dot-iu-cutter v0.6 O8F PASS Next O9

Date: 2026-05-21

O8F is accepted as PASS. It closed F2, F3, and GAP6 with source code, tests, deployment, and non-persistent VPS proofs.

Accepted delivery:

• Mac SSOT commit fdcf580.
• F2 live-text sourcing closed.
• F3 generic governance and verify recorders closed.
• GAP6 non-mutating compensation and revert planner closed.
• Tests passed 471/471 on Mac and VPS.
• Artifact deployed to Contabo side-by-side.
• Real DB rollback-only proof passed for generic recorder inserts across governance tables.
• execution_enabled stayed false.
• No persistent production rows changed.

Residual blockers:

• F1 partial: full live adapter bodies need approved execution flip.
• F4 open: backup key or runner readiness.
• GAP7 open: approval for first orchestrator-managed production run.
• GAP8 open: safe target document.
• Grant audit item: cutter_exec lacks SELECT on verify_result and cut_change_set_affected_row.

Macro sizing note: O8F was a real implementation macro and still completed in about 22 minutes. The next macro must aim to close the full first-run path, not another sub-gap.

Selected next macro: O9_FIRST_AUTOMATED_PRODUCTION_RUN_READINESS_AND_OPTIONAL_EXECUTION.

Recommended effort: xhigh. Default host: VPS. Use Mac only if source patch is unexpectedly required.

Scope:

1. Live precheck on VPS.
2. Verify deployed O8F state.
3. Close or package F4 backup readiness.
4. Perform grant audit and prepare minimal grant command package for missing SELECTs.
5. Discover safe target or prepare target intake package.
6. Validate approval package and SG1/SG2 semantics.
7. If explicit valid approval is present, run first orchestrator-managed production run with backup, scoped enable, verification, compensation readiness, and disable after run.
8. If approval is not present, stop at READY_FOR_SOVEREIGN_APPROVAL with runnable command package.

No fake PASS. Persistent production changes only if explicit valid approval is found and all prechecks pass.