diff --git a/apps/ai-game-creator-shell/src-tauri/src/agent/runtime_protocol/planning_submit.rs b/apps/ai-game-creator-shell/src-tauri/src/agent/runtime_protocol/planning_submit.rs
index e8dc24c0d..b63d5953f 100644
--- a/apps/ai-game-creator-shell/src-tauri/src/agent/runtime_protocol/planning_submit.rs
+++ b/apps/ai-game-creator-shell/src-tauri/src/agent/runtime_protocol/planning_submit.rs
@@ -1717,11 +1717,20 @@ fn project_submit_successors_locked(
         // successor.  The only safe forward path is an exact source-session
         // snapshot (including the still-active child run) or an already
         // projected session pointing at this immutable ref.
+        // These judgements are deliberately the same set `validate_current_session_cas`
+        // already enforced at the submit gate.  Do not narrow them with a
+        // `latest_submitted_ref.is_none()` style assertion: revision plus the
+        // recomputed `sessionFingerprint` (`validate_plan_session` rejects a session
+        // whose fingerprint does not hash its own content) already pin the session to
+        // the exact snapshot the submitter observed, so any extra field-shape check
+        // only re-encodes the obsolete "one submission per lineage" rule.  A user
+        // revision round legitimately arrives carrying the previous version's
+        // `latestSubmittedRef`; refusing it strands a committed GDD behind a
+        // `recoveryPending` that no replay can clear.
         let source_session_matches_gdd = session_identity_matches_gdd
             && previous_session.session_revision == gdd.source_session_revision
             && previous_session.session_fingerprint == gdd.source_session_fingerprint
             && previous_session.active_run_id.as_deref() == Some(gdd.created_by_run_id.as_str())
-            && previous_session.latest_submitted_ref.is_none()
             && matches!(
                 previous_session.phase.as_str(),
                 "collecting" | "revision_requested"
@@ -4240,6 +4249,23 @@ mod tests {
         next_context.source_session_fingerprint = continuation.session_fingerprint.clone();
         validate_current_session_cas(&continuation, &next_context, &input)
             .expect("reject 之后的 continuation 必须能提交同一 lineage 的下一版本");
+
+        // 提交闸放行还不够：投影守卫必须认同一条 continuation。这条 session 必然带着
+        // v1 的 latestSubmittedRef 和 reject 的 lastDecisionRef，投影守卫若据此判它不是
+        // 合法起点，v2 就会越过提交点却收不了口，留下一个任何重放都清不掉的
+        // recoveryPending。
+        write_plan_session_atomic_locked(&root, &continuation).expect("write continuation session");
+        next_context.action_id = "action-89abcdef0123456789abcdef".to_string();
+        next_context.action_fingerprint = "4".repeat(64);
+        next_context.approval_request_id =
+            Some("gdd-approval-00000000-0000-4000-8000-000000000041".to_string());
+        let resubmit =
+            execute_plan_submit_gdd(&root, &next_context, &input).expect("continuation 提交 v2");
+        assert_eq!(resubmit.gdd_ref.version, 2);
+        assert!(
+            !resubmit.recovery_pending,
+            "提交闸放行的 continuation，投影守卫也必须放行"
+        );
         cleanup_fixture(root);
     }