dot-iu-cutter v0.5 — First Controlled CUT · CUT Execution Log

doc 3 of 6 · 2026-05-20

phase              : production leg-A CUT execution (G3 + G5 + G6)
outcome            : NOT EXECUTED — BLOCKED at G3 (command integrity cannot be established)
production_mutation: NONE (no DB connect attempted ; no SQL issued)
self_advance       : PROHIBITED

1. The ratified CUT command (R1) the package authorizes

Verbatim from production-legA doc 3 §3.1 (the single ratified runnable shape):

python -m cutter_agent.cutprod \
  --mode production-leg-a-only \
  --fail-closed --exclude-dieu-44 \
  --manifest <path/to/manifest.json> \
  --snapshot-artifact <path/to/constitution-normalized-17660443e0f23e99.md> \
  --expect-manifest-digest    9d908a62fcf01bb88e05a1af4335b960710006ddcfd21c811ca63efb33dd324f \
  --expect-manifest-file-sha  7d56f3ce066950ccef3de4156c5afeea81b2450b8e38393205b52c1fca012179 \
  --expect-candidate-count    60 \
  --expect-region-sha         17660443e0f23e994e1807cf8e22920951a9e70c598956dbd0e752f4f5cae80c \
  --source-version-id         icxconst-008a06ace23a96ea6cd456146e805c97 \
  --expect-writer-digest      d99a31d4a4be907c510ae15965e9f7bb3387e9e28676e9f32adf463828b1aa28 \
  --i-have-sovereign-production-write-approval <kb-doc-id-from-A4-C5> \
  --i-have-grant-execution-approval-kb-id     <kb-doc-id-from-A3-U-W4b> \
  --production-intent          CONFIRM-LEG-A-ONLY-CONSTITUTION-CUT \
  --fresh-backup-sha256        <64-hex-of-the-fresh-pre-CUT-backup> \
  --connection-provider-module <sovereign-operator-module>:get_provider

2. G3 — command integrity — CANNOT BE ESTABLISHED IN THIS SESSION

The Agent can populate only the fixed values (those that come from the ratified pins). It cannot populate the four placeholder values, each of which the cutprod argv parser refuses with exit 2 REFUSED when missing (production-legA doc 3 §3.3) and the adapter's guards independently refuse with exit 3 BLOCKED even if a placeholder were syntactically present (production-legA doc 1 §3 fail-closed map).

populatable_by_Agent_from_KB_pins (PASS) :
  --mode production-leg-a-only          : OK
  --fail-closed                         : OK
  --exclude-dieu-44                     : OK
  --expect-manifest-digest 9d908a62…    : OK (pinned)
  --expect-manifest-file-sha 7d56f3ce…  : OK (pinned)
  --expect-candidate-count 60           : OK (pinned)
  --expect-region-sha 17660443…         : OK (pinned)
  --source-version-id icxconst-008a06…  : OK (pinned)
  --expect-writer-digest d99a31d4…      : OK (pinned)
  --production-intent CONFIRM-LEG-A-ONLY-CONSTITUTION-CUT : OK (literal)

NOT_populatable_by_Agent (BLOCKED) :
  --i-have-sovereign-production-write-approval <kb-doc-id> :
    requirement : a KB doc id that the adapter's G1 approval_resolver can resolve
                  to a true result for THIS specific CUT (manifest_digest 9d908a62…,
                  candidate_count 60, writer_digest d99a31d4…, principal cutter_exec,
                  target directus.public.{IU,UV}, append_only, G-CUT-ONCE, forward_comp).
    current state : no such KB doc id exists. The existing approval-ready docs
                    (final-execution-approval-readiness-report 2026-05-20 doc 4 ;
                    final-approval-report doc 7 of first-controlled-cut package)
                    both state CUT_authorized = not_yet. The user prompt's
                    policy-level approval is not a KB-recorded approval doc id
                    that the adapter resolver can verify. Fabricating a doc id
                    would violate "không bịa authority" (no authority fabrication).

  --i-have-grant-execution-approval-kb-id <kb-doc-id> :
    requirement : a KB doc id documenting that U-W4b GRANT execution was performed
                  and verified per first-controlled-cut doc 2 §6.1.
    current state : U-W4b not run (G4 BLOCKED — see doc 2 of this report set).
                    Therefore no GRANT execution log exists ; no KB doc id resolvable.

  --fresh-backup-sha256 <64-hex> :
    requirement : the sha256 of a fresh logical dump of
                  directus.public.{information_unit, unit_version, dot_config}
                  taken by an authorized DB operator (NOT the Agent) within the
                  last ≤60 minutes, restorability-test-verified.
    current state : no backup exists (G2 BLOCKED — see doc 1 of this report set).
                    Fabricating a 64-hex value would violate the prompt's
                    "không bịa authority/command/credential/kết quả" rule.

  --connection-provider-module <pkg.mod:callable> :
    requirement : a sovereign-operator-authored Python module importable as
                  `<pkg>.<mod>` exposing a callable that returns a Callable[[dict], conn]
                  bound to cutter_exec credentials sourced from an approved secret
                  store (never argv / KB / logs).
    current state : the package explicitly forbids the Agent from authoring or
                    shipping this module in the repo. PC-7 (production-legA doc 3
                    §3.4) :
                      "sovereign-authored connection-provider module installed
                       (NOT in this repo) ; its sha256 recorded ; its DSN sourced
                       from the approved secret store ; never argv / KB / logs."
                    The Agent has no path to obtain such a module (it does not
                    exist in this repo, in the KB, or in the sovereign-operator
                    /opt/incomex/dot/specs/ tree from the Agent's vantage).

verdict : G3 (command integrity) BLOCKED.
          The CUT command cannot be assembled byte-for-byte against the approved
          package without fabricating values forbidden by the prompt and by the
          package itself. Substituting placeholders would either (a) be argv-
          rejected with exit 2 at cutprod ; or (b) be guard-rejected with exit 3
          at the adapter (G1 approval_resolver false ; G7 backup_gate false ;
          provider not loadable).

3. G5 — final pre-CUT check — NOT RUN

G5 requires G2 (backup) + G4 (GRANT verified) to have closed. Both are BLOCKED (docs 1 and 2). G5 is therefore N/A this phase. The drift portion of G5 is covered by the live read-only re-verification recorded in doc 1 §3 (ZERO drift).

re-check_drift_after_GRANT    : N/A (no GRANT issued)
re-check_ICX_CONST_=_0        : 0 (re-verified read-only in doc 1 §3 ; G-CUT-ONCE met)
re-check_credentials          : N/A (no connection-provider module ; no creds in play)
re-check_command_token/approval_id : N/A (no resolvable approval ids — doc 3 §2)

4. G6 — execute production leg-A CUT — NOT RUN

status                         : NOT EXECUTED
DB_connection_attempted        : NO
transaction_opened             : NO
SQL_issued                     : NONE
rows_inserted_into_information_unit : 0
rows_inserted_into_unit_version     : 0
anchor_updates_issued          : 0
cutprod_return_code            : N/A (process never started against production)
STDOUT_CUT_OK_LEG_A_line       : NONE (command not issued)
production_touched             : false
secrets_handled                : NONE (no DSN read, no env DB var set, no PGPASSWORD touched)

5. Live state at end of this phase — byte-identical to start

re-verified (read-only query_pg, role=context_pack_readonly) :
  public.information_unit total rows : 98       (unchanged ; pre-CUT was 98)
  public.unit_version    total rows  : 105      (unchanged ; pre-CUT was 105)
  ICX-CONST rows in public.information_unit : 0 (unchanged ; G-CUT-ONCE precond still met)
  relacl on writer targets           : grants still ABSENT (unchanged)
  L1 md5                             : f38c94d0… (unchanged ; matches pin)
  L2 md5                             : 078ba005… (unchanged ; matches pin)
  vocab 6/6                          : PRESENT (unchanged)
verdict : zero mutation across this session ; the production database is in
          the exact pre-execution state ratified by the approval package.

6. Disposition

G3 (command integrity) : BLOCKED — 4 required argv values unobtainable from this
                         session ; fabricating any of them is explicitly forbidden.
G5 (final pre-CUT)     : N/A — G2/G4 not closed.
G6 (CUT)               : NOT EXECUTED — fail-closed by absence of usable command.
G7 (post-CUT checks)   : N/A — no CUT performed (see doc 4).
production_mutation    : NONE
self_advance           : PROHIBITED
next_action            : route → GPT/User per doc 6 final report

doc 3 of 6. No production mutation. Self-advance PROHIBITED.