C1 STAGING CODEX R4 FINAL REVIEW BEFORE DRY-RUN — INDEX

Session: C1-STAGING-CODEX-R4-EVIDENCE-FINAL-REVIEW-2026-06-23
Mode: read-only/static adversarial review on VPS; no dry-run; no staging DB; no code/runtime patch.

Verdict

CODEX_REJECT_C1_STAGING_R4_DOT_STAMPING_INCOMPLETE

R3 fixes are valid for P3/P4/P5 DONE atomicity, P6 exact canonical/P5 fact checks, JSON escaping, psql interpolation, plan gate, cleanup and official-runtime isolation.

Blocking defect: P6 does not bind P3/P4/P5 stamps to the current sandbox/run. Its EXISTS checks are unscoped, and its mismatch query accepts any stamp whose sandbox_id appears in any birth_certificate row. The schema permits multiple birth rows. P6 also does not verify each stamp's detail.gate. A cross-run/forged same-DB birth+stamp set can therefore satisfy the DOT-stamp gate.

Secondary evidence gap: P6 hashes canonical_operation.evidence but never proves each P4 verify evidence object exists and matches the row.

Permission for T2 dry-run: NO. Promotion: NO. Production: NO.