P3D — B3-F1c-d Dispatch Bridge Decision Design Report (Patched)

Date: 2026-05-13 Author: Opus Patched: 11 items per GPT review

Summary

Evaluated 4 dispatch options. Recommended Option C — Agent Data API Bridge — PENDING PROBE. Direction accepted by GPT; details must be verified by read-only probe before any compilation or execution.

Option evaluation

Option	Verdict	Reason
A. Nuxt direct PG	❌ Reject	Zero PG clients in Nuxt, creates new pattern + dependency
B. Directus extension	❌ Reject	No isolated-vm in v11.5.1, no extension infra in repo
C. Agent Data API bridge	✅ Recommend (PENDING PROBE)	PG access exists (verify role+privilege), Flow credentials exist (verify), zero new deps expected (verify)
D. Alternative	N/A	No alternative discovered

Patches applied (11 items)

#	Patch	Applied to
1	Route/auth/body → CANDIDATE, probe-required	Design §1, §3
2	Removed hardcoded ssh/repo path → discovery-first	Prompt Phase 0
3	Route probe → full app tree (routers/modules/middleware)	Prompt Phase 3
4	PG role → discover, not assume directus	Prompt Phase 2
5	system_issues INSERT privilege → probe for discovered role	Prompt Phase 2
6	Function call → marked DML-affecting, separate approval	Design §1, Prompt §6
7	Flow seed → default inactive, activation = separate step	Design §1, Prompt §7
8	Cadence → restated as policy/candidate, not inherited	Design §1, Prompt §7
9	dot_config uniqueness → check constraint + index	Prompt Phase 5
10	Final fields → strengthened with role/privilege/status/reason	Prompt final
11	Report confidence → PENDING_PROBE, verify in artifacts	This report

| 12 | R2 | Secret redaction rule + secrets_redacted field | Prompt throughout | | 13 | R2 | Project root / compose path → confirm existence first | Prompt Phase 0 | | 14 | R2 | Container name → discover from docker ps | Prompt Phase 0 | | 15 | R2 | Safe SQL quoting for discovered PG role | Prompt Phase 2 | | 16 | R2 | Endpoint compile gate: ALL prerequisites must be true | Prompt Phase 6 | | 17 | R2 | Flow seed requires endpoint_code_compiled=true | Prompt Phase 7 | | 18 | R3 | PG container discovery added to Phase 0 | Prompt Phase 0 | | 19 | R3 | Secret-bearing grep → safe commands (filenames/redacted only) | Prompt Phase 1, 2 | | 20 | R3 | Design section numbering fixed (duplicate §5 → §7) | Design | | 21 | R4 | ssh contabo → environment-neutral VPS context discovery | Prompt Phase 0 |

Governance status

b3f1c_d_fourth_pass_patch_status=PASS
ssh_contabo_removed=true
vps_context_neutralized=true
vps_context_blocked_reason_added=true
vps_execution_context_final_field_added=true
agent_probe_allowed=false_until_gpt_review
scheduler_execution_allowed=false
b3f_complete_allowed=false
phase5c2_migration_allowed=false
next_recommended_action=GPT_REVIEW_B3F1C_D_FOURTH_PASS_PATCHED_DOCS

B3-F1c-d Dispatch Bridge Report | Patched | Opus | 2026-05-13