dot-iu-cutter v0.5 — First Constitution Snapshot CUT · Capability Assessment + Objective & Scope

Phase: v0_5_constitution_first_snapshot_CUT_command_review · Nature: review_design_only__no_execution · Date: 2026-05-19 · doc 1 of 5

package_status: AUTHORED_FOR_REVIEW
cut_runnable_command: NOT_AUTHORABLE_YET (no ratified CUT entrypoint in committed code)
cut_phase_status: BLOCKED (missing-capability; mirrors the MARK lineage R9 framing)
nothing_executed: true · no CUT · no VERIFY · no DB/IU/Directus/vector · no source mutation
self_advance: PROHIBITED

1. CUT objective and exact scope (required item 1)

objective: Persist the accepted, pinned MARK manifest as canonical Internal Units (IU) —
  one IU per accepted candidate — into the governed store, append-only, with full provenance
  binding to the pinned snapshot identity, exactly once (idempotent), excluding Điều 44.
exact_scope:
  input_identity (PINNED — the accepted MARK dry-run output):
    manifest_digest_sha256:    9d908a62fcf01bb88e05a1af4335b960710006ddcfd21c811ca63efb33dd324f
    manifest_json_file_sha256: 7d56f3ce066950ccef3de4156c5afeea81b2450b8e38393205b52c1fca012179 (84157 B)
    candidate_count:           60   (NGUYEN_TAC=15, KIEN_TRUC_SECTION=3, DIEU=42)
    excluded_count:            4    (Điều 44 UOSL controlled_draft; Điều 34 draft; 2 obsolete)
    source_document_version_id: icxconst-008a06ace23a96ea6cd456146e805c97
    snapshot_region_sha256:    17660443e0f23e994e1807cf8e22920951a9e70c598956dbd0e752f4f5cae80c
    snapshot_region_length:    17522 ; markers {enacted:19,controlled_draft:1,draft:1,obsolete:1}
    docprefix:                 ICX-CONST ; scope_policy: enacted_only
  in_scope:  the 60 enacted candidates ONLY → 60 IU rows (address ICX-CONST/<path>)
  out_of_scope (HARD):  Điều 44 (controlled_draft, tier_2_explicit_row_marker) and the other
    3 excluded rows — NEVER cut unless separately + explicitly authorized.
  cardinality_invariant:  IU rows created == candidate_count == 60 (no more, no fewer)

2. Capability assessment of the committed code (afb7bfc) — the controlling finding

Verified live, read-only, on feature/constitution-snapshot-mark-dryrun @ afb7bfcc9b7bbb953bb00159479c9611e6ac4bd1, tree clean:

two_disjoint_code_worlds_exist_in_committed_afb7bfc:
  A_ratified_snapshot_bound_entrypoint:
    file: cutter_agent/dryrun.py (sha256 f1f42e83…2efa1422)
    capability: MARK ONLY. mode!=mark-manifest-only ⇒ exit 2 REFUSED (dryrun.py:463).
      Import-isolated, stdlib-only; does NOT import db_adapter/phases/ledger/signal ⇒
      CANNOT open a DB, write a row, call fn_iu_create, CUT or VERIFY — by construction.
    binds_to: the pinned Constitution snapshot; PRODUCED the accepted manifest 9d908a62…
  B_v0_4_dry_run_only_skeleton:
    files: cli.py, cutter_agent/{phases,db_adapter,ledger,state_machine,signal,signing,
      idempotency,canonicalization}.py
    capability: a generic MARK→sweep→REVIEW→CUT→VERIFY runtime over a LocalSignal JSON +
      InMemoryDryRunAdapter. cli.py REFUSES --production: "production mode is NOT authorized
      in the v0.4 code-authoring cycle … separately-gated future cycle (requires the
      cutter_exec/cutter_verify credential cycle + GPT review)". db_adapter production
      connection REFUSES in v0.4 (no DSN/env/secret). phases.cut() consumes an entry_id
      pipeline, NOT the dryrun manifest.json.
controlling_conclusion:
  - There is NO committed code path that takes the accepted manifest (digest 9d908a62…)
    and produces IU/DB rows. World A cannot write; World B does not consume the manifest
    and refuses production.
  - The cutter_exec / cutter_verify credential cycle (separation-of-duty principals,
    DOT-991/DOT-992 lanes) is DESIGN-ONLY in KB and NOT built/granted.
  ⇒ A runnable production CUT command is NOT AUTHORABLE without fabricating flags against a
    non-existent entrypoint (the exact failure the MARK command-package forbade — "OMITTED
    ON PURPOSE … would crash"). Producing a fake runnable command would be dishonest.
cut_phase_status: BLOCKED — missing ratified snapshot-manifest→CUT capability.

3. What this package therefore delivers

A faithful command review/design package (not a green-lit runnable production command): the CUT contract, prechecks, the mutations CUT would perform, the explicit write/no-write statement, rollback, the VERIFY plan, invariants, and risk — followed by STOP → GPT/User for the ruling on the separately-gated capability sub-phases. See docs 2–5.

doc 1 of 5. Nothing executed. Self-advance PROHIBITED.