Macro-9B — DOT Staging-Schema Path — Artifact Index

Mission: R2-B2-MACRO-9B-DOT-STAGING-SCHEMA-PATH-AUTHOR-HARDEN-2026-06-19 Date: 2026-06-19. Status: PASS_WITH_CAVEATS · REGISTRATION_HOLD · HOLD_FOR_OWNER_REAL_RUN. Scope: authored the missing DOT path + 4 guard contracts and proved fail-closed validation locally. No runtime mutation. No DOT registered. No schema/table/collection created.

Package (all in AgentData KB)

#	Artifact	Path	Type	Status
1	Primary DOT contract	dot-manage/specs/dot-r2-b2-staging-schema-shell.contract.md	spec	created rev1
2	4 guard contracts + manual-block assessment	dot-manage/specs/dot-schema-write-guards.contract.md	spec	created rev1
3	Reference fail-closed validator (pure, no DB I/O)	dot-manage/specs/dot-r2-b2-staging-schema-shell.validator.py	code	rev2 (Macro-9B2)
4	Bad-input rejection matrix (64 cases)	dot-manage/specs/dot-r2-b2-bad-input-matrix.md	test data	rev2 (Macro-9B2)
5	Validator run evidence rev1 (37/37) — SUPERSEDED	dot-manage/specs/dot-r2-b2-validator-test-run.txt	evidence	rev2 (superseded banner)
5b	Validator run evidence v2 (64/64 PASS, 0 fail-open) — SUPERSEDING	dot-manage/specs/dot-r2-b2-validator-test-run-v2.txt	evidence	created rev1 (Macro-9B2)
6	This index	dot-manage/reports/macro9b-dot-staging-schema-path-artifact-index-2026-06-19.md	index	created rev1
7	Main report	newlaws/reports/macro9b-dot-staging-schema-path-author-harden-report-2026-06-19.md	report	created rev1

Local scratch (not SSOT; execution only, no runtime touch): /tmp/m9b/run_validator_tests.py, /tmp/m9b/dot_r2_b2_bad_input_matrix.json (rev1); /tmp/m9b/validator_v2.py, /tmp/m9b/run_validator_tests_v2.py, /tmp/m9b/dot_r2_b2_validator_test_run_v2.txt (Macro-9B2 rev2).

Macro-9B2 remediation (2026-06-20)

Codex review returned HOLD on the Macro-9B/9B1 package: the rev1 validator/contracts overclaimed fail-closed (accepted missing channel; accepted missing/blank actor; match(...$) accepted trailing-newline schema/run_id; truthy gate; Guard 3 plan-only/not enforced; Guard 4 directly called Guard 1; 37/37 not universal). Macro-9B2 (KB/code-artifact-only) closed all 7 findings: validator → rev2; primary DOT contract → rev2; guards contract → rev2; bad-input matrix → rev2 (64 cases); new superseding evidence dot-r2-b2-validator-test-run-v2.txt (64/64 PASS, 0 fail-open); rev1 evidence carries a SUPERSEDED banner. Remediation report: newlaws/reports/macro9b2-dot-validator-contract-remediation-report-2026-06-20.md. No runtime mutation, no DOT registration, no real-run, no schema/collection creation, no gate flip.

Admission / birth record (Macro-9B1, 2026-06-19)

Birth/admission identity for this package — so none of the 7 artifacts is an orphan — is recorded in:

dot-manage/admission/dot-r2-b2-staging-schema-shell-birth-admission-2026-06-19.md (created rev1).

State: candidate-born / engineering-admitted / REGISTRATION_HOLD / HOLD_FOR_OWNER_REAL_RUN; authority NOT_OWNER_AUTHORIZED. That record carries the anti-orphan rule, the Admission Gate + Consumer Checklist for any later macro, and the candidate-on-paper list of future governance collections. Any later macro consuming these artifacts must verify that admission record first; if missing/inconsistent → HOLD_ADMISSION_MISSING_OR_INVALID. Macro-9B1 created the KB admission record only — it did not register the DOT, run it, or create any schema/table/collection.

Component boundary (mission: not a mega-system)

One primary DOT DOT_R2_B2_STAGING_SCHEMA_SHELL (6 modes) + 4 separable guards: DOT_SCHEMA_WRITE_ALLOWLIST_GUARD, DOT_SCHEMA_WRITE_AUDIT_PROOF, DOT_PRODUCTION_UNTOUCHED_VERIFY, DOT_STAGING_SCHEMA_DELETE_FAST. Each separately generated / inspectable / testable / replaceable / rollbackable; composed only through an explicit dict contract. No mega-registry, no mega-graph, no mega-birth pipeline.

Stop states

• REGISTRATION_HOLD — registering in dot_tools / wiring an agent-api contract / opening a runtime gate is a DB write; not performed. Needs an authorized DOT-registration path or Owner-approved runtime gate. dot_tools not written by hand.
• HOLD_FOR_OWNER_REAL_RUN — first real_run/teardown_real_run would issue CREATE SCHEMA/DROP SCHEMA … CASCADE; blocked pending explicit Owner authorization + freshly-opened runtime execute gate + fresh read-only preflight + SB-4 no-prod-touch & delete-fast proof.

Engineering PASS ≠ Owner authority PASS. Default HOLD. Macro-9A remains NO-GO. Macro-9C not launched.