dot-iu-cutter v0.5 — Post-Enactment Closeout · Governance Chain Closeout

doc 2 of 6 · 2026-05-20 · post-enactment closeout

phase               : G2 — governance chain (CUT → leg-B → write-VERIFY → Phase 7)
outcome             : PASS (KB SSOT chain authoritative; live public.* corroborates)
production_mutation : NONE this phase

1. Why the chain is closed via KB SSOT here

The read role used in this closeout (context_pack_readonly) has no USAGE on cutter_governance. Direct SELECT on the governance row IDs would fail. Each prior PASS ruling, however, already cross-verified those IDs under sovereign-authored roles (cutter_exec / cutter_verify) with PG receipts persisted into the M1 / M2 / Phase 7 final reports. Those PASS rulings are the SSOT chain consulted here.

governance_readback_path : KB_SSOT_PASS_RULINGS
                           (sovereign-authored receipts, immutable in KB)
public_schema_corroboration : SELECT on public.iu_lifecycle_log corroborates
                              the Phase 7 review_decision_id from outside
                              the governance schema

2. Pipeline-step closure receipts

step_1_source_snapshot:
  status        : DONE (pre-v0.5; baseline)
  receipt       : prior phase / M4-FF closeout doc 5
step_2_MARK:
  status        : DONE
  receipt       : same
step_3_cutplan:
  status        : DONE
  receipt       : same
step_4_canonical_CUT_leg_A:
  status        : DONE
  date_utc      : 2026-05-20  (attempt-2 committed after autocommit=False patch)
  ICX_CONST_born : 60 (IU+UV+anchor each)
  writer_digest_pin : d99a31d4…
  pass_ruling   : reviews/dot-iu-cutter-v0.5-first-controlled-canonical-cut-pass-gpt-ruling-2026-05-20.md
step_5_read_only_VERIFY:
  status        : DONE
  body_hash_match : 60 / 60
  NT15·KT3·DIEU42 : confirmed
  pass_ruling   : reviews/dot-iu-cutter-v0.5-post-cut-verify-governed-recording-readiness-gpt-ruling-2026-05-20.md
step_6_leg_B_governed_recording_M1:
  status        : DONE
  committed_at_utc : 2026-05-20T05:18:20Z
  rows_persisted : 126
  change_set_id  : 456c6830-a747-4b53-ac2f-665e25e12cd0
  review_decision_id : 29c88a7b-60f7-41bd-af45-43cc9b9f41c0  (CUT approval)
  manifest_envelope_id : 638cf363-f45a-4bb3-b9bb-928c5e24c15b
  executor_signature_id : 3a249063-e33a-406a-9302-2e9e646a0938
  payload_hash : 7468c7a976ab729c32d19e93001bf724f7cf2b1f59a41f5b8788ac6b627c6cfa
  idempotency_key : ick:canonical:constitution-first:<PIN_WRITER_DIGEST>
  pass_ruling   : reviews/dot-iu-cutter-v0.5-legB-governed-recording-pass-gpt-ruling-2026-05-20.md
step_7_write_VERIFY_DOT_992_M2:
  status        : DONE
  committed_at_utc : 2026-05-20T06:03:30Z
  rows_persisted : 2  (1 verify_result + 1 verifier dot_pair_signature)
  verify_result_id : 18278460-438c-4fb4-bf9c-997c82447f92
  verifier_signature_id : f5c3ee34-7f9f-4af3-879d-1bdcf5508a8f
  payload_hash : 51feacd5a863b2473c63c30406acb1808c671ee16334780494f949630ff85388
  signing_lane : DOT-992 (StubSigning per D-4)
  linked_change_set_id : 456c6830-a747-4b53-ac2f-665e25e12cd0
  linked_manifest_envelope_id : 638cf363-f45a-4bb3-b9bb-928c5e24c15b
  linked_review_decision_id : 29c88a7b-60f7-41bd-af45-43cc9b9f41c0
  linked_executor_signature_id : 3a249063-e33a-406a-9302-2e9e646a0938
  axis_1 : pass
  axis_2 : pass
  pass_ruling   : reviews/dot-iu-cutter-v0.5-write-verify-dot992-pass-gpt-ruling-2026-05-20.md
step_8_M4_code_ratification:
  status        : DONE
  feature_branch_head : 32cfa93
  commits_authored : 3 (6a56bc3, 7133c44, 32cfa93)
  pass_ruling   : (final-FF wraps this; see step 9)
step_9_M4_FF_main_merge:
  status        : DONE
  main_before : 4367c83
  main_after  : 32cfa93
  merge_type  : fast_forward_only
  conflicts   : none
  pass_ruling   : reviews/dot-iu-cutter-v0.5-main-fast-forward-merge-pass-gpt-ruling-2026-05-20.md
step_10_M3a_lifecycle_DDL_retry:
  status        : DONE (Bundles A..E applied in 5 controlled transactions)
  backup_sha256 : 7b2a83089fa14e8bd570374d3a86b27762af92b4d40118c28241a42604497cb6
  vocab_rows    : 4 (draft/enacted/superseded/retired)
  fn_iu_enact_md5_prosrc : 6ca9bc39e2d2be93dd8a71739fa80dc4
  fn_iu_apply_edit_draft_md5_prosrc : 42e96b6c9e81a2d0a28b30644d178a26
  fn_iu_enacted_immut_md5_prosrc : aeb3fa4fdb225f6ba6b7073582caa454
  fn_uv_enacted_immut_md5_prosrc : 03f035a23cbc79a9e811a6da6f5266ba
  triggers_enabled : trg_iu_enacted_immut, trg_uv_enacted_immut, both 'O'
  gateway_marker_extended : fn_iu_create,fn_iu_apply_edit_draft,fn_iu_enact
  receipt       : v0.5-lifecycle-enactment-execution-m3a-retry/07-final-m3a-retry-report-2026-05-20.md
step_11_Phase_7_lifecycle_enactment:
  status        : DONE
  backup_path   : /root/phase7-rerun-backups/directus_phase7_rerun_pre_enact_20260520T085610Z.dump
  backup_sha256 : 076213737cac72174a42a508eacf6e4ac24f8cd52257b1efc9cf8ab1a4cdb5ae
  phase7_review_decision_id : af323ae3-39a5-4958-95b8-5acfba8f6984
  cut_approval_reused_as_enact_id : false
  fn_iu_enact_calls_real : 60
  fn_iu_enact_calls_dry_run : 60
  enacted_rows : 60 (all ICX-CONST)
  lifecycle_log_rows : 60
  performed_at_utc : 2026-05-20 09:04:13.57337+00 (single TX, min=max)
  pass_ruling   : reviews/dot-iu-cutter-v0.5-phase7-enactment-pass-gpt-ruling-2026-05-20.md

3. Hash provenance chain — closed

writer_digest_pin              : d99a31d4…
manifest_envelope_id           : 638cf363-f45a-4bb3-b9bb-928c5e24c15b
change_set_id                  : 456c6830-a747-4b53-ac2f-665e25e12cd0
cut_review_decision_id         : 29c88a7b-60f7-41bd-af45-43cc9b9f41c0
phase7_review_decision_id      : af323ae3-39a5-4958-95b8-5acfba8f6984
verify_result_id               : 18278460-438c-4fb4-bf9c-997c82447f92
executor_signature_id          : 3a249063-e33a-406a-9302-2e9e646a0938
verifier_signature_id          : f5c3ee34-7f9f-4af3-879d-1bdcf5508a8f
leg_B_payload_hash             : 7468c7a9…6cfa
write_VERIFY_payload_hash      : 51feacd5…5388
SoD_tool_revision_match        : false  (executor ≠ verifier, by design)
prior_review_decision_lineage  : Phase 7 carries CUT approval as
                                 prior_review_decision_id, not as decision_id

4. Public-schema corroboration of Phase 7

The live public.iu_lifecycle_log was joined to the Phase 7 review_decision UUID without crossing into the governance schema:

log_review_decision_phase7  : 60  (Phase 7 af323ae3-…)
log_distinct_canonical_address : 60
log_min_performed_at        : 2026-05-20 09:04:13.57337+00
log_max_performed_at        : 2026-05-20 09:04:13.57337+00  (single TX)
log_distinct_performed_by   : 1   (codex-phase7-rerun)
log_tool_revision           : iu-cutter@v0.5-phase7-rerun-lifecycle-enactment-2026-05-20
log_change_set_null         : 60  (no NEW change-set; uses existing review_decision)

This proves that the Phase 7 review_decision row is live and referenced by exactly the 60 ICX-CONST enactments, without requiring direct read on cutter_governance.review_decision.

5. Gate disposition

G2_pipeline_steps_closed    : PASS  (11 / 11)
G2_CUT_to_legB_link         : PASS  (KB SSOT)
G2_legB_to_writeVERIFY_link : PASS  (KB SSOT)
G2_CUT_to_Phase7_lineage    : PASS  (prior_review_decision_id pattern)
G2_Phase7_log_provenance    : PASS  (live PG corroborates)
G2_hash_chain_complete      : PASS  (all IDs and hashes recorded)
G2_governance_USAGE_limit   : DOCUMENTED  (read role lacks USAGE; not a defect)

6. STOP

G2 PASS. Proceed to doc 03 (repo / release readiness).