KB-7DF4 rev 2

SR CURRENT STATE — SUA-RE entry point

4 min read Revision 2
sua-recurrent-stateentry-pointbaselineg2

SR CURRENT STATE

1. Read this first

This file is the entry point for SUA-RE work. It is not the full source of truth. Follow the links below.

2. Current baseline

Current baseline: G2

Authoritative source of truth:

  • Final proof: knowledge/dev/laws-new/kestra/sua-re/nhap-ui/g2-final-proof-2026-07-07.md

  • Sealed baseline JSON: /opt/incomex/docs/mcp-writes/sua-re/protection/g2-sealed-baseline-2026-07-07.json

  • Current readonly checklist: /opt/incomex/docs/mcp-writes/sua-re/protection/g2-sealed-readonly-check-2026-07-07.sql

Do not copy counts or hashes from this file. Read the sealed baseline JSON and final proof for authoritative details.

3. Superseded baselines

G1 is superseded by G2. Do not use G1 checklist as current baseline check.

Authoritative details: knowledge/dev/laws-new/kestra/sua-re/nhap-ui/g2-final-proof-2026-07-07.md

4. Inert artifact warning

There is an old G2-1 SQL relpath that is inert due to guardrail rejection.

Do not use it. Use the applied r2 artifact recorded in the G2 sealed baseline/final proof.

Authoritative details:

  • G2 final proof.
  • G2 sealed baseline JSON.
  • SR artifact registry.

5. Non-negotiable operational rules

Rules are summarized here; authoritative details live in the sealed baseline and process docs.

  • PG write only through DOT.
  • Agent may SELECT read-only.
  • No direct PG write.
  • Every future write requires Owner GO.
  • Current readonly checklist must PASS before write.
  • Golden SQL for DOT must be guardrail-clean across the full file, including comments/header.
  • Do not write match_status manually.
  • After any approved delta, create a new sealed baseline.

6. Backlog summary

Authoritative backlog lives in G2 final proof.

Current known backlog:

  • manual total time concept is deferred.
  • UI source pipeline is not started.
  • scan/re-scan pipeline is not available.
  • executable preflight is not installed yet.

7. Mandatory read block for future agents

Before any SUA-RE work, read:

  1. SR_CURRENT_STATE.md.
  2. latest final proof.
  3. latest sealed baseline JSON.
  4. latest readonly checklist SQL.
  5. relevant SR-SUA/SR-LAP process doc.
  6. sr-artifact-registry.
  7. sr-preflight-spec.

If any document disagrees, the latest sealed baseline JSON + latest final proof win.

8. Pointer map

  • SR artifact registry (pointer/index): /opt/incomex/docs/mcp-writes/sua-re/protection/sr-artifact-registry-2026-07-07.json
  • SR preflight spec (checklist, not yet executable): /opt/incomex/docs/mcp-writes/sua-re/protection/sr-preflight-spec-2026-07-07.md
  • SR agent handoff/startup snippet: /opt/incomex/docs/mcp-writes/sua-re/protection/sr-agent-handoff-snippet-2026-07-07.md
  • SR-HARDEN-1A report: knowledge/dev/laws-new/kestra/sua-re/nhap-ui/sr-harden-1a-current-state-registry-preflight-2026-07-07.md
  • Process docs: knowledge/dev/laws-new/kestra/quy-trinh/sua-re-sua-so-khai-niem-ui.md knowledge/dev/laws-new/kestra/quy-trinh/sua-re-lap-so-khai-niem-ui.md

Note: This entry point may carry a few short summary lines, but it must never be treated as an independent source of truth for counts/sha/invariants. The latest sealed baseline JSON + latest final proof are authoritative.