dot-iu-cutter v0.5 Cut-plan Dry-run + Writer Decision — GPT Ruling

Date: 2026-05-19 Reviewer / decision authority: GPT Reviewed package: knowledge/dev/laws/dieu44-trien-khai/v0.5-cutplan-dryrun-and-writer-decision-package/

Verdict

macro_task_result: PASS
agent_behavior: PASS_CORRECT
cutplan_dryrun: CLOSED_PASS
writer_authoring_brief: READY
production_mutation: NONE
CUT_authorized: false
VERIFY_authorized: false

The cut-plan dry-run is accepted as the official first S2 cut-plan dry-run. It was artifact-only, deterministic, and net-zero. The writer authoring brief is sufficient to open the next DB-isolated writer authoring macro-task.

Accepted cut-plan facts

cutplan_dryrun:
  status: PASS
  mode: cut-plan-only
  no_db_write: true
  production_touched: false
  candidate_count: 60
  excluded_dieu_44: true
  levels:
    NGUYEN_TAC: 15
    KIEN_TRUC_SECTION: 3
    DIEU: 42
  all_enacted: true
  idempotency_keys_distinct: true
  reconstruction_ok: true
  cut_plan_digest: edcae74f...
  deterministic_rerun_equal: true
  repo_HEAD: d66a60d9d7d11d60366825b08e0ea3d5d2d6aeef

OD-W1..OD-W9 rulings

OD_W1_granularity:
  ruling: ACCEPT_RECOMMENDATION_ALL_60_ARE_INFORMATION_UNIT_ROWS
  note: preserves candidate_count, reconstruction, and planner cardinality

OD_W2_unit_kind:
  ruling: ACCEPT_RECOMMENDATION_UNIT_KIND_LAW_UNIT
  note: no new vocab seed required

OD_W3_parent_container:
  ruling: ACCEPT_RECOMMENDATION_PARENT_OR_CONTAINER_REF_BY_ADDRESS_PATH
  note: top-level parent/container is NULL; no synthetic root; count remains 60

OD_W4_canonical_address:
  ruling: ACCEPT_RECOMMENDATION_VERBATIM_ADDRESSES
  note: canonical DIEU addresses remain fixed; status excluded from address

OD_W5_idempotency_collision_guard:
  ruling: ACCEPT_RECOMMENDATION_OD1_KEY_PLUS_PREEXISTENCE_CHECK_PLUS_UNIQUE_BACKSTOP_PLUS_G_CUT_ONCE

OD_W6_vocab:
  ruling: ACCEPT_RECOMMENDATION_NO_NEW_VOCAB_SEED_FOR_LAW_UNIT_MAPPING
  note: treat as precheck; fail closed if drift

OD_W7_writer_execution_staging:
  ruling: ACCEPT_RECOMMENDATION_DB_ISOLATED_WRITER_FIRST_THEN_CREDENTIAL_SIGNING_THEN_PROD_GATE

OD_W8_lifecycle_status:
  ruling: ACCEPT_ENACTED_OPEN_FOR_FIRST_WRITER
  note: writer must keep scope enacted_only and exclude Điều 44/draft/obsolete

OD_W9_body_title_derivation:
  ruling: ACCEPT_RESOLVED_DETERMINISTIC_DERIVATION_FROM_SNAPSHOT_SPAN
  note: writer must assert sha256(body)==span_sha256 and fail closed

Authorized next macro-task

next_phase: v0_5_cutwrite_DB_isolated_writer_authoring_and_scratch_birth_gate_dryrun
style: open_goal_prompt
production_write: not_authorized

Goal: build and test the first writer capability in DB-isolated/scratch mode only. It should consume the accepted manifest/cut-plan, produce 60 IU + 60 unit_version rows in an isolated database or scratch equivalent, verify the birth-gate contract, and prepare the later credential/prod-write path.

Still forbidden

forbidden:
  - production CUT execution
  - VERIFY execution
  - production DB write
  - production IU creation
  - deploy/restart
  - merge/push/tag
  - mutate source_document/source_version
  - run writer against production DB
  - self-advance to production execution

Final status

status: CUTPLAN_DRYRUN_CLOSED_PASS__WRITER_OD_RULINGS_RATIFIED__W3_DB_ISOLATED_WRITER_AUTHORING_NEXT
next_action: run_open_goal_macro_for_cutwrite_authoring_and_isolated_birth_gate_dryrun