dot-iu-cutter v0.5 — Constitution source_document Seed Restart: Operations-First Framing

Phase: v0_5_constitution_source_document_seed_authoring_restart · Nature: DML_authoring_only__no_execution · Date: 2026-05-18 · doc 1 of 5

design_order: operations_first (current-operating-objectives-and-principles 2026-05-18 §3)
B6_status: CLOSED (GPT ruling dot-iu-cutter-v0.5-constitution-nuxt-checksum-cross-interval-gpt-ruling-2026-05-18)
dml_executed: 0 ; rows_inserted: 0 ; dry_run: none ; cut: none ; verify: none
decision_authority: GPT / User ONLY ; self_advance: PROHIBITED

This is doc 1 of 5. It states the operator workflow and exception model first. Schema/checksum/DML detail is derived in the companion docs, not led with. This package replaces the prior NO-DML-DRAFT (v0.5-constitution-source-document-seed-authoring/…seed-DML-draft) because B6 is now CLOSED and the canonical normalized checksum is ratified.

---

1. The operational goal this seed serves

The long-term target (operating-objectives §1, §4) is that a user issues one small command:

Cắt Hiến pháp

and the system runs MARK → REVIEW → CUT → VERIFY → STORE → REPORT with controlled gates, exception-only human attention, and a concise PASS/FAIL/BLOCKED report.

For Cắt Hiến pháp to be unambiguous, the system must answer six questions with zero human guesswork. This seed is the data row that lets the system answer the first five and gate the sixth:

operator_says: "Cắt Hiến pháp"
system_must_resolve_deterministically:
  1_which_source:   -> source_document_registry row            (identity, URL, family, docprefix)
  2_which_version:  -> source_document_version_registry row     (content_checksum-pinned, ratified)
  3_which_grammar:  -> via source_family -> grammar_profile      (LIVE: incomex-architecture-constitution-v4)
  4_which_scope:    -> enacted_only                              (source_family.status_policy LIVE; GPT R2)
  5_which_path:     -> dry-run -> command-review -> cut -> verify
  6_what_report:    -> PASS / FAIL / BLOCKED back to operator

2. The required pre-dry-run lookup chain (the operational contract this seed satisfies)

Before any Constitution dry-run/cut may run, the system must perform exactly this deterministic resolution, in order, and STOP on any miss:

pre_dry_run_lookup_chain:
  step_1 source_document:
    "Hiến pháp" -> exactly ONE source_document_registry row
    key: source_document_ref='incomex-constitution', address_docprefix='ICX-CONST'
    miss: 0 or >1 rows -> STOP E1 (ambiguous/absent anchor)
  step_2 source_document_version:
    that source_document_ref -> the authoritative source_document_version_registry row
    key: content_checksum (NOT NULL, UNIQUE per source_document_ref)
    miss: no version row -> STOP E2 (version not pinnable)
  step_3 checksum:
    controlled GET -> apply parser_profile nuxt-incomex-portal-constitution-v1
      -> recompute normalized content_checksum
    compare to registered content_checksum:
      == -> proceed
      != -> STOP E3 (drift) -> propose NEW version row + route to review (never silent re-cut)
  step_4 parser_profile:
    profile nuxt-incomex-portal-constitution-v1 must be the one recorded for the version
    (LIVE schema has NO parser_profile column -> recorded in provenance jsonb +
     this package + verification artifact, per GPT R-PP1)
    miss: no recorded profile / profile mismatch -> STOP E2-variant
  step_5 grammar_profile:
    source_family internal_incomex_constitution -> grammar_profile
    incomex-architecture-constitution-v4 (LIVE, derived via source_family, not a column)
    miss: unbound family -> STOP E4
  step_6 enacted_only_scope:
    source_family_registry.status_policy = enacted_only (LIVE) + GPT R2
    only ✅ enacted nodes cut-eligible; 📋 controlled-draft Điều 44, 📝 draft, ⛔ obsolete excluded
    violation: a non-✅ node would be cut -> STOP E5 (fail-closed)

The seed in this package creates steps 1 and 2 as one atomic unit, with the ratified checksum (step 3 anchor), the recorded profile (step 4), and a derivable grammar binding (step 5). Step 6 policy is unchanged and untouched by this seed.

3. What the operator should see

normal_path:
  operator: "Cắt Hiến pháp"
  system:   resolves source=ICX-CONST, version=<content_checksum f9d22d05…d1689>,
            grammar=incomex-architecture-constitution-v4, scope=enacted_only
            -> gated cut -> "PASS: N IU cut, M deferred (📋/📝/⛔), 0 errors. Report: <KB link>."
  human_attention: none unless exception
exception_path:
  system surfaces ONLY the exception + one-line reason + the safe default it took
  (e.g. "BLOCKED: Hiến pháp content drifted since registered version — new version
   proposed, cut withheld pending review").
technical_detail: always written to KB, never forced on the operator.

4. What is now unblocked vs still gated

now_unblocked_for_authoring (this package):
  - executable-for-review source_document + source_document_version seed DML
  - content_checksum = ratified canonical normalized value f9d22d05…d1689 (len 17791)
  - parser profile nuxt-incomex-portal-constitution-v1 recorded (provenance + plan, R-PP1)
still_gated (NOT in this package):
  - DML execution (gated: GPT command-review + sovereign authorization, separate phase)
  - first Constitution dry-run (gated on this seed being executed + verified, B5)
  - promotion of 📋 controlled-draft Điều 44 into scope (GPT R3 — DEFERRED)
  - the cut/verify itself

5. Exceptions that MUST stop the workflow

STOP_conditions:
  E1 source_not_resolvable:  "Hiến pháp" -> 0 or >1 source_document rows -> STOP
  E2 version_not_pinnable:   content_checksum / recorded profile absent -> STOP
  E3 checksum_drift_on_rerun: re-fetched content_checksum != stored -> STOP, propose new version
  E4 grammar_unbound:        source_family has no resolvable grammar_profile -> STOP
  E5 scope_violation:        a non-✅ node would be cut under enacted_only -> STOP (fail-closed)
  E6 authority_insufficient: source not authority_class=authoritative for node -> STOP
production_state_mismatch (governance):
  if PRE-checks find Constitution source_document/version rows already present
  (live facts say 0/0) -> STOP and report; do NOT upsert, do NOT assume.

E2 (the previous active blocker) is now resolved at the design/identity level: B6 is CLOSED and the version is pinnable under the ratified profile. Execution of the seed remains separately gated.

6. Statement

• Operations-first framing precedes technical detail (QG1). The pre-dry-run lookup chain (source_document → source_document_version → checksum → parser_profile → grammar_profile → enacted_only) is the operational contract this seed satisfies. enacted_only scope and Điều 44 deferral are preserved unchanged (QG6).
• No DML executed; no dry-run/cut/verify (QG4). doc 1 of 5; STOP after package → route GPT/User. Self-advance PROHIBITED.

Companion: DML-draft, rollback-draft, verification-plan, report.