Codex Re-Review — DOT Manage + Collections Manage Handbook Precision Patch

STATUS: PASS_WITH_CAVEATS

Executive Summary

All three defects from the prior Codex HOLD are closed in the current AgentData KB bodies.

1. The Collections handbook now uses cutter_governance in all 24 affected §5 schema cells and access paths. The obsolete cutter_gov token appears only in one explicit correction note, which states it was a transcription typo and not an alias. The Macro-9A2 report records read-only catalog verification: cutter_governance exists with 36 relations (24 tables + 12 views), while cutter_gov does not exist.
2. Group E now states exactly 82 = 58 public + 24 cutter_governance. The eight sandbox_tac and two iu_core staging rows are Group H. The complete base-object inventory remains 382 contiguous unique rows.
3. The DOT §5.3 legend no longer says every Group-A row writes production. It states that Group-A rows target/ensure/diff/snapshot/register/probe the existing production public/Directus layer and that the Read/Write column governs effect. All 63 Write rows retain the production-write warning; all 16 Read and 11 Unknown rows use neutral production-layer wording and do not imply write. The 309-row inventory remains contiguous and complete.

No new forbidden authorization was introduced. Both handbooks retain the DOT-only rule, manual SQL/psql/Directus-generic-create prohibitions, Macro-9A NO-GO, future-catalog candidate-only status, and the requirement that Macro-9B be a separate Owner-authorized mission.

The handbooks may therefore be accepted as current temporary operations manuals. They are not runtime authority and do not authorize implementation.

Files Reviewed

File	Revision	content_length	Verdict
knowledge/dev/laws-new/newlaws/reports/macro9a2-handbook-precision-patch-codex-hold-report-2026-06-19.md	1	8934	PASS_WITH_CAVEATS
knowledge/dev/laws-new/newlaws/dot-manage/dot-usage-handbook.md	7	107137	PASS_WITH_CAVEATS
knowledge/dev/laws-new/newlaws/collections-manage/collections-usage-handbook.md	9	91740	PASS_WITH_CAVEATS
knowledge/dev/laws-new/newlaws/collections-manage/reports/macro9a1-collections-usage-handbook-execution-report-2026-06-19.md	2	12495	PASS_WITH_CAVEATS
knowledge/dev/laws-new/newlaws/dot-manage/reports/macro9a0-dot-usage-handbook-full-row-inventory-supplement-report-2026-06-19.md	2	8859	PASS_WITH_CAVEATS
Prior Codex HOLD report	2	12857	Superseded for the three corrected defects by this re-review

Review basis also included knowledge/dev/ssot/operating-rules.md v7.58, knowledge/dev/laws/constitution.md v4.6.3, knowledge/dev/laws/law-01-foundation-principles.md v3.3, and .claude/skills/incomex-rules.md.

Defect Closure Audit

Prior defect	Verdict	Evidence
cutter_gov versus canonical cutter_governance	CLOSED	§5 has 24 cutter_governance rows and zero actual cutter_gov schema/access paths. The only residual mention is the correction note. Live read-only evidence in Macro-9A2 reports 24 tables + 12 views for cutter_governance, zero schema for cutter_gov.
Group E says 82 but lists 92	CLOSED	Current narrative: 82 = 58 public + 24 cutter_governance. Parsed §5 rows match. Group H contains 7 public + 2 iu_core + 8 sandbox_tac. Total inventory remains 382 rows, STT 1–382, 382 unique.
Every Group-A row says it writes production	CLOSED	Old legend is absent. Current distribution is 63 Write / 16 Read / 11 Unknown. Exactly 63 Write rows retain writes prod public-NOT run-scoped schema; zero Read/Unknown rows retain that phrase; all 27 use neutral prod public layer; NOT run-scoped schema.
Group-A staging suitability	PASS	Legend and §15 still state that no Group-A row is a run-scoped disposable staging-schema builder.
Inventory integrity after patch	PASS	DOT §5.3 remains 309 rows, STT 1–309, 309 unique. Collections §5 remains 382 rows, STT 1–382, 382 unique.

Non-Authorization Audit

Forbidden action	Verdict	Evidence
DB write / DDL / DML	PASS	Correction report records only two read-only catalog queries; handbook hard locks remain unchanged.
Schema/table/collection creation	PASS	No creation authorized or performed.
Directus mutation	PASS	Generic create/update/delete remains forbidden for schema work.
DOT execution	PASS	No DOT run; mutating paths remain gated.
Manual SQL / psql / docker exec psql	PASS	Explicitly forbidden in both handbooks.
Runtime config flip / channel wiring / owner row	PASS	No authorization or enactment.
KG write / birth / certify / promote / backlog / bad-input / B2 logic	PASS	Explicit hard-scope exclusions remain.
Macro-9A build permission	PASS	Both handbooks retain NO-GO with existing DOTs/collections.
Macro-9B launch	PASS	Not launched; described only as a later separate Owner decision.
dot_operator_catalog creation	PASS	Candidate/design-note only; not created.
collection_operator_catalog creation	PASS	Candidate/design-note only; not created.
Source-law mutation	PASS	None reported or performed by this re-review.

The non-mutation finding relies on the correction package's recorded execution evidence plus this Codex session's read-only actions. It is not a new independent runtime forensic audit.

Next-Step Audit

Check	Verdict	Evidence
Macro-9A build remains NO-GO	PASS	DOT §15 and Collections §16 explicitly prohibit proceeding with existing surfaces.
Existing DOTs/collections are sufficient	PASS (NO)	No authorized run-scoped disposable staging-schema DOT and no suitable workbench store exist.
Correct next step	PASS	Separate Macro-9B design/hardening for one governed run-scoped staging-schema DOT.
Owner authorization required	PASS	Owner decision, explicit runtime gate, allowlist, production reject, abort-on-drift, and delete-fast remain stated prerequisites.
Temporary handbook use	ACCEPTED_WITH_CAVEATS	Suitable as current human-facing operations maps; not runtime authority, execution permission, or proof that inferred classifications are correct.
Future automated collections	DEFERRED	dot_operator_catalog and collection_operator_catalog remain paper candidates until the authorized schema path and LEGO shell are proven.

Caveats

• Read/Write/Authority/Status classifications remain inferred from registries rather than per-tool execution.
• DOT inventory still has 77 Unknown/needs-triage rows.
• cutter_governance and sandbox_tac content visibility remains read-denied/partial.
• The 685 public views are summarized by family rather than row-listed.
• Collection row counts are planner estimates, not exact COUNT(*) evidence.
• Other databases were not inventoried.
• The evidence date is 2026-06-19; refresh against the current registries before any later execution decision.
• These caveats do not block temporary manual use because they are disclosed and no unsafe readiness claim is made.

Three Declarations

1. Permanent: the patch corrects canonical names and classification logic at the handbook source; it does not introduce a workaround.
2. Cannot be mistaken: the manuals keep explicit DOT-only, production-reject, Owner-gate, and no-manual-SQL boundaries. The future automated catalogs must encode these controls rather than merely copy prose.
3. 100% automatic: not achieved by the markdown manuals themselves. Temporary human use is accepted; automation remains deferred to governed catalogs after the authorized schema path and LEGO shell are proven.

Final Decision

• Are dot-manage and collections-manage accepted as current operations manuals? Yes, with the disclosed caveats.
• Is any further handbook patch required before Macro-9B? No blocking precision patch is required within this re-review scope.
• May Macro-9A build proceed with existing DOTs/collections? No.
• Is Macro-9B the next separate mission? Yes, subject to a separate Owner-authorized prompt.
• May the future operator catalogs be created now? No.
• Do not implement confirmation: Confirmed. This re-review performed no runtime mutation, DDL/DML, DOT execution, schema/table/collection creation, Directus mutation, source-law/handbook patch, technical design, blocker resolution, future-catalog creation, or Macro-9B launch.