KB-408A

Macro-4 B2 Output Contract — R2-B2 (2026-06-19)

3 min read Revision 1
laws-newR2-B2macro-4b2output-contractcandidate-onlynon-authorizing2026-06-19

Macro-4 B2 Output Contract — R2-B2 (2026-06-19)

Date: 2026-06-19 · Workstream: R2-B2-MACRO-4-STAGING-WORKBENCH-IO-CONTRACT-TD-ENTRY-GATE-2026-06-19 (Deliverable 30 of 90) · Editorial revision: rev1 Class: B2 output contract · READ-ONLY · NON-ENACTING · NON-AUTHORIZING · B2-ONLY · candidate-only · NO write performed.

Metadata convention. Editorial revision (rev1) only. Storage revision/content_length authoritative at read time.

Candidate-only lock. In the workbench, B2's output is draft/candidate only until separately authorized. Production inspect_* writes remain forbidden.


0. Status and non-authorization

STATUS: PASS — engineering / design-only. B2's output_surface, candidate-only. Engineering PASS ≠ authority PASS. Default: HOLD.

1. Purpose

Answer macro question 2 (output half) — what does B2 write? — as candidate-only draft output.

2. Sources / evidence read

Inspect-producer §7 (B2 output contract); prompt §9.3 (candidate fields); Điều 0-G §2.4 (per-column, ordered). Main process, no reader-agents.

3. Accepted baseline (carried)

B2 writes inspect_pen/stamp/gate only — genuine per-stage, one column per inspector, PEN→STAMP→GATE order, idempotent; never certified, canonical, identity, KG, fused, or net-new columns.

4. Evidence / analysis — B2 candidate output (workbench)

Candidate field Meaning
candidate_inspect_pen PEN result on the disposable surface (identity-completeness)
candidate_inspect_stamp STAMP result (metadata-completeness; requires candidate PEN)
candidate_inspect_gate GATE result (species-fit/business-rules; requires candidate STAMP)
candidate_reason why the candidate stamp was earned
candidate_evidence_ref pointer to the staging evidence record
candidate_error_code structured code on failure (no stamp)
candidate_reject_reason human-readable reject reason

5. Contract / requirement / matrix / result

Outputs are candidates on the disposable surface only; production inspect_pen/stamp/gate writes are forbidden (firewall, Deliverable 35). Each candidate stamp is earned by a real per-stage pass, written to its own candidate column, in order, idempotently. No candidate is written here.

6. Owner-gated future work

Writing real production inspect_* (within a built, governed producer) is Owner-gated; forbidden now.

7. What remains unresolved

STAMP/GATE logic is the least-precedented part of B2 (PEN-only precedent); design-open.

8. Ready for GPT/Codex review

Yes — Codex should confirm output stays candidate-only and never widens to production inspect_*/certify/canonical.