Document plugin alert routing boundary

Author: Pigbibi

docs/market-regime-control-plan.md

@@ -147,6 +147,10 @@ the human notification body:
   and `evidence_status = automation_approved`.
 - `notification_only`, TACO, panic reversal, AI audit, and general notification
   targets are for manual review only.
+- Dedicated plugin-alert bots should publish only manual-review or
+  notification-only plugin signals. If a strategy consumes an
+  automation-approved `defend` or `delever` route, the strategy run that applies
+  the position impact should carry the user-facing notification.
 - Human notification copy should contain only the situation and suggested
   action; it should not display internal governance fields such as
   `position_control_allowed`, `execution_controls`, route codes, or veto codes.

docs/market-regime-control-plan.zh-CN.md

@@ -93,6 +93,8 @@
 - 自动仓位影响只发生在策略侧显式消费 `position_control` 时，并且必须同时满足
   `position_control_allowed = true` 和 `evidence_status = automation_approved`。
 - `notification_only`、TACO、panic reversal、AI audit 和通用通知只用于人工查看。
+- 专用插件告警 bot 只发布人工复核或 notification-only 插件信号。如果策略消费了已通过自动化证据批准的
+  `defend` 或 `delever` 路线，并实际产生仓位影响，面向用户的通知应由该策略运行结果承载。
 - 人工通知正文只写“情况说明”和“建议操作”，不展示 `position_control_allowed`、
   `execution_controls`、route code 或 veto code 等内部治理字段。