RS5A-PATCH2 Index — Semantic-Closure Precision — 2026-06-21

Verdict: RS5A_PATCH2_READY_FOR_CODEX_REVIEW (not forced) · Gate: REGISTRATION_HOLD · REGISTRATION_CAN_PROCEED=NO · 0 mutations. Macro: RS5A-PATCH2 — scoped semantic-closure correction after Codex NEED_RS5A_PATCH2. Does NOT overwrite RS5A or RS5A-PATCH1. Does NOT reopen accepted RS4A/PATCH2 identity, U3, handler, bootstrap, or prerequisite-graph semantics.

1. File inventory + readback

Each file's upload_document returned status=created, revision=1. Eight files total (8 required).

#	file (reports/rs5a-patch2/ unless noted)	revision	readback
idx	rs5a-patch2-index-semantic-closure-precision (this file)	1	created
01	01-codex-patch1-hold-closure-map	1	created
02	02-scope-taxonomy-final-classification	1	created
03	03-gov-council-canonical-principal-and-quorum-identity-contract	1	created
04	04-test-oracle-canonical-outcomes-and-count	1	created
05	05-rs5a-patch2-decision-packet	1	created
cdx	codex-review-packet-rs5a-patch2-semantic-closure-precision	1	created
roll	reports/macro-rs5a-patch2-semantic-closure-precision (rollup)	1	created

2. Residual closure (Codex NEED_RS5A_PATCH2 §10)

residual	status	file
1 — scope taxonomy contradiction (remove "deferrable" bucket; activation ≠ replay/audit)	CLOSED	02
2 — GOV-COUNCIL canonical principal/quorum identity	CLOSED (design-only, fail-closed)	03
3 — test oracle alias / count ambiguity	CLOSED (84 parent / 86 executable)	04

No residual STILL_OPEN_BY_DESIGN blocks review.

3. Headline corrections

• Scope taxonomy: 8 hard pre-runtime prerequisite scopes + 1 hard pre-runtime approval/quorum scope + 1 post-registration-capable activation scope. DOT_REPLAY_SURFACE and DOT_AUDIT_SINK are hard pre-runtime prerequisites; DOT_ACTIVATION_AUTHORITY is the only post-registration-capable scope. No "deferrable" bucket; nothing implies replay/audit can follow runtime registration.
• GOV-COUNCIL principal identity: canonical principal IDs, authoritative president-role binding (no text-match), distinct canonical council principals, no alias/delegation double-count, valid scoped delegation, self-declared council and free-text president rejected; surface REQUIRED_NOT_PRESENT; fail-closed.
• Test oracles: one canonical outcome per executable scenario; aliases documentation-only; 84 parent IDs / 86 executable scenarios; DEFINED_NOT_EXECUTED.

4. Self-check (Mục tiêu 7)

read Codex PATCH1 HOLD ✔ · phrase "deferrable bucket of 3" not used as a classification ✔ · activation separated from replay/audit ✔ · replay classified hard pre-runtime ✔ · audit classified hard pre-runtime ✔ · canonical_principal_id defined ✔ · president role binding defined ✔ · council principal uniqueness defined ✔ · alias/delegation double-count forbidden ✔ · self-declared ai_council forbidden ✔ · free-text president forbidden ✔ · D07/H03/H07/I03/G02/G08 canonicalized ✔ · 84 parent IDs / 86 executable scenarios stated ✔ · no implementation/mutation ✔ · REGISTRATION_HOLD kept ✔ · Codex packet created ✔ · readback verified ✔.

5. Next step

Codex reviews RS5A-PATCH2 only → on accept, proceed to RS5B (G2 Owner-of-record execution-design / authorization-design, non-mutating). Further residual ⇒ RS5A-PATCH3.