diff --git a/deploy/gitops/node/d601/web-probe-sentinel/web-probe-sentinel.yaml b/deploy/gitops/node/d601/web-probe-sentinel/web-probe-sentinel.yaml
new file mode 100644
index 00000000..901ca192
--- /dev/null
+++ b/deploy/gitops/node/d601/web-probe-sentinel/web-probe-sentinel.yaml
@@ -0,0 +1,13 @@
+{apiVersion: v1,kind: ServiceAccount,metadata: {name: hwlab-web-probe-sentinel,namespace: hwlab-v03,labels: {app.kubernetes.io/name: hwlab-web-probe-sentinel,app.kubernetes.io/part-of: hwlab-web-probe-sentinel,app.kubernetes.io/managed-by: unidesk,unidesk.ai/spec-ref: PJ2026-01060508,unidesk.ai/node: D601,unidesk.ai/lane: v03}}}
+---
+{apiVersion: v1,kind: PersistentVolumeClaim,metadata: {name: hwlab-web-probe-sentinel-state,namespace: hwlab-v03,labels: {app.kubernetes.io/name: hwlab-web-probe-sentinel,app.kubernetes.io/part-of: hwlab-web-probe-sentinel,app.kubernetes.io/managed-by: unidesk,unidesk.ai/spec-ref: PJ2026-01060508,unidesk.ai/node: D601,unidesk.ai/lane: v03}},spec: {accessModes: [ReadWriteOnce],resources: {requests: {storage: 10Gi}}}}
+---
+{apiVersion: v1,kind: ConfigMap,metadata: {name: hwlab-web-probe-sentinel-config,namespace: hwlab-v03,labels: {app.kubernetes.io/name: hwlab-web-probe-sentinel,app.kubernetes.io/part-of: hwlab-web-probe-sentinel,app.kubernetes.io/managed-by: unidesk,unidesk.ai/spec-ref: PJ2026-01060508,unidesk.ai/node: D601,unidesk.ai/lane: v03}},data: {config-summary.json: "{\n  \"specRef\": \"PJ2026-01060508 Web哨兵 draft-2026-06-25-p0-web-probe-sentinel\",\n  \"node\": \"D601\",\n  \"lane\": \"v03\",\n  \"publicBaseUrl\": \"https://monitor.pikapython.com\",\n  \"gitopsPath\": \"deploy/gitops/node/d601/web-probe-sentinel\",\n  \"valuesRedacted\": true\n}"}}
+---
+{apiVersion: apps/v1,kind: Deployment,metadata: {name: hwlab-web-probe-sentinel,namespace: hwlab-v03,labels: &labels {app.kubernetes.io/name: hwlab-web-probe-sentinel,app.kubernetes.io/part-of: hwlab-web-probe-sentinel,app.kubernetes.io/managed-by: unidesk,unidesk.ai/spec-ref: PJ2026-01060508,unidesk.ai/node: D601,unidesk.ai/lane: v03}},spec: {replicas: 1,selector: {matchLabels: {app.kubernetes.io/name: hwlab-web-probe-sentinel}},template: {metadata: {labels: *labels},spec: {serviceAccountName: hwlab-web-probe-sentinel,containers: [{name: sentinel,image: 127.0.0.1:5000/hwlab/web-probe-sentinel@sha256:dec7ff9bc6d8915ef35c51bafb31ceab3c476b1400f61adcb3682f317e0a9ba7,imagePullPolicy: IfNotPresent,args: ["--node",D601,"--lane",v03,"--state-root",/var/lib/web-probe-sentinel,"--host",0.0.0.0,"--port","8080"],ports: [{name: http,containerPort: 8080}],readinessProbe: {httpGet: {path: /api/health,port: http}},livenessProbe: {httpGet: {path: /api/health,port: http}},volumeMounts: [{name: state,mountPath: /var/lib/web-probe-sentinel}]}],volumes: [{name: state,persistentVolumeClaim: {claimName: hwlab-web-probe-sentinel-state}}]}}}}
+---
+{apiVersion: v1,kind: Service,metadata: {name: hwlab-web-probe-sentinel,namespace: hwlab-v03,labels: {app.kubernetes.io/name: hwlab-web-probe-sentinel,app.kubernetes.io/part-of: hwlab-web-probe-sentinel,app.kubernetes.io/managed-by: unidesk,unidesk.ai/spec-ref: PJ2026-01060508,unidesk.ai/node: D601,unidesk.ai/lane: v03}},spec: {type: ClusterIP,selector: {app.kubernetes.io/name: hwlab-web-probe-sentinel},ports: [{name: http,port: 8080,targetPort: http}]}}
+---
+{apiVersion: networking.k8s.io/v1,kind: NetworkPolicy,metadata: {name: hwlab-web-probe-sentinel-egress,namespace: hwlab-v03,labels: {app.kubernetes.io/name: hwlab-web-probe-sentinel,app.kubernetes.io/part-of: hwlab-web-probe-sentinel,app.kubernetes.io/managed-by: unidesk,unidesk.ai/spec-ref: PJ2026-01060508,unidesk.ai/node: D601,unidesk.ai/lane: v03}},spec: {podSelector: {matchLabels: {app.kubernetes.io/name: hwlab-web-probe-sentinel}},policyTypes: [Ingress,Egress],ingress: [{from: [{namespaceSelector: {}}],ports: [{protocol: TCP,port: 8080}]}],egress: [{to: [{namespaceSelector: {}}]}]}}
+---
+{apiVersion: argoproj.io/v1alpha1,kind: Application,metadata: {name: hwlab-web-probe-sentinel,namespace: argocd,labels: {app.kubernetes.io/name: hwlab-web-probe-sentinel,app.kubernetes.io/part-of: hwlab-web-probe-sentinel,app.kubernetes.io/managed-by: unidesk,unidesk.ai/spec-ref: PJ2026-01060508,unidesk.ai/node: D601,unidesk.ai/lane: v03}},spec: {project: hwlab-d601,source: {repoURL: http://git-mirror-http.devops-infra.svc.cluster.local:8080/pikasTech/HWLAB.git,targetRevision: v0.3-gitops,path: deploy/gitops/node/d601/web-probe-sentinel},destination: {server: https://kubernetes.default.svc,namespace: hwlab-v03},syncPolicy: {automated: {prune: true,selfHeal: true}}}}