dot-iu-cutter v0.5 — Canonical Path Survey · Macro Closeout Report

doc 7 of 7 · 2026-05-20 · STOP → GPT/User

macro_goal      : survey live canonical write path + redesign CUT leg-A
                  to fn_iu_create (Pack 22 gateway compliant) ; no
                  production CUT, no VERIFY, no persist
final_result    : A — CANONICAL_FN_PATH_REDESIGN_READY
production_mutation : NONE

1. Final result

result : A — CANONICAL_FN_PATH_REDESIGN_READY
why    :
  - live trigger layer and gateway mechanism fully mapped (doc 1)
  - fn_iu_create contract fully surveyed + live ROLLBACK-only test confirms
    status='created' / invariants_verified=true with zero persistence (doc 2)
  - existing codepath has NO callers in cutter_agent ; Pack 22 design
    documents fully read ; the "DOT wrapper deferred" gap is exactly the
    canonical adapter we authored here (doc 3)
  - GRANT delta authored : REVOKE legacy direct grants + GRANT EXECUTE on
    fn_iu_create ; rollback byte-inverse specified ; NOT executed (doc 4)
  - canonical-path adapter (~30 KB across 3 new files) authored on the
    feature branch ; 27/27 new tests PASS ; 122/122 total targeted suite
    PASS (no regression on ratified modules) ; ratified files untouched (doc 5)
  - production CUT approval package READY conditional on 4 sovereign
    rulings (A-1..A-4) (doc 6)

2. Summary of artefacts produced

KB folder (7 docs)         : knowledge/dev/laws/dieu44-trien-khai/v0.5-fn-iu-create-canonical-path-survey-and-redesign/
  01 live-trigger-and-gateway-survey
  02 fn-iu-create-contract-survey
  03 existing-codepath-and-docs-review
  04 grant-state-and-delta-recommendation
  05 canonical-path-redesign-or-gap
  06 updated-production-cut-approval-package-or-gap
  07 macro-task-closeout-report     (this doc)

Repo (feature branch, NOT committed in this macro) :
  cutter_agent/prod_iu_adapter_canonical.py
  cutter_agent/cutprod_canonical.py
  tests/test_prod_iu_adapter_canonical.py

Live test evidence :
  rollback-only fn_iu_create call from `directus` inside the postgres
  container : status='created', invariants_verified=true, ROLLBACK left
  zero persistent footprint (counts 98|105|526396 byte-identical before/after)

3. What was NOT done (boundaries honored)

no_production_CUT_executed         : honored
no_VERIFY_executed                 : honored
no_production_row_persisted        : honored (live test was ROLLBACK-only)
no_GRANT_or_REVOKE_issued_this_phase : honored (delta authored, not applied)
no_bypass_of_gateway_trigger       : honored (recommended OPT-B explicitly rejected)
no_direct_INSERT_into_information_unit : honored
no_hard_delete                     : honored
no_deploy_or_restart               : honored
no_merge_or_push_or_tag            : honored (feature branch HEAD f20c79c
                                     unchanged; the 3 new files are
                                     untracked relative to f20c79c)
no_source_document_mutation        : honored
no_fabricated_function_contract    : honored (fn_iu_create contract is
                                     read from live PG + dot_config +
                                     Pack 22 closure report)
no_unapproved_revoke_grant         : honored (the GRANT delta in doc 4 is
                                     a RECOMMENDATION, NOT executed)

4. Open sovereign questions (4 — short)

A-1  Approve the GRANT delta in doc 4 (REVOKE legacy + GRANT EXECUTE on
     fn_iu_create) ?
A-2  Approve the canonical CUT command in doc 6 ?
A-3  Accept lifecycle_status='draft' as the persisted constitution state ?
     (Other gaps G-B / G-C are minor : column data is redundant with
     canonical_address + identity_profile.)
A-4  Set p_publication_type='law' in the canonical adapter so the future
     strict L1 (P-pub1 / P-pub2) does not break the CUT ? (Small follow-up
     patch ; current code passes None.)

If all four are approved : the canonical CUT can run in a SEPARATE sovereign-gated macro reusing :

• This redesigned cutter_agent code (commit to feature branch then run)
• The provider module from the rerun macro (sha 503af2f1…)
• A FRESH backup (the previous run's backup at 20260520T031054Z has now exceeded the 60-min window — must re-take)
• The 18-bool probe to verify the canonical GRANT delta (doc 4 §5)

5. Recommended next macro (one-pager)

title : v0.5 canonical-path GRANT + CUT execution (Pack 22 compliant)
gates : G0-G9 identical shape to the rerun macro, but:
  G2  : fresh backup re-taken (≤60 min)
  G3  : reuse existing provider (sha 503af2f1…) — no new install needed
  G4  : command integrity = cutprod_canonical R1 shape (doc 6 §3)
  G5  : execute canonical GRANT delta (doc 4 §3) + verify 11-bool probe
  G6  : re-verify drift + ICX-CONST=0 (unchanged)
  G7  : run cutprod_canonical
  G8  : post-CUT structural — EXPECT lifecycle_status='draft' on the 60
        ICX-CONST rows (the canonical adapter's documented gap G-A)
  G9  : reports
self_advance : PROHIBITED (separate sovereign approval)

6. Status

status               : SURVEY+REDESIGN COMPLETE
production_mutation  : NONE
self_advance         : PROHIBITED
next_action          : route → GPT/User for A-1..A-4 rulings, then a
                       separately-gated execution macro

doc 7 of 7. No production mutation. Self-advance PROHIBITED.