dot-iu-cutter v0.5 — Deferred Source Family Verification + Rollback Plan

Phase: v0_5_deferred_source_family_grammar_binding_gate · Nature: design_only__no_execution · Date: 2026-05-18

seed_extension_proposed: NONE  (file 3 = NO-SEED-DRAFT)
therefore: this file states VERIFICATION CRITERIA FOR A FUTURE DECISION ONLY
verification_executed: false ; rollback_executed: false ; nothing to run now
decision_authority: GPT / User ONLY ; self_advance: PROHIBITED

0. Scope of this file

Because no seed extension is proposed, there is nothing to verify or roll back now. Per the task ("If no seed extension proposed, write verification criteria for future decision only"), this file defines the acceptance gate that any future, separately-authorized seed-extension command package MUST satisfy before it could ever execute. It binds the future, not this gate.

1. Preconditions that MUST hold before ANY future deferred-family seed

PRE-D1  GPT/User has issued RULING-1/2/3 (recommendation companion §2) for the
        specific family being seeded. No family may be seeded under an unresolved
        modeling dimension (QG7).
PRE-D2  For a GROUP_DOC / evidence-document family: a REAL grammar profile for
        that family is already LIVE in cutter_governance.grammar_profile
        (ratified through its own sovereign sub-gate) — NOT a generic/placeholder
        profile (QG1). Verified by: profile_ref present + has >=1
        grammar_profile_level row + an address_template_registry row.
PRE-D3  For a GROUP_ENTITY family: EITHER it is ruled "never a source_family"
        (then it must NOT appear in source_family_registry at all), OR an
        Option-D schema revision (nullable grammar_profile_ref / source_kind)
        has been separately designed, reviewed, and executed in its own cycle.
PRE-D4  system_identifier = 7611578671664259111 (correct production target).
PRE-D5  source_family_registry pre-state recorded (currently 3 rows) so the
        delta is exact and attributable.
any PRE-D* unmet -> the future seed MUST NOT run; STOP_AND_ESCALATE.

2. Verification criteria for a FUTURE seed extension (per family that is ever approved)

expected_row_delta:
  source_family_registry: + (exactly the N approved families this cycle)
  pre_count: 3  (live now)
  post_count: 3 + N
  no other table mutated by the family seed itself
exact_key_values:
  every new source_family value ∈ the GPT-approved set for that cycle
  NEGATIVE: none of the still-deferred families present
  NEGATIVE: no family value outside {the 9 WS-2 D2 design vocabulary} appears
fk_integrity:
  every new row.grammar_profile_ref ∈ cutter_governance.grammar_profile
    (catalog anti-join = 0 orphans)  -- only applicable if the family is a
    document family; an entity family must NOT be seeded here at all unless
    Option D changed the model
authority_semantics:
  every new row.authority_semantics_default == its WS-2 D2 design value
    (internal_process->normative; report/lesson->evidence; architecture_note->
     normative; sql_entity/code_artifact->implementation IF Option D ever permits)
version/status_policy:
  match WS-2 D2 design table exactly for each seeded family
no_side_effects:
  grammar_profile count unchanged by the FAMILY seed (profiles are created in
    their own ratification sub-gate, never inside the family seed)
  no schema/owner/grant change ; system_identifier unchanged pre==post
pass_criterion:
  future_seed_PASS iff PRE-D1..D5 PASS AND row delta exact AND key set exact
    AND FK 0-orphan AND authority/version/status match design AND no side effects

3. Rollback / compensation plan for a FUTURE seed extension

doctrine: same as WS-Q5 seed rollback — hard DELETE only for known, unreferenced
  bootstrap rows; otherwise lifecycle-retire + escalate. NO CASCADE.

path_R-A (clean exact-inverse, only if no downstream references):
  probe: 0 rows in entity_reference_registry / source_document_registry /
         source_document_version_registry / authority_override referencing the
         new families; new source_family rows have registered_by = that cycle's
         bootstrap principal and exactly match the approved set.
  action: BEGIN; DELETE FROM cutter_governance.source_family_registry
          WHERE source_family IN (<exactly the cycle's approved set>); COMMIT;
  post: source_family_registry back to pre-cycle count; no other table touched.

path_R-B (lifecycle retire, if referenced / ambiguous):
  action: BEGIN; UPDATE cutter_governance.source_family_registry
          SET lifecycle='deprecated'
          WHERE source_family IN (<cycle set>); COMMIT;
  then: supersede via a fresh sovereign-gated cycle; quarantine; ESCALATE.
  rule: never hard-delete a referenced family.

NOTE: all of §3 is a PLAN for a future gate. Nothing here is executed now.
  Any grammar profile created in a profile-ratification sub-gate has its OWN
  separate rollback authored in that sub-gate (not mixed into the family seed
  rollback).

4. Verification criteria for the DECISION itself (this gate's actual deliverable)

Since this gate produces a decision request, its "verification" is structural, not data:

DV-1  all 6 deferred families classified into a dimension (QG2) — PASS
DV-2  document-grammar vs structured-artifact vs raw-entity distinction explicit
      (QG3) — PASS
DV-3  Options A/B/C/D each analysed with pros/cons + verdict — PASS
DV-4  per-family recommended route stated, none decided silently (QG7) — PASS
DV-5  impact on WS-3 cross-source assembly + Constitution hardtest +
      future compliance_matrix stated (QG4) — PASS (see gate-report)
DV-6  file 3 is a NO-SEED-DRAFT (QG6) — PASS
DV-7  zero DML/DDL/GRANT/schema-change executed (QG8) — PASS
DV-8  blocking levels mapped to task taxonomy
      (before_constitution_dryrun / before_cross_source_assembly_production /
       can_defer_post_pilot) — PASS

5. Statements

• No seed proposed → this is future-decision verification criteria + a future rollback plan only; nothing executed, nothing to roll back now.
• Future seed acceptance gate (PRE-D1..D5 + §2) and no-CASCADE rollback doctrine (§3) defined so QG5 is enforceable whenever a real seed is ever authored.
• No DML/DDL/GRANT/schema-alter/Directus/CUT/VERIFY/deploy/git. No execution (QG8).
• Self-advance PROHIBITED — doc 4 of 5; STOP after package → route GPT/User.

Companion: classification-and-options, recommendation-and-ruling-request, seed-extension-draft-if-safe (NO-SEED-DRAFT), gate-report.