diff --git a/deploy/gitops/node/d601/web-probe-sentinel/web-probe-sentinel.yaml b/deploy/gitops/node/d601/web-probe-sentinel/web-probe-sentinel.yaml
index c8fd71c2..68ffa632 100644
--- a/deploy/gitops/node/d601/web-probe-sentinel/web-probe-sentinel.yaml
+++ b/deploy/gitops/node/d601/web-probe-sentinel/web-probe-sentinel.yaml
@@ -4,10 +4,10 @@
 ---
 {apiVersion: v1,kind: ConfigMap,metadata: {name: hwlab-web-probe-sentinel-config,namespace: hwlab-v03,labels: {app.kubernetes.io/name: hwlab-web-probe-sentinel,app.kubernetes.io/part-of: hwlab-web-probe-sentinel,app.kubernetes.io/managed-by: unidesk,unidesk.ai/spec-ref: PJ2026-01060508,unidesk.ai/node: D601,unidesk.ai/lane: v03}},data: {config-summary.json: "{\n  \"specRef\": \"PJ2026-01060508 Web哨兵 draft-2026-06-25-p0-web-probe-sentinel\",\n  \"node\": \"D601\",\n  \"lane\": \"v03\",\n  \"publicBaseUrl\": \"https://monitor.pikapython.com\",\n  \"gitopsPath\": \"deploy/gitops/node/d601/web-probe-sentinel\",\n  \"valuesRedacted\": true\n}"}}
 ---
-{apiVersion: apps/v1,kind: Deployment,metadata: {name: hwlab-web-probe-sentinel,namespace: hwlab-v03,labels: &labels {app.kubernetes.io/name: hwlab-web-probe-sentinel,app.kubernetes.io/part-of: hwlab-web-probe-sentinel,app.kubernetes.io/managed-by: unidesk,unidesk.ai/spec-ref: PJ2026-01060508,unidesk.ai/node: D601,unidesk.ai/lane: v03}},spec: {replicas: 1,selector: {matchLabels: {app.kubernetes.io/name: hwlab-web-probe-sentinel}},template: {metadata: {labels: *labels},spec: {serviceAccountName: hwlab-web-probe-sentinel,containers: [{name: sentinel,image: 127.0.0.1:5000/hwlab/web-probe-sentinel@sha256:f24ba5d7284cab9cd5b2ff670d851faf701c58073a30726488c1d87b13ce741d,imagePullPolicy: IfNotPresent,args: ["--node",D601,"--lane",v03,"--state-root",/var/lib/web-probe-sentinel,"--host",0.0.0.0,"--port","8080"],ports: [{name: http,containerPort: 8080}],readinessProbe: {httpGet: {path: /api/health,port: http}},livenessProbe: {httpGet: {path: /api/health,port: http}},volumeMounts: [{name: state,mountPath: /var/lib/web-probe-sentinel}]}],volumes: [{name: state,persistentVolumeClaim: {claimName: hwlab-web-probe-sentinel-state}}]}}}}
+{apiVersion: apps/v1,kind: Deployment,metadata: {name: hwlab-web-probe-sentinel,namespace: hwlab-v03,labels: &labels {app.kubernetes.io/name: hwlab-web-probe-sentinel,app.kubernetes.io/part-of: hwlab-web-probe-sentinel,app.kubernetes.io/managed-by: unidesk,unidesk.ai/spec-ref: PJ2026-01060508,unidesk.ai/node: D601,unidesk.ai/lane: v03}},spec: {replicas: 1,selector: {matchLabels: {app.kubernetes.io/name: hwlab-web-probe-sentinel}},template: {metadata: {labels: *labels},spec: {serviceAccountName: hwlab-web-probe-sentinel,containers: [{name: sentinel,image: 127.0.0.1:5000/hwlab/web-probe-sentinel@sha256:c7728a7a082d921ac887e80e5dd3023170f9b8a9c3dcd80031241c3891911066,imagePullPolicy: IfNotPresent,args: ["--node",D601,"--lane",v03,"--state-root",/var/lib/web-probe-sentinel,"--host",0.0.0.0,"--port","8080"],ports: [{name: http,containerPort: 8080}],readinessProbe: {httpGet: {path: /api/health,port: http}},livenessProbe: {httpGet: {path: /api/health,port: http}},volumeMounts: [{name: state,mountPath: /var/lib/web-probe-sentinel}]}],volumes: [{name: state,persistentVolumeClaim: {claimName: hwlab-web-probe-sentinel-state}}]}}}}
 ---
 {apiVersion: v1,kind: Service,metadata: {name: hwlab-web-probe-sentinel,namespace: hwlab-v03,labels: {app.kubernetes.io/name: hwlab-web-probe-sentinel,app.kubernetes.io/part-of: hwlab-web-probe-sentinel,app.kubernetes.io/managed-by: unidesk,unidesk.ai/spec-ref: PJ2026-01060508,unidesk.ai/node: D601,unidesk.ai/lane: v03}},spec: {type: ClusterIP,selector: {app.kubernetes.io/name: hwlab-web-probe-sentinel},ports: [{name: http,port: 8080,targetPort: http}]}}
 ---
-{apiVersion: apps/v1,kind: Deployment,metadata: {name: hwlab-web-probe-sentinel-frpc,namespace: hwlab-v03,labels: {app.kubernetes.io/name: hwlab-web-probe-sentinel,app.kubernetes.io/part-of: hwlab-web-probe-sentinel,app.kubernetes.io/managed-by: unidesk,unidesk.ai/spec-ref: PJ2026-01060508,unidesk.ai/node: D601,unidesk.ai/lane: v03,app.kubernetes.io/component: tunnel}},spec: {replicas: 1,selector: {matchLabels: {app.kubernetes.io/name: hwlab-web-probe-sentinel-frpc}},template: {metadata: {labels: {app.kubernetes.io/name: hwlab-web-probe-sentinel-frpc,app.kubernetes.io/part-of: hwlab-web-probe-sentinel,app.kubernetes.io/managed-by: unidesk,unidesk.ai/spec-ref: PJ2026-01060508,unidesk.ai/node: D601,unidesk.ai/lane: v03,app.kubernetes.io/component: tunnel},annotations: {unidesk.ai/public-base-url: https://monitor.pikapython.com,unidesk.ai/frp-server: 82.156.23.220:22000,unidesk.ai/frp-remote-port: "22109"}},spec: {containers: [{name: frpc,image: 127.0.0.1:5000/hwlab/frpc:v0.68.1,imagePullPolicy: IfNotPresent,args: ["-c",/etc/frp/frpc.toml],volumeMounts: [{name: frpc-config,mountPath: /etc/frp/frpc.toml,subPath: frpc.toml,readOnly: true}]}],volumes: [{name: frpc-config,secret: {secretName: hwlab-web-probe-sentinel-frpc}}]}}}}
+{apiVersion: apps/v1,kind: Deployment,metadata: {name: hwlab-web-probe-sentinel-frpc,namespace: hwlab-v03,labels: {app.kubernetes.io/name: hwlab-web-probe-sentinel,app.kubernetes.io/part-of: hwlab-web-probe-sentinel,app.kubernetes.io/managed-by: unidesk,unidesk.ai/spec-ref: PJ2026-01060508,unidesk.ai/node: D601,unidesk.ai/lane: v03,app.kubernetes.io/component: tunnel}},spec: {replicas: 1,selector: {matchLabels: {app.kubernetes.io/name: hwlab-web-probe-sentinel-frpc}},template: {metadata: {labels: {app.kubernetes.io/name: hwlab-web-probe-sentinel-frpc,app.kubernetes.io/part-of: hwlab-web-probe-sentinel,app.kubernetes.io/managed-by: unidesk,unidesk.ai/spec-ref: PJ2026-01060508,unidesk.ai/node: D601,unidesk.ai/lane: v03,app.kubernetes.io/component: tunnel},annotations: {unidesk.ai/public-base-url: https://monitor.pikapython.com,unidesk.ai/frp-server: 82.156.23.220:22000,unidesk.ai/frp-remote-port: "22100"}},spec: {containers: [{name: frpc,image: 127.0.0.1:5000/hwlab/frpc:v0.68.1,imagePullPolicy: IfNotPresent,args: ["-c",/etc/frp/frpc.toml],volumeMounts: [{name: frpc-config,mountPath: /etc/frp/frpc.toml,subPath: frpc.toml,readOnly: true}]}],volumes: [{name: frpc-config,secret: {secretName: hwlab-web-probe-sentinel-frpc}}]}}}}
 ---
 {apiVersion: networking.k8s.io/v1,kind: NetworkPolicy,metadata: {name: hwlab-web-probe-sentinel-egress,namespace: hwlab-v03,labels: {app.kubernetes.io/name: hwlab-web-probe-sentinel,app.kubernetes.io/part-of: hwlab-web-probe-sentinel,app.kubernetes.io/managed-by: unidesk,unidesk.ai/spec-ref: PJ2026-01060508,unidesk.ai/node: D601,unidesk.ai/lane: v03}},spec: {podSelector: {matchLabels: {app.kubernetes.io/name: hwlab-web-probe-sentinel}},policyTypes: [Ingress,Egress],ingress: [{from: [{namespaceSelector: {}}],ports: [{protocol: TCP,port: 8080}]}],egress: [{to: [{namespaceSelector: {}}]}]}}