dot-iu-cutter v0.5 — First Constitution Snapshot MARK Dry-run · Execution Log

phase: v0_5_first_snapshot_MARK_dryrun_execution_resume_after_KB_outage
authority: GPT execution approval 2026-05-18 (REMAINS_VALID per KB-outage-blocked review)
executed_at: 2026-05-19 (resume; prior 2026-05-18 attempt BLOCKED by KB MCP outage only)
command: unchanged from approved package (no redesign, no flag add/remove)
result: PASS (exit 0)

1. KB availability (QG1)

kb_read:   CONFIRMED — read 3 SSOT items (KB-outage-blocked review, execution approval,
           command-review package) + verification plan
kb_upload: CONFIRMED — preflight note _preflight-kb-upload-check-2026-05-19.md created
verdict:   QG1 PASS — KB read+upload available BEFORE execution

2. Prechecks re-run (QG2 — all PASS)

P-1 branch : feature/constitution-snapshot-mark-dryrun                              PASS
P-1 HEAD   : afb7bfcc9b7bbb953bb00159479c9611e6ac4bd1                                PASS
P-2 tree   : git status --porcelain EMPTY                                            PASS
P-3 dryrun.py sha256 : f1f42e83ca23ba0b328f79cf04a8391ac699d1b307eb1b22b52c305f2efa1422  PASS
P-3 test sha256      : 454d9fc84e940fdcf9da10bf29d12c5c420e21b1147ccc8da6a29a81f2843a4a  PASS
P-4 DB env : PG_DSN/DATABASE_URL/DIRECTUS_URL/PGPASSWORD/PGHOST/PGUSER all UNSET     PASS
P-5 fixture region (independent rehash, standalone reimpl, not importing dryrun.py):
      sha256  = 17660443e0f23e994e1807cf8e22920951a9e70c598956dbd0e752f4f5cae80c    PASS
      length  = 17522                                                               PASS
      markers = {enacted:19, controlled_draft:1, draft:1, obsolete:1}               PASS
P-6 out-dir: $WD = mktemp -d /tmp/icx-const-first-dryrun.XXXXXX (mode 0700, OUTSIDE repo,
      $WD/manifest absent pre-run)                                                  PASS
P-7 unit CI (authorized, read-only): python3 -m unittest tests.test_dryrun_snapshot_mark
      → Ran 21 tests … OK  (21/21)                                                  PASS
P-8 command shape: contains --no-db-write --no-cut --no-verify, mode mark-manifest-only,
      scope enacted_only; NONE of the 5 unsupported flags                           PASS

3. Command executed (exactly once — QG3)

Executed from repo root /Users/nmhuyen/iu-cutter-build/repo/iu-cutter, DB env vars stripped via env -u, into ephemeral scratch $WD/manifest:

python3 -m cutter_agent.dryrun \
  --mode               mark-manifest-only \
  --no-db-write --no-cut --no-verify --fail-closed \
  --source-version-id  icxconst-008a06ace23a96ea6cd456146e805c97 \
  --snapshot-artifact  tests/fixtures/constitution-normalized-17660443e0f23e99.md \
  --expect-region-sha  17660443e0f23e994e1807cf8e22920951a9e70c598956dbd0e752f4f5cae80c \
  --expect-length      17522 \
  --expect-markers     'enacted=19,controlled_draft=1,draft=1,obsolete=1' \
  --grammar-profile    incomex-architecture-constitution-v4 \
  --parser-refimpl     nuxt-incomex-portal-constitution-v1.refimpl.r1 \
  --scope              enacted_only \
  --docprefix          ICX-CONST \
  --out-dir            "$WD/manifest" \
  --emit               manifest.json,review_evaluation.json,coverage_proof.json,determinism_digest.md,dryrun_report.md

4. Stdout + exit

{ "status": "PASS", "candidate_count": 60, "excluded_count": 4,
  "manifest_digest_sha256": "9d908a62fcf01bb88e05a1af4335b960710006ddcfd21c811ca63efb33dd324f",
  "production_touched": false, "db_write": "NONE" }

exit_code: 0
files_emitted (5, in $WD/manifest):
  manifest.json (84157 B, sha256 7d56f3ce066950ccef3de4156c5afeea81b2450b8e38393205b52c1fca012179)
  review_evaluation.json
  coverage_proof.json
  determinism_digest.md
  dryrun_report.md
post_run git status --porcelain: EMPTY (repo tree clean; artifacts only in $WD)

QG3 PASS — approved command executed exactly once, exit 0.