diff --git a/nanobot/cli/commands.py b/nanobot/cli/commands.py
index a248556b1..3fb327c51 100644
--- a/nanobot/cli/commands.py
+++ b/nanobot/cli/commands.py
@@ -980,6 +980,7 @@ def _run_gateway(
     from nanobot.cron.automation import (
         AUTOMATION_DEFER_UNTIL_IDLE_META,
         AUTOMATION_TRIGGER_META,
+        is_bound_agent_job,
     )
     from nanobot.cron.service import CronService
     from nanobot.cron.types import CronJob
@@ -1189,17 +1190,6 @@ def _run_gateway(
         )
         return response
 
-    def _is_bound_cron_job(job: CronJob) -> bool:
-        payload = job.payload
-        if payload.kind != "agent_turn" or not payload.session_key:
-            return False
-        return not (
-            payload.deliver
-            or payload.channel
-            or payload.to
-            or payload.channel_meta
-        )
-
     async def _deliver_to_channel(
         msg: OutboundMessage, *, record: bool = False, session_key: str | None = None,
     ) -> None:
@@ -1360,7 +1350,7 @@ def _run_gateway(
                 logger.info("Heartbeat: silenced by post-run evaluation")
             return response
 
-        if _is_bound_cron_job(job):
+        if is_bound_agent_job(job):
             return await _run_bound_cron_job(job)
 
         reminder_note = (
diff --git a/nanobot/cron/automation.py b/nanobot/cron/automation.py
index 7eacac9ce..298680a2f 100644
--- a/nanobot/cron/automation.py
+++ b/nanobot/cron/automation.py
@@ -4,6 +4,8 @@ from __future__ import annotations
 
 from typing import Any, Mapping
 
+from nanobot.cron.types import CronJob
+
 AUTOMATION_TRIGGER_META = "_automation_trigger"
 AUTOMATION_DEFER_UNTIL_IDLE_META = "_defer_until_session_idle"
 
@@ -31,3 +33,16 @@ def automation_run_id(metadata: Mapping[str, Any] | None) -> str | None:
         return None
     value = trigger.get("run_id")
     return value if isinstance(value, str) and value else None
+
+
+def is_bound_agent_job(job: CronJob) -> bool:
+    """True for new session-bound user automations, excluding legacy delivery payloads."""
+    payload = job.payload
+    if payload.kind != "agent_turn" or not payload.session_key:
+        return False
+    return not (
+        payload.deliver
+        or payload.channel
+        or payload.to
+        or payload.channel_meta
+    )
diff --git a/nanobot/cron/service.py b/nanobot/cron/service.py
index ff8882a86..30ee7aea9 100644
--- a/nanobot/cron/service.py
+++ b/nanobot/cron/service.py
@@ -14,6 +14,7 @@ from typing import Any, Callable, Coroutine, Literal
 from filelock import FileLock
 from loguru import logger
 
+from nanobot.cron.automation import is_bound_agent_job
 from nanobot.cron.types import (
     CronJob,
     CronJobState,
@@ -508,7 +509,7 @@ class CronService:
         return [
             job
             for job in self.list_jobs(include_disabled=include_disabled)
-            if job.payload.kind == "agent_turn"
+            if is_bound_agent_job(job)
             and job.payload.session_key == session_key
         ]
 
diff --git a/tests/channels/test_websocket_http_routes.py b/tests/channels/test_websocket_http_routes.py
index bf2dafe59..bc11c2e15 100644
--- a/tests/channels/test_websocket_http_routes.py
+++ b/tests/channels/test_websocket_http_routes.py
@@ -184,16 +184,16 @@ async def test_session_automations_route_filters_by_webui_session(
             name=name,
             schedule=hourly,
             message=message,
-            channel="websocket",
-            to=to,
             session_key=f"websocket:{to}",
         )
     cron.add_job(
         name="Legacy same target",
         schedule=hourly,
         message="Legacy job should not be treated as bound",
+        deliver=True,
         channel="websocket",
         to="abc",
+        session_key="websocket:abc",
     )
     cron.register_system_job(
         CronJob(
diff --git a/tests/cron/test_cron_service.py b/tests/cron/test_cron_service.py
index 195ba9c97..f258fdd22 100644
--- a/tests/cron/test_cron_service.py
+++ b/tests/cron/test_cron_service.py
@@ -65,6 +65,28 @@ def test_add_job_preserves_channel_meta_and_session_key(tmp_path) -> None:
     assert reloaded.payload.session_key == "slack:C123:1234567890.123456"
 
 
+def test_list_bound_agent_jobs_excludes_legacy_delivery_payloads(tmp_path) -> None:
+    service = CronService(tmp_path / "cron" / "jobs.json")
+    schedule = CronSchedule(kind="every", every_ms=60_000)
+    bound = service.add_job(
+        name="Bound",
+        schedule=schedule,
+        message="new bound job",
+        session_key="websocket:chat-1",
+    )
+    service.add_job(
+        name="Legacy same session",
+        schedule=schedule,
+        message="legacy job",
+        deliver=True,
+        channel="websocket",
+        to="chat-1",
+        session_key="websocket:chat-1",
+    )
+
+    assert service.list_bound_agent_jobs_for_session("websocket:chat-1") == [bound]
+
+
 @pytest.mark.asyncio
 async def test_channel_meta_and_session_key_survive_store_reload(tmp_path) -> None:
     store_path = tmp_path / "cron" / "jobs.json"