Macro-RS5A-PATCH4 — Total Quorum Precedence & G02 Domain (rollup) — 2026-06-21
Macro-RS5A-PATCH4 — Total Quorum Precedence & G02 Domain (rollup) — 2026-06-21
Opened after: Codex REJECT_RS5A_PATCH3_QUORUM_PRECEDENCE_INSUFFICIENT (HOLD · stop state QUORUM_PRECEDENCE_INSUFFICIENT · REGISTRATION_CAN_PROCEED = NO) on RS5A-PATCH3.
Verdict: RS5A_PATCH4_READY_FOR_CODEX_REVIEW (not forced) · Gate: REGISTRATION_HOLD · REGISTRATION_CAN_PROCEED = NO · 0 mutations.
Class: scoped total-quorum-precedence / G02-partition-domain correction. Does NOT overwrite RS5A, RS5A-PATCH1, RS5A-PATCH2, or RS5A-PATCH3. Does NOT reopen accepted lifecycle, G02a/b/c mutual exclusion, owner, bootstrap, handler, identity, U1/U2/U3, or hard-prerequisite semantics (Codex §7 accepted points).
1. Scope
Single scoped item (Codex §5 corrections 1–4 + §6 caveat): make the quorum reject oracle a total deterministic function and narrow the G02 partition claim. Four corrections: (1) a total code-level order over all quorum identity codes with the rule predicates may overlap; lowest matching Q-code at the evaluation unit wins (replacing the unproven within-band exclusivity assertion), fixing especially P1 and P3; (2) compound adversarial fixtures; (3) the exact evaluation unit; (4) the G02 partition-domain narrowing plus the named in-flight state.
2. Closures
- Residual R1+R2 — P1/P3 multi-code ambiguity (Codex §5 blocking): PATCH3-03 asserted within-band mutual exclusivity but did not prove it; one input (
approver='president-bot'+approver_type='ai_council'without body membership) matched bothFREE_TEXT_PRESIDENT_REJECTEDandSELF_DECLARED_COUNCIL_IDENTITY_REJECTED; P3 had the same weakness. PATCH4-02 defines a single total orderQ00 < Q10 < Q11 < Q20 < Q21 < Q22 < Q23 < Q30 < Q31 < Q40 < Q41 < Q50and the rule predicates may overlap; the lowest matching Q-code at the evaluation unit wins. The two flagged within-band orderings are explicit:Q10 FREE_TEXT_PRESIDENT_REJECTED < Q11 SELF_DECLARED_COUNCIL_IDENTITY_REJECTED,Q30 PRESIDENT_ROLE_UNRESOLVED < Q31 COUNCIL_PRINCIPAL_UNRESOLVED. The order is total in the surface-present state (not merely masked by P0/Q00).CLOSED. ([[rs5a-patch4-02]]) - Residual R3 — evaluation unit (Codex §5.3): primary unit = a single vote claim within one APR (carries per-vote codes Q10–Q31, comparing claimed role slots against resolved/canonical slots); APR-level unit = the whole APR over its valid vote claims (carries Q40/Q41/Q50); Q00 = a context precondition over the whole evaluation context. Per-vote invalidity is evaluated before APR-level duplicate/count; a multi-faulty-vote APR's single canonical outcome = the lowest Q across emitted per-vote codes. The oracle function maps every APR to exactly one of the twelve codes or
IDENTITY_PASS(necessary-not-sufficient; effect-binding orthogonal, carried).CLOSED. ([[rs5a-patch4-02]]) - Residual R4 — compound fixtures (Codex §5.2): PATCH4-03 adds CQ01–CQ09, each stating input shape, matching predicates, lowest-Q winner, expected canonical code, and evaluation unit — including the two Codex blocking inputs (CQ01 →
FREE_TEXT_PRESIDENT_REJECTED; CQ03 →PRESIDENT_ROLE_UNRESOLVED), delegation compounds (CQ04/CQ05), double-count (CQ06/CQ07), count (CQ08), and a cross-unit APR rollup (CQ09). These are predicate-resolution fixtures, not new executable scenarios.CLOSED. ([[rs5a-patch4-03]]) - Residual R5 — G02 partition overclaim (Codex §6): PATCH3-04 claimed G02a/b/c partition every same-nonce input;
same nonce + same effect + same envelope + no prior durable decisionmatched none. PATCH4-04 narrows the partition to domainD= same-nonce inputs with a prior durable decision (all three branches require it), within which the effect→envelope tree is exhaustive and exclusive (accepted mutual exclusion unchanged). The out-of-domain in-flight case is namedNO_PRIOR_DURABLE_DECISION_STATE_UNSPECIFIED— a design-only label, not a reject code, not an executable scenario — deferred to the future replay-surface implementation under the carried hard pre-runtime prerequisite. Count unchanged 84 parent IDs / 86 executable scenarios;DEFINED_NOT_EXECUTED.CLOSED. ([[rs5a-patch4-04]])
3. Total quorum order (authoritative)
Q00 CANONICAL_PRINCIPAL_SURFACE_REQUIRED_NOT_PRESENT < Q10 FREE_TEXT_PRESIDENT_REJECTED < Q11 SELF_DECLARED_COUNCIL_IDENTITY_REJECTED < Q20 DELEGATION_REVOKED < Q21 DELEGATION_SCOPE_MISMATCH < Q22 DELEGATION_NOT_YET_EFFECTIVE < Q23 DELEGATION_EXPIRED < Q30 PRESIDENT_ROLE_UNRESOLVED < Q31 COUNCIL_PRINCIPAL_UNRESOLVED < Q40 APPROVER_ALIAS_DOUBLE_COUNT < Q41 CANONICAL_PRINCIPAL_DOUBLE_COUNT < Q50 QUORUM_NOT_SATISFIED. Band labels P0–P5 (PATCH3-03) are descriptive groupings; the Q-order is the contract and overrides them. Accepted inter-band, P2-internal, and P4-internal orders are preserved; only Q10<Q11 and Q30<Q31 are new.
4. Deliverables (8 files)
reports/rs5a-patch4/: index, 01-codex-patch3-rejection-closure-map, 02-quorum-evaluation-unit-and-total-code-order, 03-compound-quorum-fixtures-and-expected-codes, 04-g02-partition-domain-and-no-durable-decision-caveat, 05-rs5a-patch4-decision-packet, codex-review-packet-… — plus this reports/macro-rs5a-patch4-… rollup. All revision=1, readback-confirmed.
5. Carried blockers & must-not-do
G2–G7 + STATUS_DOMAIN_NOT_DB_ENFORCED + U3_PARTIAL_UNIQUE_SURFACE_ABSENT + OWNER_MINT_PATH_FAIL_CLOSED + QUORUM_EFFECT_BINDING_INSUFFICIENT + QUORUM_APPROVER_IDENTITY_UNVERIFIED + BOOTSTRAP_AUTHORITY_UNRESOLVED + CANONICAL_PRINCIPAL_SURFACE_REQUIRED_NOT_PRESENT. No new blocker and no new reject code (only the total order, the evaluation unit, the compound fixtures, and the design-only out-of-domain label NO_PRIOR_DURABLE_DECISION_STATE_UNSPECIFIED). All must-not-do held; REGISTRATION_HOLD not cleared; no Owner/scope/principal-registry/APR/register_dot/approval/handler/activation created; no DDL/DML; no registrar/validator patch; no RS-VALIDATOR; no implementation, registration, or activation.
6. Next step
Codex reviews RS5A-PATCH4 only → on accept, proceed to RS5B (G2 Owner-of-record execution-design / authorization-design, non-mutating, bootstrap-solving, separately-authorized-before-write). Further residual ⇒ RS5A-PATCH5.
Builds on / corrects [[project_laws_new_macro_rs5a_patch3_deterministic_lifecycle_and_oracle_predicates_2026_06_21]]; consumes accepted RS5A/PATCH1/PATCH2/PATCH3 lifecycle, G02a/b/c mutual exclusion, owner, bootstrap, handler, U1/U2/U3, and prerequisite-graph semantics (not reopened).