FIX7 Recheck-9 Packet V3 — Current State

• Date: 2026-06-10 · Supersedes: fix7-recheck9-packet-v2-current-state-2026-06-10.md
• Lane status: FIX7_RECHECK9_V3_BLACKBOX_CLI_ORACLE_SELF_CODEX_PASS (T1 self-check; awaiting Codex Recheck-9 V3 rerun)

Where things stand

1. Codex Recheck-9 V2 rejected Packet V2 with CODEX_RECHECK_9_V2_NEEDS_T1_FIX: R9-B2/B4/B5 + Article 13 PASS; R9-B1/B3 + Article 14 FAIL via R9-V2-B6 (negative tests inferred cli_exit_contract=4 instead of executing the CLI; a fail-open SUT mutation passed full RERUN 22/22).
2. Packet V3 (this lane) closes R9-B6: real CLI executions vs static spec oracle at OS-process + runpy levels; --emit/--verify fail closed on ORACLE_VIOLATION (no manifest laundering); RERUN 13 gates incl. live black-box negative CLI checks and the Codex-V2-attack regression; adversarial suite 25 expectations; the exact Codex attack now yields emit exit 1 / RERUN exit 1 before any PASS.
3. Packet identity: KB root knowledge/dev/laws/tool-kiem-thu/packets/fix7-codex-recheck-9-2026-06-10/ (23 root files + 10 canonical docs); tree hash b95df0a5d2f41f80bea0cef8621c1f8bb0f6b49a40175116418494ed4141ca6d; fresh-fetch reconstruction + full RERUN PASS verified post-publish; SSOT rev3 candidate 49c386a9… UNCHANGED (proof toolchain only).
4. Not done / not claimed: N7, N8, P7 seals; canonicalizer authoritative pin; blueprint approval (owner do-not-approve stands); FIX7 implementation; any production/PG/Directus/registry mutation; REAL_RUN/QT001/permit/activation/repoint/cutover; registries-pivot; auto-birth repair; Tool-Kiem-Thu v0.2; no-vector framework.

Remaining blockers

id	blocker	who acts
N7	envelope_manifest needs sealed approval-event inputs	Codex/owner
N8	detached seal	Codex
P7	re-seal over SSOT rev3 candidate 49c386a9…	Codex
OWN-1	standing do-not-approve on the construction blueprint	owner
R9-B5-R	server-side governed digest endpoint absent (MCP-byte proof accepted in V2 review)	owner/platform (optional per Codex)
NA-DUP	duplicate-active-doc ON DISK unrepresentable on case-insensitive FS — N/A with rationale; adjacent validator check executed; NOT PASS-marked	—

Minimal safe next step

Route Packet V3 → Codex Recheck-9 V3 rerun (fresh-fetch reconstruct, 13-gate RERUN, replay of the V2 attack per README §3). After a Codex pass: T1 FIX7 implementation in a separate next macro; T2 inherits the corrected packet/tool baseline for v0.2 hardening.