dot-iu-cutter v0.5 Schema Q5 — Open Decisions & Risk Register

Phase: v0_5_schema_Q5_and_evidenced_by_command_review_planning · Nature: design_only / command_review_preparation · Date: 2026-05-18 Authority (consumed, NOT reopened — QG1): evidenced_by design report §4 (OD-VC1..VC7); fabric-addendum consolidated open decisions (OD-FA1/FA3, OD-A1, OD-G1/S1, OD-L*, P11D-α); WS-2 D4/D6; sequencing companion (OD-SEQ1..3). The Agent does NOT self-resolve any item — these are GPT/User inputs (QG5/QG7).

⚠️ GATING BANNER

phase: design_only
register_is: a consolidation of OPEN items — recommendations are ADVISORY only
any_item_self_resolved: false   # QG7 — none decided here
executable_sql: none            # QG2
execution_authorized: false
self_advance: PROHIBITED
decision_authority: GPT / User ONLY

---

1. Blocking-level legend

must_resolve_before_command_review : blocks authoring the G2 command package
must_resolve_before_dry_run        : may enter G2 authoring, blocks G1 run
must_resolve_before_production     : may dry-run, blocks G4 prod apply
can_defer_post_pilot               : not on the critical path to first apply

2. Open decisions

OD-VC1 — edge_type namespace scheme (OPEN P44-4-α)

• Decision needed: final namespace scheme for evidenced_by — prefix (obj./sem.) vs owner_layer tag vs both.
• Options: (a) owner_law_code tag only (current design position); (b) prefix scheme → canonical token obj.evidenced_by; (c) both.
• Recommendation (advisory): keep owner_law_code=NRM-LAW-44 tag; defer scheme to the vocab-framework APR (do NOT pre-empt P44-4-α).
• Blocking: must_resolve_before_command_review (WS-VA) — the vocab entry's canonical token is part of the command package.

OD-VC2 — vocab entry physical shape

• Decision needed: physical representation of the vocab entry (dot_config row / framework record / JSON schema).
• Options: (a) dot_config row; (b) governance framework record in cutter_governance; (c) JSON schema artifact.
• Recommendation (advisory): none — explicitly reserved; WS-VA command-review cannot be authored without it.
• Blocking: must_resolve_before_command_review (WS-VA).

OD-VC3 — Cap-4 checker deploy strategy

• Decision needed: deploy mechanism + pre-state snapshot/backup strategy for the checker.
• Options: (a) versioned rule set; (b) reversible feature toggle; (c) both.
• Recommendation (advisory): (c) versioned + toggle — required so 2.3 rollback is data-free.
• Blocking: must_resolve_before_command_review (WS-CK).

OD-VC4 — governed_by / derived_from candidate ratification (BP-WS2-2)

• Decision needed: ratify P44-4A candidate edges governed_by / derived_from (v1.0, User).
• Options: (a) ratify before WS-CK; (b) track as dependency note, ratify later.
• Recommendation (advisory): (b) — evidenced_by does NOT depend on it, but R-NO3/R-NO4 name them as required alternatives; revisit before WS-3 execution.
• Blocking: must_resolve_before_production (WS-CK enforcement quality) / otherwise can_defer_post_pilot for WS-Q5.

OD-VC5 — reverse-index P1/P2/P3 for evidences

• Decision needed: reverse-index materialization pattern serving evidences at scale (P44-4A §6).
• Options: (a) P1 / (b) P2 / (c) P3 pattern per scale tier.
• Recommendation (advisory): defer — affects scale serving, not correctness of the forward edge.
• Blocking: can_defer_post_pilot.

OD-VC6 — authority_semantics vs owner_law alignment

• Decision needed: confirm the two-layer treatment — Fabric authority_semantics roles (R-AU) vs P44 owner_law vocab tagging.
• Options: (a) keep distinct two layers (design position); (b) unify.
• Recommendation (advisory): (a) keep distinct — confirm at command-review, no merge.
• Blocking: must_resolve_before_command_review (WS-CK rule R-AU clarity).

OD-VC7 — INV-E5 / OQC-2 audit obligation

• Decision needed: owner + cadence for the "≥2 status states hold real rows in production" audit.
• Options: (a) DOT periodic audit; (b) human governance review; (c) hybrid.
• Recommendation (advisory): assign at command-review; post-implementation obligation.
• Blocking: can_defer_post_pilot (it is a post-go-live audit).

BR-A1 — canonical_address separator final lock (OD-A1)

• Decision needed: confirm separator scheme; WS-2 D6 flagged a canon self-contradiction (shape uses hyphen, example uses slash ICX-CONST/NT-12).
• Options: (a) <DOCPREFIX>/<L1>-...-<Lk> (D6 recommendation); (b) all-hyphen <DOCPREFIX>-<L1>-...; (c) other.
• Recommendation (advisory): (a) — matches canon example + existing D38-DIEU28-S3-P1 path style.
• Blocking: must_resolve_before_dry_run (WS-Q5 address_template + CAV-* verification cannot run without it).

BR-FA1 — assembly_profile physical shape (OD-FA1)

• Decision needed: physical storage of assembly_profile.
• Options: (a) new table; (b) reuse append-only ledger pattern; (c) JSONB config.
• Recommendation (advisory): lock logical contract now; physical defer to schema-design (defer_WS3).
• Blocking: can_defer_post_pilot for first WS-Q5 apply (not in must_have set).

BR-FA3 — topic registry physical shape (OD-FA3 / P11D-α)

• Decision needed: physical topic_vocab.
• Options: (a) physical early; (b) JSONB free-text continued; (c) Option C — logical contract now, physical gated.
• Recommendation (advisory): (c) — physical gated on Pilot Tier 1 + duplicate-rate + APR Điều 32.
• Blocking: can_defer_post_pilot.

OD-G1 — Constitution source authority / grammar

• Decision needed: confirm source = internal Incomex Architecture Constitution (NOT national HP 2013); confirm grammar profile (Nguyên tắc / Kiến trúc / Điều — no Chương/Khoản/Điểm).
• Options: (a) confirm internal Constitution + profile A; (b) reclassify source.
• Recommendation (advisory): GPT/User must rule before any Constitution dry-run (carried from prior hardtest finding — internal Constitution v4.6.3, grammar assumption was invalid).
• Blocking: must_resolve_before_dry_run (step 5/6 source ratification — NOT WS-Q5 substrate).

OD-S1 — controlled-draft (📋) cut policy

• Decision needed: is KB-7294 rev44 / 📋 controlled-draft authoritative enough to cut (enacted-only gate)?
• Options: (a) enacted-only snapshot gate (cut only ✅); (b) allow 📋 with flag.
• Recommendation (advisory): (a) enacted-only — GPT/User confirms before Constitution dry-run.
• Blocking: must_resolve_before_production (Constitution staged cut) / can_defer_post_pilot for WS-Q5.

OD-SEQ1 — source_document registry precedence

• Decision needed: is source_document registry a WS-Q5 step-0, or a separate prior ingestion cycle? (address_template/docprefix depends on it.)
• Options: (a) add as WS-Q5 step 0; (b) author address_template without docprefix binding; (c) source ingestion design first.
• Recommendation (advisory): (a).
• Blocking: must_resolve_before_command_review (WS-Q5 — determines the object set).

OD-SEQ2 — substrate minimum for vocab amend

• Decision needed: does WS-VA need full WS-Q5 substrate or only source_family_registry + authority_override?
• Recommendation (advisory): (a) full substrate first (conservative).
• Blocking: must_resolve_before_command_review (WS-VA scoping).

OD-SEQ3 — index lane parallelism

• Decision needed: may WS-IX run parallel to WS-Q5?
• Recommendation (advisory): default serial; parallel only if GPT/User explicitly authorizes.
• Blocking: must_resolve_before_dry_run (WS-IX scheduling).

3. Risk register

RK-1 substrate-skipped edge type:
  risk: vocab/checker applied before WS-Q5 -> evidenced_by with no registry
    substrate (GPT review explicit risk).
  severity: HIGH ; mitigation: sequencing §3 order 1->2->3 enforced by gates.
RK-2 false-negative verification:
  risk: pg_get_*def() string-equality verification false-fails (documented
    prior C-07 / v0.3 harness defect).
  severity: MEDIUM ; mitigation: catalog-level assertions only (master plan §1).
RK-3 namespace lock-in (OD-VC1):
  risk: amending vocab before P44-4-α decided forces a token migration later.
  severity: MEDIUM ; mitigation: OD-VC1 must_resolve_before_command_review.
RK-4 address scheme churn (BR-A1):
  risk: separator changed after addresses minted -> iu_id instability.
  severity: HIGH ; mitigation: BR-A1 must_resolve_before_dry_run; CAV-4 check.
RK-5 partial apply half-FK:
  risk: interrupted G4 leaves dangling FK / half registry.
  severity: MEDIUM ; mitigation: FK as last sub-step; §2.4 inverse-drop rollback.
RK-6 silent authority drift:
  risk: in-place UPDATE of a registry authority row loses audit trail.
  severity: MEDIUM ; mitigation: append-only + lifecycle deprecate (§2.5, QG6).
RK-7 candidate-edge gap (OD-VC4):
  risk: R-NO3/R-NO4 reroute to governed_by/derived_from not yet ratified.
  severity: LOW ; mitigation: track BP-WS2-2; revisit before WS-3 execution.

4. Statements

• QG5: all blocking open decisions consolidated (OD-VC1..VC7, BR-A1, BR-FA1, BR-FA3, OD-G1/S1, OD-SEQ1..3) with decision/options/recommendation/blocking-level. QG7: none self-resolved; all reserved for GPT/User. QG2: no executable SQL/code.
• No repo/VPS access in this session. code_changed: false, commit_made: false.
• Self-advance PROHIBITED — doc 4 of 5; STOP after package complete → route GPT/User.

Companion files: scope-and-object-inventory, command-sequencing-and-gates, verification-and-rollback-master-plan, command-review-planning-report.