From 259fd913bed9a4fe1dac7a9d3d042ce898fead08 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E6=9D=8E=E4=B8=96=E8=80=80?=
 <accounts_6a4cbca0dfcb465c2055ea9e@mail.teambition.com>
Date: Tue, 8 Sep 2026 11:52:21 +0800
Subject: [PATCH 1/3] fix(release): sanitize public release notes

---
 .github/workflows/github-draft-release-v2.yml |  18 +-
 scripts/sanitize-release-notes.mjs            | 166 ++++++++++++++++++
 tests/release-workflow.test.ts                | 110 +++++++++++-
 3 files changed, 280 insertions(+), 14 deletions(-)
 create mode 100644 scripts/sanitize-release-notes.mjs

diff --git a/.github/workflows/github-draft-release-v2.yml b/.github/workflows/github-draft-release-v2.yml
index badaa064e..ef10261c9 100644
--- a/.github/workflows/github-draft-release-v2.yml
+++ b/.github/workflows/github-draft-release-v2.yml
@@ -692,6 +692,13 @@ jobs:
             fi
           fi
 
+          sanitized_notes="${notes}.sanitized"
+          if ! node scripts/sanitize-release-notes.mjs "$notes" "$sanitized_notes"; then
+            echo "::error title=Release notes sanitization failed::Reserved Doc Agent metadata was malformed or could not be removed safely. Manual recovery: inspect the selected release notes source and keep internal audit data in the structured Release assets." >&2
+            exit 1
+          fi
+          mv "$sanitized_notes" "$notes"
+
           cat >> "$notes" <<EOF
 
           ## Downloads
@@ -708,17 +715,6 @@ jobs:
           ## Checksums
 
           Verify downloads with MD5SUMS.txt or SHA256SUMS.txt attached to this release. Before creating the Draft, the workflow verifies Normal OSS objects with Content-MD5 and Multipart objects with OSS CRC-64/XZ.
-
-          <!-- doc-agent: source-id=memmy-official-changelog-v2 -->
-          <!-- memmy-release-evidence
-          schema_version: 2
-          source_id: $GITHUB_REPOSITORY@$TAG
-          previous_tag: $PREVIOUS_TAG
-          target_sha: $TARGET_SHA
-          release_notes_source: $notes_source
-          release_notes_needs_review: $needs_review
-          artifact_manifest: SHA256SUMS.txt
-          -->
           EOF
 
       - name: Build auditable release evidence
diff --git a/scripts/sanitize-release-notes.mjs b/scripts/sanitize-release-notes.mjs
new file mode 100644
index 000000000..8ecdb72b3
--- /dev/null
+++ b/scripts/sanitize-release-notes.mjs
@@ -0,0 +1,166 @@
+#!/usr/bin/env node
+
+import { readFileSync, writeFileSync } from "node:fs";
+import { resolve } from "node:path";
+
+const RESERVED_MARKERS = [
+  /^<!--\s*doc-agent:\s*source-id=/,
+  /^<!--\s*memmy-release-notes-source(?:\s|-->|$)/,
+  /^<!--\s*memmy-release-evidence(?:\s|-->|$)/,
+];
+
+function isReservedMarker(value) {
+  return RESERVED_MARKERS.some((pattern) => pattern.test(value));
+}
+
+function reservedMarkerOffset(line) {
+  let offset = line.indexOf("<!--");
+  while (offset !== -1) {
+    if (isReservedMarker(line.slice(offset))) return offset;
+    offset = line.indexOf("<!--", offset + 4);
+  }
+  return -1;
+}
+
+function fenceOpening(line) {
+  const match = line.match(/^[ \t]{0,3}(`{3,}|~{3,})/);
+  if (!match) return null;
+  return { character: match[1][0], length: match[1].length };
+}
+
+function isFenceClosing(line, fence) {
+  const escaped = fence.character === "`" ? "`" : "~";
+  return new RegExp(`^[ \\t]{0,3}${escaped}{${fence.length},}[ \\t]*$`).test(line);
+}
+
+function assertCommentOccupiesCompleteLines(line, markerOffset, lineNumber) {
+  if (line.slice(0, markerOffset).trim() !== "") {
+    throw new Error(
+      `Reserved release metadata must occupy complete lines (line ${lineNumber})`,
+    );
+  }
+}
+
+export function sanitizeReleaseNotes(markdown) {
+  const lines = markdown.split(/\r?\n/);
+  const publicLines = [];
+  let fence = null;
+  let removingReservedComment = false;
+  let reservedCommentStart = 0;
+
+  for (let index = 0; index < lines.length; index += 1) {
+    const line = lines[index];
+    const lineNumber = index + 1;
+
+    if (removingReservedComment) {
+      const closeOffset = line.indexOf("-->");
+      if (closeOffset === -1) continue;
+
+      if (line.slice(closeOffset + 3).trim() !== "") {
+        throw new Error(
+          `Reserved release metadata must occupy complete lines (line ${lineNumber})`,
+        );
+      }
+
+      removingReservedComment = false;
+      continue;
+    }
+
+    if (fence) {
+      publicLines.push(line);
+      if (isFenceClosing(line, fence)) fence = null;
+      continue;
+    }
+
+    const openingFence = fenceOpening(line);
+    if (openingFence) {
+      fence = openingFence;
+      publicLines.push(line);
+      continue;
+    }
+
+    const markerOffset = reservedMarkerOffset(line);
+    if (markerOffset === -1) {
+      publicLines.push(line);
+      continue;
+    }
+
+    assertCommentOccupiesCompleteLines(line, markerOffset, lineNumber);
+    const closeOffset = line.indexOf("-->", markerOffset + 4);
+    if (closeOffset === -1) {
+      removingReservedComment = true;
+      reservedCommentStart = lineNumber;
+      continue;
+    }
+
+    if (line.slice(closeOffset + 3).trim() !== "") {
+      throw new Error(
+        `Reserved release metadata must occupy complete lines (line ${lineNumber})`,
+      );
+    }
+  }
+
+  if (removingReservedComment) {
+    throw new Error(
+      `Unterminated reserved release metadata starting at line ${reservedCommentStart}`,
+    );
+  }
+
+  const publicMarkdown = publicLines.join("\n").trimEnd();
+  if (publicMarkdown.trim() === "") {
+    throw new Error("Release notes contain no public content after sanitization");
+  }
+
+  const sanitized = `${publicMarkdown}\n`;
+  assertNoReservedMetadata(sanitized);
+  return sanitized;
+}
+
+function assertNoReservedMetadata(markdown) {
+  const lines = markdown.split(/\r?\n/);
+  let fence = null;
+
+  for (let index = 0; index < lines.length; index += 1) {
+    const line = lines[index];
+    if (fence) {
+      if (isFenceClosing(line, fence)) fence = null;
+      continue;
+    }
+
+    const openingFence = fenceOpening(line);
+    if (openingFence) {
+      fence = openingFence;
+      continue;
+    }
+
+    if (reservedMarkerOffset(line) !== -1) {
+      throw new Error(
+        `Reserved release metadata remains after sanitization (line ${index + 1})`,
+      );
+    }
+  }
+}
+
+function main() {
+  const [inputArg, outputArg, ...extraArgs] = process.argv.slice(2);
+  if (!inputArg || !outputArg || extraArgs.length > 0) {
+    throw new Error("Usage: node scripts/sanitize-release-notes.mjs <input.md> <output.md>");
+  }
+
+  const inputPath = resolve(inputArg);
+  const outputPath = resolve(outputArg);
+  if (inputPath === outputPath) {
+    throw new Error("Input and output paths must be different");
+  }
+
+  const markdown = readFileSync(inputPath, "utf8");
+  const sanitized = sanitizeReleaseNotes(markdown);
+  writeFileSync(outputPath, sanitized, "utf8");
+}
+
+try {
+  main();
+} catch (error) {
+  console.error(`sanitize-release-notes: ${error instanceof Error ? error.message : error}`);
+  process.exitCode = 1;
+}
diff --git a/tests/release-workflow.test.ts b/tests/release-workflow.test.ts
index b28aecd3f..12b0b0d15 100644
--- a/tests/release-workflow.test.ts
+++ b/tests/release-workflow.test.ts
@@ -9,6 +9,7 @@ const repoRoot = resolve(import.meta.dirname, "..");
 const legacyWorkflowPath = resolve(repoRoot, ".github/workflows/github-release.yml");
 const draftWorkflowPath = resolve(repoRoot, ".github/workflows/github-draft-release-v2.yml");
 const releaseCompareScriptPath = resolve(repoRoot, "scripts/build-release-compare.mjs");
+const releaseNotesSanitizerPath = resolve(repoRoot, "scripts/sanitize-release-notes.mjs");
 const ossIntegrityScriptPath = resolve(repoRoot, "scripts/internal/shared/oss-object-integrity.mjs");
 const draftSource = readFileSync(draftWorkflowPath, "utf8");
 const releaseCompareSource = readFileSync(releaseCompareScriptPath, "utf8");
@@ -57,6 +58,103 @@ function readJson(relativePath: string): {
   return JSON.parse(readFileSync(resolve(repoRoot, relativePath), "utf8"));
 }
 
+function runReleaseNotesSanitizer(markdown: string) {
+  const tempDir = mkdtempSync(resolve(tmpdir(), "memmy-release-notes-sanitizer-"));
+  const inputPath = resolve(tempDir, "input.md");
+  const outputPath = resolve(tempDir, "output.md");
+  writeFileSync(inputPath, markdown);
+
+  const result = spawnSync(
+    "node",
+    [releaseNotesSanitizerPath, inputPath, outputPath],
+    { cwd: repoRoot, encoding: "utf8" },
+  );
+
+  return {
+    result,
+    output: existsSync(outputPath) ? readFileSync(outputPath, "utf8") : "",
+  };
+}
+
+describe("public release notes sanitizer", () => {
+  it("removes reserved audit comments but preserves public and fenced content", () => {
+    const { result, output } = runReleaseNotesSanitizer(`
+# Memmy v1.1.3
+
+Public release notes.
+
+<!-- doc-agent: source-id=memmy-official-changelog-v2 -->
+<!-- memmy-release-notes-source
+source: doc-agent
+needs_review: false
+-->
+<!-- memmy-release-evidence
+schema_version: 2
+target_sha: abc123
+-->
+
+<!-- ordinary-comment: keep -->
+
+\`\`\`markdown
+<!-- doc-agent: source-id=example-inside-code -->
+<!-- memmy-release-evidence
+inside: backtick-fence
+-->
+\`\`\`
+
+~~~text
+<!-- memmy-release-notes-source
+inside: tilde-fence
+-->
+~~~
+`);
+
+    expect(result.status, result.stderr).toBe(0);
+    expect(output).toContain("# Memmy v1.1.3");
+    expect(output).toContain("Public release notes.");
+    expect(output).toContain("<!-- ordinary-comment: keep -->");
+    expect(output).toContain("<!-- doc-agent: source-id=example-inside-code -->");
+    expect(output).toContain("inside: backtick-fence");
+    expect(output).toContain("inside: tilde-fence");
+    expect(output).not.toContain("memmy-official-changelog-v2");
+    expect(output).not.toContain("target_sha: abc123");
+    expect(output.endsWith("\n")).toBe(true);
+  });
+
+  it("fails closed for unterminated or inline reserved metadata", () => {
+    const unterminated = runReleaseNotesSanitizer(`
+# Memmy
+
+<!-- memmy-release-evidence
+schema_version: 2
+`);
+    expect(unterminated.result.status).not.toBe(0);
+    expect(unterminated.result.stderr).toContain("Unterminated reserved release metadata");
+    expect(unterminated.output).toBe("");
+
+    const inline = runReleaseNotesSanitizer(
+      "Public text <!-- doc-agent: source-id=memmy-official-changelog-v2 -->\n",
+    );
+    expect(inline.result.status).not.toBe(0);
+    expect(inline.result.stderr).toContain("must occupy complete lines");
+    expect(inline.output).toBe("");
+
+    const afterOrdinaryComment = runReleaseNotesSanitizer(
+      "<!-- ordinary-comment: keep --> <!-- memmy-release-evidence -->\n",
+    );
+    expect(afterOrdinaryComment.result.status).not.toBe(0);
+    expect(afterOrdinaryComment.result.stderr).toContain("must occupy complete lines");
+    expect(afterOrdinaryComment.output).toBe("");
+
+    const metadataOnly = runReleaseNotesSanitizer(
+      "<!-- doc-agent: source-id=memmy-official-changelog-v2 -->\n",
+    );
+    expect(metadataOnly.result.status).not.toBe(0);
+    expect(metadataOnly.result.stderr).toContain("no public content");
+    expect(metadataOnly.output).toBe("");
+  });
+});
+
 describe("Memmy release workflow metadata", () => {
   it("keeps Memmy metadata aligned while preserving the independent Memory version", () => {
     const version = readJson("package.json").version;
@@ -451,6 +549,15 @@ describe("GitHub Draft Release v2 workflow", () => {
     expect(releaseNotes).toContain("Release notes generation produced an empty body");
     expect(releaseNotes).toContain("RELEASE_NOTES_SOURCE.json");
     expect(releaseNotes).toContain("QUALITY_REPORT.json");
+    expect(existsSync(releaseNotesSanitizerPath)).toBe(true);
+    expect(releaseNotes).toContain(
+      'node scripts/sanitize-release-notes.mjs "$notes" "$sanitized_notes"',
+    );
+    expect(releaseNotes).toContain('mv "$sanitized_notes" "$notes"');
+    expect(releaseNotes).toContain("Release notes sanitization failed");
+    expect(releaseNotes).not.toContain("<!-- doc-agent:");
+    expect(releaseNotes).not.toContain("<!-- memmy-release-notes-source");
+    expect(releaseNotes).not.toContain("<!-- memmy-release-evidence");
     expect(releaseNotes).not.toContain("releases/generate-notes");
     expect(releaseNotes).not.toContain("github-generated");
     const snapshot = draftScript("Build complete release change snapshot");
@@ -473,9 +580,6 @@ describe("GitHub Draft Release v2 workflow", () => {
     expect(evidence).toContain("releaseNotesSource");
     expect(evidence).toContain("releaseNotesNeedsReview");
     expect(evidence).toContain("artifacts");
-    expect(releaseNotes).toContain(
-      "doc-agent: source-id=memmy-official-changelog-v2",
-    );
     const uploadAudit = draftSteps.find((step) => step.name === "Upload release audit artifact");
     expect(uploadAudit?.uses).toBe("actions/upload-artifact@v4");
     expect(JSON.stringify(uploadAudit)).toContain("RELEASE_NOTES.md");

From c152816af64adb396845152b71853b63c63e6ff5 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E6=9D=8E=E4=B8=96=E8=80=80?=
 <accounts_6a4cbca0dfcb465c2055ea9e@mail.teambition.com>
Date: Tue, 8 Sep 2026 15:13:13 +0800
Subject: [PATCH 2/3] fix(release): enforce English public notes

---
 .github/release-notes/v1.1.3.md               |  15 --
 .github/workflows/github-draft-release-v2.yml |  32 +++-
 scripts/sanitize-release-notes.mjs            | 149 +++++++++++++++++-
 tests/release-workflow.test.ts                |  92 ++++++++++-
 4 files changed, 257 insertions(+), 31 deletions(-)

diff --git a/.github/release-notes/v1.1.3.md b/.github/release-notes/v1.1.3.md
index 2a01c4795..909a204e3 100644
--- a/.github/release-notes/v1.1.3.md
+++ b/.github/release-notes/v1.1.3.md
@@ -14,18 +14,3 @@
 
 - Memmy Desktop and Agent are version `1.1.3`. The bundled Memory service, viewer, and `memmy-memory` CLI use the independent version `2.1.1`.
 - Memory continues running after Desktop exits unless **Stop Memory when quitting** is enabled. Standalone Memory CLI installations retain their operating-system service management.
-
-## 修复
-
-- 修复 Windows 和 macOS 安装包中的 Memory 启动、重启问题。桌面端直接管理随包提供的 Memory，避免 Windows 计划任务权限错误和 macOS 系统服务重启冲突。
-- 修复退出桌面端后，后台 Memory 无法从查看器重启的问题。桌面端连接断开后，Memory 仍可重新加载配置并重启服务，支持连续重启。
-- 桌面端会在旧 Memory 完成迁移、释放数据库锁后，将自己管理的运行时升级到随包版本；保留兼容的独立安装和较新版本。
-- 修复 Linux CLI 发布时，版本分支与标签同名导致构建取到旧分支的问题。
-- 自定义 BYOK 模型未被内置能力目录收录时，也可接收图片输入；明确标记为仅支持文本的模型仍沿用原有回退方式。
-- 账号模式下的 Memory 摘要改用专用摘要模型，并兼容旧配置迁移。
-- Windows Memory 后台服务改用隐藏启动器并将日志写入文件，避免登录和重启服务时留下命令窗口。任务定义兼容中文路径，结束计划任务后会在短暂清理窗口后停止其 Memory 子进程；安装、启动及复用已有兼容运行时时会更新旧启动器。旧计划任务因权限不足无法更新时，不再阻断桌面端使用或启动 Memory。
-
-## 升级说明
-
-- 桌面端和 Agent 版本为 `1.1.3`；随包提供的 Memory、查看器和 `memmy-memory` CLI 独立升级为 `2.1.1`。
-- 未开启“退出时停止 Memory”时，退出桌面端后 Memory 继续在后台运行。单独安装的 Memory CLI 保留系统服务管理方式。
diff --git a/.github/workflows/github-draft-release-v2.yml b/.github/workflows/github-draft-release-v2.yml
index ef10261c9..26a1636cd 100644
--- a/.github/workflows/github-draft-release-v2.yml
+++ b/.github/workflows/github-draft-release-v2.yml
@@ -607,6 +607,7 @@ jobs:
                   candidate_count: 3,
                   require_source_refs: true,
                   require_bilingual_output: true,
+                  public_release_language: "en",
                   require_surfaces: true,
                   max_items: 10,
                   max_added_items: 5,
@@ -618,6 +619,7 @@ jobs:
                 release_context: {
                   release_kind: "memmy_official_desktop_agent_memory_cli",
                   public_release_body: "github_draft_release_notes",
+                  public_release_language: "en",
                   docs_product_extraction: "release_published_revalidated_by_106",
                   manual_release_notes_file: ".github/release-notes/vX.Y.Z.md is optional"
                 }
@@ -692,13 +694,6 @@ jobs:
             fi
           fi
 
-          sanitized_notes="${notes}.sanitized"
-          if ! node scripts/sanitize-release-notes.mjs "$notes" "$sanitized_notes"; then
-            echo "::error title=Release notes sanitization failed::Reserved Doc Agent metadata was malformed or could not be removed safely. Manual recovery: inspect the selected release notes source and keep internal audit data in the structured Release assets." >&2
-            exit 1
-          fi
-          mv "$sanitized_notes" "$notes"
-
           cat >> "$notes" <<EOF
 
           ## Downloads
@@ -717,6 +712,29 @@ jobs:
           Verify downloads with MD5SUMS.txt or SHA256SUMS.txt attached to this release. Before creating the Draft, the workflow verifies Normal OSS objects with Content-MD5 and Multipart objects with OSS CRC-64/XZ.
           EOF
 
+          sanitized_notes="${notes}.sanitized"
+          if ! node scripts/sanitize-release-notes.mjs "$notes" "$sanitized_notes" --language en; then
+            echo "::error title=Release notes sanitization failed::The final public Release body contains malformed reserved metadata or visible non-English prose. Automatic recovery removes complete Chinese translation sections when an English body exists; otherwise fix the reviewed source or Doc Agent output before retrying." >&2
+            exit 1
+          fi
+          mv "$sanitized_notes" "$notes"
+
+          source_report="release-assets/RELEASE_NOTES_SOURCE.json"
+          source_report_tmp="${source_report}.tmp"
+          jq '. + {
+            public_release_language: "en",
+            language_validation: {ok: true, visible_body: "english_only"}
+          }' "$source_report" > "$source_report_tmp"
+          mv "$source_report_tmp" "$source_report"
+
+          quality_report="release-assets/QUALITY_REPORT.json"
+          quality_report_tmp="${quality_report}.tmp"
+          jq '. + {
+            public_release_language: "en",
+            language_validation: {ok: true, visible_body: "english_only"}
+          }' "$quality_report" > "$quality_report_tmp"
+          mv "$quality_report_tmp" "$quality_report"
+
       - name: Build auditable release evidence
         if: ${{ steps.release.outputs.preflight_level == 'full' }}
         env:
diff --git a/scripts/sanitize-release-notes.mjs b/scripts/sanitize-release-notes.mjs
index 8ecdb72b3..ffb229b5f 100644
--- a/scripts/sanitize-release-notes.mjs
+++ b/scripts/sanitize-release-notes.mjs
@@ -8,6 +8,7 @@ const RESERVED_MARKERS = [
   /^<!--\s*memmy-release-notes-source(?:\s|-->|$)/,
   /^<!--\s*memmy-release-evidence(?:\s|-->|$)/,
 ];
+const CJK_RE = /[\u3040-\u30ff\u3400-\u9fff\uf900-\ufaff]/;
 
 function isReservedMarker(value) {
   return RESERVED_MARKERS.some((pattern) => pattern.test(value));
@@ -41,7 +42,130 @@ function assertCommentOccupiesCompleteLines(line, markerOffset, lineNumber) {
   }
 }
 
-export function sanitizeReleaseNotes(markdown) {
+function removeCjkHeadingSections(markdown) {
+  const lines = markdown.split(/\r?\n/);
+  const output = [];
+  let fence = null;
+  let htmlComment = false;
+  let skippedHeadingDepth = null;
+
+  for (const line of lines) {
+    if (fence) {
+      if (skippedHeadingDepth === null) output.push(line);
+      if (isFenceClosing(line, fence)) fence = null;
+      continue;
+    }
+
+    const openingFence = fenceOpening(line);
+    if (openingFence) {
+      fence = openingFence;
+      if (skippedHeadingDepth === null) output.push(line);
+      continue;
+    }
+
+    if (htmlComment) {
+      if (skippedHeadingDepth === null) output.push(line);
+      if (line.includes("-->")) htmlComment = false;
+      continue;
+    }
+    if (line.includes("<!--")) {
+      if (!line.includes("-->", line.indexOf("<!--") + 4)) htmlComment = true;
+      if (skippedHeadingDepth === null) output.push(line);
+      continue;
+    }
+
+    const heading = line.match(/^[ \t]{0,3}(#{2,6})[ \t]+(.+?)[ \t]*#*[ \t]*$/);
+    if (heading) {
+      const depth = heading[1].length;
+      if (skippedHeadingDepth !== null && depth <= skippedHeadingDepth) {
+        skippedHeadingDepth = null;
+      }
+      if (CJK_RE.test(heading[2])) {
+        skippedHeadingDepth = depth;
+        continue;
+      }
+    }
+
+    if (skippedHeadingDepth === null) output.push(line);
+  }
+
+  return output.join("\n");
+}
+
+function visibleLineForLanguageValidation(line) {
+  return line
+    .replace(/(`+).*?\1/g, "")
+    .replace(/\]\([^)]*\)/g, "]")
+    .replace(/<https?:\/\/[^>]+>/gi, "")
+    .replace(/https?:\/\/\S+/gi, "");
+}
+
+function assertEnglishPublicBody(markdown) {
+  const lines = markdown.split(/\r?\n/);
+  let fence = null;
+  let htmlComment = false;
+  let hasBodyContent = false;
+
+  for (let index = 0; index < lines.length; index += 1) {
+    const line = lines[index];
+    if (fence) {
+      if (isFenceClosing(line, fence)) fence = null;
+      continue;
+    }
+
+    const openingFence = fenceOpening(line);
+    if (openingFence) {
+      fence = openingFence;
+      continue;
+    }
+
+    if (htmlComment) {
+      if (line.includes("-->")) htmlComment = false;
+      continue;
+    }
+    const commentOffset = line.indexOf("<!--");
+    if (commentOffset !== -1) {
+      if (!line.includes("-->", commentOffset + 4)) htmlComment = true;
+      const visiblePrefix = visibleLineForLanguageValidation(line.slice(0, commentOffset));
+      if (CJK_RE.test(visiblePrefix)) {
+        throw new Error(
+          `English public release notes contain visible CJK text (line ${index + 1})`,
+        );
+      }
+      continue;
+    }
+
+    const visible = visibleLineForLanguageValidation(line);
+    if (CJK_RE.test(visible)) {
+      throw new Error(
+        `English public release notes contain visible CJK text (line ${index + 1})`,
+      );
+    }
+    if (
+      /[A-Za-z]/.test(visible) &&
+      !/^[ \t]{0,3}#{1,6}[ \t]/.test(visible) &&
+      !/^[ \t]*(?:[-*_][ \t]*){3,}$/.test(visible)
+    ) {
+      hasBodyContent = true;
+    }
+  }
+
+  if (!hasBodyContent) {
+    throw new Error("English public release notes contain no English body content");
+  }
+}
+
+function normalizePublicLanguage(markdown, publicLanguage) {
+  if (!publicLanguage) return markdown;
+  if (publicLanguage !== "en") {
+    throw new Error(`Unsupported public release language: ${publicLanguage}`);
+  }
+  const normalized = removeCjkHeadingSections(markdown).trimEnd();
+  assertEnglishPublicBody(normalized);
+  return normalized;
+}
+
+export function sanitizeReleaseNotes(markdown, { publicLanguage = "" } = {}) {
   const lines = markdown.split(/\r?\n/);
   const publicLines = [];
   let fence = null;
@@ -106,7 +230,10 @@ export function sanitizeReleaseNotes(markdown) {
     );
   }
 
-  const publicMarkdown = publicLines.join("\n").trimEnd();
+  const publicMarkdown = normalizePublicLanguage(
+    publicLines.join("\n").trimEnd(),
+    publicLanguage,
+  );
   if (publicMarkdown.trim() === "") {
     throw new Error("Release notes contain no public content after sanitization");
   }
@@ -142,9 +269,17 @@ function assertNoReservedMetadata(markdown) {
 }
 
 function main() {
-  const [inputArg, outputArg, ...extraArgs] = process.argv.slice(2);
-  if (!inputArg || !outputArg || extraArgs.length > 0) {
-    throw new Error("Usage: node scripts/sanitize-release-notes.mjs <input.md> <output.md>");
+  const [inputArg, outputArg, languageFlag, languageArg, ...extraArgs] = process.argv.slice(2);
+  const hasLanguage = languageFlag !== undefined || languageArg !== undefined;
+  if (
+    !inputArg ||
+    !outputArg ||
+    extraArgs.length > 0 ||
+    (hasLanguage && (languageFlag !== "--language" || !languageArg))
+  ) {
+    throw new Error(
+      "Usage: node scripts/sanitize-release-notes.mjs <input.md> <output.md> [--language en]",
+    );
   }
 
   const inputPath = resolve(inputArg);
@@ -154,7 +289,9 @@ function main() {
   }
 
   const markdown = readFileSync(inputPath, "utf8");
-  const sanitized = sanitizeReleaseNotes(markdown);
+  const sanitized = sanitizeReleaseNotes(markdown, {
+    publicLanguage: languageArg || "",
+  });
   writeFileSync(outputPath, sanitized, "utf8");
 }
 
diff --git a/tests/release-workflow.test.ts b/tests/release-workflow.test.ts
index 12b0b0d15..ada6a14c1 100644
--- a/tests/release-workflow.test.ts
+++ b/tests/release-workflow.test.ts
@@ -58,7 +58,7 @@ function readJson(relativePath: string): {
   return JSON.parse(readFileSync(resolve(repoRoot, relativePath), "utf8"));
 }
 
-function runReleaseNotesSanitizer(markdown: string) {
+function runReleaseNotesSanitizer(markdown: string, publicLanguage?: "en") {
   const tempDir = mkdtempSync(resolve(tmpdir(), "memmy-release-notes-sanitizer-"));
   const inputPath = resolve(tempDir, "input.md");
   const outputPath = resolve(tempDir, "output.md");
@@ -66,7 +66,12 @@ function runReleaseNotesSanitizer(markdown: string) {
 
   const result = spawnSync(
     "node",
-    [releaseNotesSanitizerPath, inputPath, outputPath],
+    [
+      releaseNotesSanitizerPath,
+      inputPath,
+      outputPath,
+      ...(publicLanguage ? ["--language", publicLanguage] : []),
+    ],
     { cwd: repoRoot, encoding: "utf8" },
   );
 
@@ -153,6 +158,84 @@ schema_version: 2
     expect(metadataOnly.result.stderr).toContain("no public content");
     expect(metadataOnly.output).toBe("");
   });
+
+  it("keeps only English sections when a reviewed source contains parallel Chinese sections", () => {
+    const { result, output } = runReleaseNotesSanitizer(
+      `# Memmy v1.1.3
+
+## Fixes
+
+- Fixed packaged Memory startup.
+
+## 修复
+
+- 修复随包 Memory 的启动问题。
+
+## Upgrade notes
+
+- Memory remains independently versioned.
+
+## 升级说明
+
+- Memory 继续独立发版。
+`,
+      "en",
+    );
+
+    expect(result.status, result.stderr).toBe(0);
+    expect(output).toContain("## Fixes");
+    expect(output).toContain("Fixed packaged Memory startup.");
+    expect(output).toContain("## Upgrade notes");
+    expect(output).not.toMatch(/[\u3040-\u30ff\u3400-\u9fff\uf900-\ufaff]/);
+    expect(output.match(/^## Fixes$/gm)).toHaveLength(1);
+  });
+
+  it("rejects Chinese prose that remains inside an English section", () => {
+    const { result, output } = runReleaseNotesSanitizer(
+      `# Memmy v1.1.3
+
+## Fixes
+
+- 修复随包 Memory 的启动问题。
+`,
+      "en",
+    );
+
+    expect(result.status).not.toBe(0);
+    expect(result.stderr).toContain("English public release notes contain visible CJK text");
+    expect(output).toBe("");
+  });
+
+  it("allows CJK characters in code spans while validating English prose", () => {
+    const { result, output } = runReleaseNotesSanitizer(
+      `# Memmy v1.1.3
+
+## Fixes
+
+- Fixed startup when the configured path is \`C:\\\\用户\\\\Memmy\`.
+`,
+      "en",
+    );
+
+    expect(result.status, result.stderr).toBe(0);
+    expect(output).toContain("`C:\\\\用户\\\\Memmy`");
+  });
+
+  it("normalizes the real v1.1.3 reviewed notes to a single English public body", () => {
+    const notes = readFileSync(
+      resolve(repoRoot, ".github/release-notes/v1.1.3.md"),
+      "utf8",
+    );
+    const { result, output } = runReleaseNotesSanitizer(notes, "en");
+
+    expect(result.status, result.stderr).toBe(0);
+    expect(output).toContain("# Memmy v1.1.3");
+    expect(output).toContain("## Fixes");
+    expect(output).toContain("## Upgrade notes");
+    expect(output).not.toMatch(/[\u3040-\u30ff\u3400-\u9fff\uf900-\ufaff]/);
+    expect(output.match(/^## Fixes$/gm)).toHaveLength(1);
+    expect(output.match(/^## Upgrade notes$/gm)).toHaveLength(1);
+  });
 });
 
 describe("Memmy release workflow metadata", () => {
@@ -537,6 +620,7 @@ describe("GitHub Draft Release v2 workflow", () => {
     expect(releaseNotes).toContain("DOC_AGENT_RELEASE_NOTES_REQUEST.json");
     expect(releaseNotes).toContain("MEMMY_RELEASE_STYLE_EXAMPLES.json");
     expect(releaseNotes).toContain("candidate_count: 3");
+    expect(releaseNotes).toContain('public_release_language: "en"');
     expect(releaseNotes).toContain(".release_notes_md // .release_notes_markdown");
     expect(releaseNotes).toContain("Doc Agent draft configuration missing");
     expect(releaseNotes).toContain("Doc Agent draft generation failed");
@@ -551,10 +635,12 @@ describe("GitHub Draft Release v2 workflow", () => {
     expect(releaseNotes).toContain("QUALITY_REPORT.json");
     expect(existsSync(releaseNotesSanitizerPath)).toBe(true);
     expect(releaseNotes).toContain(
-      'node scripts/sanitize-release-notes.mjs "$notes" "$sanitized_notes"',
+      'node scripts/sanitize-release-notes.mjs "$notes" "$sanitized_notes" --language en',
     );
     expect(releaseNotes).toContain('mv "$sanitized_notes" "$notes"');
     expect(releaseNotes).toContain("Release notes sanitization failed");
+    expect(releaseNotes).toContain('public_release_language: "en"');
+    expect(releaseNotes).toContain("language_validation");
     expect(releaseNotes).not.toContain("<!-- doc-agent:");
     expect(releaseNotes).not.toContain("<!-- memmy-release-notes-source");
     expect(releaseNotes).not.toContain("<!-- memmy-release-evidence");

From a8b8515dd853481bec8aee12fb55d2f435df551d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E6=9D=8E=E4=B8=96=E8=80=80?=
 <accounts_6a4cbca0dfcb465c2055ea9e@mail.teambition.com>
Date: Tue, 8 Sep 2026 18:38:07 +0800
Subject: [PATCH 3/3] fix(release): route reviewed notes through Doc Agent

---
 .github/workflows/github-draft-release-v2.yml | 241 ++++++++++++------
 tests/release-workflow.test.ts                |  28 +-
 2 files changed, 177 insertions(+), 92 deletions(-)

diff --git a/.github/workflows/github-draft-release-v2.yml b/.github/workflows/github-draft-release-v2.yml
index 26a1636cd..fd5658ae0 100644
--- a/.github/workflows/github-draft-release-v2.yml
+++ b/.github/workflows/github-draft-release-v2.yml
@@ -174,22 +174,24 @@ jobs:
           test "$(git rev-parse HEAD)" = "$TARGET_SHA"
 
       - name: Preflight Doc Agent draft endpoint
+        id: doc_agent
         env:
           DOC_AGENT_RELEASE_NOTES_DRAFT_URL: ${{ vars.DOC_AGENT_RELEASE_NOTES_DRAFT_URL || secrets.DOC_AGENT_RELEASE_NOTES_DRAFT_URL }}
           DOC_AGENT_RELEASE_NOTES_DRAFT_TOKEN: ${{ secrets.DOC_AGENT_RELEASE_NOTES_DRAFT_TOKEN }}
         run: |
           set -euo pipefail
+          echo "available=false" >> "$GITHUB_OUTPUT"
           if [[ -z "$DOC_AGENT_RELEASE_NOTES_DRAFT_URL" ]]; then
-            echo "::error title=Doc Agent draft URL is missing::Configure DOC_AGENT_RELEASE_NOTES_DRAFT_URL before merging release branches. Manual recovery: add the Actions variable pointing to the 106 /internal/memmy-release-notes/draft endpoint, then re-run smoke." >&2
-            exit 1
+            echo "::warning title=Doc Agent draft URL is missing::The full release run will create a safe needs-review Draft instead of stopping. Configure DOC_AGENT_RELEASE_NOTES_DRAFT_URL to restore generated copy." >&2
+            exit 0
           fi
           if [[ -z "$DOC_AGENT_RELEASE_NOTES_DRAFT_TOKEN" ]]; then
-            echo "::error title=Doc Agent draft token is missing::Configure DOC_AGENT_RELEASE_NOTES_DRAFT_TOKEN before merging release branches. Manual recovery: add the Actions secret matching the 106 RELEASE_NOTES_DRAFT_TOKEN, then re-run smoke." >&2
-            exit 1
+            echo "::warning title=Doc Agent draft token is missing::The full release run will create a safe needs-review Draft instead of stopping. Configure DOC_AGENT_RELEASE_NOTES_DRAFT_TOKEN to restore generated copy." >&2
+            exit 0
           fi
           if [[ ! "$DOC_AGENT_RELEASE_NOTES_DRAFT_URL" =~ ^https?://[^[:space:]]+/internal/(memmy-)?release-notes/draft$ ]]; then
-            echo "::error title=Doc Agent draft URL is invalid::DOC_AGENT_RELEASE_NOTES_DRAFT_URL must point to /internal/memmy-release-notes/draft or /internal/release-notes/draft. Manual recovery: fix the Actions variable, then re-run smoke." >&2
-            exit 1
+            echo "::warning title=Doc Agent draft URL is invalid::The full release run will create a safe needs-review Draft. The URL must point to /internal/memmy-release-notes/draft or /internal/release-notes/draft." >&2
+            exit 0
           fi
 
           mkdir -p release-assets
@@ -206,32 +208,34 @@ jobs:
           case "$http_status" in
             400|422) ;;
             200)
-              echo "::error title=Doc Agent smoke contract mismatch::The 106 draft endpoint accepted an intentionally invalid smoke payload. Manual recovery: verify the endpoint still rejects non-object evidence packets before release." >&2
-              exit 1
+              echo "::warning title=Doc Agent smoke contract mismatch::The 106 endpoint accepted an invalid smoke payload; the full run will use a safe needs-review Draft until the endpoint contract is corrected." >&2
+              exit 0
               ;;
             401|403)
-              echo "::error title=Doc Agent draft token rejected::The 106 draft endpoint rejected DOC_AGENT_RELEASE_NOTES_DRAFT_TOKEN with HTTP $http_status. Manual recovery: make the GitHub secret match the 106 RELEASE_NOTES_DRAFT_TOKEN, then re-run smoke." >&2
-              exit 1
+              echo "::warning title=Doc Agent draft token rejected::The 106 endpoint rejected the token with HTTP $http_status; the full run will use a safe needs-review Draft." >&2
+              exit 0
               ;;
             404)
-              echo "::error title=Doc Agent draft endpoint disabled or wrong path::The 106 draft endpoint returned HTTP 404. Manual recovery: enable RELEASE_NOTES_DRAFT_ENABLED=true on 106 and verify the URL path, then re-run smoke." >&2
-              exit 1
+              echo "::warning title=Doc Agent draft endpoint disabled or wrong path::The 106 endpoint returned HTTP 404; the full run will use a safe needs-review Draft." >&2
+              exit 0
               ;;
             000|5*)
-              echo "::error title=Doc Agent draft endpoint unavailable::The 106 draft endpoint was unreachable or returned HTTP $http_status. Manual recovery: verify doc-agent.service health and network access, then re-run smoke." >&2
-              exit 1
+              echo "::warning title=Doc Agent draft endpoint unavailable::The 106 endpoint was unreachable or returned HTTP $http_status; the full run will use a safe needs-review Draft." >&2
+              exit 0
               ;;
             *)
-              echo "::error title=Unexpected Doc Agent draft endpoint status::The 106 draft endpoint returned HTTP $http_status. Manual recovery: inspect the 106 logs and endpoint configuration, then re-run smoke." >&2
-              exit 1
+              echo "::warning title=Unexpected Doc Agent draft endpoint status::The 106 endpoint returned HTTP $http_status; the full run will use a safe needs-review Draft." >&2
+              exit 0
               ;;
           esac
 
           if ! jq -e 'type == "object" and (has("detail") or has("error") or has("message") or has("warnings"))' "$response_file" >/dev/null; then
-            echo "::error title=Doc Agent smoke response contract mismatch::Validation failures must return a JSON object with detail/error/message/warnings so release failures are actionable." >&2
-            exit 1
+            echo "::warning title=Doc Agent smoke response contract mismatch::The full run will use a safe needs-review Draft because validation failures are not returning an actionable JSON object." >&2
+            exit 0
           fi
 
+          echo "available=true" >> "$GITHUB_OUTPUT"
+
           {
             echo "## Doc Agent draft endpoint preflight"
             echo
@@ -437,33 +441,93 @@ jobs:
           PREVIOUS_TAG: ${{ steps.previous.outputs.previous_tag }}
           DOC_AGENT_RELEASE_NOTES_DRAFT_URL: ${{ vars.DOC_AGENT_RELEASE_NOTES_DRAFT_URL || secrets.DOC_AGENT_RELEASE_NOTES_DRAFT_URL }}
           DOC_AGENT_RELEASE_NOTES_DRAFT_TOKEN: ${{ secrets.DOC_AGENT_RELEASE_NOTES_DRAFT_TOKEN }}
+          DOC_AGENT_PREFLIGHT_AVAILABLE: ${{ steps.doc_agent.outputs.available }}
         run: |
           set -euo pipefail
           notes="release-assets/RELEASE_NOTES.md"
           manual_notes=".github/release-notes/$TAG.md"
           manual_object="${TARGET_SHA}:${manual_notes}"
+          reviewed_notes="release-assets/REVIEWED_RELEASE_NOTES.md"
+          manual_present="false"
           notes_source="unknown"
           needs_review="false"
           : > "$notes"
+          : > "$reviewed_notes"
           jq -n '{source: "unknown", needs_review: true, warnings: ["release notes source has not been selected yet"]}' > release-assets/RELEASE_NOTES_SOURCE.json
           jq -n '{ok: false, needs_review: true, warnings: ["release notes quality report has not been generated yet"]}' > release-assets/QUALITY_REPORT.json
 
-          if git cat-file -e "$manual_object" 2>/dev/null; then
-            git show "$manual_object" > "$notes"
-            notes_source="manual"
+          write_safe_fallback_body() {
+            local reason="$1"
+            local allow_manual="${2:-true}"
+            needs_review="true"
+            if [[ "$manual_present" == "true" && "$allow_manual" == "true" ]]; then
+              cp "$reviewed_notes" "$notes"
+              notes_source="manual-needs-review-fallback"
+            else
+              notes_source="safe-needs-review-fallback"
+              cat > "$notes" <<EOF
+          # Memmy $TAG
+
+          > **Needs review:** Doc Agent could not produce validated public wording. Review the release evidence and replace this placeholder before publishing.
+
+          ## Release review
+
+          - The release target and installer assets passed the workflow's deterministic checks.
+          - Public release wording still requires human review.
+          EOF
+            fi
             jq -n \
               --arg source "$notes_source" \
+              --arg reason "$reason" \
               --arg file "$manual_notes" \
-              '{source: $source, manual_file: $file, needs_review: false, warnings: []}' \
-              > release-assets/RELEASE_NOTES_SOURCE.json
+              --argjson manualPresent "$manual_present" \
+              '{
+                source: $source,
+                needs_review: true,
+                fallback_reason: $reason,
+                manual_file: (if $manualPresent then $file else null end),
+                warnings: [$reason]
+              }' > release-assets/RELEASE_NOTES_SOURCE.json
             jq -n \
               --arg source "$notes_source" \
-              --arg file "$manual_notes" \
-              '{ok: true, needs_review: false, source: $source, manual_file: $file, warnings: []}' \
-              > release-assets/QUALITY_REPORT.json
-          else
-            cp release-assets/COMPARE.json release-assets/DRAFT_COMPARE.json
-            cp release-assets/PULL_REQUESTS.json release-assets/DRAFT_PULL_REQUESTS.json
+              --arg reason "$reason" \
+              '{
+                ok: false,
+                needs_review: true,
+                source: $source,
+                fallback_reason: $reason,
+                warnings: [$reason],
+                recovery: "safe_needs_review_draft"
+              }' > release-assets/QUALITY_REPORT.json
+          }
+
+          append_release_assets() {
+            cat >> "$notes" <<EOF
+
+          ## Downloads
+
+          - Windows x64 (China): [Memmy-$VERSION-win32-x64-cn-signed.exe](https://github.com/$GITHUB_REPOSITORY/releases/download/$TAG/Memmy-$VERSION-win32-x64-cn-signed.exe)
+          - Windows x64 (International): [Memmy-$VERSION-win32-x64-intl-signed.exe](https://github.com/$GITHUB_REPOSITORY/releases/download/$TAG/Memmy-$VERSION-win32-x64-intl-signed.exe)
+          - macOS Apple Silicon (China): [Memmy-$VERSION-darwin-arm64-cn-signed.dmg](https://github.com/$GITHUB_REPOSITORY/releases/download/$TAG/Memmy-$VERSION-darwin-arm64-cn-signed.dmg)
+          - macOS Apple Silicon (International): [Memmy-$VERSION-darwin-arm64-intl-signed.dmg](https://github.com/$GITHUB_REPOSITORY/releases/download/$TAG/Memmy-$VERSION-darwin-arm64-intl-signed.dmg)
+
+          ## Installation
+
+          On Windows, download the appropriate signed exe and run the installer. On Apple Silicon Macs, download the appropriate signed dmg, open it, and drag Memmy to Applications.
+
+          ## Checksums
+
+          Verify downloads with MD5SUMS.txt or SHA256SUMS.txt attached to this release. Before creating the Draft, the workflow verifies Normal OSS objects with Content-MD5 and Multipart objects with OSS CRC-64/XZ.
+          EOF
+          }
+
+          if git cat-file -e "$manual_object" 2>/dev/null; then
+            git show "$manual_object" > "$reviewed_notes"
+            manual_present="true"
+          fi
+
+          cp release-assets/COMPARE.json release-assets/DRAFT_COMPARE.json
+          cp release-assets/PULL_REQUESTS.json release-assets/DRAFT_PULL_REQUESTS.json
             total_commits="$(jq -r '.total_commits' release-assets/DRAFT_COMPARE.json)"
             received_commits="$(jq -r '.commits | length' release-assets/DRAFT_COMPARE.json)"
             compare_head="$(jq -r '.head_commit.sha // empty' release-assets/DRAFT_COMPARE.json)"
@@ -558,11 +622,14 @@ jobs:
               --arg memoryCliVersion "$memory_cli_version" \
               --arg agentVersion "$agent_version" \
               --arg desktopVersion "$desktop_version" \
+              --arg manualPath "$manual_notes" \
+              --argjson manualPresent "$manual_present" \
+              --rawfile reviewedMarkdown "$reviewed_notes" \
               --slurpfile compare release-assets/DRAFT_COMPARE.json \
               --slurpfile pullRequests release-assets/DRAFT_PULL_REQUESTS.json \
               --slurpfile artifacts release-assets/ARTIFACTS.json \
               --slurpfile styleExamples release-assets/MEMMY_RELEASE_STYLE_EXAMPLES.json \
-              '{
+              '({
                 source_id: $sourceId,
                 sourceId: $sourceId,
                 repository: $repository,
@@ -623,13 +690,19 @@ jobs:
                   docs_product_extraction: "release_published_revalidated_by_106",
                   manual_release_notes_file: ".github/release-notes/vX.Y.Z.md is optional"
                 }
-              }' > release-assets/DOC_AGENT_RELEASE_NOTES_REQUEST.json
-
-            if [[ -z "$DOC_AGENT_RELEASE_NOTES_DRAFT_URL" || -z "$DOC_AGENT_RELEASE_NOTES_DRAFT_TOKEN" ]]; then
-              echo "::error title=Doc Agent draft configuration missing::Full preflight requires DOC_AGENT_RELEASE_NOTES_DRAFT_URL and DOC_AGENT_RELEASE_NOTES_DRAFT_TOKEN. Manual recovery: configure them and run smoke before full preflight." >&2
-              exit 1
-            fi
+              } + if $manualPresent then {
+                reviewed_release_notes: {
+                  path: $manualPath,
+                  public_language: "en",
+                  markdown: $reviewedMarkdown
+                }
+              } else {} end)' > release-assets/DOC_AGENT_RELEASE_NOTES_REQUEST.json
 
+          response_usable="false"
+          fallback_reason=""
+          if [[ "$DOC_AGENT_PREFLIGHT_AVAILABLE" != "true" ]]; then
+            fallback_reason="Doc Agent preflight was unavailable; public wording requires review"
+          else
             response_status="$(curl --silent --show-error --location --retry 3 --retry-all-errors \
               --connect-timeout 10 --max-time 180 \
               --header "Content-Type: application/json" \
@@ -638,32 +711,40 @@ jobs:
               --output release-assets/DOC_AGENT_RELEASE_NOTES_RESPONSE.json \
               --write-out '%{http_code}' \
               "$DOC_AGENT_RELEASE_NOTES_DRAFT_URL" || true)"
+
             if [[ "$response_status" != "200" ]]; then
-              echo "::error title=Doc Agent draft generation failed::The 106 draft endpoint returned HTTP $response_status. Manual recovery: inspect release-assets/DOC_AGENT_RELEASE_NOTES_REQUEST.json, 106 logs, token/URL config, and LLM settings; do not fall back silently for a real Memmy release." >&2
-              exit 1
-            fi
-            if ! jq -e 'type == "object" and ((.release_notes_md // .release_notes_markdown // "") | length) > 0' \
-              release-assets/DOC_AGENT_RELEASE_NOTES_RESPONSE.json >/dev/null; then
-              echo "::error title=Doc Agent returned invalid release notes::The response must include release_notes_md or release_notes_markdown. Manual recovery: fix the 106 draft endpoint contract before retrying." >&2
-              exit 1
-            fi
-            if ! jq -e '(.source // "doc-agent") == "doc-agent" and (.quality_report | type == "object")' \
+              fallback_reason="Doc Agent generation returned HTTP $response_status"
+            elif ! jq -e 'type == "object" and ((.release_notes_md // .release_notes_markdown // "") | length) > 0 and (.quality_report | type == "object")' \
               release-assets/DOC_AGENT_RELEASE_NOTES_RESPONSE.json >/dev/null; then
-              echo "::error title=Doc Agent quality report missing::The response must include source=doc-agent and a quality_report object. Manual recovery: deploy the corrected 106 code before retrying." >&2
-              exit 1
-            fi
-            if ! jq -e '(.quality_report.candidate_selection.requested_candidate_count // .candidate_selection.requested_candidate_count // 0) >= 3' \
+              fallback_reason="Doc Agent returned an invalid response contract"
+            elif ! jq -e '
+              (.source // "") as $source
+              | ($source == "doc-agent"
+                or $source == "doc-agent-manual-regeneration"
+                or $source == "manual-reviewed-by-doc-agent"
+                or $source == "manual-repaired-by-doc-agent")
+            ' release-assets/DOC_AGENT_RELEASE_NOTES_RESPONSE.json >/dev/null; then
+              fallback_reason="Doc Agent returned an unsupported release-notes source"
+            elif ! jq -e --argjson manualPresent "$manual_present" '
+              (.source // "") as $source
+              | (.quality_report.candidate_selection.requested_candidate_count // .candidate_selection.requested_candidate_count // 0) as $requested
+              | if ($source == "manual-reviewed-by-doc-agent" or $source == "manual-repaired-by-doc-agent")
+                then ($manualPresent and $requested == 0 and (.manual_repair.llm_regenerated // true) == false)
+                elif $source == "doc-agent-manual-regeneration"
+                then ($manualPresent and $requested >= 3 and (.manual_repair.llm_regenerated // false) == true)
+                else ($source == "doc-agent" and $requested >= 3)
+                end
+            ' release-assets/DOC_AGENT_RELEASE_NOTES_RESPONSE.json >/dev/null; then
+              fallback_reason="Doc Agent response did not prove the required validation or candidate repair path"
+            elif jq -e '(.needs_review // .quality_report.needs_review // false) == true or (.quality_report.ok // .ok // false) != true' \
               release-assets/DOC_AGENT_RELEASE_NOTES_RESPONSE.json >/dev/null; then
-              echo "::error title=Doc Agent candidate selection missing::The 106 response must prove three-candidate generation/scoring for Memmy. Manual recovery: verify the 106 Memmy draft endpoint is running the v2 renderer." >&2
-              exit 1
-            fi
-            if jq -e '(.needs_review // .quality_report.needs_review // false) == true or (.quality_report.ok // .ok // false) != true' \
-              release-assets/DOC_AGENT_RELEASE_NOTES_RESPONSE.json >/dev/null; then
-              echo "::error title=Doc Agent release notes need review::The generated release notes did not pass quality gates. Manual recovery: inspect QUALITY_REPORT.json, fix evidence/style/LLM output, or add .github/release-notes/$TAG.md as a reviewed manual override." >&2
-              jq '.quality_report // .' release-assets/DOC_AGENT_RELEASE_NOTES_RESPONSE.json > release-assets/QUALITY_REPORT.json || true
-              exit 1
+              fallback_reason="Doc Agent exhausted automatic wording repair without a publishable result"
+            else
+              response_usable="true"
             fi
+          fi
 
+          if [[ "$response_usable" == "true" ]]; then
             jq -r '.release_notes_md // .release_notes_markdown' \
               release-assets/DOC_AGENT_RELEASE_NOTES_RESPONSE.json > "$notes"
             jq '{
@@ -672,6 +753,7 @@ jobs:
               needs_review: (.needs_review // .quality_report.needs_review // false),
               confidence: (.confidence // .quality_report.confidence // "medium"),
               candidate_selection: (.quality_report.candidate_selection // .candidate_selection // {}),
+              manual_repair: (.manual_repair // .quality_report.manual_repair // null),
               warnings: (.quality_report.warnings // .warnings // [])
             }' release-assets/DOC_AGENT_RELEASE_NOTES_RESPONSE.json \
               > release-assets/RELEASE_NOTES_SOURCE.json
@@ -682,40 +764,33 @@ jobs:
               warnings: (.warnings // []),
               coverage: (.coverage // {}),
               candidate_selection: (.candidate_selection // {}),
-              attempts: (.attempts // [])
+              attempts: (.attempts // []),
+              manual_repair: (.manual_repair // null)
             }' release-assets/DOC_AGENT_RELEASE_NOTES_RESPONSE.json \
               > release-assets/QUALITY_REPORT.json
-            notes_source="doc-agent"
-            needs_review="$(jq -r '.needs_review // .quality_report.needs_review // false' release-assets/DOC_AGENT_RELEASE_NOTES_RESPONSE.json)"
-
-            if [[ ! -s "$notes" ]]; then
-              echo "::error title=Release notes generation produced an empty body::No release notes were produced. Manual recovery: inspect the Doc Agent response or add .github/release-notes/$TAG.md as a reviewed manual override." >&2
-              exit 1
-            fi
+            notes_source="$(jq -r '.source' release-assets/DOC_AGENT_RELEASE_NOTES_RESPONSE.json)"
+            needs_review="false"
+          else
+            echo "::warning title=Release notes require review::$fallback_reason. The workflow will continue with a safe Draft and will not publish it automatically." >&2
+            write_safe_fallback_body "$fallback_reason"
           fi
 
-          cat >> "$notes" <<EOF
-
-          ## Downloads
-
-          - Windows x64 (China): [Memmy-$VERSION-win32-x64-cn-signed.exe](https://github.com/$GITHUB_REPOSITORY/releases/download/$TAG/Memmy-$VERSION-win32-x64-cn-signed.exe)
-          - Windows x64 (International): [Memmy-$VERSION-win32-x64-intl-signed.exe](https://github.com/$GITHUB_REPOSITORY/releases/download/$TAG/Memmy-$VERSION-win32-x64-intl-signed.exe)
-          - macOS Apple Silicon (China): [Memmy-$VERSION-darwin-arm64-cn-signed.dmg](https://github.com/$GITHUB_REPOSITORY/releases/download/$TAG/Memmy-$VERSION-darwin-arm64-cn-signed.dmg)
-          - macOS Apple Silicon (International): [Memmy-$VERSION-darwin-arm64-intl-signed.dmg](https://github.com/$GITHUB_REPOSITORY/releases/download/$TAG/Memmy-$VERSION-darwin-arm64-intl-signed.dmg)
-
-          ## Installation
-
-          On Windows, download the appropriate signed exe and run the installer. On Apple Silicon Macs, download the appropriate signed dmg, open it, and drag Memmy to Applications.
+          if [[ ! -s "$notes" ]]; then
+            echo "::warning title=Release notes body was empty::The workflow replaced the empty body with a safe needs-review Draft." >&2
+            write_safe_fallback_body "Doc Agent produced an empty public body" "false"
+          fi
 
-          ## Checksums
-
-          Verify downloads with MD5SUMS.txt or SHA256SUMS.txt attached to this release. Before creating the Draft, the workflow verifies Normal OSS objects with Content-MD5 and Multipart objects with OSS CRC-64/XZ.
-          EOF
+          append_release_assets
 
           sanitized_notes="${notes}.sanitized"
           if ! node scripts/sanitize-release-notes.mjs "$notes" "$sanitized_notes" --language en; then
-            echo "::error title=Release notes sanitization failed::The final public Release body contains malformed reserved metadata or visible non-English prose. Automatic recovery removes complete Chinese translation sections when an English body exists; otherwise fix the reviewed source or Doc Agent output before retrying." >&2
-            exit 1
+            echo "::warning title=Release notes sanitization repaired with safe fallback::The final body still contained unsafe mixed-language or malformed metadata after upstream repair. It was replaced with an English needs-review Draft instead of stopping the release workflow." >&2
+            write_safe_fallback_body "Final public-language validation rejected the repaired wording" "false"
+            append_release_assets
+            if ! node scripts/sanitize-release-notes.mjs "$notes" "$sanitized_notes" --language en; then
+              echo "::error title=Safe release-notes fallback failed::The fixed English fallback itself failed deterministic validation. This indicates a workflow implementation error, so Draft creation was stopped." >&2
+              exit 1
+            fi
           fi
           mv "$sanitized_notes" "$notes"
 
diff --git a/tests/release-workflow.test.ts b/tests/release-workflow.test.ts
index ada6a14c1..aed6670d3 100644
--- a/tests/release-workflow.test.ts
+++ b/tests/release-workflow.test.ts
@@ -498,6 +498,7 @@ describe("GitHub Draft Release v2 workflow", () => {
       (step) => step.name === "Preflight Doc Agent draft endpoint",
     );
     expect(preflight).toBeDefined();
+    expect(preflight?.id).toBe("doc_agent");
     expect(preflight?.if).toBeUndefined();
     const script = draftScript("Preflight Doc Agent draft endpoint");
 
@@ -514,6 +515,10 @@ describe("GitHub Draft Release v2 workflow", () => {
     expect(script).toContain("Doc Agent draft endpoint unavailable");
     expect(script).toContain("Doc Agent smoke response contract mismatch");
     expect(script).toContain("LLM generation: not invoked by smoke");
+    expect(script).toContain('echo "available=false" >> "$GITHUB_OUTPUT"');
+    expect(script).toContain('echo "available=true" >> "$GITHUB_OUTPUT"');
+    expect(script).toContain("safe needs-review Draft");
+    expect(script).not.toContain("::error title=Doc Agent");
   });
 
   it("reuses a pre-existing tag only when it points at the target commit", () => {
@@ -621,16 +626,20 @@ describe("GitHub Draft Release v2 workflow", () => {
     expect(releaseNotes).toContain("MEMMY_RELEASE_STYLE_EXAMPLES.json");
     expect(releaseNotes).toContain("candidate_count: 3");
     expect(releaseNotes).toContain('public_release_language: "en"');
+    expect(releaseNotes).toContain("reviewed_release_notes");
+    expect(releaseNotes).toContain("REVIEWED_RELEASE_NOTES.md");
+    expect(releaseNotes).toContain("manual-reviewed-by-doc-agent");
+    expect(releaseNotes).toContain("manual-repaired-by-doc-agent");
+    expect(releaseNotes).toContain("doc-agent-manual-regeneration");
     expect(releaseNotes).toContain(".release_notes_md // .release_notes_markdown");
-    expect(releaseNotes).toContain("Doc Agent draft configuration missing");
-    expect(releaseNotes).toContain("Doc Agent draft generation failed");
-    expect(releaseNotes).toContain("do not fall back silently");
-    expect(releaseNotes).toContain("Doc Agent returned invalid release notes");
-    expect(releaseNotes).toContain("Doc Agent quality report missing");
-    expect(releaseNotes).toContain("Doc Agent candidate selection missing");
-    expect(releaseNotes).toContain("Doc Agent release notes need review");
+    expect(releaseNotes).toContain("write_safe_fallback_body");
+    expect(releaseNotes).toContain("safe-needs-review-fallback");
+    expect(releaseNotes).toContain("manual-needs-review-fallback");
+    expect(releaseNotes).toContain("safe_needs_review_draft");
+    expect(releaseNotes).toContain("will not publish it automatically");
+    expect(releaseNotes).toContain("exhausted automatic wording repair");
     expect(releaseNotes).toContain("requested_candidate_count");
-    expect(releaseNotes).toContain("Release notes generation produced an empty body");
+    expect(releaseNotes).toContain("Release notes body was empty");
     expect(releaseNotes).toContain("RELEASE_NOTES_SOURCE.json");
     expect(releaseNotes).toContain("QUALITY_REPORT.json");
     expect(existsSync(releaseNotesSanitizerPath)).toBe(true);
@@ -638,7 +647,8 @@ describe("GitHub Draft Release v2 workflow", () => {
       'node scripts/sanitize-release-notes.mjs "$notes" "$sanitized_notes" --language en',
     );
     expect(releaseNotes).toContain('mv "$sanitized_notes" "$notes"');
-    expect(releaseNotes).toContain("Release notes sanitization failed");
+    expect(releaseNotes).toContain("Release notes sanitization repaired with safe fallback");
+    expect(releaseNotes).toContain("Safe release-notes fallback failed");
     expect(releaseNotes).toContain('public_release_language: "en"');
     expect(releaseNotes).toContain("language_validation");
     expect(releaseNotes).not.toContain("<!-- doc-agent:");