dot-iu-cutter v0.5 — Constitution Source Seed FROM SNAPSHOT DML Revision Report

Phase: v0_5_constitution_source_seed_from_snapshot_DML_revision · Nature: DML_revision_only__no_execution · Date: 2026-05-18 · doc 4 of 4

per_ruling: dot-iu-cutter-v0.5-constitution-source-seed-from-snapshot-command-review-gpt-ruling-2026-05-18.md
            (verdict: PASS_WITH_REQUIRED_PATCH)
dml_executed: 0 ; rows_inserted: 0 ; dry_run: none ; cut: none ; verify: none
snapshot_artifact_mutated: NO (read-only referenced; write-once respected)
decision_authority: GPT / User ONLY ; self_advance: PROHIBITED

---

1. Revision applied

The single GPT-required patch was applied, plus the three open decisions were resolved per GPT rulings.

required_patch (GPT):
  before: document_version_id computed in-tx via
          'icxconst-' || left(encode(sha256((checksum||'|'||ref)::bytea),'hex'),32)
  after : document_version_id = LITERAL 'icxconst-008a06ace23a96ea6cd456146e805c97'
  effect: NO runtime dependency on pgcrypto / sha256(bytea); execution minimal & predictable
  derivation: preserved in DML comments + provenance (document_version_id_rule /
              _value_source) + revised verification + this report
gpt_rulings_applied (were OPEN-DECISIONs, now settled):
  version_status      = snapshot_captured        (OPEN_DECISION_1)
  retrieval_timestamp = TIMESTAMPTZ '2026-05-18T13:03:03Z'  (OPEN_DECISION_2)
  source_format       = normalized_snapshot       (OPEN_DECISION_3)
literal_reverified_this_phase: TRUE
  external sha256("17660443…cae80c|incomex-constitution")
    = 008a06ace23a96ea6cd456146e805c97a64bb92f415b06f4c08ae73ba3469554
  left32 -> 008a06ace23a96ea6cd456146e805c97
  => icxconst-008a06ace23a96ea6cd456146e805c97  (== literal in revised DML; read-only, no DB)
unchanged: content_checksum, source_document_ref, snapshot binding, provenance
  snapshot_*/parser_*/refimpl/live_url_role/supersedes=null, atomicity, row count
  (1+1), no ON CONFLICT, scope, snapshot rehash precheck, rollback method

2. Files in this revision package

output_path: knowledge/dev/laws/dieu44-trien-khai/v0.5-constitution-source-document-seed-from-snapshot-DML-revision/
files:
  1 DML-revised             : literal document_version_id; no DB sha256; diff vs authoring DML
  2 rollback-revised        : targets literal id; child-first; no CASCADE; no sha256
  3 verification-plan-revised: POST-4/4b + CK-4 literal==rule (external/doc), NEG-11; RH-* preserved
  4 DML-revision-report     : this doc
note: operational-framing from the authoring package is unaffected by this patch
      (no identity-computation change at the operations layer) and is not re-issued.

3. Quality-gate self-assessment (this phase)

QG1 runtime DB sha256 removed from executable DML : PASS (Row 2 uses a text literal; no sha256()/encode())
QG2 literal document_version_id used exactly       : PASS ('icxconst-008a06ace23a96ea6cd456146e805c97')
QG3 deterministic derivation preserved in comments/report : PASS (DML §3 comment + §1 + provenance + this report)
QG4 verification plan does not require DB sha256    : PASS (POST-4b/CK-4 external-or-documented; NEG-11 forbids DB sha256)
QG5 snapshot rehash precheck preserved              : PASS (verification-plan §1A RH-1..RH-8 verbatim)
QG6 no DML executed                                 : PASS (0 rows; no dry-run/cut/verify; artifact untouched)
QG7 stop after 4 files                              : PASS (4 uploaded, then STOP)

4. Readiness verdict

package_status: READY_FOR_FINAL_GPT_COMMAND_REVIEW
required_patch_status: APPLIED (literal document_version_id; no DB sha256)
open_decisions: CLOSED (all 3 settled by GPT rulings and reflected in revised DML + verification)
b5_source_document_version_seed: OPEN (closes only after final command-review + EXECUTED + verified)
recommended_next: GPT final command-review of this revision package; if PASS, a
  SEPARATELY GATED controlled execution (role workflow_admin) that:
    1. runs snapshot rehash precheck RH-1..RH-8 — STOP on any miss
    2. runs PRE-1..PRE-9 (PRE-10: no sha256 precheck needed) — STOP on mismatch / 0-0 guard
    3. executes the revised doc-1 atomic transaction (literal id; no DB sha256)
    4. runs POST/POST-4b/NEG/CK; any FAIL -> doc-2 revised rollback
residual_open_item: RB-B (Path B compensation) needs explicit GPT ruling ONLY IF
  downstream refs ever exist at rollback time (not expected at first seed)

5. Explicit no-execution statement

source_document_insert:            NOT executed
source_document_version_insert:    NOT executed
dml_execution:                     NONE
checksum_persistence_into_registry: NONE (authored/revised only, not written)
constitution_dry_run / CUT / VERIFY: NONE
schema_change / GRANT / REVOKE:    NONE
directus_mutation / deploy / restart / git_commit: NONE
snapshot_artifact:                 read-only referenced; write-once NOT violated
only_writes_this_phase:            4 revision docs in the output folder
                                   (+1 in-place patch fixing a cosmetic typo in doc 1 §6)

6. Statement

• GPT-required patch applied: executable DML uses the exact precomputed literal document_version_id='icxconst-008a06ace23a96ea6cd456146e805c97' with no runtime DB sha256/pgcrypto (QG1, QG2); deterministic derivation preserved in comments/provenance/report (QG3); verification no longer requires DB sha256 (QG4); snapshot rehash precheck preserved (QG5); nothing executed (QG6). All three GPT open-decision rulings incorporated. Package is READY for final GPT command-review; B5 stays OPEN until final review + execution + verification in a separately-gated phase.
• doc 4 of 4. STOP after 4 files → route GPT/User. Self-advance PROHIBITED.

Companion: DML-revised, rollback-revised, verification-plan-revised.