diff --git a/k8s/prod/configmap.yaml b/k8s/prod/configmap.yaml
index 2441edd..b23f5ef 100644
--- a/k8s/prod/configmap.yaml
+++ b/k8s/prod/configmap.yaml
@@ -64,3 +64,5 @@ data:
   # 用于邮件正文里拼出浏览器可直接打开的 landing 绝对 URL
   # ===========================================
   MAGIC_LINK_PUBLIC_BASE_URL: "https://apimtaiji.azure-api.net/api/mcp"
+  # 发信总闸：D-5 邮件基建签字前保持 "false"（mock，不外发）；签字后改 "true" 即真发信
+  MAGIC_LINK_EMAIL_ENABLED: "false"
diff --git a/k8s/prod/mcp-server.yaml b/k8s/prod/mcp-server.yaml
index 7bce7c9..a5355ff 100644
--- a/k8s/prod/mcp-server.yaml
+++ b/k8s/prod/mcp-server.yaml
@@ -31,7 +31,7 @@ spec:
     spec:
       containers:
       - name: mcp-server
-        image: taiji.azurecr.io/mcp-server:magic-link-20260609
+        image: taiji.azurecr.io/mcp-server:magic-link-20260609-arm64-v2
         imagePullPolicy: Always
         ports:
         - containerPort: 8000
@@ -167,6 +167,12 @@ spec:
             configMapKeyRef:
               name: taiji-config
               key: MAGIC_LINK_PUBLIC_BASE_URL
+        # 发信总闸（默认 false=mock）；D-5 签字后改 configmap 的 MAGIC_LINK_EMAIL_ENABLED=true
+        - name: MAGIC_LINK_EMAIL_ENABLED
+          valueFrom:
+            configMapKeyRef:
+              name: taiji-config
+              key: MAGIC_LINK_EMAIL_ENABLED
         
         # PayPal 支付配置 (生产环境)
         - name: PAYPAL_CLIENT_ID