READY-TO-ASSEMBLE-LEGO1-PATCH2 07 — Preflight PF5/PF7/PF8 & Dry-Run Gating Proof (B7) — 2026-06-22

Closes/holds Codex 5.6. Gate: REGISTRATION_HOLD · CAN_PROCEED = NO · 0 runtime mutations.

---

1. Codex residuals (reproduced)

• PF5 unsatisfiable (status='granted'; corrected in file 05).
• PF7 pointed at v_dotkg_realrun_preflight, which is DOT_KG_EXPLAIN-specific (gates gate_dotkg_owner_present, promote DOT_KG_EXPLAIN; OVERALL_VERDICT=REALRUN_BLOCKED_MULTI_GATE/NO_GO). c1_preflight_views=0.
• PF8 cited fences but did not prove the eventual C1 handler is fenced; PF9 claimed a digest never supplied (now in file 09).

2. Two distinct gates (do not conflate)

Gate	Meaning	C1 status today
Ready to REQUEST dry-run authorization	complete, exact, internally-consistent build package and the executable contracts exist + are read-back-verifiable	NO — contracts absent (file 02)
Ready to RUN dry-run now	above + contract promoted + runtime flips + executor health + window	NO

3. PF5/PF7/PF8 corrected and truthful

• PF5 (authorization availability): exact verifier of file 05 §2 with status='active'; today returns 0 rows (auth_count=0) ⇒ AUTH_ABSENT (expected; AUTHORITY_MISSING_ONLY). Reproducible.
• PF7 (C1 real-run gate): must be a C1-specific view v_c1_realrun_preflight mirroring the DOT_KG gate structure (contract-realrun-mode, owner-present, dry_run_only-cleared, execute_enabled, real_run_enabled, endpoint-bound, dry-run-evidence, real_run_count_zero). It does not exist (c1_preflight_views=0). PATCH2 does not reuse v_dotkg_realrun_preflight as a C1 proxy.
• PF8 (dependency/blast-radius fence): truthful — DOT-only + MCP 403 + block_after_guard (enforced, live) fence direct writes; but the eventual C1 handler's fencing cannot be proven until the handler exists. Honestly marked unproven.

4. Honest status

PF5 is corrected and reproducible (residual = grant absence, authority-only). PF7 is a PREPARATION_GAP — the C1 preflight view is absent and cannot be created under HOLD; reusing the DOT_KG view would be the very misidentification Codex rejected. PF8 fence-of-C1-handler is unprovable until B1 artifacts exist. Classification: B7 PREPARATION_GAP (PF7), plus authority/runtime residuals (gates BLOCK today).

5. Boundary attestation

Read-only; no gate flipped, no view created. REGISTRATION_HOLD retained; CAN_PROCEED = NO; 0 runtime mutations. Supersedes PATCH1 file 07 §3 (DOT_KG preflight reused as C1).