diff --git a/frontend/src/lib/components/copilot/chat/global/sessionAccess.test.ts b/frontend/src/lib/components/copilot/chat/global/sessionAccess.test.ts
index 527d337ad9..740f451439 100644
--- a/frontend/src/lib/components/copilot/chat/global/sessionAccess.test.ts
+++ b/frontend/src/lib/components/copilot/chat/global/sessionAccess.test.ts
@@ -73,7 +73,6 @@ describe('resolveSessionAccess', () => {
 		})
 		const caps = await capabilitiesFor({})
 		expect(caps.has('deploy')).toBe(false)
-		expect(caps.has('deploy_gated_kinds')).toBe(false)
 		expect(caps.has('write_draft')).toBe(true)
 	})
 
diff --git a/frontend/src/lib/components/copilot/chat/global/sessionAccess.ts b/frontend/src/lib/components/copilot/chat/global/sessionAccess.ts
index 8fed511f2d..46b835445f 100644
--- a/frontend/src/lib/components/copilot/chat/global/sessionAccess.ts
+++ b/frontend/src/lib/components/copilot/chat/global/sessionAccess.ts
@@ -66,10 +66,8 @@ export async function resolveSessionAccess(workspace: string): Promise<SessionAc
 		capabilities.add('run_preview')
 	}
 
-	// `checkDeployPermission` is the whole gate for the gated kinds. Its refusals are
-	// per-workspace, but every one of them — operator included — is enforced server-side
-	// only where `check_deploy_rules` or the item handler runs, so none of them reaches a
-	// schedule or a trigger. Hence one capability, covering the gated kinds alone.
+	// Delegated whole to the shared preflight rather than re-derived here, so the
+	// session answers deploy exactly as the deploy panel does.
 	if ((await checkDeployPermission(workspace, me)).ok) {
 		capabilities.add('deploy')
 	}