diff --git a/tasks/T7-correction-monitor.md b/tasks/T7-correction-monitor.md
index 24cb5f8..4de2077 100644
--- a/tasks/T7-correction-monitor.md
+++ b/tasks/T7-correction-monitor.md
@@ -2,7 +2,7 @@
 
 ## Status
 
-claimed
+blocked
 
 ## Owner
 
@@ -28,6 +28,15 @@ This task does not authorize PC or VPS configuration mutation. CORRECTION may bl
 
 ## Monitoring Findings
 
+- 2026-05-19 12:22 UTC+8: Audited role-misdirection event after `git pull` reported the repo was already up to date. User reported that prompts intended for ORCHESTRATOR were mistakenly sent to VPS_VERIFIER.
+- Role-scope incident: VPS-origin commits in the recent audit window modified files outside VPS_VERIFIER's write scope. `1400aea` changed `AGENT_BOARD.md` and `USER_STATUS.md`; `588db23` changed `handoff/ORCHESTRATOR.md`, T9, T10, and T13; `5134f68` changed `handoff/CORRECTION.md`, `handoff/PC_EXECUTOR.md`, `handoff/VPS_EXECUTOR.md`, and T7.
+- If those commits came from the misdirected VPS_VERIFIER session, they are越权 control-plane edits. Even if the content is directionally reasonable, ORCHESTRATOR must review and explicitly adopt or correct it.
+- `handoff/VPS_VERIFIER.md` self-reports only `evidence/verify-vps-baseline-20260515.md` and `handoff/VPS_VERIFIER.md` as files modified by VPS_VERIFIER. This is inconsistent with the VPS-origin cross-role commits if they were produced by the same misdirected role session.
+- No evidence was found of live VPS G2 approval, `nodes pending`, `devices approve`, `nodes approve`, service restart/reload, token rotation, Gateway config mutation, Nginx/Docker/compose/bind-mount/image change, or frozen website output change during this audit.
+- Evidence contains only baseline and baseline-verifier files; no G2 PC node-run evidence, VPS approval evidence, or G2 rollback notes exist.
+- Secret scan of evidence found no likely secret values. Current tracked references are policy/negative/placeholders, not exposed credentials.
+- Sync-health is not blocked in this audit: both heartbeat files exist and no `sync-state/error-*.md` files are present.
+- Correction decision: block G2 progression and mutation-stage work until ORCHESTRATOR takes over, reconciles the cross-role edits, and restates the authorized next step.
 - 2026-05-19 12:16 UTC+8: User authorized G2 with strict scope: foreground PC node run and corresponding VPS pairing approval only. T9/T13 are ready; T10 waits for T9 evidence with a matching non-secret request/node ID. Continue blocking service persistence, `openclaw node install/start`, Nginx/Docker/website changes, firewall/network changes, and any token/secret recording.
 - 2026-05-19 12:07 UTC+8: User confirmed sync-health is healthy and T7 sync-health blocked state is cleared. G2 entered pre-execution planning only. `docs/G2_RUNBOOK.md` and G2 task files define authorization gates, stop conditions, rollback, secret handling, and filing-freeze constraints. No G2 execution is authorized by this planning pass.
 - 2026-05-15 11:42 UTC+8: Read `AGENT_BOARD.md`, `README.md`, `.cursor/rules/agent-orchestration.mdc`, this task, and all relevant PC/VPS handoffs and baseline tasks.
@@ -36,6 +45,12 @@ This task does not authorize PC or VPS configuration mutation. CORRECTION may bl
 - No executor overreach, frozen `smartmotor.cloud` website mutation, pre-G1 configuration mutation, rollback-note gap, sync conflict, or secret-bearing evidence was detected in tracked repository contents.
 - Correction decision: G2 execution is open only within the strict runbook scope. Block anything outside foreground PC node run, matching VPS pairing approval, non-secret evidence, and required rollback notes.
 
+## Current Block
+
+- Reason: role-misdirection incident caused or may have caused VPS_VERIFIER-context edits to ORCHESTRATOR/COACH/CORRECTION/executor-owned control-plane files.
+- Effect: block T9/T10 progression, cross-role dependent work, and mutation-stage work until ORCHESTRATOR reviews and adopts or corrects the affected state.
+- Non-blocking findings: no secret leak, no sync-health blocker, and no evidence of VPS approve/service/Nginx/Docker/website mutation was found.
+
 ## Stop Conditions
 
 - A task attempts PC/VPS execution or configuration changes before explicit G2 authorization.