KB-52A6

RS5A-PATCH3 Index — Deterministic Lifecycle & Oracle Predicates — 2026-06-21

5 min read Revision 1

RS5A-PATCH3 Index — Deterministic Lifecycle & Oracle Predicates — 2026-06-21

Verdict: RS5A_PATCH3_READY_FOR_CODEX_REVIEW (not forced) · Gate: REGISTRATION_HOLD · REGISTRATION_CAN_PROCEED=NO · 0 mutations. Macro: RS5A-PATCH3 — scoped deterministic-lifecycle / oracle-predicate correction after Codex NEED_RS5A_PATCH3. Does NOT overwrite RS5A, RS5A-PATCH1, or RS5A-PATCH2. Does NOT reopen accepted owner, bootstrap, handler, identity, U3, or hard-prerequisite semantics.

1. File inventory + readback

Each file's upload_document returned status=created, revision=1. Eight files total (8 required).

# file (reports/rs5a-patch3/ unless noted) revision readback
idx rs5a-patch3-index-deterministic-lifecycle-and-oracle-predicates (this file) 1 created
01 01-codex-patch2-hold-closure-map 1 created
02 02-lifecycle-availability-persistence-and-business-transition-separation 1 created
03 03-quorum-reject-precedence-and-delegation-interval 1 created
04 04-replay-idempotency-mutual-exclusion-and-g08-fixture 1 created
05 05-rs5a-patch3-decision-packet 1 created
cdx codex-review-packet-rs5a-patch3-deterministic-lifecycle-and-oracle-predicates 1 created
roll reports/macro-rs5a-patch3-deterministic-lifecycle-and-oracle-predicates (rollup) 1 created

2. Residual closure (Codex NEED_RS5A_PATCH3 §8)

residual status file
1 — lifecycle availability vs persistence ("must exist before" ≠ "persists/acts after") CLOSED 02
2 — quorum reject-code precedence / delegation interval CLOSED (design-only, fail-closed) 03
3 — replay/idempotency G02a/b/c mutual exclusion & G08 fixture CLOSED (84 parent / 86 executable) 04

No residual STILL_OPEN_BY_DESIGN blocks review.

3. Headline corrections

  • Lifecycle: three orthogonal axes replace PATCH2-02 §4's single column — A first-availability gate (before admission, unchanged), B post-admission persistence/operation (yes for every prerequisite; replay answers idempotent retry, audit retains failure records), C business-transition timing (only activation, after inert registration). Pre-runtime surfaces must exist before and remain available after admission; replay/audit may never be first introduced after registration; activation is the only post-registration business transition.
  • Quorum precedence: deterministic P0→P5 reject-code ladder; spoof codes beat generic-unresolved; distinct-alias double-count beats exact-identity double-count; single half-open delegation window [effective_from, effective_to) with boundary outcomes; new DELEGATION_NOT_YET_EFFECTIVE; revocation overrides interval; surface REQUIRED_NOT_PRESENT; fail-closed.
  • Replay/idempotency: G02a now requires same authorization envelope/digest; effect→envelope decision tree partitions "same nonce" (different-effect and different-envelope checked before idempotent retrieval); G08 distinguished by client-observation fixture; 84 parent IDs / 86 executable scenarios; DEFINED_NOT_EXECUTED.

4. Self-check (Mục tiêu 7)

read Codex PATCH2 HOLD ✔ · separated first-availability / persistence / business-transition ✔ · replay persists after admission for idempotent retry ✔ · audit/policy/hash/U3/status persist after admission ✔ · activation kept as the only post-registration business transition ✔ · reject-code precedence (P0→P5) defined ✔ · free-text president precedence handled (P1 before P3) ✔ · self-declared ai_council precedence handled (P1 before P3) ✔ · alias double-count vs canonical double-count separated (distinct-surface vs identical-reference) ✔ · delegation interval half-open [from, to) defined ✔ · boundary outcomes handled (lower valid, upper DELEGATION_EXPIRED, before DELEGATION_NOT_YET_EFFECTIVE, revocation overrides) ✔ · G02a/b/c mutually exclusive (effect→envelope tree) ✔ · G08 fixture distinguished (known-response retry vs unknown-response recovery) ✔ · 84 parent / 86 executable retained with count shown ✔ · no implementation/mutation ✔ · REGISTRATION_HOLD kept ✔ · Codex packet created ✔ · readback verified ✔.

5. Next step

Codex reviews RS5A-PATCH3 only → on accept, proceed to RS5B (G2 Owner-of-record execution-design / authorization-design, non-mutating). Further residual ⇒ RS5A-PATCH4.

Back to Knowledge Hub knowledge/dev/laws-new/reports/rs5a-patch3/rs5a-patch3-index-deterministic-lifecycle-and-oracle-predicates-2026-06-21.md