dot-iu-cutter v0.5 — Constitution Hardtest Design Report

Date: 2026-05-17 Phase: v0_5_constitution_hardtest_and_information_unit_factory_master_plan Nature: DESIGN ONLY. Routes the package to GPT review. Nothing executed.

---

1. What was produced

8 design documents under knowledge/dev/laws/dieu44-trien-khai/v0.5-constitution-hardtest-design/:

package:
  1: dot-iu-cutter-v0.5-constitution-hardtest-master-plan-2026-05-17.md
  2: dot-iu-cutter-v0.5-source-document-ingestion-pipeline-design-2026-05-17.md
  3: dot-iu-cutter-v0.5-canonicalization-and-address-grammar-design-2026-05-17.md
  4: dot-iu-cutter-v0.5-information-unit-label-metadata-registry-master-design-2026-05-17.md
  5: dot-iu-cutter-v0.5-scale-index-and-volume-execution-roadmap-2026-05-17.md
  6: dot-iu-cutter-v0.5-sql-nosql-projection-and-rebuild-strategy-2026-05-17.md
  7: dot-iu-cutter-v0.5-constitution-hardtest-risk-and-gate-plan-2026-05-17.md
  8: dot-iu-cutter-v0.5-constitution-hardtest-design-report-2026-05-17.md  # this

---

2. Headline findings

findings:
  F1_CRITICAL: the configured source URL is the INTERNAL "Hiến pháp Kiến trúc Hệ
    thống Incomex v4.6.3" (KB-7294 rev44), NOT the Vietnamese national 2013
    Constitution. Its hierarchy = 15 Nguyên tắc / Kiến trúc Hạ tầng A·B·C /
    Mục lục Luật Điều 0..44 with ✅/📋 status markers. There is NO
    Chương/Khoản/Điểm tree. The handoff's grammar assumption is invalid for this
    fixture. -> escalated as OD-G1 / risk R-SRC-1.
  F2: core ledger (v0.1–v0.4) is correct for single-IU append-only CUT/VERIFY but
    NOT complete as a production IU factory; missing layers identified and designed.
  F3: pre-scale index DDL is authored + GPT-PASSed but UNEXECUTED; it is the hard
    prerequisite for any volume/full-document work.
  F4: volume estimate from the handoff (300–500 IU) is unreliable until leaf
    granularity (OD-G2) is ruled, because it assumed the wrong grammar.
  F5: anti-hardcoding is now binding across ingestion, grammar, label/metadata,
    and projection (no hardcoded URL/label/key/grammar/collection/DSN).
  F6: SQL remains SSOT; vector/NoSQL is rebuildable projection only; JSONB is not
    hidden authority (hot keys promoted via audited sovereign-gated ledger).
  F7: rollback for multi-IU = forward-compensation only; document-wide delete
    rollback is forbidden.

---

3. Cắt hiến pháp end-to-end (designed, not enabled)

S0 intent-resolve → S1 ingest+checksum+version → S2 canonicalize (grammar-profile detected) → S3 plan → S4 dry-run-at-volume → S5 staged production (sovereign, checkpoint/resume, forward-compensation) → S6 projection rebuild → S7 closeout. Full detail: master plan §2; per-layer docs 2–6.

---

4. Sequencing recommendation

recommended_next: Q1 index DDL dry-run -> command review (Route A continue)
caveat: GPT may re-prioritize Q6/Q7 (source registry + grammar profile) FIRST,
        given F1 — cutting the Constitution before a validated grammar profile
        and OD-S1 authority ruling would be unsafe.
must_rule_before_any_constitution_dry_run: [OD-G1, OD-G2, OD-S1, OD-M1]

---

5. Consolidated open decisions for GPT / User

open_decisions:
  OD-G1: confirm fixture grammar = incomex-architecture-constitution-v4 (NOT 2013)
  OD-G2: leaf-IU granularity (Điều vs sub-bullet vs Nguyên tắc)
  OD-S1: source authority sufficiency + enacted-only policy (exclude 📋 Điều 44?)
  OD-A1: canonical_address cross-document namespacing (docprefix scheme)
  OD-M1: per-IU vs document-level manifest (+15 invariant impact)
  OD-V1/V2/V3: dry-run-at-volume fixture, N-ladder, perf thresholds
  OD-I1: index execution route (continue Q1 now vs hold for ratification)
  OD-L1..L5: label/metadata registry shape, cardinality, mutability, promotion, ownership
  OD-P1..P4: projection store/model/cadence/scope (or defer to v0.6)
  OD-R1: forward-compensation record shape for multi-IU corrections

---

6. Do not run yet

Every action below is forbidden until separately and explicitly authorized:

forbidden:
  - Cắt hiến pháp execution (any batch)
  - cut the Constitution / full_document_CUT_VERIFY
  - run CUT or VERIFY
  - second_production_IU
  - bulk_cut
  - production_reclassification_batch
  - any production write
  - schema_migration
  - index_DDL_execution (the 7 authored indexes stay unexecuted)
  - label_registry_schema_creation / register any real label or metadata key
  - tier_normalization_write (DIEU_32 / DIEU_35)
  - dry_run_at_volume execution (designed only)
  - vector_NoSQL_integration / any vector or NoSQL write / projection build
  - alias_writes (canonical_address_alias)
  - deploy or restart of any service
  - code_change without an explicitly opened code phase
  - Agent self-advance across any gate
read_only_used_for_grounding_only:
  - KB document reads
  - one read-only `git` status on VPS code SSOT
  - one read-only GET of the source URL for grammar grounding
  - NO secrets read

---

7. Git status (no code change, no commit)

git:
  repo_ssot: /opt/incomex/dot   # VPS authoritative; local ~/.iu-cutter-stage and
                                # ~/iu-cutter-build/repo are non-git snapshots
  branch: main
  HEAD: e93424b5ff7fa5e4b8406131977ce4339cd0856a   # == accepted HEAD (handoff §1.2)
  git_status_short_iu_cutter: (empty — clean, no pending changes)
  code_changed: false
  commit_made: false

---

8. Status

status: design_only_package_complete
routing: GPT review of v0.5 Constitution Hardtest design package
agent_self_advance_to_execution: PROHIBITED
ready_for_gpt_review: true