          <span class="translation-label">白话</span>
+          <div class="translation-lines">
+            <p class="tl">指挥 AI「全 Agent 统一画像 Redis」前，先对 FRAMEWORK 实现状态表。</p>
+            <p class="tl">Bearer 全环境优先——pytest 仍用 dev token，但生产必须 RS256 + 禁 debug 头冒充。</p>
+          </div>
+        </div>
+      </div>
+
+      <div class="quiz-container" id="quiz-shared-m4">
+        <div class="quiz-question-block"
+             data-correct="option-a"
+             data-explanation-right="对。审计表只追加；更正应新 INSERT 带引用 trace，不能 UPDATE 原记录。"
+             data-explanation-wrong="改 audit_log 历史行违反 G-02，合规不可接受。">
+          <h3 class="quiz-question">运维说「把 audit_log 里错的那条改成正确 decision」，你怎么回？</h3>
+          <div class="quiz-options">
+            <button class="quiz-option" data-value="option-a" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>不行，追加新审计记录说明更正</span>
+            </button>
+            <button class="quiz-option" data-value="option-b" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>好，SQL UPDATE 一行</span>
+            </button>
+            <button class="quiz-option" data-value="option-c" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>好，DELETE 后重插</span>
+            </button>
+          </div>
+          <div class="quiz-feedback"></div>
+        </div>
+        <button class="quiz-check-btn" onclick="checkQuiz('quiz-shared-m4')">检查答案</button>
+        <button class="quiz-reset-btn" onclick="resetQuiz('quiz-shared-m4')">重做</button>
+      </div>
+    </div>
+  </div>
 </section>
   </main>
 
diff --git a/docs/course/jinrong-module-shared/main.js b/docs/course/jinrong-module-shared/main.js
index 7150a69..410548e 100644
--- a/docs/course/jinrong-module-shared/main.js
+++ b/docs/course/jinrong-module-shared/main.js
@@ -486,13 +486,17 @@
 
   /* ── LAYER TOGGLE ──────────────────────────────────────────── */
   window.showLayer = function (layerId, btn) {
-    const demo = btn ? btn.closest('.layer-demo') : null;
+    const tab = btn || (window.event && window.event.currentTarget);
+    if (!tab || !tab.closest) return;
+    const demo = tab.closest('.layer-demo');
     if (!demo) return;
-    $$('.layer', demo).forEach(l => l.style.display = 'none');
+    $$('.layer', demo).forEach(l => { l.style.display = 'none'; });
     $$('.layer-tab', demo).forEach(t => t.classList.remove('active'));
-    const layer = $('#' + layerId);
+    const esc = typeof CSS !== 'undefined' && CSS.escape ? CSS.escape(layerId) : layerId.replace(/[^\w-]/g, '');
+    let layer = demo.querySelector('#' + esc);
+    if (!layer) layer = demo.querySelector('#layer-' + esc);
     if (layer) layer.style.display = 'block';
-    btn.classList.add('active');
+    tab.classList.add('active');
   };
 
 })();
diff --git a/docs/course/jinrong-module-shared/modules/01-dual-auth.html b/docs/course/jinrong-module-shared/modules/01-dual-auth.html
index 5df7f70..6928252 100644
--- a/docs/course/jinrong-module-shared/modules/01-dual-auth.html
+++ b/docs/course/jinrong-module-shared/modules/01-dual-auth.html
@@ -1,10 +1,10 @@
 <section class="module" id="module-1">
   <div class="module-inner">
     <p class="eyebrow animate-in">模块 1 · 双栈鉴权</p>
-    <h1 class="module-title animate-in">JWT 双栈：<br>deps 与 gateway 各管一线</h1>
+    <h1 class="module-title animate-in">JWT 双栈：<br>模块鉴权（deps.py）与宿主网关鉴权（gateway/auth_deps.py）各管一线</h1>
     <p class="module-lead animate-in">
-      模块 API 走 <code>app/api/deps.py</code>（<code>get_auth_context</code> / <code>get_platform_auth_context</code>）；
-      宿主 Wave 0 网关走 <code>app/gateway/auth_deps.py</code>。
+      模块 API 走模块鉴权（<code>app/api/deps.py</code>）（<code>get_auth_context</code> / <code>get_platform_auth_context</code>）；
+      宿主 Wave 0 网关走宿主网关鉴权（<code>app/gateway/auth_deps.py</code>）。
       <strong>模块禁止 import gateway</strong>——指挥 AI 改鉴权时，先确认改的是哪条栈。
     </p>
 
@@ -15,7 +15,7 @@
         <tbody>
           <tr><td>Agent / 对话</td><td><code>get_auth_context</code></td><td>JWT 通道<strong>必填</strong> + 准入矩阵</td><td>/api/chat, /api/risk/*, simulate</td></tr>
           <tr><td>平台只读</td><td><code>get_platform_auth_context</code></td><td><strong>不要</strong></td><td>/api/customers/*, /api/analyst/*</td></tr>
-          <tr><td>宿主网关</td><td><code>gateway/auth_deps.get_auth_context</code></td><td>宿主口径</td><td>Wave 0 四件套（模块不 import）</td></tr>
+          <tr><td>宿主网关</td><td>宿主网关鉴权（<code>gateway/auth_deps.py</code>）· <code>get_auth_context</code></td><td>宿主口径</td><td>Wave 0 四件套（模块不 import）</td></tr>
         </tbody>
       </table>
       <div class="callout callout-warning">
@@ -26,7 +26,7 @@
     <div class="screen animate-in">
       <div class="translation-block">
         <div class="translation-code">
-          <span class="translation-label">deps.py · 对话线</span>
+          <span class="translation-label">模块鉴权（deps.py）· 对话线</span>
           <pre><code><span class="code-line">agent_type = request.headers.get(<span class="code-string">"X-Agent-Type"</span>)</span>
 <span class="code-line"><span class="code-keyword">if not</span> agent_type:</span>
 <span class="code-line">    raise ApiError(<span class="code-number">401</span>, <span class="code-string">"AUTH_401_MISSING_AGENT_TYPE"</span>)</span>
@@ -42,7 +42,7 @@
             <p class="tl">对话线：验完 JWT 还要读 Agent 头，并对照 AGENT_ACCESS_MATRIX。</p>
             <p class="tl">例如客户 token 不能带 X-Agent-Type: risk，否则 403。</p>
             <p class="tl">平台线：验 JWT 就放行到归属断言，不问你走哪条 Agent。</p>
-            <p class="tl">gateway 栈是宿主合并用，和 deps 双栈并存，别在模块里混 import。</p>
+            <p class="tl">宿主网关鉴权（gateway/auth_deps.py）栈是宿主合并用，和模块鉴权（deps.py）双栈并存，别在模块里混 import。</p>
           </div>
         </div>
       </div>
@@ -60,8 +60,8 @@
       <div class="quiz-container" id="quiz-shared-m1">
         <div class="quiz-question-block"
              data-correct="option-b"
-             data-explanation-right="平台读 API 用 get_platform_auth_context，文件在 deps.py，与 gateway 无关。"
-             data-explanation-wrong="gateway 是宿主 Wave 0；模块平台路由只 Depends deps 里的函数。">
+             data-explanation-right="平台读 API 用 get_platform_auth_context，文件在模块鉴权（deps.py），与宿主网关鉴权（gateway/auth_deps.py）无关。"
+             data-explanation-wrong="宿主网关鉴权（gateway/auth_deps.py）是宿主 Wave 0；模块平台路由只 Depends 模块鉴权（deps.py）里的函数。">
           <h3 class="quiz-question">customers.py 的 Depends 应该从哪 import？</h3>
           <div class="quiz-options">
             <button class="quiz-option" data-value="option-a" onclick="selectOption(this)">
@@ -71,7 +71,7 @@
               <div class="quiz-option-radio"></div><span>app.api.deps.get_platform_auth_context</span>
             </button>
             <button class="quiz-option" data-value="option-c" onclick="selectOption(this)">
-              <div class="quiz-option-radio"></div><span>chat.py 里的解析函数</span>
+              <div class="quiz-option-radio"></div><span>对话 HTTP 入口（chat.py）里的解析函数</span>
             </button>
           </div>
           <div class="quiz-feedback"></div>
diff --git a/docs/course/jinrong-module-shared/modules/02-session-redis.html b/docs/course/jinrong-module-shared/modules/02-session-redis.html
index 6eb3d23..d1e3156 100644
--- a/docs/course/jinrong-module-shared/modules/02-session-redis.html
+++ b/docs/course/jinrong-module-shared/modules/02-session-redis.html
@@ -1,7 +1,7 @@
 <section class="module" id="module-2">
   <div class="module-inner">
     <p class="eyebrow animate-in">模块 2 · 会话记忆</p>
-    <h1 class="module-title animate-in">session_repository + memory_service：<br>Redis 窗口，MySQL 权威</h1>
+    <h1 class="module-title animate-in">session_repository + Redis 会话窗口（memory_service.py）：<br>Redis 窗口，MySQL 权威</h1>
     <p class="module-lead animate-in">
       对话每轮消息<strong>同步写 MySQL</strong>（权威），同时用
       <span class="term" data-definition="Redis = 内存数据库，适合存最近几条消息当「滑动窗口」，丢了可从 MySQL 重建。">Redis</span>
@@ -12,17 +12,17 @@
     <div class="screen animate-in">
       <h2>数据流：用户发第二条消息</h2>
       <div class="flow-animation" data-steps='[
-        {"highlight":"flow-actor-1","label":"chat.py 收到 POST /api/chat"},
+        {"highlight":"flow-actor-1","label":"对话 HTTP 入口（chat.py）收到 POST /api/chat"},
         {"highlight":"flow-actor-2","label":"session_repository：INSERT agent_message（MySQL 权威）","packet":true,"from":"1","to":"2"},
-        {"highlight":"flow-actor-3","label":"memory_service.append_window → Redis RPUSH","packet":true,"from":"2","to":"3"},
+        {"highlight":"flow-actor-3","label":"Redis 会话窗口（memory_service.py）.append_window → Redis RPUSH","packet":true,"from":"2","to":"3"},
         {"highlight":"flow-actor-3","label":"LTRIM 保留最近 20 条 + EXPIRE 2h"},
         {"highlight":"flow-actor-2","label":"get_recent：先 Redis LRANGE，miss 回源 list_messages","packet":true,"from":"3","to":"2"},
         {"highlight":"flow-actor-1","label":"拼进 LLM 上下文，生成回复","packet":true,"from":"2","to":"1"}
       ]'>
         <div class="flow-actors">
-          <div class="flow-actor" id="flow-actor-1"><span class="flow-actor-icon">🚪</span><span>chat.py</span></div>
+          <div class="flow-actor" id="flow-actor-1"><span class="flow-actor-icon">🚪</span><span>对话 HTTP 入口（chat.py）</span></div>
           <div class="flow-actor" id="flow-actor-2"><span class="flow-actor-icon">🗄</span><span>session_repository</span></div>
-          <div class="flow-actor" id="flow-actor-3"><span class="flow-actor-icon">⚡</span><span>memory_service · Redis</span></div>
+          <div class="flow-actor" id="flow-actor-3"><span class="flow-actor-icon">⚡</span><span>Redis 会话窗口（memory_service.py）</span></div>
         </div>
         <p class="flow-step-label">Key 格式：sess:{agent}:{session_id}:msgs</p>
         <div class="flow-controls">
@@ -38,7 +38,7 @@
     <div class="screen animate-in">
       <div class="translation-block">
         <div class="translation-code">
-          <span class="translation-label">memory_service.py</span>
+          <span class="translation-label">Redis 会话窗口（memory_service.py）</span>
           <pre><code><span class="code-line"><span class="code-keyword">def</span> <span class="code-function">window_key</span>(agent_type, session_id):</span>
 <span class="code-line">    <span class="code-keyword">return</span> <span class="code-string">f"sess:{agent_type}:{session_id}:msgs"</span></span>
 <span class="code-line"></span>
diff --git a/docs/course/jinrong-module-shared/modules/03-guard-audit.html b/docs/course/jinrong-module-shared/modules/03-guard-audit.html
index 7f2d87d..b5000a8 100644
--- a/docs/course/jinrong-module-shared/modules/03-guard-audit.html
+++ b/docs/course/jinrong-module-shared/modules/03-guard-audit.html
@@ -1,12 +1,12 @@
 <section class="module" id="module-3">
   <div class="module-inner">
     <p class="eyebrow animate-in">模块 3 · 防护与审计</p>
-    <h1 class="module-title animate-in">input_guard 限流注入、<br>audit_middleware 留痕</h1>
+    <h1 class="module-title animate-in">input_guard 限流注入、<br>审计中间件（audit_middleware.py）留痕</h1>
     <p class="module-lead animate-in">
       用户消息进 LLM 前要经过
       <span class="term" data-definition="input_guard = 输入防护：检查注入短语、超长、频率限制，命中就拒答并写 input_guard_log。">input_guard</span>；
       每个 HTTP 请求经过
-      <span class="term" data-definition="middleware = 请求进业务代码前的统一关卡，像机场安检，所有人都要过一遍。">audit_middleware</span>
+      <span class="term" data-definition="审计中间件（audit_middleware.py）= 请求进业务代码前的统一关卡，像机场安检，所有人都要过一遍；写 audit_log 访问审计。">审计中间件（audit_middleware.py）</span>
       写访问审计。鉴权 403 还会双写 audit_log + input_guard_log（平台线部分跳过 ENUM 限制）。
     </p>
 
@@ -56,7 +56,7 @@
           <div class="chat-message" data-msg="3" data-sender="api" style="display:none">
             <div class="chat-avatar" style="background: #2D8B55">🚪</div>
             <div class="chat-bubble">
-              <span class="chat-sender" style="color: #2D8B55">chat.py</span>
+              <span class="chat-sender" style="color: #2D8B55">对话 HTTP 入口（chat.py）</span>
               <p>返回 400 + 友好拒答文案；trace_id 可对照审计</p>
             </div>
           </div>
@@ -79,7 +79,7 @@
     <div class="screen animate-in">
       <div class="translation-block">
         <div class="translation-code">
-          <span class="translation-label">chat.py + audit_middleware</span>
+          <span class="translation-label">对话 HTTP 入口（chat.py）+ 审计中间件（audit_middleware.py）</span>
           <pre><code><span class="code-line"><span class="code-keyword">if not</span> input_guard.check_rate_limit(agent_type, auth.actor_id):</span>
 <span class="code-line">    insert_input_guard_log(..., guard_type=GUARD_RATE_LIMIT)</span>
 <span class="code-line">    raise ApiError(...)</span>
@@ -88,7 +88,7 @@
 <span class="code-line"><span class="code-keyword">if</span> verdict.reject:</span>
 <span class="code-line">    insert_input_guard_log(..., guard_type=verdict.guard_type)</span>
 <span class="code-line"></span>
-<span class="code-line"><span class="code-comment"># main.py 挂载</span></span>
+<span class="code-line"><span class="code-comment"># 应用入口（main.py）挂载</span></span>
 <span class="code-line">async <span class="code-keyword">def</span> <span class="code-function">audit_middleware</span>(request, call_next):</span>
 <span class="code-line">    <span class="code-comment"># INSERT audit_log 单请求访问记录</span></span></code></pre>
         </div>
@@ -97,8 +97,8 @@
           <div class="translation-lines">
             <p class="tl">先发消息前查频率：同 actor 刷太快就拒，并记限流日志。</p>
             <p class="tl">再扫内容：注入/超长命中就不调 LLM，直接拒答+留痕。</p>
-            <p class="tl">audit_middleware 包在更外层：每个 HTTP 进来都记一条访问审计。</p>
-            <p class="tl">deps.deny 鉴权失败也会双写——平台 agent_type 时 input_guard_log 可能跳过 ENUM 限制。</p>
+            <p class="tl">审计中间件（audit_middleware.py）包在更外层：每个 HTTP 进来都记一条访问审计。</p>
+            <p class="tl">模块鉴权（deps.py）.deny 鉴权失败也会双写——平台 agent_type 时 input_guard_log 可能跳过 ENUM 限制。</p>
           </div>
         </div>
       </div>
@@ -124,12 +124,12 @@
         </div>
         <div class="quiz-question-block"
              data-correct="option-a"
-             data-explanation-right="audit_middleware 记录每个请求的访问轨迹；input_guard_log 专记输入防护命中。"
-             data-explanation-wrong="两者不同表、不同触发点；middleware 不替 guard 做注入检测。">
-          <h3 class="quiz-question">audit_middleware 和 input_guard 的关系？</h3>
+             data-explanation-right="审计中间件（audit_middleware.py）记录每个请求的访问轨迹；input_guard_log 专记输入防护命中。"
+             data-explanation-wrong="两者不同表、不同触发点；审计中间件（audit_middleware.py）不替 guard 做注入检测。">
+          <h3 class="quiz-question">审计中间件（audit_middleware.py）和 input_guard 的关系？</h3>
           <div class="quiz-options">
             <button class="quiz-option" data-value="option-a" onclick="selectOption(this)">
-              <div class="quiz-option-radio"></div><span>middleware 记访问；guard 在 chat 业务里拦恶意输入</span>
+              <div class="quiz-option-radio"></div><span>审计中间件（audit_middleware.py）记访问；guard 在对话 HTTP 入口（chat.py）业务里拦恶意输入</span>
             </button>
             <button class="quiz-option" data-value="option-b" onclick="selectOption(this)">
               <div class="quiz-option-radio"></div><span>同一个函数，名字不同</span>
diff --git a/docs/course/jinrong-module-shared/modules/04-hard-rules.html b/docs/course/jinrong-module-shared/modules/04-hard-rules.html
new file mode 100644
index 0000000..55cf706
--- /dev/null
+++ b/docs/course/jinrong-module-shared/modules/04-hard-rules.html
@@ -0,0 +1,83 @@
+<section class="module" id="module-4">
+  <div class="module-inner">
+    <p class="eyebrow animate-in">模块 4 · 生产认知</p>
+    <h1 class="module-title animate-in">审计只 INSERT<br>Redis 6380 与 fail-open</h1>
+    <p class="module-lead animate-in">
+      共用底座课讲了双栈鉴权与 input_guard，这模块补<strong>生产环境行为</strong>和<strong>画像/cache 接缝</strong>——
+      指挥 AI 改「吊销 fail-closed」或「审计可改」前必看。
+    </p>
+
+    <div class="screen animate-in">
+      <h2>G-02：审计表只 INSERT</h2>
+      <p><code>audit_log</code> · <code>input_guard_log</code> · <code>risk_suitability_log</code> 等合规留痕表<strong>禁止 UPDATE/DELETE</strong>。任何「改历史审计」需求都应被拒绝，改为追加更正记录。</p>
+      <div class="callout callout-warning">
+        <strong>input_guard 命中：</strong> fail-fast，<strong>不建会话</strong>——和 LangGraph 内 fallback 不同，没有 reply 回合入库。
+      </div>
+    </div>
+
+    <div class="screen animate-in">
+      <h2>fail-open 与 debug 双闸门</h2>
+      <div class="step-cards">
+        <div class="step-card">
+          <span class="step-num">①</span>
+          <p><strong>Redis 会话窗口 fail-open</strong> — Redis 挂了对话仍能回，只是少短期记忆（客服线同样策略）。</p>
+        </div>
+        <div class="step-card">
+          <span class="step-num">②</span>
+          <p><strong>jti 吊销 fail-open</strong> — 吊销服务异常时 token 仍可能通过；生产要监控 Redis。</p>
+        </div>
+        <div class="step-card">
+          <span class="step-num">③</span>
+          <p><strong>debug 头</strong> — 仅 <code>APP_ENV=development</code> 且<strong>无 RS256 公钥</strong>；生产有公钥时 debug 头失效。</p>
+        </div>
+        <div class="step-card">
+          <span class="step-num">④</span>
+          <p><strong>Redis 6380 + RESP2</strong> — Docker 映射 6380；Windows 本机 6379 旧 Redis 3 不兼容。</p>
+        </div>
+      </div>
+    </div>
+
+    <div class="screen animate-in">
+      <h2>L1/L2 热缓存：谁接了谁没接</h2>
+      <div class="translation-block">
+        <div class="translation-code">
+          <span class="translation-label">接缝快照</span>
+          <pre><code><span class="code-line">客服 profile_maybe_extract → L1 抽槽 ✓</span>
+<span class="code-line">ProfileHotCache → 部分读 ✓</span>
+<span class="code-line">L2 Repository / 全量 Redis L1 → 开放项</span>
+<span class="code-line">宿主 POST /api/chat 非 customer → 未全接 L1 热缓存</span></code></pre>
+        </div>
+        <div class="translation-english">
+          <span class="translation-label">白话</span>
+          <div class="translation-lines">
+            <p class="tl">指挥 AI「全 Agent 统一画像 Redis」前，先对 FRAMEWORK 实现状态表。</p>
+            <p class="tl">Bearer 全环境优先——pytest 仍用 dev token，但生产必须 RS256 + 禁 debug 头冒充。</p>
+          </div>
+        </div>
+      </div>
+
+      <div class="quiz-container" id="quiz-shared-m4">
+        <div class="quiz-question-block"
+             data-correct="option-a"
+             data-explanation-right="对。审计表只追加；更正应新 INSERT 带引用 trace，不能 UPDATE 原记录。"
+             data-explanation-wrong="改 audit_log 历史行违反 G-02，合规不可接受。">
+          <h3 class="quiz-question">运维说「把 audit_log 里错的那条改成正确 decision」，你怎么回？</h3>
+          <div class="quiz-options">
+            <button class="quiz-option" data-value="option-a" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>不行，追加新审计记录说明更正</span>
+            </button>
+            <button class="quiz-option" data-value="option-b" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>好，SQL UPDATE 一行</span>
+            </button>
+            <button class="quiz-option" data-value="option-c" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>好，DELETE 后重插</span>
+            </button>
+          </div>
+          <div class="quiz-feedback"></div>
+        </div>
+        <button class="quiz-check-btn" onclick="checkQuiz('quiz-shared-m4')">检查答案</button>
+        <button class="quiz-reset-btn" onclick="resetQuiz('quiz-shared-m4')">重做</button>
+      </div>
+    </div>
+  </div>
+</section>
diff --git a/docs/course/jinrong-module-shared/styles.css b/docs/course/jinrong-module-shared/styles.css
index 544669c..68d0e39 100644
--- a/docs/course/jinrong-module-shared/styles.css
+++ b/docs/course/jinrong-module-shared/styles.css
@@ -254,7 +254,8 @@ pre::-webkit-scrollbar { display: none; }
   padding-top: calc(var(--nav-height) + var(--space-12));
 }
 
-.module-content {
+.module-content,
+.module-inner {
   max-width: var(--content-width);
   margin: 0 auto;
 }
diff --git a/docs/course/jinrong-overview/_base.html b/docs/course/jinrong-overview/_base.html
index 8656112..5bed6c0 100644
--- a/docs/course/jinrong-overview/_base.html
+++ b/docs/course/jinrong-overview/_base.html
@@ -34,6 +34,8 @@
         <button class="nav-dot" data-target="module-3" data-tooltip="进门钥匙" role="tab" aria-label="模块 3: 进门钥匙"></button>
         <button class="nav-dot" data-target="module-4" data-tooltip="数据从哪来" role="tab" aria-label="模块 4: 数据从哪来"></button>
         <button class="nav-dot" data-target="module-5" data-tooltip="现在做到哪" role="tab" aria-label="模块 5: 现在做到哪"></button>
+        <button class="nav-dot" data-target="module-6" data-tooltip="硬阀门" role="tab" aria-label="模块 6: 硬阀门"></button>
+        <button class="nav-dot" data-target="module-7" data-tooltip="未实现对照" role="tab" aria-label="模块 7: 未实现对照"></button>
       </div>
     </div>
   </nav>
diff --git a/docs/course/jinrong-overview/index.html b/docs/course/jinrong-overview/index.html
index 3b47008..4dc4faf 100644
--- a/docs/course/jinrong-overview/index.html
+++ b/docs/course/jinrong-overview/index.html
@@ -34,6 +34,8 @@
         <button class="nav-dot" data-target="module-3" data-tooltip="进门钥匙" role="tab" aria-label="模块 3: 进门钥匙"></button>
         <button class="nav-dot" data-target="module-4" data-tooltip="数据从哪来" role="tab" aria-label="模块 4: 数据从哪来"></button>
         <button class="nav-dot" data-target="module-5" data-tooltip="现在做到哪" role="tab" aria-label="模块 5: 现在做到哪"></button>
+        <button class="nav-dot" data-target="module-6" data-tooltip="硬阀门" role="tab" aria-label="模块 6: 硬阀门"></button>
+        <button class="nav-dot" data-target="module-7" data-tooltip="未实现对照" role="tab" aria-label="模块 7: 未实现对照"></button>
       </div>
     </div>
   </nav>
@@ -68,14 +70,14 @@
       <div class="flow-animation" data-steps='[
         {"highlight":"flow-actor-1","label":"浏览器：登录拿到 JWT，打开 ChatPanel"},
         {"highlight":"flow-actor-2","label":"POST /api/chat/stream + X-Agent-Type: customer","packet":true,"from":"1","to":"2"},
-        {"highlight":"flow-actor-3","label":"chat.py 分流 → customer_service 跑完 LangGraph","packet":true,"from":"2","to":"3"},
+        {"highlight":"flow-actor-3","label":"四 Agent 对话 HTTP 入口（chat.py）分流 → 登录客户 14 节点编排（customer_service.py）跑完 LangGraph","packet":true,"from":"2","to":"3"},
         {"highlight":"flow-actor-4","label":"查 Core 模拟库 / Milvus 知识库，再拼回复","packet":true,"from":"3","to":"4"},
         {"highlight":"flow-actor-1","label":"SSE 分块返回 + MySQL 落会话历史","packet":true,"from":"4","to":"1"}
       ]'>
         <div class="flow-actors">
           <div class="flow-actor" id="flow-actor-1"><span class="flow-actor-icon">🖥</span><span>浏览器 web/</span></div>
-          <div class="flow-actor" id="flow-actor-2"><span class="flow-actor-icon">🚪</span><span>FastAPI chat.py</span></div>
-          <div class="flow-actor" id="flow-actor-3"><span class="flow-actor-icon">🤖</span><span>customer_service</span></div>
+          <div class="flow-actor" id="flow-actor-2"><span class="flow-actor-icon">🚪</span><span>四 Agent 对话 HTTP 入口（chat.py）四 Agent 对话 HTTP 入口</span></div>
+          <div class="flow-actor" id="flow-actor-3"><span class="flow-actor-icon">🤖</span><span>登录客户 14 节点编排（customer_service.py）登录客户 14 节点编排</span></div>
           <div class="flow-actor" id="flow-actor-4"><span class="flow-actor-icon">🗄</span><span>Core + Milvus</span></div>
         </div>
         <p class="flow-step-label">点击「下一步」看数据怎么流</p>
@@ -98,7 +100,7 @@
           <span class="translation-label">白话</span>
           <div class="translation-lines">
             <p class="tl">前端每次调「对话 API」都要带两样东西：登录令牌 + 你正在用哪条 Agent 线。</p>
-            <p class="tl">后端据此决定走客服 LangGraph 还是通用 agent_service，以及能不能过门禁。</p>
+            <p class="tl">后端据此决定走客服 LangGraph 还是通用 顾问通用 tool→llm→guard 编排（agent_service.py），以及能不能过门禁。</p>
           </div>
         </div>
       </div>
@@ -142,11 +144,11 @@
       <div class="pattern-cards">
         <div class="pattern-card">
           <h3>客户财富 Agent</h3>
-          <p>服务登录客户本人：查持仓/流水、产品规则 RAG、合规话术。代码：<code>customer_service.py</code></p>
+          <p>服务登录客户本人：查持仓/流水、产品规则 RAG、合规话术。代码：登录客户 14 节点编排（<code>customer_service.py</code>）登录客户 14 节点编排</p>
         </div>
         <div class="pattern-card">
           <h3>代理人助手</h3>
-          <p>服务理财师：聊名下客户、公开知识库。代码：<code>agent_service</code> + advisor 分支</p>
+          <p>服务理财师：聊名下客户、公开知识库。代码：顾问通用 tool→llm→guard 编排（<code>agent_service.py</code>）顾问通用 tool→llm→guard 编排 + advisor 分支</p>
         </div>
         <div class="pattern-card">
           <h3>数据分析 Agent</h3>
@@ -175,14 +177,14 @@
           <div class="chat-message" data-msg="1" data-sender="chat" style="display:none">
             <div class="chat-avatar" style="background:#5A9DB8">API</div>
             <div class="chat-bubble">
-              <span class="chat-sender" style="color:#5A9DB8">chat.py</span>
+              <span class="chat-sender" style="color:#5A9DB8">四 Agent 对话 HTTP 入口（chat.py）</span>
               <p>验 JWT + 矩阵准入 → 建/续 session</p>
             </div>
           </div>
           <div class="chat-message" data-msg="2" data-sender="tool" style="display:none">
             <div class="chat-avatar" style="background:#1F6280">Tool</div>
             <div class="chat-bubble">
-              <span class="chat-sender" style="color:#1F6280">tool_service</span>
+              <span class="chat-sender" style="color:#1F6280">对话 Tool 编排（tool_service.py）</span>
               <p>关键词命中「持仓」→ query_holdings → 查 core_ro</p>
             </div>
           </div>
@@ -211,12 +213,12 @@
       <h2>代码地图（改功能前先找门）</h2>
       <div class="file-tree animate-in">
         <div class="tree-item tree-folder">app/</div>
-        <div class="tree-item tree-indent">main.py — 挂载所有路由</div>
-        <div class="tree-item tree-indent">api/chat.py — 四 Agent 对话入口</div>
-        <div class="tree-item tree-indent">api/analyst.py — 问数四件套</div>
-        <div class="tree-item tree-indent">api/risk.py + simulate.py — 风控 REST</div>
-        <div class="tree-item tree-indent">service/customer_service.py — 客户 14 节点图</div>
-        <div class="tree-item tree-indent">service/agent_service.py — 顾问/风控/分析对话图</div>
+        <div class="tree-item tree-indent">FastAPI 应用入口（main.py）FastAPI 应用入口 — 挂载所有路由</div>
+        <div class="tree-item tree-indent">四 Agent 对话 HTTP 入口（chat.py）四 Agent 对话 HTTP 入口 — app/api/chat.py</div>
+        <div class="tree-item tree-indent">问数 REST 路由（analyst.py）问数 REST 路由 — app/api/analyst.py</div>
+        <div class="tree-item tree-indent">风控 REST（risk.py）风控 REST — app/api/risk.py · 模拟交易 HTTP 入口（simulate.py）模拟交易 HTTP 入口 — app/api/simulate.py</div>
+        <div class="tree-item tree-indent">登录客户 14 节点编排（customer_service.py）登录客户 14 节点编排 — app/service/customer_service.py</div>
+        <div class="tree-item tree-indent">顾问通用 tool→llm→guard 编排（agent_service.py）顾问通用 tool→llm→guard 编排 — app/service/agent_service.py</div>
         <div class="tree-item tree-folder">web/</div>
         <div class="tree-item tree-indent">src/pages/* — 四角色页面</div>
         <div class="tree-item tree-indent">src/api/*.ts — 调后端（注意鉴权头差异）</div>
@@ -225,18 +227,18 @@
       <div class="quiz-container" id="quiz-module2">
         <div class="quiz-question-block"
              data-correct="option-c"
-             data-explanation-right="客户线已独立：同步 POST /api/chat 和 SSE stream 都走 customer_service，不是 agent_service 那条通用图。"
-             data-explanation-wrong="customer 在 chat.py 里有专门 if 分支，不会和 advisor 共用同一张 LangGraph。">
+             data-explanation-right="客户线已独立：同步 POST /api/chat 和 SSE stream 都走 登录客户 14 节点编排（customer_service.py），不是 顾问通用 tool→llm→guard 编排（agent_service.py）那条通用图。"
+             data-explanation-wrong="customer 在 四 Agent 对话 HTTP 入口（chat.py）里有专门 if 分支，不会和 advisor 共用同一张 LangGraph。">
           <h3 class="quiz-question">客户打开「客户助手」时，编排跑在哪？</h3>
           <div class="quiz-options">
             <button class="quiz-option" data-value="option-a" onclick="selectOption(this)">
-              <div class="quiz-option-radio"></div><span>agent_service 通用图</span>
+              <div class="quiz-option-radio"></div><span>顾问通用 tool→llm→guard 编排（agent_service.py）通用图</span>
             </button>
             <button class="quiz-option" data-value="option-b" onclick="selectOption(this)">
               <div class="quiz-option-radio"></div><span>analyst_agent 问数</span>
             </button>
             <button class="quiz-option" data-value="option-c" onclick="selectOption(this)">
-              <div class="quiz-option-radio"></div><span>customer_service LangGraph</span>
+              <div class="quiz-option-radio"></div><span>登录客户 14 节点编排（customer_service.py）LangGraph</span>
             </button>
           </div>
           <div class="quiz-feedback"></div>
@@ -275,7 +277,7 @@
     <div class="screen animate-in">
       <div class="translation-block">
         <div class="translation-code">
-          <span class="translation-label">CODE · deps.py</span>
+          <span class="translation-label">CODE · 模块鉴权工厂（deps.py）模块鉴权工厂</span>
           <pre><code><span class="code-line">agent_type = request.headers.get(<span class="code-string">"X-Agent-Type"</span>)</span>
 <span class="code-line"><span class="code-keyword">if not</span> agent_type:</span>
 <span class="code-line">    raise ApiError(<span class="code-number">401</span>, <span class="code-string">"AUTH_401_MISSING_AGENT_TYPE"</span>)</span>
@@ -300,7 +302,7 @@
         <div class="badge-item"><span class="badge-code">STAFF-20001</span><span class="badge-desc">分析员</span></div>
         <div class="badge-item"><span class="badge-code">STAFF-30001</span><span class="badge-desc">风控 + risk_demo</span></div>
       </div>
-      <p>改 <code>jwt_service.py</code> 里角色后，<strong>必须重新登录</strong> 才会拿到新 JWT。</p>
+      <p>改 宿主 JWT 签发/验签（<code>jwt_service.py</code>）宿主 JWT 签发/验签 里角色后，<strong>必须重新登录</strong> 才会拿到新 JWT。</p>
 
       <div class="quiz-container" id="quiz-module3">
         <div class="quiz-question-block"
@@ -480,6 +482,190 @@
       <p class="module-footer-note">课程生成于 2026-09-09 · 对照仓库 <code>docs/memory/MEMORY.md</code> · 打开 <code>index.html</code> 即可离线浏览</p>
     </div>
   </div>
+</section>
+<section class="module" id="module-6">
+  <div class="module-inner">
+    <p class="eyebrow animate-in">模块 6 · 硬阀门</p>
+    <h1 class="module-title animate-in">改代码前先念五条<br>踩了就是合规事故</h1>
+    <p class="module-lead animate-in">
+      四 Agent 可以各自演进，但有几条是<strong>全项目硬阀门</strong>——不是「最好遵守」，是写进合规文档、测试也会卡住的规则。
+      指挥 AI 加功能前，先用这张表判断「能不能做」。
+    </p>
+
+    <div class="screen animate-in">
+      <h2>五条硬阀门（2026-09 快照）</h2>
+      <div class="pattern-cards">
+        <div class="pattern-card">
+          <h3>① Core 正式 C1~C5 不可被画像覆盖</h3>
+          <p>L0 风评在 <code>jinrong_core</code> 是权威；L1 画像 enrich 只能辅助，不能改正式等级。</p>
+        </div>
+        <div class="pattern-card">
+          <h3>② 审计表只 INSERT</h3>
+          <p><code>audit_log</code> / <code>input_guard_log</code> 等只追加、不 UPDATE/DELETE——留痕不可篡改。</p>
+        </div>
+        <div class="pattern-card">
+          <h3>③ 仅 R-02 可阻断交易</h3>
+          <p>适当性不匹配可在网关拦单；R-01/R-03 只生成预警，<strong>不自动冻户</strong>。</p>
+        </div>
+        <div class="pattern-card">
+          <h3>④ 代理人草稿不外发</h3>
+          <p>顾问 Agent 产出是草稿；没有「一键发给客户」API，须人工复核后才能外用。</p>
+        </div>
+        <div class="pattern-card">
+          <h3>⑤ 四 Agent 不互调 LLM</h3>
+          <p>跨角色协作走 L1/L2/L3 画像表与 <code>risk_alert</code>，禁止 A 调 B 的 LangGraph。</p>
+        </div>
+      </div>
+      <div class="callout callout-warning">
+        <strong>还有技术硬阀门：</strong> Core 模拟库除模拟交易网关外<strong>只读</strong>；Streamlit 禁止引入（MEMORY 第 3 节）。
+      </div>
+    </div>
+
+    <div class="screen animate-in">
+      <h2>数据流：谁有权改什么</h2>
+      <div class="flow-animation" data-steps='[
+        {"highlight":"flow-h-1","label":"客户问持仓 → Core 只读 Tool（core_ro_tool.py）只读 SELECT"},
+        {"highlight":"flow-h-2","label":"模拟下单 → 仅 gateway_repository 可 INSERT core_trade","packet":true,"from":"1","to":"2"},
+        {"highlight":"flow-h-3","label":"风控预警 → risk_alert 待人工 pending_review，不自动改账户状态","packet":true,"from":"2","to":"3"},
+        {"highlight":"flow-h-4","label":"audit_log → 只 INSERT，任何 UPDATE 都是违规","packet":true,"from":"3","to":"4"}
+      ]'>
+        <div class="flow-actors">
+          <div class="flow-actor" id="flow-h-1"><span class="flow-actor-icon">📖</span><span>Core 只读</span></div>
+          <div class="flow-actor" id="flow-h-2"><span class="flow-actor-icon">💳</span><span>模拟网关</span></div>
+          <div class="flow-actor" id="flow-h-3"><span class="flow-actor-icon">⚠</span><span>预警台账</span></div>
+          <div class="flow-actor" id="flow-h-4"><span class="flow-actor-icon">📋</span><span>审计总账</span></div>
+        </div>
+        <p class="flow-step-label">点击「下一步」看写入边界</p>
+        <div class="flow-controls">
+          <button class="btn flow-next-btn">下一步</button>
+          <button class="btn flow-reset-btn">重来</button>
+        </div>
+      </div>
+    </div>
+
+    <div class="screen animate-in">
+      <div class="quiz-container" id="quiz-overview-m6">
+        <div class="quiz-question-block"
+             data-correct="option-b"
+             data-explanation-right="对。R-01 大额等只生成 pending_review 预警，冻户必须风控专员人工处置，Agent 不能自动冻。"
+             data-explanation-wrong="只有 R-02 适当性可在交易网关阻断；其他预警不自动冻户。">
+          <h3 class="quiz-question">AI 建议「大额预警命中就自动冻结账户」，你怎么回复？</h3>
+          <div class="quiz-options">
+            <button class="quiz-option" data-value="option-a" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>好，在 risk_engine 里加 freeze 分支</span>
+            </button>
+            <button class="quiz-option" data-value="option-b" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>不行，只生成预警单，处置走 POST /api/risk/alerts/{id}/handle</span>
+            </button>
+            <button class="quiz-option" data-value="option-c" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>可以，让客服 Agent 调风控 LLM 冻户</span>
+            </button>
+          </div>
+          <div class="quiz-feedback"></div>
+        </div>
+        <button class="quiz-check-btn" onclick="checkQuiz('quiz-overview-m6')">检查答案</button>
+        <button class="quiz-reset-btn" onclick="resetQuiz('quiz-overview-m6')">重做</button>
+      </div>
+      <p class="module-footer-note">深潜各模块的硬阀门细节见对应课程 · 下一模块：未实现对照表</p>
+    </div>
+  </div>
+</section>
+<section class="module" id="module-7">
+  <div class="module-inner">
+    <p class="eyebrow animate-in">模块 7 · 未实现对照</p>
+    <h1 class="module-title animate-in">文档写了 ≠ 代码有<br>2026-09 快照表</h1>
+    <p class="module-lead animate-in">
+      指挥 AI 时最容易把「需求规格里的 P0」当成「仓库已经做完」。
+      下表是<strong>课程专用快照</strong>（不写入项目记忆文件），对照 <code>merger</code> 分支实际代码。
+    </p>
+
+    <div class="screen animate-in">
+      <h2>已实现（别重复造轮子）</h2>
+      <div class="badge-list">
+        <div class="badge-item"><span class="badge-code">✓</span><span class="badge-desc">平台 API v0.1 · 四 Agent 对话 + customer SSE</span></div>
+        <div class="badge-item"><span class="badge-code">✓</span><span class="badge-desc">问数 S3 + dashboard/assets · 风控台账 + 模拟交易</span></div>
+        <div class="badge-item"><span class="badge-code">✓</span><span class="badge-desc">客服 14 节点 + 游客 9 节点 · R-02 网关阻断</span></div>
+      </div>
+    </div>
+
+    <div class="screen animate-in">
+      <h2>未实现 / 演示停在某层（指挥 AI 前先查）</h2>
+      <div class="pattern-cards">
+        <div class="pattern-card">
+          <h3>空壳 API</h3>
+          <p>知识库空壳 API（<code>knowledge.py</code>）· 管理空壳 API（<code>admin.py</code>）空壳 API — T-21 拍板一期只做脚本入库，无上传/重建端点。</p>
+        </div>
+        <div class="pattern-card">
+          <h3>T-20 顾问工作台</h3>
+          <p>A-03 话术草稿复核 · A-05 合规巡检台 · A-06 跟进草稿入库 — prompt 有约束，无前端/表流程。</p>
+        </div>
+        <div class="pattern-card">
+          <h3>前端未接线</h3>
+          <p>AML scan UI · 平台适当性按钮 · 风控台账高级筛选 — 后端部分已有，<code>web/</code> 未全接。</p>
+        </div>
+        <div class="pattern-card">
+          <h3>运维 cron 无 UI</h3>
+          <p>FR-9 超期升级 cron（<code>escalation_scan.py</code>）FR-9 cron · FR-10 行为扫描 cron（<code>agent_behavior_scan.py</code>）FR-10 cron — 引擎在，须手动跑脚本。</p>
+        </div>
+        <div class="pattern-card">
+          <h3>演示边界</h3>
+          <p>转人工 = API 字段 + 橙色 Tag · debug 头仅 dev · 脱敏默认关 · 无真呼叫中心排队。</p>
+        </div>
+        <div class="pattern-card">
+          <h3>画像热缓存</h3>
+          <p>L1 Redis 全量热缓存 · L2 Repository — 客服线部分已接，宿主/顾问未全接。</p>
+        </div>
+      </div>
+      <div class="callout callout-accent">
+        <strong>注意：</strong> <code>REQUIREMENTS.md</code> 部分 Wave 条目仍标「未做」，与代码不同步——以本表 + 各模块深潜课为准。
+      </div>
+    </div>
+
+    <div class="screen animate-in">
+      <h2>鉴权三线速查（跨课总表）</h2>
+      <div class="translation-block">
+        <div class="translation-code">
+          <span class="translation-label">三条入口</span>
+          <pre><code><span class="code-line">对话 Chat    → get_auth_context + X-Agent-Type</span>
+<span class="code-line">问数/平台    → get_platform_auth_context（无 Agent 头）</span>
+<span class="code-line">风控 REST    → get_auth_context + X-Agent-Type: risk</span></code></pre>
+        </div>
+        <div class="translation-english">
+          <span class="translation-label">白话</span>
+          <div class="translation-lines">
+            <p class="tl">401 <code>MISSING_AGENT_TYPE</code>：Chat 忘了带头，不是 JWT 坏了。</p>
+            <p class="tl">问数页加 <code>X-Agent-Type: analyst</code> 是<strong>错方向</strong>——会走错鉴权栈。</p>
+            <p class="tl">持仓页用平台鉴权，不要 Agent 头——和 Chat 不是一套。</p>
+          </div>
+        </div>
+      </div>
+
+      <div class="quiz-container" id="quiz-overview-m7">
+        <div class="quiz-question-block"
+             data-correct="option-c"
+             data-explanation-right="对。T-21 一期知识库走 知识库脚本入库（scripts/kb/build_kb.py）脚本入库，空壳 knowledge API 是刻意的。"
+             data-explanation-wrong="知识库空壳 API（knowledge.py）空壳是拍板结果，不是「忘了做」——别指挥 AI 直接补上传 API 而不对契约。">
+          <h3 class="quiz-question">AI 说「补全 knowledge 上传 API 就能用 RAG」，你怎么回？</h3>
+          <div class="quiz-options">
+            <button class="quiz-option" data-value="option-a" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>好，在 知识库空壳 API（knowledge.py）加 POST /upload</span>
+            </button>
+            <button class="quiz-option" data-value="option-b" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>好，让前端直连 Milvus</span>
+            </button>
+            <button class="quiz-option" data-value="option-c" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>先查 T-21 拍板：一期脚本入库，上传端点不做</span>
+            </button>
+          </div>
+          <div class="quiz-feedback"></div>
+        </div>
+        <button class="quiz-check-btn" onclick="checkQuiz('quiz-overview-m7')">检查答案</button>
+        <button class="quiz-reset-btn" onclick="resetQuiz('quiz-overview-m7')">重做</button>
+      </div>
+
+      <p class="module-footer-note">快照日期 2026-09-10 · 仅用于交互课程 · 深潜见 <a href="../index.html" style="color:var(--accent)">课程中心</a></p>
+    </div>
+  </div>
 </section>
   </main>
 
diff --git a/docs/course/jinrong-overview/main.js b/docs/course/jinrong-overview/main.js
index 7150a69..410548e 100644
--- a/docs/course/jinrong-overview/main.js
+++ b/docs/course/jinrong-overview/main.js
@@ -486,13 +486,17 @@
 
   /* ── LAYER TOGGLE ──────────────────────────────────────────── */
   window.showLayer = function (layerId, btn) {
-    const demo = btn ? btn.closest('.layer-demo') : null;
+    const tab = btn || (window.event && window.event.currentTarget);
+    if (!tab || !tab.closest) return;
+    const demo = tab.closest('.layer-demo');
     if (!demo) return;
-    $$('.layer', demo).forEach(l => l.style.display = 'none');
+    $$('.layer', demo).forEach(l => { l.style.display = 'none'; });
     $$('.layer-tab', demo).forEach(t => t.classList.remove('active'));
-    const layer = $('#' + layerId);
+    const esc = typeof CSS !== 'undefined' && CSS.escape ? CSS.escape(layerId) : layerId.replace(/[^\w-]/g, '');
+    let layer = demo.querySelector('#' + esc);
+    if (!layer) layer = demo.querySelector('#layer-' + esc);
     if (layer) layer.style.display = 'block';
-    btn.classList.add('active');
+    tab.classList.add('active');
   };
 
 })();
diff --git a/docs/course/jinrong-overview/modules/01-intro.html b/docs/course/jinrong-overview/modules/01-intro.html
index 266d3d8..49168fa 100644
--- a/docs/course/jinrong-overview/modules/01-intro.html
+++ b/docs/course/jinrong-overview/modules/01-intro.html
@@ -27,14 +27,14 @@
       <div class="flow-animation" data-steps='[
         {"highlight":"flow-actor-1","label":"浏览器：登录拿到 JWT，打开 ChatPanel"},
         {"highlight":"flow-actor-2","label":"POST /api/chat/stream + X-Agent-Type: customer","packet":true,"from":"1","to":"2"},
-        {"highlight":"flow-actor-3","label":"chat.py 分流 → customer_service 跑完 LangGraph","packet":true,"from":"2","to":"3"},
+        {"highlight":"flow-actor-3","label":"四 Agent 对话 HTTP 入口（chat.py）分流 → 登录客户 14 节点编排（customer_service.py）跑完 LangGraph","packet":true,"from":"2","to":"3"},
         {"highlight":"flow-actor-4","label":"查 Core 模拟库 / Milvus 知识库，再拼回复","packet":true,"from":"3","to":"4"},
         {"highlight":"flow-actor-1","label":"SSE 分块返回 + MySQL 落会话历史","packet":true,"from":"4","to":"1"}
       ]'>
         <div class="flow-actors">
           <div class="flow-actor" id="flow-actor-1"><span class="flow-actor-icon">🖥</span><span>浏览器 web/</span></div>
-          <div class="flow-actor" id="flow-actor-2"><span class="flow-actor-icon">🚪</span><span>FastAPI chat.py</span></div>
-          <div class="flow-actor" id="flow-actor-3"><span class="flow-actor-icon">🤖</span><span>customer_service</span></div>
+          <div class="flow-actor" id="flow-actor-2"><span class="flow-actor-icon">🚪</span><span>四 Agent 对话 HTTP 入口（chat.py）四 Agent 对话 HTTP 入口</span></div>
+          <div class="flow-actor" id="flow-actor-3"><span class="flow-actor-icon">🤖</span><span>登录客户 14 节点编排（customer_service.py）登录客户 14 节点编排</span></div>
           <div class="flow-actor" id="flow-actor-4"><span class="flow-actor-icon">🗄</span><span>Core + Milvus</span></div>
         </div>
         <p class="flow-step-label">点击「下一步」看数据怎么流</p>
@@ -57,7 +57,7 @@
           <span class="translation-label">白话</span>
           <div class="translation-lines">
             <p class="tl">前端每次调「对话 API」都要带两样东西：登录令牌 + 你正在用哪条 Agent 线。</p>
-            <p class="tl">后端据此决定走客服 LangGraph 还是通用 agent_service，以及能不能过门禁。</p>
+            <p class="tl">后端据此决定走客服 LangGraph 还是通用 顾问通用 tool→llm→guard 编排（agent_service.py），以及能不能过门禁。</p>
           </div>
         </div>
       </div>
diff --git a/docs/course/jinrong-overview/modules/02-actors.html b/docs/course/jinrong-overview/modules/02-actors.html
index 0b9cafe..6c5d4a2 100644
--- a/docs/course/jinrong-overview/modules/02-actors.html
+++ b/docs/course/jinrong-overview/modules/02-actors.html
@@ -12,11 +12,11 @@
       <div class="pattern-cards">
         <div class="pattern-card">
           <h3>客户财富 Agent</h3>
-          <p>服务登录客户本人：查持仓/流水、产品规则 RAG、合规话术。代码：<code>customer_service.py</code></p>
+          <p>服务登录客户本人：查持仓/流水、产品规则 RAG、合规话术。代码：登录客户 14 节点编排（<code>customer_service.py</code>）登录客户 14 节点编排</p>
         </div>
         <div class="pattern-card">
           <h3>代理人助手</h3>
-          <p>服务理财师：聊名下客户、公开知识库。代码：<code>agent_service</code> + advisor 分支</p>
+          <p>服务理财师：聊名下客户、公开知识库。代码：顾问通用 tool→llm→guard 编排（<code>agent_service.py</code>）顾问通用 tool→llm→guard 编排 + advisor 分支</p>
         </div>
         <div class="pattern-card">
           <h3>数据分析 Agent</h3>
@@ -45,14 +45,14 @@
           <div class="chat-message" data-msg="1" data-sender="chat" style="display:none">
             <div class="chat-avatar" style="background:#5A9DB8">API</div>
             <div class="chat-bubble">
-              <span class="chat-sender" style="color:#5A9DB8">chat.py</span>
+              <span class="chat-sender" style="color:#5A9DB8">四 Agent 对话 HTTP 入口（chat.py）</span>
               <p>验 JWT + 矩阵准入 → 建/续 session</p>
             </div>
           </div>
           <div class="chat-message" data-msg="2" data-sender="tool" style="display:none">
             <div class="chat-avatar" style="background:#1F6280">Tool</div>
             <div class="chat-bubble">
-              <span class="chat-sender" style="color:#1F6280">tool_service</span>
+              <span class="chat-sender" style="color:#1F6280">对话 Tool 编排（tool_service.py）</span>
               <p>关键词命中「持仓」→ query_holdings → 查 core_ro</p>
             </div>
           </div>
@@ -81,12 +81,12 @@
       <h2>代码地图（改功能前先找门）</h2>
       <div class="file-tree animate-in">
         <div class="tree-item tree-folder">app/</div>
-        <div class="tree-item tree-indent">main.py — 挂载所有路由</div>
-        <div class="tree-item tree-indent">api/chat.py — 四 Agent 对话入口</div>
-        <div class="tree-item tree-indent">api/analyst.py — 问数四件套</div>
-        <div class="tree-item tree-indent">api/risk.py + simulate.py — 风控 REST</div>
-        <div class="tree-item tree-indent">service/customer_service.py — 客户 14 节点图</div>
-        <div class="tree-item tree-indent">service/agent_service.py — 顾问/风控/分析对话图</div>
+        <div class="tree-item tree-indent">FastAPI 应用入口（main.py）FastAPI 应用入口 — 挂载所有路由</div>
+        <div class="tree-item tree-indent">四 Agent 对话 HTTP 入口（chat.py）四 Agent 对话 HTTP 入口 — app/api/chat.py</div>
+        <div class="tree-item tree-indent">问数 REST 路由（analyst.py）问数 REST 路由 — app/api/analyst.py</div>
+        <div class="tree-item tree-indent">风控 REST（risk.py）风控 REST — app/api/risk.py · 模拟交易 HTTP 入口（simulate.py）模拟交易 HTTP 入口 — app/api/simulate.py</div>
+        <div class="tree-item tree-indent">登录客户 14 节点编排（customer_service.py）登录客户 14 节点编排 — app/service/customer_service.py</div>
+        <div class="tree-item tree-indent">顾问通用 tool→llm→guard 编排（agent_service.py）顾问通用 tool→llm→guard 编排 — app/service/agent_service.py</div>
         <div class="tree-item tree-folder">web/</div>
         <div class="tree-item tree-indent">src/pages/* — 四角色页面</div>
         <div class="tree-item tree-indent">src/api/*.ts — 调后端（注意鉴权头差异）</div>
@@ -95,18 +95,18 @@
       <div class="quiz-container" id="quiz-module2">
         <div class="quiz-question-block"
              data-correct="option-c"
-             data-explanation-right="客户线已独立：同步 POST /api/chat 和 SSE stream 都走 customer_service，不是 agent_service 那条通用图。"
-             data-explanation-wrong="customer 在 chat.py 里有专门 if 分支，不会和 advisor 共用同一张 LangGraph。">
+             data-explanation-right="客户线已独立：同步 POST /api/chat 和 SSE stream 都走 登录客户 14 节点编排（customer_service.py），不是 顾问通用 tool→llm→guard 编排（agent_service.py）那条通用图。"
+             data-explanation-wrong="customer 在 四 Agent 对话 HTTP 入口（chat.py）里有专门 if 分支，不会和 advisor 共用同一张 LangGraph。">
           <h3 class="quiz-question">客户打开「客户助手」时，编排跑在哪？</h3>
           <div class="quiz-options">
             <button class="quiz-option" data-value="option-a" onclick="selectOption(this)">
-              <div class="quiz-option-radio"></div><span>agent_service 通用图</span>
+              <div class="quiz-option-radio"></div><span>顾问通用 tool→llm→guard 编排（agent_service.py）通用图</span>
             </button>
             <button class="quiz-option" data-value="option-b" onclick="selectOption(this)">
               <div class="quiz-option-radio"></div><span>analyst_agent 问数</span>
             </button>
             <button class="quiz-option" data-value="option-c" onclick="selectOption(this)">
-              <div class="quiz-option-radio"></div><span>customer_service LangGraph</span>
+              <div class="quiz-option-radio"></div><span>登录客户 14 节点编排（customer_service.py）LangGraph</span>
             </button>
           </div>
           <div class="quiz-feedback"></div>
diff --git a/docs/course/jinrong-overview/modules/03-auth.html b/docs/course/jinrong-overview/modules/03-auth.html
index 33a15d1..4a9c727 100644
--- a/docs/course/jinrong-overview/modules/03-auth.html
+++ b/docs/course/jinrong-overview/modules/03-auth.html
@@ -26,7 +26,7 @@
     <div class="screen animate-in">
       <div class="translation-block">
         <div class="translation-code">
-          <span class="translation-label">CODE · deps.py</span>
+          <span class="translation-label">CODE · 模块鉴权工厂（deps.py）模块鉴权工厂</span>
           <pre><code><span class="code-line">agent_type = request.headers.get(<span class="code-string">"X-Agent-Type"</span>)</span>
 <span class="code-line"><span class="code-keyword">if not</span> agent_type:</span>
 <span class="code-line">    raise ApiError(<span class="code-number">401</span>, <span class="code-string">"AUTH_401_MISSING_AGENT_TYPE"</span>)</span>
@@ -51,7 +51,7 @@
         <div class="badge-item"><span class="badge-code">STAFF-20001</span><span class="badge-desc">分析员</span></div>
         <div class="badge-item"><span class="badge-code">STAFF-30001</span><span class="badge-desc">风控 + risk_demo</span></div>
       </div>
-      <p>改 <code>jwt_service.py</code> 里角色后，<strong>必须重新登录</strong> 才会拿到新 JWT。</p>
+      <p>改 宿主 JWT 签发/验签（<code>jwt_service.py</code>）宿主 JWT 签发/验签 里角色后，<strong>必须重新登录</strong> 才会拿到新 JWT。</p>
 
       <div class="quiz-container" id="quiz-module3">
         <div class="quiz-question-block"
diff --git a/docs/course/jinrong-overview/modules/06-hard-rules.html b/docs/course/jinrong-overview/modules/06-hard-rules.html
new file mode 100644
index 0000000..d0a59a5
--- /dev/null
+++ b/docs/course/jinrong-overview/modules/06-hard-rules.html
@@ -0,0 +1,87 @@
+<section class="module" id="module-6">
+  <div class="module-inner">
+    <p class="eyebrow animate-in">模块 6 · 硬阀门</p>
+    <h1 class="module-title animate-in">改代码前先念五条<br>踩了就是合规事故</h1>
+    <p class="module-lead animate-in">
+      四 Agent 可以各自演进，但有几条是<strong>全项目硬阀门</strong>——不是「最好遵守」，是写进合规文档、测试也会卡住的规则。
+      指挥 AI 加功能前，先用这张表判断「能不能做」。
+    </p>
+
+    <div class="screen animate-in">
+      <h2>五条硬阀门（2026-09 快照）</h2>
+      <div class="pattern-cards">
+        <div class="pattern-card">
+          <h3>① Core 正式 C1~C5 不可被画像覆盖</h3>
+          <p>L0 风评在 <code>jinrong_core</code> 是权威；L1 画像 enrich 只能辅助，不能改正式等级。</p>
+        </div>
+        <div class="pattern-card">
+          <h3>② 审计表只 INSERT</h3>
+          <p><code>audit_log</code> / <code>input_guard_log</code> 等只追加、不 UPDATE/DELETE——留痕不可篡改。</p>
+        </div>
+        <div class="pattern-card">
+          <h3>③ 仅 R-02 可阻断交易</h3>
+          <p>适当性不匹配可在网关拦单；R-01/R-03 只生成预警，<strong>不自动冻户</strong>。</p>
+        </div>
+        <div class="pattern-card">
+          <h3>④ 代理人草稿不外发</h3>
+          <p>顾问 Agent 产出是草稿；没有「一键发给客户」API，须人工复核后才能外用。</p>
+        </div>
+        <div class="pattern-card">
+          <h3>⑤ 四 Agent 不互调 LLM</h3>
+          <p>跨角色协作走 L1/L2/L3 画像表与 <code>risk_alert</code>，禁止 A 调 B 的 LangGraph。</p>
+        </div>
+      </div>
+      <div class="callout callout-warning">
+        <strong>还有技术硬阀门：</strong> Core 模拟库除模拟交易网关外<strong>只读</strong>；Streamlit 禁止引入（MEMORY 第 3 节）。
+      </div>
+    </div>
+
+    <div class="screen animate-in">
+      <h2>数据流：谁有权改什么</h2>
+      <div class="flow-animation" data-steps='[
+        {"highlight":"flow-h-1","label":"客户问持仓 → Core 只读 Tool（core_ro_tool.py）只读 SELECT"},
+        {"highlight":"flow-h-2","label":"模拟下单 → 仅 gateway_repository 可 INSERT core_trade","packet":true,"from":"1","to":"2"},
+        {"highlight":"flow-h-3","label":"风控预警 → risk_alert 待人工 pending_review，不自动改账户状态","packet":true,"from":"2","to":"3"},
+        {"highlight":"flow-h-4","label":"audit_log → 只 INSERT，任何 UPDATE 都是违规","packet":true,"from":"3","to":"4"}
+      ]'>
+        <div class="flow-actors">
+          <div class="flow-actor" id="flow-h-1"><span class="flow-actor-icon">📖</span><span>Core 只读</span></div>
+          <div class="flow-actor" id="flow-h-2"><span class="flow-actor-icon">💳</span><span>模拟网关</span></div>
+          <div class="flow-actor" id="flow-h-3"><span class="flow-actor-icon">⚠</span><span>预警台账</span></div>
+          <div class="flow-actor" id="flow-h-4"><span class="flow-actor-icon">📋</span><span>审计总账</span></div>
+        </div>
+        <p class="flow-step-label">点击「下一步」看写入边界</p>
+        <div class="flow-controls">
+          <button class="btn flow-next-btn">下一步</button>
+          <button class="btn flow-reset-btn">重来</button>
+        </div>
+      </div>
+    </div>
+
+    <div class="screen animate-in">
+      <div class="quiz-container" id="quiz-overview-m6">
+        <div class="quiz-question-block"
+             data-correct="option-b"
+             data-explanation-right="对。R-01 大额等只生成 pending_review 预警，冻户必须风控专员人工处置，Agent 不能自动冻。"
+             data-explanation-wrong="只有 R-02 适当性可在交易网关阻断；其他预警不自动冻户。">
+          <h3 class="quiz-question">AI 建议「大额预警命中就自动冻结账户」，你怎么回复？</h3>
+          <div class="quiz-options">
+            <button class="quiz-option" data-value="option-a" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>好，在 risk_engine 里加 freeze 分支</span>
+            </button>
+            <button class="quiz-option" data-value="option-b" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>不行，只生成预警单，处置走 POST /api/risk/alerts/{id}/handle</span>
+            </button>
+            <button class="quiz-option" data-value="option-c" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>可以，让客服 Agent 调风控 LLM 冻户</span>
+            </button>
+          </div>
+          <div class="quiz-feedback"></div>
+        </div>
+        <button class="quiz-check-btn" onclick="checkQuiz('quiz-overview-m6')">检查答案</button>
+        <button class="quiz-reset-btn" onclick="resetQuiz('quiz-overview-m6')">重做</button>
+      </div>
+      <p class="module-footer-note">深潜各模块的硬阀门细节见对应课程 · 下一模块：未实现对照表</p>
+    </div>
+  </div>
+</section>
diff --git a/docs/course/jinrong-overview/modules/07-not-implemented.html b/docs/course/jinrong-overview/modules/07-not-implemented.html
new file mode 100644
index 0000000..587e6cd
--- /dev/null
+++ b/docs/course/jinrong-overview/modules/07-not-implemented.html
@@ -0,0 +1,97 @@
+<section class="module" id="module-7">
+  <div class="module-inner">
+    <p class="eyebrow animate-in">模块 7 · 未实现对照</p>
+    <h1 class="module-title animate-in">文档写了 ≠ 代码有<br>2026-09 快照表</h1>
+    <p class="module-lead animate-in">
+      指挥 AI 时最容易把「需求规格里的 P0」当成「仓库已经做完」。
+      下表是<strong>课程专用快照</strong>（不写入项目记忆文件），对照 <code>merger</code> 分支实际代码。
+    </p>
+
+    <div class="screen animate-in">
+      <h2>已实现（别重复造轮子）</h2>
+      <div class="badge-list">
+        <div class="badge-item"><span class="badge-code">✓</span><span class="badge-desc">平台 API v0.1 · 四 Agent 对话 + customer SSE</span></div>
+        <div class="badge-item"><span class="badge-code">✓</span><span class="badge-desc">问数 S3 + dashboard/assets · 风控台账 + 模拟交易</span></div>
+        <div class="badge-item"><span class="badge-code">✓</span><span class="badge-desc">客服 14 节点 + 游客 9 节点 · R-02 网关阻断</span></div>
+      </div>
+    </div>
+
+    <div class="screen animate-in">
+      <h2>未实现 / 演示停在某层（指挥 AI 前先查）</h2>
+      <div class="pattern-cards">
+        <div class="pattern-card">
+          <h3>空壳 API</h3>
+          <p>知识库空壳 API（<code>knowledge.py</code>）· 管理空壳 API（<code>admin.py</code>）空壳 API — T-21 拍板一期只做脚本入库，无上传/重建端点。</p>
+        </div>
+        <div class="pattern-card">
+          <h3>T-20 顾问工作台</h3>
+          <p>A-03 话术草稿复核 · A-05 合规巡检台 · A-06 跟进草稿入库 — prompt 有约束，无前端/表流程。</p>
+        </div>
+        <div class="pattern-card">
+          <h3>前端未接线</h3>
+          <p>AML scan UI · 平台适当性按钮 · 风控台账高级筛选 — 后端部分已有，<code>web/</code> 未全接。</p>
+        </div>
+        <div class="pattern-card">
+          <h3>运维 cron 无 UI</h3>
+          <p>FR-9 超期升级 cron（<code>escalation_scan.py</code>）FR-9 cron · FR-10 行为扫描 cron（<code>agent_behavior_scan.py</code>）FR-10 cron — 引擎在，须手动跑脚本。</p>
+        </div>
+        <div class="pattern-card">
+          <h3>演示边界</h3>
+          <p>转人工 = API 字段 + 橙色 Tag · debug 头仅 dev · 脱敏默认关 · 无真呼叫中心排队。</p>
+        </div>
+        <div class="pattern-card">
+          <h3>画像热缓存</h3>
+          <p>L1 Redis 全量热缓存 · L2 Repository — 客服线部分已接，宿主/顾问未全接。</p>
+        </div>
+      </div>
+      <div class="callout callout-accent">
+        <strong>注意：</strong> <code>REQUIREMENTS.md</code> 部分 Wave 条目仍标「未做」，与代码不同步——以本表 + 各模块深潜课为准。
+      </div>
+    </div>
+
+    <div class="screen animate-in">
+      <h2>鉴权三线速查（跨课总表）</h2>
+      <div class="translation-block">
+        <div class="translation-code">
+          <span class="translation-label">三条入口</span>
+          <pre><code><span class="code-line">对话 Chat    → get_auth_context + X-Agent-Type</span>
+<span class="code-line">问数/平台    → get_platform_auth_context（无 Agent 头）</span>
+<span class="code-line">风控 REST    → get_auth_context + X-Agent-Type: risk</span></code></pre>
+        </div>
+        <div class="translation-english">
+          <span class="translation-label">白话</span>
+          <div class="translation-lines">
+            <p class="tl">401 <code>MISSING_AGENT_TYPE</code>：Chat 忘了带头，不是 JWT 坏了。</p>
+            <p class="tl">问数页加 <code>X-Agent-Type: analyst</code> 是<strong>错方向</strong>——会走错鉴权栈。</p>
+            <p class="tl">持仓页用平台鉴权，不要 Agent 头——和 Chat 不是一套。</p>
+          </div>
+        </div>
+      </div>
+
+      <div class="quiz-container" id="quiz-overview-m7">
+        <div class="quiz-question-block"
+             data-correct="option-c"
+             data-explanation-right="对。T-21 一期知识库走 知识库脚本入库（scripts/kb/build_kb.py）脚本入库，空壳 knowledge API 是刻意的。"
+             data-explanation-wrong="知识库空壳 API（knowledge.py）空壳是拍板结果，不是「忘了做」——别指挥 AI 直接补上传 API 而不对契约。">
+          <h3 class="quiz-question">AI 说「补全 knowledge 上传 API 就能用 RAG」，你怎么回？</h3>
+          <div class="quiz-options">
+            <button class="quiz-option" data-value="option-a" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>好，在 知识库空壳 API（knowledge.py）加 POST /upload</span>
+            </button>
+            <button class="quiz-option" data-value="option-b" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>好，让前端直连 Milvus</span>
+            </button>
+            <button class="quiz-option" data-value="option-c" onclick="selectOption(this)">
+              <div class="quiz-option-radio"></div><span>先查 T-21 拍板：一期脚本入库，上传端点不做</span>
+            </button>
+          </div>
+          <div class="quiz-feedback"></div>
+        </div>
+        <button class="quiz-check-btn" onclick="checkQuiz('quiz-overview-m7')">检查答案</button>
+        <button class="quiz-reset-btn" onclick="resetQuiz('quiz-overview-m7')">重做</button>
+      </div>
+
+      <p class="module-footer-note">快照日期 2026-09-10 · 仅用于交互课程 · 深潜见 <a href="../index.html" style="color:var(--accent)">课程中心</a></p>
+    </div>
+  </div>
+</section>
diff --git a/docs/course/jinrong-overview/styles.css b/docs/course/jinrong-overview/styles.css
index 544669c..68d0e39 100644
--- a/docs/course/jinrong-overview/styles.css
+++ b/docs/course/jinrong-overview/styles.css
@@ -254,7 +254,8 @@ pre::-webkit-scrollbar { display: none; }
   padding-top: calc(var(--nav-height) + var(--space-12));
 }
 
-.module-content {
+.module-content,
+.module-inner {
   max-width: var(--content-width);
   margin: 0 auto;
 }
diff --git a/docs/memory/FLOW.md b/docs/memory/FLOW.md
index e0aaa40..fe3171d 100644
--- a/docs/memory/FLOW.md
+++ b/docs/memory/FLOW.md
@@ -39,7 +39,7 @@
    uvicorn app.main:app --reload
    GET http://127.0.0.1:8000/health  → {"status":"ok"}
    cd web && npm run dev               → 5173 代理 8000
-   python -m pytest   → 730 passed 0 skipped
+   python -m pytest   → 786 passed 1 skipped
 
 RBAC 联调账号：scripts/dev/rbac-seed-reference.md
 ```
@@ -54,11 +54,11 @@ RBAC 联调账号：scripts/dev/rbac-seed-reference.md
 Client → Gateway(JWT/RBAC) → api/chat → agent_service(LangGraph) → Tools → 存储 → 响应 + audit_log
 ```
 
-当前：**风控全链路 + Wave 0 共用底座 + 代销平台 v0.1 + AL-09 + 客服 S2 + 前端 P0 主链路（2026-09-09，`merger`）**。**测试基线：`python -m pytest` → 730 passed** · **`web/` 19 Vitest 绿**。
+当前：**风控全链路 + Wave 0 共用底座 + 代销平台 v0.1 + AL-09 + 客服 S2 Wave3 部分 + 前端 P0（2026-09-10，`merger`）**。**测试基线：`python -m pytest` → 786 passed 1 skipped** · **`web/` 19 Vitest 绿**。
 
-**下一步（统筹 P1）：** analytics 问数页 · 接口契约发群 · customer Chat SSE（后端 stream 未接 customer_service）。
+**下一步（统筹 P1）：** 接口契约发群 · 风控演示运维脚本 · 画像 Redis L1/L2 热读扩展 · customer 阈值 push（未做）。
 
-**本机已就位状态（2026-09-09）：** `.env` 含 `REDIS_URL=redis://127.0.0.1:6380/0`（Docker Redis 7）；pytest **730 绿**；前端 Chat/平台页已真接。**演示/走查后按《演示SOP-风控模块.md》§2 重灌**。
+**本机已就位状态（2026-09-10）：** `.env` 含 `REDIS_URL=redis://127.0.0.1:6380/0`；pytest **786 绿**；客户 Chat SSE 已接 `prepare_customer_stream`。
 
 **本机已知坑：** `mysql.exe` 不在 PATH；`reset.ps1` 自动化用 `MYSQL_PWD`；**6379 常被 Windows Redis 3.x 占用** → 项目 Docker 映射 **6380**；Milvus 中文路径需英文 `MILVUS_URI`；重装环境后 `python -c "import jose, redis"` 自检。
 
@@ -90,6 +90,18 @@ Tool（tool_service.run_tool：白名单 → 归属校验 → 执行 → agent_t
 落库：agent_message、agent_tool_call（T-04 已接：success/blocked/error 全留痕，message_id 一期 NULL）、audit_log（http_access 已接，同 trace_id）
 ```
 
+**客户线并行分支（`X-Agent-Type: customer` · 2026-09-10）：**
+
+```text
+api/chat 或 /stream → auth_adapter → customer_service.run_customer_chat（14 节点 LangGraph）
+  → intent_classify（关键词优先：数据查询 > save_note > nav/匹配）
+  → core_ro_tool（持仓/流水/风评/适当性/净值）或 fin_* RAG 或 reject/transfer
+  → interpret/generate/chitchat → sanitize_postprocess.finalize_sanitized_reply（1B）
+  → profile_maybe_extract → threshold_service.sync（C-04 摘要写 config）
+  → query_holdings 末尾 build_threshold_alert（达线追加提醒 + customer_notify_log）
+SSE：prepare_customer_stream 整图跑完再 _chunk_reply_text 推块
+```
+
 ------
 
 ## 3. 主链路 · 知识库入库
diff --git a/docs/memory/FRAMEWORK.md b/docs/memory/FRAMEWORK.md
index 0ffe0a3..68a1c2d 100644
--- a/docs/memory/FRAMEWORK.md
+++ b/docs/memory/FRAMEWORK.md
@@ -35,7 +35,7 @@
 | 模块 | 职责 | 依赖 | 代码状态 |
 | --- | --- | --- | --- |
 | Agent Gateway / Auth SDK | JWT、RBAC、归属校验 | Redis、MySQL customer_advisor_rel | **已实现（T-01 + AL-09）**：模块 `service/auth_service.py` + `api/deps.py`；宿主 `gateway/` 四件套并存；`/api/auth/login` 统一走 `issue_dev_token`；S2 接缝 `auth_adapter.module_auth_from_host` |
-| 客户财富 Agent | L1 画像、事实查询、阈值提醒 | Core RO、Milvus 产品库 | **S2 已接线** · **Chat 同步+SSE**（stream → `prepare_customer_stream`）
+| 客户财富 Agent | L1 画像、事实查询、阈值提醒 | Core RO、Milvus 产品库 | **S2 + Wave3 部分（2026-09-10）**：Chat SSE · 1B/R1 · **C-04 阈值** · **C-05 nav** · **C-11 匹配** · 13 槽 L1 · **786 pytest**
 | 代理人助手 Agent | L2 画像、RAG、草稿 | L1 只读、Milvus | 空壳 service（chat 骨架已通） |
 | 数据分析 Agent | NL→SQL→解读 | Core RO、画像只读 | **S3+P2（2026-09-09）**：问数 · dashboard metrics · 资产沉淀 API/UI · 口径种子 SQL |
 | 风控监测 Agent | 预警、L3、R-02 适当性 | 交易事件、AML 名单 | **已实现 B1~B9b + C1~C6（FR-1~10）**：事件线 + 对话线 + 集中度/时效升级/代理人行为链；**AL-09 已并入 `merger` 分支** |
diff --git a/docs/memory/ITERATION.md b/docs/memory/ITERATION.md
index d942ff0..f6fcadb 100644
--- a/docs/memory/ITERATION.md
+++ b/docs/memory/ITERATION.md
@@ -21,4 +21,5 @@
 | 2026-09-08 | P1 环境收口（续）：补建 `risk_aml_list` + AML 种子 · `fix_utf8_seed.py` 修复 Windows 中文乱码 · 集成测试 11 例恢复 · **530 passed 0 skipped** | 真库集成 skip/失败 | MEMORY / ENVIRONMENT / FLOW / bootstrap 脚本 |
 | 2026-09-09 | **四角色收益/洞察 Dashboard 需求 v2**（锚点修正·四角色 Demo 数·风控 Empty·Hook/联调） | 用户再完善需求 | wealth-dashboard spec v2 / frontend-p0 §2.5 / TODO |
 | 2026-09-09 | **客服 Agent 代码合并**（`customer-service-agent` 只增不盖） | 用户要求合并上传内容 | `客服Agent-合并说明.md` · Wave1~5 新增文件 · CS-C-11 迁移 SQL · wave 测试暂 ignore |
-| 2026-09-09 | **L3 Redis cache-aside 读路径补齐** + 风控/演示测试数据 TODO 拆项 | 画像 Redis 只做写侧 DEL · 测未接接口缺种子 | profile_l3 / redis_gateway / TODO |
+| 2026-09-10 | **客服 Wave3 批次**：1B 抽到 `sanitize_postprocess`（visitor 对齐）· C-04 `threshold_service` · C-05 `nav_query` · C-11/C-07/C-08 意图/槽位 · keyword 优先级修复 · **786 pytest** | 用户「全做」批次收尾 | MEMORY / REQUIREMENTS / FLOW / TODO / 课程模块 7 / TEST-LOG v1.1 |
+| 2026-09-10 | **客服合规拍板落地**：1B sanitize 分治 · R1 L1 Top-K · MEMORY/课程/测试包 | 误转人工 + 画像膨胀 | MEMORY §3 · TEST-2026-09-10-CS-001 · 776 pytest |
diff --git a/docs/memory/MEMORY.md b/docs/memory/MEMORY.md
index 30e699b..f70f81e 100644
--- a/docs/memory/MEMORY.md
+++ b/docs/memory/MEMORY.md
@@ -9,7 +9,7 @@
 
 **项目是什么：** 金融四 Agent（客户财富 / 代理人 / 数据分析 / 风控）共用数据层与合规底座；**不**互调 LLM，跨 Agent 走 L1/L2/L3 画像与预警表。
 
-**当前进度：** 需求与表设计已定 · **风控 + 平台 API + 客服 S2 + 数据分析 S3/P2** · **customer Chat SSE**（stream 分流 customer_service）· **STAFF-30001 含 risk_demo**（模拟交易演示）· **774+ pytest** · **19 Vitest** · **Redis @ 6380**
+**当前进度：** 需求与表设计已定 · **风控 + 平台 API + 客服 S2 Wave3 部分落地 + 数据分析 S3/P2** · **customer Chat SSE** · **C-04/C-05/C-11 等** · **786 pytest** · **19 Vitest** · **Redis @ 6380**
 
 **工作分支：** 团队开发在 **`merger`**；历史 `risk-control-agent` 交付冻结。
 
@@ -41,11 +41,13 @@
 | `app/utils/` | **基本就绪** | trace（trace_id+request_id 双 contextvar）/ desensitize / db（引擎工厂）/ response（统一错误体+4xx/500 handler）/ exceptions（含 ApiError）已实现；logger 占位 |
 | `app/config/database.py` | **已实现** | MySQL 双引擎 + **Redis 单例**（`REDIS_URL` · **RESP2 `protocol=2`** 兼容 Docker Redis 7 / 旧 Windows Redis 3） |
 | `app/config/settings.py` | **已实现** | 双库 + risk_* 阈值 + JWT + **customer/visitor/profile** 字段 + `kb_root_dir` |
-| `app/service/customer_service.py` `visitor_service.py` | **已实现（S2）** | 客服 14 节点 · 游客 9 节点 LangGraph；RAG 走 **fin_* 三库**；Redis 记忆 **fail-open** |
+| `app/service/customer_service.py` `visitor_service.py` | **已实现（S2 + Wave3 部分）** | 客服 14 节点 · **C-04 阈值** · **C-05 nav_query** · **C-11 匹配说明** · 游客 9 节点；共用 `sanitize_postprocess.finalize_sanitized_reply`（1B）；RAG **fin_* 三库** |
+| `app/service/threshold_service.py` | **已实现（C-04）** | L1 `threshold_pref_summary` → `customer_threshold_config`；持仓查询加权盈亏 vs 阈值 → `customer_notify_log` |
+| `app/utils/sanitize_postprocess.py` | **已实现（1B 共用）** | 数据查询 intent（含 nav_query）违禁 → 回退 fact_text；RAG/闲聊 → COMPLIANCE_REJECT；均不自动 transfer |
 | `scripts/core/*.sql` + `reset.ps1` | **已实现** | Core 模拟库 DDL + 种子 |
 | `scripts/agent/` `scripts/demo/` `scripts/dev/` | **已实现** | AML 种子 + 演示数据 + `run_sql_file.py` + **`start-redis.ps1`**（Docker Redis 优先）+ issue_dev_token |
 | `scripts/sync/*.py` | **已实现** | 归属同步 + Neo4j 全图 |
-| `tests/` | **已实现** | **774 用例** 0 skipped（含 Wave6 analyst + customer stream 测试）
+| `tests/` | **已实现** | **786 用例** 1 skipped（Wave3 customer + threshold + sanitize_postprocess + 1B/R1）
 | `docs/course/` | **交互课程集（2026-09-09）** | 打开 `docs/course/index.html` 导览中心 · 总览 + 7 模块深潜课 |
 | `docs/PRD/PRD-风控监测Agent.md` | **已冻结（v1.1）** | 风控 PRD v1.0 + v1.1 追加 FR-8/9/10（§4A）+ 规则表附录 |
 | `docs/项目框架设计/实现方案-风控追加需求v1.1-C4C6.md` | **已定稿** | C4~C6 编码依据（经独立 AI 评审修订闭环）；分支/进度速览另见项目根 `交接文档.md` |
@@ -70,7 +72,7 @@
    （风控演示：scripts/demo/prepare_risk_demo.sql，reset 后重跑）
 6. python scripts/sync/sync_advisor_rel.py && python scripts/sync/sync_neo4j.py
 7. `docker compose up -d redis`（或 `.\scripts\dev\start-redis.ps1`）→ **REDIS_URL=redis://127.0.0.1:6380/0**（Docker Redis 7；避开本机 Windows Redis 占 6379）
-8. uvicorn … · python -m pytest（**774 绿**）；问数冒烟 · 可选 `mysql … < scripts/agent/seed-analyst-metric-dict.sql`
+8. uvicorn … · python -m pytest（**786 绿**）；问数冒烟 · 可选 `mysql … < scripts/agent/seed-analyst-metric-dict.sql`
 ```
 
 **AL-09 合并后架构（一句话）：** 宿主 `gateway/` + 模块 `deps.py` **双栈并存**；对外登录/token **统一**；chat/risk 均走模块鉴权；接缝 S2 用 `auth_adapter`。
@@ -153,6 +155,19 @@ audit_log 等审计表（只 INSERT）
 画像不得覆盖 L0 正式测评
 ```
 
+**客服合规拍板（2026-09-10 · 已落地）：**
+
+| ID | 决策 | 代码落点 |
+| --- | --- | --- |
+| **1B** | 数据查询 intent（持仓/流水/风评/适当性/**净值**）经 `sanitize_reply` 命中违禁词 → **回退 `fact_text`，不转人工**；RAG/闲聊命中 → `COMPLIANCE_REJECT`，**也不自动 transfer**；**customer + visitor 共用** | `app/utils/sanitize_postprocess.py` · `finalize_sanitized_reply` |
+| **R1** | L1 `product_preferences` / `excluded_products` 合并时写 `items_meta`；注入 prompt **Top-K + 时间衰减 + TTL**（K=3 · TTL=90d · 半衰 30d） | `profile_service` · `settings.profile_preference_*` |
+| **C-04** | 用户口述「亏 X% 提醒我」→ L1 摘要 + `customer_threshold_config`；**查持仓时**组合加权盈亏达线 → 追加提醒 + `customer_notify_log`（非 push/cron） | `threshold_service` · `core_ro_tool.query_holdings` |
+| **C-05** | 「最新净值/单位净值」→ Core `get_latest_nav`（快照，非实时盘口）；**「实时净值」仍 reject** | `core_ro_tool.query_product_nav` · intent `nav_query` |
+| **C-11** | 「我能买什么/匹配产品」→ `suitability_check` + Core 可购列表；**「推荐稳赚/买什么好」仍 reject** | `customer_prompts._ELIGIBLE_PRODUCTS_KW` |
+| **C-07** | 风评查询走 Core；**「重新测评/重做风评」** → 引导 App/网点（Agent 内不做问卷） | `customer_prompts._RISK_KW` |
+| **C-08** | 仅 L1 槽位 `investment.allocation_target`（13 槽）；**无自动偏离检测/调仓** | `profile_slots.py` |
+| **L0 优先** | 抽槽与 L0 撞车**永远听 L0**；L1 只 enrich 措辞 | `profile_slots` D7 |
+
 ------
 
 ## 4. 入口与运行
@@ -165,7 +180,7 @@ Core 模拟：scripts/core/reset.ps1 · 文档 docs/项目框架设计/Core模
 依赖：requirements.txt（LangGraph + langchain-core/openai + FastAPI + SQLAlchemy）
 启动：uvicorn app.main:app --reload → GET /health
 Redis：`docker compose up -d redis` · `REDIS_URL=redis://127.0.0.1:6380/0` · `scripts/dev/start-redis.ps1`
-测试：python -m pytest（**730 绿**；集成需本机 MySQL + `risk_aml_list` + `prepare_risk_demo.sql`）
+测试：python -m pytest（**786 绿**；集成需本机 MySQL + `risk_aml_list` + `prepare_risk_demo.sql`）
 前端：cd web && npm run dev · npm run build/test/lint（**19** Vitest）
 运维/演示脚本：scripts/demo/subscribe_alerts.py（订阅推送演示）· rebuild_alerts.py TRD-xxx（引擎异常补偿重放）
 JWT 联调：python scripts/dev/issue_dev_token.py --sub STAFF-30001 --roles risk_officer（+ Authorization: Bearer + X-Agent-Type）
@@ -214,6 +229,6 @@ RBAC 联调账号：scripts/dev/rbac-seed-reference.md
 2. 改动属于 api / service / tool / repository 哪一层？
 3. 是否需 customer_id 归属与 JWT RBAC？
 4. Core 是模拟库只读还是 agent 库读写？
-5. 如何验证？（`python -m pytest` **730 绿** · `docker compose up -d redis` + `.env` **6380** · uvicorn + `/health` · `web/` build/test · 平台 `/api/customers/*` · 登录页游客试聊 · 客户助手 Chat）
+5. 如何验证？（`python -m pytest` **786 绿** · Redis **6380** · uvicorn + `/health` · 客户助手 Chat SSE · 测试包 `docs/memory/tests/2026-09-10-customer-1b-r1/`）
 
 大任务：FRAMEWORK/FLOW 与实现状态不符时先更新 memory 再编码（用户确认跳过除外）。
diff --git a/docs/memory/REQUIREMENTS.md b/docs/memory/REQUIREMENTS.md
index b351c81..215890a 100644
--- a/docs/memory/REQUIREMENTS.md
+++ b/docs/memory/REQUIREMENTS.md
@@ -56,6 +56,13 @@
 
 | ID | 需求 | 验收对照 | 状态 | TODO |
 | --- | --- | --- | --- | --- |
-| C-01~C-05 | 持仓/产品/规则/阈值/净值 | 无买卖指导 | 未做 | T-40 |
+| C-01 | 持仓查询 | Core 只读 fact_text · 无买卖指导 | **已实现** · `holding_query` | ~~T-40~~ |
+| C-02 | 产品规则咨询 | fin_product RAG + 免责 | **已实现** · Wave1~2 | — |
+| C-03 | 政策/FAQ | fin_policy / fin_faq RAG | **已实现** · Wave1~2 | — |
+| C-04 | 亏损阈值提醒 | `customer_threshold_config` + 持仓查询追加提醒 | **已实现（2026-09-10）** · `threshold_service` | ~~T-40~~ |
+| C-05 | 产品净值 | Core 最新净值快照；禁止实时盘口 | **已实现（2026-09-10）** · `nav_query`；「实时净值」reject | ~~T-40~~ |
+| C-07 | 风评查询 / 重测引导 | Core L0；重测引导 App/网点 | **部分已实现** · 无 Agent 内问卷 | T-41 |
+| C-08 | 配置目标 | L1 槽 `allocation_target` | **部分已实现** · 无偏离检测/调仓 | T-41 |
+| C-11 | 适当性匹配说明 | 非营销推荐；联动 R-02 | **部分已实现** · 「我能买什么」→ suitability；「推荐稳赚」仍 reject | T-42 |
 
-P1+ 见 `docs/需求拆解/业务场景优先级清单.md` §3。
+**Wave 3 未做：** 主动 push/cron 阈值通知 · Phase B 行情 sync · GraphRAG 式推荐 · 自动调仓。
diff --git a/docs/memory/TODO.md b/docs/memory/TODO.md
index ab904e4..5c6bebc 100644
--- a/docs/memory/TODO.md
+++ b/docs/memory/TODO.md
@@ -36,6 +36,9 @@
 - [x] **Wave 3 测试解禁**：`test_wave3_customer_service.py` 19 例绿 · 基线 **554 passed**
 - [x] **Wave 1/2 解禁**：`test_wave1_*` · `test_wave2_*` 已移出 `collect_ignore` 并绿（132+ 例）
 - [x] **Wave 3 profile / 4 / 5 解禁**：`test_wave3_profile_service` · `test_wave4_e2e` · `test_wave5_notes` · 基线 **730 passed**
+- [x] **1B/R1 拍板落地**（2026-09-10）：`sanitize_postprocess` · Top-K · TEST-LOG · 776 pytest
+- [x] **Wave3 能力批次**（2026-09-10）：C-04 threshold · C-05 nav · C-11/C-07/C-08 · visitor 1B 对齐 · keyword 优先级 · **786 pytest**
+- [x] **企业级测试包** `docs/memory/tests/2026-09-10-customer-1b-r1/`（模块负责人 zhangyong · 修改人 Andrew）
 - [x] **客服 KB 第二套（fin_*）· Ollama 灌库**（2026-09-09 本机）：
   1. `ollama pull bge-m3` ✓
   2. Ollama 服务 `http://127.0.0.1:11434` ✓
@@ -98,7 +101,12 @@
 - [ ] **可选 dev 静态预警 seed**：2~3 条 `pending_review` 样例（免每次 simulate；与集成测试当日窗冲突须文档说明）
 - [ ] **链式 reset 脚本**：AML + prepare 并入 `reset.ps1` 或新增 `scripts/demo/prepare_all.ps1`
 
-### 画像 Redis · cache-aside（2026-09-09）
+### 客服 Agent · Wave3 开放项（2026-09-10 后）
+
+- [ ] **C-04 push/cron**：阈值命中仅持仓查询内联提醒；无 Redis pub / 定时扫仓
+- [ ] **C-05 Phase B**：`nav-snapshot` sync · 前端行情 Phase B（见 v0.2 草案）
+- [ ] **C-08 偏离检测**：仅 L1 槽位，无自动调仓建议
+- [ ] **Vitest**：客户 Chat 新 intent 无前端单测（后端已覆盖）
 
 - [x] **L3 热读**：`get_profile_l3` cache-aside（读 Redis miss → MySQL → SET EX 5m；写 upsert DEL）· `customer_context` Tool 已走此路径
 - [ ] **L1 热读/写**：`ProfileHotCache` 仅在客服线 `customer_service.py` · 宿主 `POST /api/chat` 未接
diff --git a/docs/memory/tests/2026-09-10-customer-1b-r1/MANUAL-CHECKLIST.md b/docs/memory/tests/2026-09-10-customer-1b-r1/MANUAL-CHECKLIST.md
new file mode 100644
index 0000000..835ece1
--- /dev/null
+++ b/docs/memory/tests/2026-09-10-customer-1b-r1/MANUAL-CHECKLIST.md
@@ -0,0 +1,32 @@
+# 手工验收清单 · TEST-2026-09-10-CS-001
+
+## 前置
+
+- [ ] `merger` 分支最新代码
+- [ ] Core：`.\scripts\core\reset.ps1`（CUST-9527 持仓 3 只）
+- [ ] Agent 表已建（`01-mysql-共用底座.sql`）
+- [ ] Redis Docker 6380 · `.env` `REDIS_URL=redis://127.0.0.1:6380/0`
+- [ ] R1 演示：`python scripts/dev/run_sql_file.py scripts/agent/seed-customer-profile-l1-r1-demo.sql` + `DEL profile:l1:CUST-9527`
+
+## 1B · 数据查询 sanitize 不误转人工
+
+| # | 步骤 | 期望 | 结果 |
+| --- | --- | --- | --- |
+| 1 | 登录 CUST-9527，问「我的持仓怎么样」 | 回复含 Core 真数（如 3 只产品） | ☐ |
+| 2 | 同上，观察 `transfer_to_human` | **false**（无橙色转人工 Tag） | ☐ |
+| 3 | 问「推荐稳赚基金」 | reject 静态拒答，transfer **false** | ☐ |
+| 4 | 输入「转人工」 | transfer **true** | ☐ |
+
+## R1 · 偏好 Top-K 注入
+
+| # | 步骤 | 期望 | 结果 |
+| --- | --- | --- | --- |
+| 5 | 灌 R1 种子后闲聊/RAG 一轮 | prompt 侧画像含「货币基金、债券基金」等 Top-3 | ☐ |
+| 6 | 确认不含「指数基金」 | 2020 条目超 TTL=90d 被过滤 | ☐ |
+
+## 自动化（CI 等价）
+
+```powershell
+python -m pytest tests/test_wave3_customer_service.py tests/test_wave3_profile_service.py -q
+python -m pytest -q
+```
diff --git a/docs/memory/tests/2026-09-10-customer-1b-r1/README.md b/docs/memory/tests/2026-09-10-customer-1b-r1/README.md
new file mode 100644
index 0000000..d4acb39
--- /dev/null
+++ b/docs/memory/tests/2026-09-10-customer-1b-r1/README.md
@@ -0,0 +1,28 @@
+# 测试包 · 客服 1B / 画像 R1（2026-09-10）
+
+| 项 | 值 |
+| --- | --- |
+| 测试记录编号 | `TEST-2026-09-10-CS-001` |
+| 模块 | 客户财富 Agent（CS Wave 3） |
+| 模块负责人 | zhangyong |
+| 修改人 | Andrew |
+| 关联拍板 | 1B · R1 · L0 优先 · C-04~C-11（部分） |
+
+## 文件
+
+| 文件 | 说明 |
+| --- | --- |
+| [TEST-LOG-2026-09-10-CS-001.md](./TEST-LOG-2026-09-10-CS-001.md) | 企业级测试日志（缺陷发现 → 修复 → 回归） |
+| [MANUAL-CHECKLIST.md](./MANUAL-CHECKLIST.md) | 手工验收步骤（含数据灌入） |
+
+## 数据灌入（可选 · R1 手工验 Top-K）
+
+```powershell
+# Agent 库 L1 演示数据（CUST-9527 · 含 items_meta）
+python scripts/dev/run_sql_file.py scripts/agent/seed-customer-profile-l1-r1-demo.sql
+
+# 清 Redis 热缓存（6380）
+redis-cli -p 6380 DEL profile:l1:CUST-9527
+```
+
+**1B 持仓 sanitize** 不依赖 L1 种子，仅需 Core 库 CUST-9527 持仓（`scripts/core/reset.ps1` 已有）。
diff --git a/docs/memory/tests/2026-09-10-customer-1b-r1/TEST-LOG-2026-09-10-CS-001.md b/docs/memory/tests/2026-09-10-customer-1b-r1/TEST-LOG-2026-09-10-CS-001.md
new file mode 100644
index 0000000..86914e5
--- /dev/null
+++ b/docs/memory/tests/2026-09-10-customer-1b-r1/TEST-LOG-2026-09-10-CS-001.md
@@ -0,0 +1,170 @@
+# 企业级测试日志 · TEST-2026-09-10-CS-001
+
+> 客户财富 Agent · sanitize 分治（1B）+ L1 偏好 Top-K（R1）+ Wave3 能力（C-04/C-05/C-11 等）
+
+---
+
+## 1. 文档元数据
+
+| 字段 | 值 |
+| --- | --- |
+| **测试记录编号** | TEST-2026-09-10-CS-001 |
+| **缺陷/变更标题** | 1B/R1 合规拍板 + Wave3 数据查询扩展 + keyword 优先级 |
+| **文档版本** | v1.1 |
+| **创建日期** | 2026-09-10 |
+| **最后更新** | 2026-09-10 |
+| **关联分支** | `merger` |
+| **关联拍板 ID** | 1B · R1 · L0 优先 · C-04 · C-05 · C-11 · C-07 · C-08 |
+| **关联 TODO / 需求** | MEMORY §3 · REQUIREMENTS Wave3 · TODO 客服 Wave3 批次 |
+| **风险等级** | MEDIUM（合规体验 + 意图路由回归） |
+| **缺陷类型** | 逻辑缺陷 ×3（sanitize 分治 · 画像注入 · keyword 优先级）+ 能力增量 ×5 |
+| **发现阶段** | 代码走读 + 课程缺口 + pytest 回归 |
+| **修复阶段** | TDD 单测 + 全量 pytest 786 绿 |
+
+---
+
+## 2. 组织与责任
+
+| 字段 | 值 |
+| --- | --- |
+| **所属系统** | JinRong 金融四 Agent 智能管家 |
+| **所属模块** | 客户财富 Agent（CS Wave 3） |
+| **子模块 / 服务** | `customer_service` · `visitor_service` · `profile_service` · `threshold_service` · `sanitize_postprocess` |
+| **模块负责人** | zhangyong |
+| **发现人** | Andrew |
+| **修改人** | Andrew |
+| **测试执行人** | Andrew |
+| **评审人** | （待模块负责人确认） |
+| **发布建议** | 可合并 `merger`；C-04 无 push/cron 为已知缺口 |
+
+---
+
+## 3. 环境与基线
+
+| 字段 | 值 |
+| --- | --- |
+| **测试环境** | development · 本机 Windows |
+| **Python** | 3.13 · pytest 8.4.2 |
+| **数据库** | MySQL `jinrong_agent` + `jinrong_core`（模拟库） |
+| **Redis** | Docker 6380 · RESP2（R1 手工项可 skip） |
+| **修复前测试基线** | 774 passed |
+| **中间基线（1B/R1）** | 776 passed, 1 skipped |
+| **修复后测试基线** | **786 passed**, 1 skipped |
+| **前端** | 未在本轮执行 Vitest |
+
+---
+
+## 4. 缺陷与变更描述
+
+### 4.1 缺陷 A · 1B — 数据查询 sanitize 误转人工
+
+| 字段 | 内容 |
+| --- | --- |
+| **缺陷编号** | DEF-CS-2026-09-10-001 |
+| **严重等级** | P2 |
+| **修复方案** | 抽到 `app/utils/sanitize_postprocess.py` · `finalize_sanitized_reply`；customer + visitor 共用 |
+| **变更文件** | `sanitize_postprocess.py` · `customer_service.py` · `visitor_service.py` · `test_sanitize_postprocess.py` |
+
+### 4.2 缺陷 B · R1 — L1 偏好全量平铺注入
+
+| 字段 | 内容 |
+| --- | --- |
+| **缺陷编号** | DEF-CS-2026-09-10-002 |
+| **严重等级** | P3 |
+| **修复方案** | `items_meta` + Top-K/TTL · `settings.profile_preference_*` |
+| **变更文件** | `profile_service.py` · `settings.py` · `test_wave3_profile_service.py` |
+
+### 4.3 缺陷 C · keyword_route — save_note 抢数据查询
+
+| 字段 | 内容 |
+| --- | --- |
+| **缺陷编号** | DEF-CS-2026-09-10-003 |
+| **严重等级** | P2 |
+| **复现** | 「帮我记住最近的流水」误命中 `save_note` 而非 `transaction_query` |
+| **根因** | save_note 关键词块排在数据查询之前 |
+| **修复** | 顺序：数据查询（trade/risk/suitability/holding）→ save_note → eligible/nav |
+| **变更文件** | `customer_prompts.py` · `test_wave5_notes.py` |
+
+### 4.4 能力增量 · Wave3（非缺陷）
+
+| ID | 能力 | 落点 | 单测 |
+| --- | --- | --- | --- |
+| C-04 | 阈值摘要 → config；持仓达线 inline 提醒 | `threshold_service.py` · `core_ro_tool.query_holdings` | `test_threshold_service.py` |
+| C-05 | nav_query · Core 最新净值；实时净值 reject | `core_ro_tool.query_product_nav` | `test_wave2_prompts.py` · `test_wave3_customer_service.py` |
+| C-11 | 「我能买什么」→ suitability_check | `customer_prompts._ELIGIBLE_PRODUCTS_KW` | `test_wave2_prompts.py` |
+| C-07 | 重新测评关键词 → 引导网点 | `customer_prompts._RISK_KW` | `test_wave2_prompts.py` |
+| C-08 | L1 槽 `investment.allocation_target`（13 槽） | `profile_slots.py` | `test_wave2_profile_slots.py` |
+
+---
+
+## 5. 变更清单
+
+| 类型 | 路径 | 说明 |
+| --- | --- | --- |
+| 代码 | `app/utils/sanitize_postprocess.py` | 1B 共用分治 |
+| 代码 | `app/service/threshold_service.py` | C-04 新建 |
+| 代码 | `app/service/visitor_service.py` | 对齐 1B |
+| 代码 | `app/tool/core_ro_tool.py` | nav + 阈值 alert |
+| 代码 | `app/service/customer_prompts.py` | Wave3 意图 + keyword 顺序 |
+| 代码 | `app/config/profile_slots.py` | C-08 第 13 槽 |
+| 单测 | `tests/test_threshold_service.py` 等 | +10 例量级 |
+| 记忆 | MEMORY / REQUIREMENTS / FLOW / TODO / FRAMEWORK / ITERATION | 786 基线 · Wave3 状态 |
+| 课程 | `modules/04~07` · `build_all.py` | 1B 路径 · Wave3 模块 7 |
+| 种子 | `scripts/agent/seed-customer-profile-l1-r1-demo.sql` | R1 手工验 |
+
+---
+
+## 6. 测试执行记录
+
+| 序号 | 类型 | 用例 / 命令 | 执行时间 | 执行人 | 结果 | 证据 |
+| --- | --- | --- | --- | --- | --- | --- |
+| 1 | 单元 | 1B/R1 原 5 项 | 2026-09-10 | Andrew | **PASS** | 见 v1.0 |
+| 2 | 单元 | `test_threshold_service.py` | 2026-09-10 | Andrew | **PASS** | C-04 解析/alert |
+| 3 | 单元 | `test_sanitize_postprocess.py` | 2026-09-10 | Andrew | **PASS** | nav_query 在 DATA_QUERY |
+| 4 | 单元 | `test_keyword_route_save_note_priority` | 2026-09-10 | Andrew | **PASS** | 修顺序后绿 |
+| 5 | 模块 | `test_wave2_prompts` · `test_wave3_customer_service` | 2026-09-10 | Andrew | **PASS** | nav/eligible/13 intent |
+| 6 | 全量回归 | `python -m pytest -q` | 2026-09-10 | Andrew | **PASS** | **786 passed, 1 skipped** |
+| 7 | 手工 · R1 | 种子 + render_profile_context | 2026-09-10 | Andrew | **PASS（脚本）** | Top-3 正确 |
+| 8 | Redis DEL | `profile:l1:CUST-9527` | 2026-09-10 | Andrew | **跳过** | 6380 未起时可后补 |
+
+---
+
+## 7. 数据准备与重灌结论
+
+| 数据集 | 是否需重灌 | 说明 |
+| --- | --- | --- |
+| Core | 否 | CUST-9527 持仓/风评/净值在 reset.ps1 |
+| Agent L1 种子 | 建议（R1 手工） | `seed-customer-profile-l1-r1-demo.sql` |
+| `customer_threshold_config` | 可选 | 口述「亏10%提醒我」后自动 upsert |
+| Redis 热缓存 | 灌 SQL 后清 | `DEL profile:l1:CUST-9527` |
+
+---
+
+## 8. 结论与剩余风险
+
+| 字段 | 结论 |
+| --- | --- |
+| **需求是否覆盖** | C-01~05 已实现；C-07/08/11 部分实现（见 REQUIREMENTS） |
+| **旧功能是否破坏** | 否 · 786 pytest 全绿 |
+| **剩余风险** | ① C-04 无 push/cron；② C-05 非实时、Phase B 未做；③ C-08 无偏离检测；④ 手工 uvicorn 走查待补 |
+| **建议人工再验** | CUST-9527：持仓+阈值 · nav_query · 「我能买什么」· 「实时净值」reject · save_note 与流水优先级 |
+| **是否可发布** | 后端可合并 |
+
+---
+
+## 9. 签核（可选）
+
+| 角色 | 姓名 | 日期 | 意见 |
+| --- | --- | --- | --- |
+| 模块负责人 | zhangyong | | ☐ 通过 ☐ 待改 |
+| 修改人 | Andrew | 2026-09-10 | 自测通过 |
+| 测试 | Andrew | 2026-09-10 | 786 自动化 PASS |
+
+---
+
+## 10. 修订历史
+
+| 版本 | 日期 | 作者 | 说明 |
+| --- | --- | --- | --- |
+| v1.0 | 2026-09-10 | Andrew | 1B/R1 初稿 |
+| v1.1 | 2026-09-10 | Andrew | Wave3 批次 · keyword 缺陷 · 786 基线 · 课程模块 7 |
diff --git a/docs/memory/tests/_TEMPLATE.md b/docs/memory/tests/_TEMPLATE.md
index aeee8d9..468b25a 100644
--- a/docs/memory/tests/_TEMPLATE.md
+++ b/docs/memory/tests/_TEMPLATE.md
@@ -1,34 +1,51 @@
 # 测试日志模板
 
-复制为 `YYYYMMDD-短任务名.md` 后填写。
+复制为 `YYYYMMDD-短任务名/` 目录，内含 `TEST-LOG-*.md`（企业级字段见 `2026-09-10-customer-1b-r1/TEST-LOG-2026-09-10-CS-001.md` 范例）。
 
 ```markdown
 # 测试日志：<任务名>
 
-- 日期：
-- 关联 TODO：
-- 风险等级：LOW / MEDIUM / HIGH
+## 1. 文档元数据
+| 测试记录编号 | |
+| 缺陷/变更标题 | |
+| 文档版本 | v1.0 |
+| 创建日期 | |
+| 关联分支 | merger |
+| 关联拍板/TODO | |
+| 风险等级 | LOW / MEDIUM / HIGH |
+| 缺陷类型 | |
+| 发现阶段 | |
 
-## 改了什么
+## 2. 组织与责任
+| 所属模块 | |
+| 模块负责人 | |
+| 发现人 | |
+| 修改人 | |
+| 测试执行人 | |
+| 评审人 | |
 
-- 文件：
-- 行为变化：
+## 3. 缺陷描述（可多条）
+| 缺陷编号 | |
+| 严重等级 | P1/P2/P3 |
+| 复现步骤 | |
+| 期望 / 实际 | |
+| 根因 | |
+| 修复方案 | |
 
-## 已执行
+## 4. 变更清单
+| 类型 | 路径 | 说明 |
 
-| 类型 | 命令或步骤 | 结果 |
-| --- | --- | --- |
-| 手工 / 单测 / 集成 |  | PASS / FAIL / 未执行 |
+## 5. 测试执行记录
+| 序号 | 类型 | 用例/命令 | 执行人 | 结果 | 证据 |
 
-## 未执行
+## 6. 数据准备
+| 数据集 | 是否重灌 | 操作 |
 
-- 项：
-- 原因：
+## 7. 结论
+| 需求覆盖 | |
+| 回归 | |
+| 剩余风险 | |
+| 建议人工再验 | |
 
-## 结论
-
-- 需求是否覆盖：
-- 旧功能是否破坏：
-- 剩余风险：
-- 建议人工再验：
+## 8. 签核 / 修订历史
 ```
diff --git a/docs/项目框架设计/技术选型和版本/01-技术栈与版本.md b/docs/项目框架设计/技术选型和版本/01-技术栈与版本.md
index 539899d..c08024d 100644
--- a/docs/项目框架设计/技术选型和版本/01-技术栈与版本.md
+++ b/docs/项目框架设计/技术选型和版本/01-技术栈与版本.md
@@ -1,19 +1,138 @@
 # 技术栈与版本（已定）
 
-> 更新日期：2026-09-05  
+> 更新日期：2026-09-10  
 > 环境：Windows 本机开发 · 内存 15.4 GB（可用约 3.7 GB）  
-> 原则：**日常开发走 Windows 原生安装**；Docker 仅作答辩/生产备选，不用于日常联调。
+> 原则：**日常开发走 Windows 原生安装**；Docker **仅 Redis 单容器 + 答辩/生产备选**，不用于日常全栈容器化。
 
 ---
 
-## 1. 组件一览
+## 0. 选型背景：我们在解决什么问题
+
+本项目是 **四个 Agent 共用一套合规底座** 的金融代销演示系统：客户 / 代理人 / 数据分析 / 风控，各自对话与 Tool，但共享 MySQL 画像与审计、Core 只读账、向量知识库与 Redis 会话。
+
+选型时要同时满足：
+
+| 约束 | 对技术选型的影响 |
+| --- | --- |
+| **合规与审计** | 业务真相在 MySQL + Core；Redis 只是加速副本；审计表只 INSERT |
+| **四 Agent 不互调 LLM** | 需要统一 FastAPI 入口 + LangGraph 编排，而不是四个独立微服务各搞一套 |
+| **无真实 Core** | 用 MySQL 模拟 `jinrong_core`，Agent 经 Repository 只读，便于本地灌库演示 |
+| **本机内存紧（~3.7 GB 可用）** | 不能日常跑 Docker 全家桶 + Milvus 三容器；向量用 Milvus Lite |
+| **团队 Windows 原生开发** | MySQL / Neo4j / Ollama 本机安装；减少「先起 5 个容器才能写代码」 |
+| **敏感文档不出内网** | Embedding 本地 Ollama；生成推理可走 DeepSeek API（可脱敏） |
+| **答辩要可演示** | 保留 Docker Compose 切换路径（Milvus Standalone、完整 Redis），与开发 API 一致 |
+
+**决策原则（拍板后不变）：** 能本机原生则原生；必须容器化的只选 **内存占用小、切换成本低** 的组件；前后端分离、API 契约先行；P0 不引入 MinIO / 实时行情 / 多租户。
+
+---
+
+## 1. 各组件为什么选它
+
+> 下面按 **「这层干什么 → 为什么用这个」** 说明；版本号见 §2 组件一览。
+
+### 1.1 后端：Python 3.13 + FastAPI
+
+| 为什么 | 说明 |
+| --- | --- |
+| **Agent 与 API 同进程** | 四个 Agent 的 LangGraph、Tool、Repository 与 REST 路由在同一 FastAPI 进程，调试、断点、pytest 一条线，不必维护 Java + Python 两套 |
+| **异步 I/O 够用** | 对话、SSE、MySQL/Redis 并发连接；风控事件线以同步 SQL 为主，FastAPI 足够 |
+| **类型与生态** | Pydantic 校验请求体、settings 管理双库与阈值；与 LangChain / pymilvus 生态衔接成熟 |
+| **未选 Node/Java 做 Agent 主栈** | 团队 Python 统一；数据分析 Agent 的 SQL 守卫、风控规则引擎已在 Python 落地 |
+
+### 1.2 Agent 编排：LangGraph + langchain-openai（DeepSeek）
+
+| 为什么 | 说明 |
+| --- | --- |
+| **状态图 + Tool 节点** | 对话 = `tool → llm → guard` 固定链路；风控/客服可插分支而不重写 HTTP |
+| **DeepSeek 通过 OpenAI 兼容 API** | `langchain-openai` 改 base_url 即可；无 key 时降级明确标注，不 silent 假回复 |
+| **未选裸 HTTP 调模型** | Tool 注册表、免责声明、会话注入需要与 LangGraph 节点绑定；手写状态机维护成本高 |
+| **未选四 Agent 各一个独立服务** | 项目规则禁止 Agent 互调 LLM；共用 `chat.py` + `X-Agent-Type` 分流更省内存 |
+
+### 1.3 关系库：MySQL 8.0 双库（`jinrong_agent` + `jinrong_core`）
+
+| 为什么 | 说明 |
+| --- | --- |
+| **双库隔离 L0 与 Agent  enrich** | `jinrong_core` = 模拟正式账（客户、持仓、流水、产品）；`jinrong_agent` = 会话、审计、预警、L1/L2/L3、AML |
+| **Agent 只读 Core** | 符合「Core 是权威账，Agent 不能改 C1~C5」；真实接入时只换 Core 连接，Agent 库 schema 基本不动 |
+| **未选 PostgreSQL** | 团队与本机已标准化 MySQL 8；表设计、种子脚本、Windows 安装路径已打通 |
+| **未选 SQLite 做生产底座** | 四 Agent 并发写审计/会话、集成测试要贴近真库；SQLite 仅单测用 |
+
+### 1.4 缓存：Redis 8.x（开发推荐 Docker `6380`）
+
+| 为什么 | 说明 |
+| --- | --- |
+| **会话热窗口** | `sess:{agent}:{session_id}:msgs`：最近 N 轮对话，TTL 2h；miss 回源 MySQL |
+| **画像热读** | `profile:l3:{customer_id}` 等 cache-aside；MySQL 为权威 |
+| **风控辅助** | 预警 Pub/Sub、去重键、限流计数、JWT jti 吊销 |
+| **为什么开发改用 Docker Redis（6380）** | 本机 Windows 自带 Redis 常占 **6379** 且版本偏旧（RESP3 兼容问题）；Docker `redis:7-alpine` 映射 **6380**，与 `database.py` RESP2 一致，**只启一个容器 ~50MB**，不拉垮 3.7GB 内存 |
+| **未选 Memcached** | 需要 List、Pub/Sub、TTL 组合；Redis 一条栈覆盖会话+缓存+限流 |
+
+### 1.5 图库：Neo4j 5.x（Desktop）
+
+| 为什么 | 说明 |
+| --- | --- |
+| **关系穿透演示** | 客户—产品—行业—市场多跳查询；为 GraphRAG / 投顾场景预留 |
+| **非画像主库** | 完整画像在 MySQL L1/L2/L3；Neo4j 存实体关系，由 `sync_neo4j.py` 从 Core 同步 |
+| **Desktop 降低运维** | 开发期不需自建集群；答辩可导出/换 Server |
+| **P0 对话未强依赖** | 选型先占位；不阻塞四 Agent P0 主链路 |
+
+### 1.6 向量库：Milvus Lite + pymilvus（1024 维 bge-m3）
+
+| 为什么 | 说明 |
+| --- | --- |
+| **RAG 必需** | 产品规则、客服 fin_* 库、代理人知识检索；需要向量检索 + 标量过滤（effective_date 等） |
+| **Milvus Lite 单文件** | 免 etcd/minio/milvus 三容器（~3.5GB）；本机 `.milvus/` 或 `data/milvus.db` 即可 |
+| **与 Standalone 同 API** | 答辩/生产改 `MILVUS_URI` 切 Standalone，Collection 维度和字段不变 |
+| **未选 pgvector / 纯 FAISS 文件** | 多 Collection、标量过滤、与 pymilvus 文档对齐；FAISS 中文路径等坑已在 T-21 踩过 |
+| **1024 维 bge-m3** | 中文金融语料表现好；Ollama 本地 embed，**文档向量不出内网** |
+
+### 1.7 前端：React 19 + Vite 7 + Ant Design 5 + HashRouter
+
+| 为什么 | 说明 |
+| --- | --- |
+| **四角色工作台** | 登录、侧栏、Dashboard、Chat、表格台账；需要组件库而非脚本式页面 |
+| **HashRouter** | 静态部署 / 本地 file 预览友好；后端只提供 API，不要求服务端路由 |
+| **Vite 开发体验** | HMR 快；与 TS strict、Vitest 一套工具链 |
+| **未选 Streamlit** | 需求文档或课程示例或出现 Streamlit；**本项目统一 React**，四 Agent 共用 Layout/API 客户端，桌面端信息密度更高 |
+| **未选 Vue/Angular** | 团队既定 React；Ant Design 5 金融后台组件成熟 |
+
+### 1.8 LLM 分工：DeepSeek API + Ollama bge-m3
+
+| 能力 | 选型 | 为什么 |
+| --- | --- | --- |
+| **对话 / 推理 / Tool** | DeepSeek API | 质量与成本平衡；OpenAI 兼容接入 LangGraph |
+| **Embedding** | Ollama bge-m3 本地 | 产品手册、政策 chunk **不出内网**；维度 1024 与 Milvus 对齐 |
+| **未选全本地 LLM** | — | 本机内存不够跑 7B+ 推理 + Neo4j + MySQL 同时满载；生成走 API 更稳 |
+| **未选全云端 Embedding** | — | 合规与演示要求「知识库向量化在内网完成」 |
+
+### 1.9 数据分析：sqlglot（SQL AST 白名单）
+
+| 为什么 | 说明 |
+| --- | --- |
+| **NL→SQL 必须防写** | 分析 Agent 只允许 SELECT；AST 层拦截 DROP/UPDATE/多语句 |
+| **与只读 DB 账号双保险** | 即使账号配错，应用层仍拒绝非 SELECT |
+| **未选正则黑名单** | 金融 SQL 嵌套多，正则易漏；sqlglot 解析更可靠 |
+
+### 1.10 刻意不选
+
+| 不选 | 为什么 |
+| --- | --- |
+| **MinIO / OSS（P0）** | 文档量小，本地 `data/kb/` + MySQL 元数据够用；减依赖 |
+| **Docker 日常全栈** | 内存不够；MySQL/Neo4j/Ollama 本机已安装 |
+| **Streamlit 前端** | 与 React 工作台重复；不作为交付前端 |
+| **Agent 互调 / 多 LLM 编排** | 项目 MEMORY 禁止；跨 Agent 走画像表与预警 API |
+| **Milvus Docker 日常** | 三容器 + Docker Desktop VM 易 OOM；Lite 足够开发 |
+
+---
+
+## 2. 组件一览
 
 | 组件 | 版本 / 状态 | 备注 |
 | --- | --- | --- |
 | **后端** | Python 3.13.14 + FastAPI | 系统 Python；Agent 编排 **LangGraph** 1.2.x + `langchain-core` / `langchain-openai`（DeepSeek）/ `pymilvus` 3.0.1 |
 | **SQL 安全** | `sqlglot`（AST 解析白名单） | 数据分析 Agent 只读 SQL 校验；与只读账号双保险（已确认新增） |
 | **关系库** | MySQL 8.0.46 | 原生安装，端口 **3306** ✓ |
-| **缓存** | Redis 8.10.1 | 原生安装，路径 `F:\Redis\...`，端口 **6379** ✓ |
+| **缓存** | Redis 8.x / Docker `redis:7-alpine` | 开发推荐 **6380**（`REDIS_URL`）；本机 Windows Redis 若占 6379 则与之并存 · 见 §3 |
 | **图库** | Neo4j 5.26.19（Enterprise） | Neo4j Desktop 2，已建库 ✓ |
 | **向量库** | Milvus Lite（本地文件模式） | 见 §3 踩坑说明；Collection 设计见 [03-milvus-collections.md](../项目框架设计/表设计/03-milvus-collections.md) |
 | **前端** | React 19 + Vite 7 + TS strict + Ant Design 5 + HashRouter + Vitest | 沿用既有前端栈；**不用**需求文档中的 Streamlit |
@@ -24,42 +143,70 @@
 
 ---
 
-## 2. 部署方式：Windows 原生（已定）
+## 3. 部署方式：为什么这样部署（已定）
 
-### 2.1 为何不用 Docker 做日常开发
+### 3.1 总体策略：「重服务本机原生 + 轻量容器补缺」
+
+```text
+┌─────────────────────────────────────────────────────────┐
+│  Windows 本机（日常开发）                                  │
+│  MySQL :3306 · Neo4j Desktop · Ollama · FastAPI · Vite   │
+│  Milvus Lite 单文件 · 文档目录 data/kb/                    │
+├─────────────────────────────────────────────────────────┤
+│  唯一日常容器：Docker Redis → 127.0.0.1:6380             │
+│  （避开本机 Redis 6379 · 统一 RESP2 · 内存 ~50MB）          │
+├─────────────────────────────────────────────────────────┤
+│  答辩 / 生产备选：Docker Compose                          │
+│  Milvus Standalone（etcd+minio+milvus）· 可换 OSS         │
+└─────────────────────────────────────────────────────────┘
+```
+
+| 部署选择 | 原因 |
+| --- | --- |
+| **MySQL 本机安装** | 双库 + 种子脚本 + pytest 集成测依赖真库；容器化 MySQL 在 3.7GB 可用内存下性价比低 |
+| **Neo4j Desktop** | 图形化管理、一键启停；开发不需要 K8s 级 HA |
+| **Ollama 本机** | Embedding 低延迟、无外网；与 Python 同机调试 |
+| **Milvus Lite 文件** | 不启 etcd/minio；向量库与代码同仓库路径可备份 |
+| **Redis 用 Docker 单容器** | 本机 Windows Redis 版本/端口冲突；单容器内存小、与 compose 一致，**不算「全栈 Docker 开发」** |
+| **FastAPI + Vite 进程直跑** | `uvicorn --reload` + `npm run dev`；改代码即生效 |
+| **答辩才考虑 Compose 全家桶** | 演示机内存够时 Milvus Standalone 与 Lite **API 相同**，切换 URI 即可 |
+
+### 3.2 为何不用 Docker 做日常全栈开发
 
 | 项 | 说明 |
 | --- | --- |
 | **本机内存** | 总计 15.4 GB，可用约 **3.7 GB**（使用率 ~75%） |
-| **Docker 开销** | Docker Desktop WSL2 VM ~**2 GB** + Milvus 三容器（etcd / minio / milvus）~**3.5 GB** ≈ **5.5 GB** |
-| **原生套件占用** | MySQL + Redis + Neo4j + Milvus Lite ≈ **1.9 GB** |
+| **Docker 全栈开销** | Docker Desktop WSL2 VM ~**2 GB** + Milvus 三容器 ~**3.5 GB** ≈ **5.5 GB** |
+| **原生 + Lite 占用** | MySQL + Redis 容器 + Neo4j + Milvus Lite + Ollama ≈ **2 GB 量级** |
 
-在现有内存下，**必须采用 Windows 原生部署**，否则 Milvus / Docker 与 IDE、浏览器、Neo4j 同时运行易 OOM。
+在现有内存下，**日常必须避免 Milvus/数据库全容器化**，否则与 IDE、浏览器、Neo4j 同时运行易 OOM。
 
-### 2.2 日常开发启动顺序（建议）
+### 3.3 日常开发启动顺序（建议）
 
 ```text
-1. MySQL 8.0.46      → :3306
-2. Redis 8.10.1      → :6379
-3. Neo4j Desktop     → 默认 bolt :7687
-4. Ollama + bge-m3   → 本地 embedding
-5. FastAPI 后端      → 连接上述服务 + Milvus Lite 文件
-6. Vite 前端         → dev server
+1. MySQL 8.0.46           → :3306
+2. Docker Redis           → .\scripts\dev\start-redis.ps1  → :6380
+3. Neo4j Desktop          → bolt :7687
+4. Ollama + bge-m3        → 本地 embedding
+5. FastAPI 后端           → 连接上述 + Milvus Lite 文件
+6. Vite 前端              → npm run dev
 ```
 
-### 2.3 生产 / 答辩备选
+### 3.4 生产 / 答辩备选
 
-- 可使用 Docker Compose 拉起完整 Milvus Standalone（etcd + minio + milvus），**与开发环境 Milvus Lite 通过同一 pymilvus API 切换 URI**。
-- 对象存储生产环境可再评估 MinIO / OSS；当前阶段本地目录 + MySQL 元数据即可。
+- **Milvus Standalone**（Docker Compose）：etcd + minio + milvus，与 Lite 通过 **同一 pymilvus API** 切换 `MILVUS_URI`。
+- **Redis**：可换云 Redis / 集群；应用只认 `REDIS_URL`。
+- **对象存储**：P0 本地目录；上云再换 OSS 适配层，**不改 Agent 业务接口**。
+- **DeepSeek**：生产可换私有化模型 endpoint，LangGraph 侧仍 OpenAI 兼容协议。
 
 ---
 
-## 3. 连接与配置约定
+## 4. 连接与配置约定
 
 | 服务 | 开发默认 | 环境变量示例 |
 | --- | --- | --- |
 | MySQL | `127.0.0.1:3306` | `MYSQL_HOST`, `MYSQL_PORT`, `MYSQL_DATABASE=jinrong_agent` |
-| Redis | `127.0.0.1:6379` | `REDIS_URL=redis://127.0.0.1:6379/0` |
+| Redis | `127.0.0.1:6380`（Docker 推荐） | `REDIS_URL=redis://127.0.0.1:6380/0` |
 | Neo4j | Desktop 本地 | `NEO4J_URI=bolt://localhost:7687` |
 | Milvus Lite | 项目内 `.milvus/` 或配置路径 | `MILVUS_URI=./data/milvus.db`（Lite 文件 URI 以 pymilvus 文档为准） |
 | Ollama | `http://127.0.0.1:11434` | `OLLAMA_BASE_URL`, `EMBED_MODEL=bge-m3` |
@@ -69,7 +216,7 @@ Agent 业务库脚本：[01-mysql-共用底座.sql](../项目框架设计/表设
 
 ---
 
-## 4. 向量与 RAG 对齐
+## 5. 向量与 RAG 对齐
 
 | 项 | 约定 |
 | --- | --- |
@@ -81,9 +228,9 @@ Agent 业务库脚本：[01-mysql-共用底座.sql](../项目框架设计/表设
 
 ---
 
-## 5. 踩坑说明
+## 6. 踩坑说明
 
-### 5.1 Milvus：Lite vs Standalone
+### 6.1 Milvus：Lite vs Standalone
 
 | 模式 | 适用 | 注意 |
 | --- | --- | --- |
@@ -92,27 +239,35 @@ Agent 业务库脚本：[01-mysql-共用底座.sql](../项目框架设计/表设
 
 代码层通过 `MILVUS_URI` / 连接模式开关切换，**Collection 字段与 1024 维不变**。
 
-### 5.2 不用 MinIO
+### 6.2 不用 MinIO
 
 - 原始 PDF/Word 存 **本地目录**（如 `data/kb/`）。
 - Milvus 存 chunk 文本或本地文件相对路径；`source_doc_id` / `source_version` 进 MySQL 或 Milvus 标量字段（见 Collection 设计）。
 - 后续若上云，再替换为 OSS 适配层，不改 Agent 业务接口。
 
-### 5.3 前端栈与需求文档差异
+### 6.3 前端栈与需求文档差异
 
 - 需求/用户故事中可能出现的 Streamlit **不作为本项目前端**。
 - 统一：**React 19 + Vite 7 + Ant Design 5**，四 Agent 可共用组件库与 HashRouter 多入口。
 
-### 5.4 LLM 分工
+### 6.4 LLM 分工
 
 | 能力 | 选型 | 数据出境 |
 | --- | --- | --- |
 | 对话 / 推理 / Tool 编排 | DeepSeek API + **LangGraph** StateGraph | 按 API 协议；敏感字段需脱敏 |
 | 文档 Embedding | Ollama bge-m3 本地 | **不出内网** |
 
+### 6.5 Redis 端口与 RESP 版本
+
+| 现象 | 处理 |
+| --- | --- |
+| 本机 Windows Redis 占 **6379** | 项目 `.env` 用 **6380**（Docker 映射），两者可并存 |
+| 客户端 RESP3 与旧 Redis 不兼容 | `database.py` 固定 **protocol=2**（RESP2） |
+| 启动 | `.\scripts\dev\start-redis.ps1` 或 `docker compose up -d redis` |
+
 ---
 
-## 6. 与项目其他文档的关系
+## 7. 与项目其他文档的关系
 
 | 文档 | 关系 |
 | --- | --- |
@@ -123,9 +278,10 @@ Agent 业务库脚本：[01-mysql-共用底座.sql](../项目框架设计/表设
 
 ---
 
-## 7. 版本变更记录
+## 8. 版本变更记录
 
 | 日期 | 变更 |
 | --- | --- |
 | 2026-09-05 | 初版：Windows 原生 + Milvus Lite + 不用 MinIO + React 前端栈 |
 | 2026-09 | 新增 `sqlglot`（数据分析 Agent SQL AST 白名单校验，已确认） |
+| 2026-09-10 | 新增 **§0 选型背景**、**§1 各组件为什么选它**、**§3 为什么这样部署**；Redis 开发口径改为 Docker **6380** |
diff --git a/scripts/agent/seed-customer-profile-l1-r1-demo.sql b/scripts/agent/seed-customer-profile-l1-r1-demo.sql
new file mode 100644
index 0000000..b33309f
--- /dev/null
+++ b/scripts/agent/seed-customer-profile-l1-r1-demo.sql
@@ -0,0 +1,39 @@
+-- CS Wave 3 · R1 手工验收种子（CUST-9527）
+-- 用途：验证 render_profile_context Top-K + TTL 注入（默认 K=3 · TTL=90d）
+-- 执行：python scripts/dev/run_sql_file.py scripts/agent/seed-customer-profile-l1-r1-demo.sql
+-- 前置：jinrong_agent 已建表（01-mysql-共用底座.sql）；Core CUST-9527 已由 scripts/core/reset.ps1 灌入
+-- 灌后：DEL profile:l1:CUST-9527（Redis）或等 10min TTL，避免读到旧热缓存
+
+USE jinrong_agent;
+
+INSERT INTO customer_profile_l1 (customer_id, style_tags, version, updated_by)
+VALUES (
+    'CUST-9527',
+    JSON_OBJECT(
+        'basic', JSON_OBJECT(
+            'city', JSON_OBJECT('value', '上海', 'source', 'user_declared', 'confidence', 0.9)
+        ),
+        'investment', JSON_OBJECT(
+            'product_preferences', JSON_OBJECT(
+                'value', JSON_ARRAY('货币基金', '债券基金', '指数基金', '混合基金', 'QDII基金'),
+                'source', 'user_declared',
+                'confidence', 0.92,
+                'items_meta', JSON_OBJECT(
+                    '货币基金', JSON_OBJECT('updated_at', '2026-09-10T08:00:00', 'mention_count', 5, 'confidence', 0.95),
+                    '债券基金', JSON_OBJECT('updated_at', '2026-09-09T10:00:00', 'mention_count', 3, 'confidence', 0.90),
+                    '指数基金', JSON_OBJECT('updated_at', '2020-01-01T10:00:00', 'mention_count', 8, 'confidence', 0.99),
+                    '混合基金', JSON_OBJECT('updated_at', '2026-08-01T10:00:00', 'mention_count', 1, 'confidence', 0.70),
+                    'QDII基金', JSON_OBJECT('updated_at', '2026-09-08T12:00:00', 'mention_count', 2, 'confidence', 0.85)
+                )
+            ),
+            'horizon', JSON_OBJECT('value', '1-3年', 'source', 'user_declared', 'confidence', 0.88)
+        ),
+        'threshold_pref_summary', JSON_OBJECT('value', '亏损10%提醒', 'source', 'user_declared', 'confidence', 0.97)
+    ),
+    1,
+    'customer_agent'
+)
+ON DUPLICATE KEY UPDATE
+    style_tags = VALUES(style_tags),
+    version = version + 1,
+    updated_by = 'customer_agent';
diff --git a/tests/test_module_boundary.py b/tests/test_module_boundary.py
index e747e76..3e76ada 100644
--- a/tests/test_module_boundary.py
+++ b/tests/test_module_boundary.py
@@ -120,15 +120,18 @@ CUSTOMER_AGENT_SEAM_SKIP = (
     "app/api/visitor.py",
     "app/repository/note_repository.py",
     "app/repository/profile_repository.py",
+    "app/repository/threshold_repository.py",
     "app/service/customer_service.py",
     "app/service/customer_prompts.py",
     "app/service/note_service.py",
     "app/service/profile_service.py",
+    "app/service/threshold_service.py",
     "app/service/visitor_prompts.py",
     "app/service/visitor_service.py",
     "app/tool/core_ro_tool.py",
     "app/utils/compliance_guard.py",
     "app/utils/data_masker.py",
+    "app/utils/sanitize_postprocess.py",
     "app/config/profile_slots.py",
 )
 
diff --git a/tests/test_sanitize_postprocess.py b/tests/test_sanitize_postprocess.py
new file mode 100644
index 0000000..884df10
--- /dev/null
+++ b/tests/test_sanitize_postprocess.py
@@ -0,0 +1,23 @@
+"""sanitize_postprocess 分治（1B）单测。"""
+
+from app.utils.compliance_guard import COMPLIANCE_REJECT
+from app.utils.sanitize_postprocess import finalize_sanitized_reply
+
+
+def test_data_query_falls_back_to_fact_text():
+    reply, transfer = finalize_sanitized_reply(
+        "建议您买入",
+        intent="holding_query",
+        fact_text="您当前持有 3 只产品。",
+    )
+    assert transfer is False
+    assert "3 只产品" in reply
+
+
+def test_rag_hit_returns_compliance_without_transfer():
+    reply, transfer = finalize_sanitized_reply(
+        "建议您买入更多",
+        intent="product_consult",
+    )
+    assert transfer is False
+    assert reply == COMPLIANCE_REJECT
diff --git a/tests/test_threshold_service.py b/tests/test_threshold_service.py
new file mode 100644
index 0000000..b4d4adc
--- /dev/null
+++ b/tests/test_threshold_service.py
@@ -0,0 +1,59 @@
+"""C-04 亏损阈值提醒服务单测。"""
+
+from __future__ import annotations
+
+from decimal import Decimal
+
+import pytest
+
+from app.service import threshold_service as ts
+
+
+def test_parse_loss_threshold_pct():
+    assert ts.parse_loss_threshold_pct("亏10%就提醒我") == Decimal("10")
+    assert ts.parse_loss_threshold_pct("亏损 12.5% 通知我") == Decimal("12.5")
+    assert ts.parse_loss_threshold_pct("没有数字") is None
+
+
+def test_portfolio_pnl_pct_weighted():
+    rows = [
+        {"market_value": 60000, "pnl_pct": -12.0},
+        {"market_value": 40000, "pnl_pct": -8.0},
+    ]
+    pnl = ts.portfolio_pnl_pct(rows)
+    assert pnl is not None
+    assert round(pnl, 2) == -10.4
+
+
+def test_build_threshold_alert_when_breached(monkeypatch):
+    logs: list[dict] = []
+
+    class FakeRepo:
+        def list_enabled(self, cid):
+            return [{
+                "id": 7,
+                "scope_type": "portfolio",
+                "loss_threshold_pct": Decimal("10"),
+            }]
+
+        def insert_notify_log(self, **kwargs):
+            logs.append(kwargs)
+
+    monkeypatch.setattr(ts, "ThresholdRepository", FakeRepo)
+    holdings = [{"market_value": 100000, "pnl_pct": -15.0}]
+    alert = ts.build_threshold_alert("CUST-1", holdings, trace_id="t1")
+    assert alert and "阈值提醒" in alert
+    assert logs and logs[0]["customer_id"] == "CUST-1"
+
+
+def test_build_threshold_alert_skips_when_within_threshold(monkeypatch):
+    class FakeRepo:
+        def list_enabled(self, cid):
+            return [{"id": 1, "scope_type": "portfolio", "loss_threshold_pct": Decimal("20")}]
+
+        def insert_notify_log(self, **kwargs):
+            raise AssertionError("should not notify")
+
+    monkeypatch.setattr(ts, "ThresholdRepository", FakeRepo)
+    holdings = [{"market_value": 100000, "pnl_pct": -5.0}]
+    assert ts.build_threshold_alert("CUST-1", holdings) is None
diff --git a/tests/test_wave2_profile_slots.py b/tests/test_wave2_profile_slots.py
index 8a2f2ba..948854d 100644
--- a/tests/test_wave2_profile_slots.py
+++ b/tests/test_wave2_profile_slots.py
@@ -15,9 +15,9 @@ from app.config.profile_slots import (
 
 
 def test_slots_integrity():
-    """12 槽位、path 唯一、字段合法、与 style_tags 路径对齐。"""
-    assert len(SLOTS) == 12
-    assert len(SLOT_PATHS) == len(set(SLOT_PATHS)) == 12
+    """13 槽位、path 唯一、字段合法、与 style_tags 路径对齐。"""
+    assert len(SLOTS) == 13
+    assert len(SLOT_PATHS) == len(set(SLOT_PATHS)) == 13
 
     valid_merge = {"latest", "set_union"}
     valid_fmt = {"band", "enum", "list", "text"}
diff --git a/tests/test_wave2_prompts.py b/tests/test_wave2_prompts.py
index f9c07fd..89720ff 100644
--- a/tests/test_wave2_prompts.py
+++ b/tests/test_wave2_prompts.py
@@ -15,11 +15,11 @@ from app.service.customer_prompts import (
 
 
 def test_intent_constants():
-    assert len(VALID_INTENTS) == 12
-    assert len(DATA_QUERY_INTENTS) == 4
-    # 4 个数据查询意图均在合法集内
+    assert len(VALID_INTENTS) == 13
+    assert len(DATA_QUERY_INTENTS) == 5
+    # 数据查询意图均在合法集内
     assert DATA_QUERY_INTENTS <= VALID_INTENTS
-    # 意图分类 prompt 覆盖 12 类标签
+    # 意图分类 prompt 覆盖标签
     for intent in VALID_INTENTS:
         assert intent in INTENT_SYSTEM
 
@@ -69,6 +69,8 @@ def test_keyword_route_data_queries(message, expected_intent):
         ("这个基金明天会涨吗", ("reject", "predict")),
         ("和其他平台比哪个好", ("reject", "compare")),
         ("现在实时净值多少", ("reject", "realtime")),
+        ("我能买什么产品", ("suitability_check", "")),
+        ("005827的净值是多少", ("nav_query", "")),
     ],
 )
 def test_keyword_route_transfer_and_reject(message, expected):
diff --git a/tests/test_wave3_customer_service.py b/tests/test_wave3_customer_service.py
index 662ebf3..8c55ed3 100644
--- a/tests/test_wave3_customer_service.py
+++ b/tests/test_wave3_customer_service.py
@@ -195,8 +195,9 @@ def test_interpret_sanitized_on_forbidden_reply(env, monkeypatch):
     env["llm"].responses = ["我建议您买入更多高风险产品。"]
 
     reply, disc, intent, transfer = cs.run_customer_chat(_ctx(), "我的持仓怎么样", "s1", "CUST-9527")
-    assert transfer is True
-    assert "无法提供投资建议" in reply
+    assert transfer is False
+    assert "3 只产品" in reply
+    assert "无法提供投资建议" not in reply
 
 
 def test_interpret_falls_back_to_fact_text_when_llm_down(env, monkeypatch):
@@ -253,6 +254,46 @@ def test_chitchat_with_profile_context(env):
     assert "所在城市：上海" in user_prompt
 
 
+# ---------------------------------------------------------------------------
+# C-05 / C-11 数据查询扩展
+# ---------------------------------------------------------------------------
+
+def test_nav_query_keyword(env, monkeypatch):
+    monkeypatch.setitem(
+        cs._TOOL_BY_INTENT, "nav_query",
+        lambda cid, product_keyword=None, repo=None: {
+            "tool": "nav_query", "ok": True, "facts": [],
+            "fact_text": "单位净值 1.2345（净值日期 2026-09-09）",
+        },
+    )
+    env["llm"].responses = ["nav_query", "单位净值 1.2345（净值日期 2026-09-09）"]
+    reply, disc, intent, transfer = cs.run_customer_chat(
+        _ctx(), "005827的净值是多少", "s1", "CUST-9527",
+    )
+    assert intent == "nav_query"
+    assert transfer is False
+    assert "1.2345" in reply
+
+
+def test_eligible_products_routes_suitability_not_reject(env, monkeypatch):
+    monkeypatch.setitem(
+        cs._TOOL_BY_INTENT, "suitability_check",
+        lambda cid, product_keyword=None, risk_level=None, repo=None: {
+            "tool": "suitability_check", "ok": True, "facts": [],
+            "fact_text": "按您当前风评，在售产品适当性匹配汇总：",
+        },
+    )
+    env["llm"].responses = [
+        "suitability_check",
+        "按您当前风评，在售产品适当性匹配汇总：",
+    ]
+    reply, disc, intent, transfer = cs.run_customer_chat(
+        _ctx(), "我能买什么产品", "s1", "CUST-9527",
+    )
+    assert intent == "suitability_check"
+    assert transfer is False
+
+
 # ---------------------------------------------------------------------------
 # 记忆保存 / 画像抽槽节流 / 归档
 # ---------------------------------------------------------------------------
diff --git a/tests/test_wave3_profile_service.py b/tests/test_wave3_profile_service.py
index c3c140c..fafd7a6 100644
--- a/tests/test_wave3_profile_service.py
+++ b/tests/test_wave3_profile_service.py
@@ -202,6 +202,53 @@ def test_render_profile_context_empty():
     assert ps.render_profile_context({"basic": {"age_band": {"source": "user_declared"}}}) == ""
 
 
+def test_merge_preferences_records_items_meta():
+    new, diff = ps.merge_candidates(
+        {},
+        [{"path": "investment.product_preferences", "value": "我喜欢货币基金", "source": "user_declared", "confidence": 0.85}],
+    )
+    assert diff
+    entry = new["investment"]["product_preferences"]
+    assert entry["value"] == ["货币基金"]
+    meta = entry["items_meta"]["货币基金"]
+    assert meta["mention_count"] == 1
+    assert meta["confidence"] == 0.85
+    assert meta["updated_at"]
+
+    newer, _ = ps.merge_candidates(
+        new,
+        [{"path": "investment.product_preferences", "value": "货币基金和债券基金", "source": "user_declared", "confidence": 0.9}],
+    )
+    assert set(newer["investment"]["product_preferences"]["value"]) == {"货币基金", "债券基金"}
+    assert newer["investment"]["product_preferences"]["items_meta"]["货币基金"]["mention_count"] == 2
+    assert newer["investment"]["product_preferences"]["items_meta"]["债券基金"]["mention_count"] == 1
+
+
+def test_render_profile_context_top_k_and_stale_excluded(monkeypatch):
+    monkeypatch.setattr(ps.settings, "profile_preference_top_k", 2)
+    monkeypatch.setattr(ps.settings, "profile_preference_inject_ttl_days", 90)
+    tags = {
+        "investment": {
+            "product_preferences": {
+                "value": ["货币基金", "债券基金", "指数基金", "混合基金"],
+                "source": "user_declared",
+                "confidence": 0.9,
+                "items_meta": {
+                    "货币基金": {"updated_at": "2026-09-10T10:00:00", "mention_count": 3, "confidence": 0.95},
+                    "债券基金": {"updated_at": "2026-09-09T10:00:00", "mention_count": 2, "confidence": 0.9},
+                    "指数基金": {"updated_at": "2020-01-01T10:00:00", "mention_count": 5, "confidence": 0.99},
+                    "混合基金": {"updated_at": "2026-09-08T10:00:00", "mention_count": 1, "confidence": 0.7},
+                },
+            }
+        }
+    }
+    text = ps.render_profile_context(tags, now=ps.datetime.fromisoformat("2026-09-10T12:00:00"))
+    assert "指数基金" not in text
+    assert "货币基金" in text
+    assert "债券基金" in text
+    assert "混合基金" not in text
+
+
 # ---------------------------------------------------------------------------
 # merge_candidates 规则合并
 # ---------------------------------------------------------------------------