修复自动备份真实挂载解析（07-27-automatic-offhost-backup）

deploy/trialrun/validate-env-contract.js

@@ -326,11 +326,16 @@ for (const requiredFragment of [
   'write_success_state "$run_id" "$manifest_sha"',
   'prune_local_backups "$batch_name"',
   '--summary-file=-',
+  "docker inspect -f '{{json .Mounts}}'",
+  'if len(matches) != 1 or not matches[0]:',
 ]) {
   if (!automaticBackupRunnerContent.includes(requiredFragment)) {
     errors.push(`run-automatic-backup.sh 缺少运行时安全合同: ${requiredFragment}`);
   }
 }
+if (automaticBackupRunnerContent.includes('println .Destination "\\t" .Source')) {
+  errors.push('run-automatic-backup.sh 不得用人类可读 Go-template 分隔符解析真实 Docker mount');
+}
 
 for (const requiredFragment of [
   '"$original_command" == rsync\\ --server\\ *',