Law Revision Workstream C — Execution Report (Điều 37 Governance Organization Law REWRITE draft) — 2026-06-17 (read-only, non-authorizing)
Law Revision Workstream C — Execution Report (Điều 37 Governance Organization Law REWRITE draft) — 2026-06-17
READ-ONLY · NON-AUTHORIZING · NON-ENACTING. rev1, 2026-06-17. Law Revision Workstream C (Batch C — the lone REWRITE, Law Merge catalog record #1). Status of this report: records the creation of a draft rewrite of Điều 37 in
newlaws/. It enacts nothing, adopts nothing, consolidates nothing, and changes no file underknowledge/dev/laws/. Codex/GPT/Council PASS ≠ Owner authorization. Engineering PASS ≠ authority PASS. Companion artifact:knowledge/dev/laws-new/newlaws/rewrites/dieu37-governance-organization-law-rewrite-draft.md(rev1, content_length 46462).
1. Mandate & scope
Workstream C executes the lone REWRITE disposition from the Law Merge catalog (record #1 = Điều 37). The mandate: produce a complete, goals-preserving, non-enacting rewrite draft of Điều 37 that replaces the old central-governance_registry / trigger-driven / self-operating governance model with the accepted F0→F5/FX One-Roof governance model (a conceptual roof over existing ledgers, scanner list-only, Owner / Điều 32 gate), plus this execution report. Both outputs live only under knowledge/dev/laws-new/newlaws/.
This is the not-yet-started "Batch C" referenced by Workstream B2 (§9–§10). It is a draft: NON-ENACTING, READ-ONLY, NON-AUTHORIZING, not adopted, not in force, not consolidated into any current corpus.
STATUS: PARTIAL — honest and non-blocking. The rewrite is complete as a draft and review-ready; PARTIAL because (a) several load-bearing facts it carries (RISK-BYPASS / Điều 35 production-readiness / Điều 39 runtime-EMPTY) are runtime/Phase-1 observations not first-hand-verifiable from KB law text and are carried as claims, not proofs; (b) the rewrite is a draft pending GPT → Codex → Owner, not an enacted law. No conflict forced a downgrade below PARTIAL; the old Điều 37 source was located and read first-hand and is consistent with the catalog's REWRITE classification.
2. Sources read first-hand (all via the agent-data KB; revision + content_length captured)
2.1 The rewrite target (read in full, first-hand)
| Path | Revision | content_length | Evidence |
|---|---|---|---|
knowledge/dev/laws/dieu37-governance-organization-law.md |
5 | 20482 | Full body read via get_document_for_rewrite. v3.3 BAN HÀNH; MỤC TIÊU 11-question table; 5 NV; §1 glossary; §2 5-tầng (TẦNG 3 = governance_registry); §5 schema (6 collections); §5.3.1 amend inheritance; §6 6 DOT; §7 6 matrices; §10 bootstrap seed; §12 8 PG triggers; CHANGELOG. |
2.2 Accepted-model & house-style sources (laws-new / newlaws)
| Source | Revision / content_length | Used for |
|---|---|---|
LAW_READING_INDEX.md |
1 / 19017 | REWRITE = READ_NEW_REWRITE_VERSION_PENDING; two-corpus rule; Tool-Kiem-Thu safety lock; bad-reading list (incl. #9 "Điều 37 governance_registry should be reused directly" = FALSE) |
law-merge-catalog-2026-06-16.md |
1 / 48223 | Record #1 = Điều 37 = REWRITE; class definitions; "new model in one screen" (One-Roof not central registry; four primitives; Owner gate) |
law-merge-execution-report-2026-06-16.md |
2 / 65247 | §7.2 the verbatim Điều 37 REWRITE rationale: 3 conflicts (Architecture/Authority/Mechanism) + Goals-to-preserve + Mechanisms-to-replace + "future rewrite MUST cover" + safety-lock; §14 carried blockers |
reports/law-revision-workstream-a-execution-report-2026-06-17.md |
1 / 7832 | Workstream-A baseline; safety lock |
reports/law-revision-workstream-b0-b1-execution-report-2026-06-17.md |
8 / 12919 | Amendment-draft pattern; blocker phrasing (RISK-BYPASS/HOLD-2) |
reports/law-revision-workstream-b2-execution-report-2026-06-17.md |
10 / 22725 | Batch C = REWRITE Điều 37 NOT started; design chain; blocker carry |
reports/source-recovery-dieu0-dieu0b-dieu0g-2026-06-17.md |
1 / 13256 | Foundation-source caveat (Đ0/0-B/0-G in architecture/, broken Constitution refs); CONS-003 root |
notes/constitution-compatibility-note.md |
1 / 4879 | Constitution supreme; CONS-004 precedence (names Đ37 below Constitution); 15-NT |
notes/dieu1-foundation-principles-compatibility-note.md |
1 / 3283 | NT2/NT3 bounded by Owner gate; NT5/NT12 = scanner list-only; NT14/NT15 |
notes/dieu32-approval-owner-gate-compatibility-note.md |
1 / 3110 | Đ32 = Owner-gate/Mức-3 lane; anti-bypass (no Matrix/Stamp to skip gate); RISK-BYPASS |
notes/dieu35-dot-governance-compatibility-note.md |
1 / 3816 | fix_repair_dot pattern reuse; "enacted ≠ production-ready"; RISK-BYPASS "must travel with the asset" |
notes/dieu39-knowledge-graph-compatibility-note.md |
1 / 4199 | Golden rule; runtime-EMPTY; staged-not-big-bang |
notes/dieu4-birth-process-compatibility-note.md |
1 / 4214 | TEMP_ID at INSERT / canonical at promote; HOLD-2 |
notes/dieu38-text-as-code-appendix01-compatibility-note.md |
1 / 3976 | CONS-002; coverage-scanner BUILD-NO-GO; list-only |
2.3 Enacted / source laws read first-hand (cross-reference)
| Source | Revision / content_length | Used for |
|---|---|---|
knowledge/dev/laws/dieu32-approval-law.md |
2 / 5601 | Quorum (high = ≥1 president + ≥2 ai_council + 0 reject); no self-approve high-risk; "đề xuất phải đứng được một mình" |
knowledge/dev/laws/dieu35-dot-governance-law.md |
13 / 36904 | DOT = single data-op gate; A/B paired; §6.2 fix_repair_dot 6 steps; §6.5 ADMIN fallback; confirmed fn_auto_approve_add/"PRODUCTION READINESS FAIL" are NOT in this law text (runtime audit) |
knowledge/dev/laws/dieu39-knowledge-graph-law.md |
15 / 25015 | §0 golden rule "AI ĐƯỢC ĐỀ XUẤT, KHÔNG ĐƯỢC TỰ BAN HÀNH TRI THỨC CHUẨN"; TBox-human/ABox-AI; runtime-EMPTY corroborated by §7B "chưa đăng ký = chưa triển khai" |
knowledge/dev/laws/dieu33-postgresql-law.md |
5 / 28721 | 4-DB / 3-layer NÃO-KHO-CỔNG; canonical_fields dictionary; §13 unmanaged-DDL forbidden / E1–E5 only legal path |
knowledge/dev/laws/constitution.md |
44 / 19132 | Supreme ("Văn bản tối cao"); 15 NT (table) with legacy 13/11 cross-refs; Đ0-B index "7 Lớp Cấu tạo (33 species)"; Đ37 = top-down apex |
knowledge/dev/ssot/operating-rules.md |
51 / 5400 | §0 Luật gốc (không chắc=sai; Assembly-First; VPS=SSOT; PG/Directus=data path; DOT/Checker=mục tiêu); §8 out-of-scope blocker → STOP + wait Owner |
knowledge/dev/laws/law-22-self-healing.md |
22 / 14108 | Self-healing loop; §4.3 owns system_health_checks; §4.2 propose-not-auto-fix; cites Đ37 §4.12/§4.13 as authority |
2.4 One-Roof architecture design heritage (read in full, first-hand)
| Source | Revision / content_length | Used for |
|---|---|---|
…/one-roof-governance-decision-pack-2026-06-01/01-one-roof-governance-principle.md |
1 / 9664 | One-Roof principle; 7 "no local island" rules; note: doc still lists governance_registry as a roof pillar → superseded by laws-new reinterpretation |
…/one-roof-governance-hardening-revision…/05-dieu37-governance-hub-model.md |
1 / 7959 | Own / Reference / Hook model; §0-GOV declaration pattern; anti-bloat (hub-not-dump); conflict precedence |
…/one-roof-governance-law-hardening-finalization-round4-2026-06-01/06-dieu37-centralization-decision.md |
1 / 8548 | OWN/REFERENCE/SPECIALIZE disposition; what Đ37 owns vs references; §0-GOV hook |
…/full-stack-governance-alignment-audit…/03-dieu37-ownership-interpretation.md |
1 / 8200 | Enacted Đ37 5-tier interpretation + live LAW↔SCHEMA drift (the old model being retired) |
Method: the rewrite target + the three primary One-Roof model docs were read first-hand in the main loop; the remaining ~22 sources were read first-hand via four read-only subagents (each loaded the agent-data MCP tools, read full bodies via
get_document_for_rewrite, and returned structured findings with verbatim quotes + revision/content_length). All KB reads; no live DB/runtime query.
3. Files created
| File | Revision | content_length | Status |
|---|---|---|---|
knowledge/dev/laws-new/newlaws/rewrites/dieu37-governance-organization-law-rewrite-draft.md |
1 | 46462 | created, verified (re-read; all 15 sections 0–14 present; §14 Vietnamese law text present; 21 bad-reading rejections; 7 retire rows; 10 preserve rows; 0 DDL leakage) |
knowledge/dev/laws-new/newlaws/reports/law-revision-workstream-c-dieu37-rewrite-execution-report-2026-06-17.md |
1 | (this file) | created |
4. Rewrite logic (preserve goals · retire mechanisms · replace model)
The rewrite is structural and authority-level, so it is a REWRITE not an AMEND (Điều 37 enacted/immutable, NT7). It follows the Law Merge execution report §7.2 instruction set exactly.
4.1 Three conflicts (why REWRITE): (1) Architecture — central governance_registry (+5 tables) vs FX "roof over existing ledgers, not a central registry"; (2) Authority — Council 2-round vote + self freeze→transfer→48h→DROP vs Owner-only phase authority; (3) Mechanism — 6 auto-cron DOTs + auto-onboard (5 default contracts) + 8 hard-REJECT triggers + Trigger-#8 auto-inherit + big-bang seed vs DOT-narrow + scanner-list-only.
4.2 Preserved goals (G1–G10): top-down↔bottom-up coverage mesh; 11-question observability; gap/overlap/orphan/"luật tủ kính" detection (→ list-only); jurisdiction/scope + enforcement-linkage as relationship facts; terminology SSOT + non-overlap; prevention of unmanaged mutation / no orphan / no anarchic object; clear owner/approval/responsibility lanes; relationship-aware/KG governance (Đ39-aligned); the OWNER_STAMP→governance_audit_log + GOV_STAMP→governance_role tie; future-laws-declare-coverage (§0-GOV).
4.3 Retired mechanisms (R1–R7): central governance_registry as primary store/authority; 6 auto-cron DOTs; auto-onboard/auto-inherit writers; 8 hard-REJECT-trigger enforcement machine; Council-vote + auto-DROP; big-bang bootstrap seed; implementation-level schema/DOT/trigger sections inside the law text. Retirement = the future law no longer mandates the mechanism; no live table/DOT/trigger/row is dropped, disabled, or altered.
4.4 Replacement model: One-Roof = conceptual roof over existing ledgers (NOT central registry, NOT second birth system); four primitives (DOT narrow / stamp marker / checker fail-closed verdict / scanner list-only); mutation lane design (NT15/Đ20) → checker (F4) → Owner/Mức 3/Đ32 → regression (Đ30); Engineering PASS ≠ Authority PASS; ownership/coverage/relations expressed as relationship/state/classification facts over universal_edges/governance_role/owner/governance_audit_log; hub owns the model + references mechanisms; §0-GOV hook enforced at Đ20 design review (not by auto-cron DOT).
4.5 Design heritage reconciliation: the 2026-06-01 architecture One-Roof docs contributed the durable hub/own-reference/§0-GOV pattern, which is kept; their governance_registry-as-roof-pillar is dropped (superseded by the 2026-06-16 laws-new reinterpretation). Both the enacted Đ37's central registry and the 2026-06-01 central-registry pillar are retired. This is stated explicitly in the rewrite (§1 reconciliation note) to preempt a "you reintroduced the registry" hostile reading.
4.6 Document structure: sections 0–14 per the mandate (banner; why-rewrite; preserved goals; retired mechanisms; One-Roof principles; object model without monster registry; scanner/checker/Owner-gate; relationship/state/classification/evidence layer; source boundary; runtime boundary; Tool-Kiem-Thu lock; blockers carried; bad readings rejected; non-authorization checklist; proposed law text). English scaffolding + Vietnamese §14 law text (house-style convention). §14 is governance text only — no schema/DDL/DOT/query/rollout.
5. Folder policy
| Branch | Expected | Observed | Verdict |
|---|---|---|---|
| Rewrite draft location | under newlaws/rewrites/ |
knowledge/dev/laws-new/newlaws/rewrites/dieu37-governance-organization-law-rewrite-draft.md |
PASS |
| Execution report location | under newlaws/reports/ |
knowledge/dev/laws-new/newlaws/reports/law-revision-workstream-c-dieu37-rewrite-execution-report-2026-06-17.md |
PASS |
Any output outside newlaws/ |
none | none (only the two files above; one local memory file outside KB, not a KB output) | PASS |
Edit/move/delete under laws/ |
none | none — dieu37-… and all source laws untouched (read-only) |
PASS |
current/ corpus created |
none | none | PASS |
| Constitution patched | none | none | PASS |
6. Non-authorization checklist
- no adopted rewrite: confirmed (DRAFT only)
- no amendment to other laws (Đ22/Đ33/Đ36/L4/Đ38/Đ32/Đ35/Đ39): confirmed
- no technical design: confirmed
- no Phase-1: confirmed
- no DB/runtime query: confirmed
- no implementation: confirmed
- no schema/table/registry/index: confirmed
- no
governance_registrycreated: confirmed - no
current/corpus: confirmed - no source law edit: confirmed
- no Constitution patch: confirmed
- no blocker resolved: confirmed
- no v0.1 baseline change: confirmed
- no v0.2-hardening promotion: confirmed
7. Blockers carried (not resolved)
| Blocker | Carried? | Not resolved? | Note |
|---|---|---|---|
RISK-BYPASS (fn_auto_approve_add 160 unvoted; "PRODUCTION READINESS FAIL") |
Yes | Yes | runtime-audit fact (checkpoint-codex-2026-06-05), NOT law text; rewrite reinforces no-auto-mutate but does not close it |
HOLD-1 (iu_staging_* liveness) |
Yes | Yes | Phase-1-gated |
| HOLD-2 (no atomic promote transaction) | Yes | Yes | blocks canonical/OWNER_STAMP/GOV_STAMP/BIRTH_STAMP/PROMOTE_STAMP write at promote |
| CONS-002 (IO Contract field-set) | Yes | Yes | reference-only |
| CONS-003 (6-vs-7 tầng) | Yes | Yes | Constitution index says "7 Lớp"; 6-vs-7 unresolved; blocks cell_id |
| CELL-003/004/007 (cell_id unmaterialized) | Yes | Yes | none materialized |
| GOV-016/017 (no risk/blast-radius calc) | Yes | Yes | — |
| GOV-REUSE-001 (existing ledgers may not hold gov graph) | Yes | Yes | reuse-first proposed, nothing proven at runtime |
| Điều 39 runtime-EMPTY | Yes | Yes | carried claim, not first-hand-verified; no Đ39 build authorized |
| Điều 35 production-readiness FAIL | Yes | Yes | enacted v5.2 ≠ production-certified |
| CONS-004 / CONS-005 | n/a | DECIDED at F0 | recorded as decided (working precedence / freeze), not a blocker, not re-opened |
8. Bad-reading rejections (in the rewrite §12 + carried here)
| Bad reading | Rejected? | Evidence |
|---|---|---|
| Rewrite is now adopted / Đ37 replaced | Yes | §0, §12.1, banner; laws/ unchanged |
One-Roof creates a new governance_registry |
Yes | §12.2, §3 R1, §5 (roof over existing ledgers) |
| Scanner can mutate | Yes | §12.3, §6 (list-only) |
| Checker can approve without Owner/Đ32 | Yes | §12.4, §6 (verdict→ESCALATE_L3→Đ32) |
| Codex/GPT PASS authorizes design / Engineering=Authority | Yes | §12.5, §12.6, P6 |
| Enacted=live / Registered=executed / Executed=production-ready | Yes | §12.7–§12.9, §9 ladder |
| newlaws/ replaces laws/ | Yes | §12.10, §8 |
| v0.2-hardening replaces v0.1 baseline | Yes | §12.11, §10 |
| Đ39 runtime-EMPTY / RISK-BYPASS / HOLD-1/2 / CONS / CELL resolved | Yes | §12.12–§12.15, §11 |
| Rewrite authorizes Phase-1 / implementation | Yes | §12.16, §12.17, §13 |
Đ37 governance_registry reused directly |
Yes | §12.18 (that conflict is why it is REWRITE) |
| DOT as self-operating governance engine | Yes | §12.19, §3 R2/R4 |
| Goals weakened / authority order changed | Yes | §12.20, §12.21, §2 |
9. Self-check
| Check | Result | Evidence |
|---|---|---|
| S1 Re-read old Điều 37 source | PASS | full body read (rev5, 20482) |
| S2 Re-read created rewrite draft | PASS | re-read; 46462 chars; all 15 sections + §14 law text + status line present |
| S3 Re-read created execution report | PASS | this file (verified on creation) |
| S4 All outputs under newlaws/ | PASS | §5 folder policy |
| S5 No source law changed | PASS | read-only; no edit/move/delete under laws/ |
| S6 Rewrite says DRAFT / non-enacting | PASS | banner + §0 + §14 lead-in + ĐIỀU KHOẢN THI HÀNH + status line (≥6 repetitions) |
| S7 No technical design | PASS | governance text only; §14 specifies obligations/lanes/gates, not schema/DDL/DOT |
| S8 No implementation/schema/table/registry creation | PASS | 0 CREATE TABLE/ALTER/INDEX/TRIGGER; no governance_registry created |
| S9 No blocker claimed resolved | PASS | §11 / §7 all "carried, not resolved" |
| S10 No current/ corpus created | PASS | none |
| S11 Ready for Codex review | YES | draft complete, structurally verified, blockers carried, bad readings rejected |
10. Issues / caveats
- PARTIAL, by design: the rewrite carries runtime/Phase-1 claims (RISK-BYPASS, Điều 35 production-readiness, Điều 39 runtime-EMPTY) that are not first-hand-verifiable from KB law text; the subagent cross-read confirmed
fn_auto_approve_add/ "PRODUCTION READINESS FAIL" appear in the checkpoint-codex-2026-06-05 runtime audit, not in Điều 35's text. The rewrite attributes them as runtime-audit facts, not law clauses — this precision should survive Codex adversarial review. - Count drift carried, not resolved: Constitution v4.6.3 table = 15 NT, but inline cross-refs say 13 / 11; the rewrite cites "15 NT per v4.6.3" and flags the drift.
- CONS-003 stays open: the supreme Constitution index labels Đ0-B "7 Lớp Cấu tạo (33 species)" while Đ0-B v3.0/v3.1 drafts carry 6 — presented as open, no single number asserted; no cell_id materialized.
- No contradiction found between the old Điều 37 source and the catalog REWRITE classification — the old law is exactly the central-registry/auto-DOT/Council-vote model the catalog says to retire. STATUS therefore is PARTIAL (honest runtime caveats), not BLOCKED and not FAIL.
- Design heritage tension handled: the 2026-06-01 arch One-Roof docs still contained
governance_registry; the rewrite explicitly drops that pillar in favor of the later laws-new reinterpretation, and says so, to avoid a "you reintroduced the registry" reading.
11. Ready for Codex review
YES. The rewrite draft is complete, structurally verified (15 sections + full Vietnamese §14 law text), goals-preserving, mechanism-retiring, scanner-list-only + Owner/Đ32-gated, source/runtime-bounded, Tool-Kiem-Thu-locked, blocker-carrying, and bad-reading-rejecting, with no enactment / no implementation / no schema / no Phase-1 / no blocker resolution.
12. Next action
- GPT reviews Workstream C (rewrite draft + this report).
- If accepted, Codex reviews it (anticipate the 17+ hostile readings enumerated in rewrite §12).
- Owner / User then decides whether to accept the rewrite draft for later consolidation, request fixes, or proceed to consolidation / current-corpus planning (and, separately, whether to open the Owner-gated Phase-1 (Batch D) to verify the carried runtime blockers — RISK-BYPASS close, HOLD-1
iu_staging_*liveness, Điều 35 production-readiness, Điều 39 runtime). - Default disposition until the Owner acts: HOLD. Codex/GPT/Council PASS ≠ Owner authorization.
Law Revision Workstream C execution report rev1 | 2026-06-17 | read-only · non-authorizing · non-enacting | Điều 37 REWRITE draft created (catalog #1) | preserve goals · retire central registry + auto-DOTs + Council-vote/auto-DROP · One-Roof over existing ledgers + scanner list-only + Owner/Điều 32 gate | blockers carried, none resolved | Ready for Codex review: YES | default HOLD