dot-iu-cutter v0.5 — Constitution Snapshot-source MARK Patch Apply Log

Phase: v0_5_constitution_snapshot_source_MARK_entrypoint_patch_apply_and_CI · Nature: controlled_apply_attempt__BLOCKED_at_precondition__nothing_applied · Date: 2026-05-18 · doc 1 of 4

apply_status: BLOCKED  (STOP_AND_REPORT — patch application rule #1)
patch_applied: false ; files_written: 0 ; tests_run: false ; git_commit: false
first_dryrun: NOT executed ; cut/verify: none ; production/db: none
decision_authority: GPT / User ONLY ; self_advance: PROHIBITED

---

1. Objective of this phase

Apply the additive patch from KB doc 2 (…/v0.5-constitution-snapshot-source-mark-dryrun-entrypoint-code-authoring/…-code-diff-or-patch-2026-05-18.md) — 2 NEW files cutter_agent/dryrun.py + tests/test_dryrun_snapshot_mark.py — into the authoritative iu-cutter repo, run local tests, report git diff/status. No commit, no deploy, no dry-run/CUT/VERIFY/DB.

2. Repo location & git-state verification (live, this phase)

Authoritative location per KB SSOT (code-authoring report §2): /Users/nmhuyen/iu-cutter-build/repo/iu-cutter.

$ git -C /Users/nmhuyen/iu-cutter-build/repo/iu-cutter rev-parse --is-inside-work-tree
fatal: not a git repository (or any of the parent directories): .git
$ git -C /Users/nmhuyen/iu-cutter-build/repo/iu-cutter rev-parse --show-toplevel
fatal: not a git repository (or any of the parent directories): .git
$ git -C /Users/nmhuyen/iu-cutter-build/repo/iu-cutter status
fatal: not a git repository (or any of the parent directories): .git
$ git -C /Users/nmhuyen/iu-cutter-build/repo/iu-cutter remote -v
fatal: not a git repository (or any of the parent directories): .git
# parent walk repo -> / : NO .git found at any level   ("(walk done)", none)
# find /Users/nmhuyen/iu-cutter-build /Users/nmhuyen/.iu-cutter-stage -name .git : (none)
# find /Users/nmhuyen -maxdepth 4 -type d -name .git | grep -i cutter : (none)
$ git --version  ->  git version 2.39.5 (Apple Git-154)   # binary exists; NO repo

git_state_finding:
  repo_path:        /Users/nmhuyen/iu-cutter-build/repo/iu-cutter
  is_git_repo:      FALSE  (no .git in dir or ANY parent up to /)
  branch:           N/A  (no repo)
  HEAD:             N/A  (no repo)
  remote:           N/A  (no repo)
  also_checked:     /Users/nmhuyen/iu-cutter-build/repo, /iu-cutter-build,
                    /Users/nmhuyen/.iu-cutter-stage/iu-cutter — ALL not git repos
  .gitignore_present_but_no_.git: true (plain working-tree mirror, not a repo)
  consistency_with_KB_SSOT: MATCHES code-authoring report §2 ("NOT a git repository")

3. Patch application rule #1 — triggered

rule_1: "If repo is not a git repo or repo path is wrong: STOP_AND_REPORT."
evaluation:
  authoritative repo path is correct (KB SSOT) BUT it is NOT a git repository
  => rule_1 condition TRUE => STOP_AND_REPORT
action_taken: STOPPED. Patch NOT applied. No file written. No test run.
  No `git init` performed (creating/altering repo structure is NOT an allowed
  action this phase and is a sovereign decision — never invent missing authority).
  No plain-file drop performed (rule #1 says STOP_AND_REPORT; the task's apply+CI
  contract is git-bound: it requires branch/HEAD/git status/git diff which cannot
  exist without a repo; the code-authoring phase deliberately did NOT mutate the
  working tree for exactly this reason).

4. Rule #2 check (recorded for completeness — not reached for action)

$ ls /Users/nmhuyen/iu-cutter-build/repo/iu-cutter/cutter_agent/dryrun.py
ls: .../cutter_agent/dryrun.py: No such file or directory
$ ls /Users/nmhuyen/iu-cutter-build/repo/iu-cutter/tests/test_dryrun_snapshot_mark.py
ls: .../tests/test_dryrun_snapshot_mark.py: No such file or directory

target_files_pre_exist: NO (clean — no overwrite/clobber risk)
note: even though rule_2 is clean (additive would not overwrite), rule_1 is the
  controlling gate and is BLOCKING. No apply attempted.

5. Repo inventory (read-only, unchanged)

/Users/nmhuyen/iu-cutter-build/repo/iu-cutter:
  .gitignore (19B: "__pycache__/\n*.pyc"), README.md, cli.py, cutter_agent/, tests/
  cutter_agent/: __init__.py canonicalization.py db_adapter.py idempotency.py
    ledger.py phases.py signal.py signing.py state_machine.py   (NO dryrun.py)
  tests/: test_idempotency.py test_phase_contracts.py
    test_real_postgres_adapter.py test_security_boundaries.py
    test_state_machine.py                                       (NO test_dryrun_snapshot_mark.py)
mutation_performed: NONE (read-only ls/git-probe only)

6. Authoritative patch artifact (unapplied)

source_of_truth: KB doc 2 (code-diff-or-patch). Patch unapplied this phase.
  cutter_agent/dryrun.py            expected sha256
    f1f42e83ca23ba0b328f79cf04a8391ac699d1b307eb1b22b52c305f2efa1422
  tests/test_dryrun_snapshot_mark.py expected sha256
    31143968f322433cc5da62fa3ccf2a1fbe1905f461940c789a57cb0a116dc1b4
status: remains KB-only; NOT written to the repo (rule #1 BLOCKED).

7. Statement

• QG1 satisfied: patch applied to ZERO files (BLOCKED at precondition); no unauthorized file touched.
• QG2 satisfied: no dry-run / CUT / VERIFY / production DB.
• QG5 satisfied: no commit / no deploy.
• apply_status = BLOCKED (STOP_AND_REPORT, rule #1).
• doc 1 of 4; STOP after 4 docs → route GPT/User. Self-advance PROHIBITED.

Companion docs: patch-test-result (2), git-diff-status (3), patch-apply-ci-report (4).