Macro — READY-TO-ASSEMBLE-LEGO1 (C1 canonical_operation vocabulary) — 2026-06-22

VERDICT: READY_TO_ASSEMBLE_LEGO1_PACKAGE (not forced). Chosen LEGO #1: C1 — canonical_operation vocabulary contract carrier (closeout carrier P2-C1). Builds on (accepted, not reopened): Codex ACCEPT_RS5B_CLOSEOUT_PATCH2_LEGO_READINESS_SEAL (PASS_WITH_CAVEATS); stop RS5B_CLOSEOUT_PATCH2_ACCEPTED_LEGO1_READY_FOR_PLAN_REGISTRATION_HOLD. Gate: REGISTRATION_HOLD · REGISTRATION_CAN_PROCEED = NO · 0 runtime mutations · P2 CLOSED · NOT_OPENED · NOT_AUTHORIZED · no named lane opened · no Chairman authorization asserted.

---

1. What this macro produced

A one-shot preparation package that takes LEGO #1 from "readiness-for-plan" (the accepted PATCH2 seal) to preparation-complete for real assembly — so that nothing but authority/execution remains. It chose the first carrier, then fully prepared its boundary, dependency map, build plan, test/adversarial matrix, rollback, preflight, evidence plan, Gate B packet, and exact-scoped Chairman authorization template — without opening P2, writing runtime, or asserting any authorization exists.

2. Carrier decision

C1 chosen. It is the only candidate that is simultaneously a root producer (incoming carrier edges = 0), the lowest authority risk (vocabulary = reference data, not an owner/approval/registration act), the cleanest local versioned-supersession rollback, and the live-confirmed CANONICAL_OPERATION_VOCABULARY_REQUIRED_NOT_PRESENT gap that feeds effect_identity. Alternatives rejected: C2 (dependency hub → mega-coupling), C3 (founding-owner mint → highest authority/bootstrap), C7 (president principal head absent), C4/C5/C6 (safe-ish producers but not the flagged prerequisite).

3. Live read-only discovery (key facts)

• governance_object_ownership = 0; governance_build_authorization = 0 (empty but structurally complete: sovereign e-sign + scope + rollback_plan_ref + expiry + revoke + consume).
• Zero columns for canonical_operation/effect_identity/authorization_binding_digest/artifact_hash/founding_authority/canonical_principal/authorization_nonce.
• No register_dot in apr_action_types (14) or dot_operations (20); no president head in governance_registry (9 heads).
• 6 active scopes; 230 approval_requests; 1 audit row.
• Every command READ_ONLY_SAFE; no write/DDL/DML run.

4. Files created (15 in package directory + this rollup)

index, 01-source-register-and-input-lock, 02-read-only-repo-schema-test-evidence-inventory, 03-lego1-carrier-candidate-selection-and-risk-ranking, 04-lego1-carrier-specific-contract-boundary, 05-lego1-dependency-map-and-contract-join-points, 06-lego1-build-plan-not-executed, 07-lego1-check-test-and-adversarial-matrix, 08-lego1-rollback-and-recovery-plan-not-executed, 09-lego1-dry-run-and-read-only-preflight-plan, 10-lego1-evidence-log-hash-and-readback-plan, 11-gate-b-readiness-and-chairman-authorization-packet, 12-codex-style-adversarial-self-review, 13-final-readiness-decision, codex-review-packet-ready-to-assemble-lego1 (all under reports/ready-to-assemble-lego1/) + this rollup (reports/macro-ready-to-assemble-lego1-2026-06-22.md).

5. Preparation completeness

Build / dependency / boundary / test / rollback / preflight / evidence / Gate-B / Chairman-template: all complete. Adversarial A1–A25 all reject before PASS. No preparation gap remains — residuals are authority/execution only (AUTHORITY_MISSING_ONLY, RUNTIME_ACCESS_MISSING_ONLY).

6. Authority/execution blockers remaining (legitimate after READY)

Gate A/B acceptance; exact-scoped Chairman authorization (governance_build_authorization row scoped to LEGO1-C1-CANOPVOCAB-PLAN-2026-06-22); runtime/write authorization; execution window. None is a preparation gap.

7. Carried blockers (UNCHANGED)

G2–G7 + STATUS_DOMAIN_NOT_DB_ENFORCED + U3_PARTIAL_UNIQUE_SURFACE_ABSENT + OWNER_MINT_PATH_FAIL_CLOSED + QUORUM_EFFECT_BINDING_INSUFFICIENT + QUORUM_APPROVER_IDENTITY_UNVERIFIED + BOOTSTRAP_AUTHORITY_UNRESOLVED + CANONICAL_PRINCIPAL_SURFACE_REQUIRED_NOT_PRESENT. No new blocker; no new runtime reject code.

8. Must-not-do compliance (all held)

No P2 opened; no named lane opened; no runtime write; no DDL/DML; no rollback executed; no Owner/scope/APR/register_dot/approval/handler created; no runtime rows; no registrar/validator patch; no RS-VALIDATOR; no registration; no activation; REGISTRATION_HOLD not cleared; REGISTRATION_CAN_PROCEED not asserted; no Chairman authorization asserted to exist; Gate A not treated as P2-open; Gate B not treated as registration/activation; engineering PASS not treated as authority PASS; no mega-registry/mega-graph/mega-birth pipeline; no silent carrier coupling; Job A not reopened; I1–I10 not weakened.

9. Readback metadata

Pre-write count of reports/ready-to-assemble-lego1/ = 0 (additive). Post-write: 15 documents in the package directory (index + 01–13 + codex-review-packet) + 1 reports-level rollup, all revision 1, created via upload_document. Sources read directly from AgentData KB; live state via read-only query_pg/pg_schema/list_docker.

10. Single next step

Independent (GPT → Codex) review of this preparation package only → on accept, the prepared C1 plan enters a future Gate B evaluation; a satisfied Gate B opens only the named C1 lane and authorizes the C1 build under an exact-scoped Chairman token. Registration/activation/register_dot/P3 remain separate later gates. Residual ⇒ READY_TO_ASSEMBLE_LEGO1-PATCH1.

Readiness-for-assembly ≠ assembly execution. Engineering/contract PASS ≠ authority/runtime PASS. Baseline ≠ P2-open. Satisfied Gate B ≠ registration. Deletion ≠ rollback. One input → one code.