dot-iu-cutter v0.3 — Read-Observability Dry-Run RE-RUN Artefact Index

document_path: knowledge/dev/laws/dieu44-trien-khai/v0.3-dry-run/dot-iu-cutter-v0.3-read-observability-dry-run-rerun-artefact-index-2026-05-16.md
revision: r1
date: 2026-05-16
phase: v0.3 — read-observability dry-run RE-RUN artefact index / chain of custody
dry_run_status: PASS_WITH_NOTES (all 4 FN resolved; DDL/rollback unchanged)

---

§1 — VPS Artefacts

work_dir: /opt/incomex/backups/dieu44_v0_3_readobs_dryrun_rerun_20260516T230306Z/
files:
  - prod-directus-20260516T230306Z.sql
      role: fresh READ-ONLY prod backup (restore source for the re-run env)
      size_bytes: 667341377
      sha256: b7840f2d81573f8e4cc91bd362d9c90e54158858891f28ea019c4f993dfaea4d
  - v0_3_read_observability.sql
      role: canonical DDL — UNCHANGED, SHA-gated to GPT-pinned
      sha256: 065ee6d3f1aac760715cb6cc1bc8aa243d680fa20128a3c05e2b679f318e3b04
  - v0_3_read_observability_rollback.sql
      role: canonical rollback — UNCHANGED, SHA-gated to GPT-pinned
      sha256: 059f1dcf0154eac260a0b47c08c161ee45ecb7a8b60d634349da894d7e611a5c
  - SHA256SUMS  (aggregate of the above three)
  - logs/rerun_<ts>.log     (full orchestrator transcript)
  - logs/restore_<ts>.log   (env restore; benign role-absence noise only)
  - logs/ddl_<ts>.log       (BEGIN/CREATE×/GRANT×/COMMIT; rc=0)
  - logs/rollback_<ts>.log  (REVOKE×/DROP×/COMMIT; rc=0)
corrected_harness: /root/v0_3_readobs_dryrun_rerun.sh
  sha256: 5f9a30ab787f5f206d0391714cc0105eadf3600badaeba4cb61596bddef48dc4
  (authored locally; scp'd byte-identical; not edited on host)

§2 — Environment Identity

dry_run_env: pg-dryrun-v0.3-readobs-rerun-2026-05-16
  image: postgres:16 | published_port: NONE | ephemeral: true
  sysid: 7640629181421084711  (≠ prod 7611578671664259111 — asserted pre-DDL)
  status: torn down (docker rm -f; volume prune; confirmed absent post-run)
production: container postgres / db directus / sysid 7611578671664259111
  touched: READ-ONLY only (catalog SELECT + one pg_dump); Up 4 weeks (healthy);
  cg=12, no cutter_ro, no v0.3 views, no RLS, directus_permissions=1173 — all
  unchanged pre→post
note: a first provisioning attempt (TS=20260516T230114Z) aborted SAFELY on an
  env-readiness race (postgres image first-boot restart vs poll); its env was
  removed, production untouched; harness readiness wait then hardened. The
  successful run is TS=20260516T230306Z (this index).
protected_dry_run_envs: untouched

§3 — Document Set (v0.3-dry-run/, all r1)

this_rerun:
  - dot-iu-cutter-v0.3-read-observability-dry-run-rerun-execution-report-2026-05-16.md
  - dot-iu-cutter-v0.3-read-observability-dry-run-rerun-verification-results-2026-05-16.md
  - dot-iu-cutter-v0.3-read-observability-dry-run-rerun-artefact-index-2026-05-16.md (this)
prior_run (superseded by this re-run; retained for audit):
  - dot-iu-cutter-v0.3-read-observability-dry-run-execution-report-2026-05-16.md (FAIL_HARNESS_FALSE_NEGATIVE)
  - …-dry-run-verification-results-2026-05-16.md
  - …-dry-run-artefact-index-2026-05-16.md
upstream (GPT-PASSed, UNCHANGED): v0.3-ddl-authoring/ ddl-draft (065ee6d3…) +
  rollback-draft (059f1dcf…)

§4 — Status & Next

dry_run_status: PASS_WITH_NOTES
all_4_FN_resolved: TRUE
ddl_rollback_verdict: SOUND & UNCHANGED (SHA-gated to GPT-pinned)
notes: N-1 PG-default PUBLIC USAGE (acknowledge in command-review); B-4 member
  binding deferred; B-5 app-role tightening separate workstream
next_recommended_step: GPT review of the re-run report → (if PASS) GPT
  explicitly authorizes the production command-review phase. command-review is
  NOT allowed yet; no production action; Agent self-advance PROHIBITED.

End of v0.3 read-observability dry-run RE-RUN artefact index.