dot-iu-cutter v0.5 — Final Leg-B Recording Report

doc 7 of 7 · 2026-05-20 · M1 macro · STOP → GPT/User

macro_goal      : leg-B governed recording for the first controlled
                  canonical Constitution CUT, inside the 24h audit-debt
                  window ; author + execute + verify
final_result    : A — LEG_B_GOVERNED_RECORDING_PASS
production_mutation : +126 rows in cutter_governance.* (intended scope) ;
                      NO mutation outside ; lifecycle still 'draft'.

1. Final result

result : A — LEG_B_GOVERNED_RECORDING_PASS

evidence :
  - 126 rows persisted in 1 atomic transaction at 2026-05-20T05:18:20Z :
      decision_backlog_entry              + 1
      decision_backlog_history            + 1
      manifest_envelope                   + 1
      manifest_unit_block                 + 60
      review_decision                     + 1
      dot_pair_signature (executor only)  + 1
      cut_change_set                      + 1
      cut_change_set_affected_row         + 60
  - Recorded IDs :
      change_set_id              456c6830-a747-4b53-ac2f-665e25e12cd0
      review_decision_id         29c88a7b-60f7-41bd-af45-43cc9b9f41c0
      manifest_envelope_id       638cf363-f45a-4bb3-b9bb-928c5e24c15b
      executor_signature_id      3a249063-e33a-406a-9302-2e9e646a0938
      decision_backlog_entry_id  94b23091-bbee-4bc1-9d75-adf3086ab17a
      decision_backlog_history_id 3795cd3a-41b6-478f-a6ed-990a2c386241
      idempotency_key            ick:canonical:constitution-first:
                                  <PIN_WRITER_DIGEST>      (UNIQUE OK)
      rollback_key               rbk:canonical:constitution-first:
                                  d99a31d4a4be907c:<change_set_id> (UNIQUE OK)
      manifest_version           <PIN_WRITER_DIGEST>
      payload_hash               7468c7a976ab729c32d19e93001bf724f7cf2b1f
                                  59a41f5b8788ac6b627c6cfa
  - 60/60 cross-references to live ICX-CONST IUs verified.
  - DOT-991 StubSigning placeholder per D-4 ruling (signing.StubSigning).
  - Read/write verification PASS (G6 ; doc 5).
  - No lifecycle / source / IU mutation.

2. Gate-by-gate outcome

G0 SSOT + live state                         : PASS (doc 1)
G1 live governance schema survey             : PASS (doc 1 §2)
   · cutter_governance present + 8 leg-B tables ; cutter_exec INSERT confirmed
   · no FK enforced ; no triggers ; CHECK + UNIQUE inventories captured
G2 discover existing implementation           : PASS (doc 2)
   · ledger.py = v0.4 skeleton (incompatible) ; author ledger_v2
   · StubSigning + PIN_* block reused unchanged
G3 local / scratch proof                      : PASS (doc 3) — 21/21 tests
G4 execution precheck                         : PASS (doc 4 §1) — smoke PASS ;
                                                DB byte-identical post-ROLLBACK
G5 execute leg-B governed recording           : PASS (doc 4 §2) — COMMIT
G6 post-recording verification                : PASS (doc 5)
G7 rollback / compensation status             : NOT REQUIRED (doc 6)
   · final report                            : THIS DOC (doc 7)
KB upload                                     : confirmed (7 docs at
                                                v0.5-legB-governed-recording-execution/)

3. Rulings honored

D-1 leg_B_row_shape :
  ruling  : APPROVE_FOR_M1_AUTHOR_AND_EXECUTE_PACKAGE
  honored : Agent authored cutter_agent/ledger_v2_canonical_cut.py ;
            ran live precheck (cutter_exec INSERT verified via has_table_
            privilege) ; smoke + commit completed without fabricating
            any field. All NOT NULL no-default values are derived from
            ratified pins, live state reads, or sovereign-approved values
            (decision_at = canonical-redesign ruling time ; decided_by =
            'GPT/User' ; reviewer_class = 'sovereign').

D-2 lifecycle_enactment_architecture :
  ruling  : DEFER_TO_SEPARATE_M3 ; OPT_E1_fn_iu_enact_DESIGN_FIRST
  honored : NO draft→enacted transition in M1. All 60 ICX-CONST IUs
            still have lifecycle_status = 'draft'. Verified post-leg-B.

D-3 canonical_code_commit_merge :
  ruling  : DEFER_TO_SEPARATE_M4
  honored : NO merge / push / tag. The new ledger_v2_canonical_cut.py +
            its test file live in the laptop's iu-cutter-build workspace
            (HEAD f20c79c unchanged). The recorder ran from a /tmp/
            staged copy on contabo ; nothing is committed to either
            repo. Contabo /opt/incomex/dot still at e93424b (v0.4
            baseline).

D-4 DOT_991_signing :
  ruling  : ACCEPT_STUBSIGNING_FOR_M1_FOUNDATIONAL_RECORDING_UNLESS_LIVE_
            SCHEMA_REQUIRES_REAL_SIGNATURE
  honored : Live schema's dot_pair_signature.signature_payload is text
            with NO crypto-only validator (e.g. no PGP/ed25519 prefix
            check). StubSigning sha256 placeholder is accepted. Recorder
            sets payload_envelope.is_production = false to make the
            placeholder-nature self-describing inside the record.

4. Boundaries honored (per prompt's "Forbidden")

NOT taken :
  · NO lifecycle draft→enacted mutation  (lifecycle_status all still 'draft')
  · NO deploy / restart / docker rebuild
                                          (the sidecar was --rm ephemeral)
  · NO merge / push / tag
  · NO hard-delete
  · NO source_document / source_document_version mutation
  · NO fabricated leg-B field values
                                          (every value is sourced from live
                                          reads or ratified pins ; recorder's
                                          plan() validates structural invariants)
  · NO bypass of governance
                                          (no SET ROLE ; no GRANT delta ;
                                          recorder writes only as cutter_exec
                                          on tables it already has INSERT on)
  · NO SQL outside leg-B governed recording scope
                                          (the runner emits only G4/G5/G6
                                          read-only probes + the recorder's
                                          INSERTs)
  · NO secret leakage
                                          (no DSN/PGPASSWORD in argv/log/KB ;
                                          trust-auth via container netns only)

5. Open items routed → GPT/User

deferred_to_subsequent_macros (NOT touched in M1) :
  · write-VERIFY (verify_result row + DOT-992 verifier signature)
       gated on : leg-B exists (✓ now)
       authorization needed : sovereign GO for cutter_verify INSERT on
                              verify_result (cutter_verify already has
                              the grant) + author the verifier-lane signer
                              tool revision.
  · lifecycle draft→enacted (M3)
       gated on : OPT-E1 fn_iu_enact design + sovereign architectural
                  ruling (D-2 stays open).
  · canonical adapter commit-and-merge (M4)
       gated on : sovereign code-review + D-3.
  · release/automation (M5)
       per the post-CUT release-plan doc 5.

audit_debt_remaining :
  CUT_committed_at        : 2026-05-20T04:18:21.854512Z
  M1_committed_at         : 2026-05-20T05:18:19.78Z
  audit_debt_expires_at   : 2026-05-21T04:18:22Z
  remaining_at_macro_end  : ≈ 22.9 h    ⇒ comfortable for write-VERIFY macro

6. Persistence artifacts (sha-pinned)

authored_local :
  /Users/nmhuyen/iu-cutter-build/repo/iu-cutter/cutter_agent/
    ledger_v2_canonical_cut.py
  /Users/nmhuyen/iu-cutter-build/repo/iu-cutter/tests/
    test_ledger_v2_canonical_cut.py
  /tmp/cutter_legB_runner.py
                                    sha256 : 964c85d14d668e2cd2446f35de54b08cb
                                             9ac9e4099f1dcc37f4440b7f2964de6
staged_contabo :
  /tmp/iu-cutter-v05-stage/cutter_agent/ledger_v2_canonical_cut.py
                                    sha256 : 3270f1df4d52890edcc04e34f8e7c4a58
                                             e98d98f7424dc9132d0c4cb108ce2e9
  /tmp/cutter_legB_runner.py        (same sha as laptop ; scp-staged)

ephemeral_lifecycle :
  Both the runner + the stage dir live in /tmp on contabo ; they are
  cleanup-eligible. The recorder module also lives at the laptop's
  iu-cutter-build workspace ; commit/merge is D-3 (M4 macro).

7. Status

final_result               : A — LEG_B_GOVERNED_RECORDING_PASS
gates_closed               : G0/G1/G2/G3/G4/G5/G6 all PASS + G7 reports uploaded
production_mutation        : +126 rows in cutter_governance.* (intended scope only)
self_advance               : PROHIBITED
next_action                : route → GPT/User ; await rulings on write-VERIFY
                             scope + M2 sequence ; audit-debt window still
                             allows write-VERIFY to follow if approved.

doc 7 of 7. STOP → GPT/User.