KB-135B rev 2

RS5B-PATCH1-01 — Source and Defect Map — 2026-06-21

6 min read Revision 2
rs5b-patch1g2defect-mapeffect-identityauthorization-bindingsuperseded-wordingfail-closed2026-06-21

RS5B-PATCH1-01 — Source and Defect Map — 2026-06-21

Macro: RS5B-PATCH1 · Deliverable: 01 of 7 · design-only · scoped wording correction (additive; does NOT overwrite RS5B). Method: direct AgentData KB full reads (batch_read full=true, truncated=false). No local prose / memory / summary used as proof. Gate: REGISTRATION_HOLD · REGISTRATION_CAN_PROCEED = NO · 0 runtime mutations.

1. Source register (direct reads, this macro)

# source path rev read what it proves
P1 reports/rs5b/05-authorization-packet-requirements-before-any-write-2026-06-21.md 1 full, truncated=false contains the defect — item 5 says effect_identity … kept out of the authorization binding
P2 reports/rs5b/07-rs5b-decision-packet-2026-06-21.md 1 full lists effect_identity as a packet element; does not repeat the unsafe phrase
P3 reports/rs5b/codex-review-packet-rs5b-…-2026-06-21.md 1 full references the 13 conjunctive elements; does not repeat the unsafe phrase
P4 reports/macro-rs5b-…-2026-06-21.md 1 full rollup §4 lists effect_identity as a packet element; does not repeat the unsafe phrase
P5 reports/codex/codex-review-rs5a-patch4-…-2026-06-21.md 1 full (prior read this session) controlling accepted gate: REGISTRATION_HOLD, CAN_PROCEED=NO; not reopened
P6 reports/rs5a-patch1/02-hard-prerequisite-graph-before-register-dot-2026-06-21.md 1 full hard runtime prerequisites incl. effect-bound approval + authorization-binding carrier; not reopened
P7 reports/rs5a-patch2/03-gov-council-canonical-principal-and-quorum-identity-contract-2026-06-21.md 1 full canonical-principal contract; effect/artifact binding required for valid approval; not reopened
P8 reports/rs4a-patch2/02-effect-identity-with-authorization-binding-separated-2026-06-21.md 1 full, truncated=false authoritative effect-identity source — FOUND (no NEEDS_SOURCE_CONFIRMATION needed): defines effect_identity (business-only) and authorization_binding_digest (which includes effect_identity)

Source-confirmation note: the RS4A-PATCH2 effect-identity source was located and read in full (P8). The corrected contract in [[02-corrected-effect-identity-and-authorization-binding-contract]] is grounded directly on it — NEEDS_SOURCE_CONFIRMATION does not apply.

2. The defect (exact old wording)

In RS5B-05 §1, item 5 ("effect_identity / authorization intent"), the requirement column reads:

"the business-only effect digest (PATCH2 effect-identity) for the intended act, kept out of the authorization binding (separation)"

Mark: SUPERSEDED_BY_RS5B_PATCH1.

3. Why the wording is unsafe

  1. It inverts the accepted RS4A-PATCH2-02 contract. That contract keeps authority out of effect_identity (purity) and puts effect_identity inside authorization_binding_digest (binding). The phrase "effect_identity kept out of the authorization binding" says the opposite of the binding direction.
  2. It can permit authorization-substitution / approval-not-bound-to-effect. If a reader takes "effect_identity is kept out of the authorization binding" literally, the authorization binding need not contain the effect — so an approval/authorization could be honored without being bound to the exact effect, exactly the APPROVAL_NOT_BOUND_TO_EFFECT_IDENTITY / AUTHORIZATION_CHANGED_SAME_EFFECT_DUPLICATE fail-open RS4A-PATCH2 closed.
  3. It self-contradicts within item 5. Item 5's own reject code is APPROVAL_NOT_BOUND_TO_EFFECT_IDENTITY — which enforces the opposite of the prose (binding to effect is required). The reject code already encodes the correct intent; the prose phrase is a wording slip, not a contract change. The fix restores prose ↔ reject-code agreement.

4. Scope of the defect (point fix, not package rewrite)

document unsafe phrase present? action
RS5B-03 Model D no direct unsafe phrase; shorthand effect/authorization intent is ambiguous NEEDS_PATCH — superseded reading is pure effect_identity + authorization_binding_digest containing it
RS5B-05 item 5 yes SUPERSEDED — corrected wording authoritative in [[02-corrected-effect-identity-and-authorization-binding-contract]]
RS5B-07 no (lists effect_identity as an element) OK — inherits the corrected reading; no rewrite
RS5B codex packet no OK
RS5B rollup no (lists effect_identity as an element) OK — inherits the corrected reading; no rewrite
RS5B-06 (BI05) no — already requires approval bound to effect_identity OK (consistent with corrected contract)

Full per-phrase classification is in [[03-rs5b-document-impact-map-and-superseded-wording]]. RS5B-PATCH1 patches only the contradiction; it does not rewrite unrelated RS5B sections and does not reopen RS5A-PATCH4 quorum/G02.

5. Status

DEFECT_MAPPED — single unsafe phrase isolated to RS5B-05 item 5; marked SUPERSEDED_BY_RS5B_PATCH1; authoritative source (RS4A-PATCH2-02) found and read; the slip contradicts its own reject code, confirming it is wording, not contract. Corrected contract follows in PATCH1-02.