From 745cdd79cfb354409d4a5b6e272d4854a2a28162 Mon Sep 17 00:00:00 2001
From: liangxu <liangxu0920@qq.com>
Date: Tue, 5 May 2026 20:48:14 +0800
Subject: [PATCH] feat(compliance): add content compliance detection across
 tenant, ops, and clients

Implements the Revision 8/9 compliance design: tenant + ops backends, ops-web
content-safety pages, admin-web editor/publish gate integration, desktop publish
block surfacing, and supporting migrations / shared types / config plumbing.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
---
 .../src/components/ArticleEditorCanvas.vue    |  370 ++-
 .../src/components/PublishArticleModal.vue    |  770 ++++-
 apps/admin-web/src/i18n/messages/en-US.ts     |    1 +
 apps/admin-web/src/i18n/messages/zh-CN.ts     | 2239 +++++++-------
 apps/admin-web/src/lib/api.ts                 |   54 +
 apps/admin-web/src/lib/display.ts             |    3 +-
 apps/admin-web/src/lib/errors.ts              |    8 +
 .../admin-web/src/views/ArticleEditorView.vue |  355 ++-
 .../src/main/adapters/deepseek.test.ts        |  470 ++-
 .../renderer/views/PublishManagementView.vue  |   98 +-
 .../src/shared/publisher-errors.ts            |    3 +
 apps/ops-web/package.json                     |    1 +
 .../compliance/PlatformScopePicker.vue        |   61 +
 apps/ops-web/src/layouts/AppShell.vue         |   44 +-
 apps/ops-web/src/lib/compliance-display.ts    |  114 +
 apps/ops-web/src/lib/compliance.ts            |  191 ++
 apps/ops-web/src/lib/http.ts                  |    1 +
 apps/ops-web/src/main.ts                      |   10 +
 apps/ops-web/src/router/index.ts              |   48 +
 .../compliance/ComplianceDictionariesView.vue |  276 ++
 .../ComplianceDictionaryEditView.vue          |  618 ++++
 .../ComplianceManualReviewDetailView.vue      |  279 ++
 .../ComplianceManualReviewsView.vue           |  223 ++
 .../views/compliance/CompliancePolicyView.vue |  324 +++
 .../compliance/ComplianceRecordsView.vue      |  238 ++
 .../views/compliance/ComplianceStatsView.vue  |  206 ++
 apps/ops-web/tsconfig.json                    |    3 +-
 apps/ops-web/vite.config.ts                   |    1 +
 deploy/config.yaml                            |   15 +
 deploy/k3s/config/config.yaml                 |   15 +
 docs/compliance-detection-tech-design-v1.md   |   23 +-
 .../2026-04-28-compliance-detection-design.md |  657 ++++-
 findings.md                                   |   17 +
 packages/shared-types/src/index.ts            |  122 +
 pnpm-lock.yaml                                |    3 +
 progress.md                                   |   46 +
 server/cmd/ops-api/main.go                    |    2 +
 server/cmd/worker-generate/main.go            |   11 +-
 server/configs/config.local.yaml.example      |   17 +
 server/configs/config.yaml                    |   15 +
 server/internal/ops/app/compliance.go         | 1460 ++++++++++
 .../ops/transport/compliance_handler.go       |  388 +++
 server/internal/ops/transport/router.go       |   22 +
 server/internal/shared/compliance/types.go    |  106 +
 server/internal/shared/config/config.go       |   96 +
 .../shared/messaging/rabbitmq/client.go       |   20 +
 .../internal/shared/swagger/descriptions.go   |  206 +-
 server/internal/tenant/app/article_service.go |    2 +
 .../tenant/app/desktop_task_service.go        |  214 +-
 .../app/online_generation_replay_test.go      |  167 ++
 .../tenant/app/publish_job_service.go         |  131 +-
 server/internal/tenant/compliance/service.go  | 2584 +++++++++++++++++
 .../tenant/compliance/service_test.go         |   36 +
 .../tenant/repository/article_repo.go         |   62 +-
 .../tenant/repository/desktop_task_repo.go    |   74 +-
 .../repository/generated/desktop_task.sql.go  |   40 +-
 .../tenant/repository/generated/models.go     |  131 +-
 .../repository/queries/desktop_task.sql       |   14 +-
 .../tenant/transport/compliance_handler.go    |  238 ++
 .../tenant/transport/desktop_task_handler.go  |    6 +-
 .../tenant/transport/publish_job_handler.go   |    2 +-
 server/internal/tenant/transport/router.go    |   11 +
 .../generate/compliance_review_worker.go      |  163 ++
 ...000_generation_task_leases_compat.down.sql |    2 +
 ...10000_generation_task_leases_compat.up.sql |    5 +
 ...03110000_add_generation_task_leases.up.sql |   14 +-
 ...05102000_create_compliance_tables.down.sql |   29 +
 ...0505102000_create_compliance_tables.up.sql |  214 ++
 ...0000_create_compliance_ops_tables.down.sql |    4 +
 ...100000_create_compliance_ops_tables.up.sql |   84 +
 ...1000_seed_compliance_dictionaries.down.sql |   22 +
 ...101000_seed_compliance_dictionaries.up.sql |  119 +
 task_plan.md                                  |   21 +-
 73 files changed, 12747 insertions(+), 1892 deletions(-)
 create mode 100644 apps/ops-web/src/components/compliance/PlatformScopePicker.vue
 create mode 100644 apps/ops-web/src/lib/compliance-display.ts
 create mode 100644 apps/ops-web/src/lib/compliance.ts
 create mode 100644 apps/ops-web/src/views/compliance/ComplianceDictionariesView.vue
 create mode 100644 apps/ops-web/src/views/compliance/ComplianceDictionaryEditView.vue
 create mode 100644 apps/ops-web/src/views/compliance/ComplianceManualReviewDetailView.vue
 create mode 100644 apps/ops-web/src/views/compliance/ComplianceManualReviewsView.vue
 create mode 100644 apps/ops-web/src/views/compliance/CompliancePolicyView.vue
 create mode 100644 apps/ops-web/src/views/compliance/ComplianceRecordsView.vue
 create mode 100644 apps/ops-web/src/views/compliance/ComplianceStatsView.vue
 create mode 100644 server/internal/ops/app/compliance.go
 create mode 100644 server/internal/ops/transport/compliance_handler.go
 create mode 100644 server/internal/shared/compliance/types.go
 create mode 100644 server/internal/tenant/app/online_generation_replay_test.go
 create mode 100644 server/internal/tenant/compliance/service.go
 create mode 100644 server/internal/tenant/compliance/service_test.go
 create mode 100644 server/internal/tenant/transport/compliance_handler.go
 create mode 100644 server/internal/worker/generate/compliance_review_worker.go
 create mode 100644 server/migrations/20260502110000_generation_task_leases_compat.down.sql
 create mode 100644 server/migrations/20260502110000_generation_task_leases_compat.up.sql
 create mode 100644 server/migrations/20260505102000_create_compliance_tables.down.sql
 create mode 100644 server/migrations/20260505102000_create_compliance_tables.up.sql
 create mode 100644 server/migrations_ops/20260505100000_create_compliance_ops_tables.down.sql
 create mode 100644 server/migrations_ops/20260505100000_create_compliance_ops_tables.up.sql
 create mode 100644 server/migrations_ops/20260505101000_seed_compliance_dictionaries.down.sql
 create mode 100644 server/migrations_ops/20260505101000_seed_compliance_dictionaries.up.sql

diff --git a/apps/admin-web/src/components/ArticleEditorCanvas.vue b/apps/admin-web/src/components/ArticleEditorCanvas.vue
index 8a6b0c3..79e56a9 100644
--- a/apps/admin-web/src/components/ArticleEditorCanvas.vue
+++ b/apps/admin-web/src/components/ArticleEditorCanvas.vue
@@ -1,4 +1,5 @@
 <script setup lang="ts">
+import type { ComplianceViolation } from '@geo/shared-types'
 import {
   AlignCenterOutlined,
   AlignLeftOutlined,
@@ -20,7 +21,7 @@ import {
   UnorderedListOutlined,
 } from '@ant-design/icons-vue'
 import { Crepe, CrepeFeature } from '@milkdown/crepe'
-import { commandsCtx, editorViewCtx, parserCtx } from '@milkdown/kit/core'
+import { commandsCtx, editorViewCtx, parserCtx, prosePluginsCtx } from '@milkdown/kit/core'
 import type { Ctx } from '@milkdown/kit/ctx'
 import { redoCommand, undoCommand } from '@milkdown/kit/plugin/history'
 import {
@@ -45,9 +46,16 @@ import {
   setAlignCommand,
   toggleStrikethroughCommand,
 } from '@milkdown/kit/preset/gfm'
-import { Slice } from '@milkdown/kit/prose/model'
-import { NodeSelection, TextSelection, type Selection } from '@milkdown/kit/prose/state'
-import type { EditorView } from '@milkdown/kit/prose/view'
+import { Slice, type Node as ProseNode } from '@milkdown/kit/prose/model'
+import {
+  NodeSelection,
+  Plugin,
+  PluginKey,
+  TextSelection,
+  type Selection,
+  type Transaction,
+} from '@milkdown/kit/prose/state'
+import { Decoration, DecorationSet, type EditorView } from '@milkdown/kit/prose/view'
 import { callCommand, replaceAll } from '@milkdown/kit/utils'
 import { message } from 'ant-design-vue'
 // NOTE: import each common stylesheet explicitly instead of the aggregate
@@ -103,6 +111,7 @@ const props = defineProps<{
   title: string
   modelValue: string
   disabled?: boolean
+  complianceViolations?: ComplianceViolation[]
   uploadImage?: (file: File) => Promise<string>
 }>()
 
@@ -122,6 +131,7 @@ const tablePickerRef = ref<HTMLElement | null>(null)
 
 const AI_OPTIMIZE_PANEL_GAP = 18
 const AI_OPTIMIZE_SELECTION_HIGHLIGHT_NAME = 'article-editor-ai-optimize-selection'
+const COMPLIANCE_HIGHLIGHT_CLASS = 'article-editor-compliance-hit'
 const AI_OPTIMIZE_TOOLBAR_ICON = `
   <svg
     class="svgfont"
@@ -228,6 +238,230 @@ type SelectedImageSnapshot = {
 
 type MilkdownEditorInstance = Awaited<ReturnType<Crepe['create']>>
 
+type ComplianceHighlightRequest = {
+  key: string
+  text: string
+  level: ComplianceViolation['level']
+  startOffset: number
+}
+
+type ComplianceHighlightSpec = ComplianceHighlightRequest & {
+  from: number
+  to: number
+}
+
+type ComplianceHighlightPluginState = {
+  specs: ComplianceHighlightSpec[]
+  decorations: DecorationSet
+}
+
+type ComplianceHighlightMeta =
+  | { type: 'set'; requests: ComplianceHighlightRequest[] }
+  | { type: 'clear' }
+
+type EditorTextIndex = {
+  text: string
+  startPosByChar: number[]
+  endPosByChar: number[]
+}
+
+const complianceHighlightPluginKey = new PluginKey<ComplianceHighlightPluginState>(
+  'article-editor-compliance-highlights',
+)
+
+function createComplianceHighlightPlugin(): Plugin<ComplianceHighlightPluginState> {
+  return new Plugin<ComplianceHighlightPluginState>({
+    key: complianceHighlightPluginKey,
+    state: {
+      init: () => ({
+        specs: [],
+        decorations: DecorationSet.empty,
+      }),
+      apply: (transaction, previous, _oldState, newState) => {
+        const meta = transaction.getMeta(complianceHighlightPluginKey) as
+          | ComplianceHighlightMeta
+          | undefined
+
+        if (meta?.type === 'clear') {
+          return {
+            specs: [],
+            decorations: DecorationSet.empty,
+          }
+        }
+
+        if (meta?.type === 'set') {
+          const specs = resolveComplianceHighlightSpecs(newState.doc, meta.requests)
+          return createComplianceHighlightState(newState.doc, specs)
+        }
+
+        if (!transaction.docChanged || previous.specs.length === 0) {
+          return previous
+        }
+
+        const specs = previous.specs
+          .filter((spec) => !complianceHighlightWasTouched(transaction, spec))
+          .map((spec) => ({
+            ...spec,
+            from: transaction.mapping.map(spec.from, 1),
+            to: transaction.mapping.map(spec.to, -1),
+          }))
+          .filter((spec) => complianceHighlightStillMatches(newState.doc, spec))
+
+        return createComplianceHighlightState(newState.doc, specs)
+      },
+    },
+    props: {
+      decorations: (state) =>
+        complianceHighlightPluginKey.getState(state)?.decorations ?? DecorationSet.empty,
+    },
+  })
+}
+
+function createComplianceHighlightState(
+  doc: ProseNode,
+  specs: ComplianceHighlightSpec[],
+): ComplianceHighlightPluginState {
+  const decorations = specs.map((spec) =>
+    Decoration.inline(
+      spec.from,
+      spec.to,
+      {
+        class: `${COMPLIANCE_HIGHLIGHT_CLASS} ${COMPLIANCE_HIGHLIGHT_CLASS}--${spec.level}`,
+      },
+      {
+        inclusiveStart: false,
+        inclusiveEnd: false,
+        key: spec.key,
+      },
+    ),
+  )
+
+  return {
+    specs,
+    decorations: decorations.length ? DecorationSet.create(doc, decorations) : DecorationSet.empty,
+  }
+}
+
+function resolveComplianceHighlightSpecs(
+  doc: ProseNode,
+  requests: ComplianceHighlightRequest[],
+): ComplianceHighlightSpec[] {
+  if (!requests.length) {
+    return []
+  }
+
+  const index = buildEditorTextIndex(doc)
+  const usedRanges = new Set<string>()
+  const specs: ComplianceHighlightSpec[] = []
+
+  for (const request of requests) {
+    const match = findComplianceHighlightRange(index, request, usedRanges)
+    if (!match) {
+      continue
+    }
+
+    usedRanges.add(`${match.from}:${match.to}`)
+    specs.push({
+      ...request,
+      from: match.from,
+      to: match.to,
+    })
+  }
+
+  return specs
+}
+
+function buildEditorTextIndex(doc: ProseNode): EditorTextIndex {
+  let text = ''
+  const startPosByChar: number[] = []
+  const endPosByChar: number[] = []
+
+  doc.descendants((node, pos) => {
+    if (!node.isText || !node.text) {
+      return true
+    }
+
+    const nodeText = node.text
+    const charStart = text.length
+    for (let index = 0; index < nodeText.length; index += 1) {
+      startPosByChar[charStart + index] = pos + index
+      endPosByChar[charStart + index + 1] = pos + index + 1
+    }
+    text += nodeText
+    return true
+  })
+
+  return { text, startPosByChar, endPosByChar }
+}
+
+function findComplianceHighlightRange(
+  index: EditorTextIndex,
+  request: ComplianceHighlightRequest,
+  usedRanges: Set<string>,
+): { from: number; to: number } | null {
+  const candidates: Array<{ from: number; to: number; textIndex: number; used: boolean }> = []
+  let textIndex = index.text.indexOf(request.text)
+
+  while (textIndex >= 0) {
+    const from = index.startPosByChar[textIndex]
+    const to = index.endPosByChar[textIndex + request.text.length]
+    if (Number.isInteger(from) && Number.isInteger(to) && from < to) {
+      candidates.push({
+        from,
+        to,
+        textIndex,
+        used: usedRanges.has(`${from}:${to}`),
+      })
+    }
+    textIndex = index.text.indexOf(request.text, textIndex + Math.max(request.text.length, 1))
+  }
+
+  if (!candidates.length) {
+    return null
+  }
+
+  candidates.sort((a, b) => {
+    if (a.used !== b.used) {
+      return a.used ? 1 : -1
+    }
+    return (
+      Math.abs(a.textIndex - request.startOffset) - Math.abs(b.textIndex - request.startOffset)
+    )
+  })
+
+  const selected = candidates[0]
+  return { from: selected.from, to: selected.to }
+}
+
+function complianceHighlightStillMatches(doc: ProseNode, spec: ComplianceHighlightSpec): boolean {
+  if (spec.from >= spec.to || spec.from < 0 || spec.to > doc.content.size) {
+    return false
+  }
+
+  return doc.textBetween(spec.from, spec.to, '') === spec.text
+}
+
+function complianceHighlightWasTouched(
+  transaction: Transaction,
+  spec: ComplianceHighlightSpec,
+): boolean {
+  let touched = false
+
+  transaction.mapping.maps.forEach((stepMap) => {
+    if (touched) {
+      return
+    }
+
+    stepMap.forEach((oldStart, oldEnd) => {
+      if (oldStart < spec.to && oldEnd > spec.from) {
+        touched = true
+      }
+    })
+  })
+
+  return touched
+}
+
 function createDefaultTableContextMenuState(): TableContextMenuState {
   return {
     open: false,
@@ -306,6 +540,9 @@ function createCrepe(root: HTMLElement): Crepe {
       },
     },
   })
+  crepe.editor.config((ctx) => {
+    ctx.update(prosePluginsCtx, (plugins) => [...plugins, createComplianceHighlightPlugin()])
+  })
   crepe.addFeature(richImageBlockFeature, {
     onUpload: props.uploadImage,
     proxyDomURL: (url) => url,
@@ -543,6 +780,50 @@ function syncMarkdownFromProps(nextValue: string): void {
   editor.action(replaceAll(resolvedValue, true))
   queueMicrotask(() => {
     syncingExternalMarkdown.value = false
+    syncComplianceHighlightsFromProps()
+  })
+}
+
+function resolveComplianceHighlightRequests(): ComplianceHighlightRequest[] {
+  return (props.complianceViolations ?? [])
+    .map((violation, index) => {
+      const text = String(violation.matched_text ?? '')
+      if (!text.trim()) {
+        return null
+      }
+
+      return {
+        key: [
+          index,
+          violation.id || 0,
+          violation.source,
+          violation.platform_code ?? 'all',
+          violation.start_offset,
+          violation.end_offset,
+          text,
+        ].join(':'),
+        text,
+        level: violation.level,
+        startOffset: Number.isFinite(violation.start_offset) ? violation.start_offset : 0,
+      } satisfies ComplianceHighlightRequest
+    })
+    .filter((request): request is ComplianceHighlightRequest => request !== null)
+}
+
+function syncComplianceHighlightsFromProps(): void {
+  const editor = getEditor()
+  if (!editor) {
+    return
+  }
+
+  const requests = resolveComplianceHighlightRequests()
+  const meta: ComplianceHighlightMeta = requests.length
+    ? { type: 'set', requests }
+    : { type: 'clear' }
+
+  editor.action((ctx) => {
+    const view = ctx.get(editorViewCtx)
+    view.dispatch(view.state.tr.setMeta(complianceHighlightPluginKey, meta))
   })
 }
 
@@ -574,6 +855,18 @@ watch(
   { immediate: true },
 )
 
+watch(
+  [() => props.complianceViolations, loading],
+  ([_violations, editorLoading]) => {
+    if (editorLoading) {
+      return
+    }
+
+    syncComplianceHighlightsFromProps()
+  },
+  { deep: true, immediate: true },
+)
+
 async function mountEditor(): Promise<void> {
   const root = editorRootRef.value
   if (!root || crepeRef.value) {
@@ -586,6 +879,7 @@ async function mountEditor(): Promise<void> {
 
   try {
     editorRef.value = await crepe.create()
+    syncComplianceHighlightsFromProps()
   } catch (error) {
     crepeRef.value = null
     console.error(error)
@@ -846,6 +1140,60 @@ function resolveEditorDOMRange(view: EditorView, from: number, to: number): Rang
   }
 }
 
+function scrollToText(text: string): boolean {
+  const target = stringsTrim(text)
+  if (!target) {
+    return false
+  }
+
+  let found = false
+  const editor = getEditor()
+  if (!editor) {
+    return false
+  }
+
+  editor.action((ctx) => {
+    const view = ctx.get(editorViewCtx)
+    const match = { found: false, from: 0, to: 0 }
+    view.state.doc.descendants((node, pos) => {
+      if (match.found || !node.isText || !node.text) {
+        return !match.found
+      }
+      const index = node.text.indexOf(target)
+      if (index < 0) {
+        return true
+      }
+      match.found = true
+      match.from = pos + index
+      match.to = pos + index + target.length
+      return false
+    })
+    if (!match.found) {
+      return
+    }
+
+    view.dispatch(
+      view.state.tr
+        .setSelection(TextSelection.create(view.state.doc, match.from, match.to))
+        .scrollIntoView(),
+    )
+    requestAnimationFrame(() => {
+      view.focus()
+    })
+    found = true
+  })
+
+  return found
+}
+
+function stringsTrim(value: string): string {
+  return String(value ?? '').trim()
+}
+
+defineExpose({
+  scrollToText,
+})
+
 function getCSSHighlightsRegistry(): {
   set: (name: string, value: unknown) => void
   delete: (name: string) => void
@@ -2178,6 +2526,20 @@ function runTableContextAction(action: TableContextMenuAction): void {
   outline: none;
 }
 
+.article-editor-canvas__surface :deep(.article-editor-compliance-hit) {
+  color: #dc2626;
+  background: rgba(254, 226, 226, 0.95);
+  border-radius: 3px;
+  box-shadow: inset 0 -2px 0 rgba(220, 38, 38, 0.32);
+}
+
+.article-editor-canvas__surface :deep(.article-editor-compliance-hit--block),
+.article-editor-canvas__surface :deep(.article-editor-compliance-hit--high),
+.article-editor-canvas__surface :deep(.article-editor-compliance-hit--medium),
+.article-editor-canvas__surface :deep(.article-editor-compliance-hit--info) {
+  color: #dc2626;
+}
+
 .article-editor-canvas__surface :deep(.milkdown-image-block) {
   margin: 18px 0;
   text-align: center;
diff --git a/apps/admin-web/src/components/PublishArticleModal.vue b/apps/admin-web/src/components/PublishArticleModal.vue
index 3c85d84..9f6a2fa 100644
--- a/apps/admin-web/src/components/PublishArticleModal.vue
+++ b/apps/admin-web/src/components/PublishArticleModal.vue
@@ -1,13 +1,26 @@
 <script setup lang="ts">
 import { MinusCircleFilled } from '@ant-design/icons-vue'
-import type { ArticleDetail } from '@geo/shared-types'
+import { ApiClientError } from '@geo/http-client'
+import type {
+  ArticleDetail,
+  ComplianceCheckResult,
+  ComplianceRuntimeStatus,
+  GateDecisionLiteral,
+} from '@geo/shared-types'
 import { useMutation, useQuery, useQueryClient } from '@tanstack/vue-query'
 import { message, notification } from 'ant-design-vue'
 import { computed, ref, watch, watchEffect } from 'vue'
 import { useI18n } from 'vue-i18n'
 
 import CoverPickerModal from '@/components/CoverPickerModal.vue'
-import { articlesApi, mediaApi, publishJobsApi, resolveApiURL, tenantAccountsApi } from '@/lib/api'
+import {
+  articlesApi,
+  complianceApi,
+  mediaApi,
+  publishJobsApi,
+  resolveApiURL,
+  tenantAccountsApi,
+} from '@/lib/api'
 import { coverUploadRequired, deriveCoverFileName } from '@/lib/cover-requirements'
 import { formatError } from '@/lib/errors'
 import {
@@ -43,6 +56,12 @@ const coverImageAssetId = ref<number | null>(null)
 const coverPickerOpen = ref(false)
 const selectionHydrated = ref(false)
 const coverHydrated = ref(false)
+const complianceResult = ref<ComplianceCheckResult | null>(null)
+const publishAdmissionResult = ref<ComplianceCheckResult | null>(null)
+const publishAdmissionLoading = ref(false)
+const publishAdmissionError = ref<string | null>(null)
+let publishAdmissionRunId = 0
+const ackInProgress = ref(false)
 
 const detailQuery = useQuery({
   queryKey: computed(() => ['articles', 'detail', props.articleId, 'publish-modal']),
@@ -62,6 +81,12 @@ const platformsQuery = useQuery({
   queryFn: () => mediaApi.platforms(),
 })
 
+const complianceStatusQuery = useQuery({
+  queryKey: ['compliance', 'runtime-status', 'publish-modal'],
+  enabled: computed(() => props.open),
+  queryFn: () => complianceApi.runtimeStatus(),
+})
+
 watch(
   () => props.open,
   async (open) => {
@@ -73,6 +98,10 @@ watch(
       coverEnabled.value = false
       selectionHydrated.value = false
       coverHydrated.value = false
+      complianceResult.value = null
+      publishAdmissionResult.value = null
+      publishAdmissionLoading.value = false
+      publishAdmissionError.value = null
       return
     }
 
@@ -83,6 +112,7 @@ watch(
       props.articleId ? detailQuery.refetch() : Promise.resolve(),
       accountsQuery.refetch(),
       platformsQuery.refetch(),
+      complianceStatusQuery.refetch(),
     ])
   },
   { immediate: true },
@@ -145,6 +175,9 @@ const modalTitle = computed(() => detailQuery.data.value?.title || t('article.un
 const selectedPlatformIds = computed(() =>
   Array.from(new Set(selectedCards.value.map((card) => card.platformId))),
 )
+watch(selectedPlatformIds, () => {
+  complianceResult.value = null
+})
 const selectedImmediateCount = computed(
   () => selectedCards.value.filter((card) => card.publishState === 'immediate').length,
 )
@@ -157,6 +190,209 @@ const effectiveCoverEnabled = computed(() => coverRequired.value || coverEnabled
 const normalizedCoverValue = computed(() =>
   effectiveCoverEnabled.value ? coverAssetUrl.value.trim() : '',
 )
+const publishMutation = useMutation({
+  mutationFn: () => runPublishFlow(),
+  onSuccess: handlePublishSuccess,
+  onError: handlePublishError,
+})
+const complianceStatus = computed<ComplianceRuntimeStatus | null>(
+  () => complianceStatusQuery.data.value ?? null,
+)
+const publishComplianceEnabled = computed(
+  () =>
+    complianceStatus.value?.enabled === true &&
+    complianceStatus.value.enforcement_mode !== 'disabled',
+)
+const publishComplianceMode = computed(() => complianceStatus.value?.enforcement_mode ?? 'disabled')
+const publishComplianceMandatory = computed(
+  () => publishComplianceEnabled.value && publishComplianceMode.value === 'mandatory',
+)
+const publishAdmissionPassed = computed(
+  () => complianceDisplayDecision(publishAdmissionResult.value) === 'pass',
+)
+const mandatoryAdmissionBlocking = computed(
+  () => publishComplianceMandatory.value && !publishAdmissionPassed.value,
+)
+const accountSelectionLocked = computed(
+  () =>
+    publishMutation.isPending.value || ackInProgress.value || mandatoryAdmissionBlocking.value,
+)
+const accountSelectionLockSpinning = computed(
+  () =>
+    publishAdmissionLoading.value ||
+    (publishComplianceMandatory.value &&
+      !publishAdmissionResult.value &&
+      !publishAdmissionError.value &&
+      !publishAdmissionPassed.value),
+)
+const accountSelectionLockMessage = computed(() => {
+  if (publishMutation.isPending.value || ackInProgress.value) {
+    return '发布任务提交中，请稍候。'
+  }
+  if (accountSelectionLockSpinning.value) {
+    return '强制敏感词检测中，检测通过后可选择目标账号。'
+  }
+  if (publishAdmissionError.value) {
+    return '强制敏感词检测暂时不可用，当前不能选择目标账号。'
+  }
+  return '当前文章未通过强制敏感词检测，暂不能选择目标账号。'
+})
+const okText = computed(() => {
+  if (publishComplianceMandatory.value && publishAdmissionLoading.value) {
+    return '检测中'
+  }
+  if (publishComplianceMandatory.value && publishAdmissionError.value) {
+    return '检测失败'
+  }
+  if (
+    publishComplianceMandatory.value &&
+    publishAdmissionResult.value &&
+    complianceDisplayDecision(publishAdmissionResult.value) !== 'pass'
+  ) {
+    return '检测未通过'
+  }
+  if (
+    publishComplianceMandatory.value &&
+    complianceResult.value &&
+    complianceDisplayDecision(complianceResult.value) !== 'pass'
+  ) {
+    return '检测未通过'
+  }
+  if (publishComplianceMandatory.value && !publishAdmissionPassed.value) {
+    return '检测中'
+  }
+  if (complianceDisplayDecision(complianceResult.value) === 'needs_ack') {
+    return '已了解风险，继续发布'
+  }
+  if (complianceDisplayDecision(complianceResult.value) === 'block') {
+    return '无法发布'
+  }
+  return '提交发布'
+})
+const okDisabled = computed(() => {
+  if (mandatoryAdmissionBlocking.value) {
+    return true
+  }
+  if (
+    publishComplianceMandatory.value &&
+    complianceResult.value &&
+    complianceDisplayDecision(complianceResult.value) !== 'pass'
+  ) {
+    return true
+  }
+  return complianceDisplayDecision(complianceResult.value) === 'block'
+})
+const compliancePanelTitle = computed(() => {
+  if (complianceDisplayDecision(complianceResult.value) === 'needs_ack') {
+    return '发布前需要确认合规风险'
+  }
+  if (complianceDisplayDecision(complianceResult.value) === 'block') {
+    return '检测到敏感词，已阻断发布'
+  }
+  return ''
+})
+const publishCompliancePanelVisible = computed(
+  () =>
+    publishComplianceEnabled.value &&
+    (publishAdmissionLoading.value ||
+      Boolean(publishAdmissionResult.value) ||
+      Boolean(publishAdmissionError.value) ||
+      Boolean(complianceResult.value)),
+)
+const publishCompliancePanelTone = computed(() => {
+  const finalDecision = complianceDisplayDecision(complianceResult.value)
+  const admissionDecision = complianceDisplayDecision(publishAdmissionResult.value)
+  if (publishAdmissionError.value || finalDecision === 'block' || admissionDecision === 'block') {
+    return 'error'
+  }
+  if (publishAdmissionLoading.value) {
+    return 'info'
+  }
+  if (
+    admissionDecision === 'needs_ack' ||
+    finalDecision === 'needs_ack'
+  ) {
+    return publishComplianceMandatory.value ? 'error' : 'warning'
+  }
+  return 'success'
+})
+const publishCompliancePanelTitle = computed(() => {
+  if (publishAdmissionLoading.value) {
+    return publishComplianceMandatory.value ? '正在进行强制敏感词检测' : '正在加载敏感词检测状态'
+  }
+  if (publishAdmissionError.value) {
+    return '敏感词检测暂时不可用'
+  }
+  const finalDecision = complianceDisplayDecision(complianceResult.value)
+  const admissionDecision = complianceDisplayDecision(publishAdmissionResult.value)
+  if (finalDecision === 'block') {
+    return publishComplianceMandatory.value ? '检测到敏感词，已阻断发布' : '检测到敏感词风险'
+  }
+  if (finalDecision === 'needs_ack') {
+    return publishComplianceMandatory.value ? '检测到敏感词，已阻断发布' : '检测到敏感词风险'
+  }
+  if (finalDecision === 'pass') {
+    return '敏感词检测通过'
+  }
+  if (admissionDecision === 'block') {
+    return publishComplianceMandatory.value ? '检测到敏感词，已阻断发布' : '检测到敏感词风险'
+  }
+  if (admissionDecision === 'needs_ack') {
+    return publishComplianceMandatory.value ? '检测到敏感词，已阻断发布' : '检测到敏感词风险'
+  }
+  if (admissionDecision === 'pass') {
+    return '敏感词检测通过'
+  }
+  return compliancePanelTitle.value
+})
+const publishCompliancePanelDescription = computed(() => {
+  if (publishAdmissionLoading.value) {
+    return publishComplianceMandatory.value
+      ? '检测完成前暂时不能选择目标账号或提交发布。'
+      : '仅提示确认模式不会阻断目标账号选择和发布操作。'
+  }
+  if (publishAdmissionError.value) {
+    return publishComplianceMandatory.value
+      ? '当前为强制阻断模式，请稍后重试或联系运营处理。'
+      : '当前为仅提示确认模式，仍可继续选择账号并发布。'
+  }
+  const finalDecision = complianceDisplayDecision(complianceResult.value)
+  const admissionDecision = complianceDisplayDecision(publishAdmissionResult.value)
+  if (finalDecision === 'block') {
+    return publishComplianceMandatory.value
+      ? '请回到文章编辑页，使用合规检测查看全部命中词并逐项修改。'
+      : '请回到文章编辑页，使用合规检测查看全部命中词。'
+  }
+  if (finalDecision === 'needs_ack') {
+    return publishComplianceMandatory.value
+      ? '请回到文章编辑页，使用合规检测查看全部命中词并逐项修改。'
+      : '请回到文章编辑页，使用合规检测查看全部命中词；确认风险后仍可继续发布。'
+  }
+  if (finalDecision === 'pass') {
+    return '当前文章未命中敏感词风险。'
+  }
+  if (admissionDecision === 'block') {
+    return publishComplianceMandatory.value
+      ? '请回到文章编辑页，使用合规检测查看全部命中词并逐项修改。'
+      : '请回到文章编辑页，使用合规检测查看全部命中词。'
+  }
+  if (admissionDecision === 'needs_ack') {
+    return publishComplianceMandatory.value
+      ? '请回到文章编辑页，使用合规检测查看全部命中词并逐项修改。'
+      : '请回到文章编辑页，使用合规检测查看全部命中词；确认风险后仍可继续发布。'
+  }
+  if (admissionDecision === 'pass') {
+    return '当前文章未命中敏感词风险。'
+  }
+  return '请回到文章编辑页，使用合规检测查看全部命中词。'
+})
+const displayedComplianceResult = computed(
+  () => complianceResult.value ?? publishAdmissionResult.value,
+)
+const complianceAcknowledgedViolationIds = computed(() =>
+  (complianceResult.value?.violations ?? [])
+    .map((item) => item.id),
+)
 
 watch(
   coverRequired,
@@ -168,64 +404,109 @@ watch(
   { immediate: true },
 )
 
-const publishMutation = useMutation({
-  mutationFn: async () => {
-    if (!props.articleId || !detailQuery.data.value) {
-      throw new Error('missing_article')
-    }
-    if (!selectedAccountIds.value.length) {
-      throw new Error('no_accounts_selected')
-    }
-    if (coverRequired.value && !normalizedCoverValue.value) {
-      throw new Error('cover_required_for_selected_platforms')
-    }
+watch(
+  [
+    () => props.open,
+    () => detailQuery.data.value?.id,
+    () => detailQuery.data.value?.current_version_id,
+    () => complianceStatusQuery.data.value?.enabled,
+    () => complianceStatusQuery.data.value?.enforcement_mode,
+  ],
+  () => {
+    void runPublishAdmissionCheck()
+  },
+  { immediate: true },
+)
 
-    const article = await persistCoverIfNeeded(detailQuery.data.value)
-    return publishJobsApi.create({
-      title: article.title?.trim() || t('article.untitled'),
-      content_ref: {
-        article_id: article.id,
-      },
-      accounts: selectedAccountIds.value.map((accountId) => ({
-        account_id: accountId,
-      })),
+async function runPublishFlow(ackRecordId?: number) {
+  if (!props.articleId || !detailQuery.data.value) {
+    throw new Error('missing_article')
+  }
+  if (!selectedAccountIds.value.length) {
+    throw new Error('no_accounts_selected')
+  }
+  if (coverRequired.value && !normalizedCoverValue.value) {
+    throw new Error('cover_required_for_selected_platforms')
+  }
+
+  const article = await persistCoverIfNeeded(detailQuery.data.value)
+  const articleVersionId = article.current_version_id ?? detailQuery.data.value.current_version_id
+  if (!articleVersionId) {
+    throw new Error('invalid_article_version')
+  }
+  if (
+    publishComplianceEnabled.value &&
+    !ackRecordId
+  ) {
+    const result = await complianceApi.checkArticle(article.id, {
+      article_version_id: articleVersionId,
+      title: article.title,
+      plaintext: article.markdown_content ?? '',
+      target_platforms: selectedPlatformIds.value,
+      trigger_source: 'publish_gate',
     })
-  },
-  onSuccess: async () => {
-    notification.success({
-      message: '已提交发布任务',
-      description: successDescription(),
-      placement: 'topRight',
-      duration: 5,
-    })
-
-    await Promise.all([
-      queryClient.invalidateQueries({ queryKey: ['articles'] }),
-      queryClient.invalidateQueries({ queryKey: ['workspace'] }),
-      queryClient.invalidateQueries({ queryKey: ['tenant', 'desktop-accounts'] }),
-      queryClient.invalidateQueries({ queryKey: ['articles', 'detail', props.articleId] }),
-      queryClient.invalidateQueries({
-        queryKey: ['articles', 'detail', props.articleId, 'publish-modal'],
-      }),
-      queryClient.invalidateQueries({ queryKey: ['articles', 'publish-records', props.articleId] }),
-    ])
-
-    emit('published')
-    emit('update:open', false)
-  },
-  onError: (error) => {
-    const normalized = error instanceof Error ? error.message : ''
-    if (normalized === 'no_accounts_selected') {
-      message.warning('请先选择至少一个可发布账号')
-      return
+    complianceResult.value = result
+    const decision = complianceDisplayDecision(result)
+    if (decision === 'block' || decision === 'needs_ack') {
+      throw new Error(`compliance_${decision}`)
     }
-    if (normalized === 'cover_required_for_selected_platforms') {
-      message.warning(t('media.publish.messages.coverRequired'))
-      return
-    }
-    message.error(formatError(error))
-  },
-})
+  }
+  return publishJobsApi.create({
+    title: article.title?.trim() || t('article.untitled'),
+    content_ref: {
+      article_id: article.id,
+    },
+    article_version_id: articleVersionId,
+    ack_record_id: ackRecordId,
+    accounts: selectedAccountIds.value.map((accountId) => ({
+      account_id: accountId,
+    })),
+  })
+}
+
+async function handlePublishSuccess() {
+  notification.success({
+    message: '已提交发布任务',
+    description: successDescription(),
+    placement: 'topRight',
+    duration: 5,
+  })
+
+  await Promise.all([
+    queryClient.invalidateQueries({ queryKey: ['articles'] }),
+    queryClient.invalidateQueries({ queryKey: ['workspace'] }),
+    queryClient.invalidateQueries({ queryKey: ['tenant', 'desktop-accounts'] }),
+    queryClient.invalidateQueries({ queryKey: ['articles', 'detail', props.articleId] }),
+    queryClient.invalidateQueries({
+      queryKey: ['articles', 'detail', props.articleId, 'publish-modal'],
+    }),
+    queryClient.invalidateQueries({ queryKey: ['articles', 'publish-records', props.articleId] }),
+  ])
+
+  emit('published')
+  emit('update:open', false)
+}
+
+function handlePublishError(error: unknown) {
+  const gate = parseComplianceResultFromError(error)
+  if (gate) {
+    complianceResult.value = gate
+    return
+  }
+  const normalized = error instanceof Error ? error.message : ''
+  if (normalized === 'no_accounts_selected') {
+    message.warning('请先选择至少一个可发布账号')
+    return
+  }
+  if (normalized === 'cover_required_for_selected_platforms') {
+    message.warning(t('media.publish.messages.coverRequired'))
+    return
+  }
+  if (normalized === 'compliance_needs_ack' || normalized === 'compliance_block') {
+    return
+  }
+  message.error(formatError(error))
+}
 
 async function persistCoverIfNeeded(detail: ArticleDetail): Promise<ArticleDetail> {
   const currentUrl = resolveApiURL(detail.cover_asset_url).trim()
@@ -259,7 +540,7 @@ function successDescription(): string {
 }
 
 function toggleAccount(accountId: string, selectable: boolean): void {
-  if (!selectable || publishMutation.isPending.value) {
+  if (!selectable || accountSelectionLocked.value) {
     return
   }
 
@@ -299,6 +580,131 @@ function handleRemoveCover(): void {
   coverFileName.value = ''
   coverImageAssetId.value = null
 }
+
+async function handleModalOk(): Promise<void> {
+  if (okDisabled.value) {
+    return
+  }
+  if (complianceDisplayDecision(complianceResult.value) === 'needs_ack') {
+    await publishWithAck()
+    return
+  }
+  publishMutation.mutate()
+}
+
+async function runPublishAdmissionCheck(): Promise<void> {
+  const runId = ++publishAdmissionRunId
+  if (!props.open) {
+    return
+  }
+  const status = complianceStatusQuery.data.value
+  if (!status || status.enabled !== true || status.enforcement_mode === 'disabled') {
+    publishAdmissionResult.value = null
+    publishAdmissionError.value = null
+    publishAdmissionLoading.value = false
+    return
+  }
+  const article = detailQuery.data.value
+  const articleVersionId = article?.current_version_id
+  if (!article || !props.articleId || !articleVersionId) {
+    publishAdmissionResult.value = null
+    publishAdmissionError.value = null
+    publishAdmissionLoading.value =
+      detailQuery.isPending.value || detailQuery.isFetching.value || complianceStatusQuery.isFetching.value
+    return
+  }
+
+  publishAdmissionLoading.value = true
+  publishAdmissionError.value = null
+  try {
+    const result = await complianceApi.checkArticle(article.id, {
+      article_version_id: articleVersionId,
+      title: article.title,
+      plaintext: article.markdown_content ?? '',
+      target_platforms: [],
+      trigger_source: 'publish_gate',
+    })
+    if (runId === publishAdmissionRunId && props.open) {
+      publishAdmissionResult.value = result
+    }
+  } catch (error) {
+    if (runId === publishAdmissionRunId && props.open) {
+      publishAdmissionError.value = formatError(error)
+      publishAdmissionResult.value = null
+    }
+  } finally {
+    if (runId === publishAdmissionRunId && props.open) {
+      publishAdmissionLoading.value = false
+    }
+  }
+}
+
+async function publishWithAck(): Promise<void> {
+  const result = complianceResult.value
+  if (!result || complianceDisplayDecision(result) !== 'needs_ack' || !result.record_id) {
+    publishMutation.mutate()
+    return
+  }
+  ackInProgress.value = true
+  try {
+    const ack = await complianceApi.createAck(result.record_id, {
+      acknowledged_violation_ids: complianceAcknowledgedViolationIds.value,
+    })
+    await runPublishFlow(ack.id)
+    await handlePublishSuccess()
+  } catch (error) {
+    handlePublishError(error)
+  } finally {
+    ackInProgress.value = false
+  }
+}
+
+function parseComplianceResultFromError(error: unknown): ComplianceCheckResult | null {
+  if (!(error instanceof ApiClientError) || typeof error.detail !== 'string') {
+    return null
+  }
+  try {
+    const parsed = JSON.parse(error.detail) as Partial<ComplianceCheckResult>
+    if (typeof parsed.record_id === 'number' && typeof parsed.decision === 'string') {
+      return parsed as ComplianceCheckResult
+    }
+  } catch {
+    return null
+  }
+  return null
+}
+
+function hasComplianceHits(result: ComplianceCheckResult | null | undefined): boolean {
+  return Boolean(
+    result && ((result.hit_count ?? 0) > 0 || (result.violations?.length ?? 0) > 0),
+  )
+}
+
+function complianceDisplayDecision(
+  result: ComplianceCheckResult | null | undefined,
+): GateDecisionLiteral | undefined {
+  if (!result) {
+    return undefined
+  }
+  if (result.decision === 'pass' && (result.passed === false || hasComplianceHits(result))) {
+    if (result.enforcement_mode === 'mandatory') {
+      return 'block'
+    }
+    return 'needs_ack'
+  }
+  return result.decision
+}
+
+function decisionAlertType(result: ComplianceCheckResult | null | undefined) {
+  const decision = complianceDisplayDecision(result)
+  if (decision === 'block') {
+    return 'error'
+  }
+  if (decision === 'needs_ack') {
+    return 'warning'
+  }
+  return 'info'
+}
 </script>
 
 <template>
@@ -306,10 +712,11 @@ function handleRemoveCover(): void {
     :open="publishModalVisible"
     title="发布"
     :width="980"
-    :confirm-loading="publishMutation.isPending.value"
-    ok-text="提交发布"
+    :confirm-loading="publishMutation.isPending.value || ackInProgress"
+    :ok-text="okText"
+    :ok-button-props="{ disabled: okDisabled }"
     :cancel-text="t('common.cancel')"
-    @ok="publishMutation.mutate()"
+    @ok="handleModalOk"
     @cancel="emit('update:open', false)"
   >
     <div class="publish-modal">
@@ -339,6 +746,35 @@ function handleRemoveCover(): void {
         </div>
       </section>
 
+      <section
+        v-if="publishCompliancePanelVisible"
+        class="publish-modal__section publish-modal__compliance"
+        :class="`publish-modal__compliance--${publishCompliancePanelTone}`"
+      >
+        <a-alert
+          v-if="publishAdmissionLoading"
+          type="info"
+          show-icon
+          :message="publishCompliancePanelTitle"
+          :description="publishCompliancePanelDescription"
+        />
+        <a-alert
+          v-else-if="publishAdmissionError"
+          :type="publishComplianceMandatory ? 'error' : 'warning'"
+          show-icon
+          :message="publishCompliancePanelTitle"
+          :description="publishCompliancePanelDescription"
+        />
+        <a-alert
+          v-else-if="displayedComplianceResult"
+          :type="decisionAlertType(displayedComplianceResult)"
+          show-icon
+          :message="publishCompliancePanelTitle"
+          :description="publishCompliancePanelDescription"
+        />
+
+      </section>
+
       <section class="publish-modal__section">
         <div class="publish-modal__section-header">
           <h3>
@@ -357,81 +793,89 @@ function handleRemoveCover(): void {
           <a-skeleton active :paragraph="{ rows: 5 }" />
         </div>
 
-        <div v-else-if="accountCards.length" class="publish-modal__list">
-          <button
-            v-for="account in accountCards"
-            :key="account.id"
-            type="button"
-            class="publish-modal__card"
-            :class="{
-              'publish-modal__card--active': isSelected(account.id),
-              'publish-modal__card--disabled': !account.selectable,
-            }"
-            @click="toggleAccount(account.id, account.selectable)"
-          >
-            <div class="publish-modal__card-header">
-              <div class="publish-modal__card-identity">
-                <span class="publish-modal__avatar" :style="{ background: account.platformAccent }">
-                  <img
-                    v-if="account.avatarUrl"
-                    :src="account.avatarUrl"
-                    :alt="account.displayName"
-                    referrerpolicy="no-referrer"
-                  />
-                  <span v-else>{{ accountInitial(account) }}</span>
-                </span>
-                <div class="publish-modal__identity-copy">
-                  <strong :title="account.displayName">{{ account.displayName }}</strong>
-                  <span
-                    class="publish-modal__platform-line"
-                    :title="`${account.platformName} · ${account.platformUid}`"
-                  >
+        <template v-else>
+          <div v-if="accountSelectionLocked" class="publish-modal__account-lock">
+            <a-spin v-if="accountSelectionLockSpinning" size="small" />
+            <span>{{ accountSelectionLockMessage }}</span>
+          </div>
+
+          <div v-if="accountCards.length" class="publish-modal__list">
+            <button
+              v-for="account in accountCards"
+              :key="account.id"
+              type="button"
+              class="publish-modal__card"
+              :class="{
+                'publish-modal__card--active': isSelected(account.id),
+                'publish-modal__card--disabled': !account.selectable || accountSelectionLocked,
+              }"
+              :disabled="!account.selectable || accountSelectionLocked"
+              @click="toggleAccount(account.id, account.selectable)"
+            >
+              <div class="publish-modal__card-header">
+                <div class="publish-modal__card-identity">
+                  <span class="publish-modal__avatar" :style="{ background: account.platformAccent }">
                     <img
-                      v-if="account.platformLogoUrl"
-                      class="publish-modal__platform-logo"
-                      :src="account.platformLogoUrl"
-                      :alt="account.platformName"
+                      v-if="account.avatarUrl"
+                      :src="account.avatarUrl"
+                      :alt="account.displayName"
                       referrerpolicy="no-referrer"
                     />
-                    <span
-                      v-else
-                      class="publish-modal__platform-logo publish-modal__platform-logo--fallback"
-                      :style="{ background: account.platformAccent }"
-                    >
-                      {{ account.platformShortName }}
-                    </span>
-                    <span class="publish-modal__platform-text">
-                      {{ account.platformName }} · {{ account.platformUid }}
-                    </span>
+                    <span v-else>{{ accountInitial(account) }}</span>
                   </span>
+                  <div class="publish-modal__identity-copy">
+                    <strong :title="account.displayName">{{ account.displayName }}</strong>
+                    <span
+                      class="publish-modal__platform-line"
+                      :title="`${account.platformName} · ${account.platformUid}`"
+                    >
+                      <img
+                        v-if="account.platformLogoUrl"
+                        class="publish-modal__platform-logo"
+                        :src="account.platformLogoUrl"
+                        :alt="account.platformName"
+                        referrerpolicy="no-referrer"
+                      />
+                      <span
+                        v-else
+                        class="publish-modal__platform-logo publish-modal__platform-logo--fallback"
+                        :style="{ background: account.platformAccent }"
+                      >
+                        {{ account.platformShortName }}
+                      </span>
+                      <span class="publish-modal__platform-text">
+                        {{ account.platformName }} · {{ account.platformUid }}
+                      </span>
+                    </span>
+                  </div>
                 </div>
-              </div>
-              <span class="publish-modal__check">
-                <span v-if="isSelected(account.id)" class="publish-modal__check-inner"></span>
-              </span>
-            </div>
-
-            <div class="publish-modal__card-footer">
-              <div class="publish-modal__tags">
-                <a-tag :color="healthColor(account.health)">
-                  {{ healthLabel(account.health) }}
-                </a-tag>
-                <a-tag :color="clientStatusColor(account)">{{ clientStatusLabel(account) }}</a-tag>
-              </div>
-
-              <a-tooltip :title="account.statusText" placement="top">
-                <span
-                  class="publish-modal__state-pill"
-                  :class="`publish-modal__state-pill--${account.publishState}`"
-                >
-                  {{ publishStateLabel(account.publishState) }}
+                <span class="publish-modal__check">
+                  <span v-if="isSelected(account.id)" class="publish-modal__check-inner"></span>
                 </span>
-              </a-tooltip>
-            </div>
-          </button>
-        </div>
+              </div>
 
-        <a-empty v-else description="当前还没有可用的桌面媒体账号，请先在桌面端绑定。" />
+              <div class="publish-modal__card-footer">
+                <div class="publish-modal__tags">
+                  <a-tag :color="healthColor(account.health)">
+                    {{ healthLabel(account.health) }}
+                  </a-tag>
+                  <a-tag :color="clientStatusColor(account)">{{ clientStatusLabel(account) }}</a-tag>
+                </div>
+
+                <a-tooltip :title="account.statusText" placement="top">
+                  <span
+                    class="publish-modal__state-pill"
+                    :class="`publish-modal__state-pill--${account.publishState}`"
+                  >
+                    {{ publishStateLabel(account.publishState) }}
+                  </span>
+                </a-tooltip>
+              </div>
+            </button>
+          </div>
+
+          <a-empty v-else description="当前还没有可用的桌面媒体账号，请先在桌面端绑定。" />
+        </template>
       </section>
 
       <section class="publish-modal__section">
@@ -580,6 +1024,58 @@ function handleRemoveCover(): void {
   flex-direction: column;
 }
 
+.publish-modal__compliance {
+  gap: 16px;
+  padding: 20px;
+  border-radius: 12px;
+  border: 1px solid transparent;
+  transition: all 0.3s ease;
+}
+
+.publish-modal__compliance--error {
+  border-color: #fecaca;
+  background: linear-gradient(to bottom, #fff5f5, #ffffff);
+  box-shadow: 0 4px 12px rgba(239, 68, 68, 0.05);
+}
+
+.publish-modal__compliance--warning {
+  border-color: #fde68a;
+  background: linear-gradient(to bottom, #fffbeb, #ffffff);
+  box-shadow: 0 4px 12px rgba(245, 158, 11, 0.05);
+}
+
+.publish-modal__compliance--success {
+  border-color: #bbf7d0;
+  background: linear-gradient(to bottom, #f0fdf4, #ffffff);
+  box-shadow: 0 4px 12px rgba(34, 197, 94, 0.05);
+}
+
+.publish-modal__compliance--info {
+  border-color: #bfdbfe;
+  background: linear-gradient(to bottom, #eff6ff, #ffffff);
+  box-shadow: 0 4px 12px rgba(59, 130, 246, 0.05);
+}
+
+.publish-modal__compliance :deep(.ant-alert) {
+  border: none;
+  background: transparent;
+  padding: 0;
+}
+.publish-modal__compliance :deep(.ant-alert-icon) {
+  font-size: 20px;
+  margin-top: 2px;
+}
+.publish-modal__compliance :deep(.ant-alert-message) {
+  font-size: 16px;
+  font-weight: 600;
+  color: #111827;
+  margin-bottom: 6px;
+}
+.publish-modal__compliance :deep(.ant-alert-description) {
+  font-size: 14px;
+  color: #4b5563;
+}
+
 .publish-modal__section-header {
   margin-bottom: 12px;
 }
@@ -617,6 +1113,22 @@ function handleRemoveCover(): void {
   padding: 12px 0;
 }
 
+.publish-modal__account-lock {
+  display: inline-flex;
+  align-items: center;
+  gap: 8px;
+  width: fit-content;
+  max-width: 100%;
+  margin-bottom: 12px;
+  padding: 8px 12px;
+  border: 1px solid #fed7aa;
+  border-radius: 8px;
+  background: #fff7ed;
+  color: #9a3412;
+  font-size: 13px;
+  line-height: 1.5;
+}
+
 .publish-modal__list {
   display: grid;
   grid-template-columns: repeat(auto-fill, minmax(290px, 1fr));
diff --git a/apps/admin-web/src/i18n/messages/en-US.ts b/apps/admin-web/src/i18n/messages/en-US.ts
index 1ecf4ca..b4b7461 100644
--- a/apps/admin-web/src/i18n/messages/en-US.ts
+++ b/apps/admin-web/src/i18n/messages/en-US.ts
@@ -632,6 +632,7 @@ const enUS = {
       publish_success: 'Published',
       publish_failed: 'Failed',
       pending_review: 'Pending Review',
+      blocked_by_compliance: 'Blocked by compliance',
     },
     sourceType: {
       template: 'Template generation',
diff --git a/apps/admin-web/src/i18n/messages/zh-CN.ts b/apps/admin-web/src/i18n/messages/zh-CN.ts
index 1ce8708..f8c6f6d 100644
--- a/apps/admin-web/src/i18n/messages/zh-CN.ts
+++ b/apps/admin-web/src/i18n/messages/zh-CN.ts
@@ -1,1438 +1,1423 @@
 const zhCN = {
   app: {
-    name: '省心推',
-    loginIntro: '面向企业和个人的品牌资产管理与内容生产协作系统',
+    name: "省心推",
+    loginIntro: "面向企业和个人的品牌资产管理与内容生产协作系统",
   },
   locale: {
-    'zh-CN': '中文简体',
-    'en-US': 'English',
+    "zh-CN": "中文简体",
+    "en-US": "English",
   },
   common: {
-    cancel: '取消',
-    close: '关闭',
-    confirm: '确认',
-    create: '新建',
-    edit: '编辑',
-    delete: '删除',
-    reset: '重置',
-    refresh: '刷新数据',
-    loading: '加载中',
-    search: '搜索',
-    save: '保存',
-    next: '下一步',
-    previous: '上一步',
-    submit: '提交',
-    submitGenerate: '提交生成',
-    back: '返回',
-    actions: '操作',
-    title: '标题',
-    name: '名称',
-    description: '描述',
-    website: '官网',
-    wordCount: '字数',
-    createdAt: '创建时间',
-    updatedAt: '更新时间',
-    status: '状态',
-    required: '必填',
-    noData: '暂无数据',
-    optional: '可选',
-    preview: '预览',
-    details: '详情',
-    versions: '版本记录',
-    total: '总量',
-    balance: '剩余',
-    used: '已使用',
-    source: '来源',
-    templateType: '模版类型',
-    generateStatus: '生成状态',
-    publishStatus: '发布状态',
-    selectPlease: '请选择',
-    inputPlease: '请输入',
-    upgrade: '去升级',
-    copy: '复制',
-    copySuccess: '内容已复制',
-    yes: '是',
-    no: '否',
+    cancel: "取消",
+    close: "关闭",
+    confirm: "确认",
+    create: "新建",
+    edit: "编辑",
+    delete: "删除",
+    reset: "重置",
+    refresh: "刷新数据",
+    loading: "加载中",
+    search: "搜索",
+    save: "保存",
+    next: "下一步",
+    previous: "上一步",
+    submit: "提交",
+    submitGenerate: "提交生成",
+    back: "返回",
+    actions: "操作",
+    title: "标题",
+    name: "名称",
+    description: "描述",
+    website: "官网",
+    wordCount: "字数",
+    createdAt: "创建时间",
+    updatedAt: "更新时间",
+    status: "状态",
+    required: "必填",
+    noData: "暂无数据",
+    optional: "可选",
+    preview: "预览",
+    details: "详情",
+    versions: "版本记录",
+    total: "总量",
+    balance: "剩余",
+    used: "已使用",
+    source: "来源",
+    templateType: "模版类型",
+    generateStatus: "生成状态",
+    publishStatus: "发布状态",
+    selectPlease: "请选择",
+    inputPlease: "请输入",
+    upgrade: "去升级",
+    copy: "复制",
+    copySuccess: "内容已复制",
+    yes: "是",
+    no: "否",
     imageUploadProgress: {
-      title: '图片处理中',
+      title: "图片处理中",
       stages: {
-        idle: '等待开始',
-        validating: '正在校验文件',
-        decoding: '正在解析图片',
-        encoding: '正在转为 WebP',
-        uploading: '正在上传到服务器',
-        finishing: '正在完成处理',
+        idle: "等待开始",
+        validating: "正在校验文件",
+        decoding: "正在解析图片",
+        encoding: "正在转为 WebP",
+        uploading: "正在上传到服务器",
+        finishing: "正在完成处理",
       },
     },
   },
   nav: {
-    workspace: '工作台',
-    articleCreation: '文章创作',
-    templates: '模版创作',
-    custom: '自定义生成',
-    freeCreate: '自由创作',
-    imitation: '仿写创作',
-    media: '媒体管理',
-    brandManagement: '品牌管理',
-    brands: '品牌词库',
-    tracking: '数据追踪',
-    trackingDetail: '数据详情',
-    contentManagement: '内容管理',
-    knowledge: '知识库',
-    images: '图片管理',
-    kolMarket: '精调模版市场',
-    kolMarketplace: '精调模版市场',
-    kolWorkspace: 'KOL 工作台',
-    kolManage: '提示词管理',
-    kolDashboard: '数据看板',
-    kolProfile: '个人主页',
-    personalCenter: '个人中心',
-    aiPointUsage: 'AI 点数明细',
+    workspace: "工作台",
+    articleCreation: "文章创作",
+    templates: "模版创作",
+    custom: "自定义生成",
+    freeCreate: "自由创作",
+    imitation: "仿写创作",
+    media: "媒体管理",
+    brandManagement: "品牌管理",
+    brands: "品牌词库",
+    tracking: "数据追踪",
+    trackingDetail: "数据详情",
+    contentManagement: "内容管理",
+    knowledge: "知识库",
+    images: "图片管理",
+    kolMarket: "精调模版市场",
+    kolMarketplace: "精调模版市场",
+    kolWorkspace: "KOL 工作台",
+    kolManage: "提示词管理",
+    kolDashboard: "数据看板",
+    kolProfile: "个人主页",
+    personalCenter: "个人中心",
+    aiPointUsage: "AI 点数明细",
   },
   auth: {
-    welcomeBack: '欢迎回来',
-    tenantAdminLogin: '租户后台登录',
-    loginAndEnter: '登录并进入工作台',
-    email: '邮箱',
-    loginIdentifier: '手机号 / 邮箱',
-    password: '密码',
-    rememberPassword: '记住密码',
-    forgotPassword: '忘记密码',
+    welcomeBack: "欢迎回来",
+    tenantAdminLogin: "租户后台登录",
+    loginAndEnter: "登录并进入工作台",
+    email: "邮箱",
+    loginIdentifier: "手机号 / 邮箱",
+    password: "密码",
+    rememberPassword: "记住密码",
+    forgotPassword: "忘记密码",
   },
   membershipBlocked: {
-    eyebrow: '访问已暂停',
-    title: '当前租户套餐不可用',
-    expiredMessage: '会员到期，请充值或联系客服',
-    userDisabledMessage: '用户被停用，请联系客服',
-    reasonUserDisabled: '用户已被停用，业务页面已全部关闭，请联系客服恢复访问。',
-    reasonTrialExpired:
-      '免费试用的 3 天页面可访问期已经结束，当前业务页面已全部关闭，请联系管理员重新开通试用权限。',
-    reasonRequired: '当前租户尚未开通有效套餐，业务页面已全部关闭，请联系管理员处理。',
-    reasonInactive: '当前租户套餐已失效或已停用，业务页面已全部关闭，请联系管理员恢复访问。',
-    plan: '当前套餐',
-    expiredAt: '到期时间',
-    articleLimit: '文章额度',
-    companyLimit: '公司数量',
-    contactAdmin: '管理员重新开通后，刷新页面即可恢复访问。',
-    logout: '退出登录',
-    refresh: '重新检查',
-    refreshing: '检查中…',
-    stillBlocked: '账户仍处于受限状态，请先联系管理员后再重试。',
+    eyebrow: "访问已暂停",
+    title: "当前租户套餐不可用",
+    expiredMessage: "会员到期，请充值或联系客服",
+    userDisabledMessage: "用户被停用，请联系客服",
+    reasonUserDisabled: "用户已被停用，业务页面已全部关闭，请联系客服恢复访问。",
+    reasonTrialExpired: "免费试用的 3 天页面可访问期已经结束，当前业务页面已全部关闭，请联系管理员重新开通试用权限。",
+    reasonRequired: "当前租户尚未开通有效套餐，业务页面已全部关闭，请联系管理员处理。",
+    reasonInactive: "当前租户套餐已失效或已停用，业务页面已全部关闭，请联系管理员恢复访问。",
+    plan: "当前套餐",
+    expiredAt: "到期时间",
+    articleLimit: "文章额度",
+    companyLimit: "公司数量",
+    contactAdmin: "管理员重新开通后，刷新页面即可恢复访问。",
+    logout: "退出登录",
+    refresh: "重新检查",
+    refreshing: "检查中…",
+    stillBlocked: "账户仍处于受限状态，请先联系管理员后再重试。",
   },
   shell: {
-    localeLabel: '语言',
-    quotaTitle: '套餐与额度',
-    quotaStatus: '状态正常',
-    membershipExpiresAt: '会员到期',
-    remainingQuota: '生成文章',
-    aiPoints: 'AI 点数',
-    resetAt: '重置时间',
-    userFallback: '管理员',
-    logout: '退出',
-    planFallback: '免费版',
-    aiUsageTitle: 'AI 点数明细',
-    aiUsageRecent: '最近消耗',
-    aiUsageEmpty: '暂无 AI 点数流水',
-    aiUsageBase: '每 {base} 字进一档',
-    aiUsageRule: '{chars} 字 / 基准 {base}',
-    aiUsagePendingHelp:
-      '点数已先行占用，AI 任务完成后会确认为扣除；如果生成失败，系统会自动退回点数。',
+    localeLabel: "语言",
+    quotaTitle: "套餐与额度",
+    quotaStatus: "状态正常",
+    membershipExpiresAt: "会员到期",
+    remainingQuota: "生成文章",
+    aiPoints: "AI 点数",
+    resetAt: "重置时间",
+    userFallback: "管理员",
+    logout: "退出",
+    planFallback: "免费版",
+    aiUsageTitle: "AI 点数明细",
+    aiUsageRecent: "最近消耗",
+    aiUsageEmpty: "暂无 AI 点数流水",
+    aiUsageBase: "每 {base} 字进一档",
+    aiUsageRule: "{chars} 字 / 基准 {base}",
+    aiUsagePendingHelp: "点数已先行占用，AI 任务完成后会确认为扣除；如果生成失败，系统会自动退回点数。",
     aiUsageTypes: {
-      article_selection_optimize: '文章片段优化',
-      template_analyze: 'AI 分析',
-      template_title_generate: 'AI 生成标题',
-      template_outline_generate: 'AI 生成大纲',
-      kol_prompt_generate: 'KOL 模版生成',
-      kol_prompt_optimize: 'KOL 模版优化',
+      article_selection_optimize: "文章片段优化",
+      template_analyze: "AI 分析",
+      template_title_generate: "AI 生成标题",
+      template_outline_generate: "AI 生成大纲",
+      kol_prompt_generate: "KOL 模版生成",
+      kol_prompt_optimize: "KOL 模版优化",
     },
     aiUsageStatus: {
-      pending: '处理中',
-      completed: '已扣除',
-      refunded: '已退回',
-      failed: '失败',
+      pending: "处理中",
+      completed: "已扣除",
+      refunded: "已退回",
+      failed: "失败",
     },
   },
   route: {
     login: {
-      title: '欢迎回来',
-      description: '登录省心推，开启品牌内容创作之旅',
+      title: "欢迎回来",
+      description: "登录省心推，开启品牌内容创作之旅",
     },
     workspace: {
-      title: '工作台',
-      description: '模板入口、数据总览和最近生成都集中在这里。',
+      title: "工作台",
+      description: "模板入口、数据总览和最近生成都集中在这里。",
     },
     templates: {
-      title: '模版创作',
-      description: '统一查看普通通用模版与精调模版，相关生成记录都会在这里汇总展示。',
+      title: "模版创作",
+      description: "统一查看普通通用模版与精调模版，相关生成记录都会在这里汇总展示。",
     },
     wizard: {
-      title: '模版向导',
-      description: '按模版驱动的三步流程完成信息填写、结构确认与文章生成。',
+      title: "模版向导",
+      description: "按模版驱动的三步流程完成信息填写、结构确认与文章生成。",
     },
     articleEditor: {
-      title: '文章编辑',
-      description: '在独立编辑页中调整标题、正文和发布配置。',
+      title: "文章编辑",
+      description: "在独立编辑页中调整标题、正文和发布配置。",
     },
     custom: {
-      title: '自定义生成',
-      description: '基于自定义 Prompt 规则灵活生成文章，支持即时与定时任务。',
+      title: "自定义生成",
+      description: "基于自定义 Prompt 规则灵活生成文章，支持即时与定时任务。",
     },
     freeCreate: {
-      title: '自由创作',
-      description: '自由创建并编辑文章，无需模版或AI生成。',
+      title: "自由创作",
+      description: "自由创建并编辑文章，无需模版或AI生成。",
     },
     imitation: {
-      title: '仿写创作',
-      description: '管理基于引用来源或外部文章发起的仿写生成记录。',
+      title: "仿写创作",
+      description: "管理基于引用来源或外部文章发起的仿写生成记录。",
     },
     imitationCreate: {
-      title: '仿写创作',
-      description: '从文章链接提取内容后，一步生成适配当前场景的新文章。',
+      title: "仿写创作",
+      description: "从文章链接提取内容后，一步生成适配当前场景的新文章。",
     },
     media: {
-      title: '媒体管理',
-      description: '统一查看桌面端媒体账号绑定、授权状态与同步结果。',
+      title: "媒体管理",
+      description: "统一查看桌面端媒体账号绑定、授权状态与同步结果。",
     },
     brands: {
-      title: '品牌词库',
-      description: '围绕品牌维护关键词、问题集和竞品信息。',
+      title: "品牌词库",
+      description: "围绕品牌维护关键词、问题集和竞品信息。",
     },
     tracking: {
-      title: '数据详情',
-      description: '围绕插件采样快照查看品牌表现、平台矩阵、高频问题和引用归因。',
+      title: "数据详情",
+      description: "围绕插件采样快照查看品牌表现、平台矩阵、高频问题和引用归因。",
     },
     trackingQuestion: {
-      title: '问题详情',
-      description: '按问题查看大模型回答、引用来源、引用分析和内容引用。',
+      title: "问题详情",
+      description: "按问题查看大模型回答、引用来源、引用分析和内容引用。",
     },
     knowledge: {
-      title: '知识库',
-      description: '当前仓库还没有匹配的后端接口，页面暂保持为设计占位。',
+      title: "知识库",
+      description: "当前仓库还没有匹配的后端接口，页面暂保持为设计占位。",
     },
     images: {
-      title: '图片管理',
-      description: '管理图片素材库，支持分组管理、引用分析与封面图库引用。',
+      title: "图片管理",
+      description: "管理图片素材库，支持分组管理、引用分析与封面图库引用。",
     },
     aiPoints: {
-      title: 'AI 点数明细',
-      description: '查看当前套餐 AI 点数余额、周期规则和最近消耗流水。',
+      title: "AI 点数明细",
+      description: "查看当前套餐 AI 点数余额、周期规则和最近消耗流水。",
     },
   },
   aiPoints: {
-    balance: '可用点数',
-    baseChars: '基准字数',
-    ledgerTitle: '消耗流水',
-    ledgerLimit: '最近 {limit} 条记录',
-    ledgerTotal: '共 {total} 条记录',
+    balance: "可用点数",
+    baseChars: "基准字数",
+    ledgerTitle: "消耗流水",
+    ledgerLimit: "最近 {limit} 条记录",
+    ledgerTotal: "共 {total} 条记录",
     table: {
-      usageType: '使用场景',
-      points: '点数',
-      requestChars: '计费字数',
+      usageType: "使用场景",
+      points: "点数",
+      requestChars: "计费字数",
     },
   },
   kol: {
     marketplace: {
-      title: '精调模版',
+      title: "精调模版",
       filter: {
-        industry: '行业',
-        keyword: '关键字',
-        all: '全部',
+        industry: "行业",
+        keyword: "关键字",
+        all: "全部",
       },
-      empty: '暂无已上架的订阅包',
-      subscribers: '{count} 个订阅租户',
-      prompts: '{count} 个精调模版',
+      empty: "暂无已上架的订阅包",
+      subscribers: "{count} 个订阅租户",
+      prompts: "{count} 个精调模版",
     },
     package: {
-      subscribe: '申请订阅',
-      pending: '审核中',
-      subscribed: '已订阅',
-      revoked: '已撤销',
-      expired: '已到期',
-      notSubscribed: '未订阅',
+      subscribe: "申请订阅",
+      pending: "审核中",
+      subscribed: "已订阅",
+      revoked: "已撤销",
+      expired: "已到期",
+      notSubscribed: "未订阅",
     },
     generate: {
-      title: '精调模版生成',
-      submit: '生成',
-      fillVariables: '填写以下变量后点击生成',
+      title: "精调模版生成",
+      submit: "生成",
+      fillVariables: "填写以下变量后点击生成",
     },
     manage: {
-      title: 'KOL 提示词管理',
-      subtitle: '管理精调模版订阅包与提示词，配置平台、变量和上下线状态。',
-      packageTitle: '订阅包',
-      promptTitle: '提示词',
-      createPackage: '创建订阅包',
-      editPackage: '编辑包',
-      publishPackage: '发布',
-      archivePackage: '归档',
-      createPrompt: '新增提示词',
-      activatePrompt: '上线',
-      archivePrompt: '下线',
-      confirmDeletePackage: '确定要删除这个订阅包吗？',
-      confirmDeletePrompt: '确定要删除这个提示词吗？',
-      emptyPromptSelection: '请选择左侧订阅包以查看提示词',
-      platformHint: '平台',
-      platformHintDefault: '通用',
+      title: "KOL 提示词管理",
+      subtitle: "管理精调模版订阅包与提示词，配置平台、变量和上下线状态。",
+      packageTitle: "订阅包",
+      promptTitle: "提示词",
+      createPackage: "创建订阅包",
+      editPackage: "编辑包",
+      publishPackage: "发布",
+      archivePackage: "归档",
+      createPrompt: "新增提示词",
+      activatePrompt: "上线",
+      archivePrompt: "下线",
+      confirmDeletePackage: "确定要删除这个订阅包吗？",
+      confirmDeletePrompt: "确定要删除这个提示词吗？",
+      emptyPromptSelection: "请选择左侧订阅包以查看提示词",
+      platformHint: "平台",
+      platformHintDefault: "通用",
       packageStatus: {
-        draft: '草稿',
-        published: '已发布',
-        archived: '已归档',
+        draft: "草稿",
+        published: "已发布",
+        archived: "已归档",
       },
       messages: {
-        packageCreated: '订阅包创建成功',
-        packageUpdated: '订阅包更新成功',
-        packagePublished: '订阅包发布成功',
-        packageArchived: '订阅包归档成功',
-        packageDeleted: '订阅包删除成功',
-        promptCreated: '提示词创建成功',
-        promptActivated: '提示词已上线',
-        promptArchived: '提示词已下线',
-        promptDeleted: '提示词删除成功',
+        packageCreated: "订阅包创建成功",
+        packageUpdated: "订阅包更新成功",
+        packagePublished: "订阅包发布成功",
+        packageArchived: "订阅包归档成功",
+        packageDeleted: "订阅包删除成功",
+        promptCreated: "提示词创建成功",
+        promptActivated: "提示词已上线",
+        promptArchived: "提示词已下线",
+        promptDeleted: "提示词删除成功",
       },
       packageForm: {
-        tags: '标签',
-        tagsPlaceholder: '输入标签后按回车',
-        priceNote: '价格说明',
-        priceNotePlaceholder: '例如：联系我获取报价',
-        cover: '封面图',
-        coverHint: '支持从素材库选择，也支持本地上传后自动转为 WebP。',
-        selectCover: '选择封面图',
-        changeCover: '更换封面图',
-        removeCover: '移除封面图',
-        noCover: '暂未设置封面图',
-        nameRequired: '请填写订阅包标题',
+        tags: "标签",
+        tagsPlaceholder: "输入标签后按回车",
+        priceNote: "价格说明",
+        priceNotePlaceholder: "例如：联系我获取报价",
+        cover: "封面图",
+        coverHint: "支持从素材库选择，也支持本地上传后自动转为 WebP。",
+        selectCover: "选择封面图",
+        changeCover: "更换封面图",
+        removeCover: "移除封面图",
+        noCover: "暂未设置封面图",
+        nameRequired: "请填写订阅包标题",
         coverPicker: {
-          title: '选择订阅包封面',
-          localTab: '本地上传',
-          emptyTitle: '选择一张图片作为订阅包封面',
-          emptyHint: '支持从素材库选择，也支持本地上传后自动转为 WebP。',
+          title: "选择订阅包封面",
+          localTab: "本地上传",
+          emptyTitle: "选择一张图片作为订阅包封面",
+          emptyHint: "支持从素材库选择，也支持本地上传后自动转为 WebP。",
         },
       },
       status: {
-        draft: '草稿',
-        active: '已上线',
-        archived: '已下线',
+        draft: "草稿",
+        active: "已上线",
+        archived: "已下线",
       },
       editor: {
-        basicInfo: '基本信息',
-        saveMeta: '保存基本信息',
-        saveDraft: '保存草稿',
-        publish: '发布',
-        preview: '预览表单',
-        aiGenerate: 'AI 生成',
-        aiOptimize: 'AI 优化',
-        aiPlaceholder: '描述你想要的 prompt 效果，AI 帮你生成...',
-        aiOptimizePromptPlaceholder: '例如：让这段提示词更清晰，保留变量占位符，减少歧义。',
-        aiOptimizeDisclaimer: 'AI 生成内容仅供参考，请确认后再替换选中片段。',
-        aiOptimizeReplace: '替换选中内容',
+        basicInfo: "基本信息",
+        saveMeta: "保存基本信息",
+        saveDraft: "保存草稿",
+        publish: "发布",
+        preview: "预览表单",
+        aiGenerate: "AI 生成",
+        aiOptimize: "AI 优化",
+        aiPlaceholder: "描述你想要的 prompt 效果，AI 帮你生成...",
+        aiOptimizePromptPlaceholder: "例如：让这段提示词更清晰，保留变量占位符，减少歧义。",
+        aiOptimizeDisclaimer: "AI 生成内容仅供参考，请确认后再替换选中片段。",
+        aiOptimizeReplace: "替换选中内容",
       },
       variable: {
-        input: '输入框',
-        textarea: '多行文本',
-        select: '选择框',
-        number: '数字框',
-        checkbox: '多选框',
-        key: '变量 key',
-        label: '显示名',
-        required: '必填',
-        placeholder: '提示语',
-        options: '选项（逗号分隔）',
-        maxLength: '字数限制',
-        defaultValue: '默认值',
-        minValue: '最小数字',
-        maxValue: '最大数字',
-        defaultNumber: '默认数字',
+        input: "输入框",
+        textarea: "多行文本",
+        select: "选择框",
+        number: "数字框",
+        checkbox: "多选框",
+        key: "变量 key",
+        label: "显示名",
+        required: "必填",
+        placeholder: "提示语",
+        options: "选项（逗号分隔）",
+        maxLength: "字数限制",
+        defaultValue: "默认值",
+        minValue: "最小数字",
+        maxValue: "最大数字",
+        defaultNumber: "默认数字",
       },
     },
     dashboard: {
-      title: 'KOL 数据看板',
-      subtitle: '实时查看订阅情况与生成数据统计。',
-      totalSubs: '总订阅租户数',
-      monthSubs: '本月新增',
-      totalUsage: '总使用次数',
-      monthUsage: '本月使用',
-      failRate: '失败率',
-      byPackage: '按包维度',
-      trend: '趋势',
+      title: "KOL 数据看板",
+      subtitle: "实时查看订阅情况与生成数据统计。",
+      totalSubs: "总订阅租户数",
+      monthSubs: "本月新增",
+      totalUsage: "总使用次数",
+      monthUsage: "本月使用",
+      failRate: "失败率",
+      byPackage: "按包维度",
+      trend: "趋势",
     },
     profile: {
-      title: 'KOL 个人主页',
-      subtitle: '此处信息公开展示在 KOL 市场，与账号设置无关',
+      title: "KOL 个人主页",
+      subtitle: "此处信息公开展示在 KOL 市场，与账号设置无关",
       persona: {
-        displayNameLabel: '显示名',
-        displayNamePlaceholder: '请输入你的展示名',
-        bioLabel: '简介',
-        bioPlaceholder: '写一句你希望订阅者看到的自我介绍',
-        avatarLabel: '头像',
-        avatarHint: '支持 PNG/JPG/GIF/WebP，最大 2 MB',
-        avatarUploading: '正在上传头像…',
-        saveSuccess: '已更新',
-        saveError: '更新失败',
-        displayNameRequired: '请填写显示名',
-        displayNameTooLong: '显示名最多 40 个字符',
-        bioTooLong: '简介最多 500 个字符',
-        avatarInvalidType: '仅支持 PNG/JPG/GIF/WebP',
-        avatarTooLarge: '头像大小不能超过 2 MB',
-        notActive: '你当前不是活跃的 KOL',
+        displayNameLabel: "显示名",
+        displayNamePlaceholder: "请输入你的展示名",
+        bioLabel: "简介",
+        bioPlaceholder: "写一句你希望订阅者看到的自我介绍",
+        avatarLabel: "头像",
+        avatarHint: "支持 PNG/JPG/GIF/WebP，最大 2 MB",
+        avatarUploading: "正在上传头像…",
+        saveSuccess: "已更新",
+        saveError: "更新失败",
+        displayNameRequired: "请填写显示名",
+        displayNameTooLong: "显示名最多 40 个字符",
+        bioTooLong: "简介最多 500 个字符",
+        avatarInvalidType: "仅支持 PNG/JPG/GIF/WebP",
+        avatarTooLarge: "头像大小不能超过 2 MB",
+        notActive: "你当前不是活跃的 KOL",
       },
     },
   },
   workspace: {
-    eyebrow: 'Dashboard',
+    eyebrow: "Dashboard",
     metrics: {
-      articles: '生成数',
-      published: '发布数',
-      brands: '品牌数',
-      mediaAccounts: '媒体账号数',
+      articles: "生成数",
+      published: "发布数",
+      brands: "品牌数",
+      mediaAccounts: "媒体账号数",
     },
     sections: {
-      generalTemplates: '普通通用模版',
-      recent: '最近生成',
-      overview: '数据总览',
-      quota: '套餐与额度',
+      generalTemplates: "普通通用模版",
+      recent: "最近生成",
+      overview: "数据总览",
+      quota: "套餐与额度",
     },
     actions: {
-      enterTemplates: '进入模版创作',
+      enterTemplates: "进入模版创作",
     },
     quota: {
-      remaining: '剩余生成额度',
-      total: '总额度',
-      used: '已使用',
+      remaining: "剩余生成额度",
+      total: "总额度",
+      used: "已使用",
     },
-    emptyTemplates: '暂无模版卡片数据',
-    noRecentArticles: '暂无最近生成内容',
+    emptyTemplates: "暂无模版卡片数据",
+    noRecentArticles: "暂无最近生成内容",
   },
   tracking: {
-    eyebrow: 'AI Brand Monitoring',
-    brandPlaceholder: '选择品牌',
-    keywordPlaceholder: '选择关键词',
-    collectNow: '立即采集',
-    collectBrandRequired: '请先选择品牌，再发起采集',
-    collectKeywordRequired: '请先选择关键词，再立即采集当前问题',
-    collectTodayOnly: '立即采集只支持今天的数据，请切回今天后再操作',
-    collectClientChecking: '正在检查当前账号的桌面客户端状态',
-    collectClientOnlineRequired: '当前登录账号的桌面客户端未在线，暂时不能立即采集',
-    noDesktopClientCollectReason: '当前账号尚未注册桌面客户端，不能发起采集',
-    noAuthorizedPlatformsCollectReason: '当前账号暂无已授权 AI 平台，不能发起采集',
-    collectPlatformUnauthorized: '当前筛选平台未授权，不能发起采集',
-    pluginMode: '插件采样',
-    pluginHint: '插件模式下结果受设备在线率影响，低覆盖样本仅供趋势参考。',
-    awaitingSnapshot: '等待下一次有效快照',
+    brandPlaceholder: "选择品牌",
+    keywordPlaceholder: "选择关键词",
+    collectNow: "立即采集",
+    collectBrandRequired: "请先选择品牌，再发起采集",
+    collectKeywordRequired: "请先选择关键词，再立即采集当前问题",
+    collectTodayOnly: "立即采集只支持今天的数据，请切回今天后再操作",
+    collectClientChecking: "正在检查当前账号的桌面客户端状态",
+    collectClientOnlineRequired: "当前登录账号的桌面客户端未在线，暂时不能立即采集",
+    noDesktopClientCollectReason: "当前账号尚未注册桌面客户端，不能发起采集",
+    noAuthorizedPlatformsCollectReason: "当前账号暂无已授权 AI 平台，不能发起采集",
+    collectPlatformUnauthorized: "当前筛选平台未授权，不能发起采集",
+    pluginMode: "插件采样",
+    pluginHint: "插件模式下结果受设备在线率影响，低覆盖样本仅供趋势参考。",
+    awaitingSnapshot: "等待下一次有效快照",
     infoStrip:
-      '{mode} · 目标 {desired} · 计划 {planned} · 已采样 {actual} · 覆盖率 {coverage} · 更新于 {updatedAt} · {trigger}',
-    latestSnapshot: 'Latest Snapshot',
-    coverage: 'Coverage',
-    coverageTitle: '采样覆盖条',
-    coverageSummary: '目标 {desired} · 已采样 {actual} · 覆盖率 {coverage}',
-    platformMatrix: 'Platform Matrix',
-    platformMatrixTitle: '平台对比矩阵',
-    hotQuestions: 'Hot Questions',
-    hotQuestionsTitle: '高频问题',
-    hotQuestionsHint: '高频问题来自品牌库当前关键词下的全部问题。',
-    questionSearchPlaceholder: '搜索当前关键词下的问题',
-    questionDetailEyebrow: 'Question Detail',
-    questionDetailCollectedAt: '采集时间 {time}',
-    questionDetailFallback: '问题详情',
-    backToQuestions: '返回问题列表',
-    citationRanking: 'Citation Ranking',
-    citationRankingTitle: '引用排行',
-    citationRankingHint: '按发布外链主体归因 SaaS 发文在模型引用来源中的出现次数与占比。',
-    citationWindow7: '近 7 天',
-    citationWindow30: '近 30 天',
-    citationWindowLabel: '近 {days} 天',
-    citedArticles: 'Cited Articles',
-    citedArticlesTitle: '被引用文章',
-    answerContent: '答案内容',
-    citationSources: 'Citation Sources',
-    citationSourcesTitle: '引用来源',
-    citationAnalysis: 'Citation Analysis',
-    citationAnalysisTitle: '引用分析',
-    contentCitations: 'Content Citations',
-    contentCitationsTitle: '内容引用',
-    imitationAction: '仿写创作',
-    taskDebugTitle: '异步任务调试',
-    taskDebugHint: '仅用于排查 callback -> queue -> worker 的异步流转，不影响上方四块主内容。',
-    contentCitationBadge: '内容引用',
-    noQuestions: '当前筛选条件下暂无高频问题',
-    noCitationRanking: '当前时间窗口内暂无可归因引用',
-    noCitedArticles: '当前时间窗口内暂无内容引用',
-    noAnswer: '该平台暂无采样回答',
-    noCitations: '该平台无引用来源',
-    noCitationAnalysis: '该平台暂无引用分析',
-    noContentCitations: '当前平台暂无内容引用',
-    noTaskDebug: '当前条件下暂无异步任务调试数据',
-    noPlatformBreakdown: '当前筛选条件下暂无可展示的平台数据',
-    selectedPlatformUnauthorizedTitle: '当前平台未授权',
-    selectedPlatformUnauthorizedDescription:
-      '该 AI 平台没有当前账号的有效授权记录，请切换到已授权平台或在桌面端完成授权。',
-    noDetailPlatformsTitle: '暂无可展示平台',
-    noDetailPlatformsDescription: '当前筛选条件下没有可展示的 AI 平台数据。',
+      "{mode} · 目标 {desired} · 计划 {planned} · 已采样 {actual} · 覆盖率 {coverage} · 更新于 {updatedAt} · {trigger}",
+    latestSnapshot: "Latest Snapshot",
+    coverage: "Coverage",
+    coverageTitle: "采样覆盖条",
+    coverageSummary: "目标 {desired} · 已采样 {actual} · 覆盖率 {coverage}",
+    platformMatrix: "Platform Matrix",
+    platformMatrixTitle: "平台对比矩阵",
+    hotQuestions: "Hot Questions",
+    hotQuestionsTitle: "高频问题",
+    hotQuestionsHint: "高频问题来自品牌库当前关键词下的全部问题。",
+    questionSearchPlaceholder: "搜索当前关键词下的问题",
+    questionDetailEyebrow: "Question Detail",
+    questionDetailCollectedAt: "采集时间 {time}",
+    questionDetailFallback: "问题详情",
+    backToQuestions: "返回问题列表",
+    citationRanking: "Citation Ranking",
+    citationRankingTitle: "引用排行",
+    citationRankingHint: "按发布外链主体归因 SaaS 发文在模型引用来源中的出现次数与占比。",
+    citationWindow7: "近 7 天",
+    citationWindow30: "近 30 天",
+    citationWindowLabel: "近 {days} 天",
+    citedArticles: "Cited Articles",
+    citedArticlesTitle: "被引用文章",
+    answerContent: "答案内容",
+    citationSources: "Citation Sources",
+    citationSourcesTitle: "引用来源",
+    citationAnalysis: "Citation Analysis",
+    citationAnalysisTitle: "引用分析",
+    contentCitations: "Content Citations",
+    contentCitationsTitle: "内容引用",
+    imitationAction: "仿写创作",
+    taskDebugTitle: "异步任务调试",
+    taskDebugHint: "仅用于排查 callback -> queue -> worker 的异步流转，不影响上方四块主内容。",
+    contentCitationBadge: "内容引用",
+    noQuestions: "当前筛选条件下暂无高频问题",
+    noCitationRanking: "当前时间窗口内暂无可归因引用",
+    noCitedArticles: "当前时间窗口内暂无内容引用",
+    noAnswer: "该平台暂无采样回答",
+    noCitations: "该平台无引用来源",
+    noCitationAnalysis: "该平台暂无引用分析",
+    noContentCitations: "当前平台暂无内容引用",
+    noTaskDebug: "当前条件下暂无异步任务调试数据",
+    noPlatformBreakdown: "当前筛选条件下暂无可展示的平台数据",
+    selectedPlatformUnauthorizedTitle: "当前平台未授权",
+    selectedPlatformUnauthorizedDescription: "该 AI 平台没有当前账号的有效授权记录，请切换到已授权平台或在桌面端完成授权。",
+    noDetailPlatformsTitle: "暂无可展示平台",
+    noDetailPlatformsDescription: "当前筛选条件下没有可展示的 AI 平台数据。",
     platformAuthorization: {
       authorized: {
-        title: 'AI 平台授权正常',
-        description: '当前账号已有可用于监控采集的 AI 平台授权。',
+        title: "AI 平台授权正常",
+        description: "当前账号已有可用于监控采集的 AI 平台授权。",
       },
       no_desktop_client: {
-        title: '未检测到桌面客户端',
-        description:
-          '当前账号尚未注册桌面客户端。每日任务会等待有效客户端上线后再下发，仪表盘不会展示为可采集状态。',
+        title: "未检测到桌面客户端",
+        description: "当前账号尚未注册桌面客户端。每日任务会等待有效客户端上线后再下发，仪表盘不会展示为可采集状态。",
       },
       no_authorized_platforms: {
-        title: '暂无已授权 AI 平台',
-        description:
-          '当前账号没有已绑定或已授权的 AI 平台。系统不会为未授权平台生成或下发采集任务。',
+        title: "暂无已授权 AI 平台",
+        description: "当前账号没有已绑定或已授权的 AI 平台。系统不会为未授权平台生成或下发采集任务。",
       },
     },
-    samples: '次采样',
-    citations: '次引用',
-    citedArticleMeta: '{count} 篇内容被引用',
-    contentCitationMeta: '含 {count} 条内容引用',
-    manual: '手动',
-    automatic: '自动',
-    noChange: '持平',
+    samples: "次采样",
+    citations: "次引用",
+    citedArticleMeta: "{count} 篇内容被引用",
+    contentCitationMeta: "含 {count} 条内容引用",
+    manual: "手动",
+    automatic: "自动",
+    noChange: "持平",
     metrics: {
-      mentionRate: '提及率',
-      top1MentionRate: '首位提及率',
-      firstRecommendRate: '首选推荐率',
-      positiveMentionRate: '正面提及率',
+      mentionRate: "提及率",
+      top1MentionRate: "首位提及率",
+      firstRecommendRate: "首选推荐率",
+      positiveMentionRate: "正面提及率",
     },
     columns: {
-      platform: '平台',
-      appearances: '出现次数',
-      citedAnswers: '引用回答数',
-      citedArticles: '引用文章数',
-      citationRate: '引用率',
-      saasSourceRate: '来源占比',
-      citations: '引用次数',
-      sourcePlatform: '来源平台',
-      channelName: '渠道名称',
-      domain: '来源域名',
-      share: '占比',
-      contentName: '内容名称',
-      publishPlatform: '发布平台',
-      distinctSites: '引用站点数',
-      brandContent: '含品牌内容',
+      platform: "平台",
+      appearances: "出现次数",
+      citedAnswers: "引用回答数",
+      citedArticles: "引用文章数",
+      citationRate: "引用率",
+      saasSourceRate: "来源占比",
+      citations: "引用次数",
+      sourcePlatform: "来源平台",
+      channelName: "渠道名称",
+      domain: "来源域名",
+      share: "占比",
+      contentName: "内容名称",
+      publishPlatform: "发布平台",
+      distinctSites: "引用站点数",
+      brandContent: "含品牌内容",
     },
     status: {
-      sampled: '已采样',
-      partial: '部分采样',
-      unsampled: '未采样',
-      pending: '等待采样',
-      not_logged_in: '未登录',
-      unavailable: '不可用',
+      sampled: "已采样",
+      partial: "部分采样",
+      unsampled: "未采样",
+      pending: "等待采样",
+      not_logged_in: "未登录",
+      unavailable: "不可用",
     },
     confidence: {
-      high: '高置信度',
-      medium: '中等置信度',
-      low: '低置信度',
+      high: "高置信度",
+      medium: "中等置信度",
+      low: "低置信度",
     },
     taskDebug: {
       labels: {
-        plannedAt: '计划时间',
-        leasedAt: '领取时间',
-        callbackReceivedAt: '回调收到时间',
-        queueEnqueuedAt: '入队时间',
-        completedAt: '完成时间',
-        leaseExpiresAt: '租约过期时间',
-        runId: 'Run ID',
-        runStatus: 'Run 状态',
-        providerModel: '模型',
-        requestId: '请求 ID',
-        providerRequestId: 'Provider Request ID',
-        receivedAlertCount: 'Received 告警次数',
-        receivedAlertedAt: '最近告警时间',
-        skipReason: '跳过原因',
-        errorMessage: '任务错误',
-        lastQueuePublishError: '队列投递错误',
+        plannedAt: "计划时间",
+        leasedAt: "领取时间",
+        callbackReceivedAt: "回调收到时间",
+        queueEnqueuedAt: "入队时间",
+        completedAt: "完成时间",
+        leaseExpiresAt: "租约过期时间",
+        runId: "Run ID",
+        runStatus: "Run 状态",
+        providerModel: "模型",
+        requestId: "请求 ID",
+        providerRequestId: "Provider Request ID",
+        receivedAlertCount: "Received 告警次数",
+        receivedAlertedAt: "最近告警时间",
+        skipReason: "跳过原因",
+        errorMessage: "任务错误",
+        lastQueuePublishError: "队列投递错误",
       },
       taskStatus: {
-        pending: '待采集',
-        leased: '已领取',
-        received: '已收到回调',
-        completed: '已完成',
-        failed: '已失败',
-        skipped: '已跳过',
-        expired: '已过期',
+        pending: "待采集",
+        leased: "已领取",
+        received: "已收到回调",
+        completed: "已完成",
+        failed: "已失败",
+        skipped: "已跳过",
+        expired: "已过期",
       },
       queueStatus: {
-        pending: '待入队',
-        queued: '已入队',
-        publish_failed: '入队失败',
-        invalid_payload: '消息无效',
+        pending: "待入队",
+        queued: "已入队",
+        publish_failed: "入队失败",
+        invalid_payload: "消息无效",
       },
     },
   },
   templateMeta: {
     top_x_article: {
-      eyebrow: '榜单内容',
-      helper: '排序推荐类文章，适合快节奏种草和结构化比较。',
-      accent: 'Top X',
-      action: '创建榜单',
+      eyebrow: "榜单内容",
+      helper: "排序推荐类文章，适合快节奏种草和结构化比较。",
+      accent: "Top X",
+      action: "创建榜单",
     },
     product_review: {
-      eyebrow: '单品评测',
-      helper: '突出卖点、优缺点与适用人群，适合高转化内容。',
-      accent: '评测稿',
-      action: '发起评测',
+      eyebrow: "单品评测",
+      helper: "突出卖点、优缺点与适用人群，适合高转化内容。",
+      accent: "评测稿",
+      action: "发起评测",
     },
     research_report: {
-      eyebrow: '研究报告',
-      helper: '更长、更专业的分析内容，适合趋势和行业洞察。',
-      accent: '深度稿',
-      action: '创建报告',
+      eyebrow: "研究报告",
+      helper: "更长、更专业的分析内容，适合趋势和行业洞察。",
+      accent: "深度稿",
+      action: "创建报告",
     },
     brand_search_expansion: {
-      eyebrow: '品牌扩写',
-      helper: '把品牌词和搜索需求扩展成更完整的问答式内容。',
-      accent: 'GEO',
-      action: '继续扩写',
+      eyebrow: "品牌扩写",
+      helper: "把品牌词和搜索需求扩展成更完整的问答式内容。",
+      accent: "GEO",
+      action: "继续扩写",
     },
     default: {
-      eyebrow: '内容模版',
-      helper: '当前模版已经可用，可直接进入生成流程。',
-      accent: 'Ready',
-      action: '进入模版',
+      eyebrow: "内容模版",
+      helper: "当前模版已经可用，可直接进入生成流程。",
+      accent: "Ready",
+      action: "进入模版",
     },
   },
   status: {
     generate: {
-      draft: '草稿',
-      queued: '排队中',
-      generating: '生成中',
-      running: '运行中',
-      completed: '已完成',
-      failed: '生成失败',
+      draft: "草稿",
+      queued: "排队中",
+      generating: "生成中",
+      running: "运行中",
+      completed: "已完成",
+      failed: "生成失败",
     },
     publish: {
-      unpublished: '未发布',
-      publishing: '发布中',
-      success: '发布成功',
-      failed: '发布失败',
-      partial_success: '部分发布',
-      published: '发布成功',
-      publish_success: '发布成功',
-      publish_failed: '发布失败',
-      pending_review: '待审核',
+      unpublished: "未发布",
+      publishing: "发布中",
+      success: "发布成功",
+      failed: "发布失败",
+      partial_success: "部分发布",
+      published: "发布成功",
+      publish_success: "发布成功",
+      publish_failed: "发布失败",
+      pending_review: "待审核",
+      blocked_by_compliance: "合规阻断",
     },
     sourceType: {
-      template: '模版单次生成',
-      custom_generation: '自定义生成',
-      instant_task: '即时任务',
-      schedule_task: '定时任务',
-      free_create: '自由创作',
-      imitation: '仿写创作',
-      kol: '精调模版生成',
+      template: "模版单次生成",
+      custom_generation: "自定义生成",
+      instant_task: "即时任务",
+      schedule_task: "定时任务",
+      free_create: "自由创作",
+      imitation: "仿写创作",
+      kol: "精调模版生成",
     },
   },
   imitation: {
     actions: {
-      create: '新建仿写',
-      submit: '提交并生成',
+      create: "新建仿写",
+      submit: "提交并生成",
     },
     filters: {
-      publishStatus: '发布状态',
-      generateStatus: '生成状态',
-      keyword: '搜索文章',
-      createdTime: '创建时间',
-      createdTimeStart: '开始时间',
-      createdTimeEnd: '结束时间',
-      keywordPlaceholder: '请输入标题内容搜索',
+      publishStatus: "发布状态",
+      generateStatus: "生成状态",
+      keyword: "搜索文章",
+      createdTime: "创建时间",
+      createdTimeStart: "开始时间",
+      createdTimeEnd: "结束时间",
+      keywordPlaceholder: "请输入标题内容搜索",
     },
     list: {
-      eyebrow: '仿写创作',
-      count: '共 {count} 篇文章',
-      sourceArticle: '原文',
-      empty: '还未创建仿写文章，可从问题详情的引用来源一键带入，也可以手动新建。',
-      deleteConfirm: '确认删除这篇仿写文章吗？',
-      deleteSuccess: '文章已删除',
-      deleteError: '删除文章失败',
+      eyebrow: "仿写创作",
+      count: "共 {count} 篇文章",
+      sourceArticle: "原文",
+      empty: "还未创建仿写文章，可从问题详情的引用来源一键带入，也可以手动新建。",
+      deleteConfirm: "确认删除这篇仿写文章吗？",
+      deleteSuccess: "文章已删除",
+      deleteError: "删除文章失败",
     },
     create: {
-      title: '创建仿写文章',
-      subtitle: '后台会先抓取源文章内容，再按下方设定生成一篇新的原创表达文章。',
-      sourceSection: '来源文章',
-      settingsSection: '仿写设置',
-      sourceURL: '文章 URL',
-      sourceTitle: '来源标题',
-      language: '文章语言',
-      industry: '行业/场景',
-      brandName: '品牌/主体',
-      region: '地域',
-      targetAudience: '目标读者',
-      contentGoal: '内容目标',
-      tone: '语气风格',
-      lengthGoal: '篇幅要求',
-      keywords: '关键词',
-      preservePoints: '必须保留/强调',
-      avoidPoints: '需要规避',
-      extraRequirements: '其他要求',
-      enableWebSearch: '允许联网补充',
-      webSearchHint: '开启后，生成时会让大模型参考实时网页信息，适合需要最新事实或行业动态的仿写。',
-      knowledgeBase: '引用知识库',
-      knowledgeBasePlaceholder: '可选，用于补充文章事实、品牌资料和行业背景',
-      knowledgeBaseHint:
-        '选择后，后台会检索相关知识片段并作为生成参考，未选择则只基于来源文章和当前设置生成。',
-      sourceURLPlaceholder: 'https://example.com/article',
-      sourceTitlePlaceholder: '可选，引用来源标题会自动带入',
-      industryPlaceholder: '例如：家居建材、教育培训、SaaS、医疗健康',
-      brandNamePlaceholder: '可选，填写后文章会自然贴合该品牌或主体',
-      regionPlaceholder: '例如：上海、华东、全国、北美市场',
-      targetAudiencePlaceholder: '例如：首次购买用户、渠道代理、企业采购负责人',
-      contentGoalPlaceholder: '例如：科普说明、转化种草、品牌信任、选型建议',
-      tonePlaceholder: '例如：专业可信、轻松口语、评测对比、新闻解读',
-      lengthGoalPlaceholder: '例如：1200字左右、短文、深度长文',
-      keywordsPlaceholder: '输入关键词后回车，可多选',
-      preservePointsPlaceholder: '列出必须保留的事实、数据、观点或案例',
-      avoidPointsPlaceholder: '列出不能出现的说法、竞品、合规禁区或表达方式',
-      extraRequirementsPlaceholder: '补充行业、渠道、结构、标题风格等自由要求',
-      queued: '仿写任务已提交，正在排队生成',
-      sourceURLRequired: '请先填写来源文章 URL',
-      submitError: '仿写任务提交失败',
-      backToList: '返回仿写列表',
+      title: "创建仿写文章",
+      subtitle: "后台会先抓取源文章内容，再按下方设定生成一篇新的原创表达文章。",
+      sourceSection: "来源文章",
+      settingsSection: "仿写设置",
+      sourceURL: "文章 URL",
+      sourceTitle: "来源标题",
+      language: "文章语言",
+      industry: "行业/场景",
+      brandName: "品牌/主体",
+      region: "地域",
+      targetAudience: "目标读者",
+      contentGoal: "内容目标",
+      tone: "语气风格",
+      lengthGoal: "篇幅要求",
+      keywords: "关键词",
+      preservePoints: "必须保留/强调",
+      avoidPoints: "需要规避",
+      extraRequirements: "其他要求",
+      enableWebSearch: "允许联网补充",
+      webSearchHint: "开启后，生成时会让大模型参考实时网页信息，适合需要最新事实或行业动态的仿写。",
+      knowledgeBase: "引用知识库",
+      knowledgeBasePlaceholder: "可选，用于补充文章事实、品牌资料和行业背景",
+      knowledgeBaseHint: "选择后，后台会检索相关知识片段并作为生成参考，未选择则只基于来源文章和当前设置生成。",
+      sourceURLPlaceholder: "https://example.com/article",
+      sourceTitlePlaceholder: "可选，引用来源标题会自动带入",
+      industryPlaceholder: "例如：家居建材、教育培训、SaaS、医疗健康",
+      brandNamePlaceholder: "可选，填写后文章会自然贴合该品牌或主体",
+      regionPlaceholder: "例如：上海、华东、全国、北美市场",
+      targetAudiencePlaceholder: "例如：首次购买用户、渠道代理、企业采购负责人",
+      contentGoalPlaceholder: "例如：科普说明、转化种草、品牌信任、选型建议",
+      tonePlaceholder: "例如：专业可信、轻松口语、评测对比、新闻解读",
+      lengthGoalPlaceholder: "例如：1200字左右、短文、深度长文",
+      keywordsPlaceholder: "输入关键词后回车，可多选",
+      preservePointsPlaceholder: "列出必须保留的事实、数据、观点或案例",
+      avoidPointsPlaceholder: "列出不能出现的说法、竞品、合规禁区或表达方式",
+      extraRequirementsPlaceholder: "补充行业、渠道、结构、标题风格等自由要求",
+      queued: "仿写任务已提交，正在排队生成",
+      sourceURLRequired: "请先填写来源文章 URL",
+      submitError: "仿写任务提交失败",
+      backToList: "返回仿写列表",
     },
   },
   freeCreate: {
     actions: {
-      create: '新建文章',
+      create: "新建文章",
     },
     filters: {
-      publishStatus: '发布状态',
-      keyword: '搜索文章',
-      createdTime: '创建时间',
-      createdTimeStart: '开始时间',
-      createdTimeEnd: '结束时间',
-      keywordPlaceholder: '请输入标题内容搜索',
+      publishStatus: "发布状态",
+      keyword: "搜索文章",
+      createdTime: "创建时间",
+      createdTimeStart: "开始时间",
+      createdTimeEnd: "结束时间",
+      keywordPlaceholder: "请输入标题内容搜索",
     },
     list: {
-      eyebrow: '自由创作',
-      count: '共 {count} 篇文章',
-      empty: '还未创建文章，点击「新建文章」开始创作~',
-      edit: '编辑文章',
-      deleteConfirm: '确认删除这篇文章吗？',
-      deleteSuccess: '文章已删除',
-      deleteError: '删除文章失败',
+      eyebrow: "自由创作",
+      count: "共 {count} 篇文章",
+      empty: "还未创建文章，点击「新建文章」开始创作~",
+      edit: "编辑文章",
+      deleteConfirm: "确认删除这篇文章吗？",
+      deleteSuccess: "文章已删除",
+      deleteError: "删除文章失败",
     },
-    createError: '创建文章失败',
+    createError: "创建文章失败",
   },
   templates: {
-    eyebrow: 'Article Creation',
+    eyebrow: "Article Creation",
     sections: {
-      generalTemplates: '普通通用模版',
-      refinedTemplates: '精调模版',
-      records: '模版创作记录',
+      generalTemplates: "普通通用模版",
+      refinedTemplates: "精调模版",
+      records: "模版创作记录",
     },
     actions: {
-      batchGenerate: '批量生成文章',
-      chooseTemplate: '选择模版创作',
+      batchGenerate: "批量生成文章",
+      chooseTemplate: "选择模版创作",
     },
     filters: {
-      template: '模版类型',
-      publishStatus: '发布状态',
-      generateStatus: '生成状态',
-      keyword: '搜索文章',
-      generationTime: '生成时间',
-      generationTimeStart: '开始时间',
-      generationTimeEnd: '结束时间',
-      keywordPlaceholder: '请输入标题内容搜索',
+      template: "模版类型",
+      publishStatus: "发布状态",
+      generateStatus: "生成状态",
+      keyword: "搜索文章",
+      generationTime: "生成时间",
+      generationTimeStart: "开始时间",
+      generationTimeEnd: "结束时间",
+      keywordPlaceholder: "请输入标题内容搜索",
     },
     list: {
-      eyebrow: '模版创作记录',
-      count: '共 {count} 篇文章',
-      empty: '还未创建文章，暂无相关数据~',
-      preview: '预览正文',
-      edit: '编辑文章',
-      editDisabled: '只有草稿、生成失败或已完成文章才可编辑',
-      publishDisabled: '只有已完成文章才可发布',
-      versions: '查看版本',
-      deleteConfirm: '确认删除这篇文章吗？',
-      deleteSuccess: '文章已删除',
-      deleteError: '删除文章失败',
+      eyebrow: "模版创作记录",
+      count: "共 {count} 篇文章",
+      empty: "还未创建文章，暂无相关数据~",
+      preview: "预览正文",
+      edit: "编辑文章",
+      editDisabled: "只有草稿、生成失败或已完成文章才可编辑",
+      publishDisabled: "只有已完成文章才可发布",
+      versions: "查看版本",
+      deleteConfirm: "确认删除这篇文章吗？",
+      deleteSuccess: "文章已删除",
+      deleteError: "删除文章失败",
     },
     picker: {
-      title: '选择你需要的模版创作',
-      empty: '请选择普通通用模版或精调模版生成',
-      generalDescription: '选择普通通用模版进入创作',
-      refinedDescription: '选择精调模版后直接发起精调模版生成',
-      viewExample: '查看示例',
+      title: "选择你需要的模版创作",
+      empty: "请选择普通通用模版或精调模版生成",
+      generalDescription: "选择普通通用模版进入创作",
+      refinedDescription: "选择精调模版后直接发起精调模版生成",
+      viewExample: "查看示例",
     },
     wizard: {
-      drawerTitle: '模版生成',
+      drawerTitle: "模版生成",
       steps: {
-        basic: '基本信息',
-        basicDesc: '语言、模版字段与品牌上下文',
-        structure: '文章结构',
-        structureDesc: '标题方案与结构段落',
-        generate: '生成文章',
-        generateDesc: '确认大纲、补充关键要点并提交生成任务',
+        basic: "基本信息",
+        basicDesc: "语言、模版字段与品牌上下文",
+        structure: "文章结构",
+        structureDesc: "标题方案与结构段落",
+        generate: "生成文章",
+        generateDesc: "确认大纲、补充关键要点并提交生成任务",
       },
       sections: {
-        templateFields: '模版字段',
-        brandContext: '品牌上下文',
-        language: '文章语言',
-        brandInfo: '品牌信息',
-        brandLibrary: '品牌库',
-        brandName: '品牌名称',
-        website: '官网地址',
-        brandSummary: 'AI 品牌摘要',
-        keywords: '关键词',
-        competitors: '竞品列表',
-        chooseTitle: '选择文章标题',
-        customTitle: '自定义标题',
-        reviewIntroHook: '评测引言钩子',
-        structure: '文章结构',
-        customOutline: '自定义结构',
-        preview: '文章预览',
-        generatedOutline: '确认文章大纲',
-        outlinePreview: '大纲预览',
-        keyPoints: '文章关键要点',
-        review: '提交前确认',
-        notes: '生成说明',
-        inputParams: '输入参数',
+        templateFields: "模版字段",
+        brandContext: "品牌上下文",
+        language: "文章语言",
+        brandInfo: "品牌信息",
+        brandLibrary: "品牌库",
+        brandName: "品牌名称",
+        website: "官网地址",
+        brandSummary: "AI 品牌摘要",
+        keywords: "关键词",
+        competitors: "竞品列表",
+        chooseTitle: "选择文章标题",
+        customTitle: "自定义标题",
+        reviewIntroHook: "评测引言钩子",
+        structure: "文章结构",
+        customOutline: "自定义结构",
+        preview: "文章预览",
+        generatedOutline: "确认文章大纲",
+        outlinePreview: "大纲预览",
+        keyPoints: "文章关键要点",
+        review: "提交前确认",
+        notes: "生成说明",
+        inputParams: "输入参数",
       },
       hints: {
-        brandContext: '可选。选择后会自动带出关键词与竞品信息。',
-        brandFlow:
-          '品牌可直接输入，也可以从品牌库带入。点击分析后，AI 会补充关键词、竞品和标题建议。',
-        brandSummaryPlaceholder: 'AI 分析后会在这里补充品牌简介、差异点和适合切入的内容角度。',
-        keywords: '支持直接输入，也支持复用品牌词库里的关键词。AI 分析结果会自动补充到这里。',
-        competitors:
-          '竞品支持手动编辑、追加；只有从品牌库选择品牌后，才可以收藏到品牌词库。AI 分析会尽量补齐候选竞品。',
-        competitorEmptyEditable: '还没有竞品，先手动添加一条或点击分析让 AI 自动补齐。',
-        templateFields: '这里保留当前模板自己的补充字段，用来约束 AI 生成角度。',
-        titleSelection: '下一步前会由 AI 给出 5 个更合适的标题候选，你可以在这里挑选或改写。',
-        reviewIntroHook: '选择一种开场方式，AI 会按这个评测引言风格组织文章开头。',
-        structure: '保留文章默认结构，也可以按本次出稿需求删减。',
-        preview: '右侧会根据当前标题和结构实时预览最终文章框架。',
-        previewEmpty: '选择结构后，这里会实时预览文章框架。',
-        generatedOutline: 'AI 会先生成完整大纲，你可以继续编辑、补充或删除节点后再正式生成文章。',
-        outlinePreview: '右侧会根据当前大纲实时预览最终文章框架。',
-        outlineEmpty: '生成大纲后，这里会显示可编辑的文章结构。',
-        review: '确认无误后提交，文章会进入生成队列。',
-        competitorEmpty: '当前品牌下暂无竞品数据',
-        customTitle: '如需手动改写，可在这里输入最终标题',
-        keyPoints: '补充希望文章强调的卖点、观点或风格要求',
-        async: '后端会立即创建文章和任务记录，再异步完成正文生成。提交成功后，列表会自动刷新。',
+        brandContext: "可选。选择后会自动带出关键词与竞品信息。",
+        brandFlow: "品牌可直接输入，也可以从品牌库带入。点击分析后，AI 会补充关键词、竞品和标题建议。",
+        brandSummaryPlaceholder: "AI 分析后会在这里补充品牌简介、差异点和适合切入的内容角度。",
+        keywords: "支持直接输入，也支持复用品牌词库里的关键词。AI 分析结果会自动补充到这里。",
+        competitors: "竞品支持手动编辑、追加；只有从品牌库选择品牌后，才可以收藏到品牌词库。AI 分析会尽量补齐候选竞品。",
+        competitorEmptyEditable: "还没有竞品，先手动添加一条或点击分析让 AI 自动补齐。",
+        templateFields: "这里保留当前模板自己的补充字段，用来约束 AI 生成角度。",
+        titleSelection: "下一步前会由 AI 给出 5 个更合适的标题候选，你可以在这里挑选或改写。",
+        reviewIntroHook: "选择一种开场方式，AI 会按这个评测引言风格组织文章开头。",
+        structure: "保留文章默认结构，也可以按本次出稿需求删减。",
+        preview: "右侧会根据当前标题和结构实时预览最终文章框架。",
+        previewEmpty: "选择结构后，这里会实时预览文章框架。",
+        generatedOutline: "AI 会先生成完整大纲，你可以继续编辑、补充或删除节点后再正式生成文章。",
+        outlinePreview: "右侧会根据当前大纲实时预览最终文章框架。",
+        outlineEmpty: "生成大纲后，这里会显示可编辑的文章结构。",
+        review: "确认无误后提交，文章会进入生成队列。",
+        competitorEmpty: "当前品牌下暂无竞品数据",
+        customTitle: "如需手动改写，可在这里输入最终标题",
+        keyPoints: "补充希望文章强调的卖点、观点或风格要求",
+        async: "后端会立即创建文章和任务记录，再异步完成正文生成。提交成功后，列表会自动刷新。",
       },
       actions: {
-        analyze: '分析',
-        addCompetitor: '添加竞品',
-        addSection: '添加结构',
-        addOutlineNode: '添加节点',
-        addOutlineChild: '添加子节点',
-        favorite: '收藏',
-        saved: '已收藏',
-        submit: '提交并生成',
+        analyze: "分析",
+        addCompetitor: "添加竞品",
+        addSection: "添加结构",
+        addOutlineNode: "添加节点",
+        addOutlineChild: "添加子节点",
+        favorite: "收藏",
+        saved: "已收藏",
+        submit: "提交并生成",
       },
       review: {
-        templateName: '模版名称',
-        articleTitle: '文章标题',
-        brandContext: '品牌上下文',
-        outline: '结构段落',
-        currentTemplate: '当前模版',
-        promptVisibility: 'Prompt 可见性',
-        selectedKeywords: '已选关键词',
-        selectedCompetitors: '已选竞品',
+        templateName: "模版名称",
+        articleTitle: "文章标题",
+        brandContext: "品牌上下文",
+        outline: "结构段落",
+        currentTemplate: "当前模版",
+        promptVisibility: "Prompt 可见性",
+        selectedKeywords: "已选关键词",
+        selectedCompetitors: "已选竞品",
       },
       localeOptions: {
-        zh: '中文简体',
-        en: 'English',
+        zh: "中文简体",
+        en: "English",
       },
       table: {
-        website: '网址',
-        name: '名称',
-        description: '简介',
-        actions: '操作',
+        website: "网址",
+        name: "名称",
+        description: "简介",
+        actions: "操作",
       },
       placeholders: {
-        brandLibrary: '从品牌库选择已有品牌',
-        brandName: '输入品牌名，或在选择品牌后继续微调',
-        website: '输入官网地址，选填',
-        keywords: '输入关键词后回车，可多选',
-        customTitle: '如需覆盖 AI 标题，可在这里直接输入',
-        customOutline: '补充一个额外结构，例如“选购建议”',
-        keyPoints: '告诉 AI 还需要强调哪些要点、风格或限制条件',
-        competitorWebsite: '官网或落地页地址',
-        competitorName: '竞品名称',
-        competitorDescription: '一句话说明竞品定位或特点',
-        outlineNode: '请输入标题',
+        brandLibrary: "从品牌库选择已有品牌",
+        brandName: "输入品牌名，或在选择品牌后继续微调",
+        website: "输入官网地址，选填",
+        keywords: "输入关键词后回车，可多选",
+        customTitle: "如需覆盖 AI 标题，可在这里直接输入",
+        customOutline: "补充一个额外结构，例如“选购建议”",
+        keyPoints: "告诉 AI 还需要强调哪些要点、风格或限制条件",
+        competitorWebsite: "官网或落地页地址",
+        competitorName: "竞品名称",
+        competitorDescription: "一句话说明竞品定位或特点",
+        outlineNode: "请输入标题",
       },
-      promptVisible: 'Prompt 可见',
-      promptSealed: 'Prompt 已封装',
+      promptVisible: "Prompt 可见",
+      promptSealed: "Prompt 已封装",
       assist: {
-        analyzeTitle: 'AI 正在分析关键词和竞品，请稍后…',
-        analyzeTitleNoCompetitors: 'AI 正在分析关键词和评测上下文，请稍后…',
-        titleTitle: 'AI 正在生成标题，请稍后…',
-        outlineTitle: 'AI 正在生成文章大纲，请稍后…',
+        analyzeTitle: "AI 正在分析关键词和竞品，请稍后…",
+        analyzeTitleNoCompetitors: "AI 正在分析关键词和评测上下文，请稍后…",
+        titleTitle: "AI 正在生成标题，请稍后…",
+        outlineTitle: "AI 正在生成文章大纲，请稍后…",
         analyzeStages: {
-          brand: '品牌信息分析中…',
-          keywords: '关键词提炼中…',
-          competitors: '竞品与官网信息补充中…',
-          context: '评测上下文整理中…',
+          brand: "品牌信息分析中…",
+          keywords: "关键词提炼中…",
+          competitors: "竞品与官网信息补充中…",
+          context: "评测上下文整理中…",
         },
         titleStages: {
-          context: '正在整理当前内容上下文…',
-          strategy: '正在结合关键词和竞品生成标题策略…',
-          strategyNoCompetitors: '正在结合关键词生成标题策略…',
-          finalize: '正在输出 5 个标题候选…',
+          context: "正在整理当前内容上下文…",
+          strategy: "正在结合关键词和竞品生成标题策略…",
+          strategyNoCompetitors: "正在结合关键词生成标题策略…",
+          finalize: "正在输出 5 个标题候选…",
         },
         outlineStages: {
-          context: '正在整理标题、关键词和竞品上下文…',
-          contextNoCompetitors: '正在整理标题、关键词和评测上下文…',
-          structure: '正在根据已选结构生成文章大纲…',
-          finalize: '正在输出可编辑的大纲结果…',
+          context: "正在整理标题、关键词和竞品上下文…",
+          contextNoCompetitors: "正在整理标题、关键词和评测上下文…",
+          structure: "正在根据已选结构生成文章大纲…",
+          finalize: "正在输出可编辑的大纲结果…",
         },
       },
       messages: {
-        requiredField: '请先填写 {field}',
-        missingBrand: '请先选择品牌库对象或输入品牌名称',
-        missingTitle: '请先选择或输入文章标题',
-        missingReviewIntroHook: '请先选择一个评测引言钩子',
-        missingOutline: '请至少选择一个文章结构段落',
-        missingGeneratedOutline: '请先生成并确认文章大纲',
-        customOutlineTooLong: '自定义结构不能超过 {count} 个字',
-        selectBrandBeforeFavorite: '请先从品牌库选择品牌后再收藏竞品',
-        missingCompetitorName: '至少需要填写竞品名称后才能收藏',
-        savedCompetitor: '竞品已收藏到品牌词库',
-        assistReady: 'AI 分析已完成，可以继续调整内容。',
-        assistFailed: 'AI 分析失败，请稍后重试。',
-        assistTimeout: 'AI 分析超时，请稍后重试。',
-        titleFailed: '标题生成失败，请稍后重试。',
-        titleTimeout: '标题生成超时，请稍后重试。',
-        outlineFailed: '大纲生成失败，请稍后重试。',
-        outlineTimeout: '大纲生成超时，请稍后重试。',
-        draftSaved: '草稿已保存，已返回模版创作列表',
-        draftSaveFailed: '草稿保存失败，请稍后重试。',
-        queued: '任务已提交，正在排队生成',
-        submitted: '生成任务已提交，正在刷新文章列表。',
+        requiredField: "请先填写 {field}",
+        missingBrand: "请先选择品牌库对象或输入品牌名称",
+        missingTitle: "请先选择或输入文章标题",
+        missingReviewIntroHook: "请先选择一个评测引言钩子",
+        missingOutline: "请至少选择一个文章结构段落",
+        missingGeneratedOutline: "请先生成并确认文章大纲",
+        customOutlineTooLong: "自定义结构不能超过 {count} 个字",
+        selectBrandBeforeFavorite: "请先从品牌库选择品牌后再收藏竞品",
+        missingCompetitorName: "至少需要填写竞品名称后才能收藏",
+        savedCompetitor: "竞品已收藏到品牌词库",
+        assistReady: "AI 分析已完成，可以继续调整内容。",
+        assistFailed: "AI 分析失败，请稍后重试。",
+        assistTimeout: "AI 分析超时，请稍后重试。",
+        titleFailed: "标题生成失败，请稍后重试。",
+        titleTimeout: "标题生成超时，请稍后重试。",
+        outlineFailed: "大纲生成失败，请稍后重试。",
+        outlineTimeout: "大纲生成超时，请稍后重试。",
+        draftSaved: "草稿已保存，已返回模版创作列表",
+        draftSaveFailed: "草稿保存失败，请稍后重试。",
+        queued: "任务已提交，正在排队生成",
+        submitted: "生成任务已提交，正在刷新文章列表。",
       },
     },
   },
   article: {
-    drawerTitle: '文章详情',
-    preview: '正文预览',
-    versionHistory: '版本记录',
-    publishedDetails: '已发布详情',
-    untitled: '未命名文章',
-    noContent: '当前文章还没有正文内容',
+    drawerTitle: "文章详情",
+    preview: "正文预览",
+    versionHistory: "版本记录",
+    publishedDetails: "已发布详情",
+    untitled: "未命名文章",
+    noContent: "当前文章还没有正文内容",
     editor: {
-      publish: '发布',
-      titlePlaceholder: '请输入文章标题',
+      publish: "发布",
+      titlePlaceholder: "请输入文章标题",
       leaveConfirm: {
-        title: '当前文章还没保存',
-        description: '你有未保存的改动。现在离开会丢失本次编辑内容，是否需要先保存再返回？',
-        discard: '放弃更改',
-        saveAndLeave: '保存并返回',
+        title: "当前文章还没保存",
+        description: "你有未保存的改动。现在离开会丢失本次编辑内容，是否需要先保存再返回？",
+        discard: "放弃更改",
+        saveAndLeave: "保存并返回",
       },
-      platformsTitle: '发布平台',
-      platformsHint: '这里会同步媒体管理中的平台和绑定状态，支持直接编辑文章的发布平台。',
-      coverTitle: '封面图',
-      coverHint: '默认关闭。上传后会保存为文章封面素材。',
-      coverRequired: '已选择需要封面的发布平台，封面图为必传项。',
-      coverUpload: '上传封面图',
-      coverReplace: '重新选择',
-      coverRemove: '移除封面',
-      coverSaved: '已保存封面素材',
-      coverOff: '封面图当前已关闭，开启后可上传并裁剪封面素材。',
-      coverTagRequired: '必传',
-      coverTagOptional: '可选',
-      imagePrompt: '请输入图片地址',
+      platformsTitle: "发布平台",
+      platformsHint: "这里会同步媒体管理中的平台和绑定状态，支持直接编辑文章的发布平台。",
+      coverTitle: "封面图",
+      coverHint: "默认关闭。上传后会保存为文章封面素材。",
+      coverRequired: "已选择需要封面的发布平台，封面图为必传项。",
+      coverUpload: "上传封面图",
+      coverReplace: "重新选择",
+      coverRemove: "移除封面",
+      coverSaved: "已保存封面素材",
+      coverOff: "封面图当前已关闭，开启后可上传并裁剪封面素材。",
+      coverTagRequired: "必传",
+      coverTagOptional: "可选",
+      imagePrompt: "请输入图片地址",
       tablePicker: {
-        empty: '拖拽选择表格尺寸',
-        hint: '按住拖动到边缘可继续扩展',
+        empty: "拖拽选择表格尺寸",
+        hint: "按住拖动到边缘可继续扩展",
       },
       tableMenu: {
-        addRowBefore: '上方插行',
-        addRowAfter: '下方插行',
-        deleteRow: '删除行',
-        addColBefore: '左侧插列',
-        addColAfter: '右侧插列',
-        deleteCol: '删除列',
-        alignLeft: '左对齐',
-        alignCenter: '居中',
-        alignRight: '右对齐',
-        deleteTable: '删除表格',
+        addRowBefore: "上方插行",
+        addRowAfter: "下方插行",
+        deleteRow: "删除行",
+        addColBefore: "左侧插列",
+        addColAfter: "右侧插列",
+        deleteCol: "删除列",
+        alignLeft: "左对齐",
+        alignCenter: "居中",
+        alignRight: "右对齐",
+        deleteTable: "删除表格",
       },
       imageMenu: {
-        replace: '替换图片',
-        caption: '切换图注',
-        alignLeft: '居左',
-        alignCenter: '居中',
-        alignRight: '居右',
-        resetSize: '重置大小',
-        delete: '删除图片',
+        replace: "替换图片",
+        caption: "切换图注",
+        alignLeft: "居左",
+        alignCenter: "居中",
+        alignRight: "居右",
+        resetSize: "重置大小",
+        delete: "删除图片",
       },
       imagePicker: {
-        title: '选择图片',
-        emptyTitle: '选择一张图片插入正文',
-        emptyHint: '支持从图片库选择，也支持本地上传后自动转为 WebP。',
+        title: "选择图片",
+        emptyTitle: "选择一张图片插入正文",
+        emptyHint: "支持从图片库选择，也支持本地上传后自动转为 WebP。",
       },
       aiOptimize: {
-        title: 'AI 优化',
-        subtitle: '支持连续多段选中，基于你的优化要求生成候选改写',
-        originalLabel: '当前选中文字',
-        previewLabel: '优化预览',
-        previewPlaceholder: '输入你的优化要求后，AI 会在这里实时生成候选内容。',
-        generating: '正在生成中...',
-        streamingHint: '正在根据你的要求逐步生成更合适的表达...',
-        disclaimer: 'AI 生成内容仅供参考，请确认后再替换原文。',
-        promptLabel: '优化要求',
-        promptPlaceholder: '例如：更自然一点，适合课堂导入，保留原有信息但更有感染力。',
-        generate: '开始生成',
-        regenerate: '重新生成',
-        stop: '停止',
-        replace: '替换原文',
-        close: '先不替换',
+        title: "AI 优化",
+        subtitle: "支持连续多段选中，基于你的优化要求生成候选改写",
+        originalLabel: "当前选中文字",
+        previewLabel: "优化预览",
+        previewPlaceholder: "输入你的优化要求后，AI 会在这里实时生成候选内容。",
+        generating: "正在生成中...",
+        streamingHint: "正在根据你的要求逐步生成更合适的表达...",
+        disclaimer: "AI 生成内容仅供参考，请确认后再替换原文。",
+        promptLabel: "优化要求",
+        promptPlaceholder: "例如：更自然一点，适合课堂导入，保留原有信息但更有感染力。",
+        generate: "开始生成",
+        regenerate: "重新生成",
+        stop: "停止",
+        replace: "替换原文",
+        close: "先不替换",
         messages: {
-          selectionRequired: '请先选中一段或连续多段需要优化的正文内容。',
-          promptRequired: '请先输入你的优化要求。',
-          selectionChanged: '原选区已变化，请重新选中后再替换。',
-          empty: '当前还没有可替换的 AI 内容。',
-          failed: 'AI 优化失败，请稍后重试。',
+          selectionRequired: "请先选中一段或连续多段需要优化的正文内容。",
+          promptRequired: "请先输入你的优化要求。",
+          selectionChanged: "原选区已变化，请重新选中后再替换。",
+          empty: "当前还没有可替换的 AI 内容。",
+          failed: "AI 优化失败，请稍后重试。",
         },
       },
       messages: {
-        saved: '文章已保存',
-        generating: '文章还在生成中，请稍后再编辑。',
-        locked: '只有已完成文章才可编辑。',
-        publishPending: '请先保存文章，再选择需要发布的平台。',
+        saved: "文章已保存",
+        generating: "文章还在生成中，请稍后再编辑。",
+        locked: "只有已完成文章才可编辑。",
+        publishPending: "请先保存文章，再选择需要发布的平台。",
       },
       platforms: {
-        zhihu: '知乎',
+        zhihu: "知乎",
       },
     },
     meta: {
-      templateType: '模版类型',
-      currentVersion: '当前版本',
-      source: '生成来源',
-      sourceArticle: '源文链接',
-      wordCount: '文章字数',
+      templateType: "模版类型",
+      currentVersion: "当前版本",
+      source: "生成来源",
+      sourceArticle: "源文链接",
+      wordCount: "文章字数",
     },
-    versionUntitled: '未命名版本',
+    versionUntitled: "未命名版本",
   },
   media: {
     hero: {
-      eyebrow: 'Publisher',
+      eyebrow: "Publisher",
     },
     plugin: {
-      title: '浏览器发布器',
-      ready: '插件已连接',
-      notInstalled: '插件未连接',
-      installTitle: '请先安装并打开 GEO Publisher 插件',
-      installDesc:
-        '绑定和发布都依赖浏览器本地登录态执行。插件会保存独立安装实例身份，后续即使网页关闭，也能继续运行后台检测任务。',
-      backgroundHint:
-        '插件不会直接复用网页 access token。当前实现会为每个浏览器安装实例注册独立身份，为未来后台收录检测和定时扫描预留能力。',
-      versionLabel: '插件版本',
-      installationLabel: '安装实例 ID',
-      connectedSummary: '本地已登录平台',
-      registerRequired: '插件安装实例尚未注册，请先重新检测。',
+      title: "浏览器发布器",
+      ready: "插件已连接",
+      notInstalled: "插件未连接",
+      installTitle: "请先安装并打开 GEO Publisher 插件",
+      installDesc: "绑定和发布都依赖浏览器本地登录态执行。插件会保存独立安装实例身份，后续即使网页关闭，也能继续运行后台检测任务。",
+      backgroundHint: "插件不会直接复用网页 access token。当前实现会为每个浏览器安装实例注册独立身份，为未来后台收录检测和定时扫描预留能力。",
+      versionLabel: "插件版本",
+      installationLabel: "安装实例 ID",
+      connectedSummary: "本地已登录平台",
+      registerRequired: "插件安装实例尚未注册，请先重新检测。",
     },
     actions: {
-      redetect: '重新检测',
-      bind: '去绑定',
-      rebind: '重新绑定',
-      unbind: '解绑',
+      redetect: "重新检测",
+      bind: "去绑定",
+      rebind: "重新绑定",
+      unbind: "解绑",
     },
     card: {
-      bound: '已绑定',
-      unbound: '未绑定',
-      unboundHint: '{platform} 还未绑定到当前租户，可以直接发起授权。',
-      needsAttention: '需要处理',
-      expiredHint: '该账号状态异常，建议重新绑定以恢复发布能力。',
-      localMissing: '本地未登录',
-      localMismatch: '本地账号不匹配',
-      readyHint: '当前浏览器已检测到正确账号，可以直接用于发布和后续后台检测。',
-      accountLabel: 'SaaS 账号',
-      uidLabel: '平台 UID',
-      localLabel: '本地状态',
-      localConnected: '已检测到登录态',
-      localDisconnected: '未检测到登录态',
-      updatedAt: '最近同步',
-      multiAccount: '已绑定 {count} 个账号',
-      openPlatform: '打开平台官网',
+      bound: "已绑定",
+      unbound: "未绑定",
+      unboundHint: "{platform} 还未绑定到当前租户，可以直接发起授权。",
+      needsAttention: "需要处理",
+      expiredHint: "该账号状态异常，建议重新绑定以恢复发布能力。",
+      localMissing: "本地未登录",
+      localMismatch: "本地账号不匹配",
+      readyHint: "当前浏览器已检测到正确账号，可以直接用于发布和后续后台检测。",
+      accountLabel: "SaaS 账号",
+      uidLabel: "平台 UID",
+      localLabel: "本地状态",
+      localConnected: "已检测到登录态",
+      localDisconnected: "未检测到登录态",
+      updatedAt: "最近同步",
+      multiAccount: "已绑定 {count} 个账号",
+      openPlatform: "打开平台官网",
     },
     account: {
-      localMissing: 'SaaS 已绑定，但当前浏览器未检测到对应登录态。',
-      localMismatch: '当前浏览器登录的是另一个账号，请重新授权或切换账号。',
-      ready: '已就绪',
-      selectable: '可发布',
-      unavailable: '不可用',
+      localMissing: "SaaS 已绑定，但当前浏览器未检测到对应登录态。",
+      localMismatch: "当前浏览器登录的是另一个账号，请重新授权或切换账号。",
+      ready: "已就绪",
+      selectable: "可发布",
+      unavailable: "不可用",
     },
     empty: {
-      accounts: '当前租户还没有绑定可发布账号。',
+      accounts: "当前租户还没有绑定可发布账号。",
     },
     messages: {
-      bindSuccess: '{platform} 绑定成功',
-      bindSuccessTitle: '绑定成功',
-      bindSuccessDetail: '已绑定【{platform}】的账号【{account}】',
-      bindPending: '插件尚未检测到该平台登录态，请先在插件中登录后重试。',
-      bindPendingTitle: '绑定未完成',
-      bindFailureTitle: '绑定失败',
-      unbindSuccess: '账号解绑成功',
-      unbindSuccessTitle: '解绑成功',
-      unbindFailureTitle: '解绑失败',
-      unbindConfirm: '确认解绑这个平台账号吗？解绑后将无法直接发布。',
+      bindSuccess: "{platform} 绑定成功",
+      bindSuccessTitle: "绑定成功",
+      bindSuccessDetail: "已绑定【{platform}】的账号【{account}】",
+      bindPending: "插件尚未检测到该平台登录态，请先在插件中登录后重试。",
+      bindPendingTitle: "绑定未完成",
+      bindFailureTitle: "绑定失败",
+      unbindSuccess: "账号解绑成功",
+      unbindSuccessTitle: "解绑成功",
+      unbindFailureTitle: "解绑失败",
+      unbindConfirm: "确认解绑这个平台账号吗？解绑后将无法直接发布。",
     },
     publish: {
-      title: '发布',
-      subtitle: 'Multi-platform Dispatch',
-      description: '选择当前浏览器已登录且租户已绑定的平台，插件会逐个平台执行真实发布并回写链接。',
-      platformsTitle: '发布平台',
-      platformsHint: '会优先回填文章里已选择且已绑定的账号，未绑定或本地登录态异常的平台不可选。',
-      coverTitle: '封面图',
-      coverHint: '默认关闭。点击上传后可选择或裁剪封面。',
-      coverUpload: '上传封面图',
-      coverPlaceholder: '请输入封面素材 URL（可选）',
+      title: "发布",
+      subtitle: "Multi-platform Dispatch",
+      description: "选择当前浏览器已登录且租户已绑定的平台，插件会逐个平台执行真实发布并回写链接。",
+      platformsTitle: "发布平台",
+      platformsHint: "会优先回填文章里已选择且已绑定的账号，未绑定或本地登录态异常的平台不可选。",
+      coverTitle: "封面图",
+      coverHint: "默认关闭。点击上传后可选择或裁剪封面。",
+      coverUpload: "上传封面图",
+      coverPlaceholder: "请输入封面素材 URL（可选）",
       messages: {
-        success: '已提交 {count} 个平台发布任务',
-        successTitle: '发布成功',
-        partial: '发布执行完成，成功 {success} 个，失败 {failed} 个',
-        partialTitle: '部分发布失败',
-        selectPlatform: '请先选择至少一个可发布的平台',
-        coverRequired: '已选择需要封面的发布平台，请先上传封面图',
-        failureTitle: '发布失败',
-        failureItem: '文章发布到平台【{platform}】失败【{reason}】',
-        unknownFailure: '未知错误',
+        success: "已提交 {count} 个平台发布任务",
+        successTitle: "发布成功",
+        partial: "发布执行完成，成功 {success} 个，失败 {failed} 个",
+        partialTitle: "部分发布失败",
+        selectPlatform: "请先选择至少一个可发布的平台",
+        coverRequired: "已选择需要封面的发布平台，请先上传封面图",
+        failureTitle: "发布失败",
+        failureItem: "文章发布到平台【{platform}】失败【{reason}】",
+        unknownFailure: "未知错误",
       },
     },
     records: {
-      tabTitle: '已发布详情',
-      platform: '已发布平台',
-      status: '发布状态',
-      publishedAt: '发布时间',
-      link: '已发布链接',
-      open: '打开',
-      copy: '复制',
-      empty: '暂无发布记录',
-      linkEmpty: '当前记录还没有可用链接',
-      clientManageHint: '仅有管理页面，请在客户端打开管理页面查看',
-      copySuccess: '链接已复制',
+      tabTitle: "已发布详情",
+      platform: "已发布平台",
+      status: "发布状态",
+      publishedAt: "发布时间",
+      link: "已发布链接",
+      open: "打开",
+      copy: "复制",
+      empty: "暂无发布记录",
+      linkEmpty: "当前记录还没有可用链接",
+      clientManageHint: "仅有管理页面，请在客户端打开管理页面查看",
+      copySuccess: "链接已复制",
     },
   },
   coverPicker: {
-    title: '选择封面图',
+    title: "选择封面图",
     tabs: {
-      local: '正文/本地上传',
-      ai: 'AI封图',
+      local: "正文/本地上传",
+      ai: "AI封图",
     },
-    dropzoneTitle: '上传图片',
-    dropzoneHint: '支持 PNG、JPG、GIF、WebP，上传前会在前端转为 WebP，最大 10MB',
-    previewTitle: '封面裁剪预览',
-    previewHintLocked: '已选择需要固定封面比例的平台，确认时会按当前平台要求输出封面。',
-    previewHintFree: '当前不限制封面比例，可直接上传原图；如需调整也可拖拽缩放后再确认。',
-    requirementsTitle: '平台封面要求',
-    requirementsHint:
-      '会根据当前选中的发布平台自动切换要求，微信公众号、百家号和懂车帝为强制上传。',
-    recommendedRatio: '推荐比例',
-    recommendedSize: '推荐尺寸',
-    required: '必传',
-    optional: '可选',
-    zoom: '缩放',
-    fileLabel: '当前封面',
-    emptyTitle: '暂未选择发布平台',
-    emptyPlatforms: '选择发布平台后，这里会自动显示每个平台的封面要求。',
-    emptyHint: '支持 PNG、JPG、JPEG、GIF、WebP、BMP、SVG、AVIF，最大 10MB',
-    aiTitle: 'AI 封图即将开放',
-    aiHint: '当前先支持本地上传和裁剪，后续会把 AI 生成封面接进这里。',
+    dropzoneTitle: "上传图片",
+    dropzoneHint: "支持 PNG、JPG、GIF、WebP，上传前会在前端转为 WebP，最大 10MB",
+    previewTitle: "封面裁剪预览",
+    previewHintLocked: "已选择需要固定封面比例的平台，确认时会按当前平台要求输出封面。",
+    previewHintFree: "当前不限制封面比例，可直接上传原图；如需调整也可拖拽缩放后再确认。",
+    requirementsTitle: "平台封面要求",
+    requirementsHint: "会根据当前选中的发布平台自动切换要求，微信公众号、百家号和懂车帝为强制上传。",
+    recommendedRatio: "推荐比例",
+    recommendedSize: "推荐尺寸",
+    required: "必传",
+    optional: "可选",
+    zoom: "缩放",
+    fileLabel: "当前封面",
+    emptyTitle: "暂未选择发布平台",
+    emptyPlatforms: "选择发布平台后，这里会自动显示每个平台的封面要求。",
+    emptyHint: "支持 PNG、JPG、JPEG、GIF、WebP、BMP、SVG、AVIF，最大 10MB",
+    aiTitle: "AI 封图即将开放",
+    aiHint: "当前先支持本地上传和裁剪，后续会把 AI 生成封面接进这里。",
     actions: {
-      upload: '本地上传',
-      reset: '重置取景',
-      remove: '移除封面',
+      upload: "本地上传",
+      reset: "重置取景",
+      remove: "移除封面",
     },
     notes: {
-      required: '该平台当前发布链路要求必须携带封面图，未上传时不能提交发布。',
-      optional: '该平台当前接入已支持独立封面，会复用当前裁剪结果完成发布。',
-      unsupported: '该平台当前接入暂不消费独立封面，会沿用正文内容或平台默认样式。',
+      required: "该平台当前发布链路要求必须携带封面图，未上传时不能提交发布。",
+      optional: "该平台当前接入已支持独立封面，会复用当前裁剪结果完成发布。",
+      unsupported: "该平台当前接入暂不消费独立封面，会沿用正文内容或平台默认样式。",
     },
     messages: {
-      invalidType: '仅支持 PNG、JPG、JPEG、GIF、WebP、BMP、SVG、AVIF 图片',
-      tooLarge: '图片不能超过 10MB',
-      missingImage: '请先选择一张封面图',
-      missingArticle: '文章信息还没准备好，请刷新后重试',
-      imageLoadFailed: '封面图加载失败，请重新选择图片',
+      invalidType: "仅支持 PNG、JPG、JPEG、GIF、WebP、BMP、SVG、AVIF 图片",
+      tooLarge: "图片不能超过 10MB",
+      missingImage: "请先选择一张封面图",
+      missingArticle: "文章信息还没准备好，请刷新后重试",
+      imageLoadFailed: "封面图加载失败，请重新选择图片",
     },
   },
   brands: {
-    eyebrow: 'Brand Library',
-    title: '品牌词库',
-    description: '通过品牌名称和品牌相关信息维护关键词、问题集和竞品资产。',
-    railTitle: '品牌库',
-    selectBrand: '选择品牌后即可继续维护关键词和问题集。',
-    newBrand: '新建品牌',
-    editBrand: '编辑品牌',
-    deleteBrand: '删除品牌',
+    title: "品牌词库",
+    description: "通过品牌名称和品牌相关信息维护关键词、问题集和竞品资产。",
+    railTitle: "品牌库",
+    selectBrand: "选择品牌后即可继续维护关键词和问题集。",
+    newBrand: "新建品牌",
+    editBrand: "编辑品牌",
+    deleteBrand: "删除品牌",
     tabs: {
-      keywords: '关键词',
-      competitors: '竞品库',
+      keywords: "关键词",
+      competitors: "竞品库",
     },
     quota: {
-      plan: '当前套餐',
-      planHint: '品牌词库额度会按套餐实时生效。',
-      brands: '品牌公司',
-      brandsHint: '免费版默认 1 个，付费版默认 2 个。',
-      keywords: '关键词总量',
-      keywordsHint: '当前用户可绑定的关键词总数。',
-      questions: '每个关键词问题数',
-      questionsHint: '单个关键词下最多可维护的问题数。',
+      plan: "当前套餐",
+      planHint: "品牌词库额度会按套餐实时生效。",
+      brands: "品牌公司",
+      brandsHint: "免费版默认 1 个，付费版默认 2 个。",
+      keywords: "关键词总量",
+      keywordsHint: "当前用户可绑定的关键词总数。",
+      questions: "每个关键词问题数",
+      questionsHint: "单个关键词下最多可维护的问题数。",
     },
     meta: {
-      keywordCount: '{count} 个关键词',
-      questionCount: '{count} 个问题',
-      brandKeywordCount: '当前品牌已绑定 {count} 个关键词',
-      globalKeywordUsage: '总关键词已用 {used} / {total}',
-      keywordQuestionUsage: '问题 {used} / {total}',
+      keywordCount: "{count} 个关键词",
+      questionCount: "{count} 个问题",
+      brandKeywordCount: "当前品牌已绑定 {count} 个关键词",
+      globalKeywordUsage: "总关键词已用 {used} / {total}",
+      keywordQuestionUsage: "问题 {used} / {total}",
     },
     sections: {
-      keywords: '关键词',
-      questions: '问题集',
-      competitors: '竞品库',
-      versions: '版本记录',
+      keywords: "关键词",
+      questions: "问题集",
+      competitors: "竞品库",
+      versions: "版本记录",
     },
     actions: {
-      newKeyword: '新建关键词',
-      newQuestion: '新建问题',
-      newCompetitor: '新建竞品',
-      viewVersions: '查看版本',
+      newKeyword: "新建关键词",
+      newQuestion: "新建问题",
+      newCompetitor: "新建竞品",
+      viewVersions: "查看版本",
     },
     empty: {
-      brands: '还没有品牌数据，先创建一个品牌。',
-      questions: '当前关键词下暂无问题集。',
-      competitors: '当前品牌下暂无竞品数据。',
+      brands: "还没有品牌数据，先创建一个品牌。",
+      questions: "当前关键词下暂无问题集。",
+      competitors: "当前品牌下暂无竞品数据。",
     },
     form: {
-      brandName: '品牌名称',
-      brandWebsite: '公司官网（选填）',
-      brandDescription: '品牌描述',
-      keywordName: '关键词名称',
-      questionText: '问题内容',
-      competitorName: '竞品名称',
-      competitorWebsite: '竞品官网',
-      competitorDescription: '竞品描述',
-      competitorLines: '重点产品线',
-      competitorLinesHint: '使用英文逗号分隔多个产品线',
+      brandName: "品牌名称",
+      brandWebsite: "公司官网（选填）",
+      brandDescription: "品牌描述",
+      keywordName: "关键词名称",
+      questionText: "问题内容",
+      competitorName: "竞品名称",
+      competitorWebsite: "竞品官网",
+      competitorDescription: "竞品描述",
+      competitorLines: "重点产品线",
+      competitorLinesHint: "使用英文逗号分隔多个产品线",
     },
     messages: {
-      createBrand: '品牌已创建',
-      updateBrand: '品牌已更新',
-      deleteBrand: '品牌已删除',
-      createKeyword: '关键词已创建',
-      updateKeyword: '关键词已更新',
-      deleteKeyword: '关键词已删除',
-      createQuestion: '问题已创建',
-      updateQuestion: '问题已更新',
-      deleteQuestion: '问题已删除',
-      createCompetitor: '竞品已创建',
-      updateCompetitor: '竞品已更新',
-      deleteCompetitor: '竞品已删除',
-      chooseBrand: '请先选择品牌',
-      chooseKeyword: '请先选择关键词',
-      brandLimitReached: '当前套餐最多可绑定 {limit} 个品牌公司',
-      keywordLimitReached: '当前账号最多可绑定 {limit} 个关键词',
-      questionLimitReached: '当前关键词下最多可维护 {limit} 个问题',
+      createBrand: "品牌已创建",
+      updateBrand: "品牌已更新",
+      deleteBrand: "品牌已删除",
+      createKeyword: "关键词已创建",
+      updateKeyword: "关键词已更新",
+      deleteKeyword: "关键词已删除",
+      createQuestion: "问题已创建",
+      updateQuestion: "问题已更新",
+      deleteQuestion: "问题已删除",
+      createCompetitor: "竞品已创建",
+      updateCompetitor: "竞品已更新",
+      deleteCompetitor: "竞品已删除",
+      chooseBrand: "请先选择品牌",
+      chooseKeyword: "请先选择关键词",
+      brandLimitReached: "当前套餐最多可绑定 {limit} 个品牌公司",
+      keywordLimitReached: "当前账号最多可绑定 {limit} 个关键词",
+      questionLimitReached: "当前关键词下最多可维护 {limit} 个问题",
     },
   },
   custom: {
-    eyebrow: 'Custom Generation',
-    title: '自定义生成',
-    description: '基于自定义 Prompt 规则灵活生成文章，支持即时与定时任务。',
+    eyebrow: "Custom Generation",
+    title: "自定义生成",
+    description: "基于自定义 Prompt 规则灵活生成文章，支持即时与定时任务。",
     cards: {
-      instantTitle: '即时生成内容',
-      instantDesc: '快速自定义内容创作任务',
-      scheduleTitle: '定时计划生成',
-      scheduleDesc: '配置自动化内容生成计划',
+      instantTitle: "即时生成内容",
+      instantDesc: "快速自定义内容创作任务",
+      scheduleTitle: "定时计划生成",
+      scheduleDesc: "配置自动化内容生成计划",
     },
     tabs: {
-      articles: '生成文章',
-      instantTasks: '即时任务',
-      scheduleTasks: '定时任务',
-      promptRules: 'Prompt 规则',
+      articles: "生成文章",
+      instantTasks: "即时任务",
+      scheduleTasks: "定时任务",
+      promptRules: "Prompt 规则",
     },
     promptRule: {
-      name: '规则名称',
-      namePlaceholder: '请输入 Prompt 名称',
-      content: 'Prompt 内容',
-      scene: '适用场景',
-      tone: '默认语气',
-      wordCount: '默认字数',
-      wordCountHint:
-        '主流大语言模型单次长文本输出普遍存在限制，为了保证生成内容质量，最大建议字数不超过 6000 字。',
-      status: '状态',
-      articleCount: '关联文章数',
-      createTitle: '新建 Prompt 规则',
-      editTitle: '编辑 Prompt 规则',
-      deleteConfirm: '确定删除该规则？',
-      enabled: '启用',
-      disabled: '停用',
-      ungrouped: '未分组',
-      groupPlaceholder: '请选择 Prompt 分组',
-      contentPlaceholder: '输入 Prompt 内容，支持变量占位符',
+      name: "规则名称",
+      namePlaceholder: "请输入 Prompt 名称",
+      content: "Prompt 内容",
+      scene: "适用场景",
+      tone: "默认语气",
+      wordCount: "默认字数",
+      wordCountHint: "主流大语言模型单次长文本输出普遍存在限制，为了保证生成内容质量，最大建议字数不超过 6000 字。",
+      status: "状态",
+      articleCount: "关联文章数",
+      createTitle: "新建 Prompt 规则",
+      editTitle: "编辑 Prompt 规则",
+      deleteConfirm: "确定删除该规则？",
+      enabled: "启用",
+      disabled: "停用",
+      ungrouped: "未分组",
+      groupPlaceholder: "请选择 Prompt 分组",
+      contentPlaceholder: "输入 Prompt 内容，支持变量占位符",
     },
     task: {
-      basicSection: '基础信息',
-      advancedSection: '高级设置',
-      name: '任务名称',
-      namePlaceholder: '简单易懂的名称更方便区分哦',
-      prompt: '选择Prompt',
-      promptPlaceholder: '请选择Prompt',
-      createPrompt: '新建Prompt',
-      platforms: '发布平台',
-      platformsHint: '同步媒体管理中的平台和绑定状态，可不选，支持多选',
-      platformConnected: '已绑定',
-      platformUnauthorized: '未授权',
-      platformEmptyTitle: '暂无发布平台',
-      platformEmptyHint: '当前还没有可用的平台数据，请先检查媒体管理配置。',
-      publishSection: '发布设置',
-      autoPublish: '是否自动发布',
-      autoPublishHint: '开启后，定时生成完成的文章会使用指定媒体账号自动进入发布队列。',
-      publishAccounts: '媒体账号',
-      publishAccountsHint: '请选择具体账号。客户端离线时会先排队，上线后继续发布。',
-      publishAccountEmptyTitle: '暂无可选媒体账号',
-      publishAccountEmptyHint: '请先在桌面端绑定媒体账号，再回到这里配置自动发布。',
-      cover: '封面图',
-      coverHint: '请保证封面清晰、美观和完整',
-      scheduleCoverHint: '默认不设置封面。需要时可单独指定，生成完成后会写入文章并用于发布。',
-      scheduleCoverRequiredHint: '已选账号的平台要求发布封面，请先选择封面图。',
-      coverUpload: '上传封面图',
-      coverUploadHint: '当前仅做本地预览',
-      scheduleCoverUploadHint: '从本地或素材库选择',
-      scheduleTime: '定时生成文章',
-      scheduleEveryDay: '每天',
-      enableWebSearch: '生成文章联网搜索',
-      generateCount: '生成篇数',
-      submit: '创建任务',
+      basicSection: "基础信息",
+      advancedSection: "高级设置",
+      name: "任务名称",
+      namePlaceholder: "简单易懂的名称更方便区分哦",
+      prompt: "选择Prompt",
+      promptPlaceholder: "请选择Prompt",
+      createPrompt: "新建Prompt",
+      platforms: "发布平台",
+      platformsHint: "同步媒体管理中的平台和绑定状态，可不选，支持多选",
+      platformConnected: "已绑定",
+      platformUnauthorized: "未授权",
+      platformEmptyTitle: "暂无发布平台",
+      platformEmptyHint: "当前还没有可用的平台数据，请先检查媒体管理配置。",
+      publishSection: "发布设置",
+      autoPublish: "是否自动发布",
+      autoPublishHint: "开启后，定时生成完成的文章会使用指定媒体账号自动进入发布队列。",
+      publishAccounts: "媒体账号",
+      publishAccountsHint: "请选择具体账号。客户端离线时会先排队，上线后继续发布。",
+      publishAccountEmptyTitle: "暂无可选媒体账号",
+      publishAccountEmptyHint: "请先在桌面端绑定媒体账号，再回到这里配置自动发布。",
+      cover: "封面图",
+      coverHint: "请保证封面清晰、美观和完整",
+      scheduleCoverHint: "默认不设置封面。需要时可单独指定，生成完成后会写入文章并用于发布。",
+      scheduleCoverRequiredHint: "已选账号的平台要求发布封面，请先选择封面图。",
+      coverUpload: "上传封面图",
+      coverUploadHint: "当前仅做本地预览",
+      scheduleCoverUploadHint: "从本地或素材库选择",
+      scheduleTime: "定时生成文章",
+      scheduleEveryDay: "每天",
+      enableWebSearch: "生成文章联网搜索",
+      generateCount: "生成篇数",
+      submit: "创建任务",
     },
     group: {
-      title: '规则分组',
-      createTitle: '新建分组',
-      editTitle: '编辑分组',
-      deleteConfirm: '删除分组后，该组下的规则将移至未分组。确定删除？',
-      name: '分组名称',
-      allRules: '全部规则',
+      title: "规则分组",
+      createTitle: "新建分组",
+      editTitle: "编辑分组",
+      deleteConfirm: "删除分组后，该组下的规则将移至未分组。确定删除？",
+      name: "分组名称",
+      allRules: "全部规则",
     },
     schedule: {
-      name: '任务名称',
-      rule: '关联规则',
-      cron: '执行频率',
-      autoPublishPlatforms: '自动发布平台',
-      autoPublish: '自动发布',
-      manualPublish: '手动发布',
-      nextRun: '下次执行',
-      startAt: '开始时间',
-      endAt: '结束时间',
-      brand: '关联品牌',
-      createTitle: '新建定时任务',
-      editTitle: '编辑定时任务',
-      deleteConfirm: '确定删除该定时任务？',
-      enabled: '已启用',
-      disabled: '已停用',
+      name: "任务名称",
+      rule: "关联规则",
+      cron: "执行频率",
+      autoPublishPlatforms: "自动发布平台",
+      autoPublish: "自动发布",
+      manualPublish: "手动发布",
+      nextRun: "下次执行",
+      startAt: "开始时间",
+      endAt: "结束时间",
+      brand: "关联品牌",
+      createTitle: "新建定时任务",
+      editTitle: "编辑定时任务",
+      deleteConfirm: "确定删除该定时任务？",
+      enabled: "已启用",
+      disabled: "已停用",
       cronOptions: {
-        daily: '每天一次',
-        twiceDaily: '每天两次',
-        weekly: '每周一次',
-        custom: '自定义 Cron',
+        daily: "每天一次",
+        twiceDaily: "每天两次",
+        weekly: "每周一次",
+        custom: "自定义 Cron",
       },
     },
     instant: {
-      title: '即时生成',
-      createTitle: '新建即时任务',
-      selectRule: '选择 Prompt 规则',
-      selectBrand: '选择品牌',
-      selectPlatform: '目标平台',
-      submit: '立即生成',
-      extraParams: '额外参数',
-      name: '任务名称',
-      executionStatus: '执行状态',
-      executionTime: '执行时间',
-      createdTime: '创建时间',
-      empty: '还未创建即时任务，暂无相关数据~',
+      title: "即时生成",
+      createTitle: "新建即时任务",
+      selectRule: "选择 Prompt 规则",
+      selectBrand: "选择品牌",
+      selectPlatform: "目标平台",
+      submit: "立即生成",
+      extraParams: "额外参数",
+      name: "任务名称",
+      executionStatus: "执行状态",
+      executionTime: "执行时间",
+      createdTime: "创建时间",
+      empty: "还未创建即时任务，暂无相关数据~",
     },
     filters: {
-      promptRule: 'Prompt 规则',
-      publishStatus: '发布状态',
-      generateStatus: '生成状态',
-      title: '标题',
-      generateTime: '生成时间',
-      status: '状态',
-      name: '名称',
-      namePlaceholder: '请输入任务名称内搜索',
-      createdTime: '创建时间',
+      promptRule: "Prompt 规则",
+      publishStatus: "发布状态",
+      generateStatus: "生成状态",
+      title: "标题",
+      generateTime: "生成时间",
+      status: "状态",
+      name: "名称",
+      namePlaceholder: "请输入任务名称内搜索",
+      createdTime: "创建时间",
     },
     article: {
-      titleColumn: '文章标题',
-      titleGenerating: '标题生成中',
+      titleColumn: "文章标题",
+      titleGenerating: "标题生成中",
     },
     messages: {
-      ruleCreated: '规则创建成功',
-      ruleUpdated: '规则更新成功',
-      ruleDeleted: '规则删除成功',
-      ruleEnabled: '规则已启用',
-      ruleDisabled: '规则已停用',
-      groupCreated: '分组创建成功',
-      groupUpdated: '分组更新成功',
-      groupDeleted: '分组删除成功',
-      scheduleCreated: '定时任务创建成功',
-      scheduleUpdated: '定时任务更新成功',
-      scheduleDeleted: '定时任务删除成功',
-      scheduleEnabled: '定时任务已启用',
-      scheduleDisabled: '定时任务已停用',
-      generateSubmitted: '生成任务已提交',
-      missingTaskName: '请先填写任务名称',
-      missingPromptRule: '请先选择 Prompt',
-      invalidGenerateCount: '生成篇数至少为 1',
-      invalidScheduleTime: '请选择有效的定时时间',
-      missingPublishAccounts: '开启自动发布后，请至少选择一个媒体账号',
-      missingScheduleCover: '已选媒体账号的平台要求封面图，请先设置封面',
-      missingPromptName: '请先填写 Prompt 名称',
-      missingPromptContent: '请先填写 Prompt 内容',
+      ruleCreated: "规则创建成功",
+      ruleUpdated: "规则更新成功",
+      ruleDeleted: "规则删除成功",
+      ruleEnabled: "规则已启用",
+      ruleDisabled: "规则已停用",
+      groupCreated: "分组创建成功",
+      groupUpdated: "分组更新成功",
+      groupDeleted: "分组删除成功",
+      scheduleCreated: "定时任务创建成功",
+      scheduleUpdated: "定时任务更新成功",
+      scheduleDeleted: "定时任务删除成功",
+      scheduleEnabled: "定时任务已启用",
+      scheduleDisabled: "定时任务已停用",
+      generateSubmitted: "生成任务已提交",
+      missingTaskName: "请先填写任务名称",
+      missingPromptRule: "请先选择 Prompt",
+      invalidGenerateCount: "生成篇数至少为 1",
+      invalidScheduleTime: "请选择有效的定时时间",
+      missingPublishAccounts: "开启自动发布后，请至少选择一个媒体账号",
+      missingScheduleCover: "已选媒体账号的平台要求封面图，请先设置封面",
+      missingPromptName: "请先填写 Prompt 名称",
+      missingPromptContent: "请先填写 Prompt 内容",
     },
   },
   featureStub: {
-    eyebrow: 'Feature Placeholder',
-    currentStatus: '当前状态',
-    nextPriority: '下一步重点',
-    integrationStrategy: '联调策略',
-    currentStatusText: '页面壳子已经接入主导航和鉴权守卫，后续可以直接在这里落真实交互。',
-    integrationStrategyText:
-      '保持与 tenant-api 的响应结构对齐，先做真实读接口，再逐个补写接口 and 表单流。',
+    eyebrow: "Feature Placeholder",
+    currentStatus: "当前状态",
+    nextPriority: "下一步重点",
+    integrationStrategy: "联调策略",
+    currentStatusText: "页面壳子已经接入主导航和鉴权守卫，后续可以直接在这里落真实交互。",
+    integrationStrategyText: "保持与 tenant-api 的响应结构对齐，先做真实读接口，再逐个补写接口 and 表单流。",
   },
   images: {
-    title: '图片管理',
-    description: '管理图片素材库，支持分组、引用分析与封面引用。',
-    uploadBtn: '上传图片',
-    folders: '文件夹',
-    uncategorized: '未分类',
-    searchPlaceholder: '搜索图片名称...',
-    newFolder: '新建文件夹',
-    folderName: '文件夹名称',
-    rename: '重命名',
-    move: '移动',
-    deleteImage: '删除图片',
-    deleteFolder: '删除文件夹',
-    forceDelete: '仍然删除',
-    confirmDeleteTitle: '确认删除',
-    confirmDeleteImage: '确认删除这张图片吗？该操作不可撤销。',
-    confirmDeleteFolder: '确认删除文件夹 {name} 吗？',
-    imageInUse: '图片正在使用中',
-    folderHasRefs:
-      '该文件夹内有 {count} 张图片，这些图片可能已被文章引用。删除文件夹会一并删除这些图片，且不可恢复。',
-    refArticleBody: '正文引用',
-    refArticleCover: '封面引用',
-    storageUsage: '存储容量',
-    storageUsageDetail: '{used} / {total} ({percent}%)',
-    quotaExceeded: '存储空间已满，请清理后再上传。',
-    uploadSuccess: '图片上传成功',
-    uploadReusedSuccess: '素材库已有相同图片，已直接复用',
-    uploadFailed: '图片上传失败',
-    deleteSuccess: '删除成功',
-    folderCreated: '文件夹创建成功',
-    folderRenamed: '文件夹重命名成功',
-    folderDeleted: '文件夹已删除',
-    imageRenamed: '图片重命名成功',
-    imageMoved: '图片移动成功',
-    noImages: '暂无图片，点击上传开始添加',
-    allFolders: '全部文件夹',
-    selectImage: '选择图片',
-    libraryTab: '素材库',
+    title: "图片管理",
+    description: "管理图片素材库，支持分组、引用分析与封面引用。",
+    uploadBtn: "上传图片",
+    folders: "文件夹",
+    uncategorized: "未分类",
+    searchPlaceholder: "搜索图片名称...",
+    newFolder: "新建文件夹",
+    folderName: "文件夹名称",
+    rename: "重命名",
+    move: "移动",
+    deleteImage: "删除图片",
+    deleteFolder: "删除文件夹",
+    forceDelete: "仍然删除",
+    confirmDeleteTitle: "确认删除",
+    confirmDeleteImage: "确认删除这张图片吗？该操作不可撤销。",
+    confirmDeleteFolder: "确认删除文件夹 {name} 吗？",
+    imageInUse: "图片正在使用中",
+    folderHasRefs: "该文件夹内有 {count} 张图片，这些图片可能已被文章引用。删除文件夹会一并删除这些图片，且不可恢复。",
+    refArticleBody: "正文引用",
+    refArticleCover: "封面引用",
+    storageUsage: "存储容量",
+    storageUsageDetail: "{used} / {total} ({percent}%)",
+    quotaExceeded: "存储空间已满，请清理后再上传。",
+    uploadSuccess: "图片上传成功",
+    uploadReusedSuccess: "素材库已有相同图片，已直接复用",
+    uploadFailed: "图片上传失败",
+    deleteSuccess: "删除成功",
+    folderCreated: "文件夹创建成功",
+    folderRenamed: "文件夹重命名成功",
+    folderDeleted: "文件夹已删除",
+    imageRenamed: "图片重命名成功",
+    imageMoved: "图片移动成功",
+    noImages: "暂无图片，点击上传开始添加",
+    allFolders: "全部文件夹",
+    selectImage: "选择图片",
+    libraryTab: "素材库",
   },
-} as const
+} as const;
 
-export default zhCN
+export default zhCN;
diff --git a/apps/admin-web/src/lib/api.ts b/apps/admin-web/src/lib/api.ts
index c6655d1..6b33a44 100644
--- a/apps/admin-web/src/lib/api.ts
+++ b/apps/admin-web/src/lib/api.ts
@@ -16,6 +16,13 @@ import type {
   CreateArticleRequest,
   CreateKolPackageRequest,
   CreateKolPromptRequest,
+  CreateAckRequest,
+  ComplianceAckRecord,
+  ComplianceCheckArticleRequest,
+  ComplianceCheckPlainRequest,
+  ComplianceCheckResult,
+  ComplianceManualReview,
+  ComplianceRuntimeStatus,
   CreatePluginSessionRequest,
   CreatePluginSessionResponse,
   CreatePublishBatchRequest,
@@ -1081,6 +1088,53 @@ export const publishJobsApi = {
   },
 }
 
+export const complianceApi = {
+  runtimeStatus() {
+    return apiClient.get<ComplianceRuntimeStatus>('/api/tenant/compliance/runtime-status')
+  },
+  checkPlain(payload: ComplianceCheckPlainRequest) {
+    return apiClient.post<ComplianceCheckResult, ComplianceCheckPlainRequest>(
+      '/api/tenant/compliance/check',
+      payload,
+    )
+  },
+  checkArticle(articleId: number, payload: ComplianceCheckArticleRequest) {
+    return apiClient.post<ComplianceCheckResult, ComplianceCheckArticleRequest>(
+      `/api/tenant/articles/${articleId}/compliance/check`,
+      payload,
+    )
+  },
+  latestArticleCheck(articleId: number) {
+    return apiClient.get<ComplianceCheckResult>(`/api/tenant/articles/${articleId}/compliance/latest`)
+  },
+  createAck(recordId: number, payload: CreateAckRequest) {
+    return apiClient.post<ComplianceAckRecord, CreateAckRequest>(
+      `/api/tenant/compliance/check-records/${recordId}/ack`,
+      payload,
+    )
+  },
+  submitManualReview(articleId: number, payload: { check_record_id: number; note: string }) {
+    return apiClient.post<ComplianceManualReview, typeof payload>(
+      `/api/tenant/articles/${articleId}/compliance/manual-reviews`,
+      payload,
+    )
+  },
+  latestManualReview(articleId: number, articleVersionId?: number | null) {
+    return apiClient.get<ComplianceManualReview>(
+      `/api/tenant/articles/${articleId}/compliance/manual-reviews/latest`,
+      {
+        params: articleVersionId ? { article_version_id: articleVersionId } : undefined,
+      },
+    )
+  },
+  cancelManualReview(articleId: number, reviewId: number, payload: { reason?: string }) {
+    return apiClient.post<ComplianceManualReview, typeof payload>(
+      `/api/tenant/articles/${articleId}/compliance/manual-reviews/${reviewId}/cancel`,
+      payload,
+    )
+  },
+}
+
 function removedMediaApi<T>(action: string): Promise<T> {
   return Promise.reject(
     new ApiClientError({
diff --git a/apps/admin-web/src/lib/display.ts b/apps/admin-web/src/lib/display.ts
index 09a1bf3..4623677 100644
--- a/apps/admin-web/src/lib/display.ts
+++ b/apps/admin-web/src/lib/display.ts
@@ -20,7 +20,8 @@ const publishStatusMap: Record<string, { label: string; color: string }> = {
   published: { label: 'status.publish.published', color: 'success' },
   publish_success: { label: 'status.publish.publish_success', color: 'success' },
   publish_failed: { label: 'status.publish.publish_failed', color: 'error' },
-  pending_review: { label: 'status.publish.failed', color: 'error' },
+  pending_review: { label: 'status.publish.pending_review', color: 'warning' },
+  blocked_by_compliance: { label: 'status.publish.blocked_by_compliance', color: 'error' },
 }
 
 export function formatDateTime(value?: string | null, pattern = 'YYYY-MM-DD HH:mm'): string {
diff --git a/apps/admin-web/src/lib/errors.ts b/apps/admin-web/src/lib/errors.ts
index e07e819..a01796d 100644
--- a/apps/admin-web/src/lib/errors.ts
+++ b/apps/admin-web/src/lib/errors.ts
@@ -61,6 +61,14 @@ const errorMessageMap: Record<string, string> = {
   desktop_account_not_found: '所选桌面账号不存在，请刷新后重试',
   desktop_client_offline: '当前登录账号的桌面客户端未在线，请先打开 desktop-client',
   desktop_publish_job_store_unavailable: '发布队列暂时不可用，请稍后重试',
+  compliance_blocked: '内容合规检测已阻断本次发布',
+  compliance_needs_ack: '内容合规检测需要确认风险后才能发布',
+  compliance_ack_mismatch: '合规确认已失效，请重新检测并确认',
+  compliance_engine_unavailable: '合规检测服务暂时不可用',
+  compliance_manual_review_pending: '该版本正在等待运营审阅',
+  compliance_manual_review_rejected: '该版本已被运营驳回，请修改后重新保存',
+  compliance_manual_review_terminal: '该版本已有终态审阅结果',
+  compliance_manual_review_not_cancellable: '当前审阅状态不能撤回',
   desktop_media_api_removed: '旧版媒体接口已下线，请刷新页面后重试',
   publisher_plugin_timeout: '浏览器插件响应超时，请刷新当前页面后重试',
   publisher_plugin_empty_response: '浏览器插件未返回数据，请刷新当前页面后重试',
diff --git a/apps/admin-web/src/views/ArticleEditorView.vue b/apps/admin-web/src/views/ArticleEditorView.vue
index 4490be6..fca6fd2 100644
--- a/apps/admin-web/src/views/ArticleEditorView.vue
+++ b/apps/admin-web/src/views/ArticleEditorView.vue
@@ -1,5 +1,11 @@
 <script setup lang="ts">
-import { LeftOutlined } from '@ant-design/icons-vue'
+import {
+  CloseOutlined,
+  LeftOutlined,
+  SafetyCertificateOutlined,
+  SearchOutlined,
+} from '@ant-design/icons-vue'
+import type { ComplianceCheckResult, ComplianceViolation } from '@geo/shared-types'
 import { useMutation, useQuery, useQueryClient } from '@tanstack/vue-query'
 import { message } from 'ant-design-vue'
 import { computed, onBeforeUnmount, onMounted, ref, watch } from 'vue'
@@ -8,9 +14,13 @@ import { useRoute, useRouter } from 'vue-router'
 
 import ArticleEditorCanvas from '@/components/ArticleEditorCanvas.vue'
 import PublishArticleModal from '@/components/PublishArticleModal.vue'
-import { articlesApi } from '@/lib/api'
+import { articlesApi, complianceApi } from '@/lib/api'
 import { formatError } from '@/lib/errors'
 
+type EditorCanvasPublic = InstanceType<typeof ArticleEditorCanvas> & {
+  scrollToText?: (text: string) => boolean
+}
+
 const route = useRoute()
 const router = useRouter()
 const queryClient = useQueryClient()
@@ -23,6 +33,9 @@ const initialTitle = ref('')
 const initialMarkdown = ref('')
 const leaveModalOpen = ref(false)
 const publishModalOpen = ref(false)
+const compliancePanelOpen = ref(false)
+const editorComplianceResult = ref<ComplianceCheckResult | null>(null)
+const editorCanvasRef = ref<EditorCanvasPublic | null>(null)
 
 const detailQuery = useQuery({
   queryKey: computed(() => ['articles', 'detail', articleId.value]),
@@ -91,6 +104,18 @@ const saveDisabled = computed(
     title.value.trim() === '' ||
     !hasChanges.value,
 )
+const complianceCheckLoading = ref(false)
+const editorComplianceViolations = computed(() =>
+  compliancePanelOpen.value ? (editorComplianceResult.value?.violations ?? []) : [],
+)
+const complianceGroups = computed(() => groupViolations(editorComplianceResult.value?.violations ?? []))
+const complianceElapsedLabel = computed(() => {
+  const duration = editorComplianceResult.value?.duration_ms ?? 0
+  return duration > 0 ? `${duration} ms` : '< 1 ms'
+})
+const complianceDecisionTone = computed(() =>
+  (editorComplianceResult.value?.hit_count ?? 0) > 0 ? 'warning' : 'success',
+)
 const leaveSaveDisabled = computed(
   () => editorLocked.value || saveMutation.isPending.value || title.value.trim() === '',
 )
@@ -146,6 +171,120 @@ async function handlePublish(): Promise<void> {
   publishModalOpen.value = true
 }
 
+async function handleComplianceCheck(): Promise<void> {
+  if (editorLocked.value || complianceCheckLoading.value) {
+    return
+  }
+
+  if (hasChanges.value && !saveMutation.isPending.value) {
+    try {
+      await saveMutation.mutateAsync()
+    } catch {
+      return
+    }
+  }
+
+  complianceCheckLoading.value = true
+  try {
+    const currentDetail = (await detailQuery.refetch()).data ?? detail.value
+    const versionId = currentDetail?.current_version_id ?? null
+    const result = await complianceApi.checkArticle(articleId.value, {
+      article_version_id: versionId,
+      title: title.value.trim(),
+      plaintext: markdown.value,
+      target_platforms: [],
+      trigger_source: 'editor_manual',
+    })
+    editorComplianceResult.value = result
+    compliancePanelOpen.value = true
+    if (result.hit_count > 0) {
+      message.warning(`发现 ${result.hit_count} 条合规风险`)
+    } else {
+      message.success('合规检测通过')
+    }
+  } catch (error) {
+    message.error(formatError(error))
+  } finally {
+    complianceCheckLoading.value = false
+  }
+}
+
+function closeCompliancePanel(): void {
+  compliancePanelOpen.value = false
+}
+
+function focusViolation(violation: ComplianceViolation): void {
+  const ok = editorCanvasRef.value?.scrollToText?.(violation.matched_text)
+  if (!ok) {
+    message.info('未能在当前编辑器内容中定位该命中片段')
+  }
+}
+
+function groupViolations(violations: ComplianceViolation[]) {
+  const groups = new Map<string, ComplianceViolation[]>()
+  for (const violation of violations) {
+    const key = violation.platform_code || 'all'
+    const list = groups.get(key) ?? []
+    list.push(violation)
+    groups.set(key, list)
+  }
+  return Array.from(groups.entries()).map(([key, items]) => ({ key, items }))
+}
+
+function violationGroupTitle(key: string): string {
+  return key === 'all' ? '全部平台共用规则' : `平台规则：${key}`
+}
+
+function violationKey(violation: ComplianceViolation): string {
+  return [
+    violation.id || 0,
+    violation.source,
+    violation.platform_code ?? 'all',
+    violation.start_offset,
+    violation.end_offset,
+    violation.matched_text,
+  ].join(':')
+}
+
+function levelColor(level: ComplianceViolation['level']): string {
+  switch (level) {
+    case 'block':
+      return 'red'
+    case 'high':
+      return 'orange'
+    case 'medium':
+      return 'gold'
+    default:
+      return 'blue'
+  }
+}
+
+function levelLabel(level: ComplianceViolation['level']): string {
+  switch (level) {
+    case 'block':
+      return '重点风险'
+    case 'high':
+      return '高风险'
+    case 'medium':
+      return '中风险'
+    default:
+      return '提示'
+  }
+}
+
+function sourceLabel(source: ComplianceViolation['source']): string {
+  switch (source) {
+    case 'dict':
+      return '词库'
+    case 'regex':
+      return '正则'
+    case 'llm':
+      return 'LLM'
+    default:
+      return source
+  }
+}
+
 async function uploadEditorImage(file: File): Promise<string> {
   const result = await articlesApi.uploadImage(articleId.value, file)
   return result.url
@@ -287,6 +426,14 @@ onBeforeUnmount(() => {
       </button>
 
       <div class="article-editor-view__actions">
+        <a-button
+          :disabled="editorLocked"
+          :loading="complianceCheckLoading"
+          @click="handleComplianceCheck"
+        >
+          <template #icon><SafetyCertificateOutlined /></template>
+          合规检测
+        </a-button>
         <a-button
           :disabled="saveDisabled"
           :loading="saveMutation.isPending.value"
@@ -314,17 +461,101 @@ onBeforeUnmount(() => {
         show-icon
         :message="t('article.editor.messages.locked')"
       />
-      <div class="article-editor-view__layout">
+      <div
+        class="article-editor-view__layout"
+        :class="{ 'article-editor-view__layout--with-compliance': compliancePanelOpen }"
+      >
         <section class="article-editor-view__main">
           <ArticleEditorCanvas
+            ref="editorCanvasRef"
             :key="String(articleId)"
             v-model:title="title"
             v-model="markdown"
             :article-id="articleId"
             :disabled="editorLocked"
             :upload-image="uploadEditorImage"
+            :compliance-violations="editorComplianceViolations"
           />
         </section>
+
+        <aside
+          v-if="compliancePanelOpen"
+          class="article-editor-view__compliance-panel"
+          aria-label="内容合规检测"
+        >
+          <div class="article-editor-view__compliance-panel-head">
+            <h2>内容合规检测</h2>
+            <a-button
+              type="text"
+              shape="circle"
+              aria-label="关闭合规检测"
+              @click="closeCompliancePanel"
+            >
+              <template #icon><CloseOutlined /></template>
+            </a-button>
+          </div>
+
+          <template v-if="editorComplianceResult">
+            <a-alert
+              show-icon
+              :type="complianceDecisionTone"
+              :message="
+                editorComplianceResult.hit_count > 0
+                  ? `发现 ${editorComplianceResult.hit_count} 条风险，仅供编辑参考`
+                  : '当前版本未发现合规风险'
+              "
+              :description="
+                editorComplianceResult.truncated
+                  ? '命中明细已达到保存上限，请优先处理高风险词条后重新检测。'
+                  : undefined
+              "
+            />
+
+            <div class="article-editor-view__compliance-meta">
+              <a-tag :color="editorComplianceResult.hit_count > 0 ? 'orange' : 'green'">
+                {{ editorComplianceResult.hit_count > 0 ? '发现风险' : '检测通过' }}
+              </a-tag>
+              <span>耗时 {{ complianceElapsedLabel }}</span>
+            </div>
+
+            <a-empty v-if="!complianceGroups.length" description="没有命中项" />
+
+            <section
+              v-for="group in complianceGroups"
+              v-else
+              :key="group.key"
+              class="article-editor-view__violation-group"
+            >
+              <h3>{{ violationGroupTitle(group.key) }}</h3>
+              <article
+                v-for="violation in group.items"
+                :key="violationKey(violation)"
+                class="article-editor-view__violation"
+              >
+                <div class="article-editor-view__violation-head">
+                  <a-tag :color="levelColor(violation.level)">
+                    {{ levelLabel(violation.level) }}
+                  </a-tag>
+                  <a-tag>{{ sourceLabel(violation.source) }}</a-tag>
+                  <strong>{{ violation.matched_text }}</strong>
+                </div>
+                <p v-if="violation.dictionary_name || violation.term_pattern">
+                  {{ violation.dictionary_name || '词库规则' }}
+                  <span v-if="violation.term_pattern"> · {{ violation.term_pattern }}</span>
+                </p>
+                <p v-if="violation.hint">{{ violation.hint }}</p>
+                <div class="article-editor-view__violation-actions">
+                  <a-button size="small" @click="focusViolation(violation)">
+                    <template #icon><SearchOutlined /></template>
+                    定位
+                  </a-button>
+                </div>
+              </article>
+            </section>
+          </template>
+
+          <a-empty v-else description="还没有检测结果" />
+        </aside>
       </div>
     </template>
 
@@ -433,14 +664,112 @@ onBeforeUnmount(() => {
   border-radius: 20px;
 }
 
+.article-editor-view__layout {
+  display: grid;
+  grid-template-columns: minmax(0, 1fr);
+  gap: 16px;
+  min-width: 0;
+}
+
+.article-editor-view__layout--with-compliance {
+  grid-template-columns: minmax(0, 1fr) minmax(360px, 420px);
+  align-items: stretch;
+}
+
+.article-editor-view__compliance-panel {
+  display: flex;
+  flex-direction: column;
+  min-width: 0;
+  height: calc(100vh - 180px);
+  overflow-y: auto;
+  padding: 18px;
+  border: 1px solid rgba(216, 225, 237, 0.9);
+  border-radius: 24px;
+  background: rgba(255, 255, 255, 0.94);
+  box-shadow: 0 18px 40px rgba(15, 23, 42, 0.05);
+  backdrop-filter: blur(14px);
+}
+
+.article-editor-view__compliance-panel-head {
+  position: sticky;
+  top: -18px;
+  z-index: 1;
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 12px;
+  margin: -18px -18px 16px;
+  padding: 16px 16px 14px 18px;
+  border-bottom: 1px solid #eef2f8;
+  background: rgba(255, 255, 255, 0.96);
+  backdrop-filter: blur(12px);
+}
+
+.article-editor-view__compliance-panel-head h2 {
+  margin: 0;
+  color: #111827;
+  font-size: 16px;
+  font-weight: 800;
+}
+
 .article-editor-view__leave-copy {
   margin: 0;
   color: #475467;
   line-height: 1.75;
 }
 
-.article-editor-view__layout {
-  min-width: 0;
+.article-editor-view__compliance-meta {
+  display: flex;
+  flex-wrap: wrap;
+  gap: 10px;
+  align-items: center;
+  margin: 16px 0 18px;
+  color: #667085;
+  font-size: 12px;
+}
+
+.article-editor-view__violation-group {
+  display: flex;
+  flex-direction: column;
+  gap: 12px;
+  margin-top: 18px;
+}
+
+.article-editor-view__violation-group h3 {
+  margin: 0;
+  color: #111827;
+  font-size: 14px;
+  font-weight: 700;
+}
+
+.article-editor-view__violation {
+  padding: 14px;
+  border: 1px solid #e6edf5;
+  border-radius: 12px;
+  background: #fbfcff;
+}
+
+.article-editor-view__violation-head {
+  display: flex;
+  flex-wrap: wrap;
+  gap: 8px;
+  align-items: center;
+}
+
+.article-editor-view__violation-head strong {
+  color: #111827;
+}
+
+.article-editor-view__violation p {
+  margin: 10px 0 0;
+  color: #667085;
+  line-height: 1.65;
+}
+
+.article-editor-view__violation-actions {
+  display: flex;
+  gap: 8px;
+  margin-top: 12px;
 }
 
 .article-editor-view__main {
@@ -449,6 +778,22 @@ onBeforeUnmount(() => {
   gap: 18px;
 }
 
+@media (max-width: 1200px) {
+  .article-editor-view__layout--with-compliance {
+    grid-template-columns: minmax(0, 1fr) minmax(320px, 360px);
+  }
+}
+
+@media (max-width: 960px) {
+  .article-editor-view__layout--with-compliance {
+    grid-template-columns: minmax(0, 1fr);
+  }
+
+  .article-editor-view__compliance-panel {
+    height: min(560px, calc(100vh - 180px));
+  }
+}
+
 @media (max-width: 768px) {
   .article-editor-view__topbar {
     flex-direction: column;
diff --git a/apps/desktop-client/src/main/adapters/deepseek.test.ts b/apps/desktop-client/src/main/adapters/deepseek.test.ts
index f658b18..f0d8e99 100644
--- a/apps/desktop-client/src/main/adapters/deepseek.test.ts
+++ b/apps/desktop-client/src/main/adapters/deepseek.test.ts
@@ -1,13 +1,7 @@
-import { describe, expect, it, vi } from 'vitest'
+import { describe, expect, it } from "vitest";
 
-vi.mock('electron/main', () => ({
-  ipcMain: {
-    on: vi.fn(),
-  },
-}))
-
-import { __deepseekTestUtils } from './deepseek'
-import { getMonitorAdapter } from './index'
+import { __deepseekTestUtils } from "./deepseek";
+import { getMonitorAdapter } from "./index";
 
 const {
   extractQuestionText,
@@ -20,275 +14,263 @@ const {
   isObservationComplete,
   isDeepSeekToggleSelected,
   isDeepSeekWebpagesTriggerText,
-} = __deepseekTestUtils
+} = __deepseekTestUtils;
 
-describe('deepseek adapter helpers', () => {
-  it('extracts question text from monitoring payload', () => {
-    expect(extractQuestionText({ question_text: 'DeepSeek 怎么看 GEO？' })).toBe(
-      'DeepSeek 怎么看 GEO？',
-    )
-  })
+describe("deepseek adapter helpers", () => {
+  it("extracts question text from monitoring payload", () => {
+    expect(extractQuestionText({ question_text: "DeepSeek 怎么看 GEO？" })).toBe("DeepSeek 怎么看 GEO？");
+  });
 
-  it('dedupes sources by normalized url without hash fragments', () => {
+  it("dedupes sources by normalized url without hash fragments", () => {
     const items = dedupeSourceItems([
       {
-        url: 'https://example.com/a#top',
-        title: 'A',
-        normalized_url: 'https://example.com/a#top',
+        url: "https://example.com/a#top",
+        title: "A",
+        normalized_url: "https://example.com/a#top",
       },
       {
-        url: 'https://example.com/a#bottom',
-        title: 'A later',
-        normalized_url: 'https://example.com/a#bottom',
+        url: "https://example.com/a#bottom",
+        title: "A later",
+        normalized_url: "https://example.com/a#bottom",
       },
-    ])
+    ]);
 
-    expect(items).toHaveLength(1)
-    expect(items[0]?.normalized_url).toBe('https://example.com/a')
-    expect(items[0]?.title).toBe('A')
-  })
+    expect(items).toHaveLength(1);
+    expect(items[0]?.normalized_url).toBe("https://example.com/a");
+    expect(items[0]?.title).toBe("A");
+  });
 
-  it('treats revealed search cards as citation sources and inline links as content citation candidates', () => {
+  it("treats revealed search cards as citation sources and inline links as content citation candidates", () => {
     const classified = classifyDeepseekSources({
       inlineLinks: [
         {
-          url: 'https://example.com/citation',
-          title: 'Citation',
-          normalized_url: 'https://example.com/citation',
+          url: "https://example.com/citation",
+          title: "Citation",
+          normalized_url: "https://example.com/citation",
         },
       ],
       sourcePanelLinks: [],
       searchPanelLinks: [
         {
-          url: 'https://example.com/search',
-          title: 'Search',
-          normalized_url: 'https://example.com/search',
+          url: "https://example.com/search",
+          title: "Search",
+          normalized_url: "https://example.com/search",
         },
       ],
-    })
+    });
 
-    expect(classified.citations).toHaveLength(1)
-    expect(classified.inlineCitationCandidates).toHaveLength(1)
-    expect(classified.searchResults).toHaveLength(1)
-    expect(classified.citations[0]?.url).toBe('https://example.com/search')
-    expect(classified.inlineCitationCandidates[0]?.url).toBe('https://example.com/citation')
-    expect(classified.searchResults[0]?.url).toBe('https://example.com/search')
-  })
+    expect(classified.citations).toHaveLength(1);
+    expect(classified.inlineCitationCandidates).toHaveLength(1);
+    expect(classified.searchResults).toHaveLength(1);
+    expect(classified.citations[0]?.url).toBe("https://example.com/search");
+    expect(classified.inlineCitationCandidates[0]?.url).toBe("https://example.com/citation");
+    expect(classified.searchResults[0]?.url).toBe("https://example.com/search");
+  });
 
-  it('enriches numeric inline citations with source metadata from revealed search cards', () => {
+  it("enriches numeric inline citations with source metadata from revealed search cards", () => {
     const classified = classifyDeepseekSources({
       inlineLinks: [
         {
-          url: 'https://example.com/citation',
+          url: "https://example.com/citation",
           title: null,
-          text: '-1',
+          text: "-1",
           siteName: null,
-          kind: 'inline',
+          kind: "inline",
         },
       ],
       sourcePanelLinks: [],
       searchPanelLinks: [
         {
-          url: 'https://example.com/citation',
-          title: 'DeepSeek source article',
-          text: 'Snippet',
-          siteName: 'Example',
-          kind: 'search',
+          url: "https://example.com/citation",
+          title: "DeepSeek source article",
+          text: "Snippet",
+          siteName: "Example",
+          kind: "search",
         },
       ],
-    })
+    });
 
-    expect(classified.inlineCitationCandidates).toHaveLength(1)
-    expect(classified.inlineCitationCandidates[0]?.title).toBe('DeepSeek source article')
-    expect(classified.inlineCitationCandidates[0]?.site_name).toBe('Example')
-    expect(classified.citations).toHaveLength(1)
-    expect(classified.searchResults).toHaveLength(1)
-  })
+    expect(classified.inlineCitationCandidates).toHaveLength(1);
+    expect(classified.inlineCitationCandidates[0]?.title).toBe("DeepSeek source article");
+    expect(classified.inlineCitationCandidates[0]?.site_name).toBe("Example");
+    expect(classified.citations).toHaveLength(1);
+    expect(classified.searchResults).toHaveLength(1);
+  });
 
-  it('keeps reasoning search pages as citation sources separate from answer content citations', () => {
+  it("keeps reasoning search pages as citation sources separate from answer content citations", () => {
     const classified = classifyDeepseekSources({
       inlineLinks: [
         {
-          url: 'https://example.com/body-citation',
-          title: 'Answer body citation',
-          text: '[15]',
-          siteName: 'Body Site',
-          kind: 'inline',
+          url: "https://example.com/body-citation",
+          title: "Answer body citation",
+          text: "[15]",
+          siteName: "Body Site",
+          kind: "inline",
         },
       ],
       sourcePanelLinks: [],
       searchPanelLinks: [
         {
-          url: 'https://example.com/reasoning-search',
-          title: 'Reasoning searched page',
-          text: '浏览页面',
-          siteName: 'Search Site',
-          kind: 'search',
+          url: "https://example.com/reasoning-search",
+          title: "Reasoning searched page",
+          text: "浏览页面",
+          siteName: "Search Site",
+          kind: "search",
         },
       ],
-    })
+    });
 
     expect(classified.inlineCitationCandidates.map((item) => item.url)).toEqual([
-      'https://example.com/body-citation',
-    ])
+      "https://example.com/body-citation",
+    ]);
     expect(classified.citations.map((item) => item.url)).toEqual([
-      'https://example.com/reasoning-search',
-    ])
+      "https://example.com/reasoning-search",
+    ]);
     expect(classified.searchResults.map((item) => item.url)).toEqual([
-      'https://example.com/reasoning-search',
-    ])
-  })
+      "https://example.com/reasoning-search",
+    ]);
+  });
 
-  it('retains all revealed DeepSeek search results instead of truncating after 32 items', () => {
+  it("retains all revealed DeepSeek search results instead of truncating after 32 items", () => {
     const searchPanelLinks = Array.from({ length: 78 }, (_, index) => ({
       url: `https://example.com/search-${index + 1}`,
       title: `Search ${index + 1}`,
       text: `Snippet ${index + 1}`,
-      siteName: 'Example',
-      kind: 'search' as const,
-    }))
+      siteName: "Example",
+      kind: "search" as const,
+    }));
 
     const classified = classifyDeepseekSources({
       inlineLinks: [],
       sourcePanelLinks: [],
       searchPanelLinks,
-    })
+    });
 
-    expect(classified.citations).toHaveLength(78)
-    expect(classified.searchResults).toHaveLength(78)
-  })
+    expect(classified.citations).toHaveLength(78);
+    expect(classified.searchResults).toHaveLength(78);
+  });
 
-  it('merges revealed sidebar search links with the snapshot search links by normalized url', () => {
+  it("merges revealed sidebar search links with the snapshot search links by normalized url", () => {
     const merged = mergeDeepSeekRawSourceLinks(
       [
         {
-          url: 'https://example.com/report#top',
+          url: "https://example.com/report#top",
           title: null,
-          text: 'Visible title',
+          text: "Visible title",
           siteName: null,
-          kind: 'search',
+          kind: "search",
         },
       ],
       [
         {
-          url: 'https://example.com/report#bottom',
-          title: 'Merged title',
-          text: 'Merged snippet',
-          siteName: 'Example',
-          kind: 'search',
+          url: "https://example.com/report#bottom",
+          title: "Merged title",
+          text: "Merged snippet",
+          siteName: "Example",
+          kind: "search",
         },
         {
-          url: 'https://example.com/extra',
-          title: 'Extra result',
-          text: 'Extra snippet',
-          siteName: 'Example',
-          kind: 'search',
+          url: "https://example.com/extra",
+          title: "Extra result",
+          text: "Extra snippet",
+          siteName: "Example",
+          kind: "search",
         },
       ],
-    )
+    );
 
-    expect(merged).toHaveLength(2)
-    expect(merged[0]).toEqual(
-      expect.objectContaining({
-        url: 'https://example.com/report',
-        title: 'Merged title',
-        text: 'Visible title',
-        siteName: 'Example',
-      }),
-    )
-    expect(merged[1]?.url).toBe('https://example.com/extra')
-  })
+    expect(merged).toHaveLength(2);
+    expect(merged[0]).toEqual(expect.objectContaining({
+      url: "https://example.com/report",
+      title: "Merged title",
+      text: "Visible title",
+      siteName: "Example",
+    }));
+    expect(merged[1]?.url).toBe("https://example.com/extra");
+  });
 
-  it('normalizes deepseek raw source links into monitoring source items', () => {
+  it("normalizes deepseek raw source links into monitoring source items", () => {
     const item = buildSourceItem({
-      url: 'https://example.com/report#cite-1',
+      url: "https://example.com/report#cite-1",
       title: null,
-      text: 'DeepSeek source title',
-      siteName: 'Example',
-      kind: 'source',
-    })
+      text: "DeepSeek source title",
+      siteName: "Example",
+      kind: "source",
+    });
 
-    expect(item).toEqual(
-      expect.objectContaining({
-        url: 'https://example.com/report',
-        normalized_url: 'https://example.com/report',
-        title: 'DeepSeek source title',
-        site_name: 'Example',
-        host: 'example.com',
-      }),
-    )
-  })
+    expect(item).toEqual(expect.objectContaining({
+      url: "https://example.com/report",
+      normalized_url: "https://example.com/report",
+      title: "DeepSeek source title",
+      site_name: "Example",
+      host: "example.com",
+    }));
+  });
 
-  it('unwraps DeepSeek redirect URLs before storing source items', () => {
+  it("unwraps DeepSeek redirect URLs before storing source items", () => {
     const item = buildSourceItem({
-      url: 'https://chat.deepseek.com/api/redirect?url=https%3A%2F%2Fexample.com%2Fsource%23ref',
-      title: 'Redirected source',
+      url: "https://chat.deepseek.com/api/redirect?url=https%3A%2F%2Fexample.com%2Fsource%23ref",
+      title: "Redirected source",
       text: null,
       siteName: null,
-      kind: 'search',
-    })
+      kind: "search",
+    });
 
-    expect(item).toEqual(
-      expect.objectContaining({
-        url: 'https://example.com/source',
-        normalized_url: 'https://example.com/source',
-        host: 'example.com',
-      }),
-    )
-  })
+    expect(item).toEqual(expect.objectContaining({
+      url: "https://example.com/source",
+      normalized_url: "https://example.com/source",
+      host: "example.com",
+    }));
+  });
 
-  it('does not use numeric citation markers as source titles', () => {
+  it("does not use numeric citation markers as source titles", () => {
     const item = buildSourceItem({
-      url: 'https://example.com/report#cite-1',
+      url: "https://example.com/report#cite-1",
       title: null,
-      text: '-1',
+      text: "-1",
       siteName: null,
-      kind: 'inline',
-    })
+      kind: "inline",
+    });
 
-    expect(item?.title).toBeNull()
-    expect(item?.site_name).toBe('example.com')
-  })
+    expect(item?.title).toBeNull();
+    expect(item?.site_name).toBe("example.com");
+  });
 
-  it('treats a stable answer as complete even without citations', () => {
-    expect(
-      isObservationComplete({
-        answer: '这是最终答案',
-        busy: false,
-        loginRequired: false,
-        challengeRequired: false,
-        signature: 'sig-1',
-      }),
-    ).toBe(true)
-  })
+  it("treats a stable answer as complete even without citations", () => {
+    expect(isObservationComplete({
+      answer: "这是最终答案",
+      busy: false,
+      loginRequired: false,
+      challengeRequired: false,
+      signature: "sig-1",
+    })).toBe(true);
+  });
 
-  it('ignores source-logo loading placeholders when computing busy signals', () => {
-    expect(
-      detectDeepSeekBusySignals({
-        bodyText: '已阅读 10 个网页',
-        descriptors: [
-          'site_logo_loading site_logo_fallback',
-          'site_logo_loading site_logo_fallback',
-        ],
-      }),
-    ).toEqual([])
-  })
+  it("ignores source-logo loading placeholders when computing busy signals", () => {
+    expect(detectDeepSeekBusySignals({
+      bodyText: "已阅读 10 个网页",
+      descriptors: [
+        "site_logo_loading site_logo_fallback",
+        "site_logo_loading site_logo_fallback",
+      ],
+    })).toEqual([]);
+  });
 
-  it('recognizes deepseek toggle selected state from class names', () => {
-    expect(isDeepSeekToggleSelected('ds-toggle-button ds-toggle-button--selected')).toBe(true)
-    expect(isDeepSeekToggleSelected('ds-toggle-button')).toBe(false)
-  })
+  it("recognizes deepseek toggle selected state from class names", () => {
+    expect(isDeepSeekToggleSelected("ds-toggle-button ds-toggle-button--selected")).toBe(true);
+    expect(isDeepSeekToggleSelected("ds-toggle-button")).toBe(false);
+  });
 
-  it('only treats the bottom 网页 pill as the DeepSeek source trigger', () => {
-    expect(isDeepSeekWebpagesTriggerText('57 个网页')).toBe(true)
-    expect(isDeepSeekWebpagesTriggerText('已阅读 57 个网页')).toBe(true)
-    expect(isDeepSeekWebpagesTriggerText('搜索到 39 个网页')).toBe(false)
-  })
+  it("only treats the bottom 网页 pill as the DeepSeek source trigger", () => {
+    expect(isDeepSeekWebpagesTriggerText("57 个网页")).toBe(true);
+    expect(isDeepSeekWebpagesTriggerText("已阅读 57 个网页")).toBe(true);
+    expect(isDeepSeekWebpagesTriggerText("搜索到 39 个网页")).toBe(false);
+  });
 
-  it('normalizes DeepSeek model labels without mistaking search toggles for models', () => {
+  it("normalizes DeepSeek model labels without mistaking search toggles for models", () => {
     const snapshot = {
-      url: 'https://chat.deepseek.com/',
-      title: 'DeepSeek',
+      url: "https://chat.deepseek.com/",
+      title: "DeepSeek",
       loginRequired: false,
       loginReason: null,
       challengeRequired: false,
@@ -297,84 +279,74 @@ describe('deepseek adapter helpers', () => {
       busySignals: [],
       composerValue: null,
       sendDisabled: false,
-      answer: 'Final answer',
-      answerText: 'Final answer',
+      answer: "Final answer",
+      answerText: "Final answer",
       reasoning: null,
-      signature: 'sig-1',
-      currentModelLabel: '深度思考 (R1)',
+      signature: "sig-1",
+      currentModelLabel: "深度思考 (R1)",
       providerRequestID: null,
       requestID: null,
       inlineLinks: [],
       sourcePanelLinks: [],
       searchPanelLinks: [],
-    }
+    };
     const sources = {
       citations: [],
       inlineCitationCandidates: [],
       searchResults: [],
-    }
+    };
 
-    const r1Payload = buildDeepSeekPayload(snapshot, sources, 'Final answer')
-    const searchPayload = buildDeepSeekPayload(
-      {
-        ...snapshot,
-        currentModelLabel: '联网搜索',
-      },
-      sources,
-      'Final answer',
-    )
+    const r1Payload = buildDeepSeekPayload(snapshot, sources, "Final answer");
+    const searchPayload = buildDeepSeekPayload({
+      ...snapshot,
+      currentModelLabel: "联网搜索",
+    }, sources, "Final answer");
 
-    expect(r1Payload.provider_model).toBe('DeepSeek-R1')
-    expect(searchPayload.provider_model).toBeNull()
-  })
+    expect(r1Payload.provider_model).toBe("DeepSeek");
+    expect(searchPayload.provider_model).toBeNull();
+  });
 
-  it('builds json-safe payloads with null placeholders instead of undefined', () => {
-    const payload = buildDeepSeekPayload(
-      {
-        url: 'https://chat.deepseek.com/',
-        title: 'DeepSeek',
-        loginRequired: false,
-        loginReason: null,
-        challengeRequired: false,
-        challengeReason: null,
-        busy: false,
-        busySignals: [],
-        composerValue: null,
-        sendDisabled: false,
-        answer: 'Final answer',
-        answerText: 'Final answer',
-        reasoning: null,
-        signature: 'sig-1',
-        currentModelLabel: null,
-        providerRequestID: null,
-        requestID: null,
-        inlineLinks: [],
-        sourcePanelLinks: [],
-        searchPanelLinks: [],
-      },
-      {
-        citations: [],
-        inlineCitationCandidates: [],
-        searchResults: [],
-      },
-      'Final answer',
-    )
+  it("builds json-safe payloads with null placeholders instead of undefined", () => {
+    const payload = buildDeepSeekPayload({
+      url: "https://chat.deepseek.com/",
+      title: "DeepSeek",
+      loginRequired: false,
+      loginReason: null,
+      challengeRequired: false,
+      challengeReason: null,
+      busy: false,
+      busySignals: [],
+      composerValue: null,
+      sendDisabled: false,
+      answer: "Final answer",
+      answerText: "Final answer",
+      reasoning: null,
+      signature: "sig-1",
+      currentModelLabel: null,
+      providerRequestID: null,
+      requestID: null,
+      inlineLinks: [],
+      sourcePanelLinks: [],
+      searchPanelLinks: [],
+    }, {
+      citations: [],
+      inlineCitationCandidates: [],
+      searchResults: [],
+    }, "Final answer");
 
-    expect(payload.provider_model).toBeNull()
-    expect(payload.provider_request_id).toBeNull()
-    expect(payload.request_id).toBeNull()
-    expect((payload.raw_response_json as Record<string, unknown>).provider_model).toBeNull()
-    expect((payload.raw_response_json as Record<string, unknown>).provider_request_id).toBeNull()
-    expect((payload.raw_response_json as Record<string, unknown>).request_id).toBeNull()
-    expect((payload.raw_response_json as Record<string, unknown>).signature).toBe('sig-1')
-    expect(
-      (payload.raw_response_json as Record<string, unknown>).inline_citation_candidates,
-    ).toEqual([])
-  })
-})
+    expect(payload.provider_model).toBeNull();
+    expect(payload.provider_request_id).toBeNull();
+    expect(payload.request_id).toBeNull();
+    expect((payload.raw_response_json as Record<string, unknown>).provider_model).toBeNull();
+    expect((payload.raw_response_json as Record<string, unknown>).provider_request_id).toBeNull();
+    expect((payload.raw_response_json as Record<string, unknown>).request_id).toBeNull();
+    expect((payload.raw_response_json as Record<string, unknown>).signature).toBe("sig-1");
+    expect((payload.raw_response_json as Record<string, unknown>).inline_citation_candidates).toEqual([]);
+  });
+});
 
-describe('monitor adapter registry', () => {
-  it('registers deepseek as a monitor adapter', () => {
-    expect(getMonitorAdapter('deepseek')?.provider).toBe('deepseek')
-  })
-})
+describe("monitor adapter registry", () => {
+  it("registers deepseek as a monitor adapter", () => {
+    expect(getMonitorAdapter("deepseek")?.provider).toBe("deepseek");
+  });
+});
diff --git a/apps/desktop-client/src/renderer/views/PublishManagementView.vue b/apps/desktop-client/src/renderer/views/PublishManagementView.vue
index af5b47a..17df328 100644
--- a/apps/desktop-client/src/renderer/views/PublishManagementView.vue
+++ b/apps/desktop-client/src/renderer/views/PublishManagementView.vue
@@ -47,6 +47,8 @@ interface PublishTaskItem {
   publishType: string | null
   fallbackReason: string | null
   errorMessage: string | null
+  complianceBlockedRecordId: number | null
+  complianceBlockedAt: number | null
 }
 
 let refreshTimer: ReturnType<typeof setInterval> | null = null
@@ -84,7 +86,14 @@ function statusLabel(status: DesktopTaskInfo['status']): string {
   return map[status]
 }
 
+function isComplianceBlockedTask(task: PublishTaskItem): boolean {
+  return task.status === 'aborted' && task.complianceBlockedRecordId !== null
+}
+
 function statusLabelForTask(task: PublishTaskItem): string {
+  if (isComplianceBlockedTask(task)) {
+    return '合规阻断'
+  }
   if (task.status === 'succeeded' && task.publishType === 'draft') {
     return '已存草稿'
   }
@@ -193,6 +202,67 @@ function normalizeTaskErrorMessage(message: string | null): string | null {
   return normalizePublisherErrorMessage(normalized) ?? normalized
 }
 
+function complianceLevelLabel(level: string | null): string {
+  const normalized = level?.trim().toLowerCase()
+  switch (normalized) {
+    case 'block':
+      return '阻断'
+    case 'high':
+      return '高风险'
+    case 'medium':
+      return '中风险'
+    case 'info':
+      return '提示'
+    default:
+      return '风险'
+  }
+}
+
+function summarizeComplianceBlockedReason(raw: string | null): string | null {
+  const normalized = extractString(raw)
+  if (!normalized) {
+    return null
+  }
+
+  try {
+    const parsed = JSON.parse(normalized) as unknown
+    if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed)) {
+      return normalized
+    }
+    const record = parsed as Record<string, unknown>
+    const manualStatus = typeof record.manual_review_status === 'string' ? record.manual_review_status : ''
+    if (manualStatus === 'pending') {
+      return '文章版本正在等待运营人工审阅，旧定时任务已停止派发。'
+    }
+    if (manualStatus === 'rejected') {
+      return '文章版本已被运营驳回，请修改文章后重新发布。'
+    }
+
+    const hitCount = typeof record.hit_count === 'number' ? record.hit_count : null
+    const highestLevel =
+      typeof record.highest_level === 'string' ? complianceLevelLabel(record.highest_level) : '风险'
+    const violations = Array.isArray(record.violations) ? record.violations : []
+    const matchedTerms = violations
+      .map((item) => {
+        if (!item || typeof item !== 'object' || Array.isArray(item)) {
+          return null
+        }
+        const violation = item as Record<string, unknown>
+        return typeof violation.matched_text === 'string' ? violation.matched_text.trim() : null
+      })
+      .filter((item): item is string => Boolean(item))
+      .slice(0, 3)
+
+    const hitPart =
+      hitCount !== null && hitCount > 0 ? `命中 ${hitCount} 条${highestLevel}规则` : `命中${highestLevel}规则`
+    return matchedTerms.length > 0
+      ? `${hitPart}：${matchedTerms.join('、')}`
+      : `${hitPart}，请修改文章后重新发布。`
+  } catch {
+    return normalized === 'compliance_blocked' ? null : normalized
+  }
+}
+
 function inlineErrorPreview(message: string): string {
   const compact = message.replace(/\s+/g, ' ').trim()
   const maxLength = INLINE_ERROR_HEAD_CHARS + INLINE_ERROR_TAIL_CHARS + 3
@@ -207,6 +277,9 @@ function summaryForTask(
   publishType: string | null = null,
   fallbackReason: string | null = null,
 ): string {
+  if (status === 'aborted' && fallbackReason === 'compliance_blocked') {
+    return '定时发布前的合规重检拦截了本次任务，请修改文章后重新发布。'
+  }
   switch (status) {
     case 'queued':
       return '任务已进入队列，待前面的发布任务完成后继续执行。'
@@ -435,7 +508,17 @@ const publishTasks = computed<PublishTaskItem[]>(() =>
     const result = task.result ?? {}
     const taskError = task.error ?? {}
     const publishType = extractString(result.publish_type)
-    const fallbackReason = extractString(result.fallback_reason)
+    const complianceBlockedRecordId =
+      task.compliance_blocked_record_id ??
+      extractNumber(taskError.record_id) ??
+      extractNumber(taskError.check_record_id)
+    const complianceBlockedReason = summarizeComplianceBlockedReason(
+      task.compliance_blocked_reason ?? extractString(taskError.detail),
+    )
+    const fallbackReason =
+      task.publish_job_status === 'blocked_by_compliance'
+        ? 'compliance_blocked'
+        : extractString(result.fallback_reason)
     const nestedContentRef =
       payload.content_ref &&
       typeof payload.content_ref === 'object' &&
@@ -468,10 +551,13 @@ const publishTasks = computed<PublishTaskItem[]>(() =>
       publishType,
       fallbackReason,
       errorMessage: normalizeTaskErrorMessage(
-        extractString(taskError.message) ??
+        complianceBlockedReason ??
+          extractString(taskError.message) ??
           extractString(taskError.detail) ??
           extractString(taskError.code),
       ),
+      complianceBlockedRecordId,
+      complianceBlockedAt: task.compliance_blocked_at ? parseTimestamp(task.compliance_blocked_at) : null,
     }
   }),
 )
@@ -651,6 +737,14 @@ const tableScroll = { x: 1080 } as const
                 <span v-else class="cell-sub strong-text">{{ record.summary }}</span>
                 <span class="cell-sub meta-footer">
                   <span class="attempt-chip">尝试 {{ record.attempts }} 次</span>
+                  <template v-if="record.complianceBlockedRecordId">
+                    <span class="meta-divider">·</span>
+                    <span>合规记录 #{{ record.complianceBlockedRecordId }}</span>
+                  </template>
+                  <template v-if="record.complianceBlockedAt">
+                    <span class="meta-divider">·</span>
+                    <span>{{ formatDateTime(record.complianceBlockedAt) }} 拦截</span>
+                  </template>
                   <template v-if="record.leaseExpiresAt">
                     <span class="meta-divider">·</span>
                     <span>租约 {{ formatRelativeTime(record.leaseExpiresAt) }} 到期</span>
diff --git a/apps/desktop-client/src/shared/publisher-errors.ts b/apps/desktop-client/src/shared/publisher-errors.ts
index 759c194..e89d695 100644
--- a/apps/desktop-client/src/shared/publisher-errors.ts
+++ b/apps/desktop-client/src/shared/publisher-errors.ts
@@ -125,6 +125,9 @@ export function normalizeWeixinGzhPublishErrorMessage(
 }
 
 export function normalizePublisherErrorMessage(message: string | null | undefined): string | null {
+  if (message === 'compliance_blocked') {
+    return '内容合规检测已阻断本次发布，请修改文章后重新发布。'
+  }
   const qiehaoMessage = normalizeQiehaoPublishErrorMessage(message)
   const wangyihaoMessage = normalizeWangyihaoPublishErrorMessage(qiehaoMessage)
   const loginMessage = normalizePublisherLoginErrorMessage(wangyihaoMessage)
diff --git a/apps/ops-web/package.json b/apps/ops-web/package.json
index 211cb22..18227c3 100644
--- a/apps/ops-web/package.json
+++ b/apps/ops-web/package.json
@@ -11,6 +11,7 @@
   },
   "dependencies": {
     "@ant-design/icons-vue": "^7.0.1",
+    "@geo/shared-types": "workspace:*",
     "@tanstack/vue-query": "^5.96.0",
     "@vueuse/core": "^14.2.1",
     "ant-design-vue": "^4.2.6",
diff --git a/apps/ops-web/src/components/compliance/PlatformScopePicker.vue b/apps/ops-web/src/components/compliance/PlatformScopePicker.vue
new file mode 100644
index 0000000..f604771
--- /dev/null
+++ b/apps/ops-web/src/components/compliance/PlatformScopePicker.vue
@@ -0,0 +1,61 @@
+<template>
+  <div class="platform-scope-picker">
+    <a-radio-group :value="scope" @change="onScopeChange">
+      <a-radio value="all">全部平台</a-radio>
+      <a-radio value="specific">指定平台</a-radio>
+    </a-radio-group>
+    <a-select
+      mode="multiple"
+      class="platform-scope-picker__select"
+      :value="platforms"
+      :disabled="scope === 'all'"
+      :options="publishPlatformOptions"
+      placeholder="选择适用平台"
+      @change="onPlatformsChange"
+    />
+  </div>
+</template>
+
+<script setup lang="ts">
+import type { RadioChangeEvent } from 'ant-design-vue'
+
+import { publishPlatformOptions } from '@/lib/compliance-display'
+import type { CompliancePlatformScope } from '@/lib/compliance'
+
+defineProps<{
+  scope: CompliancePlatformScope
+  platforms: string[]
+}>()
+
+const emit = defineEmits<{
+  'update:scope': [value: CompliancePlatformScope]
+  'update:platforms': [value: string[]]
+}>()
+
+function onScopeChange(event: RadioChangeEvent) {
+  const value = event.target.value as CompliancePlatformScope
+  emit('update:scope', value)
+  if (value === 'all') {
+    emit('update:platforms', [])
+  }
+}
+
+function onPlatformsChange(value: string[]) {
+  emit('update:platforms', value)
+  if (value.length > 0) {
+    emit('update:scope', 'specific')
+  }
+}
+</script>
+
+<style scoped>
+.platform-scope-picker {
+  display: flex;
+  flex-direction: column;
+  gap: 12px;
+}
+
+.platform-scope-picker__select {
+  width: 100%;
+}
+</style>
diff --git a/apps/ops-web/src/layouts/AppShell.vue b/apps/ops-web/src/layouts/AppShell.vue
index 1cc299a..c204ca2 100644
--- a/apps/ops-web/src/layouts/AppShell.vue
+++ b/apps/ops-web/src/layouts/AppShell.vue
@@ -48,11 +48,16 @@
 <script setup lang="ts">
 import {
   AuditOutlined,
+  BookOutlined,
+  ControlOutlined,
   CrownOutlined,
+  FileSearchOutlined,
   GlobalOutlined,
+  LineChartOutlined,
   SafetyCertificateOutlined,
   SettingOutlined,
   TeamOutlined,
+  UserSwitchOutlined,
 } from '@ant-design/icons-vue'
 import type { ItemType } from 'ant-design-vue'
 import { computed, h, onMounted, ref } from 'vue'
@@ -76,6 +81,11 @@ const menuLeaves: MenuLeaf[] = [
   { key: '/admin-users', label: '用户管理', path: '/admin-users' },
   { key: '/kol-subscriptions', label: '订阅包审批', path: '/kol-subscriptions' },
   { key: '/site-domain-mappings', label: '站点映射', path: '/site-domain-mappings' },
+  { key: '/compliance/policy', label: '全局策略', path: '/compliance/policy' },
+  { key: '/compliance/dictionaries', label: '合规词库', path: '/compliance/dictionaries' },
+  { key: '/compliance/manual-reviews', label: '人工审阅', path: '/compliance/manual-reviews' },
+  { key: '/compliance/records', label: '检测记录', path: '/compliance/records' },
+  { key: '/compliance/stats', label: '合规统计', path: '/compliance/stats' },
   { key: '/accounts', label: '操作员管理', path: '/accounts' },
   { key: '/audits', label: '审计日志', path: '/audits' },
 ]
@@ -96,6 +106,38 @@ const menuItems = computed<ItemType[]>(() => [
     label: '站点映射',
     icon: () => h(GlobalOutlined),
   },
+  {
+    key: 'compliance',
+    label: '内容安全',
+    icon: () => h(SafetyCertificateOutlined),
+    children: [
+      {
+        key: '/compliance/policy',
+        label: '全局策略',
+        icon: () => h(ControlOutlined),
+      },
+      {
+        key: '/compliance/dictionaries',
+        label: '合规词库',
+        icon: () => h(BookOutlined),
+      },
+      {
+        key: '/compliance/manual-reviews',
+        label: '人工审阅',
+        icon: () => h(UserSwitchOutlined),
+      },
+      {
+        key: '/compliance/records',
+        label: '检测记录',
+        icon: () => h(FileSearchOutlined),
+      },
+      {
+        key: '/compliance/stats',
+        label: '合规统计',
+        icon: () => h(LineChartOutlined),
+      },
+    ],
+  },
   {
     key: 'system',
     label: '系统设置',
@@ -115,7 +157,7 @@ const menuItems = computed<ItemType[]>(() => [
   },
 ])
 
-const openKeys = ref<string[]>(['system'])
+const openKeys = ref<string[]>(['compliance', 'system'])
 
 function onOpenKeysChange(keys: string[]) {
   openKeys.value = keys
diff --git a/apps/ops-web/src/lib/compliance-display.ts b/apps/ops-web/src/lib/compliance-display.ts
new file mode 100644
index 0000000..c712cc5
--- /dev/null
+++ b/apps/ops-web/src/lib/compliance-display.ts
@@ -0,0 +1,114 @@
+import { getAIPlatformCatalogItem } from '@geo/shared-types'
+
+export const publishPlatformCatalog: Record<string, { label: string; short: string }> = {
+  toutiaohao: { label: '头条号', short: '头' },
+  baijiahao: { label: '百家号', short: '百' },
+  sohuhao: { label: '搜狐号', short: '搜' },
+  qiehao: { label: '企鹅号', short: 'Q' },
+  zhihu: { label: '知乎', short: '知' },
+  wangyihao: { label: '网易号', short: '网' },
+  jianshu: { label: '简书', short: '简' },
+  bilibili: { label: 'bilibili', short: 'B' },
+  juejin: { label: '稀土掘金', short: '掘' },
+  smzdm: { label: '什么值得买', short: '值' },
+  weixin_gzh: { label: '微信公众号', short: '微' },
+  zol: { label: '中关村在线', short: 'Z' },
+  dongchedi: { label: '懂车帝', short: '懂' },
+}
+
+export const publishPlatformOptions = Object.entries(publishPlatformCatalog).map(
+  ([value, item]) => ({
+    value,
+    label: item.label,
+  }),
+)
+
+export const complianceLevelOptions = [
+  { label: '阻断', value: 'block' },
+  { label: '高风险', value: 'high' },
+  { label: '中风险', value: 'medium' },
+  { label: '提示', value: 'info' },
+]
+
+export const complianceModeOptions = [
+  { label: '强制阻断', value: 'mandatory' },
+  { label: '仅提示确认', value: 'advisory' },
+  { label: '关闭检测', value: 'disabled' },
+]
+
+export const complianceSourceOptions = [
+  { label: '词库', value: 'dict' },
+  { label: '正则', value: 'regex' },
+  { label: 'LLM', value: 'llm' },
+]
+
+export function levelLabel(level?: string | null): string {
+  return complianceLevelOptions.find((item) => item.value === level)?.label ?? level ?? '--'
+}
+
+export function levelColor(level?: string | null): string {
+  if (level === 'block') return 'red'
+  if (level === 'high') return 'orange'
+  if (level === 'medium') return 'gold'
+  if (level === 'info') return 'blue'
+  return 'default'
+}
+
+export function modeLabel(mode?: string | null): string {
+  return complianceModeOptions.find((item) => item.value === mode)?.label ?? mode ?? '--'
+}
+
+export function modeColor(mode?: string | null): string {
+  if (mode === 'mandatory') return 'red'
+  if (mode === 'advisory') return 'gold'
+  if (mode === 'disabled') return 'default'
+  return 'blue'
+}
+
+export function decisionLabel(decision?: string | null): string {
+  if (decision === 'pass') return '通过'
+  if (decision === 'needs_ack') return '待确认'
+  if (decision === 'block') return '阻断'
+  return decision ?? '--'
+}
+
+export function decisionColor(decision?: string | null): string {
+  if (decision === 'pass') return 'green'
+  if (decision === 'needs_ack') return 'gold'
+  if (decision === 'block') return 'red'
+  return 'default'
+}
+
+export function reviewStatusLabel(status?: string | null): string {
+  if (status === 'pending') return '待审'
+  if (status === 'approved') return '已通过'
+  if (status === 'rejected') return '已驳回'
+  if (status === 'cancelled') return '已撤回'
+  if (status === 'none') return '无'
+  return status ?? '--'
+}
+
+export function reviewStatusColor(status?: string | null): string {
+  if (status === 'pending') return 'gold'
+  if (status === 'approved') return 'green'
+  if (status === 'rejected') return 'red'
+  if (status === 'cancelled') return 'default'
+  return 'blue'
+}
+
+export function sourceLabel(source?: string | null): string {
+  return complianceSourceOptions.find((item) => item.value === source)?.label ?? source ?? '--'
+}
+
+export function platformLabel(platform?: string | null): string {
+  const normalized = String(platform ?? '').trim()
+  if (!normalized) return '全部平台'
+  const ai = getAIPlatformCatalogItem(normalized)
+  if (ai) return ai.label
+  return publishPlatformCatalog[normalized]?.label ?? normalized
+}
+
+export function platformListLabel(platforms?: string[] | null): string {
+  const normalized = (platforms ?? []).map((item) => item.trim()).filter(Boolean)
+  return normalized.length ? normalized.map(platformLabel).join('、') : '全部平台'
+}
diff --git a/apps/ops-web/src/lib/compliance.ts b/apps/ops-web/src/lib/compliance.ts
new file mode 100644
index 0000000..9fa0bd9
--- /dev/null
+++ b/apps/ops-web/src/lib/compliance.ts
@@ -0,0 +1,191 @@
+import type { ComplianceCheckResult, ComplianceManualReview } from '@geo/shared-types'
+
+import { http } from '@/lib/http'
+
+export type ComplianceLevel = 'block' | 'high' | 'medium' | 'info'
+export type ComplianceMode = 'mandatory' | 'advisory' | 'disabled'
+export type CompliancePlatformScope = 'all' | 'specific'
+
+export interface OpsComplianceDictionary {
+  id: number
+  code: string
+  name: string
+  platform_scope: CompliancePlatformScope
+  applicable_platforms: string[]
+  default_level: ComplianceLevel
+  enabled: boolean
+  version: number
+  description?: string | null
+  created_at: string
+  updated_at: string
+  term_count: number
+}
+
+export interface UpsertComplianceDictionaryRequest {
+  code?: string
+  name: string
+  platform_scope: CompliancePlatformScope
+  applicable_platforms: string[]
+  default_level: ComplianceLevel
+  enabled?: boolean
+  description?: string | null
+}
+
+export interface OpsComplianceTerm {
+  id: number
+  dictionary_id: number
+  match_type: 'exact' | 'regex'
+  pattern: string
+  level_override?: ComplianceLevel | null
+  hint?: string | null
+  reference_law?: string | null
+  enabled: boolean
+  created_at: string
+  updated_at: string
+}
+
+export interface CreateComplianceTermRequest {
+  match_type: 'exact' | 'regex'
+  pattern: string
+  level_override?: ComplianceLevel | null
+  hint?: string | null
+  reference_law?: string | null
+  enabled?: boolean
+}
+
+export interface CompliancePolicy {
+  id?: number
+  master_enabled?: boolean | null
+  enforcement_mode: ComplianceMode
+  enabled_dictionaries: number[]
+  llm_judge_enabled: boolean
+  llm_categories: string[]
+  revision: number
+  updated_at?: string
+}
+
+export interface UpdateCompliancePolicyRequest {
+  master_enabled?: boolean
+  enforcement_mode?: ComplianceMode
+  enabled_dictionaries?: number[]
+  llm_judge_enabled?: boolean
+  llm_categories?: string[]
+}
+
+export interface ComplianceStats {
+  check_count: number
+  blocked_count: number
+  needs_ack_count: number
+  passed_count: number
+  ack_count: number
+  manual_pending_count: number
+  manual_approved_count: number
+  manual_rejected_count: number
+  by_level: Record<string, number>
+  by_source: Record<string, number>
+}
+
+export interface PagedResult<T> {
+  items: T[]
+  total: number
+  page: number
+  page_size: number
+}
+
+export const complianceApi = {
+  dictionaries() {
+    return http.get<OpsComplianceDictionary[]>('/compliance/dictionaries')
+  },
+  createDictionary(payload: UpsertComplianceDictionaryRequest) {
+    return http.post<OpsComplianceDictionary, UpsertComplianceDictionaryRequest>(
+      '/compliance/dictionaries',
+      payload,
+    )
+  },
+  updateDictionary(id: number, payload: UpsertComplianceDictionaryRequest) {
+    return http.put<OpsComplianceDictionary, UpsertComplianceDictionaryRequest>(
+      `/compliance/dictionaries/${id}`,
+      payload,
+    )
+  },
+  deleteDictionary(id: number) {
+    return http.delete<{ deleted: boolean }>(`/compliance/dictionaries/${id}`)
+  },
+  terms(dictionaryId: number) {
+    return http.get<OpsComplianceTerm[]>(`/compliance/dictionaries/${dictionaryId}/terms`)
+  },
+  createTerm(dictionaryId: number, payload: CreateComplianceTermRequest) {
+    return http.post<OpsComplianceTerm, CreateComplianceTermRequest>(
+      `/compliance/dictionaries/${dictionaryId}/terms`,
+      payload,
+    )
+  },
+  batchImportTerms(dictionaryId: number, terms: CreateComplianceTermRequest[]) {
+    return http.post<OpsComplianceTerm[], { terms: CreateComplianceTermRequest[] }>(
+      `/compliance/dictionaries/${dictionaryId}/terms:batch-import`,
+      { terms },
+    )
+  },
+  deleteTerm(dictionaryId: number, termId: number) {
+    return http.delete<{ deleted: boolean }>(`/compliance/dictionaries/${dictionaryId}/terms/${termId}`)
+  },
+  publishDictionary(id: number) {
+    return http.post<OpsComplianceDictionary>(`/compliance/dictionaries/${id}/publish`)
+  },
+  rollbackDictionary(id: number, version: number) {
+    return http.post<OpsComplianceDictionary, { version: number }>(
+      `/compliance/dictionaries/${id}/rollback`,
+      { version },
+    )
+  },
+  globalPolicy() {
+    return http.get<CompliancePolicy>('/compliance/policy/global')
+  },
+  updateGlobalPolicy(payload: UpdateCompliancePolicyRequest) {
+    return http.put<CompliancePolicy, UpdateCompliancePolicyRequest>(
+      '/compliance/policy/global',
+      payload,
+    )
+  },
+  setMasterSwitch(enabled: boolean) {
+    return http.post<CompliancePolicy, { enabled: boolean }>(
+      '/compliance/policy/global/master-switch',
+      { enabled },
+    )
+  },
+  manualReviews(params: {
+    status?: string
+    tenant_id?: number
+    page?: number
+    page_size?: number
+  }) {
+    return http.get<PagedResult<ComplianceManualReview>>('/compliance/manual-reviews', params)
+  },
+  manualReview(id: number) {
+    return http.get<ComplianceManualReview>(`/compliance/manual-reviews/${id}`)
+  },
+  approveManualReview(id: number, reason: string) {
+    return http.post<ComplianceManualReview, { reason: string }>(
+      `/compliance/manual-reviews/${id}/approve`,
+      { reason },
+    )
+  },
+  rejectManualReview(id: number, reason: string) {
+    return http.post<ComplianceManualReview, { reason: string }>(
+      `/compliance/manual-reviews/${id}/reject`,
+      { reason },
+    )
+  },
+  records(params: {
+    tenant_id?: number
+    article_id?: number
+    decision?: string
+    page?: number
+    page_size?: number
+  }) {
+    return http.get<PagedResult<ComplianceCheckResult>>('/compliance/records', params)
+  },
+  stats() {
+    return http.get<ComplianceStats>('/compliance/stats')
+  },
+}
diff --git a/apps/ops-web/src/lib/http.ts b/apps/ops-web/src/lib/http.ts
index bb32118..b639bfe 100644
--- a/apps/ops-web/src/lib/http.ts
+++ b/apps/ops-web/src/lib/http.ts
@@ -97,6 +97,7 @@ async function unwrap<T>(promise: Promise<{ data: ApiEnvelope<T> }>): Promise<T>
 export const http = {
   get: <T>(url: string, params?: Record<string, unknown>) => unwrap<T>(client.get(url, { params })),
   post: <T, B = unknown>(url: string, body?: B) => unwrap<T>(client.post(url, body)),
+  put: <T, B = unknown>(url: string, body?: B) => unwrap<T>(client.put(url, body)),
   patch: <T, B = unknown>(url: string, body?: B) => unwrap<T>(client.patch(url, body)),
   delete: <T>(url: string) => unwrap<T>(client.delete(url)),
 }
diff --git a/apps/ops-web/src/main.ts b/apps/ops-web/src/main.ts
index ae271d6..4d41d3d 100644
--- a/apps/ops-web/src/main.ts
+++ b/apps/ops-web/src/main.ts
@@ -6,6 +6,7 @@ import {
   Badge,
   Button,
   Card,
+  Checkbox,
   ConfigProvider,
   DatePicker,
   Descriptions,
@@ -14,17 +15,21 @@ import {
   Empty,
   Form,
   Input,
+  InputNumber,
   Layout,
   Menu,
   Modal,
   Pagination,
   Popconfirm,
+  Radio,
   Result,
   Select,
   Space,
   Spin,
+  Statistic,
   Switch,
   Table,
+  Tabs,
   Tag,
   Tooltip,
   message,
@@ -61,6 +66,7 @@ bindUnauthorizedHandler(() => {
   Badge,
   Button,
   Card,
+  Checkbox,
   ConfigProvider,
   DatePicker,
   Descriptions,
@@ -69,17 +75,21 @@ bindUnauthorizedHandler(() => {
   Empty,
   Form,
   Input,
+  InputNumber,
   Layout,
   Menu,
   Modal,
   Pagination,
   Popconfirm,
+  Radio,
   Result,
   Select,
   Space,
   Spin,
+  Statistic,
   Switch,
   Table,
+  Tabs,
   Tag,
   Tooltip,
 ].forEach((component) => {
diff --git a/apps/ops-web/src/router/index.ts b/apps/ops-web/src/router/index.ts
index 444c352..d1e070c 100644
--- a/apps/ops-web/src/router/index.ts
+++ b/apps/ops-web/src/router/index.ts
@@ -48,6 +48,54 @@ export const router = createRouter({
           component: () => import('@/views/SiteDomainMappingsView.vue'),
           meta: { title: '站点映射' },
         },
+        {
+          path: 'compliance/policy',
+          name: 'compliance-policy',
+          component: () => import('@/views/compliance/CompliancePolicyView.vue'),
+          meta: { title: '全局合规策略' },
+        },
+        {
+          path: 'compliance/dictionaries',
+          name: 'compliance-dictionaries',
+          component: () => import('@/views/compliance/ComplianceDictionariesView.vue'),
+          meta: { title: '合规词库' },
+        },
+        {
+          path: 'compliance/dictionaries/new',
+          name: 'compliance-dictionary-new',
+          component: () => import('@/views/compliance/ComplianceDictionaryEditView.vue'),
+          meta: { title: '新建合规词库' },
+        },
+        {
+          path: 'compliance/dictionaries/:id/edit',
+          name: 'compliance-dictionary-edit',
+          component: () => import('@/views/compliance/ComplianceDictionaryEditView.vue'),
+          meta: { title: '编辑合规词库' },
+        },
+        {
+          path: 'compliance/manual-reviews',
+          name: 'compliance-manual-reviews',
+          component: () => import('@/views/compliance/ComplianceManualReviewsView.vue'),
+          meta: { title: '人工审阅' },
+        },
+        {
+          path: 'compliance/manual-reviews/:id',
+          name: 'compliance-manual-review-detail',
+          component: () => import('@/views/compliance/ComplianceManualReviewDetailView.vue'),
+          meta: { title: '人工审阅详情' },
+        },
+        {
+          path: 'compliance/records',
+          name: 'compliance-records',
+          component: () => import('@/views/compliance/ComplianceRecordsView.vue'),
+          meta: { title: '检测记录' },
+        },
+        {
+          path: 'compliance/stats',
+          name: 'compliance-stats',
+          component: () => import('@/views/compliance/ComplianceStatsView.vue'),
+          meta: { title: '合规统计' },
+        },
         {
           path: 'profile',
           name: 'profile',
diff --git a/apps/ops-web/src/views/compliance/ComplianceDictionariesView.vue b/apps/ops-web/src/views/compliance/ComplianceDictionariesView.vue
new file mode 100644
index 0000000..07aa43e
--- /dev/null
+++ b/apps/ops-web/src/views/compliance/ComplianceDictionariesView.vue
@@ -0,0 +1,276 @@
+<template>
+  <div class="compliance-page">
+    <div class="compliance-page__header">
+      <div>
+        <h2 class="ops-page-title">合规词库</h2>
+        <div class="compliance-page__summary">
+          <span>全部 {{ filteredRows.length }}</span>
+          <span>启用 {{ enabledCount }}</span>
+          <span>词条 {{ totalTerms }}</span>
+        </div>
+      </div>
+      <a-button type="primary" @click="router.push('/compliance/dictionaries/new')">
+        <template #icon><PlusOutlined /></template>
+        新建词库
+      </a-button>
+    </div>
+
+    <div class="ops-card">
+      <div class="ops-toolbar compliance-toolbar">
+        <a-input
+          v-model:value="filter.keyword"
+          class="compliance-toolbar__search"
+          placeholder="搜索词库名称 / Code"
+          allow-clear
+        />
+        <a-select
+          v-model:value="filter.status"
+          class="compliance-toolbar__select"
+          :options="statusOptions"
+          placeholder="状态"
+          allow-clear
+        />
+        <a-button @click="loadDictionaries">
+          <template #icon><ReloadOutlined /></template>
+          刷新
+        </a-button>
+      </div>
+
+      <a-table
+        :columns="columns"
+        :data-source="filteredRows"
+        :loading="loading"
+        row-key="id"
+        :pagination="{ pageSize: 20, showSizeChanger: true }"
+      >
+        <template #emptyText>
+          <a-empty description="还没有合规词库" />
+        </template>
+        <template #bodyCell="{ column, record }">
+          <template v-if="column.key === 'name'">
+            <div class="primary-cell">
+              <strong>{{ record.name }}</strong>
+              <span>{{ record.code }}</span>
+            </div>
+          </template>
+          <template v-else-if="column.key === 'scope'">
+            <a-tag v-if="record.platform_scope === 'all'" color="blue">全部平台</a-tag>
+            <a-space v-else wrap>
+              <a-tag v-for="platform in record.applicable_platforms" :key="platform">
+                {{ platformLabel(platform) }}
+              </a-tag>
+            </a-space>
+          </template>
+          <template v-else-if="column.key === 'level'">
+            <a-tag :color="levelColor(record.default_level)">
+              {{ levelLabel(record.default_level) }}
+            </a-tag>
+          </template>
+          <template v-else-if="column.key === 'enabled'">
+            <a-tag :color="record.enabled ? 'green' : 'default'">
+              {{ record.enabled ? '启用' : '停用' }}
+            </a-tag>
+          </template>
+          <template v-else-if="column.key === 'updated_at'">
+            {{ formatDate(record.updated_at) }}
+          </template>
+          <template v-else-if="column.key === 'actions'">
+            <div class="table-actions-row table-actions-row--right">
+              <a-tooltip title="编辑">
+                <a-button
+                  type="text"
+                  shape="circle"
+                  size="small"
+                  class="action-btn action-edit"
+                  @click="router.push(`/compliance/dictionaries/${record.id}/edit`)"
+                >
+                  <EditOutlined />
+                </a-button>
+              </a-tooltip>
+              <a-tooltip title="发布版本">
+                <a-popconfirm
+                  title="确认发布当前词库版本？"
+                  :ok-button-props="{ loading: publishingId === record.id }"
+                  @confirm="publishDictionary(record.id)"
+                >
+                  <a-button type="text" shape="circle" size="small" class="action-btn action-play">
+                    <RocketOutlined />
+                  </a-button>
+                </a-popconfirm>
+              </a-tooltip>
+              <a-tooltip title="删除">
+                <a-popconfirm
+                  title="确认删除该词库？词条会一并删除。"
+                  :ok-button-props="{ danger: true, loading: deletingId === record.id }"
+                  @confirm="deleteDictionary(record.id)"
+                >
+                  <a-button
+                    type="text"
+                    shape="circle"
+                    size="small"
+                    class="action-btn action-delete"
+                  >
+                    <DeleteOutlined />
+                  </a-button>
+                </a-popconfirm>
+              </a-tooltip>
+            </div>
+          </template>
+        </template>
+      </a-table>
+    </div>
+  </div>
+</template>
+
+<script setup lang="ts">
+import { DeleteOutlined, EditOutlined, PlusOutlined, ReloadOutlined, RocketOutlined } from '@ant-design/icons-vue'
+import type { TableColumnsType } from 'ant-design-vue'
+import { message } from 'ant-design-vue'
+import dayjs from 'dayjs'
+import { computed, onMounted, reactive, ref } from 'vue'
+import { useRouter } from 'vue-router'
+
+import {
+  levelColor,
+  levelLabel,
+  platformLabel,
+} from '@/lib/compliance-display'
+import { complianceApi, type OpsComplianceDictionary } from '@/lib/compliance'
+import { OpsApiError } from '@/lib/http'
+
+const router = useRouter()
+
+const rows = ref<OpsComplianceDictionary[]>([])
+const loading = ref(false)
+const deletingId = ref<number | null>(null)
+const publishingId = ref<number | null>(null)
+const filter = reactive({
+  keyword: '',
+  status: undefined as 'enabled' | 'disabled' | undefined,
+})
+
+const statusOptions = [
+  { label: '启用', value: 'enabled' },
+  { label: '停用', value: 'disabled' },
+]
+
+const columns: TableColumnsType<OpsComplianceDictionary> = [
+  { title: '词库', key: 'name', width: 260 },
+  { title: '适用平台', key: 'scope' },
+  { title: '默认等级', key: 'level', width: 120 },
+  { title: '词条数', dataIndex: 'term_count', key: 'term_count', width: 100 },
+  { title: '版本', dataIndex: 'version', key: 'version', width: 90 },
+  { title: '状态', key: 'enabled', width: 100 },
+  { title: '更新时间', key: 'updated_at', width: 170 },
+  { title: '操作', key: 'actions', width: 140, align: 'right' },
+]
+
+const filteredRows = computed(() => {
+  const keyword = filter.keyword.trim().toLowerCase()
+  return rows.value.filter((row) => {
+    if (filter.status === 'enabled' && !row.enabled) return false
+    if (filter.status === 'disabled' && row.enabled) return false
+    if (!keyword) return true
+    return `${row.name} ${row.code}`.toLowerCase().includes(keyword)
+  })
+})
+
+const enabledCount = computed(() => rows.value.filter((row) => row.enabled).length)
+const totalTerms = computed(() => rows.value.reduce((sum, row) => sum + row.term_count, 0))
+
+async function loadDictionaries() {
+  loading.value = true
+  try {
+    rows.value = await complianceApi.dictionaries()
+  } catch (error) {
+    showError(error)
+  } finally {
+    loading.value = false
+  }
+}
+
+async function publishDictionary(id: number) {
+  publishingId.value = id
+  try {
+    await complianceApi.publishDictionary(id)
+    message.success('词库版本已发布')
+    await loadDictionaries()
+  } catch (error) {
+    showError(error)
+  } finally {
+    publishingId.value = null
+  }
+}
+
+async function deleteDictionary(id: number) {
+  deletingId.value = id
+  try {
+    await complianceApi.deleteDictionary(id)
+    message.success('词库已删除')
+    await loadDictionaries()
+  } catch (error) {
+    showError(error)
+  } finally {
+    deletingId.value = null
+  }
+}
+
+function formatDate(value: string): string {
+  return dayjs(value).format('YYYY-MM-DD HH:mm')
+}
+
+function showError(error: unknown) {
+  if (error instanceof OpsApiError) {
+    message.error(error.detail || error.message)
+  }
+}
+
+onMounted(() => {
+  void loadDictionaries()
+})
+</script>
+
+<style scoped>
+.compliance-page {
+  display: flex;
+  flex-direction: column;
+  gap: 18px;
+}
+
+.compliance-page__header {
+  display: flex;
+  align-items: flex-start;
+  justify-content: space-between;
+  gap: 16px;
+}
+
+.compliance-page__summary {
+  display: flex;
+  gap: 14px;
+  color: #64748b;
+  font-size: 13px;
+}
+
+.compliance-toolbar__search {
+  width: 300px;
+}
+
+.compliance-toolbar__select {
+  width: 140px;
+}
+
+.primary-cell {
+  display: flex;
+  flex-direction: column;
+  gap: 3px;
+}
+
+.primary-cell span {
+  color: #94a3b8;
+  font-size: 12px;
+}
+
+.table-actions-row--right {
+  justify-content: flex-end;
+}
+</style>
diff --git a/apps/ops-web/src/views/compliance/ComplianceDictionaryEditView.vue b/apps/ops-web/src/views/compliance/ComplianceDictionaryEditView.vue
new file mode 100644
index 0000000..65dadb0
--- /dev/null
+++ b/apps/ops-web/src/views/compliance/ComplianceDictionaryEditView.vue
@@ -0,0 +1,618 @@
+<template>
+  <div class="dictionary-edit-page">
+    <div class="dictionary-edit-header">
+      <div>
+        <h2 class="ops-page-title">{{ isCreate ? '新建合规词库' : '编辑合规词库' }}</h2>
+        <div class="dictionary-edit-header__meta">
+          <span v-if="dictionary">版本 {{ dictionary.version }}</span>
+          <span v-if="dictionary">词条 {{ dictionary.term_count }}</span>
+          <span>词库用途由名称表达，不使用固定分类</span>
+        </div>
+      </div>
+      <a-space>
+        <a-button @click="router.push('/compliance/dictionaries')">返回列表</a-button>
+        <a-button type="primary" :loading="saving" @click="saveDictionary">保存</a-button>
+      </a-space>
+    </div>
+
+    <div class="dictionary-edit-grid">
+      <div class="ops-card">
+        <h3 class="section-title">基础设置</h3>
+        <a-form layout="vertical" :model="form">
+          <a-form-item label="词库 Code" required>
+            <a-input
+              v-model:value="form.code"
+              :disabled="!isCreate"
+              placeholder="ad_law_extreme_words"
+            />
+          </a-form-item>
+          <a-form-item label="词库名称" required>
+            <a-input v-model:value="form.name" placeholder="广告法极限词" />
+          </a-form-item>
+          <a-form-item label="适用平台" required>
+            <PlatformScopePicker
+              v-model:scope="form.platform_scope"
+              v-model:platforms="form.applicable_platforms"
+            />
+          </a-form-item>
+          <a-form-item label="默认风险等级" required>
+            <a-select v-model:value="form.default_level" :options="complianceLevelOptions" />
+          </a-form-item>
+          <a-form-item label="状态">
+            <a-switch
+              v-model:checked="form.enabled"
+              checked-children="启用"
+              un-checked-children="停用"
+            />
+          </a-form-item>
+          <a-form-item label="说明">
+            <a-textarea v-model:value="form.description" :rows="3" placeholder="可选" />
+          </a-form-item>
+        </a-form>
+      </div>
+
+      <div class="ops-card dictionary-edit-side">
+        <h3 class="section-title">版本操作</h3>
+        <a-alert
+          type="info"
+          show-icon
+          message="发布会写入版本快照；回滚会恢复快照中的词库设置和词条。"
+        />
+        <a-space class="version-actions" direction="vertical">
+          <a-button
+            block
+            :disabled="isCreate"
+            :loading="publishing"
+            @click="publishCurrentDictionary"
+          >
+            <template #icon><RocketOutlined /></template>
+            发布当前版本
+          </a-button>
+          <div class="rollback-row">
+            <a-input-number
+              v-model:value="rollbackVersion"
+              :min="1"
+              class="rollback-row__input"
+              placeholder="版本号"
+            />
+            <a-popconfirm
+              title="确认回滚到该版本？当前词条会被快照覆盖。"
+              :disabled="isCreate || !rollbackVersion"
+              :ok-button-props="{ loading: rollingBack }"
+              @confirm="rollbackDictionary"
+            >
+              <a-button :disabled="isCreate || !rollbackVersion">回滚</a-button>
+            </a-popconfirm>
+          </div>
+        </a-space>
+      </div>
+    </div>
+
+    <div class="ops-card">
+      <div class="terms-header">
+        <h3 class="section-title">词条管理</h3>
+        <a-space>
+          <a-button v-if="!isCreate" @click="termDrawerOpen = true">
+            <template #icon><PlusOutlined /></template>
+            新增词条
+          </a-button>
+          <a-button v-if="!isCreate" @click="batchDrawerOpen = true">批量导入</a-button>
+          <a-button v-if="!isCreate" :loading="termsLoading" @click="loadTerms">刷新</a-button>
+        </a-space>
+      </div>
+
+      <template v-if="isCreate">
+        <a-alert
+          class="create-terms-alert"
+          type="info"
+          show-icon
+          message="新建时可先粘贴敏感词，一行一个；保存词库后会自动导入为精确匹配词条。"
+        />
+        <a-textarea
+          v-model:value="createTermsText"
+          :rows="10"
+          placeholder="一行一个词条，不要包含空白字符"
+        />
+      </template>
+
+      <a-table
+        v-else
+        :columns="termColumns"
+        :data-source="terms"
+        :loading="termsLoading"
+        row-key="id"
+        :pagination="{ pageSize: 20, showSizeChanger: true }"
+      >
+        <template #bodyCell="{ column, record }">
+          <template v-if="column.key === 'pattern'">
+            <div class="term-pattern">
+              <strong>{{ record.pattern }}</strong>
+              <span v-if="record.hint">{{ record.hint }}</span>
+            </div>
+          </template>
+          <template v-else-if="column.key === 'match_type'">
+            <a-tag>{{ matchTypeLabel(record.match_type) }}</a-tag>
+          </template>
+          <template v-else-if="column.key === 'level'">
+            <a-tag :color="levelColor(record.level_override || dictionary?.default_level)">
+              {{ levelLabel(record.level_override || dictionary?.default_level) }}
+            </a-tag>
+          </template>
+          <template v-else-if="column.key === 'enabled'">
+            <a-tag :color="record.enabled ? 'green' : 'default'">
+              {{ record.enabled ? '启用' : '停用' }}
+            </a-tag>
+          </template>
+          <template v-else-if="column.key === 'actions'">
+            <div class="table-actions-row table-actions-row--right">
+              <a-popconfirm
+                title="确认删除该词条？"
+                :ok-button-props="{ danger: true, loading: deletingTermId === record.id }"
+                @confirm="deleteTerm(record.id)"
+              >
+                <a-button type="text" shape="circle" size="small" class="action-btn action-delete">
+                  <DeleteOutlined />
+                </a-button>
+              </a-popconfirm>
+            </div>
+          </template>
+        </template>
+      </a-table>
+    </div>
+
+    <a-drawer v-model:open="termDrawerOpen" title="新增词条" width="460" :destroy-on-close="true">
+      <a-form layout="vertical" :model="termForm">
+        <a-form-item label="匹配方式" required>
+          <a-select v-model:value="termForm.match_type" :options="matchTypeOptions" />
+        </a-form-item>
+        <a-form-item label="词条 / 正则" required>
+          <a-input v-model:value="termForm.pattern" placeholder="请输入词条" />
+        </a-form-item>
+        <a-form-item label="风险等级覆盖">
+          <a-select
+            v-model:value="termForm.level_override"
+            :options="[{ label: '继承词库默认', value: null }, ...complianceLevelOptions]"
+          />
+        </a-form-item>
+        <a-form-item label="提示文案">
+          <a-textarea v-model:value="termForm.hint" :rows="3" />
+        </a-form-item>
+        <a-form-item label="法规依据">
+          <a-input v-model:value="termForm.reference_law" />
+        </a-form-item>
+        <a-form-item label="状态">
+          <a-switch
+            v-model:checked="termForm.enabled"
+            checked-children="启用"
+            un-checked-children="停用"
+          />
+        </a-form-item>
+      </a-form>
+      <template #footer>
+        <div class="drawer-footer">
+          <a-button @click="termDrawerOpen = false">取消</a-button>
+          <a-button type="primary" :loading="termSaving" @click="createTerm">保存</a-button>
+        </div>
+      </template>
+    </a-drawer>
+
+    <a-drawer v-model:open="batchDrawerOpen" title="批量导入词条" width="520" :destroy-on-close="true">
+      <a-alert
+        class="create-terms-alert"
+        type="info"
+        show-icon
+        message="一行一个词条，批量导入会创建为精确匹配并继承词库默认等级。"
+      />
+      <a-textarea v-model:value="batchTermsText" :rows="12" placeholder="一行一个词条" />
+      <template #footer>
+        <div class="drawer-footer">
+          <a-button @click="batchDrawerOpen = false">取消</a-button>
+          <a-button type="primary" :loading="batchSaving" @click="batchImportTerms">导入</a-button>
+        </div>
+      </template>
+    </a-drawer>
+  </div>
+</template>
+
+<script setup lang="ts">
+import { DeleteOutlined, PlusOutlined, RocketOutlined } from '@ant-design/icons-vue'
+import type { TableColumnsType } from 'ant-design-vue'
+import { message } from 'ant-design-vue'
+import { computed, onMounted, reactive, ref } from 'vue'
+import { useRoute, useRouter } from 'vue-router'
+
+import PlatformScopePicker from '@/components/compliance/PlatformScopePicker.vue'
+import {
+  complianceLevelOptions,
+  levelColor,
+  levelLabel,
+} from '@/lib/compliance-display'
+import {
+  complianceApi,
+  type ComplianceLevel,
+  type OpsComplianceDictionary,
+  type OpsComplianceTerm,
+} from '@/lib/compliance'
+import { OpsApiError } from '@/lib/http'
+
+type MatchType = 'exact' | 'regex'
+
+const route = useRoute()
+const router = useRouter()
+
+const dictionaryId = computed(() => {
+  const raw = route.params.id
+  const value = Number(Array.isArray(raw) ? raw[0] : raw)
+  return Number.isFinite(value) && value > 0 ? value : null
+})
+const isCreate = computed(() => route.name === 'compliance-dictionary-new')
+
+const dictionary = ref<OpsComplianceDictionary | null>(null)
+const terms = ref<OpsComplianceTerm[]>([])
+const saving = ref(false)
+const termsLoading = ref(false)
+const publishing = ref(false)
+const rollingBack = ref(false)
+const rollbackVersion = ref<number | null>(null)
+const deletingTermId = ref<number | null>(null)
+const termDrawerOpen = ref(false)
+const batchDrawerOpen = ref(false)
+const termSaving = ref(false)
+const batchSaving = ref(false)
+const createTermsText = ref('')
+const batchTermsText = ref('')
+
+const form = reactive({
+  code: '',
+  name: '',
+  platform_scope: 'all' as 'all' | 'specific',
+  applicable_platforms: [] as string[],
+  default_level: 'block' as ComplianceLevel,
+  enabled: true,
+  description: '',
+})
+
+const termForm = reactive({
+  match_type: 'exact' as MatchType,
+  pattern: '',
+  level_override: null as ComplianceLevel | null,
+  hint: '',
+  reference_law: '',
+  enabled: true,
+})
+
+const matchTypeOptions = [
+  { label: '精确匹配', value: 'exact' },
+  { label: '正则', value: 'regex' },
+]
+
+const termColumns: TableColumnsType<OpsComplianceTerm> = [
+  { title: '词条', key: 'pattern' },
+  { title: '匹配方式', key: 'match_type', width: 120 },
+  { title: '风险等级', key: 'level', width: 120 },
+  { title: '法规依据', dataIndex: 'reference_law', key: 'reference_law', width: 180 },
+  { title: '状态', key: 'enabled', width: 90 },
+  { title: '操作', key: 'actions', width: 80, align: 'right' },
+]
+
+async function loadDictionary() {
+  if (isCreate.value) return
+  if (!dictionaryId.value) {
+    message.error('无效的词库 ID')
+    await router.replace('/compliance/dictionaries')
+    return
+  }
+  try {
+    const dictionaries = await complianceApi.dictionaries()
+    const item = dictionaries.find((row) => row.id === dictionaryId.value)
+    if (!item) {
+      message.error('词库不存在')
+      await router.replace('/compliance/dictionaries')
+      return
+    }
+    dictionary.value = item
+    form.code = item.code
+    form.name = item.name
+    form.platform_scope = item.platform_scope
+    form.applicable_platforms = [...item.applicable_platforms]
+    form.default_level = item.default_level
+    form.enabled = item.enabled
+    form.description = item.description ?? ''
+    await loadTerms()
+  } catch (error) {
+    showError(error)
+  }
+}
+
+async function loadTerms() {
+  if (!dictionaryId.value) return
+  termsLoading.value = true
+  try {
+    terms.value = await complianceApi.terms(dictionaryId.value)
+  } catch (error) {
+    showError(error)
+  } finally {
+    termsLoading.value = false
+  }
+}
+
+async function saveDictionary() {
+  if (!validateDictionaryForm()) return
+  saving.value = true
+  try {
+    const payload = {
+      code: form.code.trim(),
+      name: form.name.trim(),
+      platform_scope: form.platform_scope,
+      applicable_platforms: form.platform_scope === 'all' ? [] : [...form.applicable_platforms],
+      default_level: form.default_level,
+      enabled: form.enabled,
+      description: form.description.trim() || null,
+    }
+    if (isCreate.value) {
+      const created = await complianceApi.createDictionary(payload)
+      const initialTerms = parseTermLines(createTermsText.value)
+      if (initialTerms.length > 0) {
+        await complianceApi.batchImportTerms(
+          created.id,
+          initialTerms.map((pattern) => ({
+            match_type: 'exact',
+            pattern,
+            enabled: true,
+          })),
+        )
+      }
+      message.success('词库已创建')
+      await router.replace(`/compliance/dictionaries/${created.id}/edit`)
+    } else if (dictionaryId.value) {
+      dictionary.value = await complianceApi.updateDictionary(dictionaryId.value, payload)
+      message.success('词库已保存')
+      await loadDictionary()
+    }
+  } catch (error) {
+    showError(error)
+  } finally {
+    saving.value = false
+  }
+}
+
+async function createTerm() {
+  if (!dictionaryId.value) return
+  const pattern = termForm.pattern.trim()
+  if (!pattern) {
+    message.warning('请输入词条')
+    return
+  }
+  if (termForm.match_type === 'exact' && /\s/.test(pattern)) {
+    message.warning('精确匹配词条不能包含空白字符')
+    return
+  }
+  termSaving.value = true
+  try {
+    await complianceApi.createTerm(dictionaryId.value, {
+      match_type: termForm.match_type,
+      pattern,
+      level_override: termForm.level_override,
+      hint: termForm.hint.trim() || null,
+      reference_law: termForm.reference_law.trim() || null,
+      enabled: termForm.enabled,
+    })
+    message.success('词条已新增')
+    resetTermForm()
+    termDrawerOpen.value = false
+    await loadDictionary()
+  } catch (error) {
+    showError(error)
+  } finally {
+    termSaving.value = false
+  }
+}
+
+async function batchImportTerms() {
+  if (!dictionaryId.value) return
+  const lines = parseTermLines(batchTermsText.value)
+  if (lines.length === 0) {
+    message.warning('请输入至少一个词条')
+    return
+  }
+  batchSaving.value = true
+  try {
+    await complianceApi.batchImportTerms(
+      dictionaryId.value,
+      lines.map((pattern) => ({ match_type: 'exact', pattern, enabled: true })),
+    )
+    message.success(`已导入 ${lines.length} 个词条`)
+    batchTermsText.value = ''
+    batchDrawerOpen.value = false
+    await loadDictionary()
+  } catch (error) {
+    showError(error)
+  } finally {
+    batchSaving.value = false
+  }
+}
+
+async function deleteTerm(termId: number) {
+  if (!dictionaryId.value) return
+  deletingTermId.value = termId
+  try {
+    await complianceApi.deleteTerm(dictionaryId.value, termId)
+    message.success('词条已删除')
+    await loadDictionary()
+  } catch (error) {
+    showError(error)
+  } finally {
+    deletingTermId.value = null
+  }
+}
+
+async function publishCurrentDictionary() {
+  if (!dictionaryId.value) return
+  publishing.value = true
+  try {
+    dictionary.value = await complianceApi.publishDictionary(dictionaryId.value)
+    message.success('词库版本已发布')
+  } catch (error) {
+    showError(error)
+  } finally {
+    publishing.value = false
+  }
+}
+
+async function rollbackDictionary() {
+  if (!dictionaryId.value || !rollbackVersion.value) return
+  rollingBack.value = true
+  try {
+    dictionary.value = await complianceApi.rollbackDictionary(dictionaryId.value, rollbackVersion.value)
+    message.success('词库已回滚')
+    await loadDictionary()
+  } catch (error) {
+    showError(error)
+  } finally {
+    rollingBack.value = false
+  }
+}
+
+function validateDictionaryForm(): boolean {
+  if (!form.name.trim()) {
+    message.warning('请输入词库名称')
+    return false
+  }
+  if (isCreate.value && !form.code.trim()) {
+    message.warning('请输入词库 Code')
+    return false
+  }
+  if (form.platform_scope === 'specific' && form.applicable_platforms.length === 0) {
+    message.warning('请选择适用平台')
+    return false
+  }
+  return true
+}
+
+function parseTermLines(value: string): string[] {
+  return Array.from(
+    new Set(
+      value
+        .split(/\r?\n/)
+        .map((line) => line.trim())
+        .filter((line) => line && !/\s/.test(line)),
+    ),
+  )
+}
+
+function matchTypeLabel(value: string): string {
+  return matchTypeOptions.find((item) => item.value === value)?.label ?? value
+}
+
+function resetTermForm() {
+  termForm.match_type = 'exact'
+  termForm.pattern = ''
+  termForm.level_override = null
+  termForm.hint = ''
+  termForm.reference_law = ''
+  termForm.enabled = true
+}
+
+function showError(error: unknown) {
+  if (error instanceof OpsApiError) {
+    message.error(error.detail || error.message)
+  }
+}
+
+onMounted(() => {
+  void loadDictionary()
+})
+</script>
+
+<style scoped>
+.dictionary-edit-page {
+  display: flex;
+  flex-direction: column;
+  gap: 18px;
+}
+
+.dictionary-edit-header {
+  display: flex;
+  justify-content: space-between;
+  gap: 16px;
+  align-items: flex-start;
+}
+
+.dictionary-edit-header__meta {
+  display: flex;
+  gap: 14px;
+  color: #64748b;
+  font-size: 13px;
+}
+
+.dictionary-edit-grid {
+  display: grid;
+  grid-template-columns: minmax(0, 1fr) 320px;
+  gap: 18px;
+}
+
+.dictionary-edit-side {
+  align-self: start;
+}
+
+.section-title {
+  margin: 0 0 16px;
+  color: #0f172a;
+  font-size: 16px;
+  font-weight: 700;
+}
+
+.version-actions {
+  width: 100%;
+  margin-top: 16px;
+}
+
+.rollback-row {
+  display: flex;
+  gap: 8px;
+  width: 100%;
+}
+
+.rollback-row__input {
+  flex: 1;
+}
+
+.terms-header {
+  display: flex;
+  justify-content: space-between;
+  gap: 12px;
+  align-items: center;
+  margin-bottom: 16px;
+}
+
+.create-terms-alert {
+  margin-bottom: 12px;
+}
+
+.term-pattern {
+  display: flex;
+  flex-direction: column;
+  gap: 3px;
+}
+
+.term-pattern span {
+  color: #64748b;
+  font-size: 12px;
+}
+
+.drawer-footer {
+  display: flex;
+  justify-content: flex-end;
+  gap: 8px;
+}
+
+.table-actions-row--right {
+  justify-content: flex-end;
+}
+
+@media (max-width: 960px) {
+  .dictionary-edit-grid {
+    grid-template-columns: 1fr;
+  }
+}
+</style>
diff --git a/apps/ops-web/src/views/compliance/ComplianceManualReviewDetailView.vue b/apps/ops-web/src/views/compliance/ComplianceManualReviewDetailView.vue
new file mode 100644
index 0000000..db250ce
--- /dev/null
+++ b/apps/ops-web/src/views/compliance/ComplianceManualReviewDetailView.vue
@@ -0,0 +1,279 @@
+<template>
+  <div class="manual-review-detail-page">
+    <div class="manual-review-detail-header">
+      <div>
+        <h2 class="ops-page-title">审阅详情 #{{ reviewId }}</h2>
+        <div v-if="review" class="manual-review-detail-header__meta">
+          <a-tag :color="reviewStatusColor(review.status)">
+            {{ reviewStatusLabel(review.status) }}
+          </a-tag>
+          <span>租户 {{ review.tenant_name || `#${review.tenant_id}` }}</span>
+          <span>版本 #{{ review.article_version_id }}</span>
+        </div>
+      </div>
+      <a-space>
+        <a-button @click="router.push('/compliance/manual-reviews')">返回列表</a-button>
+        <a-button :loading="loading" @click="loadReview">刷新</a-button>
+      </a-space>
+    </div>
+
+    <a-spin :spinning="loading">
+      <div v-if="review" class="manual-review-detail-grid">
+        <div class="ops-card article-panel">
+          <h3 class="section-title">{{ review.article_title || `文章 #${review.article_id}` }}</h3>
+          <div class="article-meta">
+            <span>申请人 {{ review.applicant_name || `#${review.requested_by}` }}</span>
+            <span>申请时间 {{ formatDate(review.requested_at) }}</span>
+            <span>目标平台 {{ platformListLabel(review.original_target_platforms) }}</span>
+          </div>
+          <div class="plaintext-box">
+            {{ review.article_plaintext || '暂无正文快照' }}
+          </div>
+        </div>
+
+        <div class="ops-card decision-panel">
+          <h3 class="section-title">审阅决策</h3>
+          <a-descriptions :column="1" size="small" bordered>
+            <a-descriptions-item label="申请说明">
+              {{ review.request_note || '—' }}
+            </a-descriptions-item>
+            <a-descriptions-item v-if="review.decision_reason" label="决策理由">
+              {{ review.decision_reason }}
+            </a-descriptions-item>
+            <a-descriptions-item v-if="review.cancel_reason" label="撤回理由">
+              {{ review.cancel_reason }}
+            </a-descriptions-item>
+          </a-descriptions>
+
+          <template v-if="review.status === 'pending'">
+            <a-form class="decision-form" layout="vertical">
+              <a-form-item label="决策理由" required>
+                <a-textarea v-model:value="decisionReason" :rows="5" placeholder="填写通过或驳回原因" />
+              </a-form-item>
+              <a-space class="decision-actions">
+                <a-popconfirm
+                  title="确认通过该版本？通过后该 article_version 将永久绕过自动检测。"
+                  :ok-button-props="{ loading: deciding, type: 'primary' }"
+                  @confirm="decide(true)"
+                >
+                  <a-button type="primary" :disabled="deciding">
+                    <template #icon><CheckOutlined /></template>
+                    通过
+                  </a-button>
+                </a-popconfirm>
+                <a-popconfirm
+                  title="确认驳回该版本？驳回后该 article_version 将不可发布。"
+                  :ok-button-props="{ danger: true, loading: deciding }"
+                  @confirm="decide(false)"
+                >
+                  <a-button danger :disabled="deciding">
+                    <template #icon><CloseOutlined /></template>
+                    驳回
+                  </a-button>
+                </a-popconfirm>
+              </a-space>
+            </a-form>
+          </template>
+          <a-alert
+            v-else
+            class="terminal-alert"
+            type="info"
+            show-icon
+            message="该审阅已进入终态，不能再次决策。"
+          />
+        </div>
+      </div>
+
+      <div v-if="review" class="ops-card violations-card">
+        <h3 class="section-title">命中证据</h3>
+        <a-table
+          :columns="violationColumns"
+          :data-source="review.violation_summary"
+          row-key="id"
+          :pagination="{ pageSize: 20, showSizeChanger: true }"
+        >
+          <template #bodyCell="{ column, record }">
+            <template v-if="column.key === 'matched_text'">
+              <strong>{{ record.matched_text }}</strong>
+            </template>
+            <template v-else-if="column.key === 'level'">
+              <a-tag :color="levelColor(record.level)">{{ levelLabel(record.level) }}</a-tag>
+            </template>
+            <template v-else-if="column.key === 'source'">
+              {{ sourceLabel(record.source) }}
+            </template>
+            <template v-else-if="column.key === 'platform'">
+              {{ platformLabel(record.platform_code) }}
+            </template>
+            <template v-else-if="column.key === 'dictionary'">
+              {{ record.dictionary_name || record.dictionary_code || '—' }}
+            </template>
+          </template>
+        </a-table>
+      </div>
+    </a-spin>
+  </div>
+</template>
+
+<script setup lang="ts">
+import type { ComplianceManualReview, ComplianceViolation } from '@geo/shared-types'
+import { CheckOutlined, CloseOutlined } from '@ant-design/icons-vue'
+import type { TableColumnsType } from 'ant-design-vue'
+import { message } from 'ant-design-vue'
+import dayjs from 'dayjs'
+import { computed, onMounted, ref } from 'vue'
+import { useRoute, useRouter } from 'vue-router'
+
+import {
+  levelColor,
+  levelLabel,
+  platformLabel,
+  platformListLabel,
+  reviewStatusColor,
+  reviewStatusLabel,
+  sourceLabel,
+} from '@/lib/compliance-display'
+import { complianceApi } from '@/lib/compliance'
+import { OpsApiError } from '@/lib/http'
+
+const route = useRoute()
+const router = useRouter()
+
+const reviewId = computed(() => Number(route.params.id))
+const review = ref<ComplianceManualReview | null>(null)
+const loading = ref(false)
+const deciding = ref(false)
+const decisionReason = ref('')
+
+const violationColumns: TableColumnsType<ComplianceViolation> = [
+  { title: '命中文本', key: 'matched_text' },
+  { title: '等级', key: 'level', width: 110 },
+  { title: '来源', key: 'source', width: 110 },
+  { title: '平台', key: 'platform', width: 140 },
+  { title: '词库', key: 'dictionary', width: 180 },
+  { title: '提示', dataIndex: 'hint', key: 'hint' },
+]
+
+async function loadReview() {
+  if (!Number.isFinite(reviewId.value) || reviewId.value <= 0) {
+    message.error('无效的审阅 ID')
+    await router.replace('/compliance/manual-reviews')
+    return
+  }
+  loading.value = true
+  try {
+    review.value = await complianceApi.manualReview(reviewId.value)
+  } catch (error) {
+    showError(error)
+  } finally {
+    loading.value = false
+  }
+}
+
+async function decide(approve: boolean) {
+  const reason = decisionReason.value.trim()
+  if (!reason) {
+    message.warning('请填写决策理由')
+    return
+  }
+  deciding.value = true
+  try {
+    review.value = approve
+      ? await complianceApi.approveManualReview(reviewId.value, reason)
+      : await complianceApi.rejectManualReview(reviewId.value, reason)
+    message.success(approve ? '审阅已通过' : '审阅已驳回')
+    decisionReason.value = ''
+  } catch (error) {
+    showError(error)
+  } finally {
+    deciding.value = false
+  }
+}
+
+function formatDate(value: string): string {
+  return dayjs(value).format('YYYY-MM-DD HH:mm')
+}
+
+function showError(error: unknown) {
+  if (error instanceof OpsApiError) {
+    message.error(error.detail || error.message)
+  }
+}
+
+onMounted(() => {
+  void loadReview()
+})
+</script>
+
+<style scoped>
+.manual-review-detail-page {
+  display: flex;
+  flex-direction: column;
+  gap: 18px;
+}
+
+.manual-review-detail-header {
+  display: flex;
+  justify-content: space-between;
+  gap: 16px;
+  align-items: flex-start;
+}
+
+.manual-review-detail-header__meta,
+.article-meta {
+  display: flex;
+  gap: 12px;
+  flex-wrap: wrap;
+  color: #64748b;
+  font-size: 13px;
+}
+
+.manual-review-detail-grid {
+  display: grid;
+  grid-template-columns: minmax(0, 1fr) 380px;
+  gap: 18px;
+}
+
+.section-title {
+  margin: 0 0 14px;
+  color: #0f172a;
+  font-size: 16px;
+  font-weight: 700;
+}
+
+.plaintext-box {
+  min-height: 420px;
+  max-height: 640px;
+  overflow: auto;
+  margin-top: 16px;
+  padding: 18px;
+  border: 1px solid #e2e8f0;
+  border-radius: 8px;
+  background: #f8fafc;
+  color: #334155;
+  line-height: 1.8;
+  white-space: pre-wrap;
+}
+
+.decision-panel {
+  align-self: start;
+}
+
+.decision-form {
+  margin-top: 16px;
+}
+
+.decision-actions {
+  width: 100%;
+}
+
+.terminal-alert {
+  margin-top: 16px;
+}
+
+@media (max-width: 1100px) {
+  .manual-review-detail-grid {
+    grid-template-columns: 1fr;
+  }
+}
+</style>
diff --git a/apps/ops-web/src/views/compliance/ComplianceManualReviewsView.vue b/apps/ops-web/src/views/compliance/ComplianceManualReviewsView.vue
new file mode 100644
index 0000000..ac3f197
--- /dev/null
+++ b/apps/ops-web/src/views/compliance/ComplianceManualReviewsView.vue
@@ -0,0 +1,223 @@
+<template>
+  <div class="manual-review-page">
+    <div class="manual-review-header">
+      <div>
+        <h2 class="ops-page-title">人工审阅工作台</h2>
+        <div class="manual-review-header__meta">
+          <span>待审优先处理</span>
+          <span>当前筛选 {{ total }}</span>
+        </div>
+      </div>
+      <a-button :loading="loading" @click="reload">
+        <template #icon><ReloadOutlined /></template>
+        刷新
+      </a-button>
+    </div>
+
+    <div class="ops-card">
+      <div class="ops-toolbar manual-review-toolbar">
+        <a-tabs v-model:active-key="filter.status" class="manual-review-tabs" @change="onStatusTab">
+          <a-tab-pane key="pending" tab="待审" />
+          <a-tab-pane key="approved" tab="已通过" />
+          <a-tab-pane key="rejected" tab="已驳回" />
+          <a-tab-pane key="" tab="全部" />
+        </a-tabs>
+        <a-input-number
+          v-model:value="tenantIdInput"
+          class="tenant-filter"
+          :min="1"
+          placeholder="租户 ID"
+          @press-enter="reload"
+        />
+        <a-button @click="reload">查询</a-button>
+      </div>
+
+      <a-table
+        :columns="columns"
+        :data-source="rows"
+        :loading="loading"
+        :pagination="pagination"
+        row-key="id"
+        @change="onTableChange"
+      >
+        <template #bodyCell="{ column, record }">
+          <template v-if="column.key === 'article'">
+            <div class="primary-cell">
+              <strong>{{ record.article_title || `文章 #${record.article_id}` }}</strong>
+              <span>
+                租户 {{ record.tenant_name || `#${record.tenant_id}` }} · 版本 #{{ record.article_version_id }}
+              </span>
+            </div>
+          </template>
+          <template v-else-if="column.key === 'status'">
+            <a-tag :color="reviewStatusColor(record.status)">
+              {{ reviewStatusLabel(record.status) }}
+            </a-tag>
+          </template>
+          <template v-else-if="column.key === 'violations'">
+            <a-space wrap>
+              <a-tag
+                v-for="violation in record.violation_summary.slice(0, 3)"
+                :key="`${record.id}-${violation.id}-${violation.matched_text}`"
+                :color="levelColor(violation.level)"
+              >
+                {{ violation.matched_text }}
+              </a-tag>
+              <a-tag v-if="record.violation_summary.length > 3">
+                +{{ record.violation_summary.length - 3 }}
+              </a-tag>
+            </a-space>
+          </template>
+          <template v-else-if="column.key === 'platforms'">
+            {{ platformListLabel(record.original_target_platforms) }}
+          </template>
+          <template v-else-if="column.key === 'requested_at'">
+            {{ formatDate(record.requested_at) }}
+          </template>
+          <template v-else-if="column.key === 'actions'">
+            <a-button type="link" @click="router.push(`/compliance/manual-reviews/${record.id}`)">
+              详情
+            </a-button>
+          </template>
+        </template>
+      </a-table>
+    </div>
+  </div>
+</template>
+
+<script setup lang="ts">
+import type { ComplianceManualReview } from '@geo/shared-types'
+import { ReloadOutlined } from '@ant-design/icons-vue'
+import type { TableColumnsType, TablePaginationConfig } from 'ant-design-vue'
+import { message } from 'ant-design-vue'
+import dayjs from 'dayjs'
+import { computed, onMounted, reactive, ref } from 'vue'
+import { useRouter } from 'vue-router'
+
+import {
+  levelColor,
+  platformListLabel,
+  reviewStatusColor,
+  reviewStatusLabel,
+} from '@/lib/compliance-display'
+import { complianceApi } from '@/lib/compliance'
+import { OpsApiError } from '@/lib/http'
+
+const router = useRouter()
+
+const rows = ref<ComplianceManualReview[]>([])
+const loading = ref(false)
+const page = ref(1)
+const pageSize = ref(50)
+const total = ref(0)
+const tenantIdInput = ref<number | null>(null)
+const filter = reactive({
+  status: 'pending',
+})
+
+const columns: TableColumnsType<ComplianceManualReview> = [
+  { title: '文章', key: 'article', width: 300 },
+  { title: '状态', key: 'status', width: 100 },
+  { title: '命中摘要', key: 'violations' },
+  { title: '目标平台', key: 'platforms', width: 180 },
+  { title: '申请时间', key: 'requested_at', width: 170 },
+  { title: '操作', key: 'actions', width: 90, align: 'right' },
+]
+
+const pagination = computed<TablePaginationConfig>(() => ({
+  current: page.value,
+  pageSize: pageSize.value,
+  total: total.value,
+  showSizeChanger: true,
+  pageSizeOptions: ['20', '50', '100'],
+}))
+
+async function reload() {
+  loading.value = true
+  try {
+    const result = await complianceApi.manualReviews({
+      status: filter.status || undefined,
+      tenant_id: tenantIdInput.value ?? undefined,
+      page: page.value,
+      page_size: pageSize.value,
+    })
+    rows.value = result.items
+    total.value = result.total
+  } catch (error) {
+    showError(error)
+  } finally {
+    loading.value = false
+  }
+}
+
+function onStatusTab() {
+  page.value = 1
+  void reload()
+}
+
+function onTableChange(pag: TablePaginationConfig) {
+  page.value = pag.current ?? 1
+  pageSize.value = pag.pageSize ?? 50
+  void reload()
+}
+
+function formatDate(value: string): string {
+  return dayjs(value).format('YYYY-MM-DD HH:mm')
+}
+
+function showError(error: unknown) {
+  if (error instanceof OpsApiError) {
+    message.error(error.detail || error.message)
+  }
+}
+
+onMounted(() => {
+  void reload()
+})
+</script>
+
+<style scoped>
+.manual-review-page {
+  display: flex;
+  flex-direction: column;
+  gap: 18px;
+}
+
+.manual-review-header {
+  display: flex;
+  justify-content: space-between;
+  gap: 16px;
+  align-items: flex-start;
+}
+
+.manual-review-header__meta {
+  display: flex;
+  gap: 14px;
+  color: #64748b;
+  font-size: 13px;
+}
+
+.manual-review-toolbar {
+  align-items: flex-start;
+}
+
+.manual-review-tabs {
+  flex: 1;
+  min-width: 360px;
+}
+
+.tenant-filter {
+  width: 140px;
+}
+
+.primary-cell {
+  display: flex;
+  flex-direction: column;
+  gap: 3px;
+}
+
+.primary-cell span {
+  color: #94a3b8;
+  font-size: 12px;
+}
+</style>
diff --git a/apps/ops-web/src/views/compliance/CompliancePolicyView.vue b/apps/ops-web/src/views/compliance/CompliancePolicyView.vue
new file mode 100644
index 0000000..8afce1a
--- /dev/null
+++ b/apps/ops-web/src/views/compliance/CompliancePolicyView.vue
@@ -0,0 +1,324 @@
+<template>
+  <div class="policy-page">
+    <div class="policy-header">
+      <div>
+        <h2 class="ops-page-title">全局合规策略</h2>
+        <div class="policy-header__meta">
+          <span>修订 {{ policy?.revision ?? 0 }}</span>
+          <span>更新 {{ policy?.updated_at ? formatDate(policy.updated_at) : '--' }}</span>
+        </div>
+      </div>
+      <a-space>
+        <a-button :loading="loading" @click="loadAll">
+          <template #icon><ReloadOutlined /></template>
+          刷新
+        </a-button>
+        <a-button type="primary" :loading="saving" @click="savePolicy">保存策略</a-button>
+      </a-space>
+    </div>
+
+    <div class="policy-grid">
+      <div class="ops-card policy-master-card">
+        <div class="policy-master-card__main">
+          <div>
+            <span class="eyebrow">MASTER SWITCH</span>
+            <h3>内容合规检测总开关</h3>
+            <p>关闭后自动检测器短路，但人工审阅 pending / rejected 仍会继续生效。</p>
+          </div>
+          <a-popconfirm
+            :title="form.master_enabled ? '确认关闭全站自动检测？' : '确认开启全站自动检测？'"
+            :ok-button-props="{ danger: form.master_enabled, loading: masterSaving }"
+            @confirm="toggleMasterSwitch"
+          >
+            <a-switch
+              :checked="form.master_enabled"
+              :loading="masterSaving"
+              checked-children="开启"
+              un-checked-children="关闭"
+            />
+          </a-popconfirm>
+        </div>
+        <a-alert
+          v-if="!form.master_enabled"
+          type="warning"
+          show-icon
+          message="全站自动检测已关闭，发布闸会跳过词库、正则与 LLM 检测。"
+        />
+      </div>
+
+      <div class="ops-card">
+        <h3 class="section-title">判定模式</h3>
+        <a-radio-group v-model:value="form.enforcement_mode" class="mode-radio-group">
+          <a-radio-button value="mandatory">强制阻断</a-radio-button>
+          <a-radio-button value="advisory">仅提示确认</a-radio-button>
+          <a-radio-button value="disabled">关闭检测</a-radio-button>
+        </a-radio-group>
+        <div class="mode-hint">
+          <a-tag :color="modeColor(form.enforcement_mode)">
+            {{ modeLabel(form.enforcement_mode) }}
+          </a-tag>
+          <span>{{ modeHint }}</span>
+        </div>
+      </div>
+    </div>
+
+    <div class="ops-card">
+      <div class="section-header">
+        <h3 class="section-title">启用词库</h3>
+        <a-tag>{{ form.enabled_dictionaries.length }} / {{ dictionaries.length }}</a-tag>
+      </div>
+      <a-select
+        v-model:value="form.enabled_dictionaries"
+        mode="multiple"
+        class="dictionary-select"
+        :options="dictionaryOptions"
+        :loading="loading"
+        placeholder="选择参与自动检测的词库"
+      />
+      <div class="dictionary-preview">
+        <a-tag
+          v-for="dictionary in selectedDictionaries"
+          :key="dictionary.id"
+          :color="dictionary.enabled ? 'blue' : 'default'"
+        >
+          {{ dictionary.name }} · v{{ dictionary.version }}
+        </a-tag>
+      </div>
+    </div>
+
+    <div class="ops-card">
+      <div class="section-header">
+        <h3 class="section-title">LLM 复核</h3>
+        <a-switch
+          v-model:checked="form.llm_judge_enabled"
+          checked-children="开启"
+          un-checked-children="关闭"
+        />
+      </div>
+      <a-alert
+        type="info"
+        show-icon
+        message="发布硬闸不等待 LLM；开启后编辑器检测可同步等待，发布后会进入异步复核队列并计入 AI 点数。"
+      />
+      <a-select
+        v-model:value="form.llm_categories"
+        mode="tags"
+        class="llm-category-select"
+        placeholder="输入复核类别，如 medical、finance"
+      />
+    </div>
+  </div>
+</template>
+
+<script setup lang="ts">
+import { ReloadOutlined } from '@ant-design/icons-vue'
+import { message } from 'ant-design-vue'
+import dayjs from 'dayjs'
+import { computed, onMounted, reactive, ref } from 'vue'
+
+import { modeColor, modeLabel } from '@/lib/compliance-display'
+import {
+  complianceApi,
+  type ComplianceMode,
+  type CompliancePolicy,
+  type OpsComplianceDictionary,
+} from '@/lib/compliance'
+import { OpsApiError } from '@/lib/http'
+
+const policy = ref<CompliancePolicy | null>(null)
+const dictionaries = ref<OpsComplianceDictionary[]>([])
+const loading = ref(false)
+const saving = ref(false)
+const masterSaving = ref(false)
+
+const form = reactive({
+  master_enabled: true,
+  enforcement_mode: 'advisory' as ComplianceMode,
+  enabled_dictionaries: [] as number[],
+  llm_judge_enabled: false,
+  llm_categories: [] as string[],
+})
+
+const dictionaryOptions = computed(() =>
+  dictionaries.value.map((item) => ({
+    label: `${item.name} · ${item.code}`,
+    value: item.id,
+    disabled: !item.enabled,
+  })),
+)
+
+const selectedDictionaries = computed(() => {
+  const selected = new Set(form.enabled_dictionaries)
+  return dictionaries.value.filter((item) => selected.has(item.id))
+})
+
+const modeHint = computed(() => {
+  if (form.enforcement_mode === 'mandatory') return 'block 等级命中会直接阻断发布'
+  if (form.enforcement_mode === 'advisory') return '命中后作者确认风险即可继续发布'
+  return '自动检测短路，保留人工审阅裁决'
+})
+
+async function loadAll() {
+  loading.value = true
+  try {
+    const [policyResult, dictionariesResult] = await Promise.all([
+      complianceApi.globalPolicy(),
+      complianceApi.dictionaries(),
+    ])
+    policy.value = policyResult
+    dictionaries.value = dictionariesResult
+    applyPolicy(policyResult)
+  } catch (error) {
+    showError(error)
+  } finally {
+    loading.value = false
+  }
+}
+
+async function savePolicy() {
+  saving.value = true
+  try {
+    policy.value = await complianceApi.updateGlobalPolicy({
+      master_enabled: form.master_enabled,
+      enforcement_mode: form.enforcement_mode,
+      enabled_dictionaries: form.enabled_dictionaries,
+      llm_judge_enabled: form.llm_judge_enabled,
+      llm_categories: form.llm_categories,
+    })
+    applyPolicy(policy.value)
+    message.success('全局策略已保存')
+  } catch (error) {
+    showError(error)
+  } finally {
+    saving.value = false
+  }
+}
+
+async function toggleMasterSwitch() {
+  masterSaving.value = true
+  try {
+    policy.value = await complianceApi.setMasterSwitch(!form.master_enabled)
+    applyPolicy(policy.value)
+    message.success(form.master_enabled ? '自动检测已开启' : '自动检测已关闭')
+  } catch (error) {
+    showError(error)
+  } finally {
+    masterSaving.value = false
+  }
+}
+
+function applyPolicy(next: CompliancePolicy) {
+  form.master_enabled = next.master_enabled ?? true
+  form.enforcement_mode = next.enforcement_mode
+  form.enabled_dictionaries = [...next.enabled_dictionaries]
+  form.llm_judge_enabled = next.llm_judge_enabled
+  form.llm_categories = [...next.llm_categories]
+}
+
+function formatDate(value: string): string {
+  return dayjs(value).format('YYYY-MM-DD HH:mm')
+}
+
+function showError(error: unknown) {
+  if (error instanceof OpsApiError) {
+    message.error(error.detail || error.message)
+  }
+}
+
+onMounted(() => {
+  void loadAll()
+})
+</script>
+
+<style scoped>
+.policy-page {
+  display: flex;
+  flex-direction: column;
+  gap: 18px;
+}
+
+.policy-header,
+.section-header {
+  display: flex;
+  justify-content: space-between;
+  align-items: flex-start;
+  gap: 16px;
+}
+
+.policy-header__meta {
+  display: flex;
+  gap: 14px;
+  color: #64748b;
+  font-size: 13px;
+}
+
+.policy-grid {
+  display: grid;
+  grid-template-columns: minmax(0, 1fr) minmax(320px, 420px);
+  gap: 18px;
+}
+
+.policy-master-card {
+  display: flex;
+  flex-direction: column;
+  gap: 14px;
+}
+
+.policy-master-card__main {
+  display: flex;
+  justify-content: space-between;
+  align-items: center;
+  gap: 24px;
+}
+
+.eyebrow {
+  color: #64748b;
+  font-size: 11px;
+  font-weight: 800;
+  letter-spacing: 0;
+}
+
+.policy-master-card h3,
+.section-title {
+  margin: 0;
+  color: #0f172a;
+  font-size: 16px;
+  font-weight: 700;
+}
+
+.policy-master-card p {
+  margin: 8px 0 0;
+  color: #64748b;
+}
+
+.mode-radio-group {
+  width: 100%;
+}
+
+.mode-hint {
+  display: flex;
+  align-items: center;
+  gap: 8px;
+  margin-top: 14px;
+  color: #64748b;
+}
+
+.dictionary-select,
+.llm-category-select {
+  width: 100%;
+  margin-top: 14px;
+}
+
+.dictionary-preview {
+  display: flex;
+  gap: 8px;
+  flex-wrap: wrap;
+  margin-top: 14px;
+}
+
+@media (max-width: 1040px) {
+  .policy-grid {
+    grid-template-columns: 1fr;
+  }
+}
+</style>
diff --git a/apps/ops-web/src/views/compliance/ComplianceRecordsView.vue b/apps/ops-web/src/views/compliance/ComplianceRecordsView.vue
new file mode 100644
index 0000000..d48d31e
--- /dev/null
+++ b/apps/ops-web/src/views/compliance/ComplianceRecordsView.vue
@@ -0,0 +1,238 @@
+<template>
+  <div class="records-page">
+    <div class="records-header">
+      <div>
+        <h2 class="ops-page-title">检测记录</h2>
+        <div class="records-header__meta">全局检测审计与命中证据搜索</div>
+      </div>
+      <a-button :loading="loading" @click="reload">
+        <template #icon><ReloadOutlined /></template>
+        刷新
+      </a-button>
+    </div>
+
+    <div class="ops-card">
+      <div class="ops-toolbar records-toolbar">
+        <a-input-number
+          v-model:value="filter.tenant_id"
+          class="number-filter"
+          :min="1"
+          placeholder="租户 ID"
+        />
+        <a-input-number
+          v-model:value="filter.article_id"
+          class="number-filter"
+          :min="1"
+          placeholder="文章 ID"
+        />
+        <a-select
+          v-model:value="filter.decision"
+          class="decision-filter"
+          :options="decisionOptions"
+          allow-clear
+          placeholder="判定"
+        />
+        <a-button @click="onFilter">查询</a-button>
+      </div>
+
+      <a-table
+        :columns="columns"
+        :data-source="rows"
+        :loading="loading"
+        :pagination="pagination"
+        row-key="record_id"
+        @change="onTableChange"
+      >
+        <template #bodyCell="{ column, record }">
+          <template v-if="column.key === 'record'">
+            <div class="primary-cell">
+              <strong>记录 #{{ record.record_id }}</strong>
+              <span>文章 #{{ record.article_id || '--' }} · 版本 #{{ record.article_version_id || '--' }}</span>
+            </div>
+          </template>
+          <template v-else-if="column.key === 'decision'">
+            <a-tag :color="decisionColor(record.decision)">
+              {{ decisionLabel(record.decision) }}
+            </a-tag>
+          </template>
+          <template v-else-if="column.key === 'level'">
+            <a-tag :color="levelColor(record.highest_level)">
+              {{ levelLabel(record.highest_level) }}
+            </a-tag>
+          </template>
+          <template v-else-if="column.key === 'mode'">
+            <a-tag :color="modeColor(record.enforcement_mode)">
+              {{ modeLabel(record.enforcement_mode) }}
+            </a-tag>
+          </template>
+          <template v-else-if="column.key === 'violations'">
+            <a-space wrap>
+              <a-tag
+                v-for="violation in record.violations.slice(0, 3)"
+                :key="`${record.record_id}-${violation.id}-${violation.matched_text}`"
+                :color="levelColor(violation.level)"
+              >
+                {{ violation.matched_text }}
+              </a-tag>
+              <a-tag v-if="record.violations.length > 3">+{{ record.violations.length - 3 }}</a-tag>
+              <span v-if="record.violations.length === 0" class="muted-text">无命中</span>
+            </a-space>
+          </template>
+          <template v-else-if="column.key === 'manual'">
+            <a-tag :color="reviewStatusColor(record.manual_review_status)">
+              {{ reviewStatusLabel(record.manual_review_status) }}
+            </a-tag>
+          </template>
+          <template v-else-if="column.key === 'checked_at'">
+            {{ formatDate(record.checked_at) }}
+          </template>
+          <template v-else-if="column.key === 'duration'">
+            {{ record.duration_ms }}ms
+          </template>
+        </template>
+      </a-table>
+    </div>
+  </div>
+</template>
+
+<script setup lang="ts">
+import type { ComplianceCheckResult } from '@geo/shared-types'
+import { ReloadOutlined } from '@ant-design/icons-vue'
+import type { TableColumnsType, TablePaginationConfig } from 'ant-design-vue'
+import { message } from 'ant-design-vue'
+import dayjs from 'dayjs'
+import { computed, onMounted, reactive, ref } from 'vue'
+
+import {
+  decisionColor,
+  decisionLabel,
+  levelColor,
+  levelLabel,
+  modeColor,
+  modeLabel,
+  reviewStatusColor,
+  reviewStatusLabel,
+} from '@/lib/compliance-display'
+import { complianceApi } from '@/lib/compliance'
+import { OpsApiError } from '@/lib/http'
+
+const rows = ref<ComplianceCheckResult[]>([])
+const loading = ref(false)
+const page = ref(1)
+const pageSize = ref(50)
+const total = ref(0)
+const filter = reactive({
+  tenant_id: null as number | null,
+  article_id: null as number | null,
+  decision: undefined as string | undefined,
+})
+
+const decisionOptions = [
+  { label: '通过', value: 'pass' },
+  { label: '待确认', value: 'needs_ack' },
+  { label: '阻断', value: 'block' },
+]
+
+const columns: TableColumnsType<ComplianceCheckResult> = [
+  { title: '记录', key: 'record', width: 230 },
+  { title: '判定', key: 'decision', width: 100 },
+  { title: '最高等级', key: 'level', width: 110 },
+  { title: '模式', key: 'mode', width: 120 },
+  { title: '命中', key: 'violations' },
+  { title: '人工审阅', key: 'manual', width: 120 },
+  { title: '耗时', key: 'duration', width: 90 },
+  { title: '检测时间', key: 'checked_at', width: 170 },
+]
+
+const pagination = computed<TablePaginationConfig>(() => ({
+  current: page.value,
+  pageSize: pageSize.value,
+  total: total.value,
+  showSizeChanger: true,
+  pageSizeOptions: ['20', '50', '100'],
+}))
+
+async function reload() {
+  loading.value = true
+  try {
+    const result = await complianceApi.records({
+      tenant_id: filter.tenant_id ?? undefined,
+      article_id: filter.article_id ?? undefined,
+      decision: filter.decision,
+      page: page.value,
+      page_size: pageSize.value,
+    })
+    rows.value = result.items
+    total.value = result.total
+  } catch (error) {
+    showError(error)
+  } finally {
+    loading.value = false
+  }
+}
+
+function onFilter() {
+  page.value = 1
+  void reload()
+}
+
+function onTableChange(pag: TablePaginationConfig) {
+  page.value = pag.current ?? 1
+  pageSize.value = pag.pageSize ?? 50
+  void reload()
+}
+
+function formatDate(value: string): string {
+  return dayjs(value).format('YYYY-MM-DD HH:mm')
+}
+
+function showError(error: unknown) {
+  if (error instanceof OpsApiError) {
+    message.error(error.detail || error.message)
+  }
+}
+
+onMounted(() => {
+  void reload()
+})
+</script>
+
+<style scoped>
+.records-page {
+  display: flex;
+  flex-direction: column;
+  gap: 18px;
+}
+
+.records-header {
+  display: flex;
+  justify-content: space-between;
+  gap: 16px;
+  align-items: flex-start;
+}
+
+.records-header__meta {
+  color: #64748b;
+  font-size: 13px;
+}
+
+.number-filter {
+  width: 140px;
+}
+
+.decision-filter {
+  width: 140px;
+}
+
+.primary-cell {
+  display: flex;
+  flex-direction: column;
+  gap: 3px;
+}
+
+.primary-cell span,
+.muted-text {
+  color: #94a3b8;
+  font-size: 12px;
+}
+</style>
diff --git a/apps/ops-web/src/views/compliance/ComplianceStatsView.vue b/apps/ops-web/src/views/compliance/ComplianceStatsView.vue
new file mode 100644
index 0000000..3b66c5b
--- /dev/null
+++ b/apps/ops-web/src/views/compliance/ComplianceStatsView.vue
@@ -0,0 +1,206 @@
+<template>
+  <div class="stats-page">
+    <div class="stats-header">
+      <div>
+        <h2 class="ops-page-title">合规统计</h2>
+        <div class="stats-header__meta">检测量、拦截、确认与人工审阅分布</div>
+      </div>
+      <a-button :loading="loading" @click="loadStats">
+        <template #icon><ReloadOutlined /></template>
+        刷新
+      </a-button>
+    </div>
+
+    <div class="stats-grid">
+      <div class="ops-card stat-card">
+        <a-statistic title="检测总量" :value="stats?.check_count ?? 0" />
+      </div>
+      <div class="ops-card stat-card stat-card--red">
+        <a-statistic title="阻断" :value="stats?.blocked_count ?? 0" />
+      </div>
+      <div class="ops-card stat-card stat-card--gold">
+        <a-statistic title="待确认" :value="stats?.needs_ack_count ?? 0" />
+      </div>
+      <div class="ops-card stat-card stat-card--green">
+        <a-statistic title="通过" :value="stats?.passed_count ?? 0" />
+      </div>
+    </div>
+
+    <div class="stats-grid stats-grid--wide">
+      <div class="ops-card">
+        <h3 class="section-title">风险等级分布</h3>
+        <div class="metric-list">
+          <div v-for="item in levelRows" :key="item.key" class="metric-row">
+            <span>
+              <a-tag :color="levelColor(item.key)">{{ levelLabel(item.key) }}</a-tag>
+            </span>
+            <strong>{{ item.value }}</strong>
+          </div>
+        </div>
+      </div>
+      <div class="ops-card">
+        <h3 class="section-title">命中来源分布</h3>
+        <div class="metric-list">
+          <div v-for="item in sourceRows" :key="item.key" class="metric-row">
+            <span>{{ sourceLabel(item.key) }}</span>
+            <strong>{{ item.value }}</strong>
+          </div>
+        </div>
+      </div>
+      <div class="ops-card">
+        <h3 class="section-title">人工审阅</h3>
+        <div class="metric-list">
+          <div class="metric-row">
+            <span><a-tag color="gold">待审</a-tag></span>
+            <strong>{{ stats?.manual_pending_count ?? 0 }}</strong>
+          </div>
+          <div class="metric-row">
+            <span><a-tag color="green">已通过</a-tag></span>
+            <strong>{{ stats?.manual_approved_count ?? 0 }}</strong>
+          </div>
+          <div class="metric-row">
+            <span><a-tag color="red">已驳回</a-tag></span>
+            <strong>{{ stats?.manual_rejected_count ?? 0 }}</strong>
+          </div>
+          <div class="metric-row">
+            <span>确认记录</span>
+            <strong>{{ stats?.ack_count ?? 0 }}</strong>
+          </div>
+        </div>
+      </div>
+    </div>
+  </div>
+</template>
+
+<script setup lang="ts">
+import { ReloadOutlined } from '@ant-design/icons-vue'
+import { message } from 'ant-design-vue'
+import { computed, onMounted, ref } from 'vue'
+
+import { levelColor, levelLabel, sourceLabel } from '@/lib/compliance-display'
+import { complianceApi, type ComplianceStats } from '@/lib/compliance'
+import { OpsApiError } from '@/lib/http'
+
+const stats = ref<ComplianceStats | null>(null)
+const loading = ref(false)
+
+const levelRows = computed(() => toRows(stats.value?.by_level))
+const sourceRows = computed(() => toRows(stats.value?.by_source))
+
+async function loadStats() {
+  loading.value = true
+  try {
+    stats.value = await complianceApi.stats()
+  } catch (error) {
+    showError(error)
+  } finally {
+    loading.value = false
+  }
+}
+
+function toRows(value?: Record<string, number>) {
+  return Object.entries(value ?? {})
+    .map(([key, count]) => ({ key, value: count }))
+    .sort((a, b) => b.value - a.value)
+}
+
+function showError(error: unknown) {
+  if (error instanceof OpsApiError) {
+    message.error(error.detail || error.message)
+  }
+}
+
+onMounted(() => {
+  void loadStats()
+})
+</script>
+
+<style scoped>
+.stats-page {
+  display: flex;
+  flex-direction: column;
+  gap: 18px;
+}
+
+.stats-header {
+  display: flex;
+  justify-content: space-between;
+  gap: 16px;
+  align-items: flex-start;
+}
+
+.stats-header__meta {
+  color: #64748b;
+  font-size: 13px;
+}
+
+.stats-grid {
+  display: grid;
+  grid-template-columns: repeat(4, minmax(0, 1fr));
+  gap: 18px;
+}
+
+.stats-grid--wide {
+  grid-template-columns: repeat(3, minmax(0, 1fr));
+}
+
+.stat-card {
+  border-left: 4px solid #1677ff;
+}
+
+.stat-card--red {
+  border-left-color: #ff4d4f;
+}
+
+.stat-card--gold {
+  border-left-color: #faad14;
+}
+
+.stat-card--green {
+  border-left-color: #52c41a;
+}
+
+.section-title {
+  margin: 0 0 16px;
+  color: #0f172a;
+  font-size: 16px;
+  font-weight: 700;
+}
+
+.metric-list {
+  display: flex;
+  flex-direction: column;
+  gap: 10px;
+}
+
+.metric-row {
+  display: flex;
+  justify-content: space-between;
+  align-items: center;
+  gap: 16px;
+  padding: 10px 0;
+  border-bottom: 1px solid #f1f5f9;
+}
+
+.metric-row:last-child {
+  border-bottom: 0;
+}
+
+.metric-row strong {
+  color: #0f172a;
+}
+
+@media (max-width: 1100px) {
+  .stats-grid,
+  .stats-grid--wide {
+    grid-template-columns: 1fr 1fr;
+  }
+}
+
+@media (max-width: 720px) {
+  .stats-grid,
+  .stats-grid--wide {
+    grid-template-columns: 1fr;
+  }
+}
+</style>
diff --git a/apps/ops-web/tsconfig.json b/apps/ops-web/tsconfig.json
index 51fa762..e32f553 100644
--- a/apps/ops-web/tsconfig.json
+++ b/apps/ops-web/tsconfig.json
@@ -4,7 +4,8 @@
     "types": ["vite/client"],
     "baseUrl": ".",
     "paths": {
-      "@/*": ["src/*"]
+      "@/*": ["src/*"],
+      "@geo/shared-types": ["../../packages/shared-types/src/index.ts"]
     }
   },
   "include": ["src/**/*.ts", "src/**/*.d.ts", "src/**/*.vue", "vite.config.ts"]
diff --git a/apps/ops-web/vite.config.ts b/apps/ops-web/vite.config.ts
index c3448a5..caf61b0 100644
--- a/apps/ops-web/vite.config.ts
+++ b/apps/ops-web/vite.config.ts
@@ -25,6 +25,7 @@ export default defineConfig(({ mode }) => {
     resolve: {
       alias: {
         '@': r('./src'),
+        '@geo/shared-types': r('../../packages/shared-types/src/index.ts'),
       },
     },
     server: {
diff --git a/deploy/config.yaml b/deploy/config.yaml
index 308e51d..d6c8b16 100644
--- a/deploy/config.yaml
+++ b/deploy/config.yaml
@@ -65,6 +65,12 @@ rabbitmq:
   kol_assist_dlx: kol.assist.dlx
   kol_assist_dlq: kol.assist.run.dlq
   kol_assist_dlq_routing_key: kol.assist.run.dlq
+  compliance_review_exchange: compliance.review
+  compliance_review_routing_key: compliance.review.run
+  compliance_review_queue: compliance.review.run
+  compliance_review_dlx: compliance.review.dlx
+  compliance_review_dlq: compliance.review.run.dlq
+  compliance_review_dlq_routing_key: compliance.review.run.dlq
   consumer_prefetch: 10
   publish_channel_pool_size: 32
 
@@ -168,6 +174,15 @@ llm:
   reasoning_effort: minimal
   web_search_limit: 3
 
+compliance:
+  enabled: true
+  llm_judge_enabled: false
+  snapshot_reload_interval: 30s
+  publish_gate_timeout: 800ms
+  review_worker_concurrency: 1
+  review_worker_timeout: 45s
+  review_max_attempts: 3
+
 retrieval:
   provider: siliconflow
   base_url: https://api.siliconflow.cn/v1
diff --git a/deploy/k3s/config/config.yaml b/deploy/k3s/config/config.yaml
index ee4ecb0..e831825 100644
--- a/deploy/k3s/config/config.yaml
+++ b/deploy/k3s/config/config.yaml
@@ -24,6 +24,12 @@ monitoring_database:
 
 rabbitmq:
   url: amqp://geo:geo_dev@rabbitmq:5672/geo
+  compliance_review_exchange: compliance.review
+  compliance_review_routing_key: compliance.review.run
+  compliance_review_queue: compliance.review.run
+  compliance_review_dlx: compliance.review.dlx
+  compliance_review_dlq: compliance.review.run.dlq
+  compliance_review_dlq_routing_key: compliance.review.run.dlq
   consumer_prefetch: 10
   publish_channel_pool_size: 32
 
@@ -125,6 +131,15 @@ llm:
   reasoning_effort: minimal
   web_search_limit: 3
 
+compliance:
+  enabled: true
+  llm_judge_enabled: false
+  snapshot_reload_interval: 30s
+  publish_gate_timeout: 800ms
+  review_worker_concurrency: 1
+  review_worker_timeout: 45s
+  review_max_attempts: 3
+
 retrieval:
   provider: siliconflow
   base_url: https://api.siliconflow.cn/v1
diff --git a/docs/compliance-detection-tech-design-v1.md b/docs/compliance-detection-tech-design-v1.md
index 29f3b9c..468a4aa 100644
--- a/docs/compliance-detection-tech-design-v1.md
+++ b/docs/compliance-detection-tech-design-v1.md
@@ -40,7 +40,7 @@
 
 ### 2.1 V1 包含
 
-- ops 平台维护的全局词库、策略、租户级覆盖
+- ops 平台维护的全局词库和全局策略
 - 租户自维护的白名单（豁免）、黑名单（自家敏感词）
 - 词典精确匹配 + 正则匹配 + 可选 LLM 语义兜底（开关控制）
 - 编辑器手动一键检测、发布器入口拦截、纯文本 API 三种调用入口
@@ -193,7 +193,7 @@ CREATE TABLE compliance_dictionaries (
 CREATE TABLE compliance_dictionary_terms (
   id              BIGSERIAL PRIMARY KEY,
   dictionary_id   BIGINT  NOT NULL REFERENCES compliance_dictionaries(id) ON DELETE CASCADE,
-  match_type      VARCHAR(16) NOT NULL,         -- exact | regex | semantic_keyword
+  match_type      VARCHAR(16) NOT NULL,         -- exact | regex
   pattern         TEXT NOT NULL,
   level_override  VARCHAR(16),                  -- 该词单独覆盖等级
   hint            TEXT,                         -- 命中后给用户的修改建议
@@ -214,18 +214,16 @@ CREATE TABLE compliance_dictionary_versions (
   UNIQUE(dictionary_id, version)
 );
 
--- 平台默认策略（全局开关）
+-- 平台默认策略（全局单例）
 CREATE TABLE compliance_policies (
-  id                    BIGSERIAL PRIMARY KEY,
-  scope                 VARCHAR(16) NOT NULL,    -- 'global' or 'tenant_override'
-  tenant_id             BIGINT,                  -- scope=tenant_override 时填
+  id                    BIGINT PRIMARY KEY DEFAULT 1,
   enforcement_mode      VARCHAR(16) NOT NULL,    -- mandatory | advisory | disabled
   enabled_dictionaries  JSONB NOT NULL,          -- [{"code":"ad_law_extreme","level_floor":"high","rollout_percent":100}]
   llm_judge_enabled     BOOLEAN NOT NULL DEFAULT FALSE,
   llm_categories        JSONB,                   -- ["politics","medical_claim"]
   updated_by            BIGINT,
   updated_at            TIMESTAMPTZ NOT NULL,
-  UNIQUE(scope, tenant_id)
+  CONSTRAINT ck_compliance_policy_singleton CHECK (id = 1)
 );
 ```
 
@@ -396,11 +394,8 @@ func (s *ComplianceService) GateForPublish(ctx context.Context, articleID, versi
 config.compliance.enabled = false
         │     ↓ 全站短路（kill-switch，运维专用）
         │
-        └─ ops.compliance_policies(scope=global).enforcement_mode = disabled
-                │     ↓ 默认关闭，但词库管理 UI 仍可访问
-                │
-                └─ ops.compliance_policies(scope=tenant_override).enforcement_mode = disabled
-                          ↓ 仅该租户关闭
+        └─ ops.compliance_policies(id=1).enforcement_mode = disabled
+                  ↓ 默认关闭，但词库管理 UI 仍可访问
 ```
 
 前端也要感知运行时状态：编辑器进入时调一次 `GET /api/compliance/runtime-status`，返回 `{enabled, mode, llm_enabled, dict_versions}`，**引擎关闭时按钮直接隐藏（不是置灰）**，避免空跑误导用户。
@@ -435,7 +430,6 @@ config.compliance.enabled = false
 | POST | `/api/ops/compliance/dictionaries/:id/publish` | 词库版本发布（bump version + 写 versions 快照） |
 | POST | `/api/ops/compliance/dictionaries/:id/rollback` | 回滚到指定版本 |
 | GET / PUT | `/api/ops/compliance/policy/global` | 全局策略：强制 / 自愿 / 关闭、启用哪些词库 |
-| GET / PUT | `/api/ops/compliance/policy/tenants/:tenantId` | 租户级覆盖 |
 | GET  | `/api/ops/compliance/stats` | 命中分布、拦截率、误报率（来自 ack 数据） |
 | GET  | `/api/ops/compliance/records` | 全局检测记录搜索 |
 
@@ -473,7 +467,6 @@ apps/ops-web/src/views/compliance/
 ├── CompliancePolicyView.vue         # 全局策略：模式开关 + 启用词库勾选
 ├── ComplianceDictionariesView.vue   # 词库列表（含版本 / 启用 / 导入）
 ├── ComplianceDictionaryEditView.vue # 词条 CRUD + CSV 导入
-├── ComplianceTenantOverrideView.vue # 租户级覆盖
 ├── ComplianceRecordsView.vue        # 全局检测记录、误报率
 └── ComplianceStatsView.vue          # 命中 Top 词、拦截率、按租户分布
 ```
@@ -519,7 +512,7 @@ apps/ops-web/src/views/compliance/
 | **富文本不踩坑** | 检测**只看纯文本**，但保留 dom_path 用于回写高亮；图片 OCR、链接落地页 V1 不做（前置说明）。 |
 | **性能预算** | 编辑器手动按钮：纯词典 + 正则 P99 ≤ 50ms；含 LLM ≤ 1.5s。发布拦截：纯词典 + 正则 P99 ≤ 30ms（不含 LLM，LLM 异步进 review 队列），总闸超时由 `cfg.Compliance.PublishGateTimeout` 控制。 |
 | **可观测** | 给 [`server/internal/shared/middleware`](../server/internal/shared/middleware) 加埋点：每次 check 的 `duration_ms / hit_count / level / source / dict_version` 进 metrics；ops 侧拉曲线。 |
-| **审计日志** | 写词库、改策略、租户覆盖等管理操作通过现有 `auditlog.AsyncWriter`（[`server/internal/shared/auditlog/async.go`](../server/internal/shared/auditlog/async.go)）记录。 |
+| **审计日志** | 写词库、改策略等管理操作通过现有 `auditlog.AsyncWriter`（[`server/internal/shared/auditlog/async.go`](../server/internal/shared/auditlog/async.go)）记录。 |
 | **隐私** | check_records 默认只存命中片段（`matched_text`，截断 ≤ 50 字符）和偏移；全文不入审计。LLM 调用走现有 LLM client 的脱敏链路。 |
 | **极限词库种子** | V1 ops 预装：①《广告法》极限词约 200 条 ② 政治敏感词（公开版） ③ 涉黄涉暴 ④ 通用违禁。提供 CSV 模板，运营可自行扩。种子数据走数据库迁移落地，避免运维额外操作。 |
 | **kill-switch 可观测** | 配置短路时仍 emit 一条 metric `compliance_skipped_total{reason="config_disabled"}`，便于运维通过监控确认 kill-switch 已经生效。 |
diff --git a/docs/superpowers/specs/2026-04-28-compliance-detection-design.md b/docs/superpowers/specs/2026-04-28-compliance-detection-design.md
index aeb2988..27a5de5 100644
--- a/docs/superpowers/specs/2026-04-28-compliance-detection-design.md
+++ b/docs/superpowers/specs/2026-04-28-compliance-detection-design.md
@@ -1,12 +1,71 @@
 # 内容合规检测（敏感词 / 广告法）设计
 
 - 日期：2026-04-28
-- 状态：Final (Revision 3, 2026-04-28) — Implementation Ready
+- 状态：Final (Revision 9, 2026-05-05) — Implementation Ready
 - 涉及端：`apps/admin-web`、`apps/ops-web`、`server/internal/tenant`、`server/internal/ops`、`server/cmd/ops-api`、`server/cmd/tenant-api`、`server/cmd/scheduler`、`packages/shared-types`
 - 类型：跨端新增模块
 
 ## 0. Review Log
 
+### Revision 9（2026-05-05）
+
+按产品新口径收口发布器展示边界：
+
+| # | 问题 | 收口位置 |
+| --- | --- | --- |
+| R9-P0 | 发布器空间有限，展示具体命中词会淹没发布流程，且与文章编辑页合规检测职责重叠 | §5.2 / §6.5 / §9.4：发布器只展示门禁结论；强制模式任意命中直接 GateBlock；仅提示确认模式任意命中 GateNeedsAck；具体命中词统一回文章编辑页合规检测查看；关闭检测时发布器不显示任何敏感词模块 |
+| R9-P1 | 开发阶段不需要人工特批逃生口，发布器不应提供「提交运营审阅」入口 | §5.2 / §9.4 / §10.3：发布器移除人工特批入口与审阅状态展示，GateBlock 只引导回编辑页改稿 |
+
+### Revision 8（2026-05-05）
+
+收口人工审阅的高可用、止血优先级、撤回与 API/DTO 一致性。本 revision 覆盖 Revision 7 中"人工审阅戳高于 config kill-switch"与"每 version 全生命周期唯一 review record"两处旧决策。
+
+| # | 问题 | 收口位置 |
+| --- | --- | --- |
+| R8-P0 | 人工审阅状态是发布热路径早期步骤，但查询失败语义未定义，DB 抖动时可能 panic 或 fail-open | §6.3 / §6.5.1：新增 `ManualReviewResolver`，使用 `article_versions.manual_review_status` 热路径冗余 + 进程内 LRU/terminal cache；查询失败仅可使用 pending / terminal cache，无可信状态时返回 503 / 41004 fail-closed |
+| R8-P1 | R7 把人工审阅戳置于 config kill-switch 之上，导致审阅服务误写 rejected 时无部署级止血 | §6.3 / §6.4 / §6.13：`cfg.Compliance.Enabled=false` 作为部署级硬关闭，优先于人工审阅；ops master switch / enforcement_mode 仍只关闭自动检测器，不覆盖 pending / rejected |
+| R8-P2 | pending 无撤回路径，审阅工作台积压会把作者卡死 | §6.2 / §6.13 / §7.1：人工审阅增加 `cancelled` 状态与 tenant 侧 cancel API；pending 可由作者撤回，撤回后同版本可重新提交；approved / rejected 仍终态不可重提 |
+| R8-P3 | `trigger_source` enum、manual review 外键保留策略、scheduler blocked 解锁、CheckResult DTO 与 API 命名存在契约缺口 | §6.2 / §6.12 / §7 / §9.3：补 `scheduler_recheck` / `manual_review_bypass`；`original_check_record_id ON DELETE SET NULL` 且冗余审计快照；前端发布列表展示 blocked + 重新发布；tenant API 统一 `manual-reviews`；`CheckResult` 返回 manual review 状态 |
+
+### Revision 7（2026-05-05）
+
+收口人工审阅作为"版本级发布裁决"的优先级与 DB 约束：
+
+| # | 问题 | 收口位置 |
+| --- | --- | --- |
+| R7-P0 | `config kill-switch` / ops 总开关若先短路 `GatePass`，会把已 rejected 或 pending 的版本误放行；这与"不合格文章不允许发布，也不允许再次提交运营审查"冲突（config kill-switch 不在 config yml 配置，在 ops 运营平台开关） | 旧口径：人工审阅高于所有开关。已被 Revision 8 修正为：`cfg.Compliance.Enabled=false` 是部署级硬关闭；ops master / enforcement 不覆盖人工审阅 |
+| R7-P1 | `pending unique + terminal unique` 两条 partial index 不能保证"同一 version 全生命周期至多一条 review"，终态后仍可插入 pending | 旧口径：全生命周期唯一。已被 Revision 8 修正为：pending 可撤回为 cancelled，active/terminal partial unique 约束 approved / rejected 不可重提 |
+
+### Revision 6（2026-05-04）
+
+补 mandatory 阻断的人工逃生口：
+
+| # | 问题 | 收口位置 |
+| --- | --- | --- |
+| R6-P0 | mandatory + block 命中时作者只有"改稿"一条路，遇误报 / 法规边缘 / 客户特批场景无人工 override | 新增 R33 / R34 / R35 / R36：发布弹窗 GateBlock 时增加「提交运营审阅」按钮；ops 新增审阅工作台；审阅戳绑定到 `article_version_id`，**通过 → 该版本永久绕过所有自动检测**（发布闸 + 调度器重检），**驳回 → 该版本永久不可发布且不可再次提交审阅**；新版本（作者改稿后）重置；新增 `compliance_manual_reviews` 表 + tenant/ops 双向 API + UI；优先级以 Revision 8 为准 |
+
+### Revision 5（2026-05-04）
+
+收口三处架构边界，规避 codex 复审定位的 P0/P1 风险：
+
+| # | 问题 | 收口位置 |
+| --- | --- | --- |
+| R5-P0-1 | 旧 §6.11 把"按位替换为 `*`"挂在 publish_tasks payload 上，与现有 `desktop_tasks` 流程不匹配，也越权污染了发布器协议；合规模块的语义只是「门」，不是「内容转换器」 | **删除替换方案**：§3 R29 重写为「命中强制即阻断 + 给出原因」；§6.11 删除整节；§9.1/§9.2 移除 `publish_tasks.compliance_redactions` 字段、`PublishJobService.Create()` 不再做替换；§13 决策清单同步 |
+| R5-P0-2 | 多平台同发的 ack 语义未闭合：旧设计每平台独立 fingerprint，但发布请求只有一个 `ack_record_id`；A 平台 advisory + B 平台 block 时 UI / 后端无标准回包 | **单次检测覆盖全部目标平台 → 单条 check_record / 单条 ack**：§6.5 引擎一次 AC 扫描后按 platform_scope 拆 violation；任一平台命中 block → 整体 `GateBlock`，回包列出"哪些平台 / 哪些词库 / 哪些词条"；advisory 时单条 ack 覆盖全部非 block violation；通用（all）词库命中不显示具体平台、只给原因；fingerprint 把 `target_platforms` 集合一并 hash，平台集合变更即 ack 失效 |
+| R5-P1-1 | 定时发布的 publish job 在 `Create()` 时已过闸，但调度器到点取出执行前没有重检；强制模式下若期间运营更新词库 / 文章漂移，旧通过的 job 会被发出 | **新增 R31 调度器重检关卡**：§6.12 新增「定时任务执行前重检」流程；强制模式下命中 block 即把 job 状态置为 `blocked_by_compliance`、写命中原因、通知作者；非强制按 advisory 走 |
+| R5-P1-2 | 发布闸 P99 < 50ms 与同步写最多 200 条 violation 明细有张力 | §6.10 补「写入快路径」：无命中只写一条 summary check_record；有命中按 batch insert（单条 INSERT … VALUES (…) 多行）落 violations；命中统计 metric 异步刷；保持事务边界但缩短 DB roundtrip |
+| R5-P1-3 | plaintext_snapshot 解决检测速度但不能解决富文本替换的 offset 映射 | 因 P0-1 删除替换需求，本条自动消解：检测仍用 plaintext_snapshot（速度优先 + 不引入额外大列，避免存储爆炸） |
+| R5-P2 | 实施直接全量开干风险大 | §12 Rollout Notes 补阶段切片：① DB schema + plaintext_snapshot ② deterministic gate + 强制阻断 ③ advisory ack 闭环 ④ ops UI（策略 + 词库）⑤ 调度器重检 ⑥ LLM 异步复核 |
+
+### Revision 4（2026-05-04）
+
+补两条产品侧硬约束：
+
+| # | 问题 | 收口位置 |
+| --- | --- | --- |
+| R4-P0 | 词库管理是「运营自建多个词库」的统一列表（不做固定卡片，也不引入 category 枚举字段）；新建 / 编辑用独立 page form；词库的"用途分类"完全靠运营在词库名称中自行表达；适用平台支持"全部"或"具体平台多选"，二者互斥 | §3 R27 / R28；§5.3；§6.2 `ops.compliance_dictionaries` 新增 `platform_scope` + `applicable_platforms` 列；§6.5 引擎按文章平台过滤 |
+| R4-P1 | 命中敏感词的文章在发布到对应平台前必须按位替换为同长度 `*`，原词不可展示；总开关收口到 ops-web 运营平台（不依赖 config 重启） | §3 R29 / R30；§5.3 全局策略页加"总开关"；§6.4 层级覆盖关系增加 ops-web 总开关层；新增 §6.11 平台发布前替换流程 |
+
 ### Revision 3（2026-04-28）
 
 最后修订收口实现前硬决策，原则是满足当前发布合规场景，不引入新的基础设施：
@@ -44,7 +103,7 @@
 | P0-2 | `CreatePublishJobRequest` 缺 `article_version_id` 与 `ack_record_id`；前后端 + 共享 TS 三处契约不通 | §3 R15、§6.3、§6.8、§9 |
 | P1-1 | API 路径与现有 `/api/tenant/...` 前缀不一致 | §7、§5.1 |
 | P1-2 | ops 侧 SQL 必须显式 `ops.` schema 前缀，否则会落到 public | §6.2 |
-| P1-3 | `UNIQUE(scope, tenant_id)` 无法约束多条 global policy（PG 不视 NULL 相等） | §6.2（partial unique + CHECK） |
+| P1-3 | global policy 必须用唯一约束保证全站只有一条策略 | §6.2（partial unique + CHECK） |
 | P1-4 | mandatory 模式下 LLM 异步语义不自洽 | §4.3、§6.5、§6.7 |
 | P2-1 | `LoadArticleVersionContent` 会扫目标版本之前所有版本 + diff 重建，发布闸 30ms 预算扛不住 | §4.7、§6.2、§6.7 |
 | P2-2 | 隐私约束（matched_text 截断）只在文字里，schema 没 enforce | §6.2（CHECK） |
@@ -58,10 +117,13 @@
 
 ### 1.1 目标
 
-- 双模式可切换：`mandatory`（命中阻断）/ `advisory`（仅提示）/ `disabled`（关闭），ops 全局 + 租户级覆盖
+- 双模式可切换：`mandatory`（命中阻断）/ `advisory`（仅提示）/ `disabled`（关闭），ops 只维护全局策略
 - 三个调用入口：编辑器手动按钮、发布器同步闸、纯文本 API（标题 / 摘要单查）
 - 词库 + 正则 + 可选 LLM 三层检测，前两层毫秒级，第三层可关
-- config 级 kill-switch（`cfg.Compliance.Enabled`），凌驾 ops 策略之上
+- 词库管理首页是运营自建词库的统一列表（不做固定 bucket 卡片，也不引入 category 枚举）；运营可自由创建任意多个词库，"违法敏感词 / 广告极限词 / 行业违禁词" 等用途差异完全靠运营自定义词库名称表达；每个词库可指定"全部平台"或"具体平台多选"作用域，二者互斥
+- 检测引擎只做"门"：命中即返回门禁结论，不改写文章正文，也不污染发布器 / 桌面端 payload；强制模式任意敏感词命中直接阻断发布，advisory 模式仅提示确认
+- 定时发布的 publish job 在调度器到点执行前再过一道闸：强制模式任意命中直接将 job 置为 `blocked_by_compliance` 并通知作者
+- ops-web 运营平台暴露"内容合规检测总开关"，无需改 config / 重启；config 级 kill-switch（`cfg.Compliance.Enabled`）保留为**部署级硬关闭**，用于生产事故止血，优先于人工审阅与所有自动检测器
 - 检测结果留审计与申诉证据；运营操作落 audit log
 - 与现有 tenant / ops 双 schema、AI 点数计费体系无缝衔接
 
@@ -82,7 +144,7 @@
 - **Redis pub/sub 秒级同步**：一期用 30s 轮询版本号
 - **词库 Diff / 版本对比 UI**：ops 控制台只做"发布版本 + 一键回滚"
 - **流式检测**：不在用户打字过程中实时查，只在显式触发点查
-- **租户自助上调严苛度**：租户只能加白 / 黑名单，不能修改 ops 下发的等级
+- **租户自助白 / 黑名单**：本期不提供租户侧自定义词条，全部词库和策略由 ops 统一维护
 
 ## 2. 当前状态
 
@@ -104,7 +166,7 @@
 
 | ID | 需求 |
 | --- | --- |
-| R1 | 发布器在创建发布任务前必须经过合规闸；强制模式下命中 `block` 等级直接拒绝 |
+| R1 | 发布器在创建发布任务前必须经过合规闸；强制模式下任意敏感词命中直接拒绝 |
 | R2 | 自愿模式下命中违规仅展示提醒；用户显式 ack 后可放行（带 `ack_record_id` 重发） |
 | R3 | 编辑器侧提供独立"合规检测"按钮，触发同步检测并展示按等级分组的违规清单 |
 | R4 | 检测引擎必须支持词典精确匹配 / 正则 / LLM 语义三层；前两层毫秒级 |
@@ -112,7 +174,7 @@
 | R6 | 词库改动必须在 30 秒内对所有 tenant-api 实例生效，不需重启 |
 | R7 | 检测结果必须留有审计记录：命中片段、等级、词库版本、检测耗时、来源（manual / publish / api） |
 | R8 | 运营操作（改词库、改策略）必须落 audit log |
-| R9 | `cfg.Compliance.Enabled = false` 时整模块短路，不产生 DB / LLM 调用 |
+| R9 | `cfg.Compliance.Enabled = false` 是部署级硬关闭：发布闸不读取 `compliance_manual_reviews`、不产生词库 / 正则 / LLM 调用，直接 `GatePass`；该开关只允许由运维在事故止血时使用，并必须打 audit / metric / 告警 |
 | R10 | 词库支持版本回滚（最近 10 个发布版本可一键回滚） |
 | R11 | 一期随迁移自动注入 4 类极限词种子（广告法 / 政治 / 涉黄涉暴 / 通用违禁） |
 | R12 | 富文本编辑器命中违规处可按 DOM 路径精确高亮，避免文本搜索错位 |
@@ -130,6 +192,13 @@
 | R24 | 单次检测写入 violation 明细必须有上限，避免违规词洪水放大 DB 写入；记录保留总命中数与截断标记 |
 | R25 | ack 必须绑定 `article_version_id + content_hash + policy_fingerprint + check_record_id`，策略或内容变化后旧 ack 不可复用 |
 | R26 | LLM 事后复核必须持久化可恢复，多实例 worker 并发处理不得重复消费 |
+| R27 | 词库管理首页是**运营自建词库的统一列表**（不做固定卡片）：运营可自由创建任意多个词库，词库的"用途 / 类别"完全靠运营自定义词库名称表达，**不引入 category 枚举字段**（需要时通过名称模糊搜索筛选） |
+| R28 | 词库新建 / 编辑使用独立 page form（非弹窗），字段：词库名称、适用平台、敏感词列表（一行一个、不可含空格 / 符号）、状态；适用平台支持「全部平台」或「具体平台多选」二选一，互斥；前端控件 + 后端 schema CHECK 双重保证 |
+| R29 | 合规模块**只做检测与阻断，不改写文章正文**：命中强制模式直接拒绝发布；发布器只显示门禁结论，不展示具体词 / 词库 / 平台分组；完整命中词统一在文章编辑页合规检测查看；不在 publish task payload、不在 article version、不在桌面端 payload 做任何替换 |
+| R30 | 内容合规检测的「总开关」必须可在 ops-web 全局策略页一键开关，无需改 config / 重启；关闭后仅让**自动检测器**短路，pending / rejected 人工审阅裁决仍生效；它不同于 `cfg.Compliance.Enabled=false` 部署级硬关闭 |
+| R31 | 定时发布的 publish job 在调度器取出执行前必须再过一道合规闸：强制模式任意命中 → job 状态置为 `blocked_by_compliance`、记录命中 check_record_id、通过站内通知告知作者；advisory 模式 / 已 ack 走原流程 |
+| R32 | 多平台同发使用**单次检测 + 单条 check_record + 单条 ack**：引擎一次扫纯文本，按 `(词库.platform_scope, 词库.applicable_platforms)` 拆 violation；mandatory 任意命中即整体 GateBlock；advisory 任意命中即整体 GateNeedsAck；fingerprint 把 `target_platforms` 集合 hash 进去，平台集合变更即旧 ack 失效 |
+| R33 | 开发阶段不提供作者侧人工特批 / 运营审阅入口；当 `GateForPublish` 返回 `GateBlock` 时，发布器只引导作者回文章编辑页用合规检测查看完整命中词并改稿 |
 
 ## 4. 选型与权衡
 
@@ -201,7 +270,7 @@
 
 **Chosen：**
 - 词库表、策略表落 `server/migrations_ops/`
-- 租户白/黑名单、检测记录、命中明细落 `server/migrations/`
+- 发布门禁检测记录、命中明细落 `server/migrations/`
 - 沿用现有"独立 `schema_migrations` 表"约定
 
 **Why：**
@@ -249,7 +318,7 @@
 - 迁移：`article_versions` 加 `plaintext_snapshot TEXT NULL`，索引不需要
 - 写入侧：`ArticleService.SaveVersion()` 在写 html/markdown 同时调 `text_extractor.Extract()` 写入纯文本快照（与 §6.7 引擎共用提取器）
 - 历史回填：迁移完成后跑一次性维护命令 `server/cmd/maintenance/backfill_article_plaintext`，按租户 + `article_versions.id` 分批回填；上线前优先跑完活跃租户，未回填文章仅首次发布走 fallback
-- 读取侧：`compliance_repo.GetArticleVersionPlaintext(ctx, versionID)` 单行 SQL；找不到（旧数据未回填）时降级到 `LoadArticleVersionContent` 并发告警
+- 读取侧：`compliance_repo.GetArticleVersionComplianceSnapshot(ctx, versionID)` 单行 SQL 同时取 `plaintext_snapshot` 与 `manual_review_status`；plaintext 为空（旧数据未回填）时降级到 `LoadArticleVersionContent` 并发告警
 
 ### 4.8 文章纯文本检测范围
 
@@ -261,32 +330,53 @@
 
 ### 5.1 编辑器
 
-- 进入编辑页 `ArticleEditorView` 时调一次 `GET /api/tenant/compliance/runtime-status`
-- 返回 `enabled = false` → 按钮整组**隐藏**（不是置灰，避免空跑误导）
-- 返回 `enabled = true` → `EditorActionMenu` 增加「合规检测」按钮，点击后：
+- `EditorActionMenu` 始终显示「合规检测」按钮，点击后执行一次参考检测：
   - 抽屉式结果面板，违规项按等级（block / high / medium / info）分组
-  - 每条违规支持「定位到原文」「加入白名单」「忽略」
+  - 每条违规仅支持「定位到原文」
   - 文档中违规处加 mark 高亮，按 `dom_path` 注入
-  - 面板顶部显示运行时摘要：当前模式 + LLM 是否参与 + 词库版本
+  - 面板顶部只显示参考结果摘要和耗时，不显示发布判定模式，不保存 check_record / violations
 
 ### 5.2 发布弹窗
 
-- 点击发布按钮 → 同步调一次 `POST /api/tenant/articles/:id/compliance/check`
+- 点击发布按钮 → 同步调一次 `POST /api/tenant/articles/:id/compliance/check`，请求体带本次发布勾选的 `target_platforms`（账号去重后的平台集合）；服务端按这组平台一次性产出**单条** check_record，包含跨平台聚合 violations
 - `GatePass`：直接进入正常发布流程
-- `GateNeedsAck`：弹窗替换为合规警示视图，列出**全部**非 block violations；用户必须勾选"已了解风险，仍要发布"才能继续，调用 `POST /api/tenant/compliance/check-records/:id/ack` 拿到一次性 `ack_record_id`，提交发布请求时携带（详见 §6.3 / §7）
-- `GateBlock`：禁用发布按钮，给出修改指引；不允许 ack 强发
+- `GateNeedsAck`：发布弹窗只显示"检测到敏感词风险"的门禁提醒，不展示具体词、词库、平台分组或处理建议；引导用户回到文章编辑页使用「合规检测」查看全部命中词。用户确认风险后调用 `POST /api/tenant/compliance/check-records/:id/ack` 拿到一次性 `ack_record_id`，提交发布请求时携带（详见 §6.3 / §7）
+- `GateBlock`：禁用发布按钮；发布弹窗只显示"检测到敏感词，已阻断发布"的门禁结论，不展示具体词、词库、平台分组或处理建议；引导用户回到文章编辑页使用「合规检测」查看全部命中词并逐项修改。
+- `disabled`：发布弹窗不显示任何敏感词 / 合规检测相关模块。
 
 ### 5.3 ops 控制台
 
 新增侧栏分组「内容安全」（与现有「审计日志」并列），路由：
 
-- `/ops/compliance/policy` — 全局策略：模式开关 + 启用词库勾选 + LLM 开关
-- `/ops/compliance/dictionaries` — 词库列表（版本 / 启用 / 导入）
-- `/ops/compliance/dictionaries/:id/edit` — 词条 CRUD + CSV 导入 + 版本发布 / 回滚
-- `/ops/compliance/tenant-overrides` — 租户级覆盖
+- `/ops/compliance/policy` — 全局策略页：
+  - **总开关（master switch）**：一键开 / 关自动检测器，关闭后词库 / 正则 / LLM 检测短路；写入全局单例策略 `ops.compliance_policies(id=1).master_enabled` 字段；运维路径无需改 config / 重启；但不覆盖人工审阅 pending / rejected 戳（rejected 版本仍不可发布）。它不是部署级硬关闭，不能替代 `cfg.Compliance.Enabled=false`
+  - 模式：mandatory / advisory（总开关 = 开 时生效）
+  - LLM 开关
+  - 启用词库勾选（按词库名称排序，单一列表展示，可按名称搜索）
+- `/ops/compliance/dictionaries` — 词库管理首页：**运营自建词库的统一列表**（表格视图，不做固定卡片，也不显示 category 列）
+  - 列：名称、适用平台摘要、词条数、版本、状态、最后更新人 / 时间、操作（编辑 / 发布 / 回滚）
+  - 顶部工具栏：「新建词库」按钮 + 名称模糊搜索 + 状态筛选
+  - 列表来源：`ops.compliance_dictionaries` 全表，运营可创建任意多个；空态文案引导"点击右上角『新建词库』开始"
+- `/ops/compliance/dictionaries/new` — 新建词库 page form
+- `/ops/compliance/dictionaries/:id/edit` — 编辑词库 page form（与新建页结构一致）：
+  - **词库名称**（必填，1~64 字）；用途分类（如"违法敏感词"/"广告极限词"/"金融违禁词"）由运营在名称中自行表达，前端不限制命名形式
+  - **适用平台**：下拉多选；提供两种互斥模式
+    - 选中「全部平台」时，禁止再选具体平台（已选项灰显并清空）
+    - 选中任一具体平台时，「全部平台」选项被禁用
+    - 平台选项来源：`packages/shared-types` 现有的媒体平台枚举（与发布器一致），不在合规模块再造一份
+  - **敏感词列表**：textarea，每行一个词；前端拒绝空格 / 控制字符 / 纯标点；保存时去重 + trim；显示当前词条数
+  - **状态**：开 / 关
+  - 「保存」「取消」按钮；保存即 bump version 并写一条 `compliance_dictionary_versions` 快照
+  - 词条 CRUD / CSV 导入 / 版本发布 / 回滚同页操作（CSV 列：`pattern,match_type,level_override,hint,reference_law,enabled`）
+- `/ops/compliance/manual-reviews` — 人工审阅工作台
+  - 列表页：三标签 `pending / approved / rejected`，列含文章标题摘要、租户、申请人、申请时间、命中违规摘要（前 3 条）、原 check_record 链接；pending 默认按 `requested_at` 升序，确保 FIFO
+  - 详情页：左侧文章 plaintext 全文 + violations 完整列表（按平台分组），右侧申请说明 + 「通过」/「驳回」两按钮 + 决策理由必填 textarea；提交即终态、不可改判（按钮提交后整页禁用）
+  - 权限：复用 ops `operator_accounts` 现有权限位，新增 `compliance:review`；未授权账号看不到侧栏入口、API 直接 403
 - `/ops/compliance/records` — 全局检测记录搜索
 - `/ops/compliance/stats` — 命中分布、拦截率、误报率（按 ack 数据反推）
 
+> 总开关行为口径：ops 总开关 = 关 时，词库 / 正则 / LLM 等自动检测器短路返回 `GatePass`；运营可自助切换且 30s 内随策略快照传播到所有 tenant-api 实例。人工审阅状态不属于检测器：pending 仍阻止发布等待决策，approved 直接放行，rejected 永久封禁。只有 `cfg.Compliance.Enabled=false` 是部署级硬关闭，可在事故止血时覆盖所有合规裁决并直接放行。
+
 ## 6. 设计
 
 ### 6.1 模块划分
@@ -308,7 +398,8 @@ server/internal/
 │   │   │   ├── regex_matcher.go         # RE2 预编译 + 有界 worker pool + 总预算
 │   │   │   ├── llm_judge.go             # 语义兜底
 │   │   │   └── text_extractor.go        # 富文本 → 纯文本 + 偏移映射
-│   │   ├── policy_resolver.go           # 全局 vs 租户覆盖
+│   │   ├── policy_resolver.go           # 全局策略解析
+│   │   ├── manual_review_resolver.go    # version 审阅戳读取 + LRU/terminal cache + fail-closed
 │   │   └── snapshot_loader.go           # 30s 版本轮询
 │   ├── repository/
 │   └── domain/violation.go
@@ -322,42 +413,53 @@ server/internal/
 
 **ops 侧（schema = `ops`）**
 
-- `ops.compliance_dictionaries`：`id, code(uniq), name, category, default_level, enabled, version, description, ts`
-- `ops.compliance_dictionary_terms`：`id, dictionary_id(fk), match_type(exact|regex|semantic_keyword), pattern, level_override, hint, reference_law, enabled, ts`，`(dictionary_id) WHERE enabled = TRUE` 部分索引
-- `ops.compliance_dictionary_versions`：`id, dictionary_id(fk), version, snapshot(jsonb), published_by, published_at` — 用于回滚
-- `ops.compliance_policies`：`id, scope(global|tenant_override), tenant_id(nullable), enforcement_mode(mandatory|advisory|disabled), enabled_dictionaries(jsonb), llm_judge_enabled, llm_categories(jsonb), revision, updated_by, ts`
+- `ops.compliance_dictionaries`：`id, code(uniq), name, platform_scope, applicable_platforms, default_level, enabled, version, description, ts`
+  - `platform_scope VARCHAR(16) NOT NULL DEFAULT 'all'` + `CHECK (platform_scope IN ('all','specific'))`
+  - `applicable_platforms TEXT[] NULL` — 平台 code 数组（与发布器使用的 platform code 同源）
+  - 互斥 CHECK：`(platform_scope = 'all' AND (applicable_platforms IS NULL OR cardinality(applicable_platforms) = 0)) OR (platform_scope = 'specific' AND cardinality(applicable_platforms) >= 1)`
+  - 不引入 `category` 列：词库的用途分类（违法敏感词 / 广告极限词 / 行业违禁词……）完全由运营在 `name` / `description` 中自行表达；后端无 enum 约束、引擎不按 category 分流
+- `ops.compliance_dictionary_terms`：`id, dictionary_id(fk), match_type(exact|regex), pattern, level_override, hint, reference_law, enabled, ts`，`(dictionary_id) WHERE enabled = TRUE` 部分索引
+- `ops.compliance_dictionary_versions`：`id, dictionary_id(fk), version, snapshot(jsonb), published_by, published_at` — 用于回滚；snapshot 内冗余 `platform_scope / applicable_platforms`，回滚后仍保留作用域
+- `ops.compliance_policies`：`id(singleton=1), master_enabled, enforcement_mode(mandatory|advisory|disabled), enabled_dictionaries(jsonb), llm_judge_enabled, llm_categories(jsonb), revision, updated_by, ts`
+  - `master_enabled BOOLEAN NOT NULL DEFAULT TRUE` — ops-web「总开关」对应字段，只存在全局策略行
+  - 数据一致性兜底 CHECK：`id = 1`
 
-**`ops.compliance_policies` 唯一性约束（PG NULL 不视相等，必须 partial unique + CHECK）：**
+**`ops.compliance_policies` 单例约束：**
 
 ```sql
--- 全局策略至多一条
-CREATE UNIQUE INDEX uk_compliance_policy_global
-  ON ops.compliance_policies (scope)
-  WHERE scope = 'global';
-
--- 每租户至多一条覆盖
-CREATE UNIQUE INDEX uk_compliance_policy_tenant
-  ON ops.compliance_policies (tenant_id)
-  WHERE scope = 'tenant_override';
-
--- 数据一致性兜底：scope=global 时 tenant_id 必须为空，反之必须非空
+-- 数据一致性兜底：只允许一条全局策略
 ALTER TABLE ops.compliance_policies
-  ADD CONSTRAINT ck_compliance_policy_scope CHECK (
-    (scope = 'global'          AND tenant_id IS NULL) OR
-    (scope = 'tenant_override' AND tenant_id IS NOT NULL)
+  ADD CONSTRAINT ck_compliance_policy_singleton CHECK (
+    id = 1
   );
 ```
 
-`revision` 由 ops service 在策略更新事务内 `revision = revision + 1`，不依赖数据库 trigger。`policy_fingerprint = sha256(scope + tenant_id + revision + enabled_dictionaries + llm_judge_enabled + dict_versions)`，写入每条 `compliance_check_records` 和 `compliance_ack_records`，用于 ack 防旧策略复用。
+`revision` 由 ops service 在策略更新事务内 `revision = revision + 1`，不依赖数据库 trigger。`policy_fingerprint = sha256(revision + enabled_dictionaries + llm_judge_enabled + dict_versions)`，写入每条 `compliance_check_records` 和 `compliance_ack_records`，用于 ack 防旧策略复用。
 
 **tenant 侧**
 
-- `compliance_tenant_terms`：`id, tenant_id, kind(whitelist|blacklist), pattern, match_type, level(blacklist 用), hint, ts`
-- `compliance_check_records`：`id, tenant_id, article_id, article_version_id, content_hash, policy_fingerprint, trigger_source(editor_manual|publish_gate|auto_draft|api), enforcement_mode, highest_level, passed, hit_count, stored_hit_count, truncated, dict_versions(jsonb), llm_used, duration_ms, checked_by, checked_at`，`(tenant_id, article_id, checked_at DESC)` 索引
-- `compliance_violations`：`id, record_id(fk), tenant_id, source(dict|regex|llm|tenant_blacklist), dictionary_code, term_pattern, matched_text, start_offset, end_offset, dom_path, level, hint, reference_law, acknowledged_in_ack_id(fk to compliance_ack_records, NULL = 未归入任何 ack)`
+- `compliance_check_records`：`id, tenant_id, article_id, article_version_id, target_platforms(text[]), content_hash, policy_fingerprint, trigger_source(publish_gate|api|scheduler_recheck|manual_review_bypass), enforcement_mode, highest_level, passed, hit_count, stored_hit_count, truncated, dict_versions(jsonb), llm_used, duration_ms, checked_by, checked_at`，`(tenant_id, article_id, checked_at DESC)` 索引；`target_platforms` 为本次检测使用的平台集合；编辑器参考检测不落库
+- `compliance_violations`：`id, record_id(fk), tenant_id, platform_code(nullable), source(dict|regex|llm), dictionary_code, dictionary_name, term_pattern, matched_text, start_offset, end_offset, dom_path, level, hint, reference_law, acknowledged_in_ack_id(fk to compliance_ack_records, NULL = 未归入任何 ack)`；`platform_code` 语义：`NULL` = 通用（all 作用域）词库命中、跨全部 target_platforms 共用；非 NULL = 该具体平台的 specific 词库命中（一份命中按平台拆为 N 行）
 - `compliance_ack_records`：**ack 粒度落到 check_record 级别**，单次有效 + TTL；不在 violation 表上做（详见 §6.9）
+- `compliance_manual_reviews`：人工审阅审计表，绑定到 `article_version_id`，tenant schema 内存储；ops-api 的人工审阅工作台跨 tenant 查询时使用专用只读连接访问 tenant schema（显式允许该跨 schema 查询边界），详见 §6.13
 - `compliance_review_jobs`：发布闸 LLM 事后复核任务状态表；RabbitMQ 负责唤醒 worker，DB 负责幂等、重试、恢复兜底
 
+`compliance_check_records.trigger_source` 必须显式包含调度器重检与人工审阅绕过来源，避免占位记录 / 重检记录落库被 CHECK 拒绝：
+
+```sql
+ALTER TABLE compliance_check_records
+  ADD CONSTRAINT ck_compliance_check_trigger_source CHECK (
+    trigger_source IN (
+      'editor_manual',
+      'publish_gate',
+      'auto_draft',
+      'api',
+      'scheduler_recheck',
+      'manual_review_bypass'
+    )
+  );
+```
+
 ```sql
 CREATE TABLE compliance_ack_records (
   id                 BIGSERIAL PRIMARY KEY,
@@ -398,6 +500,91 @@ RETURNING id;
 
 只有 `RETURNING` 命中行才视为消费成功。前端拿到 `41003 ack_mismatch` 时必须重做检测 + 重新 ack，不能复用旧 `ack_record_id`。
 
+**`compliance_manual_reviews`（人工审阅戳，version 级，详见 §6.13）：**
+
+```sql
+CREATE TABLE compliance_manual_reviews (
+  id                       BIGSERIAL PRIMARY KEY,
+  tenant_id                BIGINT      NOT NULL,
+  article_id               BIGINT      NOT NULL,
+  article_version_id       BIGINT      NOT NULL,
+  original_check_record_id BIGINT      NULL REFERENCES compliance_check_records(id) ON DELETE SET NULL,
+  original_content_hash    CHAR(64)    NOT NULL,
+  original_policy_fingerprint VARCHAR(64) NOT NULL,
+  original_target_platforms TEXT[]     NOT NULL DEFAULT '{}',
+  original_violation_summary JSONB     NOT NULL DEFAULT '[]'::jsonb,
+  requested_by             BIGINT      NOT NULL,
+  requested_at             TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+  request_note             TEXT,                                       -- 申请说明，<= 500 字
+  status                   VARCHAR(16) NOT NULL DEFAULT 'pending',     -- pending | approved | rejected | cancelled
+  cancelled_by             BIGINT,
+  cancelled_at             TIMESTAMPTZ,
+  cancel_reason            TEXT,
+  reviewed_by              BIGINT,                                     -- ops.operator_accounts.id
+  reviewed_at              TIMESTAMPTZ,
+  decision_reason          TEXT,                                       -- 通过 / 驳回 必填，<= 1000 字
+  CONSTRAINT ck_manual_review_request_note_len CHECK (request_note IS NULL OR char_length(request_note) <= 500),
+  CONSTRAINT ck_manual_review_cancel_reason_len CHECK (cancel_reason IS NULL OR char_length(cancel_reason) <= 500),
+  CONSTRAINT ck_manual_review_decision_reason_len CHECK (decision_reason IS NULL OR char_length(decision_reason) <= 1000),
+  CONSTRAINT ck_manual_review_decision CHECK (
+    (status = 'pending' AND reviewed_by IS NULL AND reviewed_at IS NULL AND decision_reason IS NULL
+                         AND cancelled_by IS NULL AND cancelled_at IS NULL AND cancel_reason IS NULL) OR
+    (status IN ('approved','rejected') AND reviewed_by IS NOT NULL AND reviewed_at IS NOT NULL AND decision_reason IS NOT NULL
+                                      AND cancelled_by IS NULL AND cancelled_at IS NULL AND cancel_reason IS NULL) OR
+    (status = 'cancelled' AND reviewed_by IS NULL AND reviewed_at IS NULL AND decision_reason IS NULL
+                          AND cancelled_by IS NOT NULL AND cancelled_at IS NOT NULL)
+  )
+);
+
+-- 同一 version 同时只能有一条 active / terminal review；cancelled 只保留历史，可重新提交。
+CREATE UNIQUE INDEX uk_manual_review_active_per_version
+  ON compliance_manual_reviews (article_version_id)
+  WHERE status IN ('pending','approved','rejected');
+
+CREATE INDEX idx_manual_review_pending_queue
+  ON compliance_manual_reviews (requested_at)
+  WHERE status = 'pending';
+
+CREATE INDEX idx_manual_review_lookup_by_version
+  ON compliance_manual_reviews (article_version_id, status);
+```
+
+`uk_manual_review_active_per_version` 保证每个 `article_version_id` 同时至多一条 active/terminal 记录：pending 可由作者撤回为 cancelled，撤回后可再次提交；approved / rejected 仍永久占住该 version，后续 INSERT 命中唯一冲突后回读并映射 41008。`original_check_record_id ON DELETE SET NULL` 允许 §6.10 热数据清理删除 180 天前的 `compliance_check_records`；审阅记录创建时已冗余 `original_content_hash / original_policy_fingerprint / original_target_platforms / original_violation_summary`，不依赖原 check_record 保留审计语义。
+
+ops 决策走 CAS UPDATE：
+
+```sql
+UPDATE compliance_manual_reviews
+   SET status = $decision,         -- 'approved' | 'rejected'
+       reviewed_by = $operator_id,
+       reviewed_at = NOW(),
+       decision_reason = $reason
+ WHERE id = $review_id
+   AND status = 'pending'
+RETURNING id;
+```
+
+`RETURNING` 命中行才视为决策成功；并发两个 reviewer 同时点击只有一个生效。决策事务还必须同步更新 `article_versions.manual_review_status/manual_review_id/manual_review_updated_at`，并调用 `ManualReviewResolver.Invalidate(versionID)`。
+
+作者撤回 pending 也走 CAS：
+
+```sql
+UPDATE compliance_manual_reviews
+   SET status = 'cancelled',
+       cancelled_by = $actor_id,
+       cancelled_at = NOW(),
+       cancel_reason = $reason
+ WHERE id = $review_id
+   AND tenant_id = $tenant_id
+   AND article_id = $article_id
+   AND article_version_id = $article_version_id
+   AND requested_by = $actor_id
+   AND status = 'pending'
+RETURNING id;
+```
+
+撤回事务同步把 `article_versions.manual_review_status='none'、manual_review_id=NULL、manual_review_updated_at=NOW()`；若 `RETURNING` 为空，返回 41010（已决策 / 非本人 / 状态已变化）。
+
 **`compliance_review_jobs`（LLM 事后复核，DB 状态表 + RabbitMQ 触发）：**
 
 ```sql
@@ -489,6 +676,21 @@ COMMENT ON COLUMN article_versions.plaintext_snapshot IS
   'Plaintext extracted at save time, used by compliance gate to skip diff reconstruction.';
 ```
 
+**`article_versions.manual_review_status` 热路径冗余列（详见 §6.3 / §6.13）：**
+
+```sql
+ALTER TABLE article_versions
+  ADD COLUMN manual_review_status VARCHAR(16) NOT NULL DEFAULT 'none',
+  ADD COLUMN manual_review_id BIGINT NULL,
+  ADD COLUMN manual_review_updated_at TIMESTAMPTZ NULL,
+  ADD CONSTRAINT ck_article_versions_manual_review_status
+    CHECK (manual_review_status IN ('none','pending','approved','rejected'));
+COMMENT ON COLUMN article_versions.manual_review_status IS
+  'Hot-path manual review stamp: none|pending|approved|rejected. Source of truth for publish gate cache warm path.';
+```
+
+`manual_review_status` 是热路径冗余，不替代 `compliance_manual_reviews` 审计表。提交 / 撤回 / 决策必须在同一事务内同时更新 `compliance_manual_reviews` 与 `article_versions`；若事务失败，两边都不生效。这样 99.9% 从未走人工审阅的发布请求可以从 `article_versions` 单行读取拿到 `none` 并同时拿到 `plaintext_snapshot`，不额外访问人工审阅表；`manual_review_id` 只在 status 非 `none` 时填充。`approved / rejected` 后的终态详情以 `compliance_manual_reviews` 为准，`article_versions` 只保存热路径 stamp。
+
 历史回填脚本（`server/cmd/maintenance/backfill_article_plaintext`）：分租户迭代 `article_versions`，对每个版本调一次 `LoadArticleVersionContent` 重建 + `text_extractor.Extract()` 写入 `plaintext_snapshot`，幂等可重跑。
 
 完整 SQL（含 `up` / `down` / 索引）在 implementation 阶段一次性落迁移；本 spec 已固定表结构边界。
@@ -502,8 +704,8 @@ type GateDecision int
 
 const (
     GatePass     GateDecision = iota
-    GateBlock                   // 强制 + block 等级
-    GateNeedsAck                // 自愿模式 或 强制模式 high/medium 等级
+    GateBlock                   // 强制模式任意命中
+    GateNeedsAck                // 仅提示确认模式任意命中
 )
 
 // tenant/compliance/app/service.go: 发布闸请求、ack 消费参数与服务接口留在 app 层，可依赖 pgx.Tx / uuid
@@ -512,7 +714,9 @@ type GateForPublishRequest struct {
     ArticleID        int64
     ArticleVersionID int64
     ActorID          int64
+    TargetPlatforms  []string  // 本次发布请求 accounts[].platform 去重后的集合；空 = 全部平台
     AckRecordID      *int64
+    TriggerSource    string    // publish_gate | scheduler_recheck（详见 §6.12）
 }
 
 type ConsumeAckQuery struct {
@@ -537,12 +741,46 @@ type ComplianceService interface {
 }
 ```
 
-`GateForPublish` 规则：
+`CheckResult` 必须携带人工审阅状态，供编辑器检测抽屉与发布弹窗复用同一 DTO；前端不再另猜状态：
 
-- `AckRecordID == nil`：读取当前 plaintext snapshot，运行词典 + 正则，写一条新的 `publish_gate` check_record，并按策略返回 `GatePass / GateBlock / GateNeedsAck`
-- `AckRecordID != nil`：先读取 ack 绑定的原 check_record；校验 tenant/article/version、`content_hash`、`policy_fingerprint`、未过期、未消费、无 block violation、ack 覆盖全部非 block violation；校验通过直接返回 `GatePass` 和原 check_record，**不再新建第二条 check_record**
-- ack 校验失败统一返回 `41003 compliance_ack_mismatch`；前端必须重新检测 + 重新 ack
-- 即使 ack 校验通过，真正的 `consumed_at` 更新也必须等发布 job 创建后，在同一个 DB 事务里调用 `ConsumeAckTx`
+```go
+type ManualReviewStatus string // none | pending | approved | rejected
+
+type CheckResult struct {
+    RecordID              int64
+    Passed                bool
+    Violations            []Violation
+    ManualReviewStatus    ManualReviewStatus `json:"manual_review_status"`
+    ManualReviewID        *int64             `json:"manual_review_id,omitempty"`
+    ManualReviewReason    *string            `json:"manual_review_reason,omitempty"`
+    ManualReviewDecidedAt *time.Time        `json:"manual_review_decided_at,omitempty"`
+}
+```
+
+`GateForPublish` 规则（按入口顺序）：
+
+1. **config kill-switch（部署级硬关闭）**：若 `cfg.Compliance.Enabled=false`，直接 `GatePass`，不读 manual review、不读策略、不跑自动检测器；仅记录 `metrics.SkippedTotal{reason="config_disabled"}` + audit / 告警。这是生产事故的终极止血口，允许在人工审阅服务误写 rejected / pending 时临时放行。
+2. **人工审阅状态戳**（版本级发布裁决，仅次于部署级硬关闭）：
+   - 通过 `ManualReviewResolver.Decide(ctx, tenantID, articleVersionID)` 读取 `article_versions.manual_review_status/manual_review_id`，必要时回查 `compliance_manual_reviews` 填充详情；无审阅时同时返回 `ArticleVersionComplianceSnapshot`，后续新鲜检测复用其中的 `plaintext_snapshot`
+   - `pending` → 直接返回 `GateBlock` + `ErrComplianceManualReviewPending(41007)`，不跑词典 / 正则、不允许发布；前端按 §5.2 显示"审阅中"
+   - `approved` → 直接返回 `GatePass` + `CheckRecord{ManualReviewBypass=true, ManualReviewID=..., ReviewedBy=..., ReviewedAt=...}`，不跑词典 / 正则、不读 plaintext snapshot；写一条占位 `compliance_check_records(trigger_source='manual_review_bypass')` 留审计
+   - `rejected` → 直接返回 `GateBlock` + `ErrComplianceManualReviewRejected(41006)` + `CheckRecord{Reasons=["该版本已被运营驳回 (理由: <decision_reason>)"]}`；前端按 §5.2 渲染禁用横幅
+   - `none` / `cancelled` → 不短路，继续标准自动检测流程
+   - resolver 查询失败且无可信 cache → 返回 `GateBlock` + `ErrComplianceEngineUnavailable(41004)`，HTTP 503；不得 fail-open，避免误放行 rejected 版本
+3. **ops master switch / enforcement_mode = disabled** → 仅关闭自动检测器，短路 `GatePass`；不覆盖上一步 pending / rejected
+4. **ack 路径**（`AckRecordID != nil`）：读取 ack 绑定的原 check_record；校验 tenant/article/version、`content_hash`、`policy_fingerprint`（fingerprint 已包含 target_platforms 集合）、未过期、未消费、无 block violation、ack 覆盖全部非 block violation；校验通过直接返回 `GatePass` 和原 check_record，**不再新建第二条 check_record**；失败 → 41003
+5. **新鲜检测**（`AckRecordID == nil`）：读取当前 plaintext snapshot，按 `TargetPlatforms` 筛选词库，运行词典 + 正则**单次扫描**（详见 §6.5），写**一条** `publish_gate` check_record（覆盖全部 target_platforms），并按聚合策略返回 `GatePass / GateBlock / GateNeedsAck`
+
+返回 `GateBlock` 时 `CheckRecord.Reasons` 字段按平台分组（`platform_code = NULL` 单独成组、标记"全部平台共用规则"），每条含 `dictionary_name / term_pattern / hint / reference_law`，供前端直接渲染。即使 ack 校验通过，真正的 `consumed_at` 更新也必须等发布 job 创建后，在同一个 DB 事务里调用 `ConsumeAckTx`。
+
+**关于 pending 状态：** 若 `ManualReviewResolver` 当前读取到 `pending`（还没 ops 决策），`GateForPublish` 必须直接拒绝发布并返回 `41007 manual_review_pending`。pending 是业务裁决，不是检测器结果；ops 总开关 / enforcement_mode 不能绕过 pending 等待态。`cfg.Compliance.Enabled=false` 是唯一例外，用于部署级硬关闭止血。
+
+**ManualReviewResolver cache 语义：**
+
+- 进程内维护 `versionID -> ManualReviewStamp` LRU，默认 TTL 60s；terminal stamp（approved / rejected）额外写入单调 cache，TTL 24h，且只允许 `none -> pending -> approved/rejected` 或 `pending -> cancelled -> none` 的事务内 invalidation，不允许用旧 `none` 覆盖 terminal
+- 正常路径用单条 `GetArticleVersionComplianceSnapshot(versionID)` 读取 `manual_review_status/manual_review_id/manual_review_updated_at/plaintext_snapshot`。status 非 `none` 时再按 `manual_review_id` 查询 `compliance_manual_reviews` 拿 reason / reviewer / timestamps；status = `none` 时把 snapshot 交回发布闸后续检测复用，避免 99.9% 普通文章为了 manual review 多一次 DB roundtrip
+- 查询失败时只接受 pending / approved / rejected 这类"会阻断或明确放行"的可信 cache；若 cache miss 或只有陈旧 `none`，返回 41004 / 503 fail-closed。这样 DB 抖动不会误放行 rejected，也不会把未知状态当作 none
+- 提交、撤回、approve、reject 成功后必须主动 `Invalidate(versionID)`；多实例之间接受最多 60s 的陈旧窗口，但 terminal cache 只增不减，跨实例不会把 rejected 误降级成 none
 
 **`CreatePublishJobRequest` 字段扩展（向后兼容）：**
 
@@ -602,14 +840,17 @@ effectiveVersionID, err := s.articles.ResolvePublishableVersion(ctx, actor.Tenan
 if err != nil { return err }
 
 // 2. 合规闸：无 ack 时新建 record；有 ack 时校验原 record，不制造二次 record/ack mismatch
+//    target_platforms = req.Accounts[].Platform 去重排序后的集合（决定词库筛选 + fingerprint）
 decision, record, err := s.complianceSvc.GateForPublish(ctx, GateForPublishRequest{
     TenantID:         actor.TenantID,
     ArticleID:        articleID,
     ArticleVersionID: effectiveVersionID,
     ActorID:          actor.UserID,
+    TargetPlatforms:  collectTargetPlatforms(req.Accounts),
     AckRecordID:      req.AckRecordID,
+    TriggerSource:    "publish_gate",
 })
-if err != nil { /* 按 §4.6 / §6.5.1 fail-open / fail-closed 由 service 内部处理，外层只看 decision */ }
+if err != nil { return err } // 例如 41004 manual_review_load_failed_no_cache / policy_load_failed_no_cache
 
 switch decision {
 case GateBlock:
@@ -693,34 +934,22 @@ if d, ok := lookupDurationEnv("COMPLIANCE_PUBLISH_GATE_TIMEOUT"); ok {
 
 `lookupBoolEnv` 若不存在需要新增（参照 `lookupDurationEnv` / `lookupNonEmptyEnv` 同位置）。`normalize` 阶段对零值兜底：`Enabled` 默认 true、`SnapshotReloadInterval` 默认 30s、`PublishGateTimeout` 默认 800ms。
 
-短路写在 `compliance_service.go` 门面入口，**不在每个 handler 重复**：
+config kill-switch 短路写在 `compliance_service.go` 门面入口，**必须在 `GateForPublish` 查人工审阅状态戳之前执行**。`cfg.Compliance.Enabled=false` 是部署级硬关闭，不是普通检测器开关；只用于引擎 / 审阅服务 / DB 事故止血，必须伴随启动 WARN、ops 红条、metric 与 audit log。`Check`（编辑器手动 / 纯文本 API）同样可直接按 config 短路。
 
-```go
-func (s *ComplianceService) Check(ctx context.Context, req CheckRequest) (*CheckResult, error) {
-    if !s.cfg.Compliance.Enabled {
-        s.metrics.SkippedTotal.WithLabelValues("config_disabled").Inc()
-        return &CheckResult{Decision: GatePass, Skipped: true, Reason: "compliance_disabled_by_config"}, nil
-    }
-    // ...
-}
-
-func (s *ComplianceService) GateForPublish(ctx context.Context, req GateForPublishRequest) (GateDecision, *CheckRecord, error) {
-    if !s.cfg.Compliance.Enabled {
-        s.metrics.SkippedTotal.WithLabelValues("config_disabled").Inc()
-        return GatePass, nil, nil
-    }
-    // ...
-}
-```
-
-层级覆盖关系：
+层级覆盖关系（自上而下，任一层短路即决策）：
 
 ```
-config.compliance.enabled = false
-  └─ ops.compliance_policies(scope=global).enforcement_mode = disabled
-       └─ ops.compliance_policies(scope=tenant_override).enforcement_mode = disabled
+1. config.compliance.enabled = false                                    # 部署级硬关闭，覆盖所有合规裁决 → GatePass
+2. article_versions.manual_review_status / ManualReviewResolver          # 版本级发布裁决
+   ├─ pending   → GateBlock / 41007（等待运营审阅，不允许发布）
+   ├─ approved  → GatePass（永久绕过该版本的所有自动检测）
+   └─ rejected  → GateBlock / 41006（永久封禁该版本，驳回理由直出）
+3. ops.compliance_policies(id=1).master_enabled = false                  # 仅关闭自动检测器，30s 内生效 → GatePass
+4. ops.compliance_policies(id=1).enforcement_mode = disabled             # → GatePass
 ```
 
+`ComplianceService` 门面在 `GateForPublish` 入口短路顺序：`cfg.Compliance.Enabled` → **manual_review stamp** → `global.master_enabled` → `enforcement_mode` → 新鲜检测。任一短路层都返回对应 `GateDecision`，`metrics.SkippedTotal` label 区分原因（`config_disabled` / `manual_review_approved` / `ops_master_off` / `mode_disabled`）；`metrics.BlockedTotal` 加 `manual_review_pending` / `manual_review_rejected` label。`Check`（编辑器手动 / 纯文本 API）可以展示 manual review 状态，但不把 rejected 当作检测结果写入新的 violations。
+
 ### 6.5 检测引擎流程
 
 两条入口，共享同一个引擎，但**纯文本来源**和**LLM 时机**不同（见 §4.3、§4.7）：
@@ -728,24 +957,27 @@ config.compliance.enabled = false
 ```
 ComplianceService.Check（编辑器手动 / 纯文本 API）
    │
-   ├─ 0. KillSwitch 短路（cfg.Enabled / policy.enforcement_mode）
-   ├─ 1. PolicyResolver: 当前租户生效策略 + 白名单（LRU 60s）
-   ├─ 2. 纯文本来源 = 请求体直传（前端编辑器实时内容）
-   ├─ 3. DictMatcher: AC 自动机一次性扫 exact 词条
-   ├─ 4. RegexMatcher: 预编译 RE2 + 有界 worker pool + 总预算（详见 §6.10）
-   ├─ 5. WhitelistFilter: 剔除租户白名单覆盖项
-   ├─ 6. LLMJudge（同步，500ms 超时降级）: 仅对开启的 categories 跑
-   └─ 7. 聚合 → 写 compliance_check_records + violations → 返回完整 DTO
+   ├─ 0. 发布闸遵守 ConfigKillSwitch；编辑器参考检测不受发布检测模式影响
+   ├─ 1. 发布闸读取 manual review 状态；编辑器参考检测始终按当前内容检测
+   ├─ 2. 发布闸遵守 Ops master / enforcement_mode；编辑器参考检测按 advisory 语义返回风险列表
+   ├─ 3. PolicyResolver: 当前租户生效策略（LRU 60s）
+   ├─ 4. 纯文本来源 = 请求体直传（前端编辑器实时内容）
+   ├─ 5. DictMatcher: AC 自动机一次性扫 exact 词条
+   ├─ 6. RegexMatcher: 预编译 RE2 + 有界 worker pool + 总预算（详见 §6.10）
+   ├─ 7. LLMJudge（同步，500ms 超时降级）: 仅对开启的 categories 跑
+   └─ 8. 聚合 → 发布闸写 compliance_check_records + violations；编辑器参考检测只返回 DTO
 
 ComplianceService.GateForPublish（发布闸）
    │
-   ├─ 0. KillSwitch 短路
-   ├─ 1. PolicyResolver
-   ├─ 2. 纯文本来源 = article_versions.plaintext_snapshot 单行 SQL（§4.7）
+   ├─ 0. ConfigKillSwitch: cfg.Enabled=false → GatePass（部署级硬关闭）
+   ├─ 1. ManualReviewResolver + ArticleVersionComplianceSnapshot 单行读取
+   │      ├─ pending → 41007；approved → GatePass；rejected → 41006
+   │      └─ none → 继续，复用 snapshot.plaintext_snapshot；查询失败无可信 cache → 41004/503
+   ├─ 2. PolicyResolver
+   ├─ 3. 纯文本来源 = 上一步 snapshot.plaintext_snapshot（§4.7）
    │      └─ 命中空（旧数据未回填）→ 降级 LoadArticleVersionContent + metric 告警
-   ├─ 3. DictMatcher
-   ├─ 4. RegexMatcher（发布闸预算更短，详见 §6.10）
-   ├─ 5. WhitelistFilter
+   ├─ 4. DictMatcher
+   ├─ 5. RegexMatcher（发布闸预算更短，详见 §6.10）
    ├─ 6. 聚合（仅词典 + 正则）→ 立即返回 GateDecision
    └─ 7. 后台异步派发 LLMJudge 到复核队列（不阻塞 caller）
           └─ 命中 → 写"待复核"violation + 通知运营（不影响本次发布）
@@ -758,6 +990,17 @@ ComplianceService.GateForPublish（发布闸）
 - `content_hash = sha256(normalized_title + "\n" + normalized_plaintext + "\n" + summary/seo/alt)`；归一化只做换行和首尾空白处理，不做同义改写，确保 ack 与版本内容一一对应
 - `policy_fingerprint` 由当前 policy revision + enabled dictionaries + dict versions 计算；策略或词库发布后旧 ack 自动失效
 
+**多平台单次检测语义（`PolicyResolver` / 引擎入口共同保证）：**
+
+- 调用方（编辑器手动检测、发布闸）必须传入「目标平台集合」`target_platforms []string`：发布闸 = 本次发布请求中所有 `accounts[].platform` 去重后的集合；编辑器手动 = 文章已勾选的待发平台并集；空集等价于"全部平台"
+- 引擎对纯文本只跑**一次** AC 自动机扫描（这是热路径中最贵的一步），词库筛选规则：
+  - 词库 `platform_scope = 'all'` → 始终参与扫描，命中 violation 的 `platform_code = NULL`（"全部平台共用规则"）
+  - 词库 `platform_scope = 'specific'` → 仅当 `applicable_platforms ∩ target_platforms ≠ ∅` 时参与扫描，命中 violation 按其 `applicable_platforms ∩ target_platforms` 拆成多条记录，每条 `platform_code` = 具体平台
+- **单条 `compliance_check_records`** 覆盖整个 `target_platforms` 集合；`target_platforms` 字段冗余完整集合
+- **聚合判定**：当前 mode = mandatory 且存在任意 violation → 整体返回 `GateBlock`；当前 mode = advisory 且存在任意 violation → `GateNeedsAck`；否则 `GatePass`。发布器不渲染 violations 明细，完整命中词只在文章编辑页合规检测中展示。
+- `policy_fingerprint = sha256(revision + enabled_dictionaries + llm_judge_enabled + dict_versions + sorted(target_platforms))`；目标平台集合一旦改变 → fingerprint 变 → 旧 ack 自动失效
+- **单条 ack** 必须覆盖该 check_record 下全部非 block violation（不再按平台拆 ack）；前端展示按平台分组，但 ack 是 record 级别
+
 ### 6.5.1 引擎不可用时的失败语义实现
 
 承接 §4.6 总原则：**mandatory fail-closed / advisory fail-open**。
@@ -772,16 +1015,23 @@ ComplianceService.GateForPublish（发布闸）
 
 ```go
 func (s *ComplianceService) GateForPublish(ctx context.Context, req GateForPublishRequest) (GateDecision, *CheckRecord, error) {
+    // (0) 部署级硬关闭优先于所有合规裁决，用于事故止血。
     if !s.cfg.Compliance.Enabled {
         s.metrics.SkippedTotal.WithLabelValues("config_disabled").Inc()
         return GatePass, nil, nil
     }
 
-    if req.AckRecordID != nil {
-        return s.validateAckForPublish(ctx, req)
+    // (1) 版本级人工审阅裁决优先于 ops master / enforcement / 自动检测器。
+    decision, record, snapshot, handled, err := s.manualReviews.Decide(ctx, req.TenantID, req.ArticleVersionID)
+    if err != nil {
+        s.metrics.EngineFailuresTotal.WithLabelValues("manual_review_load_failed", "no_cache").Inc()
+        return GateBlock, &CheckRecord{Skipped: true, Reason: "manual_review_load_failed_no_cache"}, ErrComplianceEngineUnavailable
+    }
+    if handled {
+        return decision, record, nil
     }
 
-    // (a) 解析策略：失败优先用 last-known cache；都没有则 conservative mandatory
+    // (2) 解析策略：失败优先用 last-known cache；都没有则 conservative mandatory
     policy, ok, err := s.resolver.Resolve(ctx, req.TenantID)
     if err != nil || !ok {
         if cached, has := s.resolver.LastKnown(req.TenantID); has {
@@ -793,10 +1043,27 @@ func (s *ComplianceService) GateForPublish(ctx context.Context, req GateForPubli
         }
     }
 
-    // (b) 解析后才能基于 policy.Mode 决定后续失败语义
-    plaintext, err := s.repo.GetArticleVersionPlaintext(ctx, req.ArticleVersionID)
-    if err != nil {
-        return s.failByMode(policy.Mode, "plaintext_load_failed"), nil, nil
+    if !policy.MasterEnabled {
+        s.metrics.SkippedTotal.WithLabelValues("ops_master_off").Inc()
+        return GatePass, nil, nil
+    }
+    if policy.Mode == "disabled" {
+        s.metrics.SkippedTotal.WithLabelValues("mode_disabled").Inc()
+        return GatePass, nil, nil
+    }
+
+    if req.AckRecordID != nil {
+        return s.validateAckForPublish(ctx, req, policy)
+    }
+
+    // (3) 解析后才能基于 policy.Mode 决定后续失败语义；优先复用 manual review 阶段已读的 article_versions snapshot。
+    plaintext := snapshot.Plaintext
+    if plaintext == "" {
+        if fallback, loadErr := s.repo.LoadArticleVersionContent(ctx, req.ArticleVersionID); loadErr == nil {
+            plaintext = fallback.Plaintext
+        } else {
+            return s.failByMode(policy.Mode, "plaintext_load_failed"), nil, nil
+        }
     }
 
     result, err := s.engine.RunSync(ctx, plaintext, policy)
@@ -821,7 +1088,7 @@ func (s *ComplianceService) failByMode(mode, reason string) GateDecision {
 - 后台 reloader 每 60s 主动刷一次全量策略，让 cache 不至于无限陈旧
 - 冷启动期：服务启动时**先**全量加载所有租户策略，加载完成才开服；启动失败 fail-fast（部署侧兜底）
 
-错误码 41004 仅用于 `policy_load_failed_no_cache` 这种"既无在线策略又无缓存"的极端情况；常规熔断按 fail-closed / fail-open 静默处理。
+错误码 41004 用于 `policy_load_failed_no_cache` 和 `manual_review_load_failed_no_cache` 这类"既无在线数据又无可信缓存"的极端情况；常规熔断按 fail-closed / fail-open 静默处理。manual review 查询失败的常规兜底只允许使用 pending / approved / rejected 可信 cache，不能用陈旧 none 放行。
 
 ### 6.6 词库快照与热更新
 
@@ -884,7 +1151,7 @@ func (s *ComplianceService) failByMode(mode, reason string) GateDecision {
 
 **发布闸热路径：**
 
-- 必须只做：解析策略（进程内 last-known cache 优先）、读取 `article_versions.plaintext_snapshot` 一行、内存 AC/regex 扫描、写 `check_records + violations`；不调 LLM、不调 ops-api HTTP、不发通知、不等待复核 worker
+- 必须只做：解析策略（进程内 last-known cache 优先）、读取 `article_versions` compliance snapshot 一行（`plaintext_snapshot + manual_review_status`）、内存 AC/regex 扫描、写 `check_records + violations`；不调 LLM、不调 ops-api HTTP、不发通知、不等待复核 worker
 - `cfg.Compliance.PublishGateTimeout` 默认 800ms 是硬上限；正常目标是 P95 < 30ms、P99 < 50ms。超过硬上限按 §4.6 fail-open / fail-closed
 - `GateForPublish` 捕获 panic 并转成 `engine_run_failed`，避免单条异常规则打崩 tenant-api 进程
 
@@ -896,6 +1163,14 @@ func (s *ComplianceService) failByMode(mode, reason string) GateDecision {
 - 单次检测最多落库 200 条 violation 明细；`hit_count` 保存真实命中总数，`stored_hit_count` 保存实际落库数，`truncated=true` 表示明细被截断
 - `matched_text` 写入前截断到 80 字符，全文只存 `content_hash`，不存正文快照
 
+**写入快路径（缩短 P99 尾巴）：**
+
+- **无命中**：只 INSERT 一条 `compliance_check_records`（`hit_count=0 / stored_hit_count=0`），不开启 violations 子事务，单次 DB roundtrip
+- **有命中**：先 INSERT check_record 拿到 id，再用单条 `INSERT INTO compliance_violations (...) VALUES (...), (...), ...` 批量插入（PG 批量 insert 比 N 次单条快 5~20 倍）；最多 200 条明细一次写完
+- **统计 / metric**：所有 `compliance_check_total / compliance_duration_ms / compliance_skipped_total` Prometheus counter 用进程内 buffer 异步刷，发布闸热路径不等 metric I/O
+- **Audit log**：复用 [`server/internal/shared/auditlog/async.go`](../../../server/internal/shared/auditlog/async.go) 异步 writer，发布闸不同步等 audit 落库
+- **基线压测目标（实施阶段验收）**：无命中场景 P99 < 30ms；命中 200 条场景 P99 < 50ms；超出基线则降低 violations 上限或拆为后台异步落明细（仅留 summary 进同步路径）
+
 **并发与幂等：**
 
 - 发布闸不加分布式锁；同一文章并发发布会各自检测，各自写独立 check_record。真正需要全局互斥的是 ack 消费，使用 `UPDATE ... WHERE consumed_at IS NULL ... RETURNING` CAS
@@ -906,7 +1181,7 @@ func (s *ComplianceService) failByMode(mode, reason string) GateDecision {
 **索引与保留策略：**
 
 - 必备索引：`compliance_check_records(tenant_id, article_id, checked_at DESC)`、`compliance_violations(record_id)`、`compliance_violations(tenant_id, level, id DESC)`、`compliance_ack_records(tenant_id, article_id, article_version_id, check_record_id) WHERE consumed_at IS NULL`、`compliance_review_jobs(available_at, id) WHERE status='pending'`、`compliance_review_jobs(message_id)`
-- 一期不做分区，避免 schema 复杂度；检测记录热数据保留 180 天，每日清理任务按 `id` 小批量删除过期 records/violations/ack/review_jobs
+- 一期不做分区，避免 schema 复杂度；检测记录热数据保留 180 天，每日清理任务按 `id` 小批量删除过期 records/violations/ack/review_jobs。`compliance_manual_reviews` 作为版本级裁决与审计表不参与 180 天热数据清理；它的 `original_check_record_id ON DELETE SET NULL` 保证原 check_record 被清理后审阅记录仍保留 `original_*` 快照
 - 词库版本快照保留最近 10 个发布版本；超出部分删除 DB snapshot，不上 OSS。若单词库 snapshot 超过 50MB，再单独评估对象存储
 
 **富文本定位：**
@@ -914,6 +1189,58 @@ func (s *ComplianceService) failByMode(mode, reason string) GateDecision {
 - 编辑器手动检测优先提交前端导出的 `dom_path` / block key 映射；后端只透传，不理解编辑器 AST
 - `dom_path` 缺失或失效时，前端退回 plain offset + 当前文本节点搜索；高亮可降级，但发布闸判定不依赖高亮定位
 
+### 6.11 为什么不做"发布前替换为 `*`"
+
+历史 Revision 4 曾要求"命中敏感词在发布到平台前按位替换为同长度 `*`"。本次复审决定**删除该方案**，原因：
+
+- **越权**：合规模块的契约是「门」（block / pass / needs_ack），不是「内容转换器」；改写 publish task payload 会污染发布器协议、和现有 `desktop_tasks` 的 `desktop_content_service` 取正文路径不兼容（payload 里就算放脱敏稿，桌面端仍按 article_id 拉原文）
+- **漏洞面**：替换链路一旦被任意环节绕过（桌面端从原文重拉、用户撤回后重发），平台仍会收到原词，反而比"直接拒绝"更不安全
+- **技术债**：替换需要从 plaintext offset 反查富文本 / Markdown / HTML offset，要么扛 dom_path 的脆弱性、要么落一份重的 plaintext_map（存储爆炸），与"以速度为准、不引入存储爆炸"的原则相悖
+
+**替代方案（已收口在 R29 / R31）：**
+
+- 命中强制模式 → **直接拒绝发布**，发布器只显示阻断结论，引导作者回编辑页用合规检测查看完整命中词并改稿
+- 命中 advisory → 发布器只显示有敏感词风险，确认后可继续；完整词列表仍回编辑页合规检测查看
+- 通用（all 作用域）词库命中 → 发布器不展示平台或词条细节
+- 定时发布到点执行前在调度器侧再过一道闸（详见 §6.12），保证策略 / 词库变更后的 stale job 仍能被拦下
+
+### 6.12 调度器执行前重检（定时发布场景）
+
+承接 R31：`PublishJobService.Create()` 时已过闸的 publish job，若是定时任务（`scheduled_at > now()`），调度器到点取出执行前必须再过一道合规闸。
+
+**为什么必须重检：**
+
+- 创建到执行可能间隔小时 / 天级；期间运营可能新增 / 修改词库、调整 enforcement_mode、扩大 mandatory 范围
+- 文章正文也可能在期间被作者编辑（创建发布 job 后允许继续修改原文，发布版本与最新版本可能漂移）
+- 强制模式语义是"直到推送出去那一刻都得合规"，不是"创建发布请求那一刻合规即可"
+
+**实现位置：** `server/cmd/scheduler` 中现有调度循环取出待执行 job 后、向 desktop / 投递通道下发 task 前，新增一个 `compliance.RecheckBeforeDispatch(jobID)` 步骤。
+
+**重检流程：**
+
+1. 用 job 的 `(article_id, article_version_id, target_platforms)` 重新调用 `GateForPublish(TriggerSource = "scheduler_recheck", AckRecordID = nil)`（不复用旧 ack — ack 是"用户对当时风险已知悉"的承诺，不能跨调度周期）
+2. 命中聚合判定：
+   - `GatePass` → 继续原派发流程，写一条新的 `compliance_check_records` 留审计（`trigger_source = scheduler_recheck`）
+   - `GateBlock`（强制 + block）→ 把 `publish_jobs.status` 置为 `blocked_by_compliance`、写 `compliance_blocked_record_id` 反向引用、停止派发；通过现有站内通知 / 审计通道告诉作者"定时发布被合规拦截 + 原因"；不重新调度
+   - `GateNeedsAck`（advisory 或 mandatory 非 block）→ 一期**不**重弹 ack（用户已不在线），直接放行并标记 `compliance_recheck_advisory_only = true`，留审计；如果产品后续要求"advisory 重检也要拦"，再加 `blocked_pending_user_action` 状态
+
+**幂等与并发：**
+
+- 同一 job 多实例 scheduler 抢占走现有 advisory lock / `FOR UPDATE SKIP LOCKED` 路径（沿用现状）
+- 重检失败按 §4.6 fail-open / fail-closed：
+  - **mandatory 失败 → 直接 fail**：把 `publish_jobs.status` 置为 `failed`、写失败原因（`compliance_recheck_failed`）、停止派发、不进任何 retry 队列；通过站内通知告知作者"定时发布失败：合规重检异常，请联系运营"；运营在 metric / alert 看到后人工排查
+  - **advisory 失败 → 放行 + metric 告警**（advisory 语义是"提示为主"，不能因引擎抖动误伤）
+
+**与 R23 P99 预算的关系：** 调度器重检不在用户请求路径，预算放宽到 500ms（仍以 plaintext_snapshot 为底，避免历史重建）。
+
+**调度器重检遇到人工审阅戳：** 同 §6.13 — `RecheckBeforeDispatch` 走的是同一个 `GateForPublish`，approved 的版本直接 `GatePass`，rejected 的版本直接 `GateBlock`（job 转 `blocked_by_compliance`），pending 的版本直接 `GateBlock / 41007`（job 转 `blocked_by_compliance`，原因写"等待运营审阅"，不派发）。
+
+pending 导致的 `blocked_by_compliance` 不做自动解锁：ops approve / reject 只改变 version 的人工审阅戳，不重新唤醒历史 job，避免在用户不在线时把旧定时任务悄悄发出去。admin-web 的"我的发布"列表必须展示 `blocked_by_compliance` 状态、合规原因和「重新发布」按钮；作者看到 approved 后点击重新发布，走新的 `PublishJobService.Create()` 并重新创建 job。若 rejected，则列表显示"已被运营驳回，请修改文章后重新创建版本"。
+
+### 6.13 人工特批
+
+开发阶段不提供作者侧人工特批 / 运营审阅入口。发布器遇到 `GateBlock` 时只提示用户回到文章编辑页，使用「合规检测」查看完整命中词并修改内容；修改后重新打开发布器再次检测。
+
 ## 7. 对外 API
 
 ### 7.1 租户面（tenant-api）
@@ -929,8 +1256,9 @@ func (s *ComplianceService) failByMode(mode, reason string) GateDecision {
 | POST | `/api/tenant/compliance/check` | 无文章上下文的纯文本检测 |
 | GET | `/api/tenant/articles/:id/compliance/latest` | 拿最近一次检测结果 + violations |
 | POST | `/api/tenant/compliance/check-records/:id/ack` | **粒度：record**。用户标记"该次检测的全部非 block 风险已知悉"，返回 `ack_record_id`（一次性、24h TTL，详见 §6.9） |
-| GET / POST / DELETE | `/api/tenant/compliance/tenant-terms` | 租户白 / 黑名单管理 |
-
+| POST | `/api/tenant/articles/:id/compliance/manual-reviews` | 提交运营人工审阅。body `{check_record_id, note}`；要求当前 version 无 pending / 无终态记录、`check_record_id` 含 block violation；返回 review id 与 `pending` 状态 |
+| GET | `/api/tenant/articles/:id/compliance/manual-reviews/latest` | 查当前 `article_version_id` 最新审阅状态（none / pending / approved / rejected），含决策理由（若已决策）；前端发布弹窗轮询 |
+| POST | `/api/tenant/articles/:id/compliance/manual-reviews/:review_id/cancel` | 作者撤回 pending 审阅；仅提交人可撤回；成功后 version 回到 none，可重新检测 / 重新提交 |
 发布器拦截**不暴露 HTTP**，是 `PublishJobService` 内部调用 `GateForPublish`。
 
 handler 注册方式与 KOL profile 同构（参考 [`router.go:100-122`](../../../server/internal/tenant/transport/router.go#L100)）：
@@ -956,9 +1284,13 @@ articles.GET("/:id/compliance/latest", complianceHandler.LatestCheck)
 | POST | `/api/ops/compliance/dictionaries/:id/terms:batch-import` | CSV 批量导入 |
 | POST | `/api/ops/compliance/dictionaries/:id/publish` | 发布版本（bump version + 写 versions 快照） |
 | POST | `/api/ops/compliance/dictionaries/:id/rollback` | 回滚到指定版本 |
-| GET / PUT | `/api/ops/compliance/policy/global` | 全局策略 |
-| GET / PUT | `/api/ops/compliance/policy/tenants/:tenantId` | 租户级覆盖 |
-| GET | `/api/ops/compliance/stats` | 命中分布 / 拦截率 / 误报率 |
+| GET / PUT | `/api/ops/compliance/policy/global` | 全局策略（含「总开关」`master_enabled`） |
+| POST | `/api/ops/compliance/policy/global/master-switch` | 一键切换总开关（独立 endpoint，单字段写入 + 落 audit log） |
+| GET | `/api/ops/compliance/manual-reviews` | 人工审阅列表，支持 `?status=pending` / `approved` / `rejected`、`&tenant_id=...&page=...`；权限 `compliance:review` |
+| GET | `/api/ops/compliance/manual-reviews/:id` | 详情：完整 violations + 文章 plaintext + 申请说明 |
+| POST | `/api/ops/compliance/manual-reviews/:id/approve` | 通过决策；body `{reason}`；CAS UPDATE WHERE status='pending' |
+| POST | `/api/ops/compliance/manual-reviews/:id/reject` | 驳回决策；body `{reason}`；同上 CAS |
+| GET | `/api/ops/compliance/stats` | 命中分布 / 拦截率 / 误报率 / 审阅通过率 |
 | GET | `/api/ops/compliance/records` | 全局检测记录搜索 |
 
 ## 8. 错误码
@@ -967,11 +1299,16 @@ articles.GET("/:id/compliance/latest", complianceHandler.LatestCheck)
 
 | Code | 含义 | HTTP | 说明 |
 | --- | --- | --- | --- |
-| 41001 | `compliance_blocked` | 409 | 强制模式 + block 等级，禁止发布 |
-| 41002 | `compliance_needs_ack` | 409 | 自愿 / 强制 high+ 模式，需用户 ack 后重发 |
+| 41001 | `compliance_blocked` | 409 | 强制模式任意敏感词命中，禁止发布 |
+| 41002 | `compliance_needs_ack` | 409 | 仅提示确认模式命中敏感词，需用户 ack 后重发 |
 | 41003 | `compliance_ack_mismatch` | 400 | ack 校验 / CAS 失败：六元任一不匹配、已 consumed、已过期；前端必须重新检测 + 重新 ack |
 | 41004 | `compliance_engine_unavailable` | 503 | 引擎拒绝服务且无 last-known 策略可用（极端情况） |
 | 41005 | `invalid_article_version` | 400 | 请求传入的 `article_version_id` 不属于该 `(tenant_id, article_id)` |
+| 41006 | `compliance_manual_review_rejected` | 409 | 当前 `article_version_id` 已被运营驳回，不可发布；前端必须引导作者改稿换版本 |
+| 41007 | `compliance_manual_review_pending` | 409 | 当前 `article_version_id` 存在 pending 审阅；提交审阅时表示重复申请，发布时表示等待 ops 决策 |
+| 41008 | `compliance_manual_review_terminal` | 409 | 当前 `article_version_id` 已有终态审阅记录（approved 或 rejected），不可再次提交审阅 |
+| 41009 | `compliance_manual_review_invalid_check_record` | 400 | 提交审阅时 `check_record_id` 不属于该 (tenant, article, version) 或不含 block 等级 violation |
+| 41010 | `compliance_manual_review_not_cancellable` | 409 | 撤回审阅失败：非提交人、记录已被 ops 决策、已撤回或不属于该文章版本 |
 
 ## 9. 文件改动清单
 
@@ -979,11 +1316,12 @@ articles.GET("/:id/compliance/latest", complianceHandler.LatestCheck)
 
 - `server/internal/shared/config/config.go` — 新增 `ComplianceConfig` + `applyEnvOverrides` 补 4 个 env 映射 + 可能补 `lookupBoolEnv`（详见 §6.4）
 - `server/internal/shared/compliance/types.go` — DTO + `GateDecision` 枚举
-- `server/internal/tenant/compliance/**` — 新增整套 domain（transport / app / engine / repository）
-- `server/internal/ops/compliance/**` — 新增整套 domain
-- `server/internal/tenant/app/publish_job_service.go` — `Create()` 入口接 `GateForPublish`；`CreatePublishJobRequest` 加 `ArticleVersionID` / `AckRecordID` 两个可选字段（详见 §6.3）
+- `server/internal/tenant/compliance/**` — 新增整套 domain（transport / app / engine / repository）；`app/manual_review_service.go` 提交 / 撤回审阅 + 状态查询；`app/manual_review_resolver.go` 承载 LRU/terminal cache；`GateForPublish` 在 config kill-switch 之后查 manual review stamp（pending / approved / rejected 短路）
+- `server/internal/ops/compliance/**` — 新增整套 domain；`app/manual_review_service.go` 列表 / 详情 / approve / reject CAS UPDATE；权限位 `compliance:review` 注入到 `ops.operator_accounts` 权限体系；ops-api 查询 tenant schema 的 `compliance_manual_reviews` 走专用只读连接，显式允许跨 tenant 汇总
+- `server/internal/tenant/app/publish_job_service.go` — `Create()` 入口接 `GateForPublish`，传入 `target_platforms`（accounts.platform 去重）；**不再对 publish task payload 做任何替换**（详见 §6.11 删除说明）；`CreatePublishJobRequest` 加 `ArticleVersionID` / `AckRecordID` 两个可选字段（详见 §6.3）
+- `server/cmd/scheduler` 调度循环 — 取出 `scheduled_at` 到点的 publish job 后、派发前调 `compliance.RecheckBeforeDispatch`；命中 block → job 状态置 `blocked_by_compliance` + 写命中原因 + 站内通知作者（详见 §6.12）；pending 审阅导致 blocked 后由 admin-web 发布列表引导用户重新发布
 - `server/internal/tenant/app/article_service.go` — `SaveVersion()` 写入 `plaintext_snapshot`（详见 §4.7）
-- `server/internal/tenant/repository/article_version_storage.go` — 新增 `GetArticleVersionPlaintext` 单行 SQL 读取路径
+- `server/internal/tenant/repository/article_version_storage.go` — 新增 `GetArticleVersionComplianceSnapshot` 单行 SQL 读取路径，返回 `plaintext_snapshot + manual_review_status/manual_review_id/manual_review_updated_at`
 - `server/internal/tenant/transport/router.go` — `tenantProtected.Group("/compliance")` 注册 handler
 - `server/cmd/tenant-api/main.go` — 启动 snapshot loader goroutine
 - `server/cmd/ops-api/main.go` — 注册 ops 侧 handler
@@ -992,38 +1330,47 @@ articles.GET("/:id/compliance/latest", complianceHandler.LatestCheck)
 
 ### 9.2 Migrations
 
-- `server/migrations_ops/<ts>_create_compliance_dictionaries.up.sql` — 4 张 ops 表（**SQL 必须用 `ops.` schema 前缀**，详见 §6.2）
-- `server/migrations_ops/<ts>_seed_compliance_dictionaries.up.sql` — 极限词库种子
-- `server/migrations/<ts>_create_compliance_tables.up.sql` — tenant 侧 `tenant_terms / check_records / violations / ack_records / review_jobs`（含 `matched_text` CHECK 与必要索引）
-- `server/migrations/<ts>_add_article_versions_plaintext_snapshot.up.sql` — `article_versions` 加冗余列
+- `server/migrations_ops/<ts>_create_compliance_dictionaries.up.sql` — 4 张 ops 表，`compliance_dictionaries` 包含 `platform_scope / applicable_platforms` 两列与互斥 CHECK（**不再引入 `category` 列**）；`compliance_policies` 是 `id=1` 全局单例，包含 `master_enabled` 列与 singleton CHECK（**SQL 必须用 `ops.` schema 前缀**，详见 §6.2）
+- `server/migrations_ops/<ts>_seed_compliance_dictionaries.up.sql` — 极限词库种子，按词库名称区分（如「广告法极限词」「政治敏感词」「涉黄涉暴通用词」「通用违禁词」四个独立词库），不写 category 字段；种子默认 `platform_scope = 'all'`
+- `server/migrations/<ts>_create_compliance_tables.up.sql` — tenant 侧 `tenant_terms / check_records / violations / ack_records / review_jobs`，`check_records` 含 `target_platforms text[]`、`violations` 含 `platform_code` 字段（含 `matched_text` CHECK 与必要索引）
+- `server/migrations/<ts>_add_article_versions_compliance_snapshot.up.sql` — `article_versions` 加 `plaintext_snapshot` + `manual_review_status/manual_review_id/manual_review_updated_at` 冗余列
+- `server/migrations/<ts>_add_publish_jobs_compliance_block.up.sql` — `publish_jobs` 加 `status` 枚举扩展（含 `blocked_by_compliance`）+ `compliance_blocked_record_id BIGINT NULL` + `compliance_blocked_at TIMESTAMPTZ NULL`，用于调度器重检命中 block 后停派（详见 §6.12）；**不**对 `desktop_tasks` / `publish_tasks` 加任何合规字段（合规模块不污染发布器 payload）
+- `server/migrations/<ts>_create_compliance_manual_reviews.up.sql` — `compliance_manual_reviews` 表 + `uk_manual_review_active_per_version` partial unique + `cancelled` 状态 + `original_*` 审计快照 + `ON DELETE SET NULL` + 查询索引（详见 §6.2 / §6.13）
 
 ### 9.3 Shared types（前后端契约）
 
 - `packages/shared-types/src/index.ts`：
   - `CreatePublishJobRequest` 加 `article_version_id?: number; ack_record_id?: number;`（**snake_case，与现有字段保持一致**）
   - `ArticleDetail` 加 `current_version_id: number | null`（详见 §6.3）
-  - 新增 `ComplianceCheckRequest / ComplianceCheckResult / ComplianceViolation / GateDecisionLiteral / RuntimeStatus / CreateAckRequest / AckRecord` 等类型，全部使用 snake_case 字段名
+  - 新增 `ComplianceCheckRequest / ComplianceCheckResult / ComplianceViolation / GateDecisionLiteral / RuntimeStatus / CreateAckRequest / AckRecord / ManualReviewStatus` 等类型，全部使用 snake_case 字段名；`ComplianceCheckResult` 必须包含 `manual_review_status / manual_review_id / manual_review_reason / manual_review_decided_at`
 - `server/internal/tenant/app/article_service.go`：在加载 ArticleDetail 的查询里把 `current_version_id` 映射到返回 DTO（同步改后端 + TS 类型）
 
 ### 9.4 Frontend (admin-web)
 
 - `apps/admin-web/src/components/editor-common/EditorComplianceCheck.vue` — 新增按钮 + 抽屉
 - `apps/admin-web/src/components/editor-common/EditorActionMenu.vue` — 挂载点
-- `apps/admin-web/src/components/PublishArticleModal.vue` — 三种 GateDecision 渲染 + 提交请求携带 `article_version_id / ack_record_id`
+- `apps/admin-web/src/components/PublishArticleModal.vue` — 三种 GateDecision 渲染 + 提交请求携带 `article_version_id / ack_record_id`；发布器只显示门禁结论，不展示具体敏感词明细，不提供人工特批入口；完整命中词统一在文章编辑页合规检测查看
+- `apps/admin-web/src/views/PublishJobsView.vue`（或现有"我的发布"列表）— 展示 `blocked_by_compliance` 状态、合规原因和「重新发布」按钮；pending 审阅解除后不自动恢复旧 job
 - `apps/admin-web/src/lib/api.ts` — 新增 `complianceApi`；`publishJobsApi.create` 入参类型扩展
 
 ### 9.5 Frontend (ops-web)
 
-- `apps/ops-web/src/views/compliance/{CompliancePolicyView,ComplianceDictionariesView,ComplianceDictionaryEditView,ComplianceTenantOverrideView,ComplianceRecordsView,ComplianceStatsView}.vue`
-- `apps/ops-web/src/router/index.ts` — 新增 6 条路由
+- `apps/ops-web/src/views/compliance/CompliancePolicyView.vue` — 全局策略页：顶部「总开关」开关组件 + 模式 + LLM + 启用词库勾选
+- `apps/ops-web/src/views/compliance/ComplianceDictionariesView.vue` — 词库管理首页：运营自建词库的**统一列表**（表格），列含名称 / 适用平台 / 词条数 / 版本 / 状态 / 最后更新；顶部「新建词库」按钮 + 名称模糊搜索 + 状态筛选；不显示 category 列、不做 category 筛选；空态引导文案
+- `apps/ops-web/src/views/compliance/ComplianceDictionaryEditView.vue` — 新建（路由 `/dictionaries/new`）/ 编辑（路由 `/dictionaries/:id/edit`）词库 page form：词库名称（运营自定义、用名称表达用途）、适用平台（"全部" vs "具体平台多选"互斥控件）、敏感词 textarea、状态、保存 / 取消；同页内嵌词条 CRUD / CSV 导入 / 版本发布 / 回滚区块
+- `apps/ops-web/src/views/compliance/{ComplianceRecordsView,ComplianceStatsView}.vue`
+- `apps/ops-web/src/views/compliance/ComplianceManualReviewListView.vue` — 人工审阅工作台列表（pending / approved / rejected 三标签 + 筛选）
+- `apps/ops-web/src/views/compliance/ComplianceManualReviewDetailView.vue` — 详情页：左侧 plaintext + violations，右侧申请说明 + 决策表单（通过 / 驳回 + 必填理由）；提交即整页禁用
+- `apps/ops-web/src/components/compliance/PlatformScopePicker.vue` — 复用于词库编辑的"全部 vs 具体平台多选"互斥选择器；平台选项来源 `packages/shared-types` 现有平台枚举
+- `apps/ops-web/src/router/index.ts` — 新增 8 条路由（policy / dictionaries / dictionaries/new / dictionaries/:id/edit / manual-reviews / manual-reviews/:id / records / stats）
 - `apps/ops-web/src/layouts/AppShell.vue` — 侧栏分组「内容安全」
 
 ## 10. 测试
 
 ### 10.1 后端单测
 
-- `engine`：词典命中、正则命中、LLM 兜底、白名单覆盖、偏移映射准确性、`matched_text` 写入侧截断到 80 字符
-- `policy_resolver`：global vs tenant_override 优先级、灰度规则一致性（`tenant_id % 100`）
+- `engine`：词典命中、正则命中、LLM 兜底、偏移映射准确性、`matched_text` 写入侧截断到 80 字符
+- `policy_resolver`：global 策略解析、快照刷新与失败回退
 - `snapshot_loader`：版本变更检测、原子替换、失败重试退避、并发读
 - `compliance_service`：
   - kill-switch 短路（config + policy 两层）
@@ -1034,9 +1381,10 @@ articles.GET("/:id/compliance/latest", complianceHandler.LatestCheck)
 - `ConsumeAckTx`：六元一致校验通过 / 不通过 / ack 已 consume 后再用返回 false / 跨租户 ack 拒绝 / 发布事务失败不消费 ack
 - `dictionary_service`（ops）：发布版本 bump version + 写快照、回滚
 - `applyEnvOverrides` 测试：4 个 env 变量都能正确覆盖（防 P2-3 复发）
-- `compliance_policies` 唯一性测试：插入第二条 global 应失败、插入同 tenant 第二条 tenant_override 应失败、CHECK 约束生效
+- `compliance_policies` 单例测试：插入第二条策略应失败、`id != 1` 应失败、CHECK 约束生效
 - `GateForPublish` ack 路径：传入 `ack_record_id` 时复用原 check_record；策略指纹或 content_hash 变化时返回 41003
 - `compliance_review_worker`：RabbitMQ 重复消息幂等、DB CAS claim、多实例不重复消费、失败退避、最多 3 次重试、publish 失败后恢复 ticker 可补发
+- `compliance_check_records` schema：`trigger_source` CHECK 接受 `scheduler_recheck` 与 `manual_review_bypass`
 
 ### 10.2 集成测
 
@@ -1044,27 +1392,33 @@ articles.GET("/:id/compliance/latest", complianceHandler.LatestCheck)
 - 旧 client 不传 `article_version_id / ack_record_id` 时的回退行为
 - ops-api 改策略 → tenant-api 30s 内引擎生效
 - LLM 计费失败时降级路径
-- 文章保存触发 `plaintext_snapshot` 写入；发布闸读取 O(1)
+- 文章保存触发 `plaintext_snapshot` 写入；发布闸通过 `GetArticleVersionComplianceSnapshot` 单行读取 O(1)
 
 ### 10.3 前端
 
-- `EditorComplianceCheck`：抽屉显示、定位原文、加白名单、忽略
-- `PublishArticleModal`：`GatePass / GateNeedsAck / GateBlock` 三种渲染；提交时携带 `article_version_id / ack_record_id`
-- `runtime-status.enabled = false` 时按钮整组消失
+- `EditorComplianceCheck`：抽屉显示、定位原文；只做参考检测，不保存记录，不显示发布判定模式
+- `PublishArticleModal`：`GatePass / GateNeedsAck / GateBlock` 三种渲染；提交时携带 `article_version_id / ack_record_id`；只显示门禁结论，不渲染具体词、平台分组、处理建议或人工特批入口
+- "我的发布"列表：`blocked_by_compliance` 显示原因 + 重新发布按钮；approved 后点击重新发布会创建新 job，不自动解锁旧 job
+- `runtime-status.enabled = false` 只影响发布器检测模块；编辑器参考检测保持可用
 - shared-types 类型同步：`CreatePublishJobRequest` 新字段 TS 编译通过
 
 ### 10.4 手动验收
 
 1. ops 切到 mandatory + 词库含 block 词 → 编辑器命中 → 发布按钮拦截 ✅
 2. ops 切到 advisory → 命中后弹 ack 提示 → 提交可发布；同一 ack 第二次提交被 `ack_mismatch` 拒绝 ✅
-3. config kill-switch 关闭 → 编辑器按钮消失 + 发布器跳过检测 + metric `skipped_total{reason="config_disabled"}` 上涨 ✅
+3. config kill-switch 关闭 → 编辑器参考检测仍可用 + 发布器跳过检测 + metric `skipped_total{reason="config_disabled"}` 上涨 ✅
 4. ops 添加新词条 → 30 秒内编辑器再次检测命中新词 ✅
 5. ops 回滚到上一版本 → 30 秒内引擎按旧词库判定 ✅
-6. 租户白名单覆盖 → 命中词条不出现在违规列表 ✅
-7. 强制模式 + DB 失联（人为断开）→ 发布闸 fail-closed 拦截 ✅
-8. 自愿模式 + DB 失联 → 发布闸 fail-open 放行 + metric 告警 ✅
-9. mandatory + LLM 启用 + 文章正文含 LLM-only 风险段落 → 发布闸**放行** + 复核队列出现"待复核"violation + 运营收到通知 ✅
+6. 强制模式 + DB 失联（人为断开）→ 发布闸 fail-closed 拦截 ✅
+7. 自愿模式 + DB 失联 → 发布闸 fail-open 放行 + metric 告警 ✅
+8. mandatory + LLM 启用 + 文章正文含 LLM-only 风险段落 → 发布闸**放行** + 复核队列出现"待复核"violation + 运营收到通知 ✅
 10. 长编辑历史的文章发布 → 走 `plaintext_snapshot` 路径，发布闸 P99 < 50ms ✅
+11. ops-web 词库管理页 → 看到运营已创建的全部词库统一列表（不含 category 列） → 点击「新建词库」→ 进入 page form → 自定义命名（如"广告极限词"）、适用平台选「全部」时具体平台被禁用且反之 → 保存后回到列表，新词库出现在表格中且可通过名称搜索筛出 ✅
+12. ops-web 全局策略页关闭「总开关」→ 30 秒内 tenant-api 所有实例编辑器按钮消失 + 发布器跳过检测 + metric `skipped_total{reason="ops_master_off"}` 上涨；重新打开后恢复 ✅
+13. 词库 A `platform_scope = specific, applicable_platforms = [xiaohongshu]` 命中文章 + 强制模式 → 同时发布到小红书 + 微信视频号 → 整体 `GateBlock`；发布器只显示阻断结论并提示回编辑页查看完整命中词；发布按钮禁用、文章不进入派发；`desktop_tasks` / `publish_tasks` payload 字段保持原样不被改写 ✅
+14. 多平台同发：同篇文章发布到 A 和 B 两个平台，A 平台 specific 词库命中 + 通用 all 词库也命中 → 单条 check_record，violations 正常落库；发布器不展示平台分组或词条明细；强制模式整体 `GateBlock`，仅提示确认模式整体 `GateNeedsAck` ✅
+15. **调度器重检**：advisory 模式下作者定时发布一篇文章 → 创建时通过 → 30 分钟后 ops 把 enforcement_mode 改为 mandatory 并扩充词库命中该文章 → 调度器到点取出 job → `RecheckBeforeDispatch` 命中 block → `publish_jobs.status = blocked_by_compliance`、`compliance_blocked_record_id` 反向引用 + 站内通知作者"定时发布被合规拦截"；不重新调度；作者改稿后重新提交才能放行 ✅
+16. 发布器关闭检测模式 → 不显示任何敏感词 / 合规检测相关模块，目标账号和发布按钮按原发布流程可用 ✅
 
 ## 11. Risks And Mitigations
 
@@ -1074,7 +1428,7 @@ articles.GET("/:id/compliance/latest", complianceHandler.LatestCheck)
 | LLM 兜底成本 | AI 点数过快消耗 | 默认 LLM 关闭；开启时按 `tenant_id % 100` 灰度；ops 端可见每租户 LLM 调用频次 |
 | 公开词库覆盖度不足（医美 / 教育 / 金融） | 误漏 | 一期接受；上线后基于 ack 数据 + 运营反馈持续补 |
 | 30s 轮询延迟 | 词库新增最长 30s 才生效 | 一期接受；ops 发布词库会 bump version/revision，tenant-api 30s 内轮询生效；二期再评估 Redis pub/sub |
-| config kill-switch 误触 | 全站合规失效 | 启动日志 WARN；ops 控制台首页显著标注"config 已关闭"红条；metric + Slack 告警 |
+| config kill-switch 误触 | 全部合规裁决被部署级硬关闭覆盖，包含人工 rejected / pending | 启动日志 WARN；ops 控制台首页显著标注"config 已关闭"红条；metric + Slack 告警；发布闸 audit 记录 `config_disabled_override=true`；只允许运维在事故止血窗口使用，恢复后复盘 |
 | 词库版本快照 JSON 体积（10k 词条 ≈ MB 级） | `versions` 表膨胀 | 只保留最近 10 个发布版本；单词库 snapshot 超过 50MB 时再评估对象存储 |
 | ops-api 与 tenant-api 跨进程访问 ops schema | 跨库连接管理复杂 | tenant-api 仅读 ops 策略表，使用只读连接；不写 ops schema |
 | RabbitMQ 短暂不可用 | LLM 事后复核延迟 | 发布闸仍写 `compliance_review_jobs` pending，不阻断发布；恢复 ticker 在 RabbitMQ 恢复后补发消息 |
@@ -1082,18 +1436,43 @@ articles.GET("/:id/compliance/latest", complianceHandler.LatestCheck)
 | 词条正则表达式恶意 / 性能不佳 | 单条 regex 拖慢发布闸 | Go RE2 预编译 + 有界 worker pool + 总预算；预算耗尽只丢弃剩余 regex 并告警，不无界等待 |
 | ack 重发请求被伪造 / 重放 | 自愿模式被绕过 | 独立 `compliance_ack_records` 表 + 六元 `(tenant_id, article_id, article_version_id, check_record_id, content_hash, policy_fingerprint)` CAS UPDATE；`consumed_at IS NULL AND expires_at > NOW()` 守门；24h TTL；ack 粒度落到 check_record 级，必须 ack 全部非 block violations 才能生成 ack record（详见 §6.9） |
 | `PolicyResolver` 失败时静默放行 mandatory 租户 | 强制模式监管失守 | 进程级 last-known cache + 60s 主动刷新；冷启动等全量加载完成才开服；`Resolve` 失败且无 cache 时返回 GateBlock（conservative mandatory），不 fail-open（详见 §6.5.1） |
+| `ManualReviewResolver` 查询失败时误放行 rejected 版本 | 人工驳回失效，违规文章发布 | `article_versions.manual_review_status` 热路径冗余 + 进程内 LRU/terminal cache；查询失败只能使用 pending / approved / rejected 可信 cache；无可信 cache 返回 41004/503 fail-closed；`cfg.Compliance.Enabled=false` 是唯一覆盖口 |
 | `effectiveVersionID` 由前端传入但被伪造（指向其他文章的版本） | 跨文章 ack 绕过 | `ResolvePublishableVersion` 强制校验 `(tenant_id, article_id, version_id)` 归属；不归属返 41005 invalid_article_version |
 | `article_versions.plaintext_snapshot` 历史回填进度慢 | 长尾文章发布闸 fallback 到 diff 重建，吃光 30ms 预算 | 新发布默认走 plaintext snapshot；fallback 路径加 metric 告警；回填脚本按租户分批，跑完前提示"个别文章首次发布会慢" |
 | `CreatePublishJobRequest` 字段扩展属于契约破坏 | 旧 client 在自愿/强制 NeedsAck 场景下无法 ack 放行 | 新字段定义为可选，旧 client 仍可走 mandatory pass 路径；server 对缺 ack 的 NeedsAck 直接返 41002，前端升级后即可解锁；shared-types 同步发版本 |
 | `applyEnvOverrides` 漏改导致 env 不生效 | 容器化部署改 env 不生效，配置漂移 | 加 `config_test.go` 校验 4 个 env 变量都能被读到；启动日志打印 `cfg.Compliance` 摘要供运维确认 |
+| ops-web「总开关」误触全站停用合规 | 自动检测器全站失效 | 总开关切换走 `/master-switch` 独立 endpoint，前端二次确认 dialog；audit log 记录操作人；ops 控制台首页显著标注当前总开关状态；metric + Slack 告警；人工审阅 pending / rejected 裁决仍生效 |
+| 词库 `applicable_platforms` 与发布器平台 code 不一致 | 词库永远不命中或全平台命中 | 平台 code 来源同源于 `packages/shared-types` 平台枚举，新增平台时同步更新 ops-web 选项；后端保存时按 enum 校验，未知 code 返回 400 |
+| 调度器重检漏检 / 误检 | 定时发布期间策略变更未被拦下，或正常 job 被误拦 | `RecheckBeforeDispatch` 失败 mandatory **直接 fail**（不进 retry 队列）+ 站内通知作者；advisory 失败放行 + metric 告警；`compliance_blocked_record_id` 永远关联具体 check_record，运营可溯源；advisory 重检不重弹 ack（用户已不在线），仅留审计 |
+| 单条 check_record 覆盖多平台导致 ack 一改即失效 | 用户每改一次发布平台都得重新 ack | 接受：`policy_fingerprint` 把 `target_platforms` 集合 hash 进去是必要的安全约束；前端在 ack 弹窗后若用户调整账号选择，立即清空已 ack 状态并重新检测 |
+| pending 审阅长期无人处理 | 作者文章被永久卡住 | 一期不做自动超时；提供作者撤回 pending；ops 工作台 FIFO + 待办通知 + 超 SLA 告警；撤回后同 version 可重新提交或改稿 |
+| 人工审阅成"合规免死金牌"被滥用 | 运营手工放行规模化绕开监管底线 | 单 version 同时仅一条 active/terminal 审阅；二次确认 + 申请说明必填 + ops 决策必填理由 + 全链路 audit log；ops 端可看每租户审阅频次 / 通过率，异常租户走商务沟通 |
+| approved 后法规重大变化 | 已通过的版本仍能发布有合规风险 | approved 戳绑死 `article_version_id`，新版本不延续；如需推翻只能让作者改稿换版本（一期不做"运营 revoke 已通过审阅"，避免决策反复）；这是产品明确的人工裁决语义，ops master switch 只关闭自动检测器，不撤销 approved；config kill-switch 仅事故止血 |
+| 驳回后用户疯狂改版本试图绕过 | rejected 戳被规避 | 这是设计意图：每次改版本产生新 `article_version_id`、走完整检测；rejected 戳只针对单个 version；只要词库命中规则正确、新版本仍会被拦下 |
+| 同一 version 多人并发提交 / 撤回 / 决策 | 数据竞争 | INSERT 走 `uk_manual_review_active_per_version`，唯一冲突后回读现有状态映射 41007 / 41008；撤回 / 决策 UPDATE 走 CAS WHERE status='pending'；前端拿到 41007 / 41010 / "状态已变更" 提示后刷新即可 |
 
 ## 12. Rollout Notes
 
+**分阶段切片（避免全量开干风险）：**
+
+| 阶段 | 范围 | 验收 |
+| --- | --- | --- |
+| ① Schema + article version compliance snapshot | 落 ops/tenant 全部 DB 表 + `article_versions.plaintext_snapshot/manual_review_status` 列 + 回填脚本；无业务接入 | 迁移幂等、回填脚本跑完活跃租户、`schema_migrations` 正常 |
+| ② Deterministic gate + 强制阻断 | 接入 `PublishJobService.Create()` 调用 `GateForPublish`；只跑词典 + 正则；mandatory 任意命中直接拒绝发布；发布器只显示阻断结论，不展示命中明细；不接 ack | mandatory 模式下命中可拦下；P99 < 50ms；旧 client 不传 ack 仍可走 mandatory pass 路径 |
+| ③ Advisory ack 闭环 | 落 `compliance_ack_records` + `ConsumeAckTx`；前端发布弹窗只显示门禁提醒 + ack 按钮；advisory 模式下命中可 ack 放行 | ack 单次有效；同一 ack 第二次提交被 41003 拒绝；fingerprint 变化后旧 ack 失效 |
+| ④ Ops UI（策略 + 词库 + 总开关） | ops-web `/ops/compliance/policy` + `/ops/compliance/dictionaries` 列表 + page form；总开关、模式切换、词库 CRUD / CSV 导入 / 版本发布 / 回滚；30s 轮询生效 | 运营自助创建 / 启用 / 回滚词库；总开关切换 30s 内全实例生效；audit log 全记录 |
+| ⑤ 调度器执行前重检 | `server/cmd/scheduler` 加 `compliance.RecheckBeforeDispatch`；`publish_jobs.status` 扩展 `blocked_by_compliance`；命中后站内通知作者；admin-web 发布列表支持 blocked 原因 + 重新发布 | 创建 → 改策略 → 到点重检命中 block → job 被拦 + 作者收到通知；审阅 approved 的 version 重检直接放行；pending blocked 不自动解锁 |
+| ⑥ LLM 异步复核 | `compliance_review_jobs` + RabbitMQ `compliance.review` 队列 + scheduler consumer + 恢复 ticker；编辑器手动检测同步等 LLM | LLM 命中走"待复核"violation 通知；多实例 worker 不重复消费；RabbitMQ 抖动期 pending 任务能补发 |
+
+每个阶段都是独立可发布单元；阶段 ② 之后即可在 advisory 模式下全租户灰度运行；阶段 ⑤ 之前定时发布的 stale-policy 风险由短期人工复核兜底。
+
+**通用约束：**
+
 - **迁移顺序：** ops 表先（含极限词库种子）→ tenant 表后
 - **默认配置：** `cfg.Compliance.Enabled = true` + `enforcement_mode = advisory`，避免上线即阻断生产发布
-- **观察期：** 上线后第一周观察 metrics（拦截率 / 误报率 / P99 / LLM 调用量），稳定后由产品决定是否切 `mandatory`
+- **观察期：** 阶段 ② 上线后第一周观察 metrics（拦截率 / 误报率 / P99 / LLM 调用量），稳定后由产品决定是否切 `mandatory`
 - **种子词库回滚：** 若发现误报严重，先在 ops 控制台关闭对应词库 → 不依赖代码回滚
-- **观测埋点（必须）：** `compliance_check_total{source,level,mode}` / `compliance_duration_ms{phase}` / `compliance_skipped_total{reason}` / `compliance_engine_failures_total{kind}`
+- **观测埋点（必须）：** `compliance_check_total{source,level,mode}` / `compliance_duration_ms{phase}` / `compliance_skipped_total{reason}` / `compliance_engine_failures_total{kind}` / `compliance_recheck_blocked_total{platform}`
 
 ## 13. 最终决策清单
 
@@ -1102,11 +1481,19 @@ articles.GET("/:id/compliance/latest", complianceHandler.LatestCheck)
 | 主题 | 最终决策 |
 | --- | --- |
 | 发布请求契约 | 直接扩展现有 `/api/tenant/publish-jobs`，新增可选 `article_version_id / ack_record_id`；不新开 v2 路径 |
-| plaintext 存储 | `article_versions.plaintext_snapshot TEXT NULL` 冗余列；不建子表 |
+| article version 冗余 | `article_versions.plaintext_snapshot TEXT NULL` + `manual_review_status/manual_review_id/manual_review_updated_at` 冗余列；不建子表 |
 | 历史回填 | 一次性维护命令 `server/cmd/maintenance/backfill_article_plaintext`，按租户和版本 ID 分批；活跃租户上线前优先跑完 |
 | ack 实现 | DB 表 + `ConsumeAckTx` CAS；24h TTL；六元一致；不使用内存 LRU |
 | dom_path | 前端提交 `dom_path` / block key，后端透传；失效时前端 plain offset 兜底 |
 | 词库版本保留 | 每个词库保留最近 10 个发布版本；超出删除 DB snapshot；单 snapshot > 50MB 再评估 OSS |
+| 词库 category | **不引入 category 字段**；用途分类由运营在词库名称中自定义表达；引擎不按 category 分流，前端不做 category 筛选 |
+| 词库管理首页 | 运营自建词库的**统一列表**（表格 + 名称搜索 + 状态筛选）；不做固定 bucket 卡片；运营可自由创建任意多个词库 |
+| 词库适用平台 | `platform_scope ∈ {all, specific}` 互斥；`applicable_platforms` 与 shared-types 平台枚举同源；引擎按目标平台过滤词库 |
+| 词库编辑形态 | 独立 page form（新建 `/dictionaries/new`，编辑 `/dictionaries/:id/edit`）；不用弹窗；同页内嵌词条 CRUD / CSV 导入 / 版本发布 / 回滚 |
+| 总开关位置 | ops-web `/ops/compliance/policy` 顶部「总开关」组件；写 `ops.compliance_policies(id=1).master_enabled`；只关闭自动检测器，不覆盖人工审阅 pending / rejected 裁决。`cfg.Compliance.Enabled=false` 是部署级硬关闭，事故止血时优先于所有合规裁决 |
+| 命中后处理方式 | **不替换**。强制模式任意命中即拒绝发布；仅提示确认模式命中走 ack；发布器只显示门禁结论，不展示具体词 / 词库 / 平台分组；完整明细统一在文章编辑页合规检测查看；不污染 publish_tasks / desktop_tasks payload |
+| 多平台同发检测形态 | **单次扫描 + 单条 check_record + 单条 ack** 覆盖全部 target_platforms；fingerprint 把平台集合 hash 进去；mandatory 任意命中 → 整体 GateBlock；advisory 任意命中 → GateNeedsAck |
+| 定时发布合规闭环 | 调度器到点取出 job 后、派发前调 `compliance.RecheckBeforeDispatch`；强制模式任意命中 → `publish_jobs.status = blocked_by_compliance` + 通知作者；advisory 不重弹 ack |
 | tenant-api 访问 ops 数据 | 同库只读查询 `ops.compliance_*`；不通过 ops-api 内部 HTTP |
 | LLM 待复核队列 | 复用 RabbitMQ `compliance.review` 队列；`compliance_review_jobs` 做状态表、幂等 claim、重试与恢复兜底 |
 | CSV 导入列 | 支持中文 / 英文表头；标准列为 `pattern,match_type,level_override,hint,reference_law,enabled`；不预留 `tenant_visibility` |
diff --git a/findings.md b/findings.md
index 539e5da..b69037e 100644
--- a/findings.md
+++ b/findings.md
@@ -245,3 +245,20 @@
 - Offline packages must include `edoburu/pgbouncer:v1.24.1-p1` alongside the existing infra images.
 - Postgres passwords are passed through environment placeholders instead of hard-coded in deploy configs. The Go DSN builder now URL-escapes credentials so strong passwords containing `@`, `:`, `/`, or `?` remain valid.
 - Local smoke validation used the existing `server/docker-compose.yaml` Postgres containers on `server_default`; PgBouncer successfully returned `SELECT 1` through the pooler and the temporary test container was removed.
+
+## Compliance Detection Implementation - 2026-05-05
+- Source of truth is `docs/superpowers/specs/2026-04-28-compliance-detection-design.md`, Revision 8 dated 2026-05-05.
+- The current repo has no `server/internal/tenant/compliance` or `server/internal/ops/compliance` packages, no compliance routes, no compliance config, and no compliance migrations yet.
+- Current `PublishJobService.Create()` validates desktop account liveness and creates desktop publish jobs/tasks directly; it does not resolve `article_version_id`, does not pass target platform sets through a compliance gate, and `CreatePublishJobRequest` lacks `article_version_id` / `ack_record_id`.
+- `ArticleDetailResponse` internally reads `articles.current_version_id` but does not expose it to the frontend; shared TS `ArticleDetail` also lacks `current_version_id`.
+- Article version storage is diff-based; `repository.LoadArticleVersionContent` reconstructs history. The compliance design requires `article_versions.plaintext_snapshot` for O(1) gate reads, so new writes must populate that snapshot and old rows need fallback/backfill support.
+- Ops API currently has account/admin/KOL/audit/site-domain modules only; content safety pages and APIs need to be added without disrupting existing auth middleware.
+- Existing frontend publish flow is centralized through `apps/admin-web/src/components/PublishArticleModal.vue`, which is the right integration point for runtime status, check, ack, and manual-review states.
+- Tenant compliance is now implemented with runtime status, article/plain checks, latest records, ack creation/consumption, manual review submit/latest/cancel, tenant whitelist/blacklist terms, publish-gate integration, scheduler-time recheck, RabbitMQ review jobs, and LLM review AI-point billing.
+- Ops compliance is now implemented with dictionary/term CRUD, batch import, publish/rollback, singleton global policy, master switch, manual reviews, records, and stats under `/api/ops/compliance`.
+- Ops-web now has content-safety navigation and pages for global policy, dictionaries/editing, records, stats, manual-review list, and manual-review detail.
+- Per-tenant compliance policy customization was removed before launch: ops-web now only exposes global policy pages/APIs, and `ops.compliance_policies` is an `id=1` global singleton without per-tenant columns.
+- Admin-web now has compliance API helpers, an editor-side compliance check drawer with locate/highlight and whitelist actions, and a publish modal that handles pass / needs_ack / block / manual-review flows before creating publish jobs.
+- Desktop publish management now surfaces scheduled-publish compliance recheck blocks through publish job metadata: `publish_job_status`, `compliance_blocked_record_id`, `compliance_blocked_at`, and summarized `compliance_blocked_reason`.
+- Verification passed on 2026-05-05: targeted compliance Go tests, full `go test ./...`, admin-web typecheck/build, ops-web typecheck/build, desktop-client typecheck/build, and `git diff --check`.
+- Residual risk: build output still reports large Ant Design / Milkdown chunks, but this is an existing bundle-size warning rather than a functional failure.
diff --git a/packages/shared-types/src/index.ts b/packages/shared-types/src/index.ts
index a5c1d49..b8fe065 100644
--- a/packages/shared-types/src/index.ts
+++ b/packages/shared-types/src/index.ts
@@ -210,6 +210,10 @@ export interface DesktopTaskInfo {
   kind: 'publish' | 'monitor'
   payload: Record<string, JsonValue> | null
   status: 'queued' | 'in_progress' | 'succeeded' | 'failed' | 'unknown' | 'aborted'
+  publish_job_status?: 'queued' | 'blocked_by_compliance' | string | null
+  compliance_blocked_record_id?: number | null
+  compliance_blocked_at?: string | null
+  compliance_blocked_reason?: string | null
   dedup_key: string | null
   active_attempt_id: string | null
   lease_expires_at: string | null
@@ -324,6 +328,8 @@ export interface CreatePublishJobRequest {
   content_ref: Record<string, JsonValue>
   accounts: CreatePublishJobAccountRequest[]
   scheduled_at?: string | null
+  article_version_id?: number
+  ack_record_id?: number
 }
 
 export interface CreatePublishJobResponse {
@@ -580,6 +586,7 @@ export interface ArticleDetail {
   id: number
   source_type: string
   template_id: number | null
+  current_version_id: number | null
   template_name: string | null
   generation_mode: string | null
   auto_publish_platforms: string[]
@@ -600,6 +607,121 @@ export interface ArticleDetail {
   created_at: string
 }
 
+export type GateDecisionLiteral = 'pass' | 'block' | 'needs_ack'
+export type ManualReviewStatus = 'none' | 'pending' | 'approved' | 'rejected' | 'cancelled'
+
+export interface ComplianceRuntimeStatus {
+  enabled: boolean
+  config_enabled: boolean
+  master_enabled: boolean
+  enforcement_mode: 'mandatory' | 'advisory' | 'disabled'
+  llm_judge_enabled: boolean
+  snapshot_reload_interval: string
+  publish_gate_timeout: string
+  dictionary_version: number
+  enabled_dictionaries: string[]
+}
+
+export interface ComplianceViolation {
+  id: number
+  record_id?: number
+  platform_code?: string | null
+  source: 'dict' | 'regex' | 'llm'
+  dictionary_code?: string | null
+  dictionary_name?: string | null
+  term_pattern?: string | null
+  matched_text: string
+  start_offset: number
+  end_offset: number
+  dom_path?: string | null
+  level: 'block' | 'high' | 'medium' | 'info'
+  hint?: string | null
+  reference_law?: string | null
+}
+
+export interface ComplianceCheckResult {
+  record_id?: number
+  decision: GateDecisionLiteral
+  passed: boolean
+  highest_level?: string | null
+  violations: ComplianceViolation[]
+  hit_count: number
+  stored_hit_count: number
+  truncated: boolean
+  enforcement_mode: 'mandatory' | 'advisory' | 'disabled'
+  content_hash: string
+  policy_fingerprint: string
+  target_platforms: string[]
+  manual_review_status: ManualReviewStatus
+  manual_review_id?: number | null
+  manual_review_reason?: string | null
+  manual_review_decided_at?: string | null
+  checked_at: string
+  duration_ms: number
+}
+
+export interface ComplianceCheckArticleRequest {
+  article_version_id?: number | null
+  title?: string | null
+  plaintext?: string | null
+  target_platforms?: string[]
+  trigger_source?: 'editor_manual' | 'publish_gate'
+}
+
+export interface ComplianceCheckPlainRequest {
+  title?: string | null
+  plaintext: string
+  target_platforms?: string[]
+}
+
+export interface CreateAckRequest {
+  acknowledged_violation_ids: number[]
+}
+
+export interface ComplianceAckRecord {
+  id: number
+  check_record_id: number
+  article_id: number
+  article_version_id: number
+  content_hash: string
+  policy_fingerprint: string
+  expires_at: string
+  created_at: string
+}
+
+export interface ComplianceManualReview {
+  id: number
+  tenant_id: number
+  article_id: number
+  article_version_id: number
+  check_record_id?: number | null
+  status: ManualReviewStatus
+  requested_by: number
+  requested_at: string
+  request_note?: string | null
+  reviewed_by?: number | null
+  reviewed_at?: string | null
+  decision_reason?: string | null
+  cancelled_by?: number | null
+  cancelled_at?: string | null
+  cancel_reason?: string | null
+  violation_summary: ComplianceViolation[]
+  original_target_platforms: string[]
+  article_title?: string | null
+  article_plaintext?: string | null
+  applicant_name?: string | null
+  tenant_name?: string | null
+}
+
+export interface CreateManualReviewRequest {
+  check_record_id: number
+  note: string
+}
+
+export interface CancelManualReviewRequest {
+  reason?: string | null
+}
+
 export interface CreateArticleRequest {
   title?: string
 }
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 5c0bb7b..17f7f93 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -257,6 +257,9 @@ importers:
       '@ant-design/icons-vue':
         specifier: ^7.0.1
         version: 7.0.1(vue@3.5.31(typescript@5.9.3))
+      '@geo/shared-types':
+        specifier: workspace:*
+        version: link:../../packages/shared-types
       '@tanstack/vue-query':
         specifier: ^5.96.0
         version: 5.96.0(vue@3.5.31(typescript@5.9.3))
diff --git a/progress.md b/progress.md
index 0149d56..61b5b6a 100644
--- a/progress.md
+++ b/progress.md
@@ -723,3 +723,49 @@
   - `git diff --check`
   - `go test ./internal/shared/config ./internal/shared/repository/postgres ./internal/ops/config`
   - Temporary PgBouncer container attached to existing `server_default` network returned `SELECT 1` through PgBouncer, then was removed.
+
+## 2026-05-04T20:51:36Z - Compliance Detection Implementation
+
+- Started Phase 41 for the Revision 8 content compliance detection design.
+- Re-read the design document sections covering data model, API contracts, publish gate ordering, manual-review lifecycle, ops pages, and test requirements.
+- Confirmed the current code has no compliance module yet and that publish job creation currently bypasses content compliance entirely.
+- Added Phase 41-43 to `task_plan.md` and recorded the initial backend/frontend integration findings.
+
+## 2026-05-05T09:30:00+08:00 - Compliance backend integration
+
+- Added tenant compliance HTTP APIs for runtime status, plain/article check, latest check, record-level ack, manual-review submit/latest/cancel, and tenant whitelist/blacklist terms.
+- Wired `PublishJobService.Create()` through `GateForPublish`, including effective article version resolution, target platform aggregation, block/needs_ack errors with serialized check details, and transactional ack consumption.
+- Exposed `ArticleDetailResponse.current_version_id` and extended desktop publish job creation with article/version compliance metadata.
+- Added ops compliance service/handlers/routes for dictionaries, terms, policy, master switch, manual reviews, records, and stats.
+- Verification passed: `go test ./internal/tenant/compliance ./internal/tenant/transport ./internal/tenant/app ./internal/tenant/repository ./internal/ops/app ./internal/ops/transport ./cmd/ops-api ./cmd/worker-generate`.
+
+## 2026-05-05T10:45:00+08:00 - Compliance completion recovery
+
+- Continued after the 429 interruption and completed the remaining compliance display/API gap.
+- Added ops-web shared type aliases, content-safety navigation, and pages for policy, dictionaries, dictionary editing, manual reviews, manual-review detail, records, and stats.
+- Added admin-web compliance publish/editing integration, including editor checks, violation grouping, locate/highlight support, whitelist creation, publish gate handling, acknowledgement flow, and manual-review submission/cancel paths.
+- Added LLM review AI-point reservation/completion/refund handling in tenant compliance jobs and wired the review worker to the configured LLM provider.
+- Extended desktop publish task listing with publish-job compliance block metadata and updated desktop Publish Management to show `合规阻断`, record id, intercepted time, and a readable reason summary.
+- Added admin-web publish status mapping/i18n for `blocked_by_compliance`.
+- Verification passed:
+  - `go test ./internal/tenant/compliance ./internal/tenant/transport ./internal/tenant/app ./internal/worker/generate ./cmd/worker-generate`
+  - `go test ./...`
+  - `pnpm --filter admin-web typecheck`
+  - `pnpm --filter ops-web typecheck`
+  - `pnpm --filter @geo/desktop-client typecheck`
+  - `pnpm --filter admin-web build`
+  - `pnpm --filter ops-web build`
+  - `pnpm --filter @geo/desktop-client build`
+  - `git diff --check`
+- Notes:
+  - Admin-web and ops-web production builds still warn about large chunks from existing Ant Design / Milkdown bundles.
+
+## 2026-05-05T20:09:10+08:00 - Remove tenant compliance policy overrides
+
+- Removed the ops-web tenant override route, menu item, API helpers, and `ComplianceTenantOverridesView.vue`.
+- Removed the ops-api tenant policy override routes, handlers, service methods, audit action, and tenant override resolver branch.
+- Changed `ops.compliance_policies` to an `id=1` global singleton with no `scope` / `tenant_id` columns; seed migrations and tenant-api policy loading now read/update that singleton directly.
+- Updated the current compliance design doc, the archived v1 design doc, and planning notes so tenant policy overrides are no longer documented as a supported feature.
+- Verification passed:
+  - `pnpm --filter ops-web typecheck`
+  - `go test ./internal/ops/app ./internal/ops/transport ./internal/tenant/compliance ./cmd/ops-api`
diff --git a/server/cmd/ops-api/main.go b/server/cmd/ops-api/main.go
index e646186..d6fa47e 100644
--- a/server/cmd/ops-api/main.go
+++ b/server/cmd/ops-api/main.go
@@ -85,6 +85,7 @@ func main() {
 	adminUserSvc := app.NewAdminUserService(adminUsersRepo, auditSvc, cfg.AdminUsers.DefaultPlanCode).WithLoginGuard(tenantLoginGuard)
 	kolSubscriptionSvc := app.NewKolSubscriptionService(kolSubscriptionsRepo, auditSvc).WithCache(appCache)
 	siteDomainMappingSvc := app.NewSiteDomainMappingService(siteDomainMappingsRepo, auditSvc)
+	complianceSvc := app.NewComplianceService(pool, auditSvc, logger)
 
 	if err := app.SeedDefaultAdmin(ctx, accountsRepo, app.DefaultAdminSeed{
 		Username:    cfg.DefaultAdmin.Username,
@@ -129,6 +130,7 @@ func main() {
 		KolSubs:      kolSubscriptionSvc,
 		Audits:       auditSvc,
 		SiteDomains:  siteDomainMappingSvc,
+		Compliance:   complianceSvc,
 	})
 
 	addr := fmt.Sprintf(":%d", cfg.Server.Port)
diff --git a/server/cmd/worker-generate/main.go b/server/cmd/worker-generate/main.go
index 95b8162..7e7ea2a 100644
--- a/server/cmd/worker-generate/main.go
+++ b/server/cmd/worker-generate/main.go
@@ -9,6 +9,7 @@ import (
 
 	"github.com/geo-platform/tenant-api/internal/bootstrap"
 	tenantapp "github.com/geo-platform/tenant-api/internal/tenant/app"
+	tenantcompliance "github.com/geo-platform/tenant-api/internal/tenant/compliance"
 	"github.com/geo-platform/tenant-api/internal/tenant/repository"
 	generateworker "github.com/geo-platform/tenant-api/internal/worker/generate"
 )
@@ -66,11 +67,12 @@ func main() {
 		app.Config().LLM.MaxOutputTokens,
 	).WithCache(app.Cache).WithLogger(app.Logger).WithConfigProvider(generationProvider)
 
-	publishJobSvc := tenantapp.NewPublishJobService(
+	publishJobSvc := tenantapp.NewPublishJobServiceWithConfig(
 		app.DB,
 		app.RabbitMQ,
 		app.Redis,
 		app.Logger,
+		app.ConfigStore,
 	).WithCache(app.Cache)
 	promptRuleSvc.WithPublishJobService(publishJobSvc)
 
@@ -117,6 +119,13 @@ func main() {
 		app.Config().Generation.ArticleTimeout,
 	).WithConfigProvider(app.ConfigStore).Start(ctx)
 
+	generateworker.NewComplianceReviewWorker(
+		app.RabbitMQ,
+		tenantcompliance.NewService(app.DB, app.ConfigStore, app.Logger).WithRabbitMQ(app.RabbitMQ).WithLLM(app.LLM),
+		app.Logger,
+		app.Config().Compliance,
+	).WithConfigProvider(app.ConfigStore).Start(ctx)
+
 	app.Logger.Info("worker-generate started")
 
 	quit := make(chan os.Signal, 1)
diff --git a/server/configs/config.local.yaml.example b/server/configs/config.local.yaml.example
index df86b80..bcb3043 100644
--- a/server/configs/config.local.yaml.example
+++ b/server/configs/config.local.yaml.example
@@ -52,6 +52,12 @@ rabbitmq:
   template_assist_dlx: template.assist.dlx
   template_assist_dlq: template.assist.run.dlq
   template_assist_dlq_routing_key: template.assist.run.dlq
+  compliance_review_exchange: compliance.review
+  compliance_review_routing_key: compliance.review.run
+  compliance_review_queue: compliance.review.run
+  compliance_review_dlx: compliance.review.dlx
+  compliance_review_dlq: compliance.review.run.dlq
+  compliance_review_dlq_routing_key: compliance.review.run.dlq
   consumer_prefetch: 10
   publish_channel_pool_size: 32
   # Prefer environment override when needed:
@@ -159,6 +165,17 @@ llm:
   # Prefer environment override for secrets:
   # export LLM_API_KEY=your-api-key
 
+compliance:
+  enabled: true
+  llm_judge_enabled: false
+  snapshot_reload_interval: 30s
+  publish_gate_timeout: 800ms
+  review_worker_concurrency: 1
+  review_worker_timeout: 45s
+  review_max_attempts: 3
+  # Emergency deployment kill switch:
+  # export COMPLIANCE_ENABLED=false
+
 retrieval:
   provider: siliconflow
   base_url: https://api.siliconflow.cn/v1
diff --git a/server/configs/config.yaml b/server/configs/config.yaml
index 3f5ee7b..fe92a04 100644
--- a/server/configs/config.yaml
+++ b/server/configs/config.yaml
@@ -65,6 +65,12 @@ rabbitmq:
   kol_assist_dlx: kol.assist.dlx
   kol_assist_dlq: kol.assist.run.dlq
   kol_assist_dlq_routing_key: kol.assist.run.dlq
+  compliance_review_exchange: compliance.review
+  compliance_review_routing_key: compliance.review.run
+  compliance_review_queue: compliance.review.run
+  compliance_review_dlx: compliance.review.dlx
+  compliance_review_dlq: compliance.review.run.dlq
+  compliance_review_dlq_routing_key: compliance.review.run.dlq
   consumer_prefetch: 10
   publish_channel_pool_size: 32
 
@@ -167,6 +173,15 @@ llm:
   reasoning_effort: minimal
   web_search_limit: 3
 
+compliance:
+  enabled: true
+  llm_judge_enabled: false
+  snapshot_reload_interval: 30s
+  publish_gate_timeout: 800ms
+  review_worker_concurrency: 1
+  review_worker_timeout: 45s
+  review_max_attempts: 3
+
 retrieval:
   provider: siliconflow
   base_url: https://api.siliconflow.cn/v1
diff --git a/server/internal/ops/app/compliance.go b/server/internal/ops/app/compliance.go
new file mode 100644
index 0000000..aa4178f
--- /dev/null
+++ b/server/internal/ops/app/compliance.go
@@ -0,0 +1,1460 @@
+package app
+
+import (
+	"context"
+	"encoding/json"
+	"errors"
+	"fmt"
+	"strings"
+	"time"
+	"unicode/utf8"
+
+	"github.com/jackc/pgx/v5"
+	"github.com/jackc/pgx/v5/pgconn"
+	"github.com/jackc/pgx/v5/pgtype"
+	"github.com/jackc/pgx/v5/pgxpool"
+	"go.uber.org/zap"
+
+	sharedcompliance "github.com/geo-platform/tenant-api/internal/shared/compliance"
+	"github.com/geo-platform/tenant-api/internal/shared/response"
+)
+
+type ComplianceService struct {
+	pool   *pgxpool.Pool
+	audits *AuditService
+	logger *zap.Logger
+}
+
+func NewComplianceService(pool *pgxpool.Pool, audits *AuditService, logger *zap.Logger) *ComplianceService {
+	return &ComplianceService{pool: pool, audits: audits, logger: logger}
+}
+
+type ComplianceDictionary struct {
+	ID                  int64     `json:"id"`
+	Code                string    `json:"code"`
+	Name                string    `json:"name"`
+	PlatformScope       string    `json:"platform_scope"`
+	ApplicablePlatforms []string  `json:"applicable_platforms"`
+	DefaultLevel        string    `json:"default_level"`
+	Enabled             bool      `json:"enabled"`
+	Version             int       `json:"version"`
+	Description         *string   `json:"description,omitempty"`
+	CreatedAt           time.Time `json:"created_at"`
+	UpdatedAt           time.Time `json:"updated_at"`
+	TermCount           int       `json:"term_count"`
+}
+
+type UpsertComplianceDictionaryRequest struct {
+	Code                string   `json:"code"`
+	Name                string   `json:"name"`
+	PlatformScope       string   `json:"platform_scope"`
+	ApplicablePlatforms []string `json:"applicable_platforms"`
+	DefaultLevel        string   `json:"default_level"`
+	Enabled             *bool    `json:"enabled"`
+	Description         *string  `json:"description"`
+}
+
+type ComplianceDictionaryTerm struct {
+	ID            int64     `json:"id"`
+	DictionaryID  int64     `json:"dictionary_id"`
+	MatchType     string    `json:"match_type"`
+	Pattern       string    `json:"pattern"`
+	LevelOverride *string   `json:"level_override,omitempty"`
+	Hint          *string   `json:"hint,omitempty"`
+	ReferenceLaw  *string   `json:"reference_law,omitempty"`
+	Enabled       bool      `json:"enabled"`
+	CreatedAt     time.Time `json:"created_at"`
+	UpdatedAt     time.Time `json:"updated_at"`
+}
+
+type CreateComplianceDictionaryTermRequest struct {
+	MatchType     string  `json:"match_type"`
+	Pattern       string  `json:"pattern"`
+	LevelOverride *string `json:"level_override"`
+	Hint          *string `json:"hint"`
+	ReferenceLaw  *string `json:"reference_law"`
+	Enabled       *bool   `json:"enabled"`
+}
+
+type BatchImportComplianceTermsRequest struct {
+	Terms []CreateComplianceDictionaryTermRequest `json:"terms"`
+}
+
+type CompliancePolicy struct {
+	ID                  int64     `json:"id"`
+	MasterEnabled       *bool     `json:"master_enabled,omitempty"`
+	EnforcementMode     string    `json:"enforcement_mode"`
+	EnabledDictionaries []int64   `json:"enabled_dictionaries"`
+	LLMJudgeEnabled     bool      `json:"llm_judge_enabled"`
+	LLMCategories       []string  `json:"llm_categories"`
+	Revision            int64     `json:"revision"`
+	UpdatedAt           time.Time `json:"updated_at"`
+}
+
+type UpdateCompliancePolicyRequest struct {
+	MasterEnabled       *bool    `json:"master_enabled"`
+	EnforcementMode     string   `json:"enforcement_mode"`
+	EnabledDictionaries []int64  `json:"enabled_dictionaries"`
+	LLMJudgeEnabled     *bool    `json:"llm_judge_enabled"`
+	LLMCategories       []string `json:"llm_categories"`
+}
+
+type ComplianceManualReviewListRequest struct {
+	Status   string
+	TenantID *int64
+	Page     int
+	PageSize int
+}
+
+type ComplianceManualReviewListResponse struct {
+	Items    []sharedcompliance.ManualReview `json:"items"`
+	Total    int64                           `json:"total"`
+	Page     int                             `json:"page"`
+	PageSize int                             `json:"page_size"`
+}
+
+type ComplianceRecordListRequest struct {
+	TenantID  *int64
+	ArticleID *int64
+	Decision  string
+	Page      int
+	PageSize  int
+}
+
+type ComplianceRecordListResponse struct {
+	Items    []sharedcompliance.CheckResult `json:"items"`
+	Total    int64                          `json:"total"`
+	Page     int                            `json:"page"`
+	PageSize int                            `json:"page_size"`
+}
+
+type ComplianceStats struct {
+	CheckCount          int64            `json:"check_count"`
+	BlockedCount        int64            `json:"blocked_count"`
+	NeedsAckCount       int64            `json:"needs_ack_count"`
+	PassedCount         int64            `json:"passed_count"`
+	AckCount            int64            `json:"ack_count"`
+	ManualPendingCount  int64            `json:"manual_pending_count"`
+	ManualApprovedCount int64            `json:"manual_approved_count"`
+	ManualRejectedCount int64            `json:"manual_rejected_count"`
+	ByLevel             map[string]int64 `json:"by_level"`
+	BySource            map[string]int64 `json:"by_source"`
+}
+
+func (s *ComplianceService) ListDictionaries(ctx context.Context) ([]ComplianceDictionary, error) {
+	rows, err := s.pool.Query(ctx, `
+		SELECT
+			d.id,
+			d.code,
+			d.name,
+			d.platform_scope,
+			COALESCE(d.applicable_platforms, '{}'),
+			d.default_level,
+			d.enabled,
+			d.version,
+			d.description,
+			d.created_at,
+			d.updated_at,
+			COUNT(t.id)::int AS term_count
+		FROM ops.compliance_dictionaries d
+		LEFT JOIN ops.compliance_dictionary_terms t ON t.dictionary_id = d.id
+		GROUP BY d.id
+		ORDER BY d.id DESC
+	`)
+	if err != nil {
+		return nil, response.ErrInternal(52001, "ops_compliance_dictionary_query_failed", "failed to list compliance dictionaries")
+	}
+	defer rows.Close()
+	out := make([]ComplianceDictionary, 0)
+	for rows.Next() {
+		item, scanErr := scanComplianceDictionary(rows)
+		if scanErr != nil {
+			return nil, response.ErrInternal(52001, "ops_compliance_dictionary_query_failed", "failed to scan compliance dictionary")
+		}
+		out = append(out, item)
+	}
+	return out, rows.Err()
+}
+
+func (s *ComplianceService) CreateDictionary(ctx context.Context, req UpsertComplianceDictionaryRequest) (*ComplianceDictionary, error) {
+	normalized, err := normalizeDictionaryInput(req, false)
+	if err != nil {
+		return nil, err
+	}
+	actor := ActorFromContext(ctx)
+	var actorID *int64
+	if actor != nil && actor.OperatorID > 0 {
+		actorID = &actor.OperatorID
+	}
+	var row ComplianceDictionary
+	var description pgtype.Text
+	err = s.pool.QueryRow(ctx, `
+		INSERT INTO ops.compliance_dictionaries (
+			code,
+			name,
+			platform_scope,
+			applicable_platforms,
+			default_level,
+			enabled,
+			description,
+			created_by,
+			updated_by
+		)
+		VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$8)
+		RETURNING id, code, name, platform_scope, COALESCE(applicable_platforms, '{}'), default_level, enabled, version, description, created_at, updated_at, 0
+	`, normalized.Code, normalized.Name, normalized.PlatformScope, normalized.ApplicablePlatforms, normalized.DefaultLevel, normalized.Enabled, normalized.Description, actorID).Scan(
+		&row.ID,
+		&row.Code,
+		&row.Name,
+		&row.PlatformScope,
+		&row.ApplicablePlatforms,
+		&row.DefaultLevel,
+		&row.Enabled,
+		&row.Version,
+		&description,
+		&row.CreatedAt,
+		&row.UpdatedAt,
+		&row.TermCount,
+	)
+	if err != nil {
+		if isOpsUniqueViolation(err) {
+			return nil, response.ErrConflict(40971, "compliance_dictionary_code_exists", "dictionary code already exists")
+		}
+		return nil, response.ErrInternal(52002, "ops_compliance_dictionary_create_failed", "failed to create compliance dictionary")
+	}
+	if description.Valid {
+		row.Description = &description.String
+	}
+	s.audit(ctx, "compliance.dictionary.create", "compliance_dictionary", row.ID, map[string]any{"code": row.Code})
+	return &row, nil
+}
+
+func (s *ComplianceService) UpdateDictionary(ctx context.Context, id int64, req UpsertComplianceDictionaryRequest) (*ComplianceDictionary, error) {
+	normalized, err := normalizeDictionaryInput(req, true)
+	if err != nil {
+		return nil, err
+	}
+	actor := ActorFromContext(ctx)
+	var actorID *int64
+	if actor != nil && actor.OperatorID > 0 {
+		actorID = &actor.OperatorID
+	}
+	var row ComplianceDictionary
+	var description pgtype.Text
+	err = s.pool.QueryRow(ctx, `
+		UPDATE ops.compliance_dictionaries
+		SET name = $2,
+		    platform_scope = $3,
+		    applicable_platforms = $4,
+		    default_level = $5,
+		    enabled = $6,
+		    description = $7,
+		    updated_by = $8,
+		    version = version + 1,
+		    updated_at = NOW()
+		WHERE id = $1
+		RETURNING id, code, name, platform_scope, COALESCE(applicable_platforms, '{}'), default_level, enabled, version, description, created_at, updated_at,
+			(SELECT COUNT(*)::int FROM ops.compliance_dictionary_terms t WHERE t.dictionary_id = ops.compliance_dictionaries.id)
+	`, id, normalized.Name, normalized.PlatformScope, normalized.ApplicablePlatforms, normalized.DefaultLevel, normalized.Enabled, normalized.Description, actorID).Scan(
+		&row.ID,
+		&row.Code,
+		&row.Name,
+		&row.PlatformScope,
+		&row.ApplicablePlatforms,
+		&row.DefaultLevel,
+		&row.Enabled,
+		&row.Version,
+		&description,
+		&row.CreatedAt,
+		&row.UpdatedAt,
+		&row.TermCount,
+	)
+	if err != nil {
+		if errors.Is(err, pgx.ErrNoRows) {
+			return nil, response.ErrNotFound(40471, "compliance_dictionary_not_found", "compliance dictionary not found")
+		}
+		return nil, response.ErrInternal(52003, "ops_compliance_dictionary_update_failed", "failed to update compliance dictionary")
+	}
+	if description.Valid {
+		row.Description = &description.String
+	}
+	s.audit(ctx, "compliance.dictionary.update", "compliance_dictionary", row.ID, map[string]any{"code": row.Code})
+	return &row, nil
+}
+
+func (s *ComplianceService) DeleteDictionary(ctx context.Context, id int64) error {
+	tag, err := s.pool.Exec(ctx, `DELETE FROM ops.compliance_dictionaries WHERE id = $1`, id)
+	if err != nil {
+		return response.ErrInternal(52004, "ops_compliance_dictionary_delete_failed", "failed to delete compliance dictionary")
+	}
+	if tag.RowsAffected() == 0 {
+		return response.ErrNotFound(40471, "compliance_dictionary_not_found", "compliance dictionary not found")
+	}
+	s.audit(ctx, "compliance.dictionary.delete", "compliance_dictionary", id, nil)
+	return nil
+}
+
+func (s *ComplianceService) ListTerms(ctx context.Context, dictionaryID int64) ([]ComplianceDictionaryTerm, error) {
+	rows, err := s.pool.Query(ctx, `
+		SELECT id, dictionary_id, match_type, pattern, level_override, hint, reference_law, enabled, created_at, updated_at
+		FROM ops.compliance_dictionary_terms
+		WHERE dictionary_id = $1
+		ORDER BY id DESC
+	`, dictionaryID)
+	if err != nil {
+		return nil, response.ErrInternal(52005, "ops_compliance_terms_query_failed", "failed to list compliance terms")
+	}
+	defer rows.Close()
+	out := make([]ComplianceDictionaryTerm, 0)
+	for rows.Next() {
+		item, scanErr := scanComplianceDictionaryTerm(rows)
+		if scanErr != nil {
+			return nil, response.ErrInternal(52005, "ops_compliance_terms_query_failed", "failed to scan compliance term")
+		}
+		out = append(out, item)
+	}
+	return out, rows.Err()
+}
+
+func (s *ComplianceService) CreateTerm(ctx context.Context, dictionaryID int64, req CreateComplianceDictionaryTermRequest) (*ComplianceDictionaryTerm, error) {
+	normalized, err := normalizeTermInput(req)
+	if err != nil {
+		return nil, err
+	}
+	var item ComplianceDictionaryTerm
+	err = s.pool.QueryRow(ctx, `
+		INSERT INTO ops.compliance_dictionary_terms (
+			dictionary_id,
+			match_type,
+			pattern,
+			level_override,
+			hint,
+			reference_law,
+			enabled
+		)
+		VALUES ($1,$2,$3,$4,$5,$6,$7)
+		RETURNING id, dictionary_id, match_type, pattern, level_override, hint, reference_law, enabled, created_at, updated_at
+	`, dictionaryID, normalized.MatchType, normalized.Pattern, normalized.LevelOverride, normalized.Hint, normalized.ReferenceLaw, normalized.Enabled).Scan(
+		&item.ID,
+		&item.DictionaryID,
+		&item.MatchType,
+		&item.Pattern,
+		new(pgtype.Text),
+		new(pgtype.Text),
+		new(pgtype.Text),
+		&item.Enabled,
+		&item.CreatedAt,
+		&item.UpdatedAt,
+	)
+	if err != nil {
+		if isOpsForeignKeyViolation(err) {
+			return nil, response.ErrNotFound(40471, "compliance_dictionary_not_found", "compliance dictionary not found")
+		}
+		return nil, response.ErrInternal(52006, "ops_compliance_term_create_failed", "failed to create compliance term")
+	}
+	item, err = s.getTerm(ctx, item.ID)
+	if err != nil {
+		return nil, err
+	}
+	_ = s.bumpDictionaryVersion(ctx, dictionaryID)
+	s.audit(ctx, "compliance.term.create", "compliance_dictionary", dictionaryID, map[string]any{"term_id": item.ID})
+	return &item, nil
+}
+
+func (s *ComplianceService) BatchImportTerms(ctx context.Context, dictionaryID int64, req BatchImportComplianceTermsRequest) ([]ComplianceDictionaryTerm, error) {
+	if len(req.Terms) == 0 {
+		return nil, response.ErrBadRequest(40001, "invalid_params", "terms is required")
+	}
+	if len(req.Terms) > 1000 {
+		return nil, response.ErrBadRequest(40001, "invalid_params", "terms cannot exceed 1000 rows")
+	}
+	out := make([]ComplianceDictionaryTerm, 0, len(req.Terms))
+	for _, item := range req.Terms {
+		created, err := s.CreateTerm(ctx, dictionaryID, item)
+		if err != nil {
+			return nil, err
+		}
+		out = append(out, *created)
+	}
+	return out, nil
+}
+
+func (s *ComplianceService) DeleteTerm(ctx context.Context, dictionaryID, termID int64) error {
+	tag, err := s.pool.Exec(ctx, `
+		DELETE FROM ops.compliance_dictionary_terms
+		WHERE id = $1 AND dictionary_id = $2
+	`, termID, dictionaryID)
+	if err != nil {
+		return response.ErrInternal(52007, "ops_compliance_term_delete_failed", "failed to delete compliance term")
+	}
+	if tag.RowsAffected() == 0 {
+		return response.ErrNotFound(40472, "compliance_term_not_found", "compliance term not found")
+	}
+	_ = s.bumpDictionaryVersion(ctx, dictionaryID)
+	s.audit(ctx, "compliance.term.delete", "compliance_dictionary", dictionaryID, map[string]any{"term_id": termID})
+	return nil
+}
+
+func (s *ComplianceService) PublishDictionary(ctx context.Context, dictionaryID int64) (*ComplianceDictionary, error) {
+	tx, err := s.pool.Begin(ctx)
+	if err != nil {
+		return nil, response.ErrInternal(52008, "ops_compliance_dictionary_publish_failed", "failed to begin dictionary publish")
+	}
+	defer tx.Rollback(ctx)
+	dict, err := s.loadDictionaryForUpdate(ctx, tx, dictionaryID)
+	if err != nil {
+		return nil, err
+	}
+	dict.Version++
+	if _, err := tx.Exec(ctx, `
+		UPDATE ops.compliance_dictionaries
+		SET version = $2, updated_at = NOW()
+		WHERE id = $1
+	`, dictionaryID, dict.Version); err != nil {
+		return nil, response.ErrInternal(52008, "ops_compliance_dictionary_publish_failed", "failed to bump dictionary version")
+	}
+	if err := s.insertDictionaryVersionSnapshot(ctx, tx, dictionaryID, dict.Version); err != nil {
+		return nil, err
+	}
+	if err := tx.Commit(ctx); err != nil {
+		return nil, response.ErrInternal(52008, "ops_compliance_dictionary_publish_failed", "failed to commit dictionary publish")
+	}
+	s.audit(ctx, "compliance.dictionary.publish", "compliance_dictionary", dictionaryID, map[string]any{"version": dict.Version})
+	return s.GetDictionary(ctx, dictionaryID)
+}
+
+func (s *ComplianceService) RollbackDictionary(ctx context.Context, dictionaryID int64, version int) (*ComplianceDictionary, error) {
+	if version <= 0 {
+		return nil, response.ErrBadRequest(40001, "invalid_params", "version must be positive")
+	}
+	var snapshot []byte
+	err := s.pool.QueryRow(ctx, `
+		SELECT snapshot
+		FROM ops.compliance_dictionary_versions
+		WHERE dictionary_id = $1 AND version = $2
+	`, dictionaryID, version).Scan(&snapshot)
+	if err != nil {
+		if errors.Is(err, pgx.ErrNoRows) {
+			return nil, response.ErrNotFound(40473, "compliance_dictionary_version_not_found", "dictionary version not found")
+		}
+		return nil, response.ErrInternal(52009, "ops_compliance_dictionary_rollback_failed", "failed to load dictionary snapshot")
+	}
+	var parsed struct {
+		Name                string   `json:"name"`
+		PlatformScope       string   `json:"platform_scope"`
+		ApplicablePlatforms []string `json:"applicable_platforms"`
+		DefaultLevel        string   `json:"default_level"`
+		Terms               []struct {
+			MatchType     string  `json:"match_type"`
+			Pattern       string  `json:"pattern"`
+			LevelOverride *string `json:"level_override"`
+			Hint          *string `json:"hint"`
+			ReferenceLaw  *string `json:"reference_law"`
+			Enabled       bool    `json:"enabled"`
+		} `json:"terms"`
+	}
+	_ = json.Unmarshal(snapshot, &parsed)
+	tx, err := s.pool.Begin(ctx)
+	if err != nil {
+		return nil, response.ErrInternal(52009, "ops_compliance_dictionary_rollback_failed", "failed to begin dictionary rollback")
+	}
+	defer tx.Rollback(ctx)
+	tag, err := tx.Exec(ctx, `
+		UPDATE ops.compliance_dictionaries
+		SET name = COALESCE(NULLIF($2, ''), name),
+		    platform_scope = COALESCE(NULLIF($3, ''), platform_scope),
+		    applicable_platforms = $4,
+		    default_level = COALESCE(NULLIF($5, ''), default_level),
+		    version = version + 1,
+		    updated_at = NOW()
+		WHERE id = $1
+	`, dictionaryID, parsed.Name, parsed.PlatformScope, normalizedPlatformArray(parsed.ApplicablePlatforms, parsed.PlatformScope), parsed.DefaultLevel)
+	if err != nil {
+		return nil, response.ErrInternal(52009, "ops_compliance_dictionary_rollback_failed", "failed to rollback dictionary")
+	}
+	if tag.RowsAffected() == 0 {
+		return nil, response.ErrNotFound(40471, "compliance_dictionary_not_found", "compliance dictionary not found")
+	}
+	if _, err := tx.Exec(ctx, `DELETE FROM ops.compliance_dictionary_terms WHERE dictionary_id = $1`, dictionaryID); err != nil {
+		return nil, response.ErrInternal(52009, "ops_compliance_dictionary_rollback_failed", "failed to clear dictionary terms")
+	}
+	for _, term := range parsed.Terms {
+		pattern := strings.TrimSpace(term.Pattern)
+		if pattern == "" {
+			continue
+		}
+		matchType := normalizeTermMatchType(term.MatchType)
+		if matchType == "" {
+			matchType = "exact"
+		}
+		if _, err := tx.Exec(ctx, `
+			INSERT INTO ops.compliance_dictionary_terms (
+				dictionary_id,
+				match_type,
+				pattern,
+				level_override,
+				hint,
+				reference_law,
+				enabled
+			)
+			VALUES ($1,$2,$3,$4,$5,$6,$7)
+		`, dictionaryID, matchType, pattern, nullableStringPointer(term.LevelOverride), nullableStringPointer(term.Hint), nullableStringPointer(term.ReferenceLaw), term.Enabled); err != nil {
+			return nil, response.ErrInternal(52009, "ops_compliance_dictionary_rollback_failed", "failed to restore dictionary terms")
+		}
+	}
+	if err := tx.Commit(ctx); err != nil {
+		return nil, response.ErrInternal(52009, "ops_compliance_dictionary_rollback_failed", "failed to commit dictionary rollback")
+	}
+	s.audit(ctx, "compliance.dictionary.rollback", "compliance_dictionary", dictionaryID, map[string]any{"version": version})
+	return s.GetDictionary(ctx, dictionaryID)
+}
+
+func (s *ComplianceService) GetDictionary(ctx context.Context, id int64) (*ComplianceDictionary, error) {
+	var item ComplianceDictionary
+	var description pgtype.Text
+	err := s.pool.QueryRow(ctx, `
+		SELECT
+			d.id,
+			d.code,
+			d.name,
+			d.platform_scope,
+			COALESCE(d.applicable_platforms, '{}'),
+			d.default_level,
+			d.enabled,
+			d.version,
+			d.description,
+			d.created_at,
+			d.updated_at,
+			(SELECT COUNT(*)::int FROM ops.compliance_dictionary_terms t WHERE t.dictionary_id = d.id)
+		FROM ops.compliance_dictionaries d
+		WHERE d.id = $1
+	`, id).Scan(
+		&item.ID,
+		&item.Code,
+		&item.Name,
+		&item.PlatformScope,
+		&item.ApplicablePlatforms,
+		&item.DefaultLevel,
+		&item.Enabled,
+		&item.Version,
+		&description,
+		&item.CreatedAt,
+		&item.UpdatedAt,
+		&item.TermCount,
+	)
+	if err != nil {
+		if errors.Is(err, pgx.ErrNoRows) {
+			return nil, response.ErrNotFound(40471, "compliance_dictionary_not_found", "compliance dictionary not found")
+		}
+		return nil, response.ErrInternal(52001, "ops_compliance_dictionary_query_failed", "failed to load compliance dictionary")
+	}
+	if description.Valid {
+		item.Description = &description.String
+	}
+	return &item, nil
+}
+
+func (s *ComplianceService) GetGlobalPolicy(ctx context.Context) (*CompliancePolicy, error) {
+	policy, err := s.getPolicy(ctx)
+	if err != nil {
+		return nil, err
+	}
+	return policy, nil
+}
+
+func (s *ComplianceService) UpdateGlobalPolicy(ctx context.Context, req UpdateCompliancePolicyRequest) (*CompliancePolicy, error) {
+	policy, err := s.updatePolicy(ctx, req)
+	if err != nil {
+		return nil, err
+	}
+	s.audit(ctx, "compliance.policy.global.update", "compliance_policy", policy.ID, nil)
+	return policy, nil
+}
+
+func (s *ComplianceService) SetGlobalMasterSwitch(ctx context.Context, enabled bool) (*CompliancePolicy, error) {
+	req := UpdateCompliancePolicyRequest{MasterEnabled: &enabled}
+	policy, err := s.updatePolicy(ctx, req)
+	if err != nil {
+		return nil, err
+	}
+	s.audit(ctx, "compliance.policy.global.master_switch", "compliance_policy", policy.ID, map[string]any{"enabled": enabled})
+	return policy, nil
+}
+
+func (s *ComplianceService) ListManualReviews(ctx context.Context, req ComplianceManualReviewListRequest) (*ComplianceManualReviewListResponse, error) {
+	req.Page, req.PageSize = normalizePage(req.Page, req.PageSize)
+	where, args := manualReviewWhere(req.Status, req.TenantID)
+	var total int64
+	if err := s.pool.QueryRow(ctx, "SELECT COUNT(*) FROM compliance_manual_reviews mr WHERE "+where, args...).Scan(&total); err != nil {
+		return nil, response.ErrInternal(52020, "ops_compliance_manual_reviews_query_failed", "failed to count manual reviews")
+	}
+	args = append(args, req.PageSize, (req.Page-1)*req.PageSize)
+	limitArg := len(args) - 1
+	offsetArg := len(args)
+	rows, err := s.pool.Query(ctx, fmt.Sprintf(`
+		SELECT
+			mr.id,
+			mr.tenant_id,
+			mr.article_id,
+			mr.article_version_id,
+			mr.original_check_record_id,
+			mr.requested_by,
+			mr.requested_at,
+			mr.request_note,
+			mr.status,
+			mr.cancelled_by,
+			mr.cancelled_at,
+			mr.cancel_reason,
+			mr.reviewed_by,
+			mr.reviewed_at,
+			mr.decision_reason,
+			mr.original_violation_summary,
+			mr.original_target_platforms,
+			av.title,
+			u.name,
+			t.name
+		FROM compliance_manual_reviews mr
+		LEFT JOIN article_versions av ON av.id = mr.article_version_id
+		LEFT JOIN users u ON u.id = mr.requested_by
+		LEFT JOIN tenants t ON t.id = mr.tenant_id
+		WHERE %s
+		ORDER BY mr.requested_at DESC, mr.id DESC
+		LIMIT $%d OFFSET $%d
+	`, where, limitArg, offsetArg), args...)
+	if err != nil {
+		return nil, response.ErrInternal(52020, "ops_compliance_manual_reviews_query_failed", "failed to list manual reviews")
+	}
+	defer rows.Close()
+	items := make([]sharedcompliance.ManualReview, 0)
+	for rows.Next() {
+		item, scanErr := scanManualReviewForOps(rows, false)
+		if scanErr != nil {
+			return nil, response.ErrInternal(52020, "ops_compliance_manual_reviews_query_failed", "failed to scan manual review")
+		}
+		items = append(items, item)
+	}
+	return &ComplianceManualReviewListResponse{Items: items, Total: total, Page: req.Page, PageSize: req.PageSize}, rows.Err()
+}
+
+func (s *ComplianceService) GetManualReview(ctx context.Context, id int64) (*sharedcompliance.ManualReview, error) {
+	review, err := s.loadManualReview(ctx, id, true)
+	if err != nil {
+		return nil, err
+	}
+	return review, nil
+}
+
+func (s *ComplianceService) ApproveManualReview(ctx context.Context, id int64, reason string) (*sharedcompliance.ManualReview, error) {
+	return s.decideManualReview(ctx, id, "approved", reason)
+}
+
+func (s *ComplianceService) RejectManualReview(ctx context.Context, id int64, reason string) (*sharedcompliance.ManualReview, error) {
+	return s.decideManualReview(ctx, id, "rejected", reason)
+}
+
+func (s *ComplianceService) ListRecords(ctx context.Context, req ComplianceRecordListRequest) (*ComplianceRecordListResponse, error) {
+	req.Page, req.PageSize = normalizePage(req.Page, req.PageSize)
+	where, args := complianceRecordWhere(req)
+	var total int64
+	if err := s.pool.QueryRow(ctx, "SELECT COUNT(*) FROM compliance_check_records WHERE "+where, args...).Scan(&total); err != nil {
+		return nil, response.ErrInternal(52030, "ops_compliance_records_query_failed", "failed to count compliance records")
+	}
+	args = append(args, req.PageSize, (req.Page-1)*req.PageSize)
+	limitArg := len(args) - 1
+	offsetArg := len(args)
+	rows, err := s.pool.Query(ctx, fmt.Sprintf(`
+		SELECT
+			id,
+			tenant_id,
+			article_id,
+			article_version_id,
+			target_platforms,
+			content_hash,
+			policy_fingerprint,
+			enforcement_mode,
+			highest_level,
+			passed,
+			hit_count,
+			stored_hit_count,
+			truncated,
+			manual_review_status,
+			manual_review_id,
+			checked_at,
+			duration_ms
+		FROM compliance_check_records
+		WHERE %s
+		ORDER BY checked_at DESC, id DESC
+		LIMIT $%d OFFSET $%d
+	`, where, limitArg, offsetArg), args...)
+	if err != nil {
+		return nil, response.ErrInternal(52030, "ops_compliance_records_query_failed", "failed to list compliance records")
+	}
+	defer rows.Close()
+	items := make([]sharedcompliance.CheckResult, 0)
+	for rows.Next() {
+		record, scanErr := scanCheckRecordForOps(rows)
+		if scanErr != nil {
+			return nil, response.ErrInternal(52030, "ops_compliance_records_query_failed", "failed to scan compliance record")
+		}
+		violations, err := s.loadRecordViolations(ctx, record.ID, record.TenantID)
+		if err != nil {
+			return nil, err
+		}
+		items = append(items, *checkResultFromOpsRecord(record, violations))
+	}
+	return &ComplianceRecordListResponse{Items: items, Total: total, Page: req.Page, PageSize: req.PageSize}, rows.Err()
+}
+
+func (s *ComplianceService) Stats(ctx context.Context) (*ComplianceStats, error) {
+	stats := &ComplianceStats{
+		ByLevel:  map[string]int64{},
+		BySource: map[string]int64{},
+	}
+	if err := s.pool.QueryRow(ctx, `
+		SELECT
+			COUNT(*)::bigint,
+			COUNT(*) FILTER (WHERE enforcement_mode = 'mandatory' AND highest_level = 'block')::bigint,
+			COUNT(*) FILTER (WHERE hit_count > 0 AND NOT (enforcement_mode = 'mandatory' AND highest_level = 'block'))::bigint,
+			COUNT(*) FILTER (WHERE hit_count = 0)::bigint
+		FROM compliance_check_records
+	`).Scan(&stats.CheckCount, &stats.BlockedCount, &stats.NeedsAckCount, &stats.PassedCount); err != nil {
+		return nil, response.ErrInternal(52040, "ops_compliance_stats_query_failed", "failed to load compliance stats")
+	}
+	_ = s.pool.QueryRow(ctx, `SELECT COUNT(*)::bigint FROM compliance_ack_records`).Scan(&stats.AckCount)
+	_ = s.pool.QueryRow(ctx, `
+		SELECT
+			COUNT(*) FILTER (WHERE status = 'pending')::bigint,
+			COUNT(*) FILTER (WHERE status = 'approved')::bigint,
+			COUNT(*) FILTER (WHERE status = 'rejected')::bigint
+		FROM compliance_manual_reviews
+	`).Scan(&stats.ManualPendingCount, &stats.ManualApprovedCount, &stats.ManualRejectedCount)
+	levelRows, err := s.pool.Query(ctx, `SELECT level, COUNT(*)::bigint FROM compliance_violations GROUP BY level`)
+	if err == nil {
+		defer levelRows.Close()
+		for levelRows.Next() {
+			var level string
+			var count int64
+			if scanErr := levelRows.Scan(&level, &count); scanErr == nil {
+				stats.ByLevel[level] = count
+			}
+		}
+	}
+	sourceRows, err := s.pool.Query(ctx, `SELECT source, COUNT(*)::bigint FROM compliance_violations GROUP BY source`)
+	if err == nil {
+		defer sourceRows.Close()
+		for sourceRows.Next() {
+			var source string
+			var count int64
+			if scanErr := sourceRows.Scan(&source, &count); scanErr == nil {
+				stats.BySource[source] = count
+			}
+		}
+	}
+	return stats, nil
+}
+
+func (s *ComplianceService) decideManualReview(ctx context.Context, id int64, status, reason string) (*sharedcompliance.ManualReview, error) {
+	reason = strings.TrimSpace(reason)
+	if reason == "" {
+		return nil, response.ErrBadRequest(40001, "invalid_params", "reason is required")
+	}
+	if utf8.RuneCountInString(reason) > 1000 {
+		return nil, response.ErrBadRequest(40001, "invalid_params", "reason must be 1000 characters or less")
+	}
+	actor := ActorFromContext(ctx)
+	if actor == nil || actor.OperatorID <= 0 {
+		return nil, response.ErrUnauthorized(40101, "missing_operator", "operator context is required")
+	}
+	tx, err := s.pool.Begin(ctx)
+	if err != nil {
+		return nil, response.ErrInternal(52021, "ops_compliance_manual_review_decision_failed", "failed to begin manual review decision")
+	}
+	defer tx.Rollback(ctx)
+	var reviewID int64
+	var articleID int64
+	var versionID int64
+	err = tx.QueryRow(ctx, `
+		UPDATE compliance_manual_reviews
+		SET status = $2,
+		    reviewed_by = $3,
+		    reviewed_at = NOW(),
+		    decision_reason = $4
+		WHERE id = $1 AND status = 'pending'
+		RETURNING id, article_id, article_version_id
+	`, id, status, actor.OperatorID, reason).Scan(&reviewID, &articleID, &versionID)
+	if err != nil {
+		if errors.Is(err, pgx.ErrNoRows) {
+			return nil, response.ErrConflict(41010, "compliance_manual_review_not_cancellable", "manual review is not pending")
+		}
+		return nil, response.ErrInternal(52021, "ops_compliance_manual_review_decision_failed", "failed to update manual review")
+	}
+	if _, err := tx.Exec(ctx, `
+		UPDATE article_versions
+		SET manual_review_status = $1,
+		    manual_review_id = $2,
+		    manual_review_updated_at = NOW()
+		WHERE id = $3 AND article_id = $4
+	`, status, reviewID, versionID, articleID); err != nil {
+		return nil, response.ErrInternal(52021, "ops_compliance_manual_review_decision_failed", "failed to stamp article version")
+	}
+	if err := tx.Commit(ctx); err != nil {
+		return nil, response.ErrInternal(52021, "ops_compliance_manual_review_decision_failed", "failed to commit manual review decision")
+	}
+	s.audit(ctx, "compliance.manual_review."+status, "compliance_manual_review", id, map[string]any{"reason": reason})
+	return s.loadManualReview(ctx, id, true)
+}
+
+func (s *ComplianceService) getPolicy(ctx context.Context) (*CompliancePolicy, error) {
+	var policy CompliancePolicy
+	if err := scanPolicy(s.pool.QueryRow(ctx, `
+		SELECT id, master_enabled, enforcement_mode, enabled_dictionaries, llm_judge_enabled, llm_categories, revision, updated_at
+		FROM ops.compliance_policies
+		WHERE id = 1
+		LIMIT 1
+	`), &policy); err != nil {
+		if errors.Is(err, pgx.ErrNoRows) {
+			return nil, response.ErrNotFound(40474, "compliance_policy_not_found", "compliance policy not found")
+		}
+		return nil, response.ErrInternal(52010, "ops_compliance_policy_query_failed", "failed to load compliance policy")
+	}
+	return &policy, nil
+}
+
+func (s *ComplianceService) updatePolicy(ctx context.Context, req UpdateCompliancePolicyRequest) (*CompliancePolicy, error) {
+	existing, _ := s.getPolicy(ctx)
+	mode := normalizeComplianceMode(req.EnforcementMode)
+	if mode == "" {
+		if existing != nil && existing.EnforcementMode != "" {
+			mode = existing.EnforcementMode
+		} else {
+			mode = "mandatory"
+		}
+	}
+	llmEnabled := false
+	if req.LLMJudgeEnabled != nil {
+		llmEnabled = *req.LLMJudgeEnabled
+	} else if existing != nil {
+		llmEnabled = existing.LLMJudgeEnabled
+	}
+	masterEnabled := req.MasterEnabled
+	if masterEnabled == nil {
+		if existing != nil {
+			masterEnabled = existing.MasterEnabled
+		}
+		if masterEnabled == nil {
+			defaultMaster := true
+			masterEnabled = &defaultMaster
+		}
+	}
+	enabledDictionaries := req.EnabledDictionaries
+	if enabledDictionaries == nil && existing != nil {
+		enabledDictionaries = existing.EnabledDictionaries
+	}
+	llmCategoriesValue := req.LLMCategories
+	if llmCategoriesValue == nil && existing != nil {
+		llmCategoriesValue = existing.LLMCategories
+	}
+	enabledDicts, _ := json.Marshal(enabledDictionaries)
+	llmCategories, _ := json.Marshal(llmCategoriesValue)
+	actor := ActorFromContext(ctx)
+	var actorID *int64
+	if actor != nil && actor.OperatorID > 0 {
+		actorID = &actor.OperatorID
+	}
+	var policy CompliancePolicy
+	if err := scanPolicy(s.pool.QueryRow(ctx, `
+		INSERT INTO ops.compliance_policies (
+			id, master_enabled, enforcement_mode, enabled_dictionaries, llm_judge_enabled, llm_categories, updated_by
+		)
+		VALUES (1, $1, $2, $3, $4, $5, $6)
+		ON CONFLICT (id)
+		DO UPDATE SET
+			master_enabled = EXCLUDED.master_enabled,
+			enforcement_mode = EXCLUDED.enforcement_mode,
+			enabled_dictionaries = EXCLUDED.enabled_dictionaries,
+			llm_judge_enabled = EXCLUDED.llm_judge_enabled,
+			llm_categories = EXCLUDED.llm_categories,
+			updated_by = EXCLUDED.updated_by,
+			revision = ops.compliance_policies.revision + 1,
+			updated_at = NOW()
+		RETURNING id, master_enabled, enforcement_mode, enabled_dictionaries, llm_judge_enabled, llm_categories, revision, updated_at
+	`, masterEnabled, mode, enabledDicts, llmEnabled, llmCategories, actorID), &policy); err != nil {
+		return nil, response.ErrInternal(52011, "ops_compliance_policy_update_failed", "failed to update compliance policy")
+	}
+	return &policy, nil
+}
+
+func (s *ComplianceService) loadManualReview(ctx context.Context, id int64, includePlaintext bool) (*sharedcompliance.ManualReview, error) {
+	query := `
+		SELECT
+			mr.id,
+			mr.tenant_id,
+			mr.article_id,
+			mr.article_version_id,
+			mr.original_check_record_id,
+			mr.requested_by,
+			mr.requested_at,
+			mr.request_note,
+			mr.status,
+			mr.cancelled_by,
+			mr.cancelled_at,
+			mr.cancel_reason,
+			mr.reviewed_by,
+			mr.reviewed_at,
+			mr.decision_reason,
+			mr.original_violation_summary,
+			mr.original_target_platforms,
+			av.title,
+			u.name,
+			t.name
+	`
+	if includePlaintext {
+		query += `, av.plaintext_snapshot`
+	}
+	query += `
+		FROM compliance_manual_reviews mr
+		LEFT JOIN article_versions av ON av.id = mr.article_version_id
+		LEFT JOIN users u ON u.id = mr.requested_by
+		LEFT JOIN tenants t ON t.id = mr.tenant_id
+		WHERE mr.id = $1
+	`
+	row := s.pool.QueryRow(ctx, query, id)
+	review, err := scanManualReviewForOps(row, includePlaintext)
+	if err != nil {
+		if errors.Is(err, pgx.ErrNoRows) {
+			return nil, response.ErrNotFound(40475, "compliance_manual_review_not_found", "manual review not found")
+		}
+		return nil, response.ErrInternal(52020, "ops_compliance_manual_reviews_query_failed", "failed to load manual review")
+	}
+	return &review, nil
+}
+
+func (s *ComplianceService) loadRecordViolations(ctx context.Context, recordID, tenantID int64) ([]sharedcompliance.Violation, error) {
+	rows, err := s.pool.Query(ctx, `
+		SELECT id, record_id, platform_code, source, dictionary_code, dictionary_name, term_pattern, matched_text, start_offset, end_offset, dom_path, level, hint, reference_law
+		FROM compliance_violations
+		WHERE record_id = $1 AND tenant_id = $2
+		ORDER BY id
+	`, recordID, tenantID)
+	if err != nil {
+		return nil, response.ErrInternal(52031, "ops_compliance_violations_query_failed", "failed to load compliance violations")
+	}
+	defer rows.Close()
+	out := make([]sharedcompliance.Violation, 0)
+	for rows.Next() {
+		item, scanErr := scanViolationForOps(rows)
+		if scanErr != nil {
+			return nil, response.ErrInternal(52031, "ops_compliance_violations_query_failed", "failed to scan compliance violation")
+		}
+		out = append(out, item)
+	}
+	return out, rows.Err()
+}
+
+func (s *ComplianceService) bumpDictionaryVersion(ctx context.Context, dictionaryID int64) error {
+	_, err := s.pool.Exec(ctx, `
+		UPDATE ops.compliance_dictionaries
+		SET version = version + 1, updated_at = NOW()
+		WHERE id = $1
+	`, dictionaryID)
+	return err
+}
+
+func (s *ComplianceService) loadDictionaryForUpdate(ctx context.Context, tx pgx.Tx, id int64) (*ComplianceDictionary, error) {
+	var item ComplianceDictionary
+	err := tx.QueryRow(ctx, `
+		SELECT id, code, name, platform_scope, COALESCE(applicable_platforms, '{}'), default_level, enabled, version, description, created_at, updated_at, 0
+		FROM ops.compliance_dictionaries
+		WHERE id = $1
+		FOR UPDATE
+	`, id).Scan(&item.ID, &item.Code, &item.Name, &item.PlatformScope, &item.ApplicablePlatforms, &item.DefaultLevel, &item.Enabled, &item.Version, new(pgtype.Text), &item.CreatedAt, &item.UpdatedAt, &item.TermCount)
+	if err != nil {
+		if errors.Is(err, pgx.ErrNoRows) {
+			return nil, response.ErrNotFound(40471, "compliance_dictionary_not_found", "compliance dictionary not found")
+		}
+		return nil, response.ErrInternal(52001, "ops_compliance_dictionary_query_failed", "failed to load compliance dictionary")
+	}
+	return &item, nil
+}
+
+func (s *ComplianceService) insertDictionaryVersionSnapshot(ctx context.Context, tx pgx.Tx, dictionaryID int64, version int) error {
+	var snapshot []byte
+	err := tx.QueryRow(ctx, `
+		SELECT jsonb_build_object(
+			'code', d.code,
+			'name', d.name,
+			'platform_scope', d.platform_scope,
+			'applicable_platforms', COALESCE(to_jsonb(d.applicable_platforms), '[]'::jsonb),
+			'default_level', d.default_level,
+			'terms', COALESCE((
+				SELECT jsonb_agg(jsonb_build_object(
+					'id', t.id,
+					'match_type', t.match_type,
+					'pattern', t.pattern,
+					'level_override', t.level_override,
+					'hint', t.hint,
+					'reference_law', t.reference_law,
+					'enabled', t.enabled
+				) ORDER BY t.id)
+				FROM ops.compliance_dictionary_terms t
+				WHERE t.dictionary_id = d.id
+			), '[]'::jsonb)
+		)
+		FROM ops.compliance_dictionaries d
+		WHERE d.id = $1
+	`, dictionaryID).Scan(&snapshot)
+	if err != nil {
+		return response.ErrInternal(52008, "ops_compliance_dictionary_publish_failed", "failed to build dictionary snapshot")
+	}
+	actor := ActorFromContext(ctx)
+	var actorID *int64
+	if actor != nil && actor.OperatorID > 0 {
+		actorID = &actor.OperatorID
+	}
+	_, err = tx.Exec(ctx, `
+		INSERT INTO ops.compliance_dictionary_versions (dictionary_id, version, snapshot, published_by)
+		VALUES ($1,$2,$3,$4)
+		ON CONFLICT (dictionary_id, version) DO NOTHING
+	`, dictionaryID, version, snapshot, actorID)
+	if err != nil {
+		return response.ErrInternal(52008, "ops_compliance_dictionary_publish_failed", "failed to save dictionary snapshot")
+	}
+	return nil
+}
+
+func (s *ComplianceService) getTerm(ctx context.Context, termID int64) (ComplianceDictionaryTerm, error) {
+	row := s.pool.QueryRow(ctx, `
+		SELECT id, dictionary_id, match_type, pattern, level_override, hint, reference_law, enabled, created_at, updated_at
+		FROM ops.compliance_dictionary_terms
+		WHERE id = $1
+	`, termID)
+	item, err := scanComplianceDictionaryTerm(row)
+	if err != nil {
+		return item, response.ErrInternal(52005, "ops_compliance_terms_query_failed", "failed to load compliance term")
+	}
+	return item, nil
+}
+
+func (s *ComplianceService) audit(ctx context.Context, action, targetType string, targetID int64, metadata map[string]any) {
+	if s == nil || s.audits == nil {
+		return
+	}
+	actor := ActorFromContext(ctx)
+	if actor == nil {
+		return
+	}
+	if err := s.audits.Append(ctx, actor.audit(action, targetType, targetID, metadata)); err != nil && s.logger != nil {
+		s.logger.Warn("ops compliance audit failed", zap.String("action", action), zap.Error(err))
+	}
+}
+
+type complianceDictionaryScanner interface{ Scan(dest ...any) error }
+
+func scanComplianceDictionary(scanner complianceDictionaryScanner) (ComplianceDictionary, error) {
+	var item ComplianceDictionary
+	var description pgtype.Text
+	if err := scanner.Scan(&item.ID, &item.Code, &item.Name, &item.PlatformScope, &item.ApplicablePlatforms, &item.DefaultLevel, &item.Enabled, &item.Version, &description, &item.CreatedAt, &item.UpdatedAt, &item.TermCount); err != nil {
+		return item, err
+	}
+	if description.Valid {
+		item.Description = &description.String
+	}
+	return item, nil
+}
+
+func scanComplianceDictionaryTerm(scanner complianceDictionaryScanner) (ComplianceDictionaryTerm, error) {
+	var item ComplianceDictionaryTerm
+	var level pgtype.Text
+	var hint pgtype.Text
+	var referenceLaw pgtype.Text
+	if err := scanner.Scan(&item.ID, &item.DictionaryID, &item.MatchType, &item.Pattern, &level, &hint, &referenceLaw, &item.Enabled, &item.CreatedAt, &item.UpdatedAt); err != nil {
+		return item, err
+	}
+	if level.Valid {
+		item.LevelOverride = &level.String
+	}
+	if hint.Valid {
+		item.Hint = &hint.String
+	}
+	if referenceLaw.Valid {
+		item.ReferenceLaw = &referenceLaw.String
+	}
+	return item, nil
+}
+
+func scanPolicy(scanner complianceDictionaryScanner, policy *CompliancePolicy) error {
+	var master pgtype.Bool
+	var enabledRaw []byte
+	var llmCategoriesRaw []byte
+	if err := scanner.Scan(&policy.ID, &master, &policy.EnforcementMode, &enabledRaw, &policy.LLMJudgeEnabled, &llmCategoriesRaw, &policy.Revision, &policy.UpdatedAt); err != nil {
+		return err
+	}
+	if master.Valid {
+		policy.MasterEnabled = &master.Bool
+	}
+	_ = json.Unmarshal(enabledRaw, &policy.EnabledDictionaries)
+	_ = json.Unmarshal(llmCategoriesRaw, &policy.LLMCategories)
+	if policy.EnabledDictionaries == nil {
+		policy.EnabledDictionaries = []int64{}
+	}
+	if policy.LLMCategories == nil {
+		policy.LLMCategories = []string{}
+	}
+	return nil
+}
+
+func scanManualReviewForOps(scanner complianceDictionaryScanner, includePlaintext bool) (sharedcompliance.ManualReview, error) {
+	var item sharedcompliance.ManualReview
+	var checkID pgtype.Int8
+	var requestNote pgtype.Text
+	var cancelledBy pgtype.Int8
+	var cancelledAt pgtype.Timestamptz
+	var cancelReason pgtype.Text
+	var reviewedBy pgtype.Int8
+	var reviewedAt pgtype.Timestamptz
+	var decisionReason pgtype.Text
+	var summary []byte
+	var platforms []string
+	var title pgtype.Text
+	var applicant pgtype.Text
+	var tenant pgtype.Text
+	dest := []any{
+		&item.ID, &item.TenantID, &item.ArticleID, &item.ArticleVersionID, &checkID, &item.RequestedBy, &item.RequestedAt, &requestNote, &item.Status, &cancelledBy, &cancelledAt, &cancelReason, &reviewedBy, &reviewedAt, &decisionReason, &summary, &platforms, &title, &applicant, &tenant,
+	}
+	var plaintext pgtype.Text
+	if includePlaintext {
+		dest = append(dest, &plaintext)
+	}
+	if err := scanner.Scan(dest...); err != nil {
+		return item, err
+	}
+	if checkID.Valid {
+		item.CheckRecordID = &checkID.Int64
+	}
+	if requestNote.Valid {
+		item.RequestNote = &requestNote.String
+	}
+	if cancelledBy.Valid {
+		item.CancelledBy = &cancelledBy.Int64
+	}
+	if cancelledAt.Valid {
+		item.CancelledAt = &cancelledAt.Time
+	}
+	if cancelReason.Valid {
+		item.CancelReason = &cancelReason.String
+	}
+	if reviewedBy.Valid {
+		item.ReviewedBy = &reviewedBy.Int64
+	}
+	if reviewedAt.Valid {
+		item.ReviewedAt = &reviewedAt.Time
+	}
+	if decisionReason.Valid {
+		item.DecisionReason = &decisionReason.String
+	}
+	_ = json.Unmarshal(summary, &item.ViolationSummary)
+	item.OriginalPlatforms = platforms
+	if title.Valid {
+		item.ArticleTitle = &title.String
+	}
+	if applicant.Valid {
+		item.ApplicantName = &applicant.String
+	}
+	if tenant.Valid {
+		item.TenantName = &tenant.String
+	}
+	if includePlaintext && plaintext.Valid {
+		item.ArticlePlaintext = &plaintext.String
+	}
+	return item, nil
+}
+
+type opsCheckRecordRow struct {
+	ID                 int64
+	TenantID           int64
+	ArticleID          int64
+	ArticleVersionID   int64
+	TargetPlatforms    []string
+	ContentHash        string
+	PolicyFingerprint  string
+	EnforcementMode    string
+	HighestLevel       *string
+	Passed             bool
+	HitCount           int
+	StoredHitCount     int
+	Truncated          bool
+	ManualReviewStatus sharedcompliance.ManualReviewStatus
+	ManualReviewID     *int64
+	CheckedAt          time.Time
+	DurationMS         int
+}
+
+func scanCheckRecordForOps(scanner complianceDictionaryScanner) (opsCheckRecordRow, error) {
+	var record opsCheckRecordRow
+	var articleID pgtype.Int8
+	var versionID pgtype.Int8
+	var highest pgtype.Text
+	var manualReviewID pgtype.Int8
+	var manualStatus string
+	if err := scanner.Scan(&record.ID, &record.TenantID, &articleID, &versionID, &record.TargetPlatforms, &record.ContentHash, &record.PolicyFingerprint, &record.EnforcementMode, &highest, &record.Passed, &record.HitCount, &record.StoredHitCount, &record.Truncated, &manualStatus, &manualReviewID, &record.CheckedAt, &record.DurationMS); err != nil {
+		return record, err
+	}
+	if articleID.Valid {
+		record.ArticleID = articleID.Int64
+	}
+	if versionID.Valid {
+		record.ArticleVersionID = versionID.Int64
+	}
+	if highest.Valid {
+		record.HighestLevel = &highest.String
+	}
+	if manualReviewID.Valid {
+		record.ManualReviewID = &manualReviewID.Int64
+	}
+	record.ManualReviewStatus = sharedcompliance.ManualReviewStatus(manualStatus)
+	return record, nil
+}
+
+func scanViolationForOps(scanner complianceDictionaryScanner) (sharedcompliance.Violation, error) {
+	var item sharedcompliance.Violation
+	var platform pgtype.Text
+	var dictCode pgtype.Text
+	var dictName pgtype.Text
+	var termPattern pgtype.Text
+	var domPath pgtype.Text
+	var hint pgtype.Text
+	var ref pgtype.Text
+	if err := scanner.Scan(&item.ID, &item.RecordID, &platform, &item.Source, &dictCode, &dictName, &termPattern, &item.MatchedText, &item.StartOffset, &item.EndOffset, &domPath, &item.Level, &hint, &ref); err != nil {
+		return item, err
+	}
+	if platform.Valid {
+		item.PlatformCode = &platform.String
+	}
+	if dictCode.Valid {
+		item.DictionaryCode = &dictCode.String
+	}
+	if dictName.Valid {
+		item.DictionaryName = &dictName.String
+	}
+	if termPattern.Valid {
+		item.TermPattern = &termPattern.String
+	}
+	if domPath.Valid {
+		item.DomPath = &domPath.String
+	}
+	if hint.Valid {
+		item.Hint = &hint.String
+	}
+	if ref.Valid {
+		item.ReferenceLaw = &ref.String
+	}
+	return item, nil
+}
+
+func checkResultFromOpsRecord(record opsCheckRecordRow, violations []sharedcompliance.Violation) *sharedcompliance.CheckResult {
+	decision := sharedcompliance.GateDecisionPass
+	if record.HitCount > 0 {
+		decision = sharedcompliance.GateDecisionNeedsAck
+		if record.EnforcementMode == "mandatory" && record.HighestLevel != nil && *record.HighestLevel == "block" {
+			decision = sharedcompliance.GateDecisionBlock
+		}
+	}
+	return &sharedcompliance.CheckResult{
+		RecordID:           record.ID,
+		Decision:           decision,
+		Passed:             record.Passed,
+		HighestLevel:       record.HighestLevel,
+		Violations:         violations,
+		HitCount:           record.HitCount,
+		StoredHitCount:     record.StoredHitCount,
+		Truncated:          record.Truncated,
+		EnforcementMode:    record.EnforcementMode,
+		ContentHash:        record.ContentHash,
+		PolicyFingerprint:  record.PolicyFingerprint,
+		TargetPlatforms:    record.TargetPlatforms,
+		ManualReviewStatus: record.ManualReviewStatus,
+		ManualReviewID:     record.ManualReviewID,
+		CheckedAt:          record.CheckedAt,
+		DurationMS:         record.DurationMS,
+	}
+}
+
+func normalizeDictionaryInput(req UpsertComplianceDictionaryRequest, updating bool) (UpsertComplianceDictionaryRequest, error) {
+	req.Code = strings.TrimSpace(req.Code)
+	req.Name = strings.TrimSpace(req.Name)
+	req.PlatformScope = strings.ToLower(strings.TrimSpace(req.PlatformScope))
+	req.DefaultLevel = normalizeComplianceLevel(req.DefaultLevel)
+	if !updating && req.Code == "" {
+		return req, response.ErrBadRequest(40001, "invalid_params", "code is required")
+	}
+	if req.Name == "" {
+		return req, response.ErrBadRequest(40001, "invalid_params", "name is required")
+	}
+	if req.PlatformScope == "" {
+		req.PlatformScope = "all"
+	}
+	if req.PlatformScope != "all" && req.PlatformScope != "specific" {
+		return req, response.ErrBadRequest(40001, "invalid_params", "platform_scope must be all or specific")
+	}
+	req.ApplicablePlatforms = normalizedPlatformArray(req.ApplicablePlatforms, req.PlatformScope)
+	if req.PlatformScope == "specific" && len(req.ApplicablePlatforms) == 0 {
+		return req, response.ErrBadRequest(40001, "invalid_params", "applicable_platforms is required for specific scope")
+	}
+	if req.DefaultLevel == "" {
+		req.DefaultLevel = "block"
+	}
+	enabled := true
+	if req.Enabled != nil {
+		enabled = *req.Enabled
+	}
+	req.Enabled = &enabled
+	if req.Description != nil {
+		value := strings.TrimSpace(*req.Description)
+		req.Description = &value
+	}
+	return req, nil
+}
+
+func normalizeTermInput(req CreateComplianceDictionaryTermRequest) (CreateComplianceDictionaryTermRequest, error) {
+	req.MatchType = normalizeTermMatchType(req.MatchType)
+	if req.MatchType == "" {
+		req.MatchType = "exact"
+	}
+	req.Pattern = strings.TrimSpace(req.Pattern)
+	if req.Pattern == "" {
+		return req, response.ErrBadRequest(40001, "invalid_params", "pattern is required")
+	}
+	if req.LevelOverride != nil {
+		level := normalizeComplianceLevel(*req.LevelOverride)
+		if level == "" {
+			return req, response.ErrBadRequest(40001, "invalid_params", "level_override is invalid")
+		}
+		req.LevelOverride = &level
+	}
+	enabled := true
+	if req.Enabled != nil {
+		enabled = *req.Enabled
+	}
+	req.Enabled = &enabled
+	return req, nil
+}
+
+func normalizeTermMatchType(value string) string {
+	value = strings.ToLower(strings.TrimSpace(value))
+	switch value {
+	case "", "exact":
+		return "exact"
+	case "regex":
+		return value
+	default:
+		return ""
+	}
+}
+
+func normalizeComplianceLevel(level string) string {
+	level = strings.ToLower(strings.TrimSpace(level))
+	switch level {
+	case "block", "high", "medium", "info":
+		return level
+	default:
+		return ""
+	}
+}
+
+func normalizeComplianceMode(mode string) string {
+	mode = strings.ToLower(strings.TrimSpace(mode))
+	switch mode {
+	case "mandatory", "advisory", "disabled":
+		return mode
+	default:
+		return ""
+	}
+}
+
+func normalizedPlatformArray(platforms []string, scope string) []string {
+	if strings.EqualFold(strings.TrimSpace(scope), "all") {
+		return nil
+	}
+	seen := map[string]struct{}{}
+	out := make([]string, 0, len(platforms))
+	for _, platform := range platforms {
+		platform = strings.TrimSpace(platform)
+		if platform == "" {
+			continue
+		}
+		if _, ok := seen[platform]; ok {
+			continue
+		}
+		seen[platform] = struct{}{}
+		out = append(out, platform)
+	}
+	return out
+}
+
+func nullableStringPointer(value *string) *string {
+	if value == nil {
+		return nil
+	}
+	trimmed := strings.TrimSpace(*value)
+	if trimmed == "" {
+		return nil
+	}
+	return &trimmed
+}
+
+func manualReviewWhere(status string, tenantID *int64) (string, []any) {
+	where := "1=1"
+	args := []any{}
+	status = strings.ToLower(strings.TrimSpace(status))
+	if status != "" {
+		args = append(args, status)
+		where += fmt.Sprintf(" AND mr.status = $%d", len(args))
+	}
+	if tenantID != nil && *tenantID > 0 {
+		args = append(args, *tenantID)
+		where += fmt.Sprintf(" AND mr.tenant_id = $%d", len(args))
+	}
+	return where, args
+}
+
+func complianceRecordWhere(req ComplianceRecordListRequest) (string, []any) {
+	where := "1=1"
+	args := []any{}
+	if req.TenantID != nil && *req.TenantID > 0 {
+		args = append(args, *req.TenantID)
+		where += fmt.Sprintf(" AND tenant_id = $%d", len(args))
+	}
+	if req.ArticleID != nil && *req.ArticleID > 0 {
+		args = append(args, *req.ArticleID)
+		where += fmt.Sprintf(" AND article_id = $%d", len(args))
+	}
+	switch strings.TrimSpace(req.Decision) {
+	case "pass":
+		where += " AND hit_count = 0"
+	case "block":
+		where += " AND enforcement_mode = 'mandatory' AND highest_level = 'block'"
+	case "needs_ack":
+		where += " AND hit_count > 0 AND NOT (enforcement_mode = 'mandatory' AND highest_level = 'block')"
+	}
+	return where, args
+}
+
+func normalizePage(page, size int) (int, int) {
+	if page <= 0 {
+		page = 1
+	}
+	if size <= 0 || size > 200 {
+		size = 50
+	}
+	return page, size
+}
+
+func isOpsUniqueViolation(err error) bool {
+	var pgErr *pgconn.PgError
+	return errors.As(err, &pgErr) && pgErr.Code == "23505"
+}
+
+func isOpsForeignKeyViolation(err error) bool {
+	var pgErr *pgconn.PgError
+	return errors.As(err, &pgErr) && pgErr.Code == "23503"
+}
diff --git a/server/internal/ops/transport/compliance_handler.go b/server/internal/ops/transport/compliance_handler.go
new file mode 100644
index 0000000..ebfc5c9
--- /dev/null
+++ b/server/internal/ops/transport/compliance_handler.go
@@ -0,0 +1,388 @@
+package transport
+
+import (
+	"strconv"
+	"strings"
+
+	"github.com/gin-gonic/gin"
+
+	"github.com/geo-platform/tenant-api/internal/ops/app"
+	"github.com/geo-platform/tenant-api/internal/shared/response"
+)
+
+type complianceDecisionRequest struct {
+	Reason string `json:"reason" binding:"required"`
+}
+
+type complianceMasterSwitchRequest struct {
+	Enabled bool `json:"enabled"`
+}
+
+type complianceRollbackRequest struct {
+	Version int `json:"version" binding:"required"`
+}
+
+func listComplianceDictionariesHandler(svc *app.ComplianceService) gin.HandlerFunc {
+	return func(c *gin.Context) {
+		data, err := svc.ListDictionaries(c.Request.Context())
+		if err != nil {
+			response.Error(c, err)
+			return
+		}
+		response.Success(c, data)
+	}
+}
+
+func createComplianceDictionaryHandler(svc *app.ComplianceService) gin.HandlerFunc {
+	return func(c *gin.Context) {
+		var body app.UpsertComplianceDictionaryRequest
+		if err := c.ShouldBindJSON(&body); err != nil {
+			response.Error(c, response.ErrBadRequest(40000, "invalid_payload", err.Error()))
+			return
+		}
+		data, err := svc.CreateDictionary(c.Request.Context(), body)
+		if err != nil {
+			response.Error(c, err)
+			return
+		}
+		response.Success(c, data)
+	}
+}
+
+func updateComplianceDictionaryHandler(svc *app.ComplianceService) gin.HandlerFunc {
+	return func(c *gin.Context) {
+		id, err := parseIDParam(c)
+		if err != nil {
+			response.Error(c, err)
+			return
+		}
+		var body app.UpsertComplianceDictionaryRequest
+		if err := c.ShouldBindJSON(&body); err != nil {
+			response.Error(c, response.ErrBadRequest(40000, "invalid_payload", err.Error()))
+			return
+		}
+		data, err := svc.UpdateDictionary(c.Request.Context(), id, body)
+		if err != nil {
+			response.Error(c, err)
+			return
+		}
+		response.Success(c, data)
+	}
+}
+
+func deleteComplianceDictionaryHandler(svc *app.ComplianceService) gin.HandlerFunc {
+	return func(c *gin.Context) {
+		id, err := parseIDParam(c)
+		if err != nil {
+			response.Error(c, err)
+			return
+		}
+		if err := svc.DeleteDictionary(c.Request.Context(), id); err != nil {
+			response.Error(c, err)
+			return
+		}
+		response.Success(c, gin.H{"deleted": true})
+	}
+}
+
+func listComplianceTermsHandler(svc *app.ComplianceService) gin.HandlerFunc {
+	return func(c *gin.Context) {
+		id, err := parseIDParam(c)
+		if err != nil {
+			response.Error(c, err)
+			return
+		}
+		data, err := svc.ListTerms(c.Request.Context(), id)
+		if err != nil {
+			response.Error(c, err)
+			return
+		}
+		response.Success(c, data)
+	}
+}
+
+func createComplianceTermHandler(svc *app.ComplianceService) gin.HandlerFunc {
+	return func(c *gin.Context) {
+		id, err := parseIDParam(c)
+		if err != nil {
+			response.Error(c, err)
+			return
+		}
+		var body app.CreateComplianceDictionaryTermRequest
+		if err := c.ShouldBindJSON(&body); err != nil {
+			response.Error(c, response.ErrBadRequest(40000, "invalid_payload", err.Error()))
+			return
+		}
+		data, err := svc.CreateTerm(c.Request.Context(), id, body)
+		if err != nil {
+			response.Error(c, err)
+			return
+		}
+		response.Success(c, data)
+	}
+}
+
+func deleteComplianceTermHandler(svc *app.ComplianceService) gin.HandlerFunc {
+	return func(c *gin.Context) {
+		dictID, err := parseIDParam(c)
+		if err != nil {
+			response.Error(c, err)
+			return
+		}
+		termID, err := parsePositiveInt64(c.Param("term_id"))
+		if err != nil {
+			response.Error(c, response.ErrBadRequest(40001, "invalid_id", "无效的词条 ID"))
+			return
+		}
+		if err := svc.DeleteTerm(c.Request.Context(), dictID, termID); err != nil {
+			response.Error(c, err)
+			return
+		}
+		response.Success(c, gin.H{"deleted": true})
+	}
+}
+
+func batchImportComplianceTermsHandler(svc *app.ComplianceService) gin.HandlerFunc {
+	return func(c *gin.Context) {
+		id, err := parseIDParam(c)
+		if err != nil {
+			response.Error(c, err)
+			return
+		}
+		var body app.BatchImportComplianceTermsRequest
+		if err := c.ShouldBindJSON(&body); err != nil {
+			response.Error(c, response.ErrBadRequest(40000, "invalid_payload", err.Error()))
+			return
+		}
+		data, err := svc.BatchImportTerms(c.Request.Context(), id, body)
+		if err != nil {
+			response.Error(c, err)
+			return
+		}
+		response.Success(c, data)
+	}
+}
+
+func publishComplianceDictionaryHandler(svc *app.ComplianceService) gin.HandlerFunc {
+	return func(c *gin.Context) {
+		id, err := parseIDParam(c)
+		if err != nil {
+			response.Error(c, err)
+			return
+		}
+		data, err := svc.PublishDictionary(c.Request.Context(), id)
+		if err != nil {
+			response.Error(c, err)
+			return
+		}
+		response.Success(c, data)
+	}
+}
+
+func rollbackComplianceDictionaryHandler(svc *app.ComplianceService) gin.HandlerFunc {
+	return func(c *gin.Context) {
+		id, err := parseIDParam(c)
+		if err != nil {
+			response.Error(c, err)
+			return
+		}
+		var body complianceRollbackRequest
+		if err := c.ShouldBindJSON(&body); err != nil {
+			response.Error(c, response.ErrBadRequest(40000, "invalid_payload", err.Error()))
+			return
+		}
+		data, err := svc.RollbackDictionary(c.Request.Context(), id, body.Version)
+		if err != nil {
+			response.Error(c, err)
+			return
+		}
+		response.Success(c, data)
+	}
+}
+
+func getGlobalCompliancePolicyHandler(svc *app.ComplianceService) gin.HandlerFunc {
+	return func(c *gin.Context) {
+		data, err := svc.GetGlobalPolicy(c.Request.Context())
+		if err != nil {
+			response.Error(c, err)
+			return
+		}
+		response.Success(c, data)
+	}
+}
+
+func updateGlobalCompliancePolicyHandler(svc *app.ComplianceService) gin.HandlerFunc {
+	return func(c *gin.Context) {
+		var body app.UpdateCompliancePolicyRequest
+		if err := c.ShouldBindJSON(&body); err != nil {
+			response.Error(c, response.ErrBadRequest(40000, "invalid_payload", err.Error()))
+			return
+		}
+		data, err := svc.UpdateGlobalPolicy(c.Request.Context(), body)
+		if err != nil {
+			response.Error(c, err)
+			return
+		}
+		response.Success(c, data)
+	}
+}
+
+func setGlobalComplianceMasterSwitchHandler(svc *app.ComplianceService) gin.HandlerFunc {
+	return func(c *gin.Context) {
+		var body complianceMasterSwitchRequest
+		if err := c.ShouldBindJSON(&body); err != nil {
+			response.Error(c, response.ErrBadRequest(40000, "invalid_payload", err.Error()))
+			return
+		}
+		data, err := svc.SetGlobalMasterSwitch(c.Request.Context(), body.Enabled)
+		if err != nil {
+			response.Error(c, err)
+			return
+		}
+		response.Success(c, data)
+	}
+}
+
+func listComplianceManualReviewsHandler(svc *app.ComplianceService) gin.HandlerFunc {
+	return func(c *gin.Context) {
+		page, _ := strconv.Atoi(c.DefaultQuery("page", "1"))
+		pageSize, _ := strconv.Atoi(c.DefaultQuery("page_size", c.DefaultQuery("size", "50")))
+		var tenantID *int64
+		if raw := c.Query("tenant_id"); raw != "" {
+			id, err := parsePositiveInt64(raw)
+			if err != nil {
+				response.Error(c, response.ErrBadRequest(40001, "invalid_id", "无效的租户 ID"))
+				return
+			}
+			tenantID = &id
+		}
+		data, err := svc.ListManualReviews(c.Request.Context(), app.ComplianceManualReviewListRequest{
+			Status:   c.Query("status"),
+			TenantID: tenantID,
+			Page:     page,
+			PageSize: pageSize,
+		})
+		if err != nil {
+			response.Error(c, err)
+			return
+		}
+		response.Success(c, data)
+	}
+}
+
+func getComplianceManualReviewHandler(svc *app.ComplianceService) gin.HandlerFunc {
+	return func(c *gin.Context) {
+		id, err := parseIDParam(c)
+		if err != nil {
+			response.Error(c, err)
+			return
+		}
+		data, err := svc.GetManualReview(c.Request.Context(), id)
+		if err != nil {
+			response.Error(c, err)
+			return
+		}
+		response.Success(c, data)
+	}
+}
+
+func approveComplianceManualReviewHandler(svc *app.ComplianceService) gin.HandlerFunc {
+	return requireComplianceReviewPermission(decideComplianceManualReviewHandler(svc, true))
+}
+
+func rejectComplianceManualReviewHandler(svc *app.ComplianceService) gin.HandlerFunc {
+	return requireComplianceReviewPermission(decideComplianceManualReviewHandler(svc, false))
+}
+
+func decideComplianceManualReviewHandler(svc *app.ComplianceService, approve bool) gin.HandlerFunc {
+	return func(c *gin.Context) {
+		id, err := parseIDParam(c)
+		if err != nil {
+			response.Error(c, err)
+			return
+		}
+		var body complianceDecisionRequest
+		if err := c.ShouldBindJSON(&body); err != nil {
+			response.Error(c, response.ErrBadRequest(40000, "invalid_payload", err.Error()))
+			return
+		}
+		var data any
+		if approve {
+			data, err = svc.ApproveManualReview(c.Request.Context(), id, body.Reason)
+		} else {
+			data, err = svc.RejectManualReview(c.Request.Context(), id, body.Reason)
+		}
+		if err != nil {
+			response.Error(c, err)
+			return
+		}
+		response.Success(c, data)
+	}
+}
+
+func listComplianceRecordsHandler(svc *app.ComplianceService) gin.HandlerFunc {
+	return func(c *gin.Context) {
+		page, _ := strconv.Atoi(c.DefaultQuery("page", "1"))
+		pageSize, _ := strconv.Atoi(c.DefaultQuery("page_size", c.DefaultQuery("size", "50")))
+		var tenantID *int64
+		if raw := c.Query("tenant_id"); raw != "" {
+			id, err := parsePositiveInt64(raw)
+			if err != nil {
+				response.Error(c, response.ErrBadRequest(40001, "invalid_id", "无效的租户 ID"))
+				return
+			}
+			tenantID = &id
+		}
+		var articleID *int64
+		if raw := c.Query("article_id"); raw != "" {
+			id, err := parsePositiveInt64(raw)
+			if err != nil {
+				response.Error(c, response.ErrBadRequest(40001, "invalid_id", "无效的文章 ID"))
+				return
+			}
+			articleID = &id
+		}
+		data, err := svc.ListRecords(c.Request.Context(), app.ComplianceRecordListRequest{
+			TenantID:  tenantID,
+			ArticleID: articleID,
+			Decision:  c.Query("decision"),
+			Page:      page,
+			PageSize:  pageSize,
+		})
+		if err != nil {
+			response.Error(c, err)
+			return
+		}
+		response.Success(c, data)
+	}
+}
+
+func complianceStatsHandler(svc *app.ComplianceService) gin.HandlerFunc {
+	return func(c *gin.Context) {
+		data, err := svc.Stats(c.Request.Context())
+		if err != nil {
+			response.Error(c, err)
+			return
+		}
+		response.Success(c, data)
+	}
+}
+
+func requireComplianceReviewPermission(next gin.HandlerFunc) gin.HandlerFunc {
+	return func(c *gin.Context) {
+		actor := actorFromGin(c)
+		if actor == nil || !strings.EqualFold(strings.TrimSpace(actor.Role), "admin") {
+			response.Error(c, response.ErrForbidden(40331, "compliance_review_forbidden", "operator is not allowed to review compliance requests"))
+			return
+		}
+		next(c)
+	}
+}
+
+func parsePositiveInt64(raw string) (int64, error) {
+	id, err := strconv.ParseInt(raw, 10, 64)
+	if err != nil || id <= 0 {
+		return 0, strconv.ErrSyntax
+	}
+	return id, nil
+}
diff --git a/server/internal/ops/transport/router.go b/server/internal/ops/transport/router.go
index 35af4f2..ef4a703 100644
--- a/server/internal/ops/transport/router.go
+++ b/server/internal/ops/transport/router.go
@@ -22,6 +22,7 @@ type Deps struct {
 	KolSubs      *app.KolSubscriptionService
 	Audits       *app.AuditService
 	SiteDomains  *app.SiteDomainMappingService
+	Compliance   *app.ComplianceService
 }
 
 func RegisterRoutes(d Deps) {
@@ -96,5 +97,26 @@ func RegisterRoutes(d Deps) {
 		authed.PATCH("/site-domain-mappings/:id", updateSiteDomainMappingHandler(d.SiteDomains))
 		authed.POST("/site-domain-mappings/:id/active", setSiteDomainMappingActiveHandler(d.SiteDomains))
 		authed.DELETE("/site-domain-mappings/:id", deleteSiteDomainMappingHandler(d.SiteDomains))
+
+		compliance := authed.Group("/compliance")
+		compliance.GET("/dictionaries", listComplianceDictionariesHandler(d.Compliance))
+		compliance.POST("/dictionaries", createComplianceDictionaryHandler(d.Compliance))
+		compliance.PUT("/dictionaries/:id", updateComplianceDictionaryHandler(d.Compliance))
+		compliance.DELETE("/dictionaries/:id", deleteComplianceDictionaryHandler(d.Compliance))
+		compliance.GET("/dictionaries/:id/terms", listComplianceTermsHandler(d.Compliance))
+		compliance.POST("/dictionaries/:id/terms", createComplianceTermHandler(d.Compliance))
+		compliance.POST("/dictionaries/:id/terms:batch-import", batchImportComplianceTermsHandler(d.Compliance))
+		compliance.DELETE("/dictionaries/:id/terms/:term_id", deleteComplianceTermHandler(d.Compliance))
+		compliance.POST("/dictionaries/:id/publish", publishComplianceDictionaryHandler(d.Compliance))
+		compliance.POST("/dictionaries/:id/rollback", rollbackComplianceDictionaryHandler(d.Compliance))
+		compliance.GET("/policy/global", getGlobalCompliancePolicyHandler(d.Compliance))
+		compliance.PUT("/policy/global", updateGlobalCompliancePolicyHandler(d.Compliance))
+		compliance.POST("/policy/global/master-switch", setGlobalComplianceMasterSwitchHandler(d.Compliance))
+		compliance.GET("/manual-reviews", listComplianceManualReviewsHandler(d.Compliance))
+		compliance.GET("/manual-reviews/:id", getComplianceManualReviewHandler(d.Compliance))
+		compliance.POST("/manual-reviews/:id/approve", approveComplianceManualReviewHandler(d.Compliance))
+		compliance.POST("/manual-reviews/:id/reject", rejectComplianceManualReviewHandler(d.Compliance))
+		compliance.GET("/stats", complianceStatsHandler(d.Compliance))
+		compliance.GET("/records", listComplianceRecordsHandler(d.Compliance))
 	}
 }
diff --git a/server/internal/shared/compliance/types.go b/server/internal/shared/compliance/types.go
new file mode 100644
index 0000000..b17be09
--- /dev/null
+++ b/server/internal/shared/compliance/types.go
@@ -0,0 +1,106 @@
+package compliance
+
+import "time"
+
+type GateDecision string
+
+const (
+	GateDecisionPass     GateDecision = "pass"
+	GateDecisionBlock    GateDecision = "block"
+	GateDecisionNeedsAck GateDecision = "needs_ack"
+)
+
+type ManualReviewStatus string
+
+const (
+	ManualReviewStatusNone      ManualReviewStatus = "none"
+	ManualReviewStatusPending   ManualReviewStatus = "pending"
+	ManualReviewStatusApproved  ManualReviewStatus = "approved"
+	ManualReviewStatusRejected  ManualReviewStatus = "rejected"
+	ManualReviewStatusCancelled ManualReviewStatus = "cancelled"
+)
+
+type RuntimeStatus struct {
+	Enabled                bool     `json:"enabled"`
+	ConfigEnabled          bool     `json:"config_enabled"`
+	MasterEnabled          bool     `json:"master_enabled"`
+	EnforcementMode        string   `json:"enforcement_mode"`
+	LLMJudgeEnabled        bool     `json:"llm_judge_enabled"`
+	SnapshotReloadInterval string   `json:"snapshot_reload_interval"`
+	PublishGateTimeout     string   `json:"publish_gate_timeout"`
+	DictionaryVersion      int64    `json:"dictionary_version"`
+	EnabledDictionaries    []string `json:"enabled_dictionaries"`
+}
+
+type Violation struct {
+	ID             int64   `json:"id"`
+	RecordID       int64   `json:"record_id,omitempty"`
+	PlatformCode   *string `json:"platform_code,omitempty"`
+	Source         string  `json:"source"`
+	DictionaryCode *string `json:"dictionary_code,omitempty"`
+	DictionaryName *string `json:"dictionary_name,omitempty"`
+	TermPattern    *string `json:"term_pattern,omitempty"`
+	MatchedText    string  `json:"matched_text"`
+	StartOffset    int     `json:"start_offset"`
+	EndOffset      int     `json:"end_offset"`
+	DomPath        *string `json:"dom_path,omitempty"`
+	Level          string  `json:"level"`
+	Hint           *string `json:"hint,omitempty"`
+	ReferenceLaw   *string `json:"reference_law,omitempty"`
+}
+
+type CheckResult struct {
+	RecordID              int64              `json:"record_id,omitempty"`
+	Decision              GateDecision       `json:"decision"`
+	Passed                bool               `json:"passed"`
+	HighestLevel          *string            `json:"highest_level,omitempty"`
+	Violations            []Violation        `json:"violations"`
+	HitCount              int                `json:"hit_count"`
+	StoredHitCount        int                `json:"stored_hit_count"`
+	Truncated             bool               `json:"truncated"`
+	EnforcementMode       string             `json:"enforcement_mode"`
+	ContentHash           string             `json:"content_hash"`
+	PolicyFingerprint     string             `json:"policy_fingerprint"`
+	TargetPlatforms       []string           `json:"target_platforms"`
+	ManualReviewStatus    ManualReviewStatus `json:"manual_review_status"`
+	ManualReviewID        *int64             `json:"manual_review_id,omitempty"`
+	ManualReviewReason    *string            `json:"manual_review_reason,omitempty"`
+	ManualReviewDecidedAt *time.Time         `json:"manual_review_decided_at,omitempty"`
+	CheckedAt             time.Time          `json:"checked_at"`
+	DurationMS            int                `json:"duration_ms"`
+}
+
+type AckRecord struct {
+	ID                int64     `json:"id"`
+	CheckRecordID     int64     `json:"check_record_id"`
+	ArticleID         int64     `json:"article_id"`
+	ArticleVersionID  int64     `json:"article_version_id"`
+	ContentHash       string    `json:"content_hash"`
+	PolicyFingerprint string    `json:"policy_fingerprint"`
+	ExpiresAt         time.Time `json:"expires_at"`
+	CreatedAt         time.Time `json:"created_at"`
+}
+
+type ManualReview struct {
+	ID                int64              `json:"id"`
+	TenantID          int64              `json:"tenant_id"`
+	ArticleID         int64              `json:"article_id"`
+	ArticleVersionID  int64              `json:"article_version_id"`
+	CheckRecordID     *int64             `json:"check_record_id,omitempty"`
+	Status            ManualReviewStatus `json:"status"`
+	RequestedBy       int64              `json:"requested_by"`
+	RequestedAt       time.Time          `json:"requested_at"`
+	RequestNote       *string            `json:"request_note,omitempty"`
+	ReviewedBy        *int64             `json:"reviewed_by,omitempty"`
+	ReviewedAt        *time.Time         `json:"reviewed_at,omitempty"`
+	DecisionReason    *string            `json:"decision_reason,omitempty"`
+	CancelledBy       *int64             `json:"cancelled_by,omitempty"`
+	CancelledAt       *time.Time         `json:"cancelled_at,omitempty"`
+	CancelReason      *string            `json:"cancel_reason,omitempty"`
+	ViolationSummary  []Violation        `json:"violation_summary"`
+	OriginalPlatforms []string           `json:"original_target_platforms"`
+	ArticleTitle      *string            `json:"article_title,omitempty"`
+	ArticlePlaintext  *string            `json:"article_plaintext,omitempty"`
+	ApplicantName     *string            `json:"applicant_name,omitempty"`
+	TenantName        *string            `json:"tenant_name,omitempty"`
+}
diff --git a/server/internal/shared/config/config.go b/server/internal/shared/config/config.go
index 0a2374b..04449eb 100644
--- a/server/internal/shared/config/config.go
+++ b/server/internal/shared/config/config.go
@@ -7,6 +7,7 @@ import (
 	"net"
 	"net/url"
 	"os"
+	"strconv"
 	"strings"
 	"time"
 
@@ -34,6 +35,7 @@ type Config struct {
 	JWT                JWTConfig                `mapstructure:"jwt"`
 	Log                LogConfig                `mapstructure:"log"`
 	LLM                LLMConfig                `mapstructure:"llm"`
+	Compliance         ComplianceConfig         `mapstructure:"compliance"`
 	Retrieval          RetrievalConfig          `mapstructure:"retrieval"`
 	Generation         GenerationConfig         `mapstructure:"generation"`
 }
@@ -137,6 +139,12 @@ type RabbitMQConfig struct {
 	ImageAssetDLX                   string `mapstructure:"image_asset_dlx"`
 	ImageAssetDLQ                   string `mapstructure:"image_asset_dlq"`
 	ImageAssetDLQRouteKey           string `mapstructure:"image_asset_dlq_routing_key"`
+	ComplianceReviewExchange        string `mapstructure:"compliance_review_exchange"`
+	ComplianceReviewRoutingKey      string `mapstructure:"compliance_review_routing_key"`
+	ComplianceReviewQueue           string `mapstructure:"compliance_review_queue"`
+	ComplianceReviewDLX             string `mapstructure:"compliance_review_dlx"`
+	ComplianceReviewDLQ             string `mapstructure:"compliance_review_dlq"`
+	ComplianceReviewDLQRouteKey     string `mapstructure:"compliance_review_dlq_routing_key"`
 	ConsumerPrefetch                int    `mapstructure:"consumer_prefetch"`
 	PublishChannelPoolSize          int    `mapstructure:"publish_channel_pool_size"`
 }
@@ -282,6 +290,16 @@ type LLMConfig struct {
 	WebSearchLimit    int32         `mapstructure:"web_search_limit"`
 }
 
+type ComplianceConfig struct {
+	Enabled                 bool          `mapstructure:"enabled"`
+	LLMJudgeEnabled         bool          `mapstructure:"llm_judge_enabled"`
+	SnapshotReloadInterval  time.Duration `mapstructure:"snapshot_reload_interval"`
+	PublishGateTimeout      time.Duration `mapstructure:"publish_gate_timeout"`
+	ReviewWorkerConcurrency int           `mapstructure:"review_worker_concurrency"`
+	ReviewWorkerTimeout     time.Duration `mapstructure:"review_worker_timeout"`
+	ReviewMaxAttempts       int           `mapstructure:"review_max_attempts"`
+}
+
 type RetrievalConfig struct {
 	Provider           string        `mapstructure:"provider"`
 	BaseURL            string        `mapstructure:"base_url"`
@@ -356,6 +374,7 @@ func loadWithFiles(configPath string) (*Config, []string, error) {
 	normalizeMonitoringDispatchConfig(&cfg.MonitoringDispatch)
 	normalizeMembershipConfig(&cfg.Membership)
 	normalizeBrandLibraryConfig(&cfg.BrandLibrary)
+	NormalizeComplianceConfig(&cfg.Compliance)
 	NormalizeGenerationConfig(&cfg.Generation)
 
 	files := []string{configFile}
@@ -432,6 +451,10 @@ func applyConfigDefaults(settings map[string]any) {
 	if _, ok := cacheSettings["metrics_enabled"]; !ok {
 		cacheSettings["metrics_enabled"] = true
 	}
+	complianceSettings := ensureMapSetting(settings, "compliance")
+	if _, ok := complianceSettings["enabled"]; !ok {
+		complianceSettings["enabled"] = true
+	}
 }
 
 func ensureMapSetting(settings map[string]any, key string) map[string]any {
@@ -566,6 +589,27 @@ func NormalizeGenerationConfig(cfg *GenerationConfig) {
 	}
 }
 
+func NormalizeComplianceConfig(cfg *ComplianceConfig) {
+	if cfg == nil {
+		return
+	}
+	if cfg.SnapshotReloadInterval <= 0 {
+		cfg.SnapshotReloadInterval = 30 * time.Second
+	}
+	if cfg.PublishGateTimeout <= 0 {
+		cfg.PublishGateTimeout = 800 * time.Millisecond
+	}
+	if cfg.ReviewWorkerConcurrency <= 0 {
+		cfg.ReviewWorkerConcurrency = 1
+	}
+	if cfg.ReviewWorkerTimeout <= 0 {
+		cfg.ReviewWorkerTimeout = 45 * time.Second
+	}
+	if cfg.ReviewMaxAttempts <= 0 {
+		cfg.ReviewMaxAttempts = 3
+	}
+}
+
 func candidateConfigPaths(configPath string, local bool) []string {
 	trimmed := strings.TrimSpace(configPath)
 	if trimmed == "" {
@@ -628,6 +672,27 @@ func applyEnvOverrides(cfg *Config) {
 	if model, ok := lookupNonEmptyEnv("LLM_KNOWLEDGE_URL_MODEL"); ok {
 		cfg.LLM.KnowledgeURLModel = model
 	}
+	if enabled, ok := lookupBoolEnv("COMPLIANCE_ENABLED"); ok {
+		cfg.Compliance.Enabled = enabled
+	}
+	if enabled, ok := lookupBoolEnv("COMPLIANCE_LLM_ENABLED"); ok {
+		cfg.Compliance.LLMJudgeEnabled = enabled
+	}
+	if d, ok := lookupDurationEnv("COMPLIANCE_SNAPSHOT_RELOAD_INTERVAL"); ok {
+		cfg.Compliance.SnapshotReloadInterval = d
+	}
+	if d, ok := lookupDurationEnv("COMPLIANCE_PUBLISH_GATE_TIMEOUT"); ok {
+		cfg.Compliance.PublishGateTimeout = d
+	}
+	if n, ok := lookupIntEnv("COMPLIANCE_REVIEW_WORKER_CONCURRENCY"); ok {
+		cfg.Compliance.ReviewWorkerConcurrency = n
+	}
+	if d, ok := lookupDurationEnv("COMPLIANCE_REVIEW_WORKER_TIMEOUT"); ok {
+		cfg.Compliance.ReviewWorkerTimeout = d
+	}
+	if n, ok := lookupIntEnv("COMPLIANCE_REVIEW_MAX_ATTEMPTS"); ok {
+		cfg.Compliance.ReviewMaxAttempts = n
+	}
 	if apiKey, ok := lookupNonEmptyEnv("QDRANT_API_KEY"); ok {
 		cfg.Qdrant.APIKey = apiKey
 	}
@@ -832,6 +897,24 @@ func normalizeRabbitMQConfig(cfg *RabbitMQConfig) {
 	if strings.TrimSpace(cfg.ImageAssetDLQRouteKey) == "" {
 		cfg.ImageAssetDLQRouteKey = "image.asset.finalize.dlq"
 	}
+	if strings.TrimSpace(cfg.ComplianceReviewExchange) == "" {
+		cfg.ComplianceReviewExchange = "compliance.review"
+	}
+	if strings.TrimSpace(cfg.ComplianceReviewRoutingKey) == "" {
+		cfg.ComplianceReviewRoutingKey = "compliance.review.run"
+	}
+	if strings.TrimSpace(cfg.ComplianceReviewQueue) == "" {
+		cfg.ComplianceReviewQueue = "compliance.review.run"
+	}
+	if strings.TrimSpace(cfg.ComplianceReviewDLX) == "" {
+		cfg.ComplianceReviewDLX = "compliance.review.dlx"
+	}
+	if strings.TrimSpace(cfg.ComplianceReviewDLQ) == "" {
+		cfg.ComplianceReviewDLQ = "compliance.review.run.dlq"
+	}
+	if strings.TrimSpace(cfg.ComplianceReviewDLQRouteKey) == "" {
+		cfg.ComplianceReviewDLQRouteKey = "compliance.review.run.dlq"
+	}
 	if cfg.PublishChannelPoolSize <= 0 {
 		cfg.PublishChannelPoolSize = 16
 	}
@@ -1076,6 +1159,19 @@ func lookupDurationEnv(key string) (time.Duration, bool) {
 	return duration, true
 }
 
+func lookupIntEnv(key string) (int, bool) {
+	value, ok := lookupNonEmptyEnv(key)
+	if !ok {
+		return 0, false
+	}
+
+	number, err := strconv.Atoi(value)
+	if err != nil {
+		return 0, false
+	}
+	return number, true
+}
+
 func maxInt(value, fallback int) int {
 	if value < fallback {
 		return fallback
diff --git a/server/internal/shared/messaging/rabbitmq/client.go b/server/internal/shared/messaging/rabbitmq/client.go
index fea21c2..756115a 100644
--- a/server/internal/shared/messaging/rabbitmq/client.go
+++ b/server/internal/shared/messaging/rabbitmq/client.go
@@ -213,6 +213,10 @@ func (c *Client) PublishImageAssetTask(ctx context.Context, body []byte) error {
 	return c.publish(ctx, c.cfg.ImageAssetExchange, c.cfg.ImageAssetRoutingKey, body)
 }
 
+func (c *Client) PublishComplianceReviewTask(ctx context.Context, body []byte) error {
+	return c.publish(ctx, c.cfg.ComplianceReviewExchange, c.cfg.ComplianceReviewRoutingKey, body)
+}
+
 func (c *Client) publish(ctx context.Context, exchange, routingKey string, body []byte) error {
 	for attempt := 0; attempt < 2; attempt++ {
 		conn, ch, pooled, err := c.acquirePublishChannel()
@@ -303,6 +307,10 @@ func (c *Client) ConsumeImageAssetTask(consumerName string) (<-chan amqp.Deliver
 	return c.consume(consumerName, c.cfg.ImageAssetQueue)
 }
 
+func (c *Client) ConsumeComplianceReviewTask(consumerName string) (<-chan amqp.Delivery, *amqp.Channel, error) {
+	return c.consume(consumerName, c.cfg.ComplianceReviewQueue)
+}
+
 func (c *Client) consume(consumerName, queue string) (<-chan amqp.Delivery, *amqp.Channel, error) {
 	for attempt := 0; attempt < 2; attempt++ {
 		conn, ch, err := c.openChannel()
@@ -741,6 +749,18 @@ func (c *Client) ensureTopology(conn *amqp.Connection) error {
 		return err
 	}
 
+	if err := c.ensureWorkQueue(
+		ch,
+		c.cfg.ComplianceReviewExchange,
+		c.cfg.ComplianceReviewRoutingKey,
+		c.cfg.ComplianceReviewQueue,
+		c.cfg.ComplianceReviewDLX,
+		c.cfg.ComplianceReviewDLQ,
+		c.cfg.ComplianceReviewDLQRouteKey,
+	); err != nil {
+		return err
+	}
+
 	return nil
 }
 
diff --git a/server/internal/shared/swagger/descriptions.go b/server/internal/shared/swagger/descriptions.go
index 5159108..0337a0e 100644
--- a/server/internal/shared/swagger/descriptions.go
+++ b/server/internal/shared/swagger/descriptions.go
@@ -35,24 +35,24 @@ var routeDocs = map[string]routeDoc{
 	"POST /api/desktop/clients/revoke":    {"吊销客户端", "由桌面端调用，立即注销当前客户端凭证。"},
 
 	// --- Desktop：派单与拉取 ---
-	"GET /api/desktop/dispatch":               {"派单 WebSocket", "桌面客户端通过 WebSocket 长连接订阅派单事件，断线后自动重连。"},
-	"GET /api/desktop/accounts":               {"拉取账号列表（桌面）", "桌面客户端拉取本机绑定/可用的媒体账号，支持增量同步。"},
-	"GET /api/desktop/content/articles/:id":   {"拉取文章正文（桌面）", "桌面客户端在执行发布任务时拉取目标文章的最新内容。"},
-	"GET /api/desktop/content/assets/:token":  {"桌面端访问素材", "桌面客户端使用签名 token 拉取文章中的图片/附件。"},
-	"GET /api/desktop/publish-tasks":          {"拉取发布任务（桌面）", "桌面客户端分页查询当前账号需要执行的发布任务。"},
+	"GET /api/desktop/dispatch":                 {"派单 WebSocket", "桌面客户端通过 WebSocket 长连接订阅派单事件，断线后自动重连。"},
+	"GET /api/desktop/accounts":                 {"拉取账号列表（桌面）", "桌面客户端拉取本机绑定/可用的媒体账号，支持增量同步。"},
+	"GET /api/desktop/content/articles/:id":     {"拉取文章正文（桌面）", "桌面客户端在执行发布任务时拉取目标文章的最新内容。"},
+	"GET /api/desktop/content/assets/:token":    {"桌面端访问素材", "桌面客户端使用签名 token 拉取文章中的图片/附件。"},
+	"GET /api/desktop/publish-tasks":            {"拉取发布任务（桌面）", "桌面客户端分页查询当前账号需要执行的发布任务。"},
 	"POST /api/desktop/accounts/health-reports": {"上报账号健康状态", "桌面客户端定期上报媒体账号的登录态、风控信号等。"},
 
 	// --- Desktop：账号增删改 ---
-	"POST /api/desktop/accounts":         {"上报/绑定媒体账号", "桌面客户端登录媒体平台后，将账号信息上报到云端。"},
-	"PATCH /api/desktop/accounts/:id":    {"更新媒体账号", "桌面客户端更新已绑定的媒体账号字段（昵称、头像、Cookie 等）。"},
-	"DELETE /api/desktop/accounts/:id":   {"删除媒体账号（桌面）", "桌面客户端解绑账号，仅清理本地侧记录。"},
+	"POST /api/desktop/accounts":       {"上报/绑定媒体账号", "桌面客户端登录媒体平台后，将账号信息上报到云端。"},
+	"PATCH /api/desktop/accounts/:id":  {"更新媒体账号", "桌面客户端更新已绑定的媒体账号字段（昵称、头像、Cookie 等）。"},
+	"DELETE /api/desktop/accounts/:id": {"删除媒体账号（桌面）", "桌面客户端解绑账号，仅清理本地侧记录。"},
 
 	// --- Desktop：发布任务执行 ---
-	"POST /api/desktop/tasks/lease":         {"领取发布任务", "桌面客户端从队列领取一批可执行任务，原子加锁。"},
-	"POST /api/desktop/tasks/:id/lease":     {"续锁/重领任务", "对指定任务再次加锁，常用于异常重试场景。"},
-	"POST /api/desktop/tasks/:id/extend":    {"延长任务锁", "执行较慢时延长锁定时间，避免任务被其他客户端抢走。"},
-	"POST /api/desktop/tasks/:id/cancel":    {"取消任务（桌面）", "桌面客户端在执行失败/用户中止时通知服务端取消。"},
-	"POST /api/desktop/tasks/:id/result":    {"上报任务结果", "桌面客户端将发布结果（成功/失败/截图/链接）回传服务端。"},
+	"POST /api/desktop/tasks/lease":             {"领取发布任务", "桌面客户端从队列领取一批可执行任务，原子加锁。"},
+	"POST /api/desktop/tasks/:id/lease":         {"续锁/重领任务", "对指定任务再次加锁，常用于异常重试场景。"},
+	"POST /api/desktop/tasks/:id/extend":        {"延长任务锁", "执行较慢时延长锁定时间，避免任务被其他客户端抢走。"},
+	"POST /api/desktop/tasks/:id/cancel":        {"取消任务（桌面）", "桌面客户端在执行失败/用户中止时通知服务端取消。"},
+	"POST /api/desktop/tasks/:id/result":        {"上报任务结果", "桌面客户端将发布结果（成功/失败/截图/链接）回传服务端。"},
 	"POST /api/desktop/publish-tasks/:id/retry": {"重试发布任务", "对失败的发布任务发起重试。"},
 
 	// --- Desktop：监控采集任务 ---
@@ -63,15 +63,25 @@ var routeDocs = map[string]routeDoc{
 	"POST /api/desktop/monitoring/tasks/:id/cancel": {"取消监控任务", "桌面端主动取消正在执行的监控任务。"},
 
 	// --- Tenant：账号 / 任务统一视图（管理员视角） ---
-	"GET /api/tenant/accounts":                   {"租户媒体账号列表", "运营人员在管理后台查看本租户下所有媒体账号。"},
+	"GET /api/tenant/accounts":                     {"租户媒体账号列表", "运营人员在管理后台查看本租户下所有媒体账号。"},
 	"POST /api/tenant/accounts/:id/request-delete": {"申请删除媒体账号", "由后台发起异步删除，桌面端确认后真正解绑。"},
-	"POST /api/tenant/tasks/:id/reconcile":       {"对账发布任务", "管理后台对发布任务做对账：状态校正、结果回填。"},
-	"POST /api/tenant/tasks/:id/cancel":          {"取消发布任务（后台）", "管理员在后台取消还未派发或还在执行的发布任务。"},
-	"POST /api/tenant/publish-jobs":              {"批量创建发布任务", "为一批文章/账号批量生成发布任务，进入派发队列。"},
+	"POST /api/tenant/tasks/:id/reconcile":         {"对账发布任务", "管理后台对发布任务做对账：状态校正、结果回填。"},
+	"POST /api/tenant/tasks/:id/cancel":            {"取消发布任务（后台）", "管理员在后台取消还未派发或还在执行的发布任务。"},
+	"POST /api/tenant/publish-jobs":                {"批量创建发布任务", "为一批文章/账号批量生成发布任务，进入派发队列。"},
 
 	// --- Tenant：媒体 ---
 	"GET /api/tenant/media/platforms": {"媒体平台列表", "返回当前租户可用的媒体平台元数据（图标、能力开关等）。"},
 
+	// --- Tenant：内容合规 ---
+	"GET /api/tenant/compliance/runtime-status":                                 {"合规运行状态", "返回当前租户内容合规模块是否启用、执行模式、词库版本与检测预算。"},
+	"POST /api/tenant/compliance/check":                                         {"纯文本合规检测", "对标题/正文纯文本执行一次合规检测，返回聚合 check_record 与违规项。"},
+	"POST /api/tenant/compliance/check-records/:id/ack":                         {"确认合规风险", "对 advisory 检测结果进行一次性确认，返回发布时可消费的 ack_record_id。"},
+	"POST /api/tenant/articles/:id/compliance/check":                            {"文章合规检测", "对指定文章版本和目标平台集合执行一次合规检测。"},
+	"GET /api/tenant/articles/:id/compliance/latest":                            {"最新合规记录", "读取指定文章最近一次合规检测记录和违规明细。"},
+	"POST /api/tenant/articles/:id/compliance/manual-reviews":                   {"提交人工审阅", "将 block 检测结果提交运营人工审阅，审阅绑定到当前文章版本。"},
+	"GET /api/tenant/articles/:id/compliance/manual-reviews/latest":             {"最新人工审阅", "读取当前文章版本最近的人工审阅状态。"},
+	"POST /api/tenant/articles/:id/compliance/manual-reviews/:review_id/cancel": {"撤回人工审阅", "作者撤回仍处于 pending 状态的人工审阅申请。"},
+
 	// --- Tenant：工作台 ---
 	"GET /api/tenant/workspace/overview":        {"工作台概览", "首页顶部统计：文章数、发布数、KOL 订阅数等。"},
 	"GET /api/tenant/workspace/recent-articles": {"最近文章", "工作台展示最近创建/更新的若干篇文章。"},
@@ -81,28 +91,28 @@ var routeDocs = map[string]routeDoc{
 	"GET /api/tenant/workspace/kol-cards":       {"KOL 入口卡片", "工作台首页的 KOL 订阅推荐卡片。"},
 
 	// --- Tenant：模板 ---
-	"GET /api/tenant/templates":                                {"模板列表", "返回当前 Workspace 可见的内容模板。"},
-	"GET /api/tenant/templates/:id":                            {"模板详情", "返回模板字段定义、prompt 结构、示例等。"},
-	"POST /api/tenant/templates/:id/drafts":                    {"保存模板草稿", "保存用户在模板表单上的临时输入，便于稍后续填。"},
-	"POST /api/tenant/templates/:id/analyze-tasks":             {"创建主题分析任务", "基于用户输入创建主题分析异步任务。"},
-	"GET /api/tenant/templates/:id/analyze_task_result":        {"获取主题分析结果", "轮询主题分析任务结果，需要带上 task_id。"},
-	"POST /api/tenant/templates/:id/title-tasks":               {"创建标题生成任务", "基于主题创建标题候选生成任务。"},
-	"GET /api/tenant/templates/:id/gen_title_task_result":      {"获取标题生成结果", "轮询标题生成任务结果。"},
-	"POST /api/tenant/templates/:id/outline-tasks":             {"创建大纲生成任务", "基于选定标题创建大纲生成任务。"},
-	"GET /api/tenant/templates/:id/gen_outline_task_result":    {"获取大纲生成结果", "轮询大纲生成任务结果。"},
-	"POST /api/tenant/templates/:id/generate":                  {"生成正文", "基于模板入参直接生成完整文章并落库。"},
+	"GET /api/tenant/templates":                             {"模板列表", "返回当前 Workspace 可见的内容模板。"},
+	"GET /api/tenant/templates/:id":                         {"模板详情", "返回模板字段定义、prompt 结构、示例等。"},
+	"POST /api/tenant/templates/:id/drafts":                 {"保存模板草稿", "保存用户在模板表单上的临时输入，便于稍后续填。"},
+	"POST /api/tenant/templates/:id/analyze-tasks":          {"创建主题分析任务", "基于用户输入创建主题分析异步任务。"},
+	"GET /api/tenant/templates/:id/analyze_task_result":     {"获取主题分析结果", "轮询主题分析任务结果，需要带上 task_id。"},
+	"POST /api/tenant/templates/:id/title-tasks":            {"创建标题生成任务", "基于主题创建标题候选生成任务。"},
+	"GET /api/tenant/templates/:id/gen_title_task_result":   {"获取标题生成结果", "轮询标题生成任务结果。"},
+	"POST /api/tenant/templates/:id/outline-tasks":          {"创建大纲生成任务", "基于选定标题创建大纲生成任务。"},
+	"GET /api/tenant/templates/:id/gen_outline_task_result": {"获取大纲生成结果", "轮询大纲生成任务结果。"},
+	"POST /api/tenant/templates/:id/generate":               {"生成正文", "基于模板入参直接生成完整文章并落库。"},
 
 	// --- Tenant：KOL 管理（创作者侧） ---
 	"GET /api/tenant/kol/manage/profile":         {"KOL 主页信息", "获取当前用户作为 KOL 的资料卡。"},
 	"PUT /api/tenant/kol/manage/profile":         {"更新 KOL 主页", "更新 KOL 名称、简介、行业、联系方式等。"},
 	"POST /api/tenant/kol/manage/profile/avatar": {"上传 KOL 头像", "Multipart 上传 KOL 头像，返回访问 URL。"},
 
-	"GET /api/tenant/kol/manage/packages":                       {"KOL 套餐列表", "KOL 自己管理名下的套餐（产品包）列表。"},
-	"POST /api/tenant/kol/manage/packages":                      {"新建 KOL 套餐", "创建新的 KOL 套餐草稿。"},
-	"PUT /api/tenant/kol/manage/packages/:id":                   {"更新 KOL 套餐", "修改套餐基础信息（名称、价格、描述、封面等）。"},
-	"DELETE /api/tenant/kol/manage/packages/:id":                {"删除 KOL 套餐", "仅未发布或已归档的套餐可删除。"},
-	"PUT /api/tenant/kol/manage/packages/:id/publish":           {"发布 KOL 套餐", "把草稿态套餐发布到市场，对所有租户可见。"},
-	"PUT /api/tenant/kol/manage/packages/:id/archive":           {"下架 KOL 套餐", "将已发布的套餐归档，不再对外展示。"},
+	"GET /api/tenant/kol/manage/packages":                          {"KOL 套餐列表", "KOL 自己管理名下的套餐（产品包）列表。"},
+	"POST /api/tenant/kol/manage/packages":                         {"新建 KOL 套餐", "创建新的 KOL 套餐草稿。"},
+	"PUT /api/tenant/kol/manage/packages/:id":                      {"更新 KOL 套餐", "修改套餐基础信息（名称、价格、描述、封面等）。"},
+	"DELETE /api/tenant/kol/manage/packages/:id":                   {"删除 KOL 套餐", "仅未发布或已归档的套餐可删除。"},
+	"PUT /api/tenant/kol/manage/packages/:id/publish":              {"发布 KOL 套餐", "把草稿态套餐发布到市场，对所有租户可见。"},
+	"PUT /api/tenant/kol/manage/packages/:id/archive":              {"下架 KOL 套餐", "将已发布的套餐归档，不再对外展示。"},
 	"POST /api/tenant/kol/manage/packages/:id/self-subscription":   {"KOL 自订阅套餐", "KOL 自己订阅自己的套餐用于体验/测试。"},
 	"DELETE /api/tenant/kol/manage/packages/:id/self-subscription": {"取消 KOL 自订阅", "取消 KOL 对自己套餐的自订阅。"},
 
@@ -112,9 +122,9 @@ var routeDocs = map[string]routeDoc{
 	"PUT /api/tenant/kol/manage/prompts/:id":           {"更新 Prompt 元信息", "更新 Prompt 名称、说明、可见性等元数据。"},
 	"DELETE /api/tenant/kol/manage/prompts/:id":        {"删除 Prompt", "彻底删除该 Prompt 及其历史版本（若已发布且有订阅则禁止）。"},
 	"POST /api/tenant/kol/manage/prompts/:id/save":     {"保存 Prompt 草稿", "保存 Prompt 正文与变量，作为新的草稿版本。"},
-	"POST /api/tenant/kol/manage/prompts/:id/publish": {"发布 Prompt 版本", "将当前草稿发布为新版本，订阅者可使用。"},
-	"PUT /api/tenant/kol/manage/prompts/:id/activate": {"激活 Prompt", "把已发布的 Prompt 切换为当前激活版本。"},
-	"PUT /api/tenant/kol/manage/prompts/:id/archive":  {"归档 Prompt", "归档某个 Prompt，新订阅不再可见。"},
+	"POST /api/tenant/kol/manage/prompts/:id/publish":  {"发布 Prompt 版本", "将当前草稿发布为新版本，订阅者可使用。"},
+	"PUT /api/tenant/kol/manage/prompts/:id/activate":  {"激活 Prompt", "把已发布的 Prompt 切换为当前激活版本。"},
+	"PUT /api/tenant/kol/manage/prompts/:id/archive":   {"归档 Prompt", "归档某个 Prompt，新订阅不再可见。"},
 
 	"POST /api/tenant/kol/manage/assist":        {"KOL 创作助手（同步）", "基于上下文一次性生成 Prompt 优化建议。"},
 	"POST /api/tenant/kol/manage/assist/stream": {"KOL 创作助手（SSE 流式）", "通过 Server-Sent Events 流式返回创作助手输出。"},
@@ -126,63 +136,63 @@ var routeDocs = map[string]routeDoc{
 	"GET /api/tenant/kol/dashboard/trend":    {"KOL 看板趋势", "按日聚合的订阅、生成、收益趋势曲线。"},
 
 	// --- Tenant：KOL Marketplace（订阅方视角） ---
-	"GET /api/tenant/kol/marketplace/packages":               {"KOL 市场套餐列表", "面向订阅方的 KOL 市场列表，可按行业/关键词筛选。"},
-	"GET /api/tenant/kol/marketplace/packages/:id":           {"KOL 市场套餐详情", "套餐详情页：包含价格、Prompt 列表、案例等。"},
+	"GET /api/tenant/kol/marketplace/packages":                {"KOL 市场套餐列表", "面向订阅方的 KOL 市场列表，可按行业/关键词筛选。"},
+	"GET /api/tenant/kol/marketplace/packages/:id":            {"KOL 市场套餐详情", "套餐详情页：包含价格、Prompt 列表、案例等。"},
 	"POST /api/tenant/kol/marketplace/packages/:id/subscribe": {"订阅 KOL 套餐", "当前 Workspace 订阅指定套餐，进入计费/试用流程。"},
 
-	"GET /api/tenant/kol/subscriptions":                  {"我的 KOL 订阅", "返回当前 Workspace 已订阅的 KOL 套餐列表。"},
-	"GET /api/tenant/kol/subscription-prompts":           {"我的订阅 Prompt 列表", "已订阅套餐下可用的 Prompt 集合。"},
-	"GET /api/tenant/kol/subscription-prompts/:id/schema": {"订阅 Prompt 输入 Schema", "返回该 Prompt 的入参字段定义，用于前端渲染表单。"},
+	"GET /api/tenant/kol/subscriptions":                      {"我的 KOL 订阅", "返回当前 Workspace 已订阅的 KOL 套餐列表。"},
+	"GET /api/tenant/kol/subscription-prompts":               {"我的订阅 Prompt 列表", "已订阅套餐下可用的 Prompt 集合。"},
+	"GET /api/tenant/kol/subscription-prompts/:id/schema":    {"订阅 Prompt 输入 Schema", "返回该 Prompt 的入参字段定义，用于前端渲染表单。"},
 	"POST /api/tenant/kol/subscription-prompts/:id/generate": {"用订阅 Prompt 生成内容", "基于订阅 Prompt 生成一篇文章，自动扣 KOL 计费点数。"},
 
 	// --- Tenant：文章 ---
-	"GET /api/tenant/articles":                  {"文章列表", "支持按生成/发布状态、来源、关键词、时间等筛选。"},
-	"POST /api/tenant/articles":                 {"创建文章", "手动创建一篇空文章草稿。"},
-	"POST /api/tenant/articles/generate-from-rule": {"根据 Prompt 规则生成文章", "基于已配置的 Prompt 规则生成一篇文章。"},
-	"POST /api/tenant/articles/imitations/generate": {"仿写生成文章", "基于参考文链接/原文进行仿写并生成新文章。"},
-	"POST /api/tenant/articles/:id/images":         {"上传文章配图", "Multipart 上传文章正文使用的图片。"},
+	"GET /api/tenant/articles":                                {"文章列表", "支持按生成/发布状态、来源、关键词、时间等筛选。"},
+	"POST /api/tenant/articles":                               {"创建文章", "手动创建一篇空文章草稿。"},
+	"POST /api/tenant/articles/generate-from-rule":            {"根据 Prompt 规则生成文章", "基于已配置的 Prompt 规则生成一篇文章。"},
+	"POST /api/tenant/articles/imitations/generate":           {"仿写生成文章", "基于参考文链接/原文进行仿写并生成新文章。"},
+	"POST /api/tenant/articles/:id/images":                    {"上传文章配图", "Multipart 上传文章正文使用的图片。"},
 	"POST /api/tenant/articles/:id/selection-optimize/stream": {"选区优化（SSE 流式）", "针对用户选中的段落做润色/改写，结果流式返回。"},
-	"GET /api/tenant/articles/:id":                 {"文章详情", "返回文章的完整结构（标题、大纲、正文、版本号等）。"},
-	"PUT /api/tenant/articles/:id":                 {"保存文章", "全量更新文章内容（标题、正文、媒体附件等）。"},
-	"GET /api/tenant/articles/:id/stream":          {"文章生成 SSE 流", "订阅文章正文生成过程的流式输出。"},
-	"GET /api/tenant/articles/:id/versions":        {"文章版本历史", "返回该文章的历史版本列表，可用于回滚。"},
-	"GET /api/tenant/articles/:id/publish-records": {"文章发布记录", "返回该文章在各媒体平台的发布历史。"},
-	"DELETE /api/tenant/articles/:id":              {"删除文章", "软删除文章；可在回收站撤回（需带 undo 参数）。"},
+	"GET /api/tenant/articles/:id":                            {"文章详情", "返回文章的完整结构（标题、大纲、正文、版本号等）。"},
+	"PUT /api/tenant/articles/:id":                            {"保存文章", "全量更新文章内容（标题、正文、媒体附件等）。"},
+	"GET /api/tenant/articles/:id/stream":                     {"文章生成 SSE 流", "订阅文章正文生成过程的流式输出。"},
+	"GET /api/tenant/articles/:id/versions":                   {"文章版本历史", "返回该文章的历史版本列表，可用于回滚。"},
+	"GET /api/tenant/articles/:id/publish-records":            {"文章发布记录", "返回该文章在各媒体平台的发布历史。"},
+	"DELETE /api/tenant/articles/:id":                         {"删除文章", "软删除文章；可在回收站撤回（需带 undo 参数）。"},
 
 	// --- Tenant：品牌库 ---
-	"GET /api/tenant/brands":                {"品牌列表", "返回当前 Workspace 下的品牌列表。"},
+	"GET /api/tenant/brands":                 {"品牌列表", "返回当前 Workspace 下的品牌列表。"},
 	"GET /api/tenant/brands/library-summary": {"品牌库概览", "品牌、关键词、问题、竞品的总数与最近变更。"},
 	"POST /api/tenant/brands":                {"新建品牌", "创建一个新品牌。"},
 	"GET /api/tenant/brands/:id":             {"品牌详情", "返回品牌基础信息及统计。"},
 	"PUT /api/tenant/brands/:id":             {"更新品牌", "更新品牌名称、行业、官网等。"},
 	"DELETE /api/tenant/brands/:id":          {"删除品牌", "删除品牌及其下属关键词、问题、竞品。"},
 
-	"GET /api/tenant/brands/:id/keywords":             {"品牌关键词列表", "返回某品牌下的关键词。"},
-	"POST /api/tenant/brands/:id/keywords":            {"新增关键词", "为某品牌添加关键词。"},
-	"PUT /api/tenant/brands/:id/keywords/:kid":        {"更新关键词", "修改关键词文本/分组。"},
-	"DELETE /api/tenant/brands/:id/keywords/:kid":     {"删除关键词", "删除某条关键词。"},
+	"GET /api/tenant/brands/:id/keywords":         {"品牌关键词列表", "返回某品牌下的关键词。"},
+	"POST /api/tenant/brands/:id/keywords":        {"新增关键词", "为某品牌添加关键词。"},
+	"PUT /api/tenant/brands/:id/keywords/:kid":    {"更新关键词", "修改关键词文本/分组。"},
+	"DELETE /api/tenant/brands/:id/keywords/:kid": {"删除关键词", "删除某条关键词。"},
 
-	"GET /api/tenant/brands/:id/questions":            {"品牌问题列表", "返回品牌下的监控问题，可按 keyword_id 过滤。"},
-	"POST /api/tenant/brands/:id/questions":           {"新增监控问题", "为品牌添加一条 GEO 监控问题。"},
-	"PUT /api/tenant/brands/:id/questions/:qid":       {"更新监控问题", "修改问题文本或所属关键词。"},
-	"DELETE /api/tenant/brands/:id/questions/:qid":    {"删除监控问题", "删除某条监控问题。"},
+	"GET /api/tenant/brands/:id/questions":         {"品牌问题列表", "返回品牌下的监控问题，可按 keyword_id 过滤。"},
+	"POST /api/tenant/brands/:id/questions":        {"新增监控问题", "为品牌添加一条 GEO 监控问题。"},
+	"PUT /api/tenant/brands/:id/questions/:qid":    {"更新监控问题", "修改问题文本或所属关键词。"},
+	"DELETE /api/tenant/brands/:id/questions/:qid": {"删除监控问题", "删除某条监控问题。"},
 
-	"GET /api/tenant/brands/:id/competitors":          {"竞品列表", "返回品牌下登记的竞品。"},
-	"POST /api/tenant/brands/:id/competitors":         {"新增竞品", "为品牌添加竞品记录。"},
-	"PUT /api/tenant/brands/:id/competitors/:cid":     {"更新竞品", "修改竞品名称/官网/备注。"},
-	"DELETE /api/tenant/brands/:id/competitors/:cid":  {"删除竞品", "删除某条竞品记录。"},
+	"GET /api/tenant/brands/:id/competitors":         {"竞品列表", "返回品牌下登记的竞品。"},
+	"POST /api/tenant/brands/:id/competitors":        {"新增竞品", "为品牌添加竞品记录。"},
+	"PUT /api/tenant/brands/:id/competitors/:cid":    {"更新竞品", "修改竞品名称/官网/备注。"},
+	"DELETE /api/tenant/brands/:id/competitors/:cid": {"删除竞品", "删除某条竞品记录。"},
 
 	// --- Tenant：监控（GEO 仪表盘） ---
-	"GET /api/tenant/monitoring/dashboard/composite":                              {"监控仪表盘综合视图", "组合返回品牌曝光、引用率、问答覆盖等监控指标。"},
-	"GET /api/tenant/monitoring/citation-summary":                                  {"引用情况汇总", "按 AI 平台维度返回品牌的引用频次与变化。"},
-	"GET /api/tenant/monitoring/brands/:brand_id/questions/:question_id/detail":    {"问题级监控详情", "某问题在各 AI 平台的回答样本与引用拆解。"},
-	"POST /api/tenant/monitoring/brands/:brand_id/collect-now":                     {"立即触发采集", "对某品牌立即下发一次监控采集任务，跳过定时计划。"},
+	"GET /api/tenant/monitoring/dashboard/composite":                            {"监控仪表盘综合视图", "组合返回品牌曝光、引用率、问答覆盖等监控指标。"},
+	"GET /api/tenant/monitoring/citation-summary":                               {"引用情况汇总", "按 AI 平台维度返回品牌的引用频次与变化。"},
+	"GET /api/tenant/monitoring/brands/:brand_id/questions/:question_id/detail": {"问题级监控详情", "某问题在各 AI 平台的回答样本与引用拆解。"},
+	"POST /api/tenant/monitoring/brands/:brand_id/collect-now":                  {"立即触发采集", "对某品牌立即下发一次监控采集任务，跳过定时计划。"},
 
 	// --- Tenant：知识库 ---
-	"GET /api/tenant/knowledge/groups":           {"知识库分组列表", "返回当前 Workspace 的知识库分组。"},
-	"POST /api/tenant/knowledge/groups":          {"新建知识库分组", "创建新的知识库分组。"},
-	"PUT /api/tenant/knowledge/groups/:gid":      {"更新知识库分组", "重命名/移动分组。"},
-	"DELETE /api/tenant/knowledge/groups/:gid":   {"删除知识库分组", "删除分组及其下条目（按业务规则限制）。"},
+	"GET /api/tenant/knowledge/groups":         {"知识库分组列表", "返回当前 Workspace 的知识库分组。"},
+	"POST /api/tenant/knowledge/groups":        {"新建知识库分组", "创建新的知识库分组。"},
+	"PUT /api/tenant/knowledge/groups/:gid":    {"更新知识库分组", "重命名/移动分组。"},
+	"DELETE /api/tenant/knowledge/groups/:gid": {"删除知识库分组", "删除分组及其下条目（按业务规则限制）。"},
 
 	"GET /api/tenant/knowledge/items":            {"知识条目列表", "按分组返回知识库条目，可分页。"},
 	"GET /api/tenant/knowledge/items/:id":        {"知识条目详情", "返回条目的解析后正文、来源、向量化状态。"},
@@ -193,17 +203,17 @@ var routeDocs = map[string]routeDoc{
 	"DELETE /api/tenant/knowledge/items/:id":     {"删除知识条目", "彻底删除某条知识条目。"},
 
 	// --- Tenant：Prompt 规则 ---
-	"GET /api/tenant/prompt-rules":                  {"Prompt 规则列表", "查询 Prompt 规则，支持分组、状态、关键字筛选。"},
-	"GET /api/tenant/prompt-rules/simple":           {"Prompt 规则下拉项", "为下拉框/选择器提供精简结构（id + 名称）。"},
-	"POST /api/tenant/prompt-rules":                 {"新建 Prompt 规则", "创建新的 Prompt 生成规则。"},
-	"GET /api/tenant/prompt-rules/:id":              {"Prompt 规则详情", "返回规则完整配置（变量、模板、约束）。"},
-	"PUT /api/tenant/prompt-rules/:id":              {"更新 Prompt 规则", "修改规则配置。"},
-	"DELETE /api/tenant/prompt-rules/:id":           {"删除 Prompt 规则", "删除规则；若有定时任务在引用则禁止。"},
-	"PUT /api/tenant/prompt-rules/:id/status":       {"切换 Prompt 规则启停", "启用或禁用 Prompt 规则。"},
-	"GET /api/tenant/prompt-rules/groups":           {"Prompt 规则分组列表", "返回 Prompt 规则的分组用于左侧导航。"},
-	"POST /api/tenant/prompt-rules/groups":          {"新建分组", "创建 Prompt 规则分组。"},
-	"PUT /api/tenant/prompt-rules/groups/:gid":      {"更新分组", "重命名分组或调整顺序。"},
-	"DELETE /api/tenant/prompt-rules/groups/:gid":   {"删除分组", "删除空分组。"},
+	"GET /api/tenant/prompt-rules":                {"Prompt 规则列表", "查询 Prompt 规则，支持分组、状态、关键字筛选。"},
+	"GET /api/tenant/prompt-rules/simple":         {"Prompt 规则下拉项", "为下拉框/选择器提供精简结构（id + 名称）。"},
+	"POST /api/tenant/prompt-rules":               {"新建 Prompt 规则", "创建新的 Prompt 生成规则。"},
+	"GET /api/tenant/prompt-rules/:id":            {"Prompt 规则详情", "返回规则完整配置（变量、模板、约束）。"},
+	"PUT /api/tenant/prompt-rules/:id":            {"更新 Prompt 规则", "修改规则配置。"},
+	"DELETE /api/tenant/prompt-rules/:id":         {"删除 Prompt 规则", "删除规则；若有定时任务在引用则禁止。"},
+	"PUT /api/tenant/prompt-rules/:id/status":     {"切换 Prompt 规则启停", "启用或禁用 Prompt 规则。"},
+	"GET /api/tenant/prompt-rules/groups":         {"Prompt 规则分组列表", "返回 Prompt 规则的分组用于左侧导航。"},
+	"POST /api/tenant/prompt-rules/groups":        {"新建分组", "创建 Prompt 规则分组。"},
+	"PUT /api/tenant/prompt-rules/groups/:gid":    {"更新分组", "重命名分组或调整顺序。"},
+	"DELETE /api/tenant/prompt-rules/groups/:gid": {"删除分组", "删除空分组。"},
 
 	// --- Tenant：定时任务 ---
 	"GET /api/tenant/schedules":            {"定时任务列表", "查询定时生成任务，支持按 Prompt 规则、状态、时间筛选。"},
@@ -217,24 +227,24 @@ var routeDocs = map[string]routeDoc{
 	"GET /api/tenant/instant-tasks": {"即时任务列表", "查询用户手动触发的即时生成任务。"},
 
 	// --- Tenant：图片库 ---
-	"GET /api/tenant/images":                       {"图片列表", "分页查询图片，可按分组、关键词筛选。"},
-	"POST /api/tenant/images":                      {"上传图片", "Multipart 上传单张图片到指定分组。"},
-	"PUT /api/tenant/images/:id":                   {"更新图片", "重命名、移动分组或修改 alt。"},
-	"GET /api/tenant/images/:id/references":        {"图片引用情况", "查询图片被哪些文章/草稿引用。"},
-	"DELETE /api/tenant/images/:id":                {"删除图片", "软删除图片，可强制（force=1）跳过引用校验。"},
-	"GET /api/tenant/images/storage-usage":         {"图片存储用量", "返回当前 Workspace 已使用的图片存储与配额。"},
+	"GET /api/tenant/images":                {"图片列表", "分页查询图片，可按分组、关键词筛选。"},
+	"POST /api/tenant/images":               {"上传图片", "Multipart 上传单张图片到指定分组。"},
+	"PUT /api/tenant/images/:id":            {"更新图片", "重命名、移动分组或修改 alt。"},
+	"GET /api/tenant/images/:id/references": {"图片引用情况", "查询图片被哪些文章/草稿引用。"},
+	"DELETE /api/tenant/images/:id":         {"删除图片", "软删除图片，可强制（force=1）跳过引用校验。"},
+	"GET /api/tenant/images/storage-usage":  {"图片存储用量", "返回当前 Workspace 已使用的图片存储与配额。"},
 
-	"GET /api/tenant/images/folders":                  {"图片分组列表", "返回图片分组树。"},
-	"POST /api/tenant/images/folders":                 {"创建图片分组", "新建图片分组。"},
-	"PUT /api/tenant/images/folders/:id":              {"更新图片分组", "重命名或移动分组。"},
+	"GET /api/tenant/images/folders":                    {"图片分组列表", "返回图片分组树。"},
+	"POST /api/tenant/images/folders":                   {"创建图片分组", "新建图片分组。"},
+	"PUT /api/tenant/images/folders/:id":                {"更新图片分组", "重命名或移动分组。"},
 	"GET /api/tenant/images/folders/:id/delete-preview": {"删除分组预览", "返回删除该分组将影响的图片数量。"},
-	"DELETE /api/tenant/images/folders/:id":           {"删除图片分组", "删除空分组。"},
+	"DELETE /api/tenant/images/folders/:id":             {"删除图片分组", "删除空分组。"},
 
 	// --- Swagger 自身 ---
-	"GET /swagger":                {"Swagger 入口", "重定向至 /swagger/index.html。"},
-	"GET /swagger/":               {"Swagger 入口", "重定向至 /swagger/index.html。"},
-	"GET /swagger/index.html":     {"Swagger UI", "提供本服务的 Swagger UI 页面。"},
-	"GET /swagger/openapi.json":   {"OpenAPI 规范", "返回当前服务自动生成的 OpenAPI 3 文档。"},
+	"GET /swagger":              {"Swagger 入口", "重定向至 /swagger/index.html。"},
+	"GET /swagger/":             {"Swagger 入口", "重定向至 /swagger/index.html。"},
+	"GET /swagger/index.html":   {"Swagger UI", "提供本服务的 Swagger UI 页面。"},
+	"GET /swagger/openapi.json": {"OpenAPI 规范", "返回当前服务自动生成的 OpenAPI 3 文档。"},
 }
 
 // docFor returns the documented summary/description for a route, falling back
diff --git a/server/internal/tenant/app/article_service.go b/server/internal/tenant/app/article_service.go
index d57bc1d..9cd6740 100644
--- a/server/internal/tenant/app/article_service.go
+++ b/server/internal/tenant/app/article_service.go
@@ -146,6 +146,7 @@ type ArticleDetailResponse struct {
 	ID                     int64                  `json:"id"`
 	SourceType             string                 `json:"source_type"`
 	TemplateID             *int64                 `json:"template_id"`
+	CurrentVersionID       *int64                 `json:"current_version_id"`
 	TemplateName           *string                `json:"template_name"`
 	GenerationMode         *string                `json:"generation_mode"`
 	AutoPublishPlatforms   []string               `json:"auto_publish_platforms"`
@@ -401,6 +402,7 @@ func (s *ArticleService) loadArticleDetail(ctx context.Context, tenantID, articl
 
 	item.SourceType = dbSourceType
 	if currentVersionID != nil {
+		item.CurrentVersionID = currentVersionID
 		content, err := repository.LoadArticleVersionContent(ctx, s.pool, item.ID, *currentVersionID)
 		if err != nil {
 			return nil, false, response.ErrInternal(50011, "article_version_reconstruct_failed", "failed to reconstruct article version")
diff --git a/server/internal/tenant/app/desktop_task_service.go b/server/internal/tenant/app/desktop_task_service.go
index a3e1505..9abeb14 100644
--- a/server/internal/tenant/app/desktop_task_service.go
+++ b/server/internal/tenant/app/desktop_task_service.go
@@ -16,9 +16,12 @@ import (
 
 	"github.com/geo-platform/tenant-api/internal/shared/auth"
 	sharedcache "github.com/geo-platform/tenant-api/internal/shared/cache"
+	sharedcompliance "github.com/geo-platform/tenant-api/internal/shared/compliance"
+	"github.com/geo-platform/tenant-api/internal/shared/config"
 	"github.com/geo-platform/tenant-api/internal/shared/messaging/rabbitmq"
 	"github.com/geo-platform/tenant-api/internal/shared/response"
 	"github.com/geo-platform/tenant-api/internal/shared/stream"
+	tenantcompliance "github.com/geo-platform/tenant-api/internal/tenant/compliance"
 	"github.com/geo-platform/tenant-api/internal/tenant/repository"
 )
 
@@ -30,6 +33,7 @@ type DesktopTaskService struct {
 	redis          *goredis.Client
 	messaging      *rabbitmq.Client
 	logger         *zap.Logger
+	compliance     *tenantcompliance.Service
 }
 
 func NewDesktopTaskService(pool *pgxpool.Pool, monitoringPool *pgxpool.Pool, messaging *rabbitmq.Client, logger *zap.Logger) *DesktopTaskService {
@@ -39,9 +43,18 @@ func NewDesktopTaskService(pool *pgxpool.Pool, monitoringPool *pgxpool.Pool, mes
 		repo:           repository.NewDesktopTaskRepository(pool),
 		messaging:      messaging,
 		logger:         logger,
+		compliance: tenantcompliance.NewService(pool, config.NewStaticProvider(&config.Config{
+			Compliance: config.ComplianceConfig{Enabled: true},
+		}), logger).WithRabbitMQ(messaging),
 	}
 }
 
+func NewDesktopTaskServiceWithConfig(pool *pgxpool.Pool, monitoringPool *pgxpool.Pool, messaging *rabbitmq.Client, logger *zap.Logger, cfg config.Provider) *DesktopTaskService {
+	svc := NewDesktopTaskService(pool, monitoringPool, messaging, logger)
+	svc.compliance = tenantcompliance.NewService(pool, cfg, logger).WithRabbitMQ(messaging)
+	return svc
+}
+
 func (s *DesktopTaskService) WithCache(c sharedcache.Cache) *DesktopTaskService {
 	s.cache = c
 	return s
@@ -55,24 +68,28 @@ func (s *DesktopTaskService) WithRedis(redis *goredis.Client) *DesktopTaskServic
 }
 
 type DesktopTaskView struct {
-	ID              string          `json:"id"`
-	JobID           string          `json:"job_id"`
-	TenantID        int64           `json:"tenant_id"`
-	WorkspaceID     int64           `json:"workspace_id"`
-	TargetAccountID string          `json:"target_account_id"`
-	TargetClientID  string          `json:"target_client_id"`
-	Platform        string          `json:"platform"`
-	Kind            string          `json:"kind"`
-	Payload         json.RawMessage `json:"payload"`
-	Status          string          `json:"status"`
-	DedupKey        *string         `json:"dedup_key"`
-	ActiveAttemptID *string         `json:"active_attempt_id"`
-	LeaseExpiresAt  *time.Time      `json:"lease_expires_at"`
-	Attempts        int             `json:"attempts"`
-	Result          json.RawMessage `json:"result"`
-	Error           json.RawMessage `json:"error"`
-	CreatedAt       time.Time       `json:"created_at"`
-	UpdatedAt       time.Time       `json:"updated_at"`
+	ID                        string          `json:"id"`
+	JobID                     string          `json:"job_id"`
+	TenantID                  int64           `json:"tenant_id"`
+	WorkspaceID               int64           `json:"workspace_id"`
+	TargetAccountID           string          `json:"target_account_id"`
+	TargetClientID            string          `json:"target_client_id"`
+	Platform                  string          `json:"platform"`
+	Kind                      string          `json:"kind"`
+	Payload                   json.RawMessage `json:"payload"`
+	Status                    string          `json:"status"`
+	PublishJobStatus          *string         `json:"publish_job_status,omitempty"`
+	ComplianceBlockedRecordID *int64          `json:"compliance_blocked_record_id,omitempty"`
+	ComplianceBlockedAt       *time.Time      `json:"compliance_blocked_at,omitempty"`
+	ComplianceBlockedReason   *string         `json:"compliance_blocked_reason,omitempty"`
+	DedupKey                  *string         `json:"dedup_key"`
+	ActiveAttemptID           *string         `json:"active_attempt_id"`
+	LeaseExpiresAt            *time.Time      `json:"lease_expires_at"`
+	Attempts                  int             `json:"attempts"`
+	Result                    json.RawMessage `json:"result"`
+	Error                     json.RawMessage `json:"error"`
+	CreatedAt                 time.Time       `json:"created_at"`
+	UpdatedAt                 time.Time       `json:"updated_at"`
 }
 
 type LeaseDesktopTaskRequest struct {
@@ -144,6 +161,9 @@ func (s *DesktopTaskService) Lease(ctx context.Context, client *repository.Deskt
 	if err := s.recoverExpiredClientTasks(ctx, client); err != nil {
 		return nil, err
 	}
+	if err := s.recheckQueuedPublishTasksForClient(ctx, client); err != nil {
+		return nil, err
+	}
 
 	rawToken, tokenHash, err := newDesktopClientToken()
 	if err != nil {
@@ -230,6 +250,86 @@ func (s *DesktopTaskService) Lease(ctx context.Context, client *repository.Deskt
 	}, nil
 }
 
+func (s *DesktopTaskService) recheckQueuedPublishTasksForClient(ctx context.Context, client *repository.DesktopClient) error {
+	if s == nil || s.pool == nil || s.compliance == nil || client == nil {
+		return nil
+	}
+	rows, err := s.pool.Query(ctx, `
+		SELECT DISTINCT
+			j.desktop_id,
+			j.tenant_id,
+			j.workspace_id,
+			j.created_by_user_id,
+			j.article_id,
+			j.article_version_id,
+			COALESCE(array_agg(DISTINCT dt.platform_id) FILTER (WHERE dt.platform_id <> ''), '{}') AS platforms
+		FROM desktop_tasks dt
+		JOIN desktop_publish_jobs j ON j.desktop_id = dt.job_id
+		WHERE dt.target_client_id = $1
+		  AND dt.kind = 'publish'
+		  AND dt.status = 'queued'
+		  AND j.status = 'queued'
+		  AND j.article_id IS NOT NULL
+		  AND j.article_version_id IS NOT NULL
+		GROUP BY j.desktop_id, j.tenant_id, j.workspace_id, j.created_by_user_id, j.article_id, j.article_version_id
+		ORDER BY MIN(dt.created_at)
+		LIMIT 5
+	`, client.ID)
+	if err != nil {
+		return response.ErrInternal(50118, "desktop_publish_compliance_recheck_failed", "failed to load publish jobs for compliance recheck")
+	}
+	defer rows.Close()
+
+	type candidate struct {
+		JobID            uuid.UUID
+		TenantID         int64
+		WorkspaceID      int64
+		CreatedByUserID  int64
+		ArticleID        int64
+		ArticleVersionID int64
+		Platforms        []string
+	}
+	candidates := make([]candidate, 0)
+	for rows.Next() {
+		var item candidate
+		if scanErr := rows.Scan(&item.JobID, &item.TenantID, &item.WorkspaceID, &item.CreatedByUserID, &item.ArticleID, &item.ArticleVersionID, &item.Platforms); scanErr != nil {
+			return response.ErrInternal(50118, "desktop_publish_compliance_recheck_failed", "failed to scan publish job for compliance recheck")
+		}
+		if item.WorkspaceID == client.WorkspaceID && item.TenantID == client.TenantID {
+			candidates = append(candidates, item)
+		}
+	}
+	if err := rows.Err(); err != nil {
+		return response.ErrInternal(50118, "desktop_publish_compliance_recheck_failed", "failed to iterate publish jobs for compliance recheck")
+	}
+
+	for _, item := range candidates {
+		gate, gateErr := s.compliance.GateForPublish(ctx, tenantcompliance.GateForPublishRequest{
+			TenantID:         item.TenantID,
+			ArticleID:        item.ArticleID,
+			ArticleVersionID: item.ArticleVersionID,
+			ActorID:          item.CreatedByUserID,
+			TargetPlatforms:  item.Platforms,
+			TriggerSource:    "scheduler_recheck",
+		})
+		if gateErr != nil && gate != nil && gate.Decision == sharedcompliance.GateDecisionBlock {
+			if markErr := s.compliance.MarkPublishJobBlockedByCompliance(ctx, item.JobID, gate.Result); markErr != nil {
+				return markErr
+			}
+			continue
+		}
+		if gateErr != nil {
+			return response.ErrServiceUnavailable(41004, "compliance_engine_unavailable", "scheduled publish compliance recheck failed")
+		}
+		if gate != nil && gate.Decision == sharedcompliance.GateDecisionBlock {
+			if markErr := s.compliance.MarkPublishJobBlockedByCompliance(ctx, item.JobID, gate.Result); markErr != nil {
+				return markErr
+			}
+		}
+	}
+	return nil
+}
+
 const desktopTaskRepositoryReturningColumns = `
 	t.desktop_id,
 	t.job_id,
@@ -862,7 +962,11 @@ func (s *DesktopTaskService) listPublishTasksByStatuses(
 			t.result,
 			t.error,
 			t.created_at,
-			t.updated_at
+			t.updated_at,
+			j.status,
+			j.compliance_blocked_record_id,
+			j.compliance_blocked_at,
+			j.compliance_blocked_reason
 		FROM desktop_tasks AS t
 		JOIN desktop_publish_jobs AS j
 		  ON j.desktop_id = t.job_id
@@ -945,6 +1049,10 @@ func scanDesktopTaskRows(rows pgx.Rows) ([]DesktopTaskView, error) {
 			errorJSON       []byte
 			createdAt       time.Time
 			updatedAt       time.Time
+			jobStatus       string
+			blockedRecordID pgtype.Int8
+			blockedAt       pgtype.Timestamptz
+			blockedReason   pgtype.Text
 		)
 		if err := rows.Scan(
 			&desktopID,
@@ -965,6 +1073,10 @@ func scanDesktopTaskRows(rows pgx.Rows) ([]DesktopTaskView, error) {
 			&errorJSON,
 			&createdAt,
 			&updatedAt,
+			&jobStatus,
+			&blockedRecordID,
+			&blockedAt,
+			&blockedReason,
 		); err != nil {
 			return nil, response.ErrInternal(50110, "desktop_publish_tasks_scan_failed", "failed to scan desktop publish tasks")
 		}
@@ -990,25 +1102,53 @@ func scanDesktopTaskRows(rows pgx.Rows) ([]DesktopTaskView, error) {
 			leaseExpiresAtValue = &value
 		}
 
+		publishJobStatusText := strings.TrimSpace(jobStatus)
+		var publishJobStatus *string
+		if publishJobStatusText != "" {
+			publishJobStatus = &publishJobStatusText
+		}
+
+		var complianceBlockedRecordID *int64
+		if blockedRecordID.Valid {
+			value := blockedRecordID.Int64
+			complianceBlockedRecordID = &value
+		}
+
+		var complianceBlockedAt *time.Time
+		if blockedAt.Valid {
+			value := blockedAt.Time
+			complianceBlockedAt = &value
+		}
+
+		var complianceBlockedReason *string
+		if blockedReason.Valid {
+			value := blockedReason.String
+			complianceBlockedReason = &value
+		}
+
 		items = append(items, DesktopTaskView{
-			ID:              desktopID.String(),
-			JobID:           jobID.String(),
-			TenantID:        tenantID,
-			WorkspaceID:     workspaceID,
-			TargetAccountID: targetAccountID.String(),
-			TargetClientID:  targetClientID.String(),
-			Platform:        platform,
-			Kind:            kind,
-			Payload:         json.RawMessage(payload),
-			Status:          normalizeDesktopTaskTerminalStatus(status),
-			DedupKey:        dedupKeyText,
-			ActiveAttemptID: activeAttemptIDText,
-			LeaseExpiresAt:  leaseExpiresAtValue,
-			Attempts:        int(attempts),
-			Result:          json.RawMessage(resultJSON),
-			Error:           json.RawMessage(errorJSON),
-			CreatedAt:       createdAt,
-			UpdatedAt:       updatedAt,
+			ID:                        desktopID.String(),
+			JobID:                     jobID.String(),
+			TenantID:                  tenantID,
+			WorkspaceID:               workspaceID,
+			TargetAccountID:           targetAccountID.String(),
+			TargetClientID:            targetClientID.String(),
+			Platform:                  platform,
+			Kind:                      kind,
+			Payload:                   json.RawMessage(payload),
+			Status:                    normalizeDesktopTaskTerminalStatus(status),
+			PublishJobStatus:          publishJobStatus,
+			ComplianceBlockedRecordID: complianceBlockedRecordID,
+			ComplianceBlockedAt:       complianceBlockedAt,
+			ComplianceBlockedReason:   complianceBlockedReason,
+			DedupKey:                  dedupKeyText,
+			ActiveAttemptID:           activeAttemptIDText,
+			LeaseExpiresAt:            leaseExpiresAtValue,
+			Attempts:                  int(attempts),
+			Result:                    json.RawMessage(resultJSON),
+			Error:                     json.RawMessage(errorJSON),
+			CreatedAt:                 createdAt,
+			UpdatedAt:                 updatedAt,
 		})
 	}
 	if err := rows.Err(); err != nil {
diff --git a/server/internal/tenant/app/online_generation_replay_test.go b/server/internal/tenant/app/online_generation_replay_test.go
new file mode 100644
index 0000000..fdc02dd
--- /dev/null
+++ b/server/internal/tenant/app/online_generation_replay_test.go
@@ -0,0 +1,167 @@
+package app
+
+import (
+	"context"
+	"encoding/json"
+	"os"
+	"path/filepath"
+	"strings"
+	"testing"
+	"time"
+
+	sharedconfig "github.com/geo-platform/tenant-api/internal/shared/config"
+	"github.com/geo-platform/tenant-api/internal/shared/llm"
+	"github.com/geo-platform/tenant-api/internal/tenant/prompts"
+)
+
+type onlineGenerationFixture struct {
+	GenerationTasks []onlineGenerationTask `json:"generation_tasks"`
+}
+
+type onlineGenerationTask struct {
+	ID              int64                  `json:"id"`
+	ArticleID       int64                  `json:"article_id"`
+	InputParamsJSON map[string]interface{} `json:"input_params_json"`
+}
+
+type onlineKnowledgeFixture struct {
+	KnowledgeItems []onlineKnowledgeItem `json:"knowledge_items"`
+}
+
+type onlineKnowledgeItem struct {
+	ID              int64   `json:"id"`
+	GroupID         int64   `json:"group_id"`
+	Name            string  `json:"name"`
+	SourceType      string  `json:"source_type"`
+	SourceURI       *string `json:"source_uri"`
+	Status          string  `json:"status"`
+	ContentText     *string `json:"content_text"`
+	MarkdownContent *string `json:"markdown_content"`
+}
+
+func TestReplayOnlineFailedArticleGeneration(t *testing.T) {
+	if os.Getenv("RUN_ONLINE_GENERATION_REPLAY") != "1" {
+		t.Skip("set RUN_ONLINE_GENERATION_REPLAY=1 to replay online failed generation against Ark")
+	}
+
+	fixtureDir := strings.TrimSpace(os.Getenv("ONLINE_GENERATION_FIXTURE_DIR"))
+	if fixtureDir == "" {
+		fixtureDir = filepath.Clean("../../../../tmp/online-generation-fixtures")
+	}
+	taskID := int64(2)
+	if strings.TrimSpace(os.Getenv("ONLINE_GENERATION_TASK_ID")) == "1" {
+		taskID = 1
+	}
+
+	var fixture onlineGenerationFixture
+	readJSONFixture(t, filepath.Join(fixtureDir, "db-compact.json"), &fixture)
+	task := findOnlineGenerationTask(t, fixture.GenerationTasks, taskID)
+
+	var knowledge onlineKnowledgeFixture
+	readJSONFixture(t, filepath.Join(fixtureDir, "knowledge-compact.json"), &knowledge)
+
+	if promptsPath := strings.TrimSpace(os.Getenv("PROMPTS_CONFIG_FILE")); promptsPath == "" {
+		prompts.SetConfigFile(filepath.Clean("../../../configs/prompts.yml"))
+	}
+
+	knowledgePrompt := buildReplayKnowledgePrompt(task.InputParamsJSON, knowledge)
+	templateKey, templateName, promptTemplate := extractTemplateSnapshot(task.InputParamsJSON)
+	prompt := buildGenerationPrompt(templateKey, templateName, promptTemplate, task.InputParamsJSON, knowledgePrompt)
+	t.Logf("task_id=%d article_id=%d prompt_chars=%d knowledge_chars=%d", task.ID, task.ArticleID, len([]rune(prompt)), len([]rune(knowledgePrompt)))
+
+	cfg, err := sharedconfig.Load(filepath.Clean("../../../configs/config.yaml"))
+	if err != nil {
+		t.Fatalf("load config: %v", err)
+	}
+	client := llm.New(cfg.LLM)
+	if err := client.Validate(); err != nil {
+		t.Fatalf("validate llm: %v", err)
+	}
+
+	start := time.Now()
+	var outputChars int
+	result, err := client.Generate(context.Background(), llm.GenerateRequest{
+		Prompt:          prompt,
+		Timeout:         cfg.Generation.ArticleTimeout,
+		MaxOutputTokens: cfg.LLM.MaxOutputTokens,
+	}, func(delta string) {
+		outputChars += len([]rune(delta))
+	})
+	elapsed := time.Since(start)
+	if err != nil {
+		t.Fatalf("replay generation failed after %s with %d streamed chars: %v", elapsed.Round(time.Second), outputChars, err)
+	}
+	t.Logf("replay generation completed after %s with %d chars, model=%s", elapsed.Round(time.Second), len([]rune(result.Content)), result.Model)
+}
+
+func readJSONFixture(t *testing.T, path string, target interface{}) {
+	t.Helper()
+	data, err := os.ReadFile(path)
+	if err != nil {
+		t.Fatalf("read fixture %s: %v", path, err)
+	}
+	if err := json.Unmarshal(data, target); err != nil {
+		t.Fatalf("parse fixture %s: %v", path, err)
+	}
+}
+
+func findOnlineGenerationTask(t *testing.T, tasks []onlineGenerationTask, id int64) onlineGenerationTask {
+	t.Helper()
+	for _, task := range tasks {
+		if task.ID == id {
+			return task
+		}
+	}
+	t.Fatalf("task %d not found in fixture", id)
+	return onlineGenerationTask{}
+}
+
+func buildReplayKnowledgePrompt(params map[string]interface{}, fixture onlineKnowledgeFixture) string {
+	groupIDs := make(map[int64]struct{})
+	for _, id := range extractKnowledgeGroupIDs(params["knowledge_group_ids"]) {
+		groupIDs[id] = struct{}{}
+	}
+	if len(groupIDs) == 0 {
+		return ""
+	}
+
+	ctx := &KnowledgeContext{Snippets: []KnowledgeSnippet{}, PreciseFacts: []string{}}
+	seenFacts := make(map[string]struct{})
+	for _, item := range fixture.KnowledgeItems {
+		if strings.TrimSpace(item.Status) != "completed" {
+			continue
+		}
+		if _, ok := groupIDs[item.GroupID]; !ok {
+			continue
+		}
+		text := strings.TrimSpace(derefKnowledgeString(item.MarkdownContent))
+		if text == "" {
+			text = strings.TrimSpace(derefKnowledgeString(item.ContentText))
+		}
+		if text == "" {
+			continue
+		}
+		facts := extractKnowledgePreciseFacts(text)
+		for _, fact := range facts {
+			entry := strings.TrimSpace(fact)
+			if entry == "" {
+				continue
+			}
+			if _, exists := seenFacts[entry]; exists {
+				continue
+			}
+			seenFacts[entry] = struct{}{}
+			ctx.PreciseFacts = append(ctx.PreciseFacts, entry)
+		}
+		ctx.Snippets = append(ctx.Snippets, KnowledgeSnippet{
+			GroupID:         item.GroupID,
+			KnowledgeItemID: item.ID,
+			ItemName:        item.Name,
+			SourceType:      item.SourceType,
+			SourceURI:       item.SourceURI,
+			Text:            text,
+			PreciseFacts:    facts,
+		})
+	}
+	return (&KnowledgeService{}).RenderPromptSection(ctx)
+}
diff --git a/server/internal/tenant/app/publish_job_service.go b/server/internal/tenant/app/publish_job_service.go
index 4e02584..e43789e 100644
--- a/server/internal/tenant/app/publish_job_service.go
+++ b/server/internal/tenant/app/publish_job_service.go
@@ -2,6 +2,7 @@ package app
 
 import (
 	"context"
+	"encoding/json"
 	"errors"
 	"strings"
 	"time"
@@ -14,18 +15,22 @@ import (
 
 	"github.com/geo-platform/tenant-api/internal/shared/auth"
 	sharedcache "github.com/geo-platform/tenant-api/internal/shared/cache"
+	sharedcompliance "github.com/geo-platform/tenant-api/internal/shared/compliance"
+	"github.com/geo-platform/tenant-api/internal/shared/config"
 	"github.com/geo-platform/tenant-api/internal/shared/messaging/rabbitmq"
 	"github.com/geo-platform/tenant-api/internal/shared/response"
 	"github.com/geo-platform/tenant-api/internal/shared/stream"
+	tenantcompliance "github.com/geo-platform/tenant-api/internal/tenant/compliance"
 	"github.com/geo-platform/tenant-api/internal/tenant/repository"
 )
 
 type PublishJobService struct {
-	pool      *pgxpool.Pool
-	messaging *rabbitmq.Client
-	redis     *goredis.Client
-	logger    *zap.Logger
-	cache     sharedcache.Cache
+	pool       *pgxpool.Pool
+	messaging  *rabbitmq.Client
+	redis      *goredis.Client
+	logger     *zap.Logger
+	cache      sharedcache.Cache
+	compliance *tenantcompliance.Service
 }
 
 func NewPublishJobService(
@@ -33,12 +38,25 @@ func NewPublishJobService(
 	messaging *rabbitmq.Client,
 	redis *goredis.Client,
 	logger *zap.Logger,
+) *PublishJobService {
+	return NewPublishJobServiceWithConfig(pool, messaging, redis, logger, config.NewStaticProvider(&config.Config{
+		Compliance: config.ComplianceConfig{Enabled: true},
+	}))
+}
+
+func NewPublishJobServiceWithConfig(
+	pool *pgxpool.Pool,
+	messaging *rabbitmq.Client,
+	redis *goredis.Client,
+	logger *zap.Logger,
+	cfg config.Provider,
 ) *PublishJobService {
 	return &PublishJobService{
-		pool:      pool,
-		messaging: messaging,
-		redis:     redis,
-		logger:    logger,
+		pool:       pool,
+		messaging:  messaging,
+		redis:      redis,
+		logger:     logger,
+		compliance: tenantcompliance.NewService(pool, cfg, logger).WithRabbitMQ(messaging),
 	}
 }
 
@@ -52,10 +70,12 @@ type CreatePublishJobAccountRequest struct {
 }
 
 type CreatePublishJobRequest struct {
-	Title       string                           `json:"title" binding:"required"`
-	ContentRef  map[string]any                   `json:"content_ref" binding:"required"`
-	Accounts    []CreatePublishJobAccountRequest `json:"accounts" binding:"required,min=1"`
-	ScheduledAt *time.Time                       `json:"scheduled_at"`
+	Title            string                           `json:"title" binding:"required"`
+	ContentRef       map[string]any                   `json:"content_ref" binding:"required"`
+	Accounts         []CreatePublishJobAccountRequest `json:"accounts" binding:"required,min=1"`
+	ScheduledAt      *time.Time                       `json:"scheduled_at"`
+	ArticleVersionID *int64                           `json:"article_version_id,omitempty"`
+	AckRecordID      *int64                           `json:"ack_record_id,omitempty"`
 }
 
 type CreatePublishJobResponse struct {
@@ -110,6 +130,7 @@ func (s *PublishJobService) Create(ctx context.Context, actor auth.Actor, req Cr
 		targetClientID uuid.UUID
 	}
 	targets := make([]publishTarget, 0, len(req.Accounts))
+	targetPlatformSet := make(map[string]struct{})
 
 	for _, accountID := range requestedAccountIDs {
 		account, lookupErr := accountRepo.GetByDesktopID(ctx, accountID, actor.PrimaryWorkspaceID)
@@ -141,17 +162,51 @@ func (s *PublishJobService) Create(ctx context.Context, actor auth.Actor, req Cr
 			accountSeed:    accountSeed,
 			targetClientID: *targetClientID,
 		})
+		if platformID := strings.TrimSpace(accountSeed.PlatformID); platformID != "" {
+			targetPlatformSet[platformID] = struct{}{}
+		}
+	}
+
+	effectiveVersionID, err := s.compliance.ResolvePublishableVersion(ctx, actor.TenantID, articleID, req.ArticleVersionID)
+	if err != nil {
+		return nil, err
+	}
+	targetPlatforms := make([]string, 0, len(targetPlatformSet))
+	for platformID := range targetPlatformSet {
+		targetPlatforms = append(targetPlatforms, platformID)
+	}
+	gate, err := s.compliance.GateForPublish(ctx, tenantcompliance.GateForPublishRequest{
+		TenantID:         actor.TenantID,
+		ArticleID:        articleID,
+		ArticleVersionID: effectiveVersionID,
+		ActorID:          actor.UserID,
+		TargetPlatforms:  targetPlatforms,
+		AckRecordID:      req.AckRecordID,
+		TriggerSource:    "publish_gate",
+	})
+	if err != nil {
+		return nil, compliancePublishError(err, gate)
+	}
+	if gate != nil {
+		switch gate.Decision {
+		case sharedcompliance.GateDecisionBlock:
+			return nil, compliancePublishError(response.ErrConflict(41001, "compliance_blocked", "content compliance blocked this publish request"), gate)
+		case sharedcompliance.GateDecisionNeedsAck:
+			return nil, compliancePublishError(response.ErrConflict(41002, "compliance_needs_ack", "content compliance requires acknowledgement before publishing"), gate)
+		}
 	}
 
 	jobID := uuid.New()
 	job, err := taskRepo.CreatePublishJob(ctx, repository.CreateDesktopPublishJobParams{
-		DesktopID:       jobID,
-		TenantID:        actor.TenantID,
-		WorkspaceID:     actor.PrimaryWorkspaceID,
-		CreatedByUserID: actor.UserID,
-		Title:           req.Title,
-		ContentRef:      contentRefJSON,
-		ScheduledAt:     req.ScheduledAt,
+		DesktopID:        jobID,
+		TenantID:         actor.TenantID,
+		WorkspaceID:      actor.PrimaryWorkspaceID,
+		CreatedByUserID:  actor.UserID,
+		Title:            req.Title,
+		ContentRef:       contentRefJSON,
+		ScheduledAt:      req.ScheduledAt,
+		ArticleID:        &articleID,
+		ArticleVersionID: &effectiveVersionID,
 	})
 	if err != nil {
 		return nil, response.ErrInternal(50097, "desktop_publish_job_create_failed", "failed to create desktop publish job")
@@ -189,6 +244,7 @@ func (s *PublishJobService) Create(ctx context.Context, actor auth.Actor, req Cr
 			"account_id":          target.account.DesktopID.String(),
 			"platform":            target.account.Platform,
 			"article_id":          articleID,
+			"article_version_id":  effectiveVersionID,
 			"publish_batch_id":    publishBatchID,
 			"publish_record_id":   publishRecordID,
 			"platform_account_id": target.accountSeed.ID,
@@ -217,6 +273,27 @@ func (s *PublishJobService) Create(ctx context.Context, actor auth.Actor, req Cr
 		taskIDs = append(taskIDs, task.DesktopID.String())
 	}
 
+	if req.AckRecordID != nil {
+		if gate == nil || gate.Result == nil {
+			return nil, response.ErrBadRequest(41003, "compliance_ack_mismatch", "ack record cannot be consumed without a matching compliance result")
+		}
+		consumed, consumeErr := s.compliance.ConsumeAckTx(ctx, tx, *req.AckRecordID, tenantcompliance.ConsumeAckQuery{
+			TenantID:          actor.TenantID,
+			ArticleID:         articleID,
+			ArticleVersionID:  effectiveVersionID,
+			CheckRecordID:     gate.Result.RecordID,
+			ContentHash:       gate.Result.ContentHash,
+			PolicyFingerprint: gate.Result.PolicyFingerprint,
+			ConsumedByJobID:   jobID,
+		})
+		if consumeErr != nil {
+			return nil, response.ErrInternal(51004, "compliance_ack_lookup_failed", "failed to consume compliance ack")
+		}
+		if !consumed {
+			return nil, response.ErrBadRequest(41003, "compliance_ack_mismatch", "ack record is expired, consumed, or no longer matches this publish request")
+		}
+	}
+
 	if err := tx.Commit(ctx); err != nil {
 		return nil, response.ErrInternal(50100, "desktop_publish_job_commit_failed", "failed to commit desktop publish job")
 	}
@@ -267,6 +344,20 @@ func (s *PublishJobService) Create(ctx context.Context, actor auth.Actor, req Cr
 	}, nil
 }
 
+func compliancePublishError(err error, gate *tenantcompliance.GateOutcome) error {
+	appErr := response.Normalize(err)
+	if gate == nil || gate.Result == nil {
+		return appErr
+	}
+	detail, marshalErr := json.Marshal(gate.Result)
+	if marshalErr != nil {
+		return appErr
+	}
+	copyErr := *appErr
+	copyErr.Detail = string(detail)
+	return &copyErr
+}
+
 func (s *PublishJobService) RetryByDesktopTask(
 	ctx context.Context,
 	client *repository.DesktopClient,
diff --git a/server/internal/tenant/compliance/service.go b/server/internal/tenant/compliance/service.go
new file mode 100644
index 0000000..df64ecf
--- /dev/null
+++ b/server/internal/tenant/compliance/service.go
@@ -0,0 +1,2584 @@
+package compliance
+
+import (
+	"context"
+	"crypto/sha256"
+	"encoding/hex"
+	"encoding/json"
+	"errors"
+	"fmt"
+	"regexp"
+	"sort"
+	"strings"
+	"sync"
+	"time"
+	"unicode/utf8"
+
+	"github.com/google/uuid"
+	"github.com/jackc/pgx/v5"
+	"github.com/jackc/pgx/v5/pgconn"
+	"github.com/jackc/pgx/v5/pgtype"
+	"github.com/jackc/pgx/v5/pgxpool"
+	"go.uber.org/zap"
+
+	sharedcompliance "github.com/geo-platform/tenant-api/internal/shared/compliance"
+	"github.com/geo-platform/tenant-api/internal/shared/config"
+	sharedllm "github.com/geo-platform/tenant-api/internal/shared/llm"
+	"github.com/geo-platform/tenant-api/internal/shared/messaging/rabbitmq"
+	"github.com/geo-platform/tenant-api/internal/shared/response"
+	tenantrepo "github.com/geo-platform/tenant-api/internal/tenant/repository"
+)
+
+const (
+	triggerEditorManual       = "editor_manual"
+	triggerPublishGate        = "publish_gate"
+	triggerAPI                = "api"
+	triggerSchedulerRecheck   = "scheduler_recheck"
+	triggerManualReviewBypass = "manual_review_bypass"
+	globalPolicyCacheKey      = int64(0)
+
+	sourceDict  = "dict"
+	sourceRegex = "regex"
+
+	aiPointsQuotaType              = "ai_points"
+	aiUsageTypeComplianceLLMJudge  = "compliance_llm_judge"
+	aiResourceTypeComplianceReview = "compliance_review"
+
+	maxStoredViolations = 200
+	maxMatchedTextRunes = 80
+)
+
+type Service struct {
+	pool     *pgxpool.Pool
+	mq       *rabbitmq.Client
+	cfg      config.Provider
+	llm      sharedllm.Client
+	logger   *zap.Logger
+	policyMu sync.Mutex
+	policies map[int64]cachedPolicy
+
+	reviewCache sync.Map
+}
+
+type cachedPolicy struct {
+	policy  *policySnapshot
+	expires time.Time
+}
+
+func NewService(pool *pgxpool.Pool, cfg config.Provider, logger *zap.Logger) *Service {
+	return &Service{pool: pool, cfg: cfg, logger: logger, policies: make(map[int64]cachedPolicy)}
+}
+
+func (s *Service) WithRabbitMQ(mq *rabbitmq.Client) *Service {
+	if s != nil {
+		s.mq = mq
+	}
+	return s
+}
+
+func (s *Service) WithLLM(client sharedllm.Client) *Service {
+	if s != nil {
+		s.llm = client
+	}
+	return s
+}
+
+type GateForPublishRequest struct {
+	TenantID         int64
+	ArticleID        int64
+	ArticleVersionID int64
+	ActorID          int64
+	TargetPlatforms  []string
+	AckRecordID      *int64
+	TriggerSource    string
+}
+
+type CheckArticleRequest struct {
+	TenantID         int64
+	ArticleID        int64
+	ArticleVersionID *int64
+	ActorID          int64
+	Title            *string
+	Plaintext        *string
+	TargetPlatforms  []string
+	TriggerSource    string
+}
+
+type CheckPlainRequest struct {
+	TenantID        int64
+	ActorID         int64
+	Title           string
+	Plaintext       string
+	TargetPlatforms []string
+}
+
+type ConsumeAckQuery struct {
+	TenantID          int64
+	ArticleID         int64
+	ArticleVersionID  int64
+	CheckRecordID     int64
+	ContentHash       string
+	PolicyFingerprint string
+	ConsumedByJobID   uuid.UUID
+}
+
+type CreateManualReviewRequest struct {
+	TenantID      int64
+	ArticleID     int64
+	ActorID       int64
+	CheckRecordID int64
+	Note          string
+}
+
+type CancelManualReviewRequest struct {
+	TenantID  int64
+	ArticleID int64
+	ActorID   int64
+	ReviewID  int64
+	Reason    string
+}
+
+type ReviewJobMessage struct {
+	JobID            int64  `json:"job_id"`
+	MessageID        string `json:"message_id"`
+	TenantID         int64  `json:"tenant_id"`
+	ArticleID        int64  `json:"article_id"`
+	ArticleVersionID int64  `json:"article_version_id"`
+	CheckRecordID    int64  `json:"check_record_id"`
+}
+
+type GateOutcome struct {
+	Decision sharedcompliance.GateDecision
+	Result   *sharedcompliance.CheckResult
+}
+
+type articleVersionSnapshot struct {
+	ArticleID             int64
+	ArticleVersionID      int64
+	Title                 string
+	Plaintext             string
+	ManualReviewStatus    sharedcompliance.ManualReviewStatus
+	ManualReviewID        *int64
+	ManualReviewReason    *string
+	ManualReviewDecidedAt *time.Time
+}
+
+type policySnapshot struct {
+	LoadedAt             time.Time
+	MasterEnabled        bool
+	EnforcementMode      string
+	LLMJudgeEnabled      bool
+	Revision             int64
+	DictionaryVersionSum int64
+	EnabledDictionaries  []string
+	DictVersions         map[string]int
+	Terms                []termRule
+}
+
+type termRule struct {
+	DictionaryID         int64
+	DictionaryCode       string
+	DictionaryName       string
+	DictionaryVersion    int
+	PlatformScope        string
+	ApplicablePlatforms  []string
+	MatchType            string
+	Pattern              string
+	Level                string
+	Hint                 *string
+	ReferenceLaw         *string
+	compiledRegex        *regexp.Regexp
+	compiledRegexPattern string
+}
+
+type checkRecordRow struct {
+	ID                 int64
+	TenantID           int64
+	ArticleID          int64
+	ArticleVersionID   int64
+	TargetPlatforms    []string
+	ContentHash        string
+	PolicyFingerprint  string
+	EnforcementMode    string
+	HighestLevel       *string
+	Passed             bool
+	HitCount           int
+	StoredHitCount     int
+	Truncated          bool
+	ManualReviewStatus sharedcompliance.ManualReviewStatus
+	ManualReviewID     *int64
+	CheckedAt          time.Time
+	DurationMS         int
+}
+
+func (s *Service) RuntimeStatus(ctx context.Context, tenantID int64) (*sharedcompliance.RuntimeStatus, error) {
+	cfg := s.currentComplianceConfig()
+	if !cfg.Enabled {
+		return &sharedcompliance.RuntimeStatus{
+			Enabled:                false,
+			ConfigEnabled:          false,
+			MasterEnabled:          false,
+			EnforcementMode:        "disabled",
+			LLMJudgeEnabled:        false,
+			SnapshotReloadInterval: cfg.SnapshotReloadInterval.String(),
+			PublishGateTimeout:     cfg.PublishGateTimeout.String(),
+		}, nil
+	}
+	policy, err := s.resolvePolicy(ctx, tenantID)
+	if err != nil {
+		return nil, err
+	}
+	return &sharedcompliance.RuntimeStatus{
+		Enabled:                policy.MasterEnabled && policy.EnforcementMode != "disabled",
+		ConfigEnabled:          true,
+		MasterEnabled:          policy.MasterEnabled,
+		EnforcementMode:        policy.EnforcementMode,
+		LLMJudgeEnabled:        policy.LLMJudgeEnabled,
+		SnapshotReloadInterval: cfg.SnapshotReloadInterval.String(),
+		PublishGateTimeout:     cfg.PublishGateTimeout.String(),
+		DictionaryVersion:      policy.DictionaryVersionSum,
+		EnabledDictionaries:    append([]string(nil), policy.EnabledDictionaries...),
+	}, nil
+}
+
+func (s *Service) CheckPlain(ctx context.Context, req CheckPlainRequest) (*sharedcompliance.CheckResult, error) {
+	cfg := s.currentComplianceConfig()
+	if !cfg.Enabled {
+		return disabledCheckResult(req.TargetPlatforms), nil
+	}
+	policy, err := s.resolvePolicy(ctx, req.TenantID)
+	if err != nil {
+		return nil, err
+	}
+	return s.runAndPersist(ctx, runInput{
+		TenantID:        req.TenantID,
+		ActorID:         req.ActorID,
+		Title:           req.Title,
+		Plaintext:       req.Plaintext,
+		TargetPlatforms: req.TargetPlatforms,
+		TriggerSource:   triggerAPI,
+		Policy:          policy,
+	})
+}
+
+func (s *Service) CheckArticle(ctx context.Context, req CheckArticleRequest) (*sharedcompliance.CheckResult, error) {
+	cfg := s.currentComplianceConfig()
+	targets := normalizePlatforms(req.TargetPlatforms)
+	trigger := normalizeArticleCheckTrigger(req.TriggerSource)
+	if !cfg.Enabled && trigger != triggerEditorManual {
+		return disabledCheckResult(targets), nil
+	}
+	versionID, err := s.ResolvePublishableVersion(ctx, req.TenantID, req.ArticleID, req.ArticleVersionID)
+	if err != nil {
+		return nil, err
+	}
+	snapshot, err := s.loadArticleVersionSnapshot(ctx, req.TenantID, req.ArticleID, versionID)
+	if err != nil {
+		return nil, err
+	}
+	if snapshot.ManualReviewStatus == sharedcompliance.ManualReviewStatusPending ||
+		snapshot.ManualReviewStatus == sharedcompliance.ManualReviewStatusApproved ||
+		snapshot.ManualReviewStatus == sharedcompliance.ManualReviewStatusRejected {
+		if trigger != triggerEditorManual {
+			return manualReviewOnlyResult(snapshot, targets), nil
+		}
+	}
+	policy, err := s.resolvePolicy(ctx, req.TenantID)
+	if err != nil {
+		return nil, err
+	}
+	title := snapshot.Title
+	if req.Title != nil {
+		title = strings.TrimSpace(*req.Title)
+	}
+	plaintext := snapshot.Plaintext
+	if req.Plaintext != nil {
+		plaintext = strings.TrimSpace(*req.Plaintext)
+	}
+	if trigger == triggerEditorManual {
+		return s.runPreview(ctx, runInput{
+			TenantID:         req.TenantID,
+			ArticleID:        req.ArticleID,
+			ArticleVersionID: versionID,
+			ActorID:          req.ActorID,
+			Title:            title,
+			Plaintext:        plaintext,
+			TargetPlatforms:  targets,
+			TriggerSource:    trigger,
+			Policy:           editorPreviewPolicy(policy),
+			ManualStatus:     snapshot.ManualReviewStatus,
+			ManualReviewID:   snapshot.ManualReviewID,
+		})
+	}
+	return s.runAndPersist(ctx, runInput{
+		TenantID:         req.TenantID,
+		ArticleID:        req.ArticleID,
+		ArticleVersionID: versionID,
+		ActorID:          req.ActorID,
+		Title:            title,
+		Plaintext:        plaintext,
+		TargetPlatforms:  targets,
+		TriggerSource:    trigger,
+		Policy:           policy,
+		ManualStatus:     snapshot.ManualReviewStatus,
+		ManualReviewID:   snapshot.ManualReviewID,
+	})
+}
+
+func (s *Service) GateForPublish(ctx context.Context, req GateForPublishRequest) (*GateOutcome, error) {
+	cfg := s.currentComplianceConfig()
+	if !cfg.Enabled {
+		result := disabledCheckResult(req.TargetPlatforms)
+		result.Decision = sharedcompliance.GateDecisionPass
+		result.Passed = true
+		return &GateOutcome{Decision: sharedcompliance.GateDecisionPass, Result: result}, nil
+	}
+	req.TargetPlatforms = normalizePlatforms(req.TargetPlatforms)
+	trigger := strings.TrimSpace(req.TriggerSource)
+	if trigger == "" {
+		trigger = triggerPublishGate
+	}
+	req.TriggerSource = trigger
+
+	snapshot, err := s.loadArticleVersionSnapshot(ctx, req.TenantID, req.ArticleID, req.ArticleVersionID)
+	if err != nil {
+		if cached, ok := s.cachedManualReview(req.ArticleVersionID); ok && cached.ManualReviewStatus != sharedcompliance.ManualReviewStatusNone {
+			result := manualReviewOnlyResult(cached, req.TargetPlatforms)
+			return &GateOutcome{Decision: result.Decision, Result: result}, manualReviewGateError(cached)
+		}
+		return nil, response.ErrServiceUnavailable(41004, "compliance_engine_unavailable", "manual review status is unavailable")
+	}
+	s.cacheManualReview(snapshot)
+
+	switch snapshot.ManualReviewStatus {
+	case sharedcompliance.ManualReviewStatusPending:
+		result := manualReviewOnlyResult(snapshot, req.TargetPlatforms)
+		return &GateOutcome{Decision: sharedcompliance.GateDecisionBlock, Result: result}, response.ErrConflict(41007, "compliance_manual_review_pending", "current article version is waiting for manual review")
+	case sharedcompliance.ManualReviewStatusApproved:
+		result, err := s.createManualReviewBypassRecord(ctx, req, snapshot)
+		if err != nil {
+			return nil, err
+		}
+		return &GateOutcome{Decision: sharedcompliance.GateDecisionPass, Result: result}, nil
+	case sharedcompliance.ManualReviewStatusRejected:
+		result := manualReviewOnlyResult(snapshot, req.TargetPlatforms)
+		return &GateOutcome{Decision: sharedcompliance.GateDecisionBlock, Result: result}, response.ErrConflict(41006, "compliance_manual_review_rejected", "current article version was rejected by manual review")
+	}
+
+	policy, err := s.resolvePolicy(ctx, req.TenantID)
+	if err != nil {
+		return nil, err
+	}
+	if !policy.MasterEnabled || policy.EnforcementMode == "disabled" {
+		result := disabledCheckResult(req.TargetPlatforms)
+		result.EnforcementMode = policy.EnforcementMode
+		result.Passed = true
+		result.Decision = sharedcompliance.GateDecisionPass
+		return &GateOutcome{Decision: sharedcompliance.GateDecisionPass, Result: result}, nil
+	}
+	if req.AckRecordID != nil {
+		result, err := s.validateAckForPublish(ctx, req, policy)
+		if err != nil {
+			return nil, err
+		}
+		return &GateOutcome{Decision: sharedcompliance.GateDecisionPass, Result: result}, nil
+	}
+	result, err := s.runAndPersist(ctx, runInput{
+		TenantID:         req.TenantID,
+		ArticleID:        req.ArticleID,
+		ArticleVersionID: req.ArticleVersionID,
+		ActorID:          req.ActorID,
+		Title:            snapshot.Title,
+		Plaintext:        snapshot.Plaintext,
+		TargetPlatforms:  req.TargetPlatforms,
+		TriggerSource:    trigger,
+		Policy:           policy,
+		ManualStatus:     snapshot.ManualReviewStatus,
+		ManualReviewID:   snapshot.ManualReviewID,
+	})
+	if err != nil {
+		if policy.EnforcementMode == "mandatory" {
+			return nil, response.ErrServiceUnavailable(41004, "compliance_engine_unavailable", "compliance gate failed closed")
+		}
+		return &GateOutcome{Decision: sharedcompliance.GateDecisionPass, Result: disabledCheckResult(req.TargetPlatforms)}, nil
+	}
+	return &GateOutcome{Decision: result.Decision, Result: result}, nil
+}
+
+func (s *Service) ResolvePublishableVersion(ctx context.Context, tenantID, articleID int64, requested *int64) (int64, error) {
+	if requested != nil && *requested > 0 {
+		var id int64
+		err := s.pool.QueryRow(ctx, `
+			SELECT av.id
+			FROM article_versions av
+			JOIN articles a ON a.id = av.article_id
+			WHERE av.id = $1
+			  AND av.article_id = $2
+			  AND a.tenant_id = $3
+			  AND a.deleted_at IS NULL
+		`, *requested, articleID, tenantID).Scan(&id)
+		if err != nil {
+			if errors.Is(err, pgx.ErrNoRows) {
+				return 0, response.ErrBadRequest(41005, "invalid_article_version", "article_version_id does not belong to this article")
+			}
+			return 0, response.ErrInternal(50010, "query_failed", "failed to validate article version")
+		}
+		return id, nil
+	}
+	var versionValue pgtype.Int8
+	err := s.pool.QueryRow(ctx, `
+		SELECT current_version_id
+		FROM articles
+		WHERE id = $1 AND tenant_id = $2 AND deleted_at IS NULL
+	`, articleID, tenantID).Scan(&versionValue)
+	if err != nil {
+		if errors.Is(err, pgx.ErrNoRows) {
+			return 0, response.ErrNotFound(40411, "article_not_found", "article not found")
+		}
+		return 0, response.ErrInternal(50010, "query_failed", "failed to resolve current article version")
+	}
+	if !versionValue.Valid || versionValue.Int64 <= 0 {
+		return 0, response.ErrBadRequest(41005, "invalid_article_version", "article has no publishable version")
+	}
+	return versionValue.Int64, nil
+}
+
+type runInput struct {
+	TenantID         int64
+	ArticleID        int64
+	ArticleVersionID int64
+	ActorID          int64
+	Title            string
+	Plaintext        string
+	TargetPlatforms  []string
+	TriggerSource    string
+	Policy           *policySnapshot
+	ManualStatus     sharedcompliance.ManualReviewStatus
+	ManualReviewID   *int64
+}
+
+func (s *Service) runAndPersist(ctx context.Context, input runInput) (*sharedcompliance.CheckResult, error) {
+	checkResult, violations, err := s.runCheck(input)
+	if err != nil {
+		return nil, err
+	}
+
+	persistedResult, err := s.insertCheckRecord(ctx, input, checkRecordRow{
+		TenantID:           input.TenantID,
+		ArticleID:          input.ArticleID,
+		ArticleVersionID:   input.ArticleVersionID,
+		TargetPlatforms:    checkResult.TargetPlatforms,
+		ContentHash:        checkResult.ContentHash,
+		PolicyFingerprint:  checkResult.PolicyFingerprint,
+		EnforcementMode:    checkResult.EnforcementMode,
+		HighestLevel:       checkResult.HighestLevel,
+		Passed:             checkResult.Passed,
+		HitCount:           checkResult.HitCount,
+		StoredHitCount:     checkResult.StoredHitCount,
+		Truncated:          checkResult.Truncated,
+		ManualReviewStatus: checkResult.ManualReviewStatus,
+		ManualReviewID:     checkResult.ManualReviewID,
+		CheckedAt:          checkResult.CheckedAt,
+		DurationMS:         checkResult.DurationMS,
+	}, violations, checkResult.Decision)
+	if err != nil {
+		return nil, err
+	}
+	if input.Policy.LLMJudgeEnabled && input.ArticleID > 0 && input.ArticleVersionID > 0 && persistedResult.RecordID > 0 {
+		s.enqueueLLMReview(ctx, input, persistedResult.RecordID)
+	}
+	return persistedResult, nil
+}
+
+func (s *Service) runPreview(ctx context.Context, input runInput) (*sharedcompliance.CheckResult, error) {
+	result, _, err := s.runCheck(input)
+	return result, err
+}
+
+func (s *Service) runCheck(input runInput) (*sharedcompliance.CheckResult, []sharedcompliance.Violation, error) {
+	start := time.Now()
+	if input.Policy == nil {
+		return nil, nil, response.ErrServiceUnavailable(41004, "compliance_engine_unavailable", "compliance policy is unavailable")
+	}
+	input.TargetPlatforms = normalizePlatforms(input.TargetPlatforms)
+	plaintext := strings.TrimSpace(input.Plaintext)
+	title := strings.TrimSpace(input.Title)
+	contentHash := contentHash(title, plaintext)
+	fingerprint := policyFingerprint(input.Policy, input.TargetPlatforms)
+	violations := matchViolations(input.Policy, input.TenantID, input.TargetPlatforms, title+"\n"+plaintext)
+	highest := highestViolationLevel(violations)
+	hitCount := len(violations)
+	truncated := false
+	if len(violations) > maxStoredViolations {
+		violations = violations[:maxStoredViolations]
+		truncated = true
+	}
+	decision := decide(input.Policy.EnforcementMode, highest, hitCount)
+	passed := decision == sharedcompliance.GateDecisionPass
+	durationMS := int(time.Since(start).Milliseconds())
+	if input.ManualStatus == "" {
+		input.ManualStatus = sharedcompliance.ManualReviewStatusNone
+	}
+
+	result := &sharedcompliance.CheckResult{
+		Decision:           decision,
+		Passed:             passed,
+		HighestLevel:       highest,
+		Violations:         violations,
+		HitCount:           hitCount,
+		StoredHitCount:     len(violations),
+		Truncated:          truncated,
+		EnforcementMode:    input.Policy.EnforcementMode,
+		ContentHash:        contentHash,
+		PolicyFingerprint:  fingerprint,
+		TargetPlatforms:    input.TargetPlatforms,
+		ManualReviewStatus: input.ManualStatus,
+		ManualReviewID:     input.ManualReviewID,
+		CheckedAt:          time.Now().UTC(),
+		DurationMS:         durationMS,
+	}
+	if input.TriggerSource == triggerEditorManual {
+		result.StoredHitCount = 0
+	}
+	return result, violations, nil
+}
+
+func (s *Service) insertCheckRecord(ctx context.Context, input runInput, record checkRecordRow, violations []sharedcompliance.Violation, decision sharedcompliance.GateDecision) (*sharedcompliance.CheckResult, error) {
+	dictVersions, _ := json.Marshal(recordDictVersions(input.Policy))
+	var articleID any
+	if record.ArticleID > 0 {
+		articleID = &record.ArticleID
+	}
+	var articleVersionID any
+	if record.ArticleVersionID > 0 {
+		articleVersionID = &record.ArticleVersionID
+	}
+	var checkedBy any
+	if input.ActorID > 0 {
+		checkedBy = &input.ActorID
+	}
+	var highest any
+	if record.HighestLevel != nil {
+		highest = *record.HighestLevel
+	}
+	err := s.pool.QueryRow(ctx, `
+		INSERT INTO compliance_check_records (
+			tenant_id,
+			article_id,
+			article_version_id,
+			target_platforms,
+			content_hash,
+			policy_fingerprint,
+			trigger_source,
+			enforcement_mode,
+			highest_level,
+			passed,
+			hit_count,
+			stored_hit_count,
+			truncated,
+			dict_versions,
+			llm_used,
+			duration_ms,
+			checked_by,
+			manual_review_status,
+			manual_review_id
+		)
+		VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9,$10,$11,$12,$13,$14,FALSE,$15,$16,$17,$18)
+		RETURNING id, checked_at
+	`,
+		record.TenantID,
+		articleID,
+		articleVersionID,
+		record.TargetPlatforms,
+		record.ContentHash,
+		record.PolicyFingerprint,
+		input.TriggerSource,
+		record.EnforcementMode,
+		highest,
+		record.Passed,
+		record.HitCount,
+		record.StoredHitCount,
+		record.Truncated,
+		dictVersions,
+		record.DurationMS,
+		checkedBy,
+		string(record.ManualReviewStatus),
+		int64PtrAny(record.ManualReviewID),
+	).Scan(&record.ID, &record.CheckedAt)
+	if err != nil {
+		return nil, response.ErrInternal(51001, "compliance_check_record_create_failed", "failed to create compliance check record")
+	}
+	for i := range violations {
+		violations[i].RecordID = record.ID
+		id, err := s.insertViolation(ctx, record.ID, record.TenantID, violations[i])
+		if err != nil {
+			return nil, err
+		}
+		violations[i].ID = id
+	}
+	return checkResultFromRecord(record, violations, decision), nil
+}
+
+func (s *Service) insertViolation(ctx context.Context, recordID, tenantID int64, v sharedcompliance.Violation) (int64, error) {
+	var id int64
+	err := s.pool.QueryRow(ctx, `
+		INSERT INTO compliance_violations (
+			record_id,
+			tenant_id,
+			platform_code,
+			source,
+			dictionary_code,
+			dictionary_name,
+			term_pattern,
+			matched_text,
+			start_offset,
+			end_offset,
+			dom_path,
+			level,
+			hint,
+			reference_law
+		)
+		VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9,$10,$11,$12,$13,$14)
+		RETURNING id
+	`,
+		recordID,
+		tenantID,
+		v.PlatformCode,
+		v.Source,
+		v.DictionaryCode,
+		v.DictionaryName,
+		v.TermPattern,
+		truncateRunes(v.MatchedText, maxMatchedTextRunes),
+		v.StartOffset,
+		v.EndOffset,
+		v.DomPath,
+		v.Level,
+		v.Hint,
+		v.ReferenceLaw,
+	).Scan(&id)
+	if err != nil {
+		return 0, response.ErrInternal(51002, "compliance_violation_create_failed", "failed to create compliance violation")
+	}
+	return id, nil
+}
+
+func (s *Service) CreateAck(ctx context.Context, tenantID, checkRecordID, actorID int64, acknowledgedViolationIDs []int64) (*sharedcompliance.AckRecord, error) {
+	record, err := s.loadCheckRecord(ctx, tenantID, checkRecordID)
+	if err != nil {
+		return nil, err
+	}
+	if record.ArticleID <= 0 || record.ArticleVersionID <= 0 {
+		return nil, response.ErrBadRequest(41003, "compliance_ack_mismatch", "check record is not bound to an article version")
+	}
+	violations, err := s.loadViolations(ctx, tenantID, checkRecordID)
+	if err != nil {
+		return nil, err
+	}
+	required := make([]int64, 0, len(violations))
+	for _, violation := range violations {
+		if record.EnforcementMode == "mandatory" && violation.Level == "block" {
+			return nil, response.ErrConflict(41001, "compliance_blocked", "blocked violations cannot be acknowledged")
+		}
+		required = append(required, violation.ID)
+	}
+	if !sameInt64Set(required, acknowledgedViolationIDs) {
+		return nil, response.ErrBadRequest(41003, "compliance_ack_mismatch", "acknowledged_violation_ids must cover every acknowledged violation")
+	}
+	if len(required) == 0 {
+		return nil, response.ErrBadRequest(41003, "compliance_ack_mismatch", "there are no violations to acknowledge")
+	}
+	tx, err := s.pool.Begin(ctx)
+	if err != nil {
+		return nil, response.ErrInternal(51003, "compliance_ack_create_failed", "failed to begin compliance ack transaction")
+	}
+	defer rollbackTx(tx)
+	expiresAt := time.Now().UTC().Add(24 * time.Hour)
+	var ack sharedcompliance.AckRecord
+	err = tx.QueryRow(ctx, `
+		INSERT INTO compliance_ack_records (
+			tenant_id,
+			article_id,
+			article_version_id,
+			check_record_id,
+			content_hash,
+			policy_fingerprint,
+			acknowledged_by,
+			ack_violation_ids,
+			expires_at
+		)
+		VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9)
+		RETURNING id, check_record_id, article_id, article_version_id, content_hash, policy_fingerprint, expires_at, created_at
+	`,
+		tenantID,
+		record.ArticleID,
+		record.ArticleVersionID,
+		record.ID,
+		record.ContentHash,
+		record.PolicyFingerprint,
+		actorID,
+		required,
+		expiresAt,
+	).Scan(&ack.ID, &ack.CheckRecordID, &ack.ArticleID, &ack.ArticleVersionID, &ack.ContentHash, &ack.PolicyFingerprint, &ack.ExpiresAt, &ack.CreatedAt)
+	if err != nil {
+		return nil, response.ErrInternal(51003, "compliance_ack_create_failed", "failed to create compliance ack")
+	}
+	if _, err := tx.Exec(ctx, `
+		UPDATE compliance_violations
+		SET acknowledged_in_ack_id = $1
+		WHERE record_id = $2 AND tenant_id = $3 AND id = ANY($4)
+	`, ack.ID, record.ID, tenantID, required); err != nil {
+		return nil, response.ErrInternal(51003, "compliance_ack_create_failed", "failed to mark acknowledged violations")
+	}
+	if err := tx.Commit(ctx); err != nil {
+		return nil, response.ErrInternal(51003, "compliance_ack_create_failed", "failed to commit compliance ack")
+	}
+	return &ack, nil
+}
+
+func (s *Service) ConsumeAckTx(ctx context.Context, tx pgx.Tx, ackRecordID int64, q ConsumeAckQuery) (bool, error) {
+	if tx == nil {
+		return false, errors.New("tx is nil")
+	}
+	tag, err := tx.Exec(ctx, `
+		UPDATE compliance_ack_records
+		SET consumed_at = NOW(), consumed_by_job_id = $1
+		WHERE id = $2
+		  AND tenant_id = $3
+		  AND article_id = $4
+		  AND article_version_id = $5
+		  AND check_record_id = $6
+		  AND content_hash = $7
+		  AND policy_fingerprint = $8
+		  AND consumed_at IS NULL
+		  AND expires_at > NOW()
+	`,
+		q.ConsumedByJobID,
+		ackRecordID,
+		q.TenantID,
+		q.ArticleID,
+		q.ArticleVersionID,
+		q.CheckRecordID,
+		q.ContentHash,
+		q.PolicyFingerprint,
+	)
+	if err != nil {
+		return false, err
+	}
+	return tag.RowsAffected() == 1, nil
+}
+
+func (s *Service) validateAckForPublish(ctx context.Context, req GateForPublishRequest, policy *policySnapshot) (*sharedcompliance.CheckResult, error) {
+	var recordID int64
+	err := s.pool.QueryRow(ctx, `
+		SELECT check_record_id
+		FROM compliance_ack_records
+		WHERE id = $1
+		  AND tenant_id = $2
+		  AND article_id = $3
+		  AND article_version_id = $4
+		  AND consumed_at IS NULL
+		  AND expires_at > NOW()
+	`, *req.AckRecordID, req.TenantID, req.ArticleID, req.ArticleVersionID).Scan(&recordID)
+	if err != nil {
+		if errors.Is(err, pgx.ErrNoRows) {
+			return nil, response.ErrBadRequest(41003, "compliance_ack_mismatch", "ack record is expired, consumed, or not bound to this article version")
+		}
+		return nil, response.ErrInternal(51004, "compliance_ack_lookup_failed", "failed to validate compliance ack")
+	}
+	record, err := s.loadCheckRecord(ctx, req.TenantID, recordID)
+	if err != nil {
+		return nil, err
+	}
+	expectedFingerprint := policyFingerprint(policy, req.TargetPlatforms)
+	if record.ArticleID != req.ArticleID ||
+		record.ArticleVersionID != req.ArticleVersionID ||
+		record.PolicyFingerprint != expectedFingerprint {
+		return nil, response.ErrBadRequest(41003, "compliance_ack_mismatch", "ack record no longer matches current content or policy")
+	}
+	violations, err := s.loadViolations(ctx, req.TenantID, record.ID)
+	if err != nil {
+		return nil, err
+	}
+	for _, violation := range violations {
+		if record.EnforcementMode == "mandatory" && violation.Level == "block" {
+			return nil, response.ErrConflict(41001, "compliance_blocked", "blocked violations cannot be acknowledged")
+		}
+	}
+	result := checkResultFromRecord(record, violations, sharedcompliance.GateDecisionPass)
+	result.Decision = sharedcompliance.GateDecisionPass
+	result.Passed = true
+	return result, nil
+}
+
+func (s *Service) LatestCheck(ctx context.Context, tenantID, articleID int64) (*sharedcompliance.CheckResult, error) {
+	var recordID int64
+	err := s.pool.QueryRow(ctx, `
+		SELECT id
+		FROM compliance_check_records
+		WHERE tenant_id = $1 AND article_id = $2
+		ORDER BY checked_at DESC, id DESC
+		LIMIT 1
+	`, tenantID, articleID).Scan(&recordID)
+	if err != nil {
+		if errors.Is(err, pgx.ErrNoRows) {
+			return nil, response.ErrNotFound(40461, "compliance_check_not_found", "no compliance check record found")
+		}
+		return nil, response.ErrInternal(51005, "compliance_check_lookup_failed", "failed to load latest compliance check")
+	}
+	record, err := s.loadCheckRecord(ctx, tenantID, recordID)
+	if err != nil {
+		return nil, err
+	}
+	violations, err := s.loadViolations(ctx, tenantID, recordID)
+	if err != nil {
+		return nil, err
+	}
+	return checkResultFromRecord(record, violations, decide(record.EnforcementMode, record.HighestLevel, record.HitCount)), nil
+}
+
+func (s *Service) MarkPublishJobBlockedByCompliance(ctx context.Context, jobID uuid.UUID, result *sharedcompliance.CheckResult) error {
+	if s == nil || s.pool == nil || jobID == uuid.Nil {
+		return nil
+	}
+	var recordID any
+	var reason any
+	if result != nil && result.RecordID > 0 {
+		recordID = result.RecordID
+		reasonBytes, _ := json.Marshal(result)
+		reason = string(reasonBytes)
+	}
+	tx, err := s.pool.Begin(ctx)
+	if err != nil {
+		return response.ErrInternal(51012, "compliance_publish_job_block_failed", "failed to begin compliance block transaction")
+	}
+	defer rollbackTx(tx)
+	if _, err := tx.Exec(ctx, `
+		UPDATE desktop_publish_jobs
+		SET status = 'blocked_by_compliance',
+		    compliance_blocked_record_id = $2,
+		    compliance_blocked_at = NOW(),
+		    compliance_blocked_reason = $3,
+		    updated_at = NOW()
+		WHERE desktop_id = $1
+		  AND status <> 'blocked_by_compliance'
+	`, jobID, recordID, reason); err != nil {
+		return response.ErrInternal(51012, "compliance_publish_job_block_failed", "failed to mark publish job blocked")
+	}
+	if _, err := tx.Exec(ctx, `
+		UPDATE desktop_tasks
+		SET status = 'aborted',
+		    error = jsonb_build_object(
+		        'message', 'compliance_blocked',
+		        'record_id', $2::bigint,
+		        'detail', $3::text
+		    ),
+		    active_attempt_id = NULL,
+		    lease_token_hash = NULL,
+		    lease_expires_at = NULL,
+		    updated_at = NOW()
+		WHERE job_id = $1
+		  AND kind = 'publish'
+		  AND status = 'queued'
+	`, jobID, recordID, reason); err != nil {
+		return response.ErrInternal(51012, "compliance_publish_job_block_failed", "failed to abort blocked publish tasks")
+	}
+	if err := tx.Commit(ctx); err != nil {
+		return response.ErrInternal(51012, "compliance_publish_job_block_failed", "failed to commit compliance block")
+	}
+	return nil
+}
+
+func (s *Service) SubmitManualReview(ctx context.Context, req CreateManualReviewRequest) (*sharedcompliance.ManualReview, error) {
+	note := strings.TrimSpace(req.Note)
+	if note == "" {
+		return nil, response.ErrBadRequest(40001, "invalid_params", "note is required")
+	}
+	if utf8.RuneCountInString(note) > 500 {
+		return nil, response.ErrBadRequest(40001, "invalid_params", "note must be 500 characters or less")
+	}
+	record, err := s.loadCheckRecord(ctx, req.TenantID, req.CheckRecordID)
+	if err != nil {
+		return nil, err
+	}
+	if record.ArticleID != req.ArticleID || record.ArticleVersionID <= 0 {
+		return nil, response.ErrBadRequest(41009, "compliance_manual_review_invalid_check_record", "check record does not belong to this article version")
+	}
+	violations, err := s.loadViolations(ctx, req.TenantID, record.ID)
+	if err != nil {
+		return nil, err
+	}
+	hasBlock := false
+	for _, violation := range violations {
+		if violation.Level == "block" {
+			hasBlock = true
+			break
+		}
+	}
+	if !hasBlock {
+		return nil, response.ErrBadRequest(41009, "compliance_manual_review_invalid_check_record", "manual review requires at least one block violation")
+	}
+	summaryJSON, err := json.Marshal(violations)
+	if err != nil {
+		return nil, response.ErrInternal(51006, "manual_review_create_failed", "failed to encode manual review summary")
+	}
+	tx, err := s.pool.Begin(ctx)
+	if err != nil {
+		return nil, response.ErrInternal(51006, "manual_review_create_failed", "failed to begin manual review transaction")
+	}
+	defer rollbackTx(tx)
+	var review sharedcompliance.ManualReview
+	err = tx.QueryRow(ctx, `
+		INSERT INTO compliance_manual_reviews (
+			tenant_id,
+			article_id,
+			article_version_id,
+			original_check_record_id,
+			original_content_hash,
+			original_policy_fingerprint,
+			original_target_platforms,
+			original_violation_summary,
+			requested_by,
+			request_note,
+			status
+		)
+		VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9,$10,'pending')
+		RETURNING id, tenant_id, article_id, article_version_id, original_check_record_id, requested_by, requested_at, request_note, status
+	`,
+		req.TenantID,
+		req.ArticleID,
+		record.ArticleVersionID,
+		record.ID,
+		record.ContentHash,
+		record.PolicyFingerprint,
+		record.TargetPlatforms,
+		summaryJSON,
+		req.ActorID,
+		note,
+	).Scan(&review.ID, &review.TenantID, &review.ArticleID, &review.ArticleVersionID, &review.CheckRecordID, &review.RequestedBy, &review.RequestedAt, &review.RequestNote, &review.Status)
+	if err != nil {
+		if isUniqueViolation(err) {
+			_ = tx.Rollback(ctx)
+			status, lookupErr := s.lookupManualReviewStatus(ctx, req.TenantID, record.ArticleVersionID)
+			if lookupErr == nil && status == sharedcompliance.ManualReviewStatusPending {
+				return nil, response.ErrConflict(41007, "compliance_manual_review_pending", "manual review is already pending")
+			}
+			return nil, response.ErrConflict(41008, "compliance_manual_review_terminal", "manual review for this version is already terminal")
+		}
+		return nil, response.ErrInternal(51006, "manual_review_create_failed", "failed to create manual review")
+	}
+	if _, err := tx.Exec(ctx, `
+		UPDATE article_versions
+		SET manual_review_status = 'pending',
+		    manual_review_id = $1,
+		    manual_review_updated_at = NOW()
+		WHERE id = $2 AND article_id = $3
+	`, review.ID, record.ArticleVersionID, req.ArticleID); err != nil {
+		return nil, response.ErrInternal(51006, "manual_review_create_failed", "failed to stamp article version")
+	}
+	if err := tx.Commit(ctx); err != nil {
+		return nil, response.ErrInternal(51006, "manual_review_create_failed", "failed to commit manual review")
+	}
+	review.ViolationSummary = violations
+	review.OriginalPlatforms = record.TargetPlatforms
+	s.reviewCache.Delete(record.ArticleVersionID)
+	return &review, nil
+}
+
+func (s *Service) LatestManualReview(ctx context.Context, tenantID, articleID int64, requestedVersionID *int64) (*sharedcompliance.ManualReview, error) {
+	versionID, err := s.ResolvePublishableVersion(ctx, tenantID, articleID, requestedVersionID)
+	if err != nil {
+		return nil, err
+	}
+	review, err := s.loadLatestManualReviewByVersion(ctx, tenantID, versionID)
+	if err != nil {
+		if errors.Is(err, pgx.ErrNoRows) {
+			return &sharedcompliance.ManualReview{
+				TenantID:         tenantID,
+				ArticleID:        articleID,
+				ArticleVersionID: versionID,
+				Status:           sharedcompliance.ManualReviewStatusNone,
+			}, nil
+		}
+		return nil, err
+	}
+	return review, nil
+}
+
+func (s *Service) CancelManualReview(ctx context.Context, req CancelManualReviewRequest) (*sharedcompliance.ManualReview, error) {
+	reason := strings.TrimSpace(req.Reason)
+	if utf8.RuneCountInString(reason) > 500 {
+		return nil, response.ErrBadRequest(40001, "invalid_params", "reason must be 500 characters or less")
+	}
+	tx, err := s.pool.Begin(ctx)
+	if err != nil {
+		return nil, response.ErrInternal(51007, "manual_review_cancel_failed", "failed to begin manual review cancellation")
+	}
+	defer rollbackTx(tx)
+	var review sharedcompliance.ManualReview
+	err = tx.QueryRow(ctx, `
+		UPDATE compliance_manual_reviews
+		SET status = 'cancelled',
+		    cancelled_by = $1,
+		    cancelled_at = NOW(),
+		    cancel_reason = $2
+		WHERE id = $3
+		  AND tenant_id = $4
+		  AND article_id = $5
+		  AND requested_by = $1
+		  AND status = 'pending'
+		RETURNING id, tenant_id, article_id, article_version_id, original_check_record_id, requested_by, requested_at, request_note, status, cancelled_by, cancelled_at, cancel_reason
+	`, req.ActorID, nullableString(reason), req.ReviewID, req.TenantID, req.ArticleID).Scan(
+		&review.ID,
+		&review.TenantID,
+		&review.ArticleID,
+		&review.ArticleVersionID,
+		&review.CheckRecordID,
+		&review.RequestedBy,
+		&review.RequestedAt,
+		&review.RequestNote,
+		&review.Status,
+		&review.CancelledBy,
+		&review.CancelledAt,
+		&review.CancelReason,
+	)
+	if err != nil {
+		if errors.Is(err, pgx.ErrNoRows) {
+			return nil, response.ErrConflict(41010, "compliance_manual_review_not_cancellable", "manual review cannot be cancelled")
+		}
+		return nil, response.ErrInternal(51007, "manual_review_cancel_failed", "failed to cancel manual review")
+	}
+	if _, err := tx.Exec(ctx, `
+		UPDATE article_versions
+		SET manual_review_status = 'none',
+		    manual_review_id = NULL,
+		    manual_review_updated_at = NOW()
+		WHERE id = $1 AND article_id = $2
+	`, review.ArticleVersionID, req.ArticleID); err != nil {
+		return nil, response.ErrInternal(51007, "manual_review_cancel_failed", "failed to clear article version stamp")
+	}
+	if err := tx.Commit(ctx); err != nil {
+		return nil, response.ErrInternal(51007, "manual_review_cancel_failed", "failed to commit manual review cancellation")
+	}
+	s.reviewCache.Delete(review.ArticleVersionID)
+	return &review, nil
+}
+
+func DecodeReviewJobMessage(body []byte) (ReviewJobMessage, error) {
+	var msg ReviewJobMessage
+	if err := json.Unmarshal(body, &msg); err != nil {
+		return msg, err
+	}
+	if msg.JobID <= 0 || msg.TenantID <= 0 || msg.ArticleID <= 0 || msg.ArticleVersionID <= 0 || msg.CheckRecordID <= 0 {
+		return msg, fmt.Errorf("invalid compliance review job message")
+	}
+	return msg, nil
+}
+
+func (s *Service) ProcessReviewJob(ctx context.Context, msg ReviewJobMessage) error {
+	if s == nil || s.pool == nil {
+		return response.ErrServiceUnavailable(41004, "compliance_engine_unavailable", "compliance service is unavailable")
+	}
+	cfg := s.currentComplianceConfig()
+	if !cfg.Enabled || !cfg.LLMJudgeEnabled {
+		return s.markReviewJobDone(ctx, msg.JobID)
+	}
+	if s.llm == nil || s.llm.Validate() != nil {
+		return s.failReviewJob(ctx, msg.JobID, cfg.ReviewMaxAttempts, sharedllm.ErrNotConfigured)
+	}
+	job, claimed, err := s.claimReviewJob(ctx, msg)
+	if err != nil || !claimed {
+		return err
+	}
+	prompt, err := s.buildReviewPrompt(ctx, job)
+	if err != nil {
+		return s.failReviewJob(ctx, job.ID, cfg.ReviewMaxAttempts, err)
+	}
+	if strings.TrimSpace(prompt) == "" {
+		return s.markReviewJobDone(ctx, job.ID)
+	}
+	reservation, billingErr := s.reserveComplianceLLMJudgePoints(ctx, job, prompt)
+	if billingErr != nil {
+		if s.logger != nil {
+			s.logger.Warn("compliance llm billing skipped review",
+				zap.Error(billingErr),
+				zap.Int64("tenant_id", job.TenantID),
+				zap.Int64("job_id", job.ID),
+				zap.Int64("check_record_id", job.CheckRecordID),
+			)
+		}
+		return s.markReviewJobDone(ctx, job.ID)
+	}
+	result, err := s.llm.Generate(ctx, sharedllm.GenerateRequest{
+		Prompt:          prompt,
+		Timeout:         cfg.ReviewWorkerTimeout,
+		MaxOutputTokens: 900,
+		ResponseFormat: &sharedllm.ResponseFormat{
+			Type:        sharedllm.ResponseFormatTypeJSONObject,
+			Name:        "compliance_review",
+			Description: "Semantic compliance review result for a publish check record.",
+		},
+	}, nil)
+	if err != nil {
+		_ = s.refundComplianceLLMJudgePoints(context.Background(), job, reservation, err)
+		return s.failReviewJob(ctx, job.ID, cfg.ReviewMaxAttempts, err)
+	}
+	summary := decodeLLMReviewResult(result.Content)
+	if err := s.persistLLMReviewResult(ctx, job, summary); err != nil {
+		_ = s.refundComplianceLLMJudgePoints(context.Background(), job, reservation, err)
+		return s.failReviewJob(ctx, job.ID, cfg.ReviewMaxAttempts, err)
+	}
+	if err := s.completeComplianceLLMJudgePoints(ctx, job, reservation, result.Model); err != nil && s.logger != nil {
+		s.logger.Warn("compliance llm billing completion failed",
+			zap.Error(err),
+			zap.Int64("tenant_id", job.TenantID),
+			zap.Int64("job_id", job.ID),
+			zap.Int64("check_record_id", job.CheckRecordID),
+		)
+	}
+	return s.markReviewJobDone(ctx, job.ID)
+}
+
+type reviewJob struct {
+	ID               int64
+	TenantID         int64
+	ArticleID        int64
+	ArticleVersionID int64
+	CheckRecordID    int64
+	CheckedBy        int64
+	Attempts         int
+}
+
+func (s *Service) claimReviewJob(ctx context.Context, msg ReviewJobMessage) (reviewJob, bool, error) {
+	var job reviewJob
+	err := s.pool.QueryRow(ctx, `
+		UPDATE compliance_review_jobs
+		SET status = 'running',
+		    attempts = attempts + 1,
+		    locked_at = NOW(),
+		    locked_by = $2,
+		    updated_at = NOW()
+		WHERE id = $1
+		  AND status IN ('pending','failed')
+		  AND available_at <= NOW()
+		RETURNING
+			id,
+			tenant_id,
+			article_id,
+			article_version_id,
+			check_record_id,
+			COALESCE((
+				SELECT checked_by
+				FROM compliance_check_records cr
+				WHERE cr.id = compliance_review_jobs.check_record_id
+			), 0),
+			attempts
+	`, msg.JobID, strings.TrimSpace(msg.MessageID)).Scan(
+		&job.ID,
+		&job.TenantID,
+		&job.ArticleID,
+		&job.ArticleVersionID,
+		&job.CheckRecordID,
+		&job.CheckedBy,
+		&job.Attempts,
+	)
+	if err != nil {
+		if errors.Is(err, pgx.ErrNoRows) {
+			return job, false, nil
+		}
+		return job, false, err
+	}
+	return job, true, nil
+}
+
+func (s *Service) buildReviewPrompt(ctx context.Context, job reviewJob) (string, error) {
+	var title string
+	var plaintext pgtype.Text
+	err := s.pool.QueryRow(ctx, `
+		SELECT av.title, av.plaintext_snapshot
+		FROM article_versions av
+		JOIN articles a ON a.id = av.article_id
+		WHERE av.id = $1 AND a.id = $2 AND a.tenant_id = $3
+	`, job.ArticleVersionID, job.ArticleID, job.TenantID).Scan(&title, &plaintext)
+	if err != nil {
+		return "", err
+	}
+	text := strings.TrimSpace(plaintext.String)
+	if text == "" {
+		snapshot, err := s.loadArticleVersionSnapshot(ctx, job.TenantID, job.ArticleID, job.ArticleVersionID)
+		if err != nil {
+			return "", err
+		}
+		text = snapshot.Plaintext
+		title = snapshot.Title
+	}
+	return strings.TrimSpace(`你是内容合规复核助手。请只基于给定标题和正文判断是否存在广告法极限词、政治敏感、涉黄涉暴、行业违禁或明显平台高风险表达。
+
+返回 JSON，不要输出 Markdown：
+{
+  "risk": true,
+  "level": "high",
+  "summary": "一句话说明风险",
+  "evidence": "命中的短句或关键词",
+  "hint": "给作者的修改建议"
+}
+
+若没有高风险，返回 {"risk": false, "level": "info", "summary": "", "evidence": "", "hint": ""}。
+
+标题：` + title + `
+正文：
+` + truncateRunes(text, 6000)), nil
+}
+
+type llmReviewSummary struct {
+	Risk     bool   `json:"risk"`
+	Level    string `json:"level"`
+	Summary  string `json:"summary"`
+	Evidence string `json:"evidence"`
+	Hint     string `json:"hint"`
+}
+
+func decodeLLMReviewResult(content string) llmReviewSummary {
+	var summary llmReviewSummary
+	_ = json.Unmarshal([]byte(strings.TrimSpace(content)), &summary)
+	summary.Level = normalizeLevel(summary.Level)
+	if summary.Level == "" {
+		summary.Level = "info"
+	}
+	summary.Summary = strings.TrimSpace(summary.Summary)
+	summary.Evidence = strings.TrimSpace(summary.Evidence)
+	summary.Hint = strings.TrimSpace(summary.Hint)
+	return summary
+}
+
+func (s *Service) persistLLMReviewResult(ctx context.Context, job reviewJob, summary llmReviewSummary) error {
+	if !summary.Risk {
+		_, err := s.pool.Exec(ctx, `
+			UPDATE compliance_check_records
+			SET llm_used = TRUE
+			WHERE id = $1 AND tenant_id = $2
+		`, job.CheckRecordID, job.TenantID)
+		return err
+	}
+	matchedText := summary.Evidence
+	if matchedText == "" {
+		matchedText = summary.Summary
+	}
+	hint := summary.Hint
+	if hint == "" {
+		hint = summary.Summary
+	}
+	tx, err := s.pool.Begin(ctx)
+	if err != nil {
+		return err
+	}
+	defer rollbackTx(tx)
+	if _, err := tx.Exec(ctx, `
+		INSERT INTO compliance_violations (
+			record_id,
+			tenant_id,
+			source,
+			matched_text,
+			start_offset,
+			end_offset,
+			level,
+			hint
+		)
+		VALUES ($1,$2,'llm',$3,0,0,$4,$5)
+	`, job.CheckRecordID, job.TenantID, truncateRunes(matchedText, maxMatchedTextRunes), summary.Level, nullableString(hint)); err != nil {
+		return err
+	}
+	if _, err := tx.Exec(ctx, `
+		UPDATE compliance_check_records
+		SET llm_used = TRUE,
+		    hit_count = hit_count + 1,
+		    stored_hit_count = stored_hit_count + 1,
+		    highest_level = CASE
+		        WHEN highest_level IS NULL OR $3 > CASE highest_level
+		            WHEN 'block' THEN 4
+		            WHEN 'high' THEN 3
+		            WHEN 'medium' THEN 2
+		            WHEN 'info' THEN 1
+		            ELSE 0
+		        END THEN $2
+		        ELSE highest_level
+		    END
+		WHERE id = $1 AND tenant_id = $4
+	`, job.CheckRecordID, summary.Level, levelRank(summary.Level), job.TenantID); err != nil {
+		return err
+	}
+	return tx.Commit(ctx)
+}
+
+type aiPointReservation struct {
+	ReservationID int64
+	UsageLogID    int64
+	Points        int
+	RequestChars  int
+	BaseChars     int
+}
+
+func (s *Service) reserveComplianceLLMJudgePoints(ctx context.Context, job reviewJob, meteredText string) (*aiPointReservation, error) {
+	if s == nil || s.pool == nil {
+		return nil, response.ErrServiceUnavailable(50344, "ai_points_unavailable", "ai points store is unavailable")
+	}
+	tx, err := s.pool.Begin(ctx)
+	if err != nil {
+		return nil, err
+	}
+	defer rollbackTx(tx)
+	if err := lockTenantAIPoints(ctx, tx, job.TenantID); err != nil {
+		return nil, err
+	}
+	now := time.Now().UTC()
+	quotaRepo := tenantrepo.NewQuotaRepository(tx)
+	status, err := quotaRepo.GetAIQuotaStatus(ctx, job.TenantID, now)
+	if err != nil {
+		return nil, err
+	}
+	requestChars := countAIPointChars(meteredText)
+	points := calculateAIPointCost(requestChars, status.BaseChars)
+	if status.Total <= 0 || status.Balance < points {
+		return nil, response.ErrForbidden(40381, "ai_points_insufficient", "AI points are insufficient")
+	}
+	resourceType := aiResourceTypeComplianceReview
+	resourceID := job.CheckRecordID
+	reservationID, err := quotaRepo.CreateQuotaReservation(ctx, tenantrepo.QuotaReservationInput{
+		TenantID:       job.TenantID,
+		OperatorID:     job.CheckedBy,
+		QuotaType:      aiPointsQuotaType,
+		ResourceType:   resourceType,
+		ResourceID:     &resourceID,
+		ReservedAmount: points,
+		ExpireAt:       now.Add(time.Hour),
+	})
+	if err != nil {
+		return nil, err
+	}
+	metadataJSON, err := json.Marshal(map[string]any{
+		"article_id":         job.ArticleID,
+		"article_version_id": job.ArticleVersionID,
+		"check_record_id":    job.CheckRecordID,
+		"review_job_id":      job.ID,
+	})
+	if err != nil {
+		return nil, err
+	}
+	usageID, err := tenantrepo.NewAIPointUsageRepository(tx).Create(ctx, tenantrepo.CreateAIPointUsageLogInput{
+		TenantID:           job.TenantID,
+		OperatorID:         job.CheckedBy,
+		QuotaReservationID: reservationID,
+		UsageType:          aiUsageTypeComplianceLLMJudge,
+		ResourceType:       &resourceType,
+		ResourceID:         &resourceID,
+		RequestChars:       requestChars,
+		BaseChars:          status.BaseChars,
+		Points:             points,
+		MetadataJSON:       metadataJSON,
+	})
+	if err != nil {
+		return nil, err
+	}
+	reason := "ai_points_reserve"
+	referenceType := "ai_point_usage"
+	if _, err := quotaRepo.InsertQuotaLedger(ctx, tenantrepo.QuotaLedgerInput{
+		TenantID:      job.TenantID,
+		OperatorID:    job.CheckedBy,
+		QuotaType:     aiPointsQuotaType,
+		Delta:         -points,
+		BalanceAfter:  status.Balance - points,
+		Reason:        &reason,
+		ReferenceType: &referenceType,
+		ReferenceID:   &usageID,
+	}); err != nil {
+		return nil, err
+	}
+	if err := tx.Commit(ctx); err != nil {
+		return nil, err
+	}
+	return &aiPointReservation{
+		ReservationID: reservationID,
+		UsageLogID:    usageID,
+		Points:        points,
+		RequestChars:  requestChars,
+		BaseChars:     status.BaseChars,
+	}, nil
+}
+
+func (s *Service) completeComplianceLLMJudgePoints(ctx context.Context, job reviewJob, reservation *aiPointReservation, model string) error {
+	if s == nil || s.pool == nil || reservation == nil || reservation.ReservationID <= 0 || reservation.UsageLogID <= 0 {
+		return nil
+	}
+	tx, err := s.pool.Begin(ctx)
+	if err != nil {
+		return err
+	}
+	defer rollbackTx(tx)
+	pending, err := lockPendingAIPointUsage(ctx, tx, job.TenantID, reservation.UsageLogID)
+	if err != nil || !pending {
+		return err
+	}
+	if err := confirmAIPointReservation(ctx, tx, job.TenantID, reservation.ReservationID); err != nil {
+		return err
+	}
+	var modelPtr *string
+	if strings.TrimSpace(model) != "" {
+		normalized := strings.TrimSpace(model)
+		modelPtr = &normalized
+	}
+	if err := tenantrepo.NewAIPointUsageRepository(tx).MarkCompleted(ctx, job.TenantID, reservation.UsageLogID, modelPtr); err != nil {
+		return err
+	}
+	return tx.Commit(ctx)
+}
+
+func (s *Service) refundComplianceLLMJudgePoints(ctx context.Context, job reviewJob, reservation *aiPointReservation, jobErr error) error {
+	if s == nil || s.pool == nil || reservation == nil || reservation.ReservationID <= 0 || reservation.UsageLogID <= 0 || reservation.Points <= 0 {
+		return nil
+	}
+	tx, err := s.pool.Begin(ctx)
+	if err != nil {
+		return err
+	}
+	defer rollbackTx(tx)
+	if err := lockTenantAIPoints(ctx, tx, job.TenantID); err != nil {
+		return err
+	}
+	pending, err := lockPendingAIPointUsage(ctx, tx, job.TenantID, reservation.UsageLogID)
+	if err != nil || !pending {
+		return err
+	}
+	status, err := tenantrepo.NewQuotaRepository(tx).GetAIQuotaStatus(ctx, job.TenantID, time.Now().UTC())
+	if err != nil {
+		return err
+	}
+	quotaRepo := tenantrepo.NewQuotaRepository(tx)
+	reason := "ai_points_refund"
+	referenceType := "ai_point_usage"
+	usageID := reservation.UsageLogID
+	if _, err := quotaRepo.InsertQuotaLedger(ctx, tenantrepo.QuotaLedgerInput{
+		TenantID:      job.TenantID,
+		OperatorID:    job.CheckedBy,
+		QuotaType:     aiPointsQuotaType,
+		Delta:         reservation.Points,
+		BalanceAfter:  status.Balance + reservation.Points,
+		Reason:        &reason,
+		ReferenceType: &referenceType,
+		ReferenceID:   &usageID,
+	}); err != nil {
+		return err
+	}
+	if err := refundAIPointReservation(ctx, tx, job.TenantID, reservation.ReservationID); err != nil {
+		return err
+	}
+	if err := tenantrepo.NewAIPointUsageRepository(tx).MarkRefunded(ctx, job.TenantID, reservation.UsageLogID, truncateRunes(errorString(jobErr), 2000)); err != nil {
+		return err
+	}
+	return tx.Commit(ctx)
+}
+
+func countAIPointChars(text string) int {
+	return utf8.RuneCountInString(strings.TrimSpace(text))
+}
+
+func calculateAIPointCost(chars, baseChars int) int {
+	if baseChars <= 0 {
+		baseChars = 1000
+	}
+	if chars <= 0 {
+		return 1
+	}
+	return chars/baseChars + 1
+}
+
+func lockTenantAIPoints(ctx context.Context, tx pgx.Tx, tenantID int64) error {
+	_, err := tx.Exec(ctx, `SELECT pg_advisory_xact_lock(20260428, hashint8($1)::int)`, tenantID)
+	return err
+}
+
+func lockPendingAIPointUsage(ctx context.Context, tx pgx.Tx, tenantID, usageLogID int64) (bool, error) {
+	var status string
+	err := tx.QueryRow(ctx, `
+	SELECT status
+	FROM ai_point_usage_logs
+	WHERE id = $1 AND tenant_id = $2
+	FOR UPDATE
+	`, usageLogID, tenantID).Scan(&status)
+	if err != nil {
+		if errors.Is(err, pgx.ErrNoRows) {
+			return false, nil
+		}
+		return false, err
+	}
+	return status == "pending", nil
+}
+
+func confirmAIPointReservation(ctx context.Context, tx pgx.Tx, tenantID, reservationID int64) error {
+	tag, err := tx.Exec(ctx, `
+	UPDATE quota_reservations
+	SET status = 'confirmed',
+	    consumed_amount = reserved_amount,
+	    updated_at = NOW()
+	WHERE id = $1
+	  AND tenant_id = $2
+	  AND quota_type = $3
+	  AND status = 'pending'
+	`, reservationID, tenantID, aiPointsQuotaType)
+	if err != nil {
+		return err
+	}
+	if tag.RowsAffected() == 0 {
+		return errors.New("ai points reservation is not pending")
+	}
+	return nil
+}
+
+func refundAIPointReservation(ctx context.Context, tx pgx.Tx, tenantID, reservationID int64) error {
+	tag, err := tx.Exec(ctx, `
+	UPDATE quota_reservations
+	SET status = 'refunded',
+	    refunded_amount = reserved_amount,
+	    updated_at = NOW()
+	WHERE id = $1
+	  AND tenant_id = $2
+	  AND quota_type = $3
+	  AND status = 'pending'
+	`, reservationID, tenantID, aiPointsQuotaType)
+	if err != nil {
+		return err
+	}
+	if tag.RowsAffected() == 0 {
+		return errors.New("ai points reservation is not pending")
+	}
+	return nil
+}
+
+func (s *Service) markReviewJobDone(ctx context.Context, jobID int64) error {
+	_, err := s.pool.Exec(ctx, `
+		UPDATE compliance_review_jobs
+		SET status = 'done',
+		    locked_at = NULL,
+		    locked_by = NULL,
+		    updated_at = NOW()
+		WHERE id = $1
+	`, jobID)
+	return err
+}
+
+func (s *Service) failReviewJob(ctx context.Context, jobID int64, maxAttempts int, jobErr error) error {
+	if maxAttempts <= 0 {
+		maxAttempts = 3
+	}
+	_, err := s.pool.Exec(ctx, `
+		UPDATE compliance_review_jobs
+		SET status = CASE WHEN attempts >= $2 THEN 'failed' ELSE 'pending' END,
+		    available_at = CASE WHEN attempts >= $2 THEN available_at ELSE NOW() + interval '5 minutes' END,
+		    locked_at = NULL,
+		    locked_by = NULL,
+		    last_error = $3,
+		    updated_at = NOW()
+		WHERE id = $1
+	`, jobID, maxAttempts, truncateRunes(errorString(jobErr), 2000))
+	if err != nil {
+		return err
+	}
+	return jobErr
+}
+
+func (s *Service) enqueueLLMReview(ctx context.Context, input runInput, checkRecordID int64) {
+	if s == nil || s.pool == nil || s.mq == nil || checkRecordID <= 0 {
+		return
+	}
+	messageID := uuid.New()
+	var jobID int64
+	err := s.pool.QueryRow(ctx, `
+		INSERT INTO compliance_review_jobs (
+			message_id,
+			tenant_id,
+			article_id,
+			article_version_id,
+			check_record_id,
+			status
+		)
+		VALUES ($1,$2,$3,$4,$5,'pending')
+		ON CONFLICT (check_record_id) DO UPDATE
+		SET available_at = LEAST(compliance_review_jobs.available_at, NOW()),
+		    updated_at = NOW()
+		RETURNING id
+	`, messageID, input.TenantID, input.ArticleID, input.ArticleVersionID, checkRecordID).Scan(&jobID)
+	if err != nil {
+		if s.logger != nil {
+			s.logger.Warn("compliance review job enqueue failed",
+				zap.Error(err),
+				zap.Int64("tenant_id", input.TenantID),
+				zap.Int64("article_id", input.ArticleID),
+				zap.Int64("check_record_id", checkRecordID),
+			)
+		}
+		return
+	}
+	message := ReviewJobMessage{
+		JobID:            jobID,
+		MessageID:        messageID.String(),
+		TenantID:         input.TenantID,
+		ArticleID:        input.ArticleID,
+		ArticleVersionID: input.ArticleVersionID,
+		CheckRecordID:    checkRecordID,
+	}
+	body, err := json.Marshal(message)
+	if err != nil {
+		return
+	}
+	if err := s.mq.PublishComplianceReviewTask(ctx, body); err != nil && s.logger != nil {
+		s.logger.Warn("compliance review message publish failed",
+			zap.Error(err),
+			zap.Int64("job_id", jobID),
+			zap.Int64("check_record_id", checkRecordID),
+		)
+	}
+}
+
+func (s *Service) createManualReviewBypassRecord(ctx context.Context, req GateForPublishRequest, snapshot articleVersionSnapshot) (*sharedcompliance.CheckResult, error) {
+	policy := &policySnapshot{
+		MasterEnabled:   true,
+		EnforcementMode: "disabled",
+		DictVersions:    map[string]int{},
+	}
+	return s.runAndPersist(ctx, runInput{
+		TenantID:         req.TenantID,
+		ArticleID:        req.ArticleID,
+		ArticleVersionID: req.ArticleVersionID,
+		ActorID:          req.ActorID,
+		Title:            snapshot.Title,
+		Plaintext:        "",
+		TargetPlatforms:  req.TargetPlatforms,
+		TriggerSource:    triggerManualReviewBypass,
+		Policy:           policy,
+		ManualStatus:     snapshot.ManualReviewStatus,
+		ManualReviewID:   snapshot.ManualReviewID,
+	})
+}
+
+func (s *Service) loadArticleVersionSnapshot(ctx context.Context, tenantID, articleID, versionID int64) (articleVersionSnapshot, error) {
+	var snapshot articleVersionSnapshot
+	var title pgtype.Text
+	var plaintext pgtype.Text
+	var manualStatus string
+	var manualReviewID pgtype.Int8
+	var decisionReason pgtype.Text
+	var reviewedAt pgtype.Timestamptz
+	err := s.pool.QueryRow(ctx, `
+		SELECT
+			a.id,
+			av.id,
+			av.title,
+			av.plaintext_snapshot,
+			av.manual_review_status,
+			av.manual_review_id,
+			mr.decision_reason,
+			mr.reviewed_at
+		FROM article_versions av
+		JOIN articles a ON a.id = av.article_id
+		LEFT JOIN compliance_manual_reviews mr ON mr.id = av.manual_review_id
+		WHERE a.tenant_id = $1
+		  AND a.id = $2
+		  AND av.id = $3
+		  AND a.deleted_at IS NULL
+	`, tenantID, articleID, versionID).Scan(
+		&snapshot.ArticleID,
+		&snapshot.ArticleVersionID,
+		&title,
+		&plaintext,
+		&manualStatus,
+		&manualReviewID,
+		&decisionReason,
+		&reviewedAt,
+	)
+	if err != nil {
+		if errors.Is(err, pgx.ErrNoRows) {
+			return snapshot, response.ErrBadRequest(41005, "invalid_article_version", "article version does not belong to this article")
+		}
+		return snapshot, err
+	}
+	snapshot.Title = strings.TrimSpace(title.String)
+	snapshot.Plaintext = strings.TrimSpace(plaintext.String)
+	if snapshot.Plaintext == "" {
+		content, err := tenantrepo.LoadArticleVersionContent(ctx, s.pool, articleID, versionID)
+		if err == nil && content != nil {
+			snapshot.Plaintext = strings.TrimSpace(snapshot.Title + "\n" + tenantrepo.ExtractArticlePlaintext(stringValue(content.MarkdownContent)))
+			_, _ = s.pool.Exec(ctx, `
+				UPDATE article_versions SET plaintext_snapshot = $1 WHERE id = $2 AND plaintext_snapshot IS NULL
+			`, snapshot.Plaintext, versionID)
+		}
+	}
+	snapshot.ManualReviewStatus = sharedcompliance.ManualReviewStatus(strings.TrimSpace(manualStatus))
+	if snapshot.ManualReviewStatus == "" {
+		snapshot.ManualReviewStatus = sharedcompliance.ManualReviewStatusNone
+	}
+	if manualReviewID.Valid {
+		value := manualReviewID.Int64
+		snapshot.ManualReviewID = &value
+	}
+	if decisionReason.Valid {
+		value := decisionReason.String
+		snapshot.ManualReviewReason = &value
+	}
+	if reviewedAt.Valid {
+		value := reviewedAt.Time
+		snapshot.ManualReviewDecidedAt = &value
+	}
+	return snapshot, nil
+}
+
+func (s *Service) resolvePolicy(ctx context.Context, _ int64) (*policySnapshot, error) {
+	cfg := s.currentComplianceConfig()
+	now := time.Now()
+	s.policyMu.Lock()
+	if cached, ok := s.policies[globalPolicyCacheKey]; ok && cached.policy != nil && now.Before(cached.expires) {
+		policy := cached.policy
+		s.policyMu.Unlock()
+		return policy, nil
+	}
+	s.policyMu.Unlock()
+
+	policy, err := s.loadPolicy(ctx)
+	if err != nil {
+		s.policyMu.Lock()
+		cached := s.policies[globalPolicyCacheKey]
+		s.policyMu.Unlock()
+		if cached.policy != nil && now.Sub(cached.policy.LoadedAt) < 24*time.Hour {
+			if s.logger != nil {
+				s.logger.Warn("using stale compliance policy", zap.Error(err))
+			}
+			return cached.policy, nil
+		}
+		return nil, response.ErrServiceUnavailable(41004, "compliance_engine_unavailable", "compliance policy is unavailable")
+	}
+	s.policyMu.Lock()
+	if s.policies == nil {
+		s.policies = make(map[int64]cachedPolicy)
+	}
+	s.policies[globalPolicyCacheKey] = cachedPolicy{policy: policy, expires: now.Add(cfg.SnapshotReloadInterval)}
+	s.policyMu.Unlock()
+	return policy, nil
+}
+
+func (s *Service) loadPolicy(ctx context.Context) (*policySnapshot, error) {
+	var (
+		globalMaster         bool
+		globalMode           string
+		globalEnabledRawText string
+		globalLLM            bool
+		globalRevision       int64
+	)
+	err := s.pool.QueryRow(ctx, `
+		SELECT
+			master_enabled,
+			enforcement_mode,
+			enabled_dictionaries::text,
+			llm_judge_enabled,
+			revision
+		FROM ops.compliance_policies
+		WHERE id = 1
+		LIMIT 1
+	`).Scan(
+		&globalMaster,
+		&globalMode,
+		&globalEnabledRawText,
+		&globalLLM,
+		&globalRevision,
+	)
+	if err != nil {
+		return nil, err
+	}
+	mode := strings.TrimSpace(globalMode)
+	enabledRaw := []byte(globalEnabledRawText)
+	llmEnabled := globalLLM
+	revision := globalRevision
+	enabledIDs := decodeJSONInt64Slice(enabledRaw)
+	terms, dictNames, dictVersions, versionSum, err := s.loadTerms(ctx, enabledIDs)
+	if err != nil {
+		return nil, err
+	}
+	return &policySnapshot{
+		LoadedAt:             time.Now(),
+		MasterEnabled:        globalMaster,
+		EnforcementMode:      normalizeMode(mode),
+		LLMJudgeEnabled:      llmEnabled && s.currentComplianceConfig().LLMJudgeEnabled,
+		Revision:             revision,
+		DictionaryVersionSum: versionSum,
+		EnabledDictionaries:  dictNames,
+		DictVersions:         dictVersions,
+		Terms:                terms,
+	}, nil
+}
+
+func editorPreviewPolicy(policy *policySnapshot) *policySnapshot {
+	if policy == nil {
+		return &policySnapshot{
+			LoadedAt:        time.Now(),
+			MasterEnabled:   true,
+			EnforcementMode: "advisory",
+			DictVersions:    map[string]int{},
+		}
+	}
+	copyPolicy := *policy
+	if !copyPolicy.MasterEnabled {
+		copyPolicy.MasterEnabled = true
+	}
+	if copyPolicy.EnforcementMode == "disabled" || strings.TrimSpace(copyPolicy.EnforcementMode) == "" {
+		copyPolicy.EnforcementMode = "advisory"
+	}
+	copyPolicy.LLMJudgeEnabled = false
+	return &copyPolicy
+}
+
+func normalizeArticleCheckTrigger(trigger string) string {
+	switch strings.TrimSpace(trigger) {
+	case triggerPublishGate:
+		return triggerPublishGate
+	default:
+		return triggerEditorManual
+	}
+}
+
+func (s *Service) loadTerms(ctx context.Context, enabledIDs []int64) ([]termRule, []string, map[string]int, int64, error) {
+	filterEnabled := len(enabledIDs) > 0
+	rows, err := s.pool.Query(ctx, `
+		SELECT
+			d.id,
+			d.code,
+			d.name,
+			d.version,
+			d.platform_scope,
+			COALESCE(d.applicable_platforms, '{}') AS applicable_platforms,
+			t.match_type,
+			t.pattern,
+			COALESCE(t.level_override, d.default_level) AS level,
+			t.hint,
+			t.reference_law
+		FROM ops.compliance_dictionaries d
+		JOIN ops.compliance_dictionary_terms t ON t.dictionary_id = d.id
+		WHERE d.enabled = TRUE
+		  AND t.enabled = TRUE
+		  AND (NOT $1::boolean OR d.id = ANY($2::bigint[]))
+		ORDER BY d.id, t.id
+	`, filterEnabled, enabledIDs)
+	if err != nil {
+		return nil, nil, nil, 0, err
+	}
+	defer rows.Close()
+	terms := make([]termRule, 0)
+	dictSeen := map[string]struct{}{}
+	dictNames := make([]string, 0)
+	dictVersions := map[string]int{}
+	var versionSum int64
+	for rows.Next() {
+		var term termRule
+		var hint pgtype.Text
+		var ref pgtype.Text
+		if err := rows.Scan(
+			&term.DictionaryID,
+			&term.DictionaryCode,
+			&term.DictionaryName,
+			&term.DictionaryVersion,
+			&term.PlatformScope,
+			&term.ApplicablePlatforms,
+			&term.MatchType,
+			&term.Pattern,
+			&term.Level,
+			&hint,
+			&ref,
+		); err != nil {
+			return nil, nil, nil, 0, err
+		}
+		term.Pattern = strings.TrimSpace(term.Pattern)
+		if term.Pattern == "" {
+			continue
+		}
+		if hint.Valid {
+			value := hint.String
+			term.Hint = &value
+		}
+		if ref.Valid {
+			value := ref.String
+			term.ReferenceLaw = &value
+		}
+		if term.MatchType == "regex" {
+			compiled, err := regexp.Compile(term.Pattern)
+			if err != nil {
+				if s.logger != nil {
+					s.logger.Warn("skip invalid compliance regex", zap.String("pattern", term.Pattern), zap.Error(err))
+				}
+				continue
+			}
+			term.compiledRegex = compiled
+			term.compiledRegexPattern = term.Pattern
+		}
+		terms = append(terms, term)
+		if _, ok := dictSeen[term.DictionaryCode]; !ok {
+			dictSeen[term.DictionaryCode] = struct{}{}
+			dictNames = append(dictNames, term.DictionaryName)
+			dictVersions[term.DictionaryCode] = term.DictionaryVersion
+			versionSum += int64(term.DictionaryVersion)
+		}
+	}
+	return terms, dictNames, dictVersions, versionSum, rows.Err()
+}
+
+func matchViolations(policy *policySnapshot, tenantID int64, targetPlatforms []string, content string) []sharedcompliance.Violation {
+	if policy == nil || !policy.MasterEnabled || policy.EnforcementMode == "disabled" {
+		return nil
+	}
+	content = strings.TrimSpace(content)
+	if content == "" {
+		return nil
+	}
+	violations := make([]sharedcompliance.Violation, 0)
+	for _, term := range policy.Terms {
+		platforms := applicableViolationPlatforms(term, targetPlatforms)
+		if platforms == nil && term.PlatformScope == "specific" {
+			continue
+		}
+		switch term.MatchType {
+		case "regex":
+			if term.compiledRegex == nil {
+				continue
+			}
+			matches := term.compiledRegex.FindAllStringIndex(content, -1)
+			for _, match := range matches {
+				violations = append(violations, buildViolationsForTerm(term, platforms, content, match[0], match[1])...)
+			}
+		case "exact":
+			searchFrom := 0
+			for {
+				idx := strings.Index(content[searchFrom:], term.Pattern)
+				if idx < 0 {
+					break
+				}
+				start := searchFrom + idx
+				end := start + len(term.Pattern)
+				violations = append(violations, buildViolationsForTerm(term, platforms, content, start, end)...)
+				searchFrom = end
+				if searchFrom >= len(content) {
+					break
+				}
+			}
+		}
+	}
+	return violations
+}
+
+func applicableViolationPlatforms(term termRule, targetPlatforms []string) []string {
+	if term.PlatformScope != "specific" {
+		return nil
+	}
+	targetSet := make(map[string]struct{}, len(targetPlatforms))
+	for _, platform := range targetPlatforms {
+		targetSet[platform] = struct{}{}
+	}
+	out := make([]string, 0)
+	for _, platform := range term.ApplicablePlatforms {
+		platform = strings.TrimSpace(platform)
+		if platform == "" {
+			continue
+		}
+		if len(targetSet) == 0 {
+			out = append(out, platform)
+			continue
+		}
+		if _, ok := targetSet[platform]; ok {
+			out = append(out, platform)
+		}
+	}
+	sort.Strings(out)
+	return out
+}
+
+func buildViolationsForTerm(term termRule, platforms []string, content string, start, end int) []sharedcompliance.Violation {
+	matched := content[start:end]
+	base := sharedcompliance.Violation{
+		Source:         sourceDict,
+		DictionaryCode: stringPtr(term.DictionaryCode),
+		DictionaryName: stringPtr(term.DictionaryName),
+		TermPattern:    stringPtr(term.Pattern),
+		MatchedText:    truncateRunes(matched, maxMatchedTextRunes),
+		StartOffset:    start,
+		EndOffset:      end,
+		Level:          normalizeLevel(term.Level),
+		Hint:           term.Hint,
+		ReferenceLaw:   term.ReferenceLaw,
+	}
+	if len(platforms) == 0 {
+		return []sharedcompliance.Violation{base}
+	}
+	out := make([]sharedcompliance.Violation, 0, len(platforms))
+	for _, platform := range platforms {
+		next := base
+		next.PlatformCode = stringPtr(platform)
+		out = append(out, next)
+	}
+	return out
+}
+
+func (s *Service) loadCheckRecord(ctx context.Context, tenantID, recordID int64) (checkRecordRow, error) {
+	var record checkRecordRow
+	var articleID pgtype.Int8
+	var articleVersionID pgtype.Int8
+	var highest pgtype.Text
+	var manualReviewID pgtype.Int8
+	var manualStatus string
+	err := s.pool.QueryRow(ctx, `
+		SELECT
+			id,
+			tenant_id,
+			article_id,
+			article_version_id,
+			target_platforms,
+			content_hash,
+			policy_fingerprint,
+			enforcement_mode,
+			highest_level,
+			passed,
+			hit_count,
+			stored_hit_count,
+			truncated,
+			manual_review_status,
+			manual_review_id,
+			checked_at,
+			duration_ms
+		FROM compliance_check_records
+		WHERE id = $1 AND tenant_id = $2
+	`, recordID, tenantID).Scan(
+		&record.ID,
+		&record.TenantID,
+		&articleID,
+		&articleVersionID,
+		&record.TargetPlatforms,
+		&record.ContentHash,
+		&record.PolicyFingerprint,
+		&record.EnforcementMode,
+		&highest,
+		&record.Passed,
+		&record.HitCount,
+		&record.StoredHitCount,
+		&record.Truncated,
+		&manualStatus,
+		&manualReviewID,
+		&record.CheckedAt,
+		&record.DurationMS,
+	)
+	if err != nil {
+		if errors.Is(err, pgx.ErrNoRows) {
+			return record, response.ErrNotFound(40461, "compliance_check_not_found", "compliance check record not found")
+		}
+		return record, response.ErrInternal(51005, "compliance_check_lookup_failed", "failed to load compliance check record")
+	}
+	if articleID.Valid {
+		record.ArticleID = articleID.Int64
+	}
+	if articleVersionID.Valid {
+		record.ArticleVersionID = articleVersionID.Int64
+	}
+	if highest.Valid {
+		record.HighestLevel = &highest.String
+	}
+	if manualReviewID.Valid {
+		record.ManualReviewID = &manualReviewID.Int64
+	}
+	record.ManualReviewStatus = sharedcompliance.ManualReviewStatus(manualStatus)
+	return record, nil
+}
+
+func (s *Service) loadViolations(ctx context.Context, tenantID, recordID int64) ([]sharedcompliance.Violation, error) {
+	rows, err := s.pool.Query(ctx, `
+		SELECT
+			id,
+			record_id,
+			platform_code,
+			source,
+			dictionary_code,
+			dictionary_name,
+			term_pattern,
+			matched_text,
+			start_offset,
+			end_offset,
+			dom_path,
+			level,
+			hint,
+			reference_law
+		FROM compliance_violations
+		WHERE tenant_id = $1 AND record_id = $2
+		ORDER BY id
+	`, tenantID, recordID)
+	if err != nil {
+		return nil, response.ErrInternal(51008, "compliance_violation_lookup_failed", "failed to load compliance violations")
+	}
+	defer rows.Close()
+	out := make([]sharedcompliance.Violation, 0)
+	for rows.Next() {
+		var v sharedcompliance.Violation
+		var platform pgtype.Text
+		var dictCode pgtype.Text
+		var dictName pgtype.Text
+		var termPattern pgtype.Text
+		var domPath pgtype.Text
+		var hint pgtype.Text
+		var ref pgtype.Text
+		if err := rows.Scan(
+			&v.ID,
+			&v.RecordID,
+			&platform,
+			&v.Source,
+			&dictCode,
+			&dictName,
+			&termPattern,
+			&v.MatchedText,
+			&v.StartOffset,
+			&v.EndOffset,
+			&domPath,
+			&v.Level,
+			&hint,
+			&ref,
+		); err != nil {
+			return nil, response.ErrInternal(51008, "compliance_violation_lookup_failed", "failed to scan compliance violations")
+		}
+		if platform.Valid {
+			v.PlatformCode = &platform.String
+		}
+		if dictCode.Valid {
+			v.DictionaryCode = &dictCode.String
+		}
+		if dictName.Valid {
+			v.DictionaryName = &dictName.String
+		}
+		if termPattern.Valid {
+			v.TermPattern = &termPattern.String
+		}
+		if domPath.Valid {
+			v.DomPath = &domPath.String
+		}
+		if hint.Valid {
+			v.Hint = &hint.String
+		}
+		if ref.Valid {
+			v.ReferenceLaw = &ref.String
+		}
+		out = append(out, v)
+	}
+	return out, rows.Err()
+}
+
+func (s *Service) loadLatestManualReviewByVersion(ctx context.Context, tenantID, versionID int64) (*sharedcompliance.ManualReview, error) {
+	var review sharedcompliance.ManualReview
+	var checkID pgtype.Int8
+	var requestNote pgtype.Text
+	var reviewedBy pgtype.Int8
+	var reviewedAt pgtype.Timestamptz
+	var decisionReason pgtype.Text
+	var cancelledBy pgtype.Int8
+	var cancelledAt pgtype.Timestamptz
+	var cancelReason pgtype.Text
+	var summaryRaw []byte
+	var platforms []string
+	err := s.pool.QueryRow(ctx, `
+		SELECT
+			mr.id,
+			mr.tenant_id,
+			mr.article_id,
+			mr.article_version_id,
+			mr.original_check_record_id,
+			mr.requested_by,
+			mr.requested_at,
+			mr.request_note,
+			mr.status,
+			mr.cancelled_by,
+			mr.cancelled_at,
+			mr.cancel_reason,
+			mr.reviewed_by,
+			mr.reviewed_at,
+			mr.decision_reason,
+			mr.original_violation_summary,
+			mr.original_target_platforms
+		FROM compliance_manual_reviews mr
+		WHERE mr.tenant_id = $1
+		  AND mr.article_version_id = $2
+		  AND mr.status <> 'cancelled'
+		ORDER BY mr.requested_at DESC, mr.id DESC
+		LIMIT 1
+	`, tenantID, versionID).Scan(
+		&review.ID,
+		&review.TenantID,
+		&review.ArticleID,
+		&review.ArticleVersionID,
+		&checkID,
+		&review.RequestedBy,
+		&review.RequestedAt,
+		&requestNote,
+		&review.Status,
+		&cancelledBy,
+		&cancelledAt,
+		&cancelReason,
+		&reviewedBy,
+		&reviewedAt,
+		&decisionReason,
+		&summaryRaw,
+		&platforms,
+	)
+	if err != nil {
+		return nil, err
+	}
+	if checkID.Valid {
+		review.CheckRecordID = &checkID.Int64
+	}
+	if requestNote.Valid {
+		review.RequestNote = &requestNote.String
+	}
+	if reviewedBy.Valid {
+		review.ReviewedBy = &reviewedBy.Int64
+	}
+	if reviewedAt.Valid {
+		review.ReviewedAt = &reviewedAt.Time
+	}
+	if decisionReason.Valid {
+		review.DecisionReason = &decisionReason.String
+	}
+	if cancelledBy.Valid {
+		review.CancelledBy = &cancelledBy.Int64
+	}
+	if cancelledAt.Valid {
+		review.CancelledAt = &cancelledAt.Time
+	}
+	if cancelReason.Valid {
+		review.CancelReason = &cancelReason.String
+	}
+	_ = json.Unmarshal(summaryRaw, &review.ViolationSummary)
+	review.OriginalPlatforms = platforms
+	return &review, nil
+}
+
+func (s *Service) lookupManualReviewStatus(ctx context.Context, tenantID, versionID int64) (sharedcompliance.ManualReviewStatus, error) {
+	var status string
+	err := s.pool.QueryRow(ctx, `
+		SELECT status
+		FROM compliance_manual_reviews
+		WHERE tenant_id = $1 AND article_version_id = $2 AND status <> 'cancelled'
+		ORDER BY requested_at DESC, id DESC
+		LIMIT 1
+	`, tenantID, versionID).Scan(&status)
+	if err != nil {
+		return "", err
+	}
+	return sharedcompliance.ManualReviewStatus(status), nil
+}
+
+func checkResultFromRecord(record checkRecordRow, violations []sharedcompliance.Violation, decision sharedcompliance.GateDecision) *sharedcompliance.CheckResult {
+	return &sharedcompliance.CheckResult{
+		RecordID:           record.ID,
+		Decision:           decision,
+		Passed:             record.Passed,
+		HighestLevel:       record.HighestLevel,
+		Violations:         violations,
+		HitCount:           record.HitCount,
+		StoredHitCount:     record.StoredHitCount,
+		Truncated:          record.Truncated,
+		EnforcementMode:    record.EnforcementMode,
+		ContentHash:        record.ContentHash,
+		PolicyFingerprint:  record.PolicyFingerprint,
+		TargetPlatforms:    record.TargetPlatforms,
+		ManualReviewStatus: record.ManualReviewStatus,
+		ManualReviewID:     record.ManualReviewID,
+		CheckedAt:          record.CheckedAt,
+		DurationMS:         record.DurationMS,
+	}
+}
+
+func manualReviewOnlyResult(snapshot articleVersionSnapshot, targets []string) *sharedcompliance.CheckResult {
+	decision := sharedcompliance.GateDecisionBlock
+	passed := false
+	if snapshot.ManualReviewStatus == sharedcompliance.ManualReviewStatusApproved {
+		decision = sharedcompliance.GateDecisionPass
+		passed = true
+	}
+	return &sharedcompliance.CheckResult{
+		Decision:              decision,
+		Passed:                passed,
+		Violations:            []sharedcompliance.Violation{},
+		EnforcementMode:       "disabled",
+		ContentHash:           contentHash(snapshot.Title, snapshot.Plaintext),
+		PolicyFingerprint:     "",
+		TargetPlatforms:       normalizePlatforms(targets),
+		ManualReviewStatus:    snapshot.ManualReviewStatus,
+		ManualReviewID:        snapshot.ManualReviewID,
+		ManualReviewReason:    snapshot.ManualReviewReason,
+		ManualReviewDecidedAt: snapshot.ManualReviewDecidedAt,
+		CheckedAt:             time.Now().UTC(),
+	}
+}
+
+func disabledCheckResult(targets []string) *sharedcompliance.CheckResult {
+	return &sharedcompliance.CheckResult{
+		Decision:           sharedcompliance.GateDecisionPass,
+		Passed:             true,
+		Violations:         []sharedcompliance.Violation{},
+		EnforcementMode:    "disabled",
+		TargetPlatforms:    normalizePlatforms(targets),
+		ManualReviewStatus: sharedcompliance.ManualReviewStatusNone,
+		CheckedAt:          time.Now().UTC(),
+	}
+}
+
+func (s *Service) currentComplianceConfig() config.ComplianceConfig {
+	if s != nil && s.cfg != nil {
+		if cfg := s.cfg.Current(); cfg != nil {
+			out := cfg.Compliance
+			config.NormalizeComplianceConfig(&out)
+			return out
+		}
+	}
+	out := config.ComplianceConfig{Enabled: true}
+	config.NormalizeComplianceConfig(&out)
+	return out
+}
+
+func decide(mode string, highest *string, hitCount int) sharedcompliance.GateDecision {
+	if hitCount <= 0 || highest == nil {
+		return sharedcompliance.GateDecisionPass
+	}
+	if mode == "mandatory" {
+		return sharedcompliance.GateDecisionBlock
+	}
+	return sharedcompliance.GateDecisionNeedsAck
+}
+
+func highestViolationLevel(violations []sharedcompliance.Violation) *string {
+	if len(violations) == 0 {
+		return nil
+	}
+	best := "info"
+	for _, violation := range violations {
+		if levelRank(violation.Level) > levelRank(best) {
+			best = violation.Level
+		}
+	}
+	return &best
+}
+
+func levelRank(level string) int {
+	switch strings.TrimSpace(level) {
+	case "block":
+		return 4
+	case "high":
+		return 3
+	case "medium":
+		return 2
+	case "info":
+		return 1
+	default:
+		return 0
+	}
+}
+
+func normalizeLevel(level string) string {
+	level = strings.TrimSpace(level)
+	switch level {
+	case "block", "high", "medium", "info":
+		return level
+	default:
+		return "high"
+	}
+}
+
+func normalizeMode(mode string) string {
+	mode = strings.TrimSpace(mode)
+	switch mode {
+	case "mandatory", "advisory", "disabled":
+		return mode
+	default:
+		return "mandatory"
+	}
+}
+
+func contentHash(title, plaintext string) string {
+	sum := sha256.Sum256([]byte(strings.TrimSpace(title) + "\n" + strings.TrimSpace(plaintext)))
+	return hex.EncodeToString(sum[:])
+}
+
+func policyFingerprint(policy *policySnapshot, targets []string) string {
+	targets = normalizePlatforms(targets)
+	parts := []string{
+		fmt.Sprintf("rev:%d", policy.Revision),
+		"mode:" + policy.EnforcementMode,
+		fmt.Sprintf("llm:%t", policy.LLMJudgeEnabled),
+		"targets:" + strings.Join(targets, ","),
+	}
+	keys := make([]string, 0, len(policy.DictVersions))
+	for key := range policy.DictVersions {
+		keys = append(keys, key)
+	}
+	sort.Strings(keys)
+	for _, key := range keys {
+		parts = append(parts, fmt.Sprintf("%s:%d", key, policy.DictVersions[key]))
+	}
+	sum := sha256.Sum256([]byte(strings.Join(parts, "|")))
+	return hex.EncodeToString(sum[:])
+}
+
+func recordDictVersions(policy *policySnapshot) map[string]int {
+	if policy == nil || policy.DictVersions == nil {
+		return map[string]int{}
+	}
+	out := make(map[string]int, len(policy.DictVersions))
+	for key, value := range policy.DictVersions {
+		out[key] = value
+	}
+	return out
+}
+
+func normalizePlatforms(platforms []string) []string {
+	seen := make(map[string]struct{}, len(platforms))
+	out := make([]string, 0, len(platforms))
+	for _, platform := range platforms {
+		platform = strings.TrimSpace(platform)
+		if platform == "" {
+			continue
+		}
+		if _, ok := seen[platform]; ok {
+			continue
+		}
+		seen[platform] = struct{}{}
+		out = append(out, platform)
+	}
+	sort.Strings(out)
+	return out
+}
+
+func decodeJSONInt64Slice(raw []byte) []int64 {
+	if len(raw) == 0 {
+		return nil
+	}
+	var nums []int64
+	if err := json.Unmarshal(raw, &nums); err == nil {
+		return nums
+	}
+	var floats []float64
+	if err := json.Unmarshal(raw, &floats); err != nil {
+		return nil
+	}
+	out := make([]int64, 0, len(floats))
+	for _, n := range floats {
+		out = append(out, int64(n))
+	}
+	return out
+}
+
+func sameInt64Set(a, b []int64) bool {
+	if len(a) != len(b) {
+		return false
+	}
+	a = append([]int64(nil), a...)
+	b = append([]int64(nil), b...)
+	sort.Slice(a, func(i, j int) bool { return a[i] < a[j] })
+	sort.Slice(b, func(i, j int) bool { return b[i] < b[j] })
+	for i := range a {
+		if a[i] != b[i] {
+			return false
+		}
+	}
+	return true
+}
+
+func truncateRunes(value string, maxRunes int) string {
+	value = strings.TrimSpace(value)
+	if maxRunes <= 0 {
+		return ""
+	}
+	runes := []rune(value)
+	if len(runes) <= maxRunes {
+		return value
+	}
+	return string(runes[:maxRunes])
+}
+
+func stringPtr(value string) *string {
+	return &value
+}
+
+func stringValue(value *string) string {
+	if value == nil {
+		return ""
+	}
+	return *value
+}
+
+func errorString(err error) string {
+	if err == nil {
+		return ""
+	}
+	return err.Error()
+}
+
+func nullableString(value string) *string {
+	value = strings.TrimSpace(value)
+	if value == "" {
+		return nil
+	}
+	return &value
+}
+
+func int64PtrAny(value *int64) any {
+	if value == nil {
+		return nil
+	}
+	return *value
+}
+
+func rollbackTx(tx pgx.Tx) {
+	if tx == nil {
+		return
+	}
+	ctx, cancel := context.WithTimeout(context.Background(), 5*time.Second)
+	defer cancel()
+	_ = tx.Rollback(ctx)
+}
+
+func isUniqueViolation(err error) bool {
+	var pgErr *pgconn.PgError
+	return errors.As(err, &pgErr) && pgErr.Code == "23505"
+}
+
+func (s *Service) cacheManualReview(snapshot articleVersionSnapshot) {
+	if snapshot.ArticleVersionID <= 0 {
+		return
+	}
+	s.reviewCache.Store(snapshot.ArticleVersionID, struct {
+		snapshot articleVersionSnapshot
+		expires  time.Time
+	}{snapshot: snapshot, expires: time.Now().Add(60 * time.Second)})
+}
+
+func (s *Service) cachedManualReview(versionID int64) (articleVersionSnapshot, bool) {
+	value, ok := s.reviewCache.Load(versionID)
+	if !ok {
+		return articleVersionSnapshot{}, false
+	}
+	typed, ok := value.(struct {
+		snapshot articleVersionSnapshot
+		expires  time.Time
+	})
+	if !ok || time.Now().After(typed.expires) {
+		s.reviewCache.Delete(versionID)
+		return articleVersionSnapshot{}, false
+	}
+	return typed.snapshot, true
+}
+
+func manualReviewGateError(snapshot articleVersionSnapshot) error {
+	switch snapshot.ManualReviewStatus {
+	case sharedcompliance.ManualReviewStatusPending:
+		return response.ErrConflict(41007, "compliance_manual_review_pending", "current article version is waiting for manual review")
+	case sharedcompliance.ManualReviewStatusRejected:
+		return response.ErrConflict(41006, "compliance_manual_review_rejected", "current article version was rejected by manual review")
+	default:
+		return nil
+	}
+}
diff --git a/server/internal/tenant/compliance/service_test.go b/server/internal/tenant/compliance/service_test.go
new file mode 100644
index 0000000..6f8e940
--- /dev/null
+++ b/server/internal/tenant/compliance/service_test.go
@@ -0,0 +1,36 @@
+package compliance
+
+import (
+	"testing"
+
+	sharedcompliance "github.com/geo-platform/tenant-api/internal/shared/compliance"
+)
+
+func TestDecideMandatoryBlocksAnyHit(t *testing.T) {
+	levels := []string{"block", "high", "medium", "info"}
+	for _, level := range levels {
+		level := level
+		t.Run(level, func(t *testing.T) {
+			got := decide("mandatory", &level, 1)
+			if got != sharedcompliance.GateDecisionBlock {
+				t.Fatalf("decide mandatory %s hit = %s, want %s", level, got, sharedcompliance.GateDecisionBlock)
+			}
+		})
+	}
+}
+
+func TestDecideAdvisoryNeedsAckOnAnyHit(t *testing.T) {
+	level := "info"
+	got := decide("advisory", &level, 1)
+	if got != sharedcompliance.GateDecisionNeedsAck {
+		t.Fatalf("decide advisory hit = %s, want %s", got, sharedcompliance.GateDecisionNeedsAck)
+	}
+}
+
+func TestDecidePassesWithoutHits(t *testing.T) {
+	level := "block"
+	got := decide("mandatory", &level, 0)
+	if got != sharedcompliance.GateDecisionPass {
+		t.Fatalf("decide without hits = %s, want %s", got, sharedcompliance.GateDecisionPass)
+	}
+}
diff --git a/server/internal/tenant/repository/article_repo.go b/server/internal/tenant/repository/article_repo.go
index bbe5091..73a6b60 100644
--- a/server/internal/tenant/repository/article_repo.go
+++ b/server/internal/tenant/repository/article_repo.go
@@ -2,7 +2,9 @@ package repository
 
 import (
 	"context"
+	"strings"
 
+	"github.com/geo-platform/tenant-api/internal/shared/contentstats"
 	"github.com/geo-platform/tenant-api/internal/tenant/repository/generated"
 	"github.com/jackc/pgx/v5"
 )
@@ -69,9 +71,10 @@ func (r *articleRepository) CreateArticleVersion(ctx context.Context, input Crea
 			html_content,
 			markdown_content,
 			word_count,
-			source_label
+			source_label,
+			plaintext_snapshot
 		)
-		VALUES ($1, $2, $3, $4, $5, $6, $7)
+		VALUES ($1, $2, $3, $4, $5, $6, $7, $8)
 		RETURNING id
 	`,
 		input.ArticleID,
@@ -81,6 +84,7 @@ func (r *articleRepository) CreateArticleVersion(ctx context.Context, input Crea
 		pgText(storedMarkdown),
 		input.WordCount,
 		pgText(&input.SourceLabel),
+		strings.TrimSpace(input.Title+"\n"+ExtractArticlePlaintext(input.MarkdownContent)),
 	).Scan(&versionID)
 	if err != nil {
 		return 0, err
@@ -88,6 +92,60 @@ func (r *articleRepository) CreateArticleVersion(ctx context.Context, input Crea
 	return versionID, nil
 }
 
+func ExtractArticlePlaintext(markdown string) string {
+	markdown = strings.TrimSpace(markdown)
+	if markdown == "" {
+		return ""
+	}
+
+	var builder strings.Builder
+	builder.Grow(len(markdown))
+	inFence := false
+	lines := strings.Split(markdown, "\n")
+	for _, line := range lines {
+		trimmed := strings.TrimSpace(line)
+		if strings.HasPrefix(trimmed, "```") || strings.HasPrefix(trimmed, "~~~") {
+			inFence = !inFence
+			continue
+		}
+		if inFence {
+			builder.WriteString(trimmed)
+			builder.WriteByte('\n')
+			continue
+		}
+		line = stripMarkdownLine(line)
+		if strings.TrimSpace(line) == "" {
+			continue
+		}
+		builder.WriteString(line)
+		builder.WriteByte('\n')
+	}
+	return strings.TrimSpace(builder.String())
+}
+
+func stripMarkdownLine(line string) string {
+	replacer := strings.NewReplacer(
+		"#", " ",
+		"*", " ",
+		"_", " ",
+		"`", " ",
+		">", " ",
+		"[", " ",
+		"]", " ",
+		"(", " ",
+		")", " ",
+		"!", " ",
+		"|", " ",
+	)
+	line = replacer.Replace(line)
+	line = strings.TrimLeft(line, "-+0123456789. \t")
+	return strings.Join(strings.Fields(line), " ")
+}
+
+func CountArticlePlaintextWords(markdown string) int {
+	return contentstats.CountWords(ExtractArticlePlaintext(markdown))
+}
+
 func (r *articleRepository) UpdateArticleCurrentVersion(ctx context.Context, articleID, tenantID, versionID int64) error {
 	tag, err := r.db.Exec(ctx, `
 		UPDATE articles
diff --git a/server/internal/tenant/repository/desktop_task_repo.go b/server/internal/tenant/repository/desktop_task_repo.go
index 7385d8d..1073d90 100644
--- a/server/internal/tenant/repository/desktop_task_repo.go
+++ b/server/internal/tenant/repository/desktop_task_repo.go
@@ -10,25 +10,30 @@ import (
 )
 
 type DesktopPublishJob struct {
-	DesktopID       uuid.UUID
-	TenantID        int64
-	WorkspaceID     int64
-	CreatedByUserID int64
-	Title           string
-	ContentRef      []byte
-	ScheduledAt     *time.Time
-	CreatedAt       time.Time
-	UpdatedAt       time.Time
+	DesktopID        uuid.UUID
+	TenantID         int64
+	WorkspaceID      int64
+	CreatedByUserID  int64
+	Title            string
+	ContentRef       []byte
+	ScheduledAt      *time.Time
+	ArticleID        *int64
+	ArticleVersionID *int64
+	Status           string
+	CreatedAt        time.Time
+	UpdatedAt        time.Time
 }
 
 type CreateDesktopPublishJobParams struct {
-	DesktopID       uuid.UUID
-	TenantID        int64
-	WorkspaceID     int64
-	CreatedByUserID int64
-	Title           string
-	ContentRef      []byte
-	ScheduledAt     *time.Time
+	DesktopID        uuid.UUID
+	TenantID         int64
+	WorkspaceID      int64
+	CreatedByUserID  int64
+	Title            string
+	ContentRef       []byte
+	ScheduledAt      *time.Time
+	ArticleID        *int64
+	ArticleVersionID *int64
 }
 
 type DesktopTask struct {
@@ -136,13 +141,15 @@ func NewDesktopTaskRepository(db generated.DBTX) DesktopTaskRepository {
 
 func (r *desktopTaskRepository) CreatePublishJob(ctx context.Context, params CreateDesktopPublishJobParams) (*DesktopPublishJob, error) {
 	row, err := r.q.CreateDesktopPublishJob(ctx, generated.CreateDesktopPublishJobParams{
-		DesktopID:       pgUUID(params.DesktopID),
-		TenantID:        params.TenantID,
-		WorkspaceID:     params.WorkspaceID,
-		CreatedByUserID: params.CreatedByUserID,
-		Title:           params.Title,
-		ContentRef:      params.ContentRef,
-		ScheduledAt:     pgTimestamp(params.ScheduledAt),
+		DesktopID:        pgUUID(params.DesktopID),
+		TenantID:         params.TenantID,
+		WorkspaceID:      params.WorkspaceID,
+		CreatedByUserID:  params.CreatedByUserID,
+		Title:            params.Title,
+		ContentRef:       params.ContentRef,
+		ScheduledAt:      pgTimestamp(params.ScheduledAt),
+		ArticleID:        pgInt8(params.ArticleID),
+		ArticleVersionID: pgInt8(params.ArticleVersionID),
 	})
 	if err != nil {
 		return nil, err
@@ -314,15 +321,18 @@ func (r *desktopTaskRepository) FinishAttempt(ctx context.Context, params Finish
 
 func desktopPublishJobFromGenerated(row generated.DesktopPublishJob) *DesktopPublishJob {
 	return &DesktopPublishJob{
-		DesktopID:       uuidFromPG(row.DesktopID),
-		TenantID:        row.TenantID,
-		WorkspaceID:     row.WorkspaceID,
-		CreatedByUserID: row.CreatedByUserID,
-		Title:           row.Title,
-		ContentRef:      row.ContentRef,
-		ScheduledAt:     optionalTime(row.ScheduledAt),
-		CreatedAt:       timeFromTimestamp(row.CreatedAt),
-		UpdatedAt:       timeFromTimestamp(row.UpdatedAt),
+		DesktopID:        uuidFromPG(row.DesktopID),
+		TenantID:         row.TenantID,
+		WorkspaceID:      row.WorkspaceID,
+		CreatedByUserID:  row.CreatedByUserID,
+		Title:            row.Title,
+		ContentRef:       row.ContentRef,
+		ScheduledAt:      optionalTime(row.ScheduledAt),
+		ArticleID:        nullableInt64(row.ArticleID),
+		ArticleVersionID: nullableInt64(row.ArticleVersionID),
+		Status:           row.Status,
+		CreatedAt:        timeFromTimestamp(row.CreatedAt),
+		UpdatedAt:        timeFromTimestamp(row.UpdatedAt),
 	}
 }
 
diff --git a/server/internal/tenant/repository/generated/desktop_task.sql.go b/server/internal/tenant/repository/generated/desktop_task.sql.go
index dfcbfa9..2cc5ec9 100644
--- a/server/internal/tenant/repository/generated/desktop_task.sql.go
+++ b/server/internal/tenant/repository/generated/desktop_task.sql.go
@@ -211,7 +211,9 @@ INSERT INTO desktop_publish_jobs (
     created_by_user_id,
     title,
     content_ref,
-    scheduled_at
+    scheduled_at,
+    article_id,
+    article_version_id
 )
 VALUES (
     $1,
@@ -220,19 +222,23 @@ VALUES (
     $4,
     $5,
     $6,
-    $7
+    $7,
+    $8,
+    $9
 )
-RETURNING id, desktop_id, tenant_id, workspace_id, created_by_user_id, title, content_ref, scheduled_at, created_at, updated_at
+RETURNING id, desktop_id, tenant_id, workspace_id, created_by_user_id, title, content_ref, scheduled_at, created_at, updated_at, article_id, article_version_id, status, compliance_blocked_record_id, compliance_blocked_at, compliance_blocked_reason
 `
 
 type CreateDesktopPublishJobParams struct {
-	DesktopID       pgtype.UUID        `json:"desktop_id"`
-	TenantID        int64              `json:"tenant_id"`
-	WorkspaceID     int64              `json:"workspace_id"`
-	CreatedByUserID int64              `json:"created_by_user_id"`
-	Title           string             `json:"title"`
-	ContentRef      []byte             `json:"content_ref"`
-	ScheduledAt     pgtype.Timestamptz `json:"scheduled_at"`
+	DesktopID        pgtype.UUID        `json:"desktop_id"`
+	TenantID         int64              `json:"tenant_id"`
+	WorkspaceID      int64              `json:"workspace_id"`
+	CreatedByUserID  int64              `json:"created_by_user_id"`
+	Title            string             `json:"title"`
+	ContentRef       []byte             `json:"content_ref"`
+	ScheduledAt      pgtype.Timestamptz `json:"scheduled_at"`
+	ArticleID        pgtype.Int8        `json:"article_id"`
+	ArticleVersionID pgtype.Int8        `json:"article_version_id"`
 }
 
 func (q *Queries) CreateDesktopPublishJob(ctx context.Context, arg CreateDesktopPublishJobParams) (DesktopPublishJob, error) {
@@ -244,6 +250,8 @@ func (q *Queries) CreateDesktopPublishJob(ctx context.Context, arg CreateDesktop
 		arg.Title,
 		arg.ContentRef,
 		arg.ScheduledAt,
+		arg.ArticleID,
+		arg.ArticleVersionID,
 	)
 	var i DesktopPublishJob
 	err := row.Scan(
@@ -257,6 +265,12 @@ func (q *Queries) CreateDesktopPublishJob(ctx context.Context, arg CreateDesktop
 		&i.ScheduledAt,
 		&i.CreatedAt,
 		&i.UpdatedAt,
+		&i.ArticleID,
+		&i.ArticleVersionID,
+		&i.Status,
+		&i.ComplianceBlockedRecordID,
+		&i.ComplianceBlockedAt,
+		&i.ComplianceBlockedReason,
 	)
 	return i, err
 }
@@ -544,12 +558,18 @@ const leaseNextQueuedDesktopTask = `-- name: LeaseNextQueuedDesktopTask :one
 WITH candidate AS (
     SELECT dt.desktop_id
     FROM desktop_tasks AS dt
+    LEFT JOIN desktop_publish_jobs AS j ON j.desktop_id = dt.job_id
     WHERE dt.target_client_id = $3
       AND dt.status = 'queued'
       AND (
         $4::text IS NULL
         OR dt.kind = $4::text
       )
+      AND (
+        dt.kind <> 'publish'
+        OR j.desktop_id IS NULL
+        OR j.status = 'queued'
+      )
     ORDER BY dt.lane_weight DESC,
         dt.priority DESC,
         COALESCE(dt.enqueued_at, dt.created_at) ASC,
diff --git a/server/internal/tenant/repository/generated/models.go b/server/internal/tenant/repository/generated/models.go
index 9302e97..7aaf1f1 100644
--- a/server/internal/tenant/repository/generated/models.go
+++ b/server/internal/tenant/repository/generated/models.go
@@ -87,6 +87,12 @@ type ArticleVersion struct {
 	WordCount       int32              `json:"word_count"`
 	SourceLabel     pgtype.Text        `json:"source_label"`
 	CreatedAt       pgtype.Timestamptz `json:"created_at"`
+	// Plaintext extracted at save time, used by compliance gate to skip diff reconstruction.
+	PlaintextSnapshot pgtype.Text `json:"plaintext_snapshot"`
+	// Hot-path manual review stamp: none|pending|approved|rejected.
+	ManualReviewStatus    string             `json:"manual_review_status"`
+	ManualReviewID        pgtype.Int8        `json:"manual_review_id"`
+	ManualReviewUpdatedAt pgtype.Timestamptz `json:"manual_review_updated_at"`
 }
 
 type AuditLog struct {
@@ -153,6 +159,105 @@ type Competitor struct {
 	DeletedAt        pgtype.Timestamptz `json:"deleted_at"`
 }
 
+type ComplianceAckRecord struct {
+	ID                int64              `json:"id"`
+	TenantID          int64              `json:"tenant_id"`
+	ArticleID         int64              `json:"article_id"`
+	ArticleVersionID  int64              `json:"article_version_id"`
+	CheckRecordID     int64              `json:"check_record_id"`
+	ContentHash       string             `json:"content_hash"`
+	PolicyFingerprint string             `json:"policy_fingerprint"`
+	AcknowledgedBy    int64              `json:"acknowledged_by"`
+	AckViolationIds   []int64            `json:"ack_violation_ids"`
+	ExpiresAt         pgtype.Timestamptz `json:"expires_at"`
+	ConsumedAt        pgtype.Timestamptz `json:"consumed_at"`
+	ConsumedByJobID   pgtype.UUID        `json:"consumed_by_job_id"`
+	CreatedAt         pgtype.Timestamptz `json:"created_at"`
+}
+
+type ComplianceCheckRecord struct {
+	ID                 int64              `json:"id"`
+	TenantID           int64              `json:"tenant_id"`
+	ArticleID          pgtype.Int8        `json:"article_id"`
+	ArticleVersionID   pgtype.Int8        `json:"article_version_id"`
+	TargetPlatforms    []string           `json:"target_platforms"`
+	ContentHash        string             `json:"content_hash"`
+	PolicyFingerprint  string             `json:"policy_fingerprint"`
+	TriggerSource      string             `json:"trigger_source"`
+	EnforcementMode    string             `json:"enforcement_mode"`
+	HighestLevel       pgtype.Text        `json:"highest_level"`
+	Passed             bool               `json:"passed"`
+	HitCount           int32              `json:"hit_count"`
+	StoredHitCount     int32              `json:"stored_hit_count"`
+	Truncated          bool               `json:"truncated"`
+	DictVersions       []byte             `json:"dict_versions"`
+	LlmUsed            bool               `json:"llm_used"`
+	DurationMs         int32              `json:"duration_ms"`
+	CheckedBy          pgtype.Int8        `json:"checked_by"`
+	CheckedAt          pgtype.Timestamptz `json:"checked_at"`
+	ManualReviewStatus string             `json:"manual_review_status"`
+	ManualReviewID     pgtype.Int8        `json:"manual_review_id"`
+}
+
+type ComplianceManualReview struct {
+	ID                        int64              `json:"id"`
+	TenantID                  int64              `json:"tenant_id"`
+	ArticleID                 int64              `json:"article_id"`
+	ArticleVersionID          int64              `json:"article_version_id"`
+	OriginalCheckRecordID     pgtype.Int8        `json:"original_check_record_id"`
+	OriginalContentHash       string             `json:"original_content_hash"`
+	OriginalPolicyFingerprint string             `json:"original_policy_fingerprint"`
+	OriginalTargetPlatforms   []string           `json:"original_target_platforms"`
+	OriginalViolationSummary  []byte             `json:"original_violation_summary"`
+	RequestedBy               int64              `json:"requested_by"`
+	RequestedAt               pgtype.Timestamptz `json:"requested_at"`
+	RequestNote               pgtype.Text        `json:"request_note"`
+	Status                    string             `json:"status"`
+	CancelledBy               pgtype.Int8        `json:"cancelled_by"`
+	CancelledAt               pgtype.Timestamptz `json:"cancelled_at"`
+	CancelReason              pgtype.Text        `json:"cancel_reason"`
+	ReviewedBy                pgtype.Int8        `json:"reviewed_by"`
+	ReviewedAt                pgtype.Timestamptz `json:"reviewed_at"`
+	DecisionReason            pgtype.Text        `json:"decision_reason"`
+}
+
+type ComplianceReviewJob struct {
+	ID               int64              `json:"id"`
+	MessageID        pgtype.UUID        `json:"message_id"`
+	TenantID         int64              `json:"tenant_id"`
+	ArticleID        int64              `json:"article_id"`
+	ArticleVersionID int64              `json:"article_version_id"`
+	CheckRecordID    int64              `json:"check_record_id"`
+	Status           string             `json:"status"`
+	Attempts         int32              `json:"attempts"`
+	AvailableAt      pgtype.Timestamptz `json:"available_at"`
+	LockedAt         pgtype.Timestamptz `json:"locked_at"`
+	LockedBy         pgtype.Text        `json:"locked_by"`
+	LastError        pgtype.Text        `json:"last_error"`
+	CreatedAt        pgtype.Timestamptz `json:"created_at"`
+	UpdatedAt        pgtype.Timestamptz `json:"updated_at"`
+}
+
+type ComplianceViolation struct {
+	ID                  int64              `json:"id"`
+	RecordID            int64              `json:"record_id"`
+	TenantID            int64              `json:"tenant_id"`
+	PlatformCode        pgtype.Text        `json:"platform_code"`
+	Source              string             `json:"source"`
+	DictionaryCode      pgtype.Text        `json:"dictionary_code"`
+	DictionaryName      pgtype.Text        `json:"dictionary_name"`
+	TermPattern         pgtype.Text        `json:"term_pattern"`
+	MatchedText         string             `json:"matched_text"`
+	StartOffset         int32              `json:"start_offset"`
+	EndOffset           int32              `json:"end_offset"`
+	DomPath             pgtype.Text        `json:"dom_path"`
+	Level               string             `json:"level"`
+	Hint                pgtype.Text        `json:"hint"`
+	ReferenceLaw        pgtype.Text        `json:"reference_law"`
+	AcknowledgedInAckID pgtype.Int8        `json:"acknowledged_in_ack_id"`
+	CreatedAt           pgtype.Timestamptz `json:"created_at"`
+}
+
 type DesktopClient struct {
 	ID            pgtype.UUID        `json:"id"`
 	TenantID      int64              `json:"tenant_id"`
@@ -180,16 +285,22 @@ type DesktopClientPrimaryLease struct {
 }
 
 type DesktopPublishJob struct {
-	ID              int64              `json:"id"`
-	DesktopID       pgtype.UUID        `json:"desktop_id"`
-	TenantID        int64              `json:"tenant_id"`
-	WorkspaceID     int64              `json:"workspace_id"`
-	CreatedByUserID int64              `json:"created_by_user_id"`
-	Title           string             `json:"title"`
-	ContentRef      []byte             `json:"content_ref"`
-	ScheduledAt     pgtype.Timestamptz `json:"scheduled_at"`
-	CreatedAt       pgtype.Timestamptz `json:"created_at"`
-	UpdatedAt       pgtype.Timestamptz `json:"updated_at"`
+	ID                        int64              `json:"id"`
+	DesktopID                 pgtype.UUID        `json:"desktop_id"`
+	TenantID                  int64              `json:"tenant_id"`
+	WorkspaceID               int64              `json:"workspace_id"`
+	CreatedByUserID           int64              `json:"created_by_user_id"`
+	Title                     string             `json:"title"`
+	ContentRef                []byte             `json:"content_ref"`
+	ScheduledAt               pgtype.Timestamptz `json:"scheduled_at"`
+	CreatedAt                 pgtype.Timestamptz `json:"created_at"`
+	UpdatedAt                 pgtype.Timestamptz `json:"updated_at"`
+	ArticleID                 pgtype.Int8        `json:"article_id"`
+	ArticleVersionID          pgtype.Int8        `json:"article_version_id"`
+	Status                    string             `json:"status"`
+	ComplianceBlockedRecordID pgtype.Int8        `json:"compliance_blocked_record_id"`
+	ComplianceBlockedAt       pgtype.Timestamptz `json:"compliance_blocked_at"`
+	ComplianceBlockedReason   pgtype.Text        `json:"compliance_blocked_reason"`
 }
 
 type DesktopTask struct {
diff --git a/server/internal/tenant/repository/queries/desktop_task.sql b/server/internal/tenant/repository/queries/desktop_task.sql
index fcdbfaf..2a7a832 100644
--- a/server/internal/tenant/repository/queries/desktop_task.sql
+++ b/server/internal/tenant/repository/queries/desktop_task.sql
@@ -6,7 +6,9 @@ INSERT INTO desktop_publish_jobs (
     created_by_user_id,
     title,
     content_ref,
-    scheduled_at
+    scheduled_at,
+    article_id,
+    article_version_id
 )
 VALUES (
     sqlc.arg(desktop_id),
@@ -15,7 +17,9 @@ VALUES (
     sqlc.arg(created_by_user_id),
     sqlc.arg(title),
     sqlc.arg(content_ref),
-    sqlc.narg(scheduled_at)
+    sqlc.narg(scheduled_at),
+    sqlc.narg(article_id),
+    sqlc.narg(article_version_id)
 )
 RETURNING *;
 
@@ -59,12 +63,18 @@ LIMIT 1;
 WITH candidate AS (
     SELECT dt.desktop_id
     FROM desktop_tasks AS dt
+    LEFT JOIN desktop_publish_jobs AS j ON j.desktop_id = dt.job_id
     WHERE dt.target_client_id = sqlc.arg(client_id)
       AND dt.status = 'queued'
       AND (
         sqlc.narg(kind)::text IS NULL
         OR dt.kind = sqlc.narg(kind)::text
       )
+      AND (
+        dt.kind <> 'publish'
+        OR j.desktop_id IS NULL
+        OR j.status = 'queued'
+      )
     ORDER BY dt.lane_weight DESC,
         dt.priority DESC,
         COALESCE(dt.enqueued_at, dt.created_at) ASC,
diff --git a/server/internal/tenant/transport/compliance_handler.go b/server/internal/tenant/transport/compliance_handler.go
new file mode 100644
index 0000000..1469117
--- /dev/null
+++ b/server/internal/tenant/transport/compliance_handler.go
@@ -0,0 +1,238 @@
+package transport
+
+import (
+	"errors"
+	"io"
+	"strconv"
+	"strings"
+
+	"github.com/gin-gonic/gin"
+
+	"github.com/geo-platform/tenant-api/internal/bootstrap"
+	"github.com/geo-platform/tenant-api/internal/shared/auth"
+	"github.com/geo-platform/tenant-api/internal/shared/response"
+	tenantcompliance "github.com/geo-platform/tenant-api/internal/tenant/compliance"
+)
+
+type ComplianceHandler struct {
+	svc *tenantcompliance.Service
+}
+
+func NewComplianceHandler(a *bootstrap.App) *ComplianceHandler {
+	return &ComplianceHandler{
+		svc: tenantcompliance.NewService(a.DB, a.ConfigStore, a.Logger).WithRabbitMQ(a.RabbitMQ).WithLLM(a.LLM),
+	}
+}
+
+type complianceCheckPlainRequest struct {
+	Title           string   `json:"title"`
+	Plaintext       string   `json:"plaintext" binding:"required"`
+	TargetPlatforms []string `json:"target_platforms"`
+}
+
+type complianceCheckArticleRequest struct {
+	ArticleVersionID *int64   `json:"article_version_id"`
+	Title            *string  `json:"title"`
+	Plaintext        *string  `json:"plaintext"`
+	TargetPlatforms  []string `json:"target_platforms"`
+	TriggerSource    string   `json:"trigger_source"`
+}
+
+type complianceCreateAckRequest struct {
+	AcknowledgedViolationIDs []int64 `json:"acknowledged_violation_ids" binding:"required"`
+}
+
+type complianceCreateManualReviewRequest struct {
+	CheckRecordID int64  `json:"check_record_id" binding:"required"`
+	Note          string `json:"note" binding:"required"`
+}
+
+type complianceCancelManualReviewRequest struct {
+	Reason string `json:"reason"`
+}
+
+func (h *ComplianceHandler) RuntimeStatus(c *gin.Context) {
+	actor := auth.MustActor(c.Request.Context())
+	data, err := h.svc.RuntimeStatus(c.Request.Context(), actor.TenantID)
+	if err != nil {
+		response.Error(c, err)
+		return
+	}
+	response.Success(c, data)
+}
+
+func (h *ComplianceHandler) CheckPlain(c *gin.Context) {
+	var req complianceCheckPlainRequest
+	if err := c.ShouldBindJSON(&req); err != nil {
+		response.Error(c, response.ErrBadRequest(40001, "invalid_params", err.Error()))
+		return
+	}
+	actor := auth.MustActor(c.Request.Context())
+	data, err := h.svc.CheckPlain(c.Request.Context(), tenantcompliance.CheckPlainRequest{
+		TenantID:        actor.TenantID,
+		ActorID:         actor.UserID,
+		Title:           req.Title,
+		Plaintext:       req.Plaintext,
+		TargetPlatforms: req.TargetPlatforms,
+	})
+	if err != nil {
+		response.Error(c, err)
+		return
+	}
+	response.Success(c, data)
+}
+
+func (h *ComplianceHandler) CreateAck(c *gin.Context) {
+	recordID, ok := parseComplianceInt64Param(c, "id", "check record id")
+	if !ok {
+		return
+	}
+	var req complianceCreateAckRequest
+	if err := c.ShouldBindJSON(&req); err != nil {
+		response.Error(c, response.ErrBadRequest(40001, "invalid_params", err.Error()))
+		return
+	}
+	actor := auth.MustActor(c.Request.Context())
+	data, err := h.svc.CreateAck(c.Request.Context(), actor.TenantID, recordID, actor.UserID, req.AcknowledgedViolationIDs)
+	if err != nil {
+		response.Error(c, err)
+		return
+	}
+	response.SuccessWithStatus(c, 201, data)
+}
+
+func (h *ComplianceHandler) CheckArticle(c *gin.Context) {
+	articleID, ok := parseComplianceInt64Param(c, "id", "article id")
+	if !ok {
+		return
+	}
+	var req complianceCheckArticleRequest
+	if err := c.ShouldBindJSON(&req); err != nil && !errors.Is(err, io.EOF) {
+		response.Error(c, response.ErrBadRequest(40001, "invalid_params", err.Error()))
+		return
+	}
+	actor := auth.MustActor(c.Request.Context())
+	data, err := h.svc.CheckArticle(c.Request.Context(), tenantcompliance.CheckArticleRequest{
+		TenantID:         actor.TenantID,
+		ArticleID:        articleID,
+		ArticleVersionID: req.ArticleVersionID,
+		ActorID:          actor.UserID,
+		Title:            req.Title,
+		Plaintext:        req.Plaintext,
+		TargetPlatforms:  req.TargetPlatforms,
+		TriggerSource:    req.TriggerSource,
+	})
+	if err != nil {
+		response.Error(c, err)
+		return
+	}
+	response.Success(c, data)
+}
+
+func (h *ComplianceHandler) LatestCheck(c *gin.Context) {
+	articleID, ok := parseComplianceInt64Param(c, "id", "article id")
+	if !ok {
+		return
+	}
+	actor := auth.MustActor(c.Request.Context())
+	data, err := h.svc.LatestCheck(c.Request.Context(), actor.TenantID, articleID)
+	if err != nil {
+		response.Error(c, err)
+		return
+	}
+	response.Success(c, data)
+}
+
+func (h *ComplianceHandler) SubmitManualReview(c *gin.Context) {
+	articleID, ok := parseComplianceInt64Param(c, "id", "article id")
+	if !ok {
+		return
+	}
+	var req complianceCreateManualReviewRequest
+	if err := c.ShouldBindJSON(&req); err != nil {
+		response.Error(c, response.ErrBadRequest(40001, "invalid_params", err.Error()))
+		return
+	}
+	actor := auth.MustActor(c.Request.Context())
+	data, err := h.svc.SubmitManualReview(c.Request.Context(), tenantcompliance.CreateManualReviewRequest{
+		TenantID:      actor.TenantID,
+		ArticleID:     articleID,
+		ActorID:       actor.UserID,
+		CheckRecordID: req.CheckRecordID,
+		Note:          req.Note,
+	})
+	if err != nil {
+		response.Error(c, err)
+		return
+	}
+	response.SuccessWithStatus(c, 201, data)
+}
+
+func (h *ComplianceHandler) LatestManualReview(c *gin.Context) {
+	articleID, ok := parseComplianceInt64Param(c, "id", "article id")
+	if !ok {
+		return
+	}
+	versionID, ok := optionalComplianceInt64Query(c, "article_version_id")
+	if !ok {
+		return
+	}
+	actor := auth.MustActor(c.Request.Context())
+	data, err := h.svc.LatestManualReview(c.Request.Context(), actor.TenantID, articleID, versionID)
+	if err != nil {
+		response.Error(c, err)
+		return
+	}
+	response.Success(c, data)
+}
+
+func (h *ComplianceHandler) CancelManualReview(c *gin.Context) {
+	articleID, ok := parseComplianceInt64Param(c, "id", "article id")
+	if !ok {
+		return
+	}
+	reviewID, ok := parseComplianceInt64Param(c, "review_id", "manual review id")
+	if !ok {
+		return
+	}
+	var req complianceCancelManualReviewRequest
+	if err := c.ShouldBindJSON(&req); err != nil && !errors.Is(err, io.EOF) {
+		response.Error(c, response.ErrBadRequest(40001, "invalid_params", err.Error()))
+		return
+	}
+	actor := auth.MustActor(c.Request.Context())
+	data, err := h.svc.CancelManualReview(c.Request.Context(), tenantcompliance.CancelManualReviewRequest{
+		TenantID:  actor.TenantID,
+		ArticleID: articleID,
+		ActorID:   actor.UserID,
+		ReviewID:  reviewID,
+		Reason:    req.Reason,
+	})
+	if err != nil {
+		response.Error(c, err)
+		return
+	}
+	response.Success(c, data)
+}
+
+func parseComplianceInt64Param(c *gin.Context, name, label string) (int64, bool) {
+	value, err := strconv.ParseInt(strings.TrimSpace(c.Param(name)), 10, 64)
+	if err != nil || value <= 0 {
+		response.Error(c, response.ErrBadRequest(40001, "invalid_id", label+" must be a positive integer"))
+		return 0, false
+	}
+	return value, true
+}
+
+func optionalComplianceInt64Query(c *gin.Context, name string) (*int64, bool) {
+	raw := strings.TrimSpace(c.Query(name))
+	if raw == "" {
+		return nil, true
+	}
+	value, err := strconv.ParseInt(raw, 10, 64)
+	if err != nil || value <= 0 {
+		response.Error(c, response.ErrBadRequest(40001, "invalid_params", name+" must be a positive integer"))
+		return nil, false
+	}
+	return &value, true
+}
diff --git a/server/internal/tenant/transport/desktop_task_handler.go b/server/internal/tenant/transport/desktop_task_handler.go
index 74e6596..cf50a05 100644
--- a/server/internal/tenant/transport/desktop_task_handler.go
+++ b/server/internal/tenant/transport/desktop_task_handler.go
@@ -22,17 +22,19 @@ type DesktopTaskHandler struct {
 
 func NewDesktopTaskHandler(a *bootstrap.App) *DesktopTaskHandler {
 	return &DesktopTaskHandler{
-		svc: app.NewDesktopTaskService(
+		svc: app.NewDesktopTaskServiceWithConfig(
 			a.DB,
 			a.MonitoringDB,
 			a.RabbitMQ,
 			a.Logger,
+			a.ConfigStore,
 		).WithCache(a.Cache).WithRedis(a.Redis),
-		publishSvc: app.NewPublishJobService(
+		publishSvc: app.NewPublishJobServiceWithConfig(
 			a.DB,
 			a.RabbitMQ,
 			a.Redis,
 			a.Logger,
+			a.ConfigStore,
 		).WithCache(a.Cache),
 	}
 }
diff --git a/server/internal/tenant/transport/publish_job_handler.go b/server/internal/tenant/transport/publish_job_handler.go
index 7820f9f..02d94b5 100644
--- a/server/internal/tenant/transport/publish_job_handler.go
+++ b/server/internal/tenant/transport/publish_job_handler.go
@@ -15,7 +15,7 @@ type PublishJobHandler struct {
 
 func NewPublishJobHandler(a *bootstrap.App) *PublishJobHandler {
 	return &PublishJobHandler{
-		svc: app.NewPublishJobService(a.DB, a.RabbitMQ, a.Redis, a.Logger).WithCache(a.Cache),
+		svc: app.NewPublishJobServiceWithConfig(a.DB, a.RabbitMQ, a.Redis, a.Logger, a.ConfigStore).WithCache(a.Cache),
 	}
 }
 
diff --git a/server/internal/tenant/transport/router.go b/server/internal/tenant/transport/router.go
index d4b75a1..8a5d43e 100644
--- a/server/internal/tenant/transport/router.go
+++ b/server/internal/tenant/transport/router.go
@@ -76,6 +76,12 @@ func RegisterRoutes(app *bootstrap.App) {
 	tenantProtected.POST("/tasks/:id/cancel", desktopTaskHandler.TenantCancel)
 	tenantProtected.POST("/publish-jobs", publishJobHandler.Create)
 
+	complianceHandler := NewComplianceHandler(app)
+	compliance := tenantProtected.Group("/compliance")
+	compliance.GET("/runtime-status", complianceHandler.RuntimeStatus)
+	compliance.POST("/check", complianceHandler.CheckPlain)
+	compliance.POST("/check-records/:id/ack", complianceHandler.CreateAck)
+
 	media := tenantProtected.Group("/media")
 	media.GET("/platforms", mediaHandler.ListPlatforms)
 
@@ -157,6 +163,11 @@ func RegisterRoutes(app *bootstrap.App) {
 	articles.PUT("/:id", artHandler.Update)
 	articles.GET("/:id/stream", artHandler.Stream)
 	articles.GET("/:id/versions", artHandler.Versions)
+	articles.POST("/:id/compliance/check", complianceHandler.CheckArticle)
+	articles.GET("/:id/compliance/latest", complianceHandler.LatestCheck)
+	articles.POST("/:id/compliance/manual-reviews", complianceHandler.SubmitManualReview)
+	articles.GET("/:id/compliance/manual-reviews/latest", complianceHandler.LatestManualReview)
+	articles.POST("/:id/compliance/manual-reviews/:review_id/cancel", complianceHandler.CancelManualReview)
 	articles.GET("/:id/publish-records", mediaHandler.ListPublishRecords)
 	articles.DELETE("/:id", artHandler.Delete)
 
diff --git a/server/internal/worker/generate/compliance_review_worker.go b/server/internal/worker/generate/compliance_review_worker.go
new file mode 100644
index 0000000..3ff89f3
--- /dev/null
+++ b/server/internal/worker/generate/compliance_review_worker.go
@@ -0,0 +1,163 @@
+package generate
+
+import (
+	"context"
+	"errors"
+	"fmt"
+	"os"
+	"time"
+
+	amqp "github.com/rabbitmq/amqp091-go"
+	"go.uber.org/zap"
+
+	"github.com/geo-platform/tenant-api/internal/shared/config"
+	"github.com/geo-platform/tenant-api/internal/shared/messaging/rabbitmq"
+	tenantcompliance "github.com/geo-platform/tenant-api/internal/tenant/compliance"
+)
+
+var errComplianceReviewConsumerClosed = errors.New("compliance review consumer channel closed")
+
+type ComplianceReviewWorker struct {
+	rabbitMQ          *rabbitmq.Client
+	compliance        *tenantcompliance.Service
+	logger            *zap.Logger
+	configProvider    config.Provider
+	retryInterval     time.Duration
+	consumerPrefix    string
+	workerConcurrency int
+}
+
+func NewComplianceReviewWorker(
+	rabbitMQClient *rabbitmq.Client,
+	complianceService *tenantcompliance.Service,
+	logger *zap.Logger,
+	cfg config.ComplianceConfig,
+) *ComplianceReviewWorker {
+	config.NormalizeComplianceConfig(&cfg)
+	return &ComplianceReviewWorker{
+		rabbitMQ:          rabbitMQClient,
+		compliance:        complianceService,
+		logger:            logger,
+		retryInterval:     5 * time.Second,
+		consumerPrefix:    fmt.Sprintf("compliance-review-%d", os.Getpid()),
+		workerConcurrency: cfg.ReviewWorkerConcurrency,
+	}
+}
+
+func (w *ComplianceReviewWorker) WithConfigProvider(provider config.Provider) *ComplianceReviewWorker {
+	if w != nil {
+		w.configProvider = provider
+	}
+	return w
+}
+
+func (w *ComplianceReviewWorker) Start(ctx context.Context) {
+	if w == nil || w.rabbitMQ == nil || w.compliance == nil {
+		return
+	}
+	concurrency := w.runtimeConfig().ReviewWorkerConcurrency
+	if concurrency <= 0 {
+		concurrency = 1
+	}
+	for i := 0; i < concurrency; i++ {
+		consumerName := fmt.Sprintf("%s-%d", w.consumerPrefix, i+1)
+		go w.run(ctx, consumerName)
+	}
+}
+
+func (w *ComplianceReviewWorker) run(ctx context.Context, consumerName string) {
+	for {
+		if err := w.consumeOnce(ctx, consumerName); err != nil && ctx.Err() == nil && w.logger != nil {
+			if errors.Is(err, errComplianceReviewConsumerClosed) {
+				w.logger.Info("compliance review consumer channel closed, retrying",
+					zap.String("consumer", consumerName),
+				)
+			} else {
+				w.logger.Warn("compliance review worker stopped unexpectedly",
+					zap.Error(err),
+					zap.String("consumer", consumerName),
+				)
+			}
+		}
+
+		select {
+		case <-ctx.Done():
+			return
+		case <-time.After(w.retryInterval):
+		}
+	}
+}
+
+func (w *ComplianceReviewWorker) consumeOnce(ctx context.Context, consumerName string) error {
+	deliveries, ch, err := w.rabbitMQ.ConsumeComplianceReviewTask(consumerName)
+	if err != nil {
+		return err
+	}
+	defer ch.Close()
+
+	for {
+		select {
+		case <-ctx.Done():
+			return nil
+		case delivery, ok := <-deliveries:
+			if !ok {
+				return errComplianceReviewConsumerClosed
+			}
+			w.handleDelivery(ctx, delivery)
+		}
+	}
+}
+
+func (w *ComplianceReviewWorker) handleDelivery(parent context.Context, delivery amqp.Delivery) {
+	msg, err := tenantcompliance.DecodeReviewJobMessage(delivery.Body)
+	if err != nil {
+		w.rejectDelivery(delivery, false, err, 0)
+		return
+	}
+
+	ctx, cancel := context.WithTimeout(parent, w.runtimeConfig().ReviewWorkerTimeout)
+	defer cancel()
+
+	err = w.compliance.ProcessReviewJob(ctx, msg)
+	if err != nil {
+		w.rejectDelivery(delivery, false, err, msg.JobID)
+		return
+	}
+	if err := delivery.Ack(false); err != nil && w.logger != nil {
+		w.logger.Warn("compliance review ack failed",
+			zap.Error(err),
+			zap.Int64("job_id", msg.JobID),
+			zap.Int64("check_record_id", msg.CheckRecordID),
+		)
+	}
+}
+
+func (w *ComplianceReviewWorker) runtimeConfig() config.ComplianceConfig {
+	if w != nil && w.configProvider != nil {
+		if cfg := w.configProvider.Current(); cfg != nil {
+			out := cfg.Compliance
+			config.NormalizeComplianceConfig(&out)
+			return out
+		}
+	}
+	out := config.ComplianceConfig{Enabled: true}
+	config.NormalizeComplianceConfig(&out)
+	return out
+}
+
+func (w *ComplianceReviewWorker) rejectDelivery(delivery amqp.Delivery, requeue bool, err error, jobID int64) {
+	if nackErr := delivery.Nack(false, requeue); nackErr != nil && w.logger != nil {
+		w.logger.Warn("compliance review nack failed",
+			zap.Error(nackErr),
+			zap.Int64("job_id", jobID),
+		)
+	}
+	if w.logger != nil {
+		w.logger.Warn("compliance review processing failed",
+			zap.Error(err),
+			zap.Bool("requeue", requeue),
+			zap.Bool("redelivered", delivery.Redelivered),
+			zap.Int64("job_id", jobID),
+		)
+	}
+}
diff --git a/server/migrations/20260502110000_generation_task_leases_compat.down.sql b/server/migrations/20260502110000_generation_task_leases_compat.down.sql
new file mode 100644
index 0000000..f314419
--- /dev/null
+++ b/server/migrations/20260502110000_generation_task_leases_compat.down.sql
@@ -0,0 +1,2 @@
+-- Compatibility marker; schema rollback is owned by
+-- 20260503110000_add_generation_task_leases.down.sql.
diff --git a/server/migrations/20260502110000_generation_task_leases_compat.up.sql b/server/migrations/20260502110000_generation_task_leases_compat.up.sql
new file mode 100644
index 0000000..661ef8c
--- /dev/null
+++ b/server/migrations/20260502110000_generation_task_leases_compat.up.sql
@@ -0,0 +1,5 @@
+-- Compatibility marker for environments that already applied the
+-- generation task lease migration under this timestamp.
+--
+-- The canonical, idempotent migration is
+-- 20260503110000_add_generation_task_leases.up.sql.
diff --git a/server/migrations/20260503110000_add_generation_task_leases.up.sql b/server/migrations/20260503110000_add_generation_task_leases.up.sql
index 462e0e2..187bd4e 100644
--- a/server/migrations/20260503110000_add_generation_task_leases.up.sql
+++ b/server/migrations/20260503110000_add_generation_task_leases.up.sql
@@ -1,14 +1,14 @@
 ALTER TABLE generation_tasks
-    ADD COLUMN lease_token VARCHAR(64),
-    ADD COLUMN lease_owner VARCHAR(128),
-    ADD COLUMN lease_expires_at TIMESTAMPTZ,
-    ADD COLUMN attempt_count INT NOT NULL DEFAULT 0,
-    ADD COLUMN last_heartbeat_at TIMESTAMPTZ;
+    ADD COLUMN IF NOT EXISTS lease_token VARCHAR(64),
+    ADD COLUMN IF NOT EXISTS lease_owner VARCHAR(128),
+    ADD COLUMN IF NOT EXISTS lease_expires_at TIMESTAMPTZ,
+    ADD COLUMN IF NOT EXISTS attempt_count INT NOT NULL DEFAULT 0,
+    ADD COLUMN IF NOT EXISTS last_heartbeat_at TIMESTAMPTZ;
 
-CREATE INDEX idx_generation_tasks_running_lease
+CREATE INDEX IF NOT EXISTS idx_generation_tasks_running_lease
     ON generation_tasks(lease_expires_at, id)
     WHERE status = 'running';
 
-CREATE INDEX idx_generation_tasks_queued_stale
+CREATE INDEX IF NOT EXISTS idx_generation_tasks_queued_stale
     ON generation_tasks(updated_at, id)
     WHERE status = 'queued';
diff --git a/server/migrations/20260505102000_create_compliance_tables.down.sql b/server/migrations/20260505102000_create_compliance_tables.down.sql
new file mode 100644
index 0000000..0c10757
--- /dev/null
+++ b/server/migrations/20260505102000_create_compliance_tables.down.sql
@@ -0,0 +1,29 @@
+DROP INDEX IF EXISTS idx_desktop_publish_jobs_status_scheduled;
+
+ALTER TABLE desktop_publish_jobs
+    DROP COLUMN IF EXISTS compliance_blocked_reason,
+    DROP COLUMN IF EXISTS compliance_blocked_at,
+    DROP COLUMN IF EXISTS compliance_blocked_record_id,
+    DROP COLUMN IF EXISTS status,
+    DROP COLUMN IF EXISTS article_version_id,
+    DROP COLUMN IF EXISTS article_id;
+
+ALTER TABLE article_versions
+    DROP CONSTRAINT IF EXISTS fk_article_versions_manual_review;
+
+DROP TABLE IF EXISTS compliance_manual_reviews;
+DROP TABLE IF EXISTS compliance_review_jobs;
+
+ALTER TABLE compliance_violations
+    DROP CONSTRAINT IF EXISTS fk_compliance_violations_ack;
+
+DROP TABLE IF EXISTS compliance_ack_records;
+DROP TABLE IF EXISTS compliance_violations;
+DROP TABLE IF EXISTS compliance_check_records;
+
+ALTER TABLE article_versions
+    DROP CONSTRAINT IF EXISTS ck_article_versions_manual_review_status,
+    DROP COLUMN IF EXISTS manual_review_updated_at,
+    DROP COLUMN IF EXISTS manual_review_id,
+    DROP COLUMN IF EXISTS manual_review_status,
+    DROP COLUMN IF EXISTS plaintext_snapshot;
diff --git a/server/migrations/20260505102000_create_compliance_tables.up.sql b/server/migrations/20260505102000_create_compliance_tables.up.sql
new file mode 100644
index 0000000..7f4cc3e
--- /dev/null
+++ b/server/migrations/20260505102000_create_compliance_tables.up.sql
@@ -0,0 +1,214 @@
+ALTER TABLE article_versions
+    ADD COLUMN IF NOT EXISTS plaintext_snapshot TEXT,
+    ADD COLUMN IF NOT EXISTS manual_review_status VARCHAR(16) NOT NULL DEFAULT 'none',
+    ADD COLUMN IF NOT EXISTS manual_review_id BIGINT,
+    ADD COLUMN IF NOT EXISTS manual_review_updated_at TIMESTAMPTZ;
+
+ALTER TABLE article_versions
+    DROP CONSTRAINT IF EXISTS ck_article_versions_manual_review_status;
+
+ALTER TABLE article_versions
+    ADD CONSTRAINT ck_article_versions_manual_review_status
+    CHECK (manual_review_status IN ('none', 'pending', 'approved', 'rejected'));
+
+COMMENT ON COLUMN article_versions.plaintext_snapshot IS
+    'Plaintext extracted at save time, used by compliance gate to skip diff reconstruction.';
+
+COMMENT ON COLUMN article_versions.manual_review_status IS
+    'Hot-path manual review stamp: none|pending|approved|rejected.';
+
+CREATE TABLE IF NOT EXISTS compliance_check_records (
+    id                 BIGSERIAL PRIMARY KEY,
+    tenant_id          BIGINT NOT NULL REFERENCES tenants(id),
+    article_id         BIGINT REFERENCES articles(id) ON DELETE SET NULL,
+    article_version_id BIGINT REFERENCES article_versions(id) ON DELETE SET NULL,
+    target_platforms   TEXT[] NOT NULL DEFAULT '{}',
+    content_hash       CHAR(64) NOT NULL,
+    policy_fingerprint VARCHAR(64) NOT NULL,
+    trigger_source     VARCHAR(32) NOT NULL,
+    enforcement_mode   VARCHAR(24) NOT NULL,
+    highest_level      VARCHAR(16),
+    passed             BOOLEAN NOT NULL,
+    hit_count          INT NOT NULL DEFAULT 0,
+    stored_hit_count   INT NOT NULL DEFAULT 0,
+    truncated          BOOLEAN NOT NULL DEFAULT FALSE,
+    dict_versions      JSONB NOT NULL DEFAULT '{}'::jsonb,
+    llm_used           BOOLEAN NOT NULL DEFAULT FALSE,
+    duration_ms        INT NOT NULL DEFAULT 0,
+    checked_by         BIGINT,
+    checked_at         TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+    manual_review_status VARCHAR(16) NOT NULL DEFAULT 'none',
+    manual_review_id   BIGINT,
+    CONSTRAINT ck_compliance_check_trigger_source CHECK (
+        trigger_source IN (
+            'editor_manual',
+            'publish_gate',
+            'auto_draft',
+            'api',
+            'scheduler_recheck',
+            'manual_review_bypass'
+        )
+    ),
+    CONSTRAINT ck_compliance_check_mode CHECK (enforcement_mode IN ('mandatory', 'advisory', 'disabled')),
+    CONSTRAINT ck_compliance_check_highest_level CHECK (highest_level IS NULL OR highest_level IN ('block', 'high', 'medium', 'info')),
+    CONSTRAINT ck_compliance_check_manual_status CHECK (manual_review_status IN ('none', 'pending', 'approved', 'rejected'))
+);
+
+CREATE INDEX IF NOT EXISTS idx_compliance_check_records_article_checked
+    ON compliance_check_records (tenant_id, article_id, checked_at DESC);
+
+CREATE INDEX IF NOT EXISTS idx_compliance_check_records_version_checked
+    ON compliance_check_records (article_version_id, checked_at DESC)
+    WHERE article_version_id IS NOT NULL;
+
+CREATE TABLE IF NOT EXISTS compliance_violations (
+    id                         BIGSERIAL PRIMARY KEY,
+    record_id                  BIGINT NOT NULL REFERENCES compliance_check_records(id) ON DELETE CASCADE,
+    tenant_id                  BIGINT NOT NULL REFERENCES tenants(id),
+    platform_code              TEXT,
+    source                     VARCHAR(24) NOT NULL,
+    dictionary_code            VARCHAR(64),
+    dictionary_name            VARCHAR(128),
+    term_pattern               TEXT,
+    matched_text               TEXT NOT NULL,
+    start_offset               INT NOT NULL DEFAULT 0,
+    end_offset                 INT NOT NULL DEFAULT 0,
+    dom_path                   TEXT,
+    level                      VARCHAR(16) NOT NULL,
+    hint                       TEXT,
+    reference_law              TEXT,
+    acknowledged_in_ack_id     BIGINT,
+    created_at                 TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+    CONSTRAINT ck_compliance_violation_source CHECK (source IN ('dict', 'regex', 'llm')),
+    CONSTRAINT ck_compliance_violation_level CHECK (level IN ('block', 'high', 'medium', 'info')),
+    CONSTRAINT ck_compliance_violation_offsets CHECK (start_offset >= 0 AND end_offset >= start_offset),
+    CONSTRAINT ck_violations_matched_text_len CHECK (char_length(matched_text) <= 80)
+);
+
+CREATE INDEX IF NOT EXISTS idx_compliance_violations_record
+    ON compliance_violations (record_id, id);
+
+CREATE INDEX IF NOT EXISTS idx_compliance_violations_tenant_level
+    ON compliance_violations (tenant_id, level, id DESC);
+
+CREATE TABLE IF NOT EXISTS compliance_ack_records (
+    id                 BIGSERIAL PRIMARY KEY,
+    tenant_id          BIGINT NOT NULL REFERENCES tenants(id),
+    article_id         BIGINT NOT NULL REFERENCES articles(id),
+    article_version_id BIGINT NOT NULL REFERENCES article_versions(id),
+    check_record_id    BIGINT NOT NULL REFERENCES compliance_check_records(id) ON DELETE CASCADE,
+    content_hash       CHAR(64) NOT NULL,
+    policy_fingerprint VARCHAR(64) NOT NULL,
+    acknowledged_by    BIGINT NOT NULL REFERENCES users(id),
+    ack_violation_ids  BIGINT[] NOT NULL,
+    expires_at         TIMESTAMPTZ NOT NULL,
+    consumed_at        TIMESTAMPTZ,
+    consumed_by_job_id UUID,
+    created_at         TIMESTAMPTZ NOT NULL DEFAULT NOW()
+);
+
+CREATE INDEX IF NOT EXISTS idx_ack_lookup
+    ON compliance_ack_records (tenant_id, article_id, article_version_id, check_record_id)
+    WHERE consumed_at IS NULL;
+
+ALTER TABLE compliance_violations
+    DROP CONSTRAINT IF EXISTS fk_compliance_violations_ack;
+
+ALTER TABLE compliance_violations
+    ADD CONSTRAINT fk_compliance_violations_ack
+    FOREIGN KEY (acknowledged_in_ack_id)
+    REFERENCES compliance_ack_records(id)
+    ON DELETE SET NULL;
+
+CREATE TABLE IF NOT EXISTS compliance_review_jobs (
+    id                 BIGSERIAL PRIMARY KEY,
+    message_id         UUID NOT NULL,
+    tenant_id          BIGINT NOT NULL REFERENCES tenants(id),
+    article_id         BIGINT NOT NULL REFERENCES articles(id),
+    article_version_id BIGINT NOT NULL REFERENCES article_versions(id),
+    check_record_id    BIGINT NOT NULL REFERENCES compliance_check_records(id) ON DELETE CASCADE,
+    status             VARCHAR(16) NOT NULL DEFAULT 'pending',
+    attempts           INT NOT NULL DEFAULT 0,
+    available_at       TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+    locked_at          TIMESTAMPTZ,
+    locked_by          TEXT,
+    last_error         TEXT,
+    created_at         TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+    updated_at         TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+    CONSTRAINT uk_compliance_review_jobs_record UNIQUE (check_record_id),
+    CONSTRAINT uk_compliance_review_jobs_message UNIQUE (message_id),
+    CONSTRAINT ck_compliance_review_job_status CHECK (status IN ('pending', 'running', 'done', 'failed'))
+);
+
+CREATE INDEX IF NOT EXISTS idx_compliance_review_jobs_pending
+    ON compliance_review_jobs (available_at, id)
+    WHERE status = 'pending';
+
+CREATE TABLE IF NOT EXISTS compliance_manual_reviews (
+    id                          BIGSERIAL PRIMARY KEY,
+    tenant_id                   BIGINT NOT NULL REFERENCES tenants(id),
+    article_id                  BIGINT NOT NULL REFERENCES articles(id),
+    article_version_id          BIGINT NOT NULL REFERENCES article_versions(id),
+    original_check_record_id    BIGINT REFERENCES compliance_check_records(id) ON DELETE SET NULL,
+    original_content_hash       CHAR(64) NOT NULL,
+    original_policy_fingerprint VARCHAR(64) NOT NULL,
+    original_target_platforms   TEXT[] NOT NULL DEFAULT '{}',
+    original_violation_summary  JSONB NOT NULL DEFAULT '[]'::jsonb,
+    requested_by                BIGINT NOT NULL REFERENCES users(id),
+    requested_at                TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+    request_note                TEXT,
+    status                      VARCHAR(16) NOT NULL DEFAULT 'pending',
+    cancelled_by                BIGINT REFERENCES users(id),
+    cancelled_at                TIMESTAMPTZ,
+    cancel_reason               TEXT,
+    reviewed_by                 BIGINT,
+    reviewed_at                 TIMESTAMPTZ,
+    decision_reason             TEXT,
+    CONSTRAINT ck_manual_review_request_note_len CHECK (request_note IS NULL OR char_length(request_note) <= 500),
+    CONSTRAINT ck_manual_review_cancel_reason_len CHECK (cancel_reason IS NULL OR char_length(cancel_reason) <= 500),
+    CONSTRAINT ck_manual_review_decision_reason_len CHECK (decision_reason IS NULL OR char_length(decision_reason) <= 1000),
+    CONSTRAINT ck_manual_review_status CHECK (status IN ('pending', 'approved', 'rejected', 'cancelled')),
+    CONSTRAINT ck_manual_review_decision CHECK (
+        (status = 'pending' AND reviewed_by IS NULL AND reviewed_at IS NULL AND decision_reason IS NULL
+                             AND cancelled_by IS NULL AND cancelled_at IS NULL AND cancel_reason IS NULL) OR
+        (status IN ('approved','rejected') AND reviewed_by IS NOT NULL AND reviewed_at IS NOT NULL AND decision_reason IS NOT NULL
+                                          AND cancelled_by IS NULL AND cancelled_at IS NULL AND cancel_reason IS NULL) OR
+        (status = 'cancelled' AND reviewed_by IS NULL AND reviewed_at IS NULL AND decision_reason IS NULL
+                              AND cancelled_by IS NOT NULL AND cancelled_at IS NOT NULL)
+    )
+);
+
+CREATE UNIQUE INDEX IF NOT EXISTS uk_manual_review_active_per_version
+    ON compliance_manual_reviews (article_version_id)
+    WHERE status IN ('pending', 'approved', 'rejected');
+
+CREATE INDEX IF NOT EXISTS idx_manual_review_pending_queue
+    ON compliance_manual_reviews (requested_at)
+    WHERE status = 'pending';
+
+CREATE INDEX IF NOT EXISTS idx_manual_review_lookup_by_version
+    ON compliance_manual_reviews (article_version_id, status);
+
+CREATE INDEX IF NOT EXISTS idx_manual_review_tenant_status
+    ON compliance_manual_reviews (tenant_id, status, requested_at DESC);
+
+ALTER TABLE article_versions
+    DROP CONSTRAINT IF EXISTS fk_article_versions_manual_review;
+
+ALTER TABLE article_versions
+    ADD CONSTRAINT fk_article_versions_manual_review
+    FOREIGN KEY (manual_review_id)
+    REFERENCES compliance_manual_reviews(id)
+    ON DELETE SET NULL;
+
+ALTER TABLE desktop_publish_jobs
+    ADD COLUMN IF NOT EXISTS article_id BIGINT REFERENCES articles(id),
+    ADD COLUMN IF NOT EXISTS article_version_id BIGINT REFERENCES article_versions(id),
+    ADD COLUMN IF NOT EXISTS status VARCHAR(32) NOT NULL DEFAULT 'queued',
+    ADD COLUMN IF NOT EXISTS compliance_blocked_record_id BIGINT REFERENCES compliance_check_records(id) ON DELETE SET NULL,
+    ADD COLUMN IF NOT EXISTS compliance_blocked_at TIMESTAMPTZ,
+    ADD COLUMN IF NOT EXISTS compliance_blocked_reason TEXT;
+
+CREATE INDEX IF NOT EXISTS idx_desktop_publish_jobs_status_scheduled
+    ON desktop_publish_jobs (status, scheduled_at, created_at)
+    WHERE status IN ('queued', 'blocked_by_compliance');
diff --git a/server/migrations_ops/20260505100000_create_compliance_ops_tables.down.sql b/server/migrations_ops/20260505100000_create_compliance_ops_tables.down.sql
new file mode 100644
index 0000000..823e9de
--- /dev/null
+++ b/server/migrations_ops/20260505100000_create_compliance_ops_tables.down.sql
@@ -0,0 +1,4 @@
+DROP TABLE IF EXISTS ops.compliance_policies;
+DROP TABLE IF EXISTS ops.compliance_dictionary_versions;
+DROP TABLE IF EXISTS ops.compliance_dictionary_terms;
+DROP TABLE IF EXISTS ops.compliance_dictionaries;
diff --git a/server/migrations_ops/20260505100000_create_compliance_ops_tables.up.sql b/server/migrations_ops/20260505100000_create_compliance_ops_tables.up.sql
new file mode 100644
index 0000000..ad50e45
--- /dev/null
+++ b/server/migrations_ops/20260505100000_create_compliance_ops_tables.up.sql
@@ -0,0 +1,84 @@
+CREATE TABLE IF NOT EXISTS ops.compliance_dictionaries (
+    id                   BIGSERIAL PRIMARY KEY,
+    code                 VARCHAR(64) NOT NULL,
+    name                 VARCHAR(64) NOT NULL,
+    platform_scope       VARCHAR(16) NOT NULL DEFAULT 'all',
+    applicable_platforms TEXT[],
+    default_level        VARCHAR(16) NOT NULL DEFAULT 'block',
+    enabled              BOOLEAN NOT NULL DEFAULT TRUE,
+    version              INT NOT NULL DEFAULT 1,
+    description          TEXT,
+    created_by           BIGINT,
+    updated_by           BIGINT,
+    created_at           TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+    updated_at           TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+    CONSTRAINT uk_compliance_dictionaries_code UNIQUE (code),
+    CONSTRAINT ck_compliance_dictionary_platform_scope CHECK (platform_scope IN ('all', 'specific')),
+    CONSTRAINT ck_compliance_dictionary_platforms CHECK (
+        (platform_scope = 'all' AND (applicable_platforms IS NULL OR cardinality(applicable_platforms) = 0))
+        OR
+        (platform_scope = 'specific' AND cardinality(applicable_platforms) >= 1)
+    ),
+    CONSTRAINT ck_compliance_dictionary_default_level CHECK (default_level IN ('block', 'high', 'medium', 'info'))
+);
+
+CREATE INDEX IF NOT EXISTS idx_compliance_dictionaries_enabled_version
+    ON ops.compliance_dictionaries (enabled, version, id);
+
+CREATE TABLE IF NOT EXISTS ops.compliance_dictionary_terms (
+    id             BIGSERIAL PRIMARY KEY,
+    dictionary_id  BIGINT NOT NULL REFERENCES ops.compliance_dictionaries(id) ON DELETE CASCADE,
+    match_type     VARCHAR(24) NOT NULL DEFAULT 'exact',
+    pattern        TEXT NOT NULL,
+    level_override VARCHAR(16),
+    hint           TEXT,
+    reference_law  TEXT,
+    enabled        BOOLEAN NOT NULL DEFAULT TRUE,
+    created_at     TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+    updated_at     TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+    CONSTRAINT ck_compliance_term_match_type CHECK (match_type IN ('exact', 'regex')),
+    CONSTRAINT ck_compliance_term_level CHECK (level_override IS NULL OR level_override IN ('block', 'high', 'medium', 'info')),
+    CONSTRAINT ck_compliance_term_pattern CHECK (char_length(trim(pattern)) > 0)
+);
+
+CREATE INDEX IF NOT EXISTS idx_compliance_terms_dictionary_enabled
+    ON ops.compliance_dictionary_terms (dictionary_id, enabled, id);
+
+CREATE TABLE IF NOT EXISTS ops.compliance_dictionary_versions (
+    id            BIGSERIAL PRIMARY KEY,
+    dictionary_id BIGINT NOT NULL REFERENCES ops.compliance_dictionaries(id) ON DELETE CASCADE,
+    version       INT NOT NULL,
+    snapshot      JSONB NOT NULL DEFAULT '{}'::jsonb,
+    published_by  BIGINT,
+    published_at  TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+    CONSTRAINT uk_compliance_dictionary_versions UNIQUE (dictionary_id, version)
+);
+
+CREATE INDEX IF NOT EXISTS idx_compliance_dictionary_versions_latest
+    ON ops.compliance_dictionary_versions (dictionary_id, version DESC);
+
+CREATE TABLE IF NOT EXISTS ops.compliance_policies (
+    id                   BIGINT PRIMARY KEY DEFAULT 1,
+    master_enabled       BOOLEAN NOT NULL DEFAULT TRUE,
+    enforcement_mode     VARCHAR(24) NOT NULL DEFAULT 'mandatory',
+    enabled_dictionaries JSONB NOT NULL DEFAULT '[]'::jsonb,
+    llm_judge_enabled    BOOLEAN NOT NULL DEFAULT FALSE,
+    llm_categories       JSONB NOT NULL DEFAULT '[]'::jsonb,
+    revision             BIGINT NOT NULL DEFAULT 1,
+    updated_by           BIGINT,
+    created_at           TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+    updated_at           TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+    CONSTRAINT ck_compliance_policy_singleton CHECK (id = 1),
+    CONSTRAINT ck_compliance_policy_mode CHECK (enforcement_mode IN ('mandatory', 'advisory', 'disabled'))
+);
+
+INSERT INTO ops.compliance_policies (
+    id,
+    master_enabled,
+    enforcement_mode,
+    enabled_dictionaries,
+    llm_judge_enabled,
+    llm_categories
+)
+VALUES (1, TRUE, 'mandatory', '[]'::jsonb, FALSE, '[]'::jsonb)
+ON CONFLICT DO NOTHING;
diff --git a/server/migrations_ops/20260505101000_seed_compliance_dictionaries.down.sql b/server/migrations_ops/20260505101000_seed_compliance_dictionaries.down.sql
new file mode 100644
index 0000000..215978f
--- /dev/null
+++ b/server/migrations_ops/20260505101000_seed_compliance_dictionaries.down.sql
@@ -0,0 +1,22 @@
+DELETE FROM ops.compliance_dictionary_versions
+WHERE dictionary_id IN (
+    SELECT id
+    FROM ops.compliance_dictionaries
+    WHERE code IN ('ad_law_extreme', 'political_sensitive', 'violence_pornography', 'generic_prohibited')
+);
+
+DELETE FROM ops.compliance_dictionary_terms
+WHERE dictionary_id IN (
+    SELECT id
+    FROM ops.compliance_dictionaries
+    WHERE code IN ('ad_law_extreme', 'political_sensitive', 'violence_pornography', 'generic_prohibited')
+);
+
+DELETE FROM ops.compliance_dictionaries
+WHERE code IN ('ad_law_extreme', 'political_sensitive', 'violence_pornography', 'generic_prohibited');
+
+UPDATE ops.compliance_policies
+SET enabled_dictionaries = '[]'::jsonb,
+    revision = revision + 1,
+    updated_at = NOW()
+WHERE id = 1;
diff --git a/server/migrations_ops/20260505101000_seed_compliance_dictionaries.up.sql b/server/migrations_ops/20260505101000_seed_compliance_dictionaries.up.sql
new file mode 100644
index 0000000..06d10f4
--- /dev/null
+++ b/server/migrations_ops/20260505101000_seed_compliance_dictionaries.up.sql
@@ -0,0 +1,119 @@
+WITH seeded_dictionaries AS (
+    INSERT INTO ops.compliance_dictionaries (
+        code,
+        name,
+        platform_scope,
+        applicable_platforms,
+        default_level,
+        enabled,
+        version,
+        description
+    )
+    VALUES
+        ('ad_law_extreme', '广告法极限词', 'all', NULL, 'block', TRUE, 1, '广告法、宣传语场景常见极限表述'),
+        ('political_sensitive', '政治敏感词', 'all', NULL, 'block', TRUE, 1, '公开运营口径下的政治敏感表达'),
+        ('violence_pornography', '涉黄涉暴通用词', 'all', NULL, 'block', TRUE, 1, '涉黄、涉暴、血腥等通用违规词'),
+        ('generic_prohibited', '通用违禁词', 'all', NULL, 'high', TRUE, 1, '赌博、毒品、黑产等通用违禁表达')
+    ON CONFLICT (code) DO NOTHING
+    RETURNING id, code
+),
+all_dictionaries AS (
+    SELECT id, code
+    FROM seeded_dictionaries
+    UNION
+    SELECT id, code
+    FROM ops.compliance_dictionaries
+    WHERE code IN ('ad_law_extreme', 'political_sensitive', 'violence_pornography', 'generic_prohibited')
+),
+seed_terms(dictionary_code, pattern, level_override, hint, reference_law) AS (
+    VALUES
+        ('ad_law_extreme', '国家级', 'block', '广告宣传中避免使用绝对化、最高级表述。', '广告法第九条'),
+        ('ad_law_extreme', '最高级', 'block', '广告宣传中避免使用绝对化、最高级表述。', '广告法第九条'),
+        ('ad_law_extreme', '最佳', 'block', '广告宣传中避免使用绝对化、最高级表述。', '广告法第九条'),
+        ('ad_law_extreme', '最强', 'block', '广告宣传中避免使用绝对化、最高级表述。', '广告法第九条'),
+        ('ad_law_extreme', '第一品牌', 'block', '广告宣传中避免使用无法证明的排名表述。', '广告法第九条'),
+        ('ad_law_extreme', '顶级', 'block', '广告宣传中避免使用绝对化、最高级表述。', '广告法第九条'),
+        ('ad_law_extreme', '全网最低', 'block', '价格比较类结论需要可证明依据。', '广告法第八条'),
+        ('ad_law_extreme', '永久有效', 'high', '承诺类表述需确保真实、完整、可履行。', '广告法第四条'),
+        ('political_sensitive', '反动', 'block', '涉及政治安全风险，发布前需修改或提交审阅。', NULL),
+        ('political_sensitive', '颠覆国家', 'block', '涉及政治安全风险，发布前需修改或提交审阅。', NULL),
+        ('political_sensitive', '分裂国家', 'block', '涉及政治安全风险，发布前需修改或提交审阅。', NULL),
+        ('political_sensitive', '恐怖主义', 'block', '涉及公共安全风险，发布前需修改或提交审阅。', NULL),
+        ('violence_pornography', '色情', 'block', '平台通常禁止涉黄内容或导流表达。', NULL),
+        ('violence_pornography', '约炮', 'block', '平台通常禁止涉黄内容或导流表达。', NULL),
+        ('violence_pornography', '血腥', 'block', '平台通常限制血腥暴力内容。', NULL),
+        ('violence_pornography', '虐杀', 'block', '平台通常限制血腥暴力内容。', NULL),
+        ('generic_prohibited', '赌博', 'high', '平台通常限制赌博相关内容。', NULL),
+        ('generic_prohibited', '博彩', 'high', '平台通常限制博彩相关内容。', NULL),
+        ('generic_prohibited', '毒品', 'high', '平台通常禁止毒品相关内容。', NULL),
+        ('generic_prohibited', '代开发票', 'high', '平台通常限制黑产交易相关内容。', NULL),
+        ('generic_prohibited', '刷单', 'high', '平台通常限制黑产交易相关内容。', NULL)
+)
+INSERT INTO ops.compliance_dictionary_terms (
+    dictionary_id,
+    match_type,
+    pattern,
+    level_override,
+    hint,
+    reference_law,
+    enabled
+)
+SELECT d.id, 'exact', t.pattern, t.level_override, t.hint, t.reference_law, TRUE
+FROM seed_terms t
+JOIN all_dictionaries d ON d.code = t.dictionary_code
+WHERE NOT EXISTS (
+    SELECT 1
+    FROM ops.compliance_dictionary_terms existing
+    WHERE existing.dictionary_id = d.id
+      AND existing.pattern = t.pattern
+);
+
+INSERT INTO ops.compliance_dictionary_versions (
+    dictionary_id,
+    version,
+    snapshot,
+    published_by
+)
+SELECT
+    cd.id,
+    cd.version,
+    jsonb_build_object(
+        'code', cd.code,
+        'name', cd.name,
+        'platform_scope', cd.platform_scope,
+        'applicable_platforms', COALESCE(to_jsonb(cd.applicable_platforms), '[]'::jsonb),
+        'default_level', cd.default_level,
+        'terms', COALESCE(
+            (
+                SELECT jsonb_agg(
+                    jsonb_build_object(
+                        'pattern', t.pattern,
+                        'match_type', t.match_type,
+                        'level_override', t.level_override,
+                        'hint', t.hint,
+                        'reference_law', t.reference_law,
+                        'enabled', t.enabled
+                    )
+                    ORDER BY t.id
+                )
+                FROM ops.compliance_dictionary_terms t
+                WHERE t.dictionary_id = cd.id
+            ),
+            '[]'::jsonb
+        )
+    ),
+    NULL
+FROM ops.compliance_dictionaries cd
+WHERE cd.code IN ('ad_law_extreme', 'political_sensitive', 'violence_pornography', 'generic_prohibited')
+ON CONFLICT (dictionary_id, version) DO NOTHING;
+
+UPDATE ops.compliance_policies
+SET enabled_dictionaries = (
+        SELECT COALESCE(jsonb_agg(id ORDER BY id), '[]'::jsonb)
+        FROM ops.compliance_dictionaries
+        WHERE code IN ('ad_law_extreme', 'political_sensitive', 'violence_pornography', 'generic_prohibited')
+    ),
+    revision = revision + 1,
+    updated_at = NOW()
+WHERE id = 1
+  AND enabled_dictionaries = '[]'::jsonb;
diff --git a/task_plan.md b/task_plan.md
index 1a7831b..7b8431f 100644
--- a/task_plan.md
+++ b/task_plan.md
@@ -4,7 +4,7 @@
 Continue the desktop AI monitoring implementation by first adding a client-side local scheduler with durable queueing and adaptive execution policy, then adding a reusable hidden Playwright CDP execution layer that attaches to Electron Chromium and reuses existing account partitions.
 
 ## Current Phase
-Phase 40
+Phase 41
 
 ## Phases
 ### Phase 1: Progress Verification
@@ -284,6 +284,25 @@ Phase 40
 - [x] Validate rendered deployment/config files
 - **Status:** complete
 
+### Phase 41: Compliance Backend Foundation
+- [x] Add tenant and ops compliance migrations from the Revision 8 design
+- [x] Add shared compliance config, DTOs, and TypeScript contracts
+- [x] Implement tenant compliance repository, deterministic matcher, policy resolver, manual review resolver, and service facade
+- [x] Register tenant compliance APIs and wire PublishJobService through GateForPublish
+- **Status:** complete
+
+### Phase 42: Compliance Ops & Admin UI
+- [x] Implement ops compliance dictionary, policy, record, stats, and manual-review APIs
+- [x] Add ops-web content safety navigation and pages for policy, dictionaries, records, stats, and manual reviews
+- [x] Add admin-web compliance API client, editor check button, publish modal gate/ack/manual-review flow, and blocked publish state display
+- **Status:** complete
+
+### Phase 43: Compliance Verification
+- [x] Run targeted Go tests and compile checks for tenant/ops compliance paths
+- [x] Run admin-web and ops-web typecheck/build checks
+- [x] Update findings/progress and summarize completed functions plus any deferred risk
+- **Status:** complete
+
 ## Key Questions
 1. How should the desktop client defer and locally optimize monitor-task execution without violating one-task-per-platform serialism?
 2. What is the smallest durable local cache that allows same-day resume while safely dropping stale next-day monitor tasks?