GPT Final Approval — 23-P3D4 Prompt rev4

Date: 2026-05-08
Reviewer: GPT-5.5 Thinking / Incomex Hội đồng AI
Reviewed: knowledge/dev/laws/dieu44-trien-khai/prompts/23-p3d4-directus-exposure-design-review-prompt.md rev4

Verdict

APPROVED FOR DISPATCH.

P3D4 rev4 is now sufficiently bounded for a read-only design/inventory run. It includes the required law pre-read, law jurisdiction map, Directus DOT-only boundary, read-only inventory fallbacks, metadata-only default, and no-overlap compliance checks.

Accepted rev4 state

• No PG mutation.
• No Directus mutation.
• No Directus UI configuration/content operation.
• No Nuxt code.
• No Nuxt business logic.
• No direct PG from Nuxt.
• No Codex dispatch without user approval.
• No Hermes production start.
• Mandatory law pre-read exists.
• Law Jurisdiction Map exists.
• Read-only Directus inventory method + fallback exists.
• Read-only PG inventory method + fallback exists.
• No secret/token creation or disclosure.
• Metadata/ref-only default exists.
• DOT package outline for next reviewed pack exists.

Dispatch instruction

Đọc prompt từ KB rồi thực hiện:

knowledge/dev/laws/dieu44-trien-khai/prompts/23-p3d4-directus-exposure-design-review-prompt.md

Mục tiêu:
P3D4 là design review + inventory only.

1. Read mandatory laws.
2. Build law jurisdiction map.
3. Read P3D context files.
4. Inventory Directus read-only if approved access exists; otherwise mark LIMITED_NO_ACCESS.
5. Inventory PG read-only if approved access exists; otherwise mark LIMITED_NO_ACCESS.
6. Answer 8 design questions.
7. Create design review note:
   knowledge/dev/laws/dieu44-trien-khai/design/23-p3d4-directus-notification-exposure-review.md
8. Upload report:
   knowledge/dev/laws/dieu44-trien-khai/reports/23-p3d4-directus-exposure-design-review-report.md

Upload report kể cả FAIL/CRITICAL.

Hard boundaries for Agent

• No PG mutation: no CREATE/ALTER/DROP/INSERT/UPDATE/DELETE.
• No Directus config mutation.
• No Directus content operation.
• No manual Directus UI changes.
• No Nuxt code.
• No Nuxt business logic.
• No direct PG from Nuxt.
• No Codex dispatch without user approval.
• No Hermes production start.
• No law/tooling jurisdiction overlap.
• No secret/token creation or disclosure.
• Metadata/ref-only default; body content exposure requires separate review.

Expected PASS evidence

Report should include:

• law_preread=PASS;
• constitution_checked=PASS;
• assembly_first_checked=PASS;
• law_jurisdiction_map_included=PASS;
• law_overlap_check=PASS;
• constitution_no_violation=PASS;
• law07_pg_directus_nuxt_order_respected=PASS;
• data_connection_no_bypass=PASS;
• display_law_treeview_respected=PASS;
• inventory_directus=DONE;
• inventory_directus_access=FULL_READ_ONLY|LIMITED_NO_ACCESS;
• inventory_pg=DONE;
• inventory_pg_access=FULL_READ_ONLY|LIMITED_NO_ACCESS;
• inventory_assumptions_documented=PASS;
• design_questions_answered=8/8;
• recommendation=A|B|C|D;
• body_content_exposure=NOT_INCLUDED|OUT_OF_SCOPE_REQUIRES_SEPARATE_REVIEW;
• metadata_only_exposure_default=PASS;
• review_note_upload=PASS;
• directus_dot_only=true;
• directus_ui_view_only=true;
• user_no_directus_content_edit=true;
• nuxt_treeview_standard_documented=true;
• no_pg_mutation=true;
• no_directus_mutation=true;
• no_nuxt_code=true;
• no_nuxt_business_logic=true;
• no_direct_pg_from_nuxt=true;
• no_codex_dispatch=true;
• no_secret_creation_or_disclosure=true;
• no_law_jurisdiction_overlap=true;
• assembly_first_compliant=true;
• next required pack either:
  • P3D4B_DIRECTUS_DOT_EXPOSURE_PACKAGE_REVIEW if recommendation A/B/C;
  • DEFERRED if recommendation D.

Important interpretation

P3D4 may inspect available systems read-only. It must not treat missing Directus/PG access as permission to improvise. If access is missing, report limited access and make assumptions explicit.

P3D4 must not implement exposure. It only recommends the next reviewed package.

Next after Agent report

If P3D4 PASS:

1. GPT/User review P3D4 design review note.
2. If recommendation A/B/C is accepted, prepare P3D4B as a reviewed DOT/change package.
3. If recommendation D, defer implementation.
4. Nuxt remains no-code/no-business-logic unless a later reviewed display assembly pack confirms existing assembly only.