Incomex AI Portal
KB-3E11 rev 8

Tool kiểm thử lego — Index

18 min read Revision 8
tool-kiem-thulegolaws-newindex2026-06-22

Tool kiểm thử lego — Index

Path: knowledge/dev/laws-new/tool-kiem-thu-lego/ Created: 2026-06-21 Status: ACTIVE_WORKSPACE_INDEX

Purpose

This folder is the working area for reports, survey notes, design documents, decision packets, and implementation planning related to restructuring Tool-Kiem-Thu for laws-new/ under the LEGO governance model.

Scope

This workspace is for Tool-Kiem-Thu LEGO materials only:

  • survey reports;
  • design notes;
  • TKT Base L0-L3 policy;
  • checker contract schema;
  • NVSZ/no-vector run evidence packet design;
  • RS5A/RS5B checker profiles;
  • GPT/Codex review packets;
  • implementation planning after design approval.

Boundary

This folder does not authorize runtime mutation, production execution, registration, Owner/scope/APR/register_dot creation, semantic Text-as-Code PASS, or production PASS.

REGISTRATION_HOLD remains active unless a later authorized decision explicitly changes it.

Initial lane

Initial lane: RS-TKT-0 — Tool-Kiem-Thu Base Restructure for laws-new LEGO Review Lane.

Deliverables — RS-TKT-0A (2026-06-21, survey & conversion plan, additive)

Verdict: RS_TKT_0A_READY_FOR_GPT_REVIEW · Gate: REGISTRATION_HOLD · REGISTRATION_CAN_PROCEED = NO · 0 runtime mutations.

  • 00-survey-source-inventory-2026-06-21.md — files read, classified buckets, MISSING_CONTEXT_BLOCKER.
  • 01-old-tool-kiem-thu-reuse-gap-map-2026-06-21.md — REUSE / REUSE_WITH_CHANGE / RETIRE / DEFER / NEW_NEEDED map.
  • 02-laws-new-lego-requirements-for-tkt-2026-06-21.md — the ten laws-new requirements for TKT.
  • 03-tkt-base-l0-l3-conversion-plan-2026-06-21.md — L0–L3 plan + PASS-level policy + review lane.
  • 04-tkt-checker-block-catalog-draft-2026-06-21.md — 11 LEGO checker block contracts + output schema.
  • 05-nvsz-run-evidence-packet-assessment-2026-06-21.md — NVSZ no-vector run-evidence packet design.
  • 06-rs5a-rs5b-pre-codex-profile-draft-2026-06-21.md — pre-Codex checker profile (groups A–G).
  • 07-conversion-roadmap-and-stop-states-2026-06-21.md — Phase 0–7 roadmap + stop states.
  • 08-final-survey-report-for-gpt-codex-review-2026-06-21.md — final report, self-check, verdict.

Deliverables — RS-TKT-0A-PATCH1 (2026-06-21, Codex blocker closure, additive)

Verdict: RS_TKT_0A_PATCH1_READY_FOR_GPT_REVIEW · Gate: REGISTRATION_HOLD · REGISTRATION_CAN_PROCEED = NO · 0 runtime mutations. Closes Codex NEED_RS_TKT_0A_PATCH1 (P1–P7). Prior 00–08 unchanged (revision 1); corrections are additive supersession clauses (see patch1/00 §3). Subfolder patch1/:

  • patch1/00-codex-blocker-closure-map-2026-06-21.md — P1–P7 closure + supersession table.
  • patch1/01-fail-closed-forbidden-output-contract-patch-2026-06-21.md — P1 conjunctive bad-output contract.
  • patch1/02-l3-lego-boundary-split-patch-2026-06-21.md — P2 split L3 into 4 one-concern bricks.
  • patch1/03-source-authority-status-hierarchy-patch-2026-06-21.md — P3 Tier-1/2/3 source hierarchy (DRAFT ≠ enacted).
  • patch1/04-l1-vs-phase4-execution-boundary-patch-2026-06-21.md — P4 L1 inert-fixtures only; HOLD_RUNTIME_SURFACE_REQUIRED.
  • patch1/05-nvsz-taxonomy-and-ledger-normalization-patch-2026-06-21.md — P5 ESCROW_E*/ROOT_E*; canonical hash_manifest.sha256.
  • patch1/06-rs5a-rs5b-profile-provenance-split-patch-2026-06-21.md — P6 CODEX_CAUGHT_RS5A vs SELF_REPORTED_RS5B_DRAFT.
  • patch1/07-level-dependency-and-output-consistency-patch-2026-06-21.md — P7 L0→L1→L2→L3 chain; separated status fields.
  • patch1/08-final-patch1-report-for-gpt-codex-review-2026-06-21.md — final PATCH1 report, self-check, verdict.

Deliverables — RS-TKT-0A-PATCH2 (2026-06-21, Codex re-review closure P1/P6/P7, additive)

Verdict: RS_TKT_0A_PATCH2_READY_FOR_GPT_REVIEW · Gate: REGISTRATION_HOLD · REGISTRATION_CAN_PROCEED = NO · 0 runtime mutations. Closes the remaining Codex re-review items after REJECT_RS_TKT_0A_PATCH1_FAIL_CLOSED_UNRESOLVED (knowledge/current-state/reports/codex-rereview-rs-tkt-0a-patch1-2026-06-21.md): P1 (unstructured forbidden output), P6 (profile_id enum), P7 (HOLD propagation + aggregate truth table). Codex-confirmed P2–P5 / NVSZ / authority boundary not reopened. Prior 00–08 and patch1/00–08 unchanged (revision 1); corrections are additive supersession clauses (see patch2/00 §4). Subfolder patch2/:

  • patch2/00-codex-rereview-closure-map-2026-06-21.md — P1/P6/P7 closure map + supersession table.
  • patch2/01-p1-unstructured-forbidden-output-contract-2026-06-21.md — P1 6-conjunct invalid_input_safe; reserved token list; detector order; BAD-FC-001..008.
  • patch2/02-p6-profile-id-schema-repair-2026-06-21.md — P6 profile_id (provenance) vs new scope_class; no profile_id=structural.
  • patch2/03-p7-status-propagation-and-aggregate-truth-table-2026-06-21.md — P7 HOLD propagation; FAIL > HOLD > PASS; five status fields; 10-row truth table.
  • patch2/04-final-patch2-report-for-gpt-codex-review-2026-06-21.md — final PATCH2 report, self-check, verdict.

Deliverables — RS-TKT-1 / Phase 1 (2026-06-22, TKT Base design package + future construction blueprint, additive)

Verdict: RS_TKT_1_READY_FOR_GPT_CODEX_REVIEW · Gate: REGISTRATION_HOLD · REGISTRATION_CAN_PROCEED = NO · 0 runtime mutations. Authorized by Codex ACCEPT_RS_TKT_0A_PATCH2_WITH_CAVEATS_FOR_PHASE_1_DESIGN (knowledge/current-state/reports/codex-rereview-rs-tkt-0a-patch2-2026-06-22.md). Design-only; does NOT authorize implementation or Phase 2. Prior 00–08, patch1/00–08, patch2/00–04 unchanged (revision 1); Phase 1 inherits PATCH1/PATCH2 by reference (see phase1-design/16). Subfolder phase1-design/:

  • phase1-design/00-phase1-read-inventory-and-source-status-2026-06-22.md — read inventory + source-tier ledger; mandatory Codex report read in full.
  • phase1-design/01-tkt-base-design-blueprint-scope-boundary-2026-06-22.md — what TKT Base is/is not; L0–L3 in scope, L4–L6 deferred; PASS-meaning statements.
  • phase1-design/02-tkt-base-level-policy-l0-l3-2026-06-22.md — per-level input/output/PASS/FAIL/HOLD + dependency chain.
  • phase1-design/03-tkt-base-checker-contract-schema-2026-06-22.md — per-brick contract fields + shared output schema (authority/registration = NONE).
  • phase1-design/04-tkt-base-fail-closed-forbidden-output-contract-2026-06-22.md — inherits PATCH2 6-conjunct predicate; token floor as versioned config; BAD-FC-001..008.
  • phase1-design/05-tkt-base-l3-split-governance-contracts-2026-06-22.md — four independent L3 bricks (AUTHORITY-FIREWALL / CLAIM-AUDIT / IDENTITY / NVSZ).
  • phase1-design/06-tkt-base-status-propagation-truth-table-2026-06-22.md — HOLD/N/A propagation; aggregate ∈ {PASS,FAIL,HOLD} (caveat-§6 closure); 10-row table.
  • phase1-design/07-tkt-base-nvsz-no-vector-evidence-contract-2026-06-22.md — raw-out-of-vector; ESCROW_E*/ROOT_E*; canonical hash_manifest.sha256; root undesignated.
  • phase1-design/08-tkt-base-rs-profile-provenance-contract-2026-06-22.md — profile_id(2) vs scope_class(3); no auto-promotion; RS5B stays self-reported draft.
  • phase1-design/09-future-construction-blueprint-package-layout-2026-06-22.md — future folder layout (drawing only, NON_EXECUTABLE).
  • phase1-design/10-future-construction-blueprint-module-boundaries-2026-06-22.md — future LEGO modules: input/output/dep/forbidden-dep/rollback/test/composition.
  • phase1-design/11-future-construction-blueprint-cli-and-io-contract-2026-06-22.md — pseudo-CLI/IO shape; Phase 2+ only; non-runnable.
  • phase1-design/12-future-construction-blueprint-fixture-and-oracle-layout-2026-06-22.md — fixture classes + one-code oracle + completeness rule.
  • phase1-design/13-future-construction-blueprint-report-json-md-schema-2026-06-22.md — future result.json/result.md schema (advisory; NONE effects).
  • phase1-design/14-future-construction-blueprint-nvsz-run-packet-layout-2026-06-22.md — future run-packet layout (placeholder root; no designation).
  • phase1-design/15-future-construction-blueprint-non-runtime-constraints-2026-06-22.md — full Phase 1/2 forbidden-runtime list + stop-state vocabulary.
  • phase1-design/16-compatibility-matrix-design-vs-codex-accepted-patches-2026-06-22.md — traceability from PATCH1/PATCH2 + caveats to design/blueprint/fixtures.
  • phase1-design/17-negative-fixture-matrix-and-expected-outcomes-2026-06-22.md — BAD-FC/L1/L3/NVSZ/RS/PROP fixtures with deterministic outcomes.
  • phase1-design/18-codex-style-self-validation-of-design-2026-06-22.md — adversarial self-check of the design (no fail-open).
  • phase1-design/19-codex-style-self-validation-of-construction-blueprint-2026-06-22.md — adversarial self-check of the blueprint (paper-only; no executable smuggling).
  • phase1-design/20-owner-decision-and-missing-input-register-2026-06-22.md — OD-1..11 + MCB-1/5/6 caveats; BLOCKS_CURRENT_PHASE = NONE.
  • phase1-design/21-phase2-readiness-checklist-design-only-2026-06-22.md — what Phase 2 would need (NOT authorization for Phase 2).
  • phase1-design/22-final-phase1-design-package-for-gpt-codex-review-2026-06-22.md — final Phase-1 report, self-validation, verdict, next step.

Deliverables — RS-TKT-1 / Phase 1 — PATCH1 (2026-06-22, Codex blocker closure: canonical fixture/oracle + dry-run readiness proof, additive)

Verdict: RS_TKT_1_PATCH1_READY_FOR_GPT_CODEX_REVIEW · Gate: REGISTRATION_HOLD · REGISTRATION_CAN_PROCEED = NO · 0 runtime mutations. Closes Codex NEED_RS_TKT_1_PATCH1_NEGATIVE_FIXTURE_MATRIX_INCOMPLETE (knowledge/current-state/reports/codex-review-rs-tkt-1-phase1-tkt-base-design-package-2026-06-22.md). Design-only / proof-doc-only; does NOT authorize Phase 2 or dry-run execution. Phase-1 00–22 unchanged (revision 1); premature completeness claims in 16/17/18/19/22 retracted-by-additive-supersession (see phase1-design/patch1/00 §3). Subfolder phase1-design/patch1/:

  • phase1-design/patch1/00-codex-blocker-closure-map-2026-06-22.md — 9 findings → closing file → proof method → zero-defect count → CLOSED.
  • phase1-design/patch1/01-canonical-fixture-oracle-schema-2026-06-22.md — canonical schema (status≠outcome), code registry, full normalized catalog; one code / one namespace / one layer per fixture.
  • phase1-design/patch1/02-total-brick-coverage-ledger-2026-06-22.md — 14 bricks (03 §6 ∪ 08 §6) each with positive + negative fixture; uncovered_bricks=0.
  • phase1-design/patch1/03-mandatory-contract-completeness-ledger-2026-06-22.md — 14×20=280 field checks; missing_mandatory_contract_fields=0.
  • phase1-design/patch1/04-regenerated-compatibility-and-traceability-matrix-2026-06-22.md — per-row canonical fixture + per-row NONE/NONE effects; supersedes 16 for traceability; traceability_missing_rows=0.
  • phase1-design/patch1/05-dry-run-readiness-input-permission-decision-register-2026-06-22.md — DR-1..DR-17 classified; only Owner authorization remains; unclassified=0.
  • phase1-design/patch1/06-count-based-self-validation-report-2026-06-22.md — all 20 zero-defect counts = 0 + adversarial probes safe=YES (count-based, not prose).
  • phase1-design/patch1/07-final-patch1-report-for-gpt-codex-review-2026-06-22.md — final PATCH1 report, self-check, verdict, next step.

Deliverables — RS-TKT-1 / Phase 1 — PATCH1B (2026-06-22, dry-run readiness preflight + adversarial proof, additive)

Verdict: RS_TKT_1_PATCH1B_READY_FOR_GPT_CODEX_CONFIRMATION · Gate: REGISTRATION_HOLD · REGISTRATION_CAN_PROCEED = NO · 0 runtime mutations. Re-closes Codex NEED_RS_TKT_1_PATCH1_NEGATIVE_FIXTURE_MATRIX_INCOMPLETE to the new "Codex confirms, does not discover" standard (self-check / self-count / self-break / self-fix / self-prove). Dry-run readiness preflight / proof-doc-only; does NOT authorize Phase 2 or dry-run execution. Reuses and strengthens patch1/00–07; Phase-1 00–22, patch1/00–07, patch2/00–04 unchanged (revision 1); premature claims in 16/17/18/19/22 stay retracted-by-additive-supersession (see patch1b-dryrun-readiness/08). All 23 zero-defect counts = 0. Subfolder phase1-design/patch1b-dryrun-readiness/:

  • phase1-design/patch1b-dryrun-readiness/00-codex-findings-full-closure-map-2026-06-22.md — F1–F9 closure + §10–§13 PASS-preserve + §14 caveats; required vs actual count per finding.
  • phase1-design/patch1b-dryrun-readiness/01-canonical-fixture-oracle-master-schema-2026-06-22.md — schema (R1–R6), status≠outcome, 30-code/9-namespace registry, disjoint fixture_type partition.
  • phase1-design/patch1b-dryrun-readiness/02-canonical-fixture-master-catalog-2026-06-22.md — all 46 fixtures (15 POSITIVE / 25 NEGATIVE / 6 ADVERSARIAL); one code/namespace/layer/brick each.
  • phase1-design/patch1b-dryrun-readiness/03-total-brick-and-contract-coverage-ledger-2026-06-22.md — 14 bricks × (pos+neg) + 14×20=280 contract fields + 70/70 LEGO boundaries.
  • phase1-design/patch1b-dryrun-readiness/04-regenerated-traceability-compatibility-and-dryrun-map-2026-06-22.md — 22 rows, per-row fixture + NONE/NONE effects + dryrun_relevance; supersedes 16.
  • phase1-design/patch1b-dryrun-readiness/05-dryrun-launch-readiness-packet-2026-06-22.md — RS-TKT-2-DRYRUN-READ-REPORT-INSPECTOR; safe-default paths/permissions; stop states; launch gates; DR-1..17.
  • phase1-design/patch1b-dryrun-readiness/06-adversarial-preflight-probe-results-2026-06-22.md — 15 mandatory probes safe=YES; 24-point checklist; 5 found-and-fixed ambiguities (FIX-1..5).
  • phase1-design/patch1b-dryrun-readiness/07-machine-count-zero-defect-proof-2026-06-22.md — all 23 counts = 0, each with definition/source/method/value/impact.
  • phase1-design/patch1b-dryrun-readiness/08-supersession-and-non-regression-map-2026-06-22.md — supersedes only proof/readiness defects; P1/P6/P7 unchanged; P2–P5 not reopened; gates closed.
  • phase1-design/patch1b-dryrun-readiness/09-final-patch1b-report-for-gpt-codex-confirmation-2026-06-22.md — final PATCH1B report, self-check, verdict, next step.

Deliverables — RS-TKT-1 / Phase 1 — PATCH1C (2026-06-22, DOT-bound dry-run readiness finalization, additive)

Verdict: RS_TKT_1_PATCH1C_READY_FOR_GPT_CODEX_CONFIRMATION · Gate: REGISTRATION_HOLD · REGISTRATION_CAN_PROCEED = NO · 0 runtime mutations. Closes Codex NEED_RS_TKT_1_PATCH1C_DRYRUN_READINESS_UNRESOLVED (knowledge/current-state/reports/codex-confirmation-rs-tkt-1-patch1b-dryrun-readiness-2026-06-22.md): PATCH1B-DRYRUN-REQUIRED-INPUT-CONTRADICTION (DR-12/13/14 resolved + recounted, no FIX-4 narrowing) + PATCH1B-DRYRUN-ARTIFACT-CARDINALITY-AMBIGUOUS (one artifact model) + the Owner "100% DOT, even dry-run via DOT" mandate (DOT_BOUND_DRYRUN_NOT_PROVEN). DOT decision = CREATE_NEW_DOT → DOT_TKT_DRYRUN_READ_REPORT_INSPECTOR (+ _VERIFY), admitted to the DOT handbook §19 (KB-admission only; dot_tools unchanged at 309; live registration deferred to Owner GATE-3). Dry-run readiness / proof-doc-only; does NOT authorize Phase 2, dry-run execution, or DOT runtime registration. Prior Phase-1 00–22, patch1/00–07, patch1b/00–09, patch2/00–04 unchanged (revision 1); supersession is additive (artifact schema in 13/05/21; OD-4/5/11 in 20). DOT handbook updated additively (KB rev 11→12, body §19/rev4). All required zero-gap counts = 0; artifact_models_count = 1; 17/17 adversarial probes safe. Subfolder phase1-design/patch1c-dot-bound-dryrun-readiness/:

  • phase1-design/patch1c-dot-bound-dryrun-readiness/00-codex-patch1b-blocker-closure-map-2026-06-22.md — 3 blockers → closure file → proof method → status → residual; Codex §8 measure answered (resolution+recount).
  • phase1-design/patch1c-dot-bound-dryrun-readiness/01-dot-inventory-reuse-or-create-decision-2026-06-22.md — handbook §3/§12 zone facts; candidate-DOT table; collision=0; DECISION = CREATE_NEW_DOT.
  • phase1-design/patch1c-dot-bound-dryrun-readiness/02-dot-bound-dryrun-execution-contract-2026-06-22.md — bound DOT code/bin/channel/mode/source/output/artifact; forbidden ops; stop states; authority/registration = NONE.
  • phase1-design/patch1c-dot-bound-dryrun-readiness/03-dr12-dr13-dr14-resolution-ledger-2026-06-22.md — DR-12/13/14 resolved (old→new value, evidence, phase2_required, blocks_dryrun=NO, proof); supersedes OD-4/5/11 open status.
  • phase1-design/patch1c-dot-bound-dryrun-readiness/04-single-artifact-contract-and-schema-supersession-2026-06-22.md — SINGLE_KB_MARKDOWN_REPORT, count=1; JSON/MD as embedded sections; supersedes separate result.json/result.md.
  • phase1-design/patch1c-dot-bound-dryrun-readiness/05-phase2-dryrun-launch-contract-final-2026-06-22.md — GATE-1/2/3 (GATE-3 compound: open + DOT register + gate open); no GATE-4; INVARIANTs hold.
  • phase1-design/patch1c-dot-bound-dryrun-readiness/06-dot-handbook-update-or-no-update-proof-2026-06-22.md — handbook §19 additive update proof; doc-only vs runtime line; §4.7 HOLD condition does not fire.
  • phase1-design/patch1c-dot-bound-dryrun-readiness/07-preflight-zero-gap-count-proof-2026-06-22.md — 20-row count table (all required = 0; artifact_models_count = 1); no definition-narrowing.
  • phase1-design/patch1c-dot-bound-dryrun-readiness/08-adversarial-dot-bound-dryrun-probe-results-2026-06-22.md — 17 probes safe=YES; 3 self-break found-and-fixed (hidden-GATE-4 / READY-overclaim / FIX-4 trap).
  • phase1-design/patch1c-dot-bound-dryrun-readiness/09-final-patch1c-report-for-gpt-codex-confirmation-2026-06-22.md — final PATCH1C report, self-check, verdict, mutation confirmation, next step.