dot-iu-cutter v0.5 — Canonical CUT Execution · Immediate Post-CUT Structural Verification

doc 5 of 7 · 2026-05-20

phase                : G7 — immediate post-CUT structural checks
outcome              : ALL CHECKS PASS
production_mutation  : NONE this phase (read-only catalog probes only)

1. Quantitative checks — all pass

metric	expected	observed	match
ICX-CONST rows in information_unit	60	60	✓
iu_total = baseline 98 + 60	158	158	✓
uv_total = baseline 105 + 60	165	165	✓
ICX-CONST rows with version_anchor_ref IS NOT NULL	60	60	✓
Distinct canonical_address among ICX-CONST	60	60	✓ (unique)
anchors_exact (version_anchor_ref::text == content_anchor_ref AND uv.unit_id == iu.id)	60	60	✓
Distinct content_hash among ICX-CONST UV rows	60	60	✓
UV rows with version_seq=1 for ICX-CONST IUs	60	60	✓
birth_registry entries for ICX-CONST IUs	60	60	✓
recent IU rows (≤5 min)	60	60	✓
recent UV rows (≤5 min)	60	60	✓
unexpected recent IU (canonical_address NOT LIKE 'ICX-CONST%')	0	0	✓
unexpected recent UV (unit_id NOT in ICX-CONST IUs)	0	0	✓
canonical_address ILIKE '%dieu-44%'	0	0	✓ (Điều 44 excluded)

2. Categorical checks — all pass

ICX-CONST lifecycle_status set     : {'draft'}
  reported_per_A3_ruling           : YES — fn_iu_create produces drafts ; sovereign
                                      accepted via A-3 ruling for the first
                                      canonical CUT. Post-CUT enactment workflow
                                      is a separate sovereign decision.

ICX-CONST unit_kind set            : {'law_unit'}
  matches cutwrite OD-W2           : ✓

ICX-CONST created_by set           : {'cutter_exec/DOT-991/constitution-cut'}
  matches _EMITTER constant in adapter : ✓

ICX-CONST identity_profile.publication_type_ref : 'law' on ALL 60
  A-4 patch worked                 : ✓ (defensive p_publication_type='law' fed
                                      through ; the L1 PILOT-MODE P-pub1 warning
                                      no longer fires for these rows)

ICX-CONST identity_profile.primary_section_type_ref set :
  {'article', 'principle', 'section'}
  matches cutwrite vocab           : ✓ (only the 3 ratified section_type
                                      values appear)

cardinality by section_type (NT15·KT3·DIEU42) :
  principle                        : 15  ✓  (Nguyên tắc)
  section                          : 3   ✓  (Kiến trúc)
  article                          : 42  ✓  (Điều, Điều 44 excluded)
  total                            : 60  ✓

3. Source-binding check

source_document_version_id_column : NOT a column on public.information_unit
                                    (verified via information_schema; the 19
                                    columns do not include this name)
note                              : the constitution snapshot binding is
                                    encoded via :
                                      - canonical_address prefix 'ICX-CONST/'
                                        (all 60 rows match)
                                      - created_by 'cutter_exec/DOT-991/
                                        constitution-cut' (all 60 rows match)
                                      - cutwrite's writer_digest input tuple
                                        (canonical_address, unit_kind,
                                         section_type, content_hash,
                                         idempotency_key) ⇒ digest
                                        d99a31d4… reported in the CUT line
                                    so the source binding is recoverable from
                                    the persisted rows + the ratified
                                    PIN_WRITER_DIGEST.

4. Side-effect boundary — no unintended table mutation

unexpected_recent_iu      : 0   (no IU rows created in last 5 min outside ICX-CONST)
unexpected_recent_uv      : 0   (no UV rows created in last 5 min outside the
                                  60 ICX-CONST IUs)
relacl                    : unchanged since G4 (no further GRANT/REVOKE)
DDL / DROP / TRUNCATE     : NONE
source_document* mutation : NONE
Directus / vector / NoSQL : NONE
secret_echo / argv_leak   : NONE

5. Sysid (audit anchor)

pg_control_system().system_identifier : 7611578671664259111
(recorded for the audit trail ; would have detected catastrophic restore
events ; unchanged from earlier macros)

6. Writer-digest equivalence — implicit proof

input tuple per row (cutwrite.build_rows line 337-340) :
  [canonical_address, unit_kind, section_type, content_hash, idempotency_key]

post-CUT observations :
  - 60 distinct canonical_address (matches cutwrite output count)
  - unit_kind = 'law_unit' (constant ; matches cutwrite OD-W2)
  - section_type set {principle, section, article} (matches cutwrite vocab)
  - 60 distinct content_hash (matches cutwrite per-row sha256 output;
    body bytes preserved end-to-end through fn_iu_create's
    fn_content_hash(p_body))
  - idempotency_key is offline-only (not persisted in IU/UV columns) ;
    deterministic from the above three by cutwrite construction

⇒ all five digest-input fields preserved end-to-end ; cutprod_canonical
  reported writer_digest=d99a31d4… matches the ratified pin ; equivalence
  proof from the survey package doc 5 §2.3 is empirically confirmed.

7. Disposition

G7 (post-CUT structural)    : ALL CHECKS PASS
production_mutation_state   : 60 ICX-CONST IU + 60 UV v1 + 60 anchor links +
                              60 birth_registry entries
expected_writes_match       : YES (exactly +60 IU / +60 UV / 60 anchor updates,
                              all created/linked by canonical fn_iu_create)
lifecycle_status_reported   : 'draft' (per A-3 ruling)
no_unintended_mutation      : confirmed
sysid_unchanged             : 7611578671664259111 (audit anchor)
next                        : G8 reports + STOP per prompt
                              (no VERIFY ; no leg-B governed recording)

doc 5 of 7.