READY-TO-ASSEMBLE-LEGO1-PATCH1 — Index — 2026-06-22

Closes: Codex HOLD READY_TO_ASSEMBLE_LEGO1-PATCH1_REQUIRED (knowledge/dev/laws-new/reports/codex/codex-review-ready-to-assemble-lego1-preparation-package-2026-06-22.md, rev1, len 11399) — blockers P0-1, P0-2, P1-1..P1-6, P2-1, P2-2. Verdict: READY_TO_ASSEMBLE_LEGO1_PATCH1_READY_FOR_GPT_REVIEW (not forced). Scope: corrective patch to the READY-TO-ASSEMBLE-LEGO1 package. Additive; supersedes only the specific defective wordings/commands Codex flagged. Carrier choice (C1 canonical_operation vocabulary) unchanged. Gate: REGISTRATION_HOLD · REGISTRATION_CAN_PROCEED = NO · 0 runtime mutations · P2 CLOSED · NOT_OPENED · NOT_AUTHORIZED · no named lane · no Chairman token asserted. Evidence tier: AgentData KB direct read of the Codex HOLD + the package + the Directus Operating Rules SSOT (knowledge/dev/ssot/directus/directus-operating-rules.md v1.2) and DOT Usage Handbook, plus live read-only discovery of the actual DOT/Directus governed execution surfaces (dispatcher, dot_iu_create_collection, staging gateway, dot_iu_runtime_lease, v_dotkg_realrun_preflight, apr_action_types, process_axis_action_vocabulary). No subagents used (project rule; Codex §3 caveat) — all reads direct.

---

Reading order

1. 01-source-register-codex-hold-reconstruction-and-mindset-2026-06-22.md — mandatory mindset; direct-read register; reconstruction of every Codex finding P0/P1/P2; no-subagent attestation.
2. 02-p0-1-dot-directus-execution-contract-2026-06-22.md — [P0-1] replaces raw DDL/DML with the DOT-only + Directus-API path: dot_iu_create_collection + table_registry wiring + staging gateway + dispatcher dual-trigger (plan/apply) + idempotency_root + DRY_RUN→REAL_RUN + paired verify contract.
3. 03-p0-2-c1-versioned-identity-and-invariants-2026-06-22.md — [P0-2] versioned identity (PK (operation_code, protocol_version) + surrogate vocab_id), uniqueness axes, versioned successor identity, immutable semantic fields, exact version-aware lookup key, lifecycle/successor constraints.
4. 04-p1-1-value-manifest-and-deterministic-resolver-2026-06-22.md — [P1-1] deterministic authority-backed resolver R_C1 + a concrete hashed candidate manifest snapshot projected (read-only) from governed apr_action_types/process_axis_action_vocabulary; Gate-B review = governed selection, not invention.
5. 05-p1-2-authorization-verifier-and-atomic-consume-2026-06-22.md — [P1-2] exact executable authorization verifier predicate + atomic reserve/consume via dot_iu_runtime_lease + status CAS before any write (not at S8); full binding (plan/artifact/carrier/env/executor/action/rollback).
6. 06-p1-3-atomic-failure-model-state-machine-2026-06-22.md — [P1-3] executable state machine with atomicity/idempotency, partial-failure stop states, retry rules, enforced rollback invariants.
7. 07-p1-4-preflight-exact-and-truthful-2026-06-22.md — [P1-4] PF5 exact executable verifier; PF7 run now (governed v_dotkg_realrun_preflight); PF8 truthfully scoped (DOT-only 403 fence + block_after_guard, not "postgres DB denied").
8. 08-p1-5-executable-test-suite-2026-06-22.md — [P1-5] executable test commands/fixtures with deterministic assertions + output capture (identity/version, constraints, concurrency, partial failure, retry, forged authority, ambiguous serialization, audit-write failure).
9. 09-p1-6-canonical-serialization-and-binding-2026-06-22.md — [P1-6] versioned canonical serialization cser-v1 (JCS-style canonical JSON, UTF-8 NFC) + full artifact binding.
10. 10-p2-truthful-blast-radius-and-overclaim-retraction-2026-06-22.md — [P2-1/P2-2] truthful operational blast-radius + dependency contracts; retraction of "blast radius zero / structurally complete / inventory complete / only authority/execution remains" with proven-scoped replacements.
11. internal-codex-self-review-ready-to-assemble-lego1-patch1-2026-06-22.md — REQUIRED internal Codex-style verdict table (finding · source · bad input · PASS/HOLD · closure proof · remaining caveat).
12. 11-decision-packet-and-final-verdict-2026-06-22.md — verdict, why-not-another, self-check, carried blockers, single next step.
13. codex-review-packet-ready-to-assemble-lego1-patch1-2026-06-22.md — what to verify, adversarial checks, allowed verdicts.
14. ../macro-ready-to-assemble-lego1-patch1-2026-06-22.md — macro rollup (reports level).

One-line thesis

The READY package was organizationally complete but technically deficient; PATCH1 closes every Codex blocker by binding the C1 build to the actual governed DOT/Directus execution contract (no raw SQL), giving C1 a versioned identity, a deterministic authority-backed value manifest, an exact verifier + atomic lease-based consume, an atomic failure/rollback state machine, exact+truthful preflight, an executable test suite, canonical serialization, and a truthful blast-radius — leaving only authority/execution residuals that are themselves governed by the live REALRUN_BLOCKED_MULTI_GATE preflight.

Boundaries (held in every file)

REGISTRATION_HOLD retained · CAN_PROCEED = NO · 0 runtime mutations · no DDL/DML · no Directus write · no DOT execution · no schema creation · no value insertion · no rollback execution · no P2/named-lane opening · no registration · no activation · no Chairman token asserted · Job A / I1–I10 not reopened · no mega-registry · DOT-only path honored · oracle/engineering PASS ≠ authority/runtime PASS.

Single next step: GPT → Codex re-review of PATCH1 against the nine-item closure set. Residual ⇒ READY_TO_ASSEMBLE_LEGO1-PATCH2.