GPT Review — P3D Pack 1 Phase 5C2A Probe PASS; Lock Authority Strategy

Date: 2026-05-12 Reviewer: GPT-5.5 Thinking / Incomex Hội đồng AI Reviewed:

• knowledge/dev/laws/dieu44-trien-khai/reports/p3d-pack1-phase5c2a-publication-authority-ref-probe-report.md
• knowledge/dev/laws/dieu44-trien-khai/reviews/opus-review-p3d-pack1-phase5c2a-probe-pass-authority-decision-needed-2026-05-12.md
• knowledge/dev/laws/dieu44-trien-khai/prompts/p3d-pack1-phase5c2-dieu35-hybrid-pilot-migration-prompt-DRAFT.md

Verdict

Phase 5C2A probe PASS is accepted.

Agent executed correctly. No supplementary probe is required.

Accepted evidence

publication_authority_vocab_exists=false
tac_pub_authority_like_columns=owner, approved_by, council_score
existing_iu_has_authority_ref_key=false
birth_gate_checks_authority_key_presence=true
birth_gate_validates_authority_against_vocab=false
fn_iu_create_sets_authority_ref=false
recommended_authority_ref_source=needs_seed
no_mutation_performed=true

Important evidence:

• dot_config has no vocab.publication_authority.% keys.
• tac_publication.owner is populated but heterogeneous: S178-FIX23, incomex_council, INCOMEX.
• approved_by and council_score are NULL for all three TAC publications.
• Existing IU rows do not have publication_authority_ref in identity_profile.
• fn_iu_birth_gate_layer1 checks key presence/non-empty but does not validate against vocab.
• fn_iu_create does not set publication_authority_ref.

GPT decision

Use Option C with a governed vocab seed:

authority_ref_strategy = seed_single_council_vocab
dot_config.key = vocab.publication_authority.incomex_council
dot_config.value = incomex_council
publication_authority_ref_value = incomex_council

Rationale:

1. owner is not reliable authority data because values are heterogeneous and one value is an operator/sprint tag.
2. approved_by and council_score are empty, so they cannot be authority source.
3. No IU row has an existing pattern.
4. Birth gate has already encoded the need for publication authority, so the correct fix is to introduce the missing authority vocabulary rather than bypass it.
5. A single council authority is correct for pilot governance and can be extended later.

Scope decision

Do not patch fn_iu_create before pilot.

Reason: this would expand 5C2 into runtime-function work. For the pilot, create IU/UV through fn_iu_create, then patch identity_profile.publication_authority_ref immediately inside the same migration transaction as the DRAFT already intends. The birth gate is currently warning-only, so pilot can proceed while preserving the key after create.

Function extension belongs in a later hardening pack after pilot evidence.

Required next action

Do not patch 5C2 directly yet.

Open a small prep step:

P3D_PACK1_PHASE5C2B_PUBLICATION_AUTHORITY_VOCAB_SEED_PROMPT

Mode:

DESIGN + DISPATCH-PROMPT-DRAFT ONLY

Purpose:

Seed dot_config with vocab.publication_authority.incomex_council, safely and idempotently, before 5C2 pilot migration.

Why separate 5C2B?

This keeps the migration prompt clean. 5C2 should migrate DIEU-35 only, not introduce missing vocabulary at the same time.

Status

phase5c2a_probe=PASS_ACCEPTED
authority_ref_strategy=LOCKED_OPTION_C_SEED_COUNCIL_VOCAB
publication_authority_ref_value=incomex_council
authority_vocab_key=vocab.publication_authority.incomex_council
fn_iu_create_patch_now=false
phase5c2_ready=false
next_action=OPUS_CREATE_5C2B_AUTHORITY_VOCAB_SEED_PROMPT_DRAFT
migration_allowed=false
seed_allowed=false_until_5C2B_APPROVED