dot-iu-cutter v0.5 — Write-VERIFY · Execution Log

doc 4 of 7 · 2026-05-20 · M2 macro

phase                : G4 execution precheck + G5 write-VERIFY
outcome              : G4 PASS · G5 PASS — verify_result + verifier signature
                       COMMITTED ; 2 governed-ledger rows persisted in 1 atomic txn
production_mutation  : +2 rows in cutter_governance.* (intended M2 scope)
                       IU / UV / anchor / source_document / leg-B state UNCHANGED

1. G4 — rollback-only smoke (execution precheck)

run_at_utc          : 2026-05-20T06:02:35.406470Z
mode                : rollback-only-smoke
exit_code           : 0
sidecar_image       : agent-data-local:latest
sidecar_network     : container:postgres (trust-auth works ; source IP=127.0.0.1)
runner_sha          : ac071f69bec6094e86a95b3f116572737564fb8a7d7c004d74041144ac3a8302
module_sha          : 18ee4ca2ae28c3b21d76c3e1591b5a718123464f50b4e7f8d11e9a008b6dff97

Output (verbatim):

[verify] started_utc=2026-05-20T06:02:35.406470+00:00 mode=rollback-only-smoke
[verify] G4 principal='cutter_verify' OK
[verify] G4b FK targets present OK
[verify] G6 no prior verify_result OK
[verify] G5 live_state meta={"anchored_exact": 60, "body_hash_match_60": 60,
                              "dieu_44_intrusion": 0,
                              "distinct_canonical_address": 60,
                              "distinct_content_hash": 60, "iu_count": 60,
                              "not_draft_count": 0, "not_law_count": 0,
                              "section_type_cardinality":
                                {"article": 42, "principle": 15, "section": 3},
                              "uv_count": 60}
[verify] BEGIN
[verify] record() returned status=RECORDED
[verify] ids={"verifier_signature_id":
              "78990717-843b-4b29-ae7c-1b21976571a3",
              "verify_result_id":
              "19d6a4a9-85c8-49c0-85d3-a60e3b658803"}
[verify] counts={"dot_pair_signature_verifier": 1, "verify_result": 1}
[verify] linkage={"change_set_id": "456c6830-a747-4b53-ac2f-665e25e12cd0",
                  "executor_signature_id": "3a249063-e33a-406a-9302-2e9e646a0938",
                  "manifest_envelope_id": "638cf363-f45a-4bb3-b9bb-928c5e24c15b",
                  "review_decision_id": "29c88a7b-60f7-41bd-af45-43cc9b9f41c0",
                  "verifier_signature_id": "78990717-843b-4b29-ae7c-1b21976571a3",
                  "verify_result_id": "19d6a4a9-85c8-49c0-85d3-a60e3b658803"}
[verify] ROLLBACK (smoke mode) — DB byte-identical to pre-run
[verify] DONE mode=rollback-only-smoke
        payload_hash=e647ab050b1cb29d54f461571becb6df73528d3d15992e6bed8c11c1f60845e9

1.1 Post-rollback state verification

Row counts in cutter_governance.* are byte-identical to pre-smoke:

post_rollback_counts :
  verify_result                      : 1   (unchanged — v0.4 trial only)
  dot_pair_signature                 : 3   (unchanged — 2 v0.4 + 1 M1 executor)
  cut_change_set                     : 2   (unchanged)
  review_decision                    : 2   (unchanged)
  manifest_envelope                  : 2   (unchanged)
  public.information_unit ICX-CONST  : 60  (unchanged ; NOT mutated)
  lifecycle_status distinct          : {draft}    (unchanged)

Smoke confirms ALL INSERTs succeed against live constraints (no NOT NULL violation, no FK abort, no CHECK abort, no UNIQUE collision — there are no UNIQUE constraints on verify_result). ROLLBACK leaves DB byte-identical.

2. G5 — committing run (durable write)

run_at_utc           : 2026-05-20T06:03:29.831655Z
mode                 : commit
exit_code            : 0
sidecar_image        : agent-data-local:latest
sidecar_network      : container:postgres

Output (verbatim):

[verify] started_utc=2026-05-20T06:03:29.831655+00:00 mode=commit
[verify] G4 principal='cutter_verify' OK
[verify] G4b FK targets present OK
[verify] G6 no prior verify_result OK
[verify] G5 live_state meta={"anchored_exact": 60, "body_hash_match_60": 60,
                              "dieu_44_intrusion": 0,
                              "distinct_canonical_address": 60,
                              "distinct_content_hash": 60, "iu_count": 60,
                              "not_draft_count": 0, "not_law_count": 0,
                              "section_type_cardinality":
                                {"article": 42, "principle": 15, "section": 3},
                              "uv_count": 60}
[verify] BEGIN
[verify] record() returned status=RECORDED
[verify] ids={"verifier_signature_id":
              "f5c3ee34-7f9f-4af3-879d-1bdcf5508a8f",
              "verify_result_id":
              "18278460-438c-4fb4-bf9c-997c82447f92"}
[verify] counts={"dot_pair_signature_verifier": 1, "verify_result": 1}
[verify] linkage={"change_set_id": "456c6830-a747-4b53-ac2f-665e25e12cd0",
                  "executor_signature_id": "3a249063-e33a-406a-9302-2e9e646a0938",
                  "manifest_envelope_id": "638cf363-f45a-4bb3-b9bb-928c5e24c15b",
                  "review_decision_id": "29c88a7b-60f7-41bd-af45-43cc9b9f41c0",
                  "verifier_signature_id": "f5c3ee34-7f9f-4af3-879d-1bdcf5508a8f",
                  "verify_result_id": "18278460-438c-4fb4-bf9c-997c82447f92"}
[verify] COMMIT — write-VERIFY governed recording PERSISTED
[verify] DONE mode=commit
        payload_hash=51feacd5a863b2473c63c30406acb1808c671ee16334780494f949630ff85388

2.1 payload_hash variance (smoke vs commit)

payload_hash_smoke   : e647ab050b1cb29d54f461571becb6df73528d3d15992e6bed8c11c1f60845e9
payload_hash_commit  : 51feacd5a863b2473c63c30406acb1808c671ee16334780494f949630ff85388
variance_explanation : the verifier payload_envelope embeds the verify_result_id
                       (so the verifier signature attests to THIS specific
                       verify_result row, not just to the CUT). Each plan()
                       call fresh-generates UUIDs ; smoke and commit therefore
                       sign different envelopes. The COMMIT-run payload_hash
                       is the canonical record (matches the persisted
                       dot_pair_signature.payload_hash for the committed
                       verifier signature). Read-only VERIFY facts that the
                       signature attests to ARE identical between runs.

2.2 Persisted M2 IDs (the write-VERIFY recording)

verify_result_id           : 18278460-438c-4fb4-bf9c-997c82447f92
verifier_signature_id      : f5c3ee34-7f9f-4af3-879d-1bdcf5508a8f
linkage (FK targets) :
  change_set_id            : 456c6830-a747-4b53-ac2f-665e25e12cd0  (M1)
  manifest_id              : 638cf363-f45a-4bb3-b9bb-928c5e24c15b  (M1 envelope_id)
  review_decision_id       : 29c88a7b-60f7-41bd-af45-43cc9b9f41c0  (M1)
  executor_signature_id    : 3a249063-e33a-406a-9302-2e9e646a0938  (M1 DOT-991)
linkage (M2 NEW) :
  verifier_signature_id    : f5c3ee34-7f9f-4af3-879d-1bdcf5508a8f  (DOT-992)
manifest_version           : d99a31d4a4be907c510ae15965e9f7bb3387e9e28676e9f32adf463828b1aa28
executor_tool_revision     : iu-cutter@f20c79c+canonical-A4-patch+autocommit-fix
verifier_tool_revision     : iu-cutter@f20c79c+write-verify-dot992-stub
tool_revision_match        : false      (SoD invariant preserved)
verdict                    : pass
state                      : complete
canonicalization_rule_used : canon-md-v0.1.0
verifier signature prior_signature_id : 3a249063-…              (cross-lane chain)

3. Disposition

G4 (execution precheck — smoke)              : PASS (rollback ; DB unchanged)
G5 (execute write-VERIFY governed recording) : PASS (1 atomic txn ; COMMIT)
production_mutation                          : +2 rows in cutter_governance.*
                                               (1 verify_result + 1 verifier
                                                dot_pair_signature)
production_mutation_outside_M2_scope         : NONE
                                               · public.information_unit unchanged
                                               · public.unit_version unchanged
                                               · source_document/source_version untouched
                                               · lifecycle_status of all 60 IUs still 'draft'
                                               · leg-B rows (M1) UNCHANGED — read-only refs
                                               · no deploy/restart/merge/tag
next                                         : G6 post-write verification (doc 5)

doc 4 of 7.