dot-iu-cutter v0.5 Constitution First Dry-run Planning — GPT Review and Next Phase

Date: 2026-05-18 Reviewer / decision authority: GPT Reviewed package: knowledge/dev/laws/dieu44-trien-khai/v0.5-constitution-first-dryrun-planning/

Reviewed files:

files:
  - dot-iu-cutter-v0.5-constitution-first-dryrun-operational-framing-2026-05-18.md
  - dot-iu-cutter-v0.5-constitution-first-dryrun-readiness-and-scope-2026-05-18.md
  - dot-iu-cutter-v0.5-constitution-first-dryrun-command-package-2026-05-18.md
  - dot-iu-cutter-v0.5-constitution-first-dryrun-verification-and-cleanup-plan-2026-05-18.md
  - dot-iu-cutter-v0.5-constitution-first-dryrun-planning-report-2026-05-18.md

Verdict

first_dryrun_planning_package: PASS_WITH_BLOCKER_ACCEPTED
agent_behavior: PASS_CORRECT
source_identity_readiness: READY
execution_readiness: BLOCKED
reason: missing_snapshot_source_MARK_dryrun_entrypoint
nothing_executed: true

The package correctly identifies that the source identity foundation is ready, but the actual snapshot-to-candidate-IU MARK dry-run command does not yet exist as a ratified safe entrypoint. The dry-run must not be executed until this missing capability is designed and approved.

---

Accepted findings

accepted_readiness:
  source_document: LIVE_AND_VERIFIED
  source_document_version: LIVE_AND_SNAPSHOT_BOUND
  snapshot_artifact: PINNED_AND_REHASHABLE
  parser_refimpl: RATIFIED
  grammar_profile: AVAILABLE
  marker_map: FOUR_MARKERS_AVAILABLE
  scope_policy: enacted_only
  controlled_draft_Dieu_44: excluded

Accepted blocker:

accepted_blocker:
  missing_capability: cutter_agent_snapshot_source_MARK_dryrun_entrypoint
  existing_MARK_assumption: pre_existing_tac_logical_unit_or_restored_corpus
  required_new_mode: snapshot_text_to_candidate_manifest_artifact_only_no_DB_write

This is an application-layer capability gap, not a source identity gap.

---

Rulings on open decisions

OD-MC1 — matcher detection internals

ruling: DESIGN_BEFORE_EXECUTION

Matcher internals for the Constitution fixture must be made explicit before any dry-run execution:

required_matchers:
  - mc.icx.nguyen_tac
  - mc.icx.kien_truc_section
  - mc.icx.dieu
  - status_marker_detector
  - changelog_boundary_detector

A prose-only grammar profile is not enough for execution. The dry-run entrypoint must have deterministic matcher definitions and tests.

OD-G2 — leaf granularity

ruling: LEAF_IU_IS_DIEU_FOR_FIRST_DRYRUN

For the first Constitution dry-run, the canonical candidate IU leaf is DIEU.

Rationale:

rationale:
  - Điều is the closest legal/governance unit
  - lower-level bullets are not yet ratified as stable grammar leaves
  - first dry-run should test the document-wide pipeline without over-fragmentation
  - sub-bullet extraction may be a later enrichment phase

Group-vs-row enacted marker rule

ruling: GROUP_HEADER_STATUS_INHERITS_TO_CHILD_DIEU_UNTIL_NEXT_STATUS_SCOPE

If a status marker appears at a group/header level, child DIEU rows inherit that status until a new explicit status scope changes it. Explicit marker on a DIEU overrides inherited group status.

For first dry-run:

first_dryrun_scope_policy:
  include: DIEU_with_effective_status_enacted
  exclude: DIEU_with_effective_status_controlled_draft_or_draft_or_obsolete
  report_excluded_spans: true
  no_silent_drop: true

Điều 44 remains excluded because its effective status is controlled_draft.

---

Required next phase

Open a design/code-authoring phase for the missing entrypoint:

next_phase: v0_5_constitution_snapshot_source_MARK_dryrun_entrypoint_design
nature: design_and_command_authoring__no_dryrun_execution

Purpose:

purpose:
  - specify deterministic matchers for snapshot normalized content
  - define leaf segmentation as DIEU
  - implement or author a no-DB-write MARK dry-run entrypoint contract
  - produce artifact-only manifest output spec
  - prepare command-review package for first dry-run execution

This phase may inspect code read-only. Code changes are not automatically authorized unless the phase explicitly splits into a code authoring package and returns for review. No dry-run execution is authorized.

---

Required entrypoint contract

The missing entrypoint must satisfy:

entrypoint_contract:
  input:
    - source_document_version_id: icxconst-008a06ace23a96ea6cd456146e805c97
    - snapshot_artifact_path: knowledge/dev/laws/dieu44-trien-khai/snapshots/constitution/constitution-normalized-17660443e0f23e99.md
    - expected_snapshot_checksum: 17660443e0f23e994e1807cf8e22920951a9e70c598956dbd0e752f4f5cae80c
    - grammar_profile: incomex-architecture-constitution-v4
    - docprefix: ICX-CONST
    - scope_policy: enacted_only

  processing:
    - rehash snapshot BEGIN/END region
    - parse using deterministic matchers
    - derive effective status by group inheritance rule
    - emit DIEU-level candidate units only for enacted effective status
    - emit excluded rows for controlled_draft/draft/obsolete spans
    - derive canonical_address as ICX-CONST/<path>
    - preserve source spans and provenance

  output:
    - manifest.json or manifest.md
    - review_evaluation.md/json
    - coverage_proof.md/json
    - determinism_digest.md
    - dryrun_report.md

  forbidden:
    - any production DB write
    - CUT
    - VERIFY
    - fn_iu_create
    - source registry mutation
    - Directus/vector write

---

Still forbidden

still_forbidden:
  - first Constitution dry-run execution
  - CUT
  - VERIFY
  - production IU creation
  - production DB writes for manifest
  - schema change
  - Directus mutation
  - deploy/restart
  - git commit unless later code package explicitly requests approval
  - self-advance to execution

Final status

status: SOURCE_IDENTITY_READY__DRYRUN_BLOCKED_ON_SNAPSHOT_SOURCE_MARK_ENTRYPOINT
next_action: design_snapshot_source_MARK_dryrun_entrypoint