diff --git a/AGENT_BOARD.md b/AGENT_BOARD.md
index 55d1f77..6702cad 100644
--- a/AGENT_BOARD.md
+++ b/AGENT_BOARD.md
@@ -62,7 +62,7 @@ Bring the Windows 11 always-on PC, Tencent Cloud VPS OpenClaw Gateway, phone Con
 | T4 | Run read-only VPS baseline discovery | VPS_EXECUTOR | T2.1 | Accepted |
 | T5 | Verify PC baseline before any PC change | PC_VERIFIER | T3 | Accepted |
 | T6 | Verify VPS baseline before any VPS change | VPS_VERIFIER | T4 | Accepted |
-| T7 | Monitor drift, sync-health failures, conflicts, unsafe changes, and missing evidence | CORRECTION | G0A | Claimed |
+| T7 | Monitor drift, sync-health failures, conflicts, unsafe changes, and missing evidence | CORRECTION | G0A | Blocked |
 | T8 | Solidify COACH role, session freeze, and knowledge capture | COACH | T2.1 | Done |
 | T9 | G2 PC foreground node run | PC_EXECUTOR | Fresh user G2 authorization, T7 healthy | Blocked |
 | T10 | G2 VPS pairing approval | VPS_EXECUTOR | T9, explicit approval authorization | Blocked |
diff --git a/handoff/ORCHESTRATOR.md b/handoff/ORCHESTRATOR.md
index d7d7d43..86ca58b 100644
--- a/handoff/ORCHESTRATOR.md
+++ b/handoff/ORCHESTRATOR.md
@@ -61,7 +61,7 @@ Correct the control plane after a role-misdirection incident, keep G2 paused, an
 - Previously recorded allowed scope: foreground PC node run and corresponding VPS pairing approval under `docs/G2_RUNBOOK.md`.
 - Current corrected state: this authorization is paused and must not be used for execution without fresh explicit user confirmation.
 - T9/T10/T13 are blocked.
-- G2 quality gate is In Progress, not accepted.
+- G2 quality gate is Pending, not in progress and not accepted.
 - No PC/VPS command was executed by ORCHESTRATOR, no token was handled, no node was started here, no VPS approval was performed here, and no service was modified.
 
 2026-05-19 12:11 UTC+8: Completed G2 authorization-before-execution control-plane cleanup.
@@ -86,9 +86,9 @@ Correct the control plane after a role-misdirection incident, keep G2 paused, an
 
 ## G2 Planning State
 
-- T9: PC foreground node run, draft.
-- T10: VPS pairing approval, draft.
+- T9: PC foreground node run, blocked.
+- T10: VPS pairing approval, blocked.
 - T11: PC G2 verification, draft.
 - T12: VPS G2 verification and freeze compliance, draft.
-- T13: G2 correction guard, draft.
-- Authorization judgment: prerequisites are sufficient to ask the user whether to authorize G2, but execution must not begin until the user explicitly grants that authorization.
+- T13: G2 correction guard, blocked.
+- Authorization judgment: `docs/G2_RUNBOOK.md` remains valid planning material, but execution must not begin until the user gives fresh explicit authorization after the role-misdirection correction.
diff --git a/sync-state/heartbeat-pc.json b/sync-state/heartbeat-pc.json
index 39aff28..175f87d 100644
--- a/sync-state/heartbeat-pc.json
+++ b/sync-state/heartbeat-pc.json
@@ -1,8 +1,8 @@
 {
     "host":  "pc",
-    "time":  "2026-05-19T12:28:51+08:00",
+    "time":  "2026-05-19T12:29:54+08:00",
     "branch":  "main",
-    "head":  "06f0b9e",
+    "head":  "ef8a3b8",
     "status":  "dirty",
     "intervalSeconds":  30,
     "heartbeatEverySeconds":  60
diff --git a/tasks/T10-G2-VPS-pairing-approve.md b/tasks/T10-G2-VPS-pairing-approve.md
index 0a66c58..f5268d7 100644
--- a/tasks/T10-G2-VPS-pairing-approve.md
+++ b/tasks/T10-G2-VPS-pairing-approve.md
@@ -11,7 +11,7 @@ VPS_EXECUTOR
 ## Dependencies
 
 - T9 produces a non-secret pairing request ID or pending node ID
-- User explicitly authorizes VPS-side approval
+- Fresh user authorization after role-misdirection correction
 - CORRECTION confirms sync-health is not blocked
 
 ## Scope
diff --git a/tasks/T9-G2-PC-node-run.md b/tasks/T9-G2-PC-node-run.md
index ea606b7..033a4d8 100644
--- a/tasks/T9-G2-PC-node-run.md
+++ b/tasks/T9-G2-PC-node-run.md
@@ -13,7 +13,7 @@ PC_EXECUTOR
 - G0A complete
 - G0B complete
 - G1 accepted
-- User explicitly authorizes G2 execution
+- Fresh user authorization after role-misdirection correction
 - CORRECTION confirms sync-health is not blocked
 
 ## Scope