Macro-5 Staging Object: Input Candidate — R2-B2 (2026-06-19)

Date: 2026-06-19 · Workstream: R2-B2-MACRO-5-STAGING-BUILD-AUTHORIZATION-PACKAGE-2026-06-19 (Deliverable 24 of 110) · Editorial revision: rev1 Class: staging object candidate (input) · READ-ONLY · NON-ENACTING · NON-AUTHORIZING · NO write performed.

Metadata convention. Editorial revision (rev1) only. AgentData storage revision/content_length authoritative at read time.

NON_EXECUTABLE_TD_CANDIDATE. Conceptual object only. Do not create a real object; no live-data extraction designed.

---

0. Status and non-authorization

STATUS: PASS — engineering / design-only. The input conceptual object: a disposable projection of the uncertified-row shape. Engineering PASS ≠ authority PASS. Default: HOLD.

1. Purpose

Describe what a run reads — a copy/sample, never live production rows.

2. Sources / evidence read

Macro-4 B2 input contract (D29); Điều 0-G §2.4 (PEN scope governed); FRESH birth_registry shape. Main process, no reader-agents.

3. Accepted baseline (carried)

B2 reads uncertified rows (certified=false; PEN scope governed) + the Điều 0-G rule-set + the B3 contract; in the workbench it reads a disposable copy.

4. Evidence / analysis — input candidate

Aspect	Description (no schema)
role	disposable projection mirroring uncertified-row shape
field family	identity (entity_code/collection/species/dot_origin), metadata (name/description/status), governance-role, born_at, three inspect_* slots
scope	uncertified; PEN narrowed to governed
never	live production rows; a certified=true precondition
fail-closed	malformed input → reject, never fabricate a passing row

5. Candidate / requirement / gate / result

The input object is a shape contract on a disposable copy. No live row is read or written; FRESH confirms the production shape (inspect_pen/stamp/gate, certified, metadata) the projection would mirror.

6. Owner-gated future work

Binding input to live rows / a built workbench is Owner-gated; forbidden now.

7. What remains unresolved

observed-role scope is BAD_INPUT_BEHAVIOR_UNCLEAR (carried).

8. Ready for GPT/Codex review

Yes — Codex should confirm the input object reads a disposable copy, scoped to uncertified/governed.