RS5A-PATCH1-01 — Codex RS5A HOLD Closure Map — 2026-06-21

Macro: RS5A-PATCH1 · Deliverable: 01 of 10 · scoped correction addendum. Does NOT overwrite RS5A. This file maps each Codex NEED_RS5A_PATCH1 residual to its corrected wording and status. Corrections are authored here (and in files 02–06) and supersede the cited RS5A phrases; the original RS5A files remain at revision 1 for audit. Gate carried: REGISTRATION_HOLD · REGISTRATION_CAN_PROCEED = NO · 0 mutations.

1. Codex source

knowledge/dev/laws-new/reports/codex/codex-review-rs5a-g2-owner-of-record-decision-2026-06-21.md (read full this macro, revision 1, truncated=false). STATUS HOLD; VERDICT NEED_RS5A_PATCH1; stop state RS5A_NEEDS_PATCH1 · SCOPE_DRIFT · OWNER_EXECUTION_DRIFT. Single scoped item: repair the G2 prerequisite & sequencing contract (§13 R1–R5).

2. Residual closure table

Residual	RS5A source location & superseded phrase	PATCH1 correction	status	caveat
R1 replay/audit "after registration"	RS5A-04 §1 (DOT_ACTIVATION_AUTHORITY/REPLAY_SURFACE/AUDIT_SINK "can be after registration") + §4 ("May be done after … registration writes inert draft; activation/replay/audit can land next"); RS5A-06 §1 (required_output "no activation") read as unlock; RS5A-10 Option A "unlocks draft registration", Option B "unlocks … treating replay/audit as deferred"	Replaced with: replay surface and failure-audit sink may be DESIGNED after the G2 decision, but MUST exist and pass before any real register_dot admission. Artifact-hash, nonce/replay, failure-audit, U3, status-domain, effect-bound approval, authority-binding are hard runtime prerequisites, not post-registration enhancements. See [[rs5a-patch1-02]].	CLOSED_FAIL_CLOSED	"designed after decision" ≠ "exists after runtime registration"
R2 "Owner executes G2 designation on accept"	RS5A-12 §6 ("the Owner-of-record executes the G2 designation"); RS5A-10 §4 ("the Owner makes the G2 designation"); RS5A-index §3; rollup §6; codex-packet §5	Replaced with: on ACCEPT_RS5A_PATCH1, proceed to a separate G2 execution-design / authorization-design step (RS5B), non-mutating, which must solve bootstrap authority and itself be authorized before any Owner/scope/APR/action write. See [[rs5a-patch1-03]].	CLOSED	bootstrap is circular today ⇒ no entity may execute on accept
R3 GOV-COUNCIL approval/quorum cluster unmapped	RS5A-05 §3 / RS5A-10 Option B (GOV-COUNCIL "high-risk approval", no scope/edge)	Defined explicit 10th scope DOT_APPROVAL_QUORUM_AUTHORITY (approver-authority only; owns no registration/admission) + identity-binding contract replacing ILIKE '%president%'. No silent broad approval inheritance. See [[rs5a-patch1-04]].	CLOSED	10th scope justified as narrow LEGO, not mega-scope
R4 handler dot-dot-register:governed ambiguous	RS5A-06 §1 (handler_ref = dot-dot-register:governed (proposed))	Renamed placeholder to DOT_REGISTER_GOVERNED_REPLACEMENT / dot-register-governed-replacement:v1; future handler is a replacement artifact that must NOT wrap/relabel/invoke/shell-out-to/reuse the unsafe mass-scan real-run path. See [[rs5a-patch1-05]].	CLOSED	replace-not-wrap contract reaffirmed
R5 negative-test oracle codes	RS5A-09 D07, H03, H07, I03, G02, G08 (+ coverage text)	Corrected oracle codes + replay/idempotency distinction. See [[rs5a-patch1-06]].	CLOSED	tests remain DEFINED_NOT_EXECUTED
R6 (Codex §11) dependency edges implicit	RS5A-11 ("one ownership row per scope")	Approval/nonce/artifact/audit carriers made explicit in the prerequisite graph; no broad-approval hidden coupling. See [[rs5a-patch1-02]] §4 + [[rs5a-patch1-04]].	CLOSED	per-scope rollback only valid when carriers explicit

3. Accepted-and-not-reopened (Codex §12)

Package completeness; Owner model rejections; governance-registry object as valid candidate head; register_dot design-only; authority outside U1; quorum necessary-not-sufficient; 84 tests defined-not-executed; Option B separation-of-duties direction; no-mega objective; REGISTRATION_HOLD + G2–G7. None reopened. RS4A/PATCH1/PATCH2 identity semantics not reopened.

4. Net

All five §13 items + the §11 implicit-coupling caveat are CLOSED / CLOSED_FAIL_CLOSED. No residual STILL_OPEN_BY_DESIGN remains that blocks review. ⇒ verdict candidate RS5A_PATCH1_READY_FOR_CODEX_REVIEW (see [[rs5a-patch1-07]]).