merge: sync feature/N7Web into feature/N7Web-Tech

# Conflicts:
#	apps/web-console/service-worker.js
#	tests/e2e/test_seat_web_api.py
#	tests/unit/test_assistant_frontend_contract.py
#	tests/unit/test_vue_frontend_contract.py

tests/unit/test_assistant_frontend_contract.py

@@ -27,7 +27,7 @@ def test_console_contains_ai_assistant_surface():
 def test_codex_assistant_assets_are_versioned_together_in_the_service_worker():
     service_worker = (ROOT / "apps/web-console/service-worker.js").read_text(encoding="utf-8")
     assert (
-        'const CACHE_VERSION = "cognitive-agent-pad-v316-sidebar-accordion"'
+        'const CACHE_VERSION = "cognitive-agent-pad-v318-tech-nfc-routing"'
         in service_worker
     )
     assert '"/assistant-chat.css?v=codex-assistant-29"' in service_worker
@@ -120,6 +120,16 @@ def test_validated_controls_are_mirrored_into_a_compact_assistant_card():
     assert ".assistant-dispatched-controls[open]" in css
 
 
+def test_explicit_nfc_authorization_block_is_rendered_as_safety_blocked():
+    console = (ROOT / "apps/web-console/console-v2.js").read_text(encoding="utf-8")
+
+    assert 'executionStatus === "blocked"' in console
+    assert "Boolean(telemetry.authorization_reason)" in console
+    assert 'deliveryState = aborted' in console
+    assert '? "blocked"' in console
+    assert '? "安全阻止"' in console
+
+
 def test_latest_dispatched_control_group_is_the_only_group_expanded():
     assistant = (ROOT / "apps/web-console/assistant-chat.js").read_text(
         encoding="utf-8"