Codex FIX7 Control-Plane Immutability Design Plan - Progress

Date: 2026-06-07 Mode: READ-ONLY production; KB report/checkpoint writes only.

Mission

Produce an implementation-ready FIX7 design that moves the QT001 control-plane from STAGE2_6A_FIX6_FAIL_HARDCODE_OR_BYPASS_STILL_DANGEROUS to STAGE2_6A_FIX7_CONTROL_PLANE_IMMUTABLE_READINESS_SIGNOFF_CAPABILITY_HASH_READY_FOR_T1_IMPLEMENTATION.

Progress

• Read .claude/skills/incomex-rules.md (36 rules, 8-step workflow).
• Read Operating Rules SSOT through Agent Data MCP: knowledge/dev/ssot/operating-rules.md, v7.58.
• Read Constitution through Agent Data MCP: knowledge/dev/laws/constitution.md, v4.6.3.
• Read mission-related FIX5/FIX6 audit evidence and Birth Gateway Design Index through Agent Data MCP/local KB mirror.
• Confirm production mutation prohibition and current 2.6B block.
• Write FIX7 design package and checkpoint.
• Verify exact required document set and internal consistency.
• Upload five key package/checkpoint documents to Agent Data MCP and read back.

Three Declarations

1. Permanent: authority moves out of mutable app-owned rows into owner-controlled roles, manifests, constraints, and fail-closed evaluation.
2. Impossible to mistake: Directus cannot own/mutate authority objects; missing, extra, NULL, unknown, stale, spoofed, or self-attested evidence is a hard failure.
3. 100% automatic: readiness, signoff, capability, hash, dependency, and no-bypass guards are evaluated by PostgreSQL from controlled manifests and verifier runs without manual row editing.

Evidence Baseline

• FIX6 verdict: STAGE2_6A_FIX6_FAIL_HARDCODE_OR_BYPASS_STILL_DANGEROUS.
• Directus owner/DML/DDL authority: 262/262 QT001 control objects.
• Readiness v9: BLOCKED, 4/14 green; denominator deletion can false-green.
• Scale capabilities: 0/3, NOT_SAFE.
• Signoff bindings: 0; identity strings spoofable.
• v_qt001_no_bypass_proof_v4.all_blocked=false.
• hardcode_guard_v7.pass=true and self-audit pass despite known bypass.
• Public writer EXECUTE remains open.
• 2.6B remains blocked.

Step Report 0-6

Step 0 - Foundation

• Read skill output: 36 rules, including three declarations, Assembly First, DOT pairs, dual-trigger, metadata over code, and evidence requirements.
• Three declarations are answered above with mission-specific controls.

Step 1 - Receive And Read

• Agent Data MCP read: Operating Rules knowledge/dev/ssot/operating-rules.md v7.58.
• Agent Data MCP read: Constitution knowledge/dev/laws/constitution.md v4.6.3.
• Agent Data MCP read: Birth Gateway Design Index rev22.
• Agent Data MCP/local KB read: requested FIX6 checkpoint and FIX5/FIX6 audit evidence.

Step 2 - Design

• Objective: remove app-controlled authority and false-green completeness.
• Method: NOLOGIN owner + ACL boundary + sealed exact-set manifests + controlled evidence.
• Preconditions: operator authority, PG16, pgcrypto, current apply block.
• Roadmap: FIX7a additive, FIX7b authority cutover, FIX7c repoint/evidence, Codex re-audit.

Step 3 - Write

• Wrote 12 required design documents under: knowledge/dev/reports/architecture/codex-fix7-control-plane-immutability-design-plan-2026-06-07/
• Wrote required checkpoint: knowledge/dev/reports/architecture/checkpoint-codex-fix7-control-plane-immutability-design-plan-2026-06-07.md
• No SQL applied. SQL is staged/rehearsal shape only.

Step 4 - Two Hats

• Hat 1 recommendation: T1 implements FIX7a/b/c; operator executes privileged steps.
• Hat 2 recommendation: Codex remains independent post-deploy reviewer.
• No PR/merge/deploy applies to this design-only mission.

Step 5 - Verify

Actual local verification output:

PACKAGE_CHECK=PASS
DOCS=12
CHECKPOINT=1
DIFF_CHECK_EXIT=0

Actual MCP evidence:

upload_document: 5 created, revision=1
list_documents(package): count=4, returned_count=4
get_document(checkpoint): revision=1
search_knowledge: returned FIX7 final recommendation and readme with exact target status

Production verification: N/A by explicit design-only/read-only prohibition. No production DB/role/grant/trigger/function/scheduler/source/UI/REAL_RUN/permit/ledger/QT001 apply mutation.

Step 6 - Report And Handoff

• Operating Rules update: not needed; no operating law changed.
• Technical debt: no separate TD; missing real keyset/resume/perf evidence and analyzer implementation remain explicit blockers.
• Handoff: T1 implements from the staged package; operator performs privileged steps; Codex independently re-audits.
• Final decision: Stage 2.6B remains blocked.