03 — Test/Sandbox Lane Created (Option B: new isolated sandbox) — 2026-06-22

LABELS: LOCAL_DISPOSABLE_SANDBOX_DOT_EMULATOR · NOT_GOVERNED_RUNTIME · NOT_PRODUCTION · NOT_DIRECTUS_GOVERNED_WRITE · NOT_A_SUBSTITUTE_FOR_DOT_C1_REGISTRATION

Outcome: B — a NEW isolated disposable sandbox was created

(Option A "existing test lane" rejected: VPS exposes no writable sandbox schema. Option C "no route" averted by native Postgres on the local host.)

Creation transcript (local host)

initdb -D /tmp/c1_sandbox_2026_06_22/pgdata -U sandbox_owner -E UTF8 --no-locale -A trust
# postgresql.conf: port=55432, unix_socket_directories='/tmp/c1_sandbox_2026_06_22', listen_addresses='localhost', fsync=off
pg_ctl -D … start  →  "database system is ready to accept connections"
createdb -h /tmp/c1_sandbox_2026_06_22 -p 55432 -U sandbox_owner c1_sandbox

Isolation / disposability proof (required checklist)

Requirement	Evidence
not production	engine PostgreSQL 14.17 (Homebrew) on local Mac; prod is PostgreSQL 16.13 (Debian) on VPS directus.incomexsaigoncorp.vn — different host, cluster, port, socket
isolated DB/container/schema	dedicated cluster: data_dir=/tmp/c1_sandbox_2026_06_22/pgdata, port=55432, unix_socket_directories=/tmp/c1_sandbox_2026_06_22; localhost only
can be destroyed	pg_ctl stop -m immediate && rm -rf /tmp/c1_sandbox_2026_06_22 (whole cluster is one throwaway dir)
C1-only	only schema created is c1; no other domain objects
no current corpus	empty cluster seeded ONLY with a 14-row frozen mirror of apr_action_types; no production data imported
no production credentials	trust auth, local-only role sandbox_owner; no VPS/GCP secrets used
before/after evidence	file 11

Engine-parity caveat (disclosed)

Sandbox 14.17 vs prod 16.13. All SQL used is restricted to features common to both: jsonb, jsonb_build_object, sha256(bytea) (PG11+), normalize(text, NFC) (PG13+), gen_random_uuid() core (PG13+), plpgsql. No 15/16-only syntax used. The sandbox therefore exercises the same SQL the governed DOT path would, but is not the governed runtime.

Explicit non-claims

This lane proves contract logic only. It is NOT_A_SUBSTITUTE_FOR_DOT_C1_REGISTRATION. It does not make the governed Directus schema writable and does not constitute a production or governed test-lane write path.