diff --git a/.task/feature-iam-role-permission-linked-capabilities-perm-ux.md b/.task/feature-iam-role-permission-linked-capabilities-perm-ux.md
new file mode 100644
index 00000000..09bba55b
--- /dev/null
+++ b/.task/feature-iam-role-permission-linked-capabilities-perm-ux.md
@@ -0,0 +1,93 @@
+# feature/iam-role-permission-linked-capabilities-perm-ux 任务卡
+
+任务主记录：<PR 链接，交付前填写>；状态：进行中；owner：weichen
+
+- 权威仓：ssh://git@git-ssh.u1680832.nyat.app:31411/weichen/Agent-System-Dev.git；目标分支：main；R0（initial_base_sha）= 7716b28cfff5200e7cfe9ec75aff5bcd71b234ed
+- 工作区：/home/weichen/projects/Agent-System-Dev-wt-feature-iam-role-permission-linked-capabilities-perm-ux（worktree）；分支：feature/iam-role-permission-linked-capabilities-perm-ux
+- 分支类型：child；initiative_id：feature-iam-role-permission-linked-capabilities；root_target：main；immediate_target：feature/iam-role-permission-linked-capabilities；accepting_requirements：false；parent_branch：feature/iam-role-permission-linked-capabilities；parent_head_sha：90317d02a746ea3cd25021561ef40e8cd7498963；parent_pr：无；parent_source：origin
+- 需求分流：verdict=JOIN；selected_initiative=feature/iam-role-permission-linked-capabilities；requirement_sha256=6eab4bfaa1bb158cd0943427d00264a74059b77b967530dc7d7c32f2f9ada0fa；triage_receipt=/tmp/iam-perm-ux-triage.json；receipt_sha256=3dd33a2bd1a128579bd405339b682acbcd4f96c7b980ebb0941cd5c622ccebb7
+
+- 授权与交付终点：<本次允许的动作与终点；未授权事项写明>
+- 交付模式：goal-first（目标、范围和交付终点一次确认；范围内连续推进）
+- 实施执行：agent-per-unit（配置：AGENT-EXECUTION.md）
+- 合入执行：agent（已授权交付范围内，Review 通过、冲突解决且当前 HEAD 的 CI 通过后合入）
+- 流程依据：仓库根目录 policy/delivery.md（归档后仍按仓库根目录定位）
+
+## 目标与非目标
+
+<预期结果、受影响入口/模块/契约；明确不做什么。>
+
+## Agent 实施收据
+
+路由与 fail-stop 规则见根目录 AGENT-EXECUTION.md 与 policy/delivery.md；每次尝试一行，原始日志留在源码外收据路径。
+
+| 单元 ID | 预期范围 | 配置摘要 | 角色 | 候选顺序 | attempt | CLI/模型 | 终态 | transport | fallback | 源码外收据路径 |
+|---|---|---|---|---|---|---|---|---|---|---|
+| 待定义 | — | NOT_RUN | NOT_RUN | NOT_RUN | NOT_RUN | NOT_RUN | NOT_RUN | NOT_RUN | NOT_RUN | — |
+
+## 同步记录
+
+| 节点 | sync_base_sha | tested_head_sha | checked_at |
+|---|---|---|---|
+| 启动 | 7716b28cfff5200e7cfe9ec75aff5bcd71b234ed | 90317d02a746ea3cd25021561ef40e8cd7498963 | 2026-10-19T03:13:11Z |
+
+## 证据（Evidence）
+
+<!-- CMD="<命令>" make evidence 写入；手抄/转写输出视为无效证据（AGENTS.md 证据与验证门禁）。 -->
+| 时间(UTC) | 命令 | 被测HEAD | exit | 来源 | sha256(16) |
+|---|---|---|---|---|---|
+
+## 结果与验证（完成后填写）
+
+- 结果：
+- 验证：<结论摘要 PASS/FAIL/SKIP/NOT_RUN 逐项；逐条证据由 make evidence 写入上方证据表>
+- 影响与剩余项：
+
+## 合入与清理
+
+- Review 记录：NOT_RUN（审阅智能体/平台身份、base/head、结论、问题闭合及重放依据）
+- 冲突记录：NOT_RUN（最新目标同步、冲突处置、组合兼容核验及复审/补测）
+- CI 记录：NOT_RUN（当前 HEAD 完整 SHA、全部必需检查、运行链接、执行身份及 GATE 结果）
+- 合入记录：NOT_RUN（交付授权范围、PR、被核验 HEAD、合入 SHA、目标分支及内容核验）
+- 清理记录：NOT_RUN（授权依据、写者退出确认、worktree/分支/任务卡处置）
+
+<!-- Local receipt: SELF. Digests detect corruption; they do not authenticate a reviewer or CI. -->
+```json
+{
+  "summary_schema": 1,
+  "source": "SELF",
+  "timestamp": "2026-10-19T03:12:24.090626+00:00",
+  "command": "make precheck",
+  "exit_code": 0,
+  "cwd": "/home/weichen/projects/Agent-System-Dev",
+  "before_head": "7716b28cfff5200e7cfe9ec75aff5bcd71b234ed",
+  "after_head": "7716b28cfff5200e7cfe9ec75aff5bcd71b234ed",
+  "branch": "main",
+  "target_branch": "main",
+  "target_head": "7716b28cfff5200e7cfe9ec75aff5bcd71b234ed",
+  "root_target": "main",
+  "immediate_target": "main",
+  "before_tracked_diff_sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+  "after_tracked_diff_sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+  "output_tail": [
+    "make[1]: Entering directory '/home/weichen/projects/Agent-System-Dev'",
+    "[repo]   branch=main head=7716b28cff",
+    "[remote] origin/main=7716b28cff ahead=0 behind=0",
+    "[tree]   clean submodules_drift=0 uninit=13",
+    "[warn] 13 个子模块未初始化——构建/测试前需物化（不阻断写入）",
+    "[worktrees] linked=5",
+    "[recycle] merged un-recycled branches: feature/layered-python-env",
+    "[initiatives] local cards (not authoritative): none",
+    "[hooks]   core.hooksPath=scripts/hooks（pre-commit/post-merge 实际接线）",
+    "[facts]   policy/facts.md 6 条事实均在有效期内",
+    "[required-reading] core/baseline.md, workflows/delivery.md §1, policy/delivery.md",
+    "[R0] 7716b28cff（完整：7716b28cfff5200e7cfe9ec75aff5bcd71b234ed）",
+    "[worktree] before-sync: recursive component checks passed",
+    "[verdict] READY — 保留本次 precheck receipt 后建任务工作区：PRECHECK_RECEIPT=/tmp/task-precheck.json make task-start NAME=feature/your-branch",
+    "make[1]: Leaving directory '/home/weichen/projects/Agent-System-Dev'"
+  ],
+  "output_sha256": "07bfa89f466fec4670149743fcc24eec9e572add7603cbc9a08b6c6268f511b3",
+  "receipt_sha256": "82a56765b5b0630ed103d995875cdeb55426259336a503bb7d1a8bbf42aa9a40",
+  "receipt_path": "/home/weichen/.cache/agent-system-dev/evidence/82a56765b5b0630ed103d995875cdeb55426259336a503bb7d1a8bbf42aa9a40.json"
+}
+```