dot-iu-cutter v0.5 — Write-VERIFY · Post-Write Verification

doc 5 of 7 · 2026-05-20 · M2 macro · G6

phase                : G6 — post-write structural + linkage + invariant verification
outcome              : PASS — verify_result row + verifier signature present with
                       correct FK linkage and proven facts ; no unintended mutation
production_mutation  : NONE (read-only verification only)

1. verify_result row (M2 commit) — re-fetched live

verify_result_id           : 18278460-438c-4fb4-bf9c-997c82447f92
change_set_id              : 456c6830-a747-4b53-ac2f-665e25e12cd0   (FK → cut_change_set ✓)
manifest_id                : 638cf363-f45a-4bb3-b9bb-928c5e24c15b   (logical → manifest_envelope.envelope_id)
review_decision_id         : 29c88a7b-60f7-41bd-af45-43cc9b9f41c0
manifest_version           : d99a31d4a4be907c510ae15965e9f7bb3387e9e28676e9f32adf463828b1aa28
executor_signature_id      : 3a249063-e33a-406a-9302-2e9e646a0938   (FK → DOT-991 sig ✓)
verifier_signature_id      : f5c3ee34-7f9f-4af3-879d-1bdcf5508a8f   (FK → DOT-992 sig ✓)
executor_tool_revision     : iu-cutter@f20c79c+canonical-A4-patch+autocommit-fix
verifier_tool_revision     : iu-cutter@f20c79c+write-verify-dot992-stub
tool_revision_match        : false                                  (SoD invariant ✓)
verify_kind                : axis_1_round_trip
axis_1_status              : pass
axis_2_status              : pass
verdict                    : pass
state                      : complete
canonicalization_rule_used : canon-md-v0.1.0  (column default)

2. verifier signature (M2 DOT-992) — re-fetched live

signature_id                       : f5c3ee34-7f9f-4af3-879d-1bdcf5508a8f
signature_kind                     : verifier
signer_dot_id                      : DOT-992
signer_tool_revision               : iu-cutter@f20c79c+write-verify-dot992-stub
payload_hash                       : 51feacd5a863b2473c63c30406acb1808c671ee16334780494f949630ff85388
cross_reference_change_set_id      : NULL
cross_reference_verify_result_id   : 18278460-438c-4fb4-bf9c-997c82447f92
                                      (XOR CHECK ✓ ; matches the persisted verify_result_id)
prior_signature_id                 : 3a249063-e33a-406a-9302-2e9e646a0938
                                      (cross-lane chain to M1 executor signature)
signed_at                          : 2026-05-20 05:30:00+00
scenario_ref                       : v0.5-first-controlled-canonical-cut

3. findings (jsonb on verify_result) — proven facts

{
  "iu_count": 60,
  "uv_count": 60,
  "anchored_exact": 60,
  "distinct_canonical_address": 60,
  "distinct_content_hash": 60,
  "body_hash_match_60": 60,
  "section_type": {"principle": 15, "section": 3, "article": 42},
  "dieu_44_intrusion": 0,
  "lifecycle_uniform_draft": true,
  "publication_type_uniform_law": true,
  "change_set_id": "456c6830-a747-4b53-ac2f-665e25e12cd0",
  "review_decision_id": "29c88a7b-60f7-41bd-af45-43cc9b9f41c0",
  "manifest_envelope_id": "638cf363-f45a-4bb3-b9bb-928c5e24c15b",
  "executor_signature_id": "3a249063-e33a-406a-9302-2e9e646a0938",
  "writer_digest": "d99a31d4a4be907c510ae15965e9f7bb3387e9e28676e9f32adf463828b1aa28",
  "manifest_digest": "9d908a62fcf01bb88e05a1af4335b960710006ddcfd21c811ca63efb33dd324f",
  "manifest_file_sha256": "7d56f3ce066950ccef3de4156c5afeea81b2450b8e38393205b52c1fca012179",
  "source_version_id": "icxconst-008a06ace23a96ea6cd456146e805c97",
  "reconstruction": "pass",
  "writer_digest_equivalence": "pass",
  "axis_1_round_trip": "pass",
  "axis_2_structural_boundaries": "pass",
  "canonicalization_rule_used": "canon-md-v0.1.0"
}

4. Invariant cross-checks (G6 contract)

linkage_to_change_set_id    : verify_result.change_set_id == 456c6830-…  ✓
linkage_to_review_decision  : verify_result.review_decision_id == 29c88a7b-…  ✓
linkage_to_manifest_envelope: verify_result.manifest_id == 638cf363-… (envelope_id)  ✓
linkage_to_executor_sig     : verify_result.executor_signature_id == 3a249063-…  ✓
linkage_to_verifier_sig     : verify_result.verifier_signature_id == f5c3ee34-…  ✓
verifier_sig_xref_verify    : dot_pair_signature.cross_reference_verify_result_id
                              == 18278460-… (the persisted verify_result_id)  ✓
xor_check_verifier          : (xref_cs IS NULL) AND (xref_vr IS NOT NULL)  ✓
sod_invariant               : executor_tool_revision != verifier_tool_revision  ✓
                              tool_revision_match == false  ✓
manifest_version_pin        : verify_result.manifest_version == PIN_WRITER_DIGEST  ✓
canonicalization_rule_pin   : verify_result.canonicalization_rule_used
                              == 'canon-md-v0.1.0'  ✓
state                       : verify_result.state == 'complete'  ✓
verdict                     : verify_result.verdict == 'pass'  ✓
axis_1 + axis_2             : both 'pass' ; drift_count == 0  ✓
findings_card               : all 60/60/60 quantitative facts match live  ✓
findings_excludes_dieu44    : dieu_44_intrusion == 0  ✓
DOT-992_lane_distinct       : signer_dot_id == 'DOT-992' ;
                              signer_identity (in envelope) == 'stub-verify-identity' ;
                              placeholder_signature ≠ DOT-991 signature over same payload
chain_prior_executor        : verifier_sig.prior_signature_id == M1 executor sig id  ✓
G_VERIFY_ONCE               : verify_result_count for change_set 456c6830 = 1
                              (was 0 pre-commit ; recorder refuses re-INSERT)  ✓

5. No unintended mutation

public.information_unit ICX-CONST count        : 60      (unchanged)
public.information_unit ICX-CONST lifecycle    : {draft} (unchanged)
public.unit_version v1 anchored ICX-CONST      : 60      (unchanged)
public.birth_registry ICX-CONST entries        : 60      (unchanged ; M1 leg-A pin)
public.source_document_version_registry        : untouched (no row inserted/updated)
public.source_document_registry                : untouched

cutter_governance.cut_change_set 456c6830-…   : state='committed' UNCHANGED
cutter_governance.review_decision 29c88a7b-…  : UNCHANGED
cutter_governance.manifest_envelope 638cf363-…: UNCHANGED
cutter_governance.dot_pair_signature 3a249063…: UNCHANGED (M1 executor sig)
cutter_governance.cut_change_set_affected_row : 61 rows (1 v0.4 + 60 M1) UNCHANGED
cutter_governance.manifest_unit_block          : 61 rows (1 v0.4 + 60 M1) UNCHANGED

deploy / restart / merge / tag                : NONE
secret read / .env access                      : NONE

6. Disposition

G6 (post-write verification)                 : PASS
  · verify_result row persisted               : YES (id 18278460-…)
  · linkage to change_set_id 456c6830-…       : ✓
  · DOT-992 verifier signature persisted      : YES (id f5c3ee34-…)
  · XOR + FK + SoD invariants                 : ✓
  · 60/60/60 + body_hash 60 + NT15·KT3·DIEU42 : ✓
  · lifecycle / publication_type unchanged    : ✓
  · no IU/UV/anchor/source_document mutation  : ✓
  · idempotency guard active                  : ✓ (re-run will refuse)
production_mutation                          : NONE this phase
next                                         : G6.5 rollback/compensation status (doc 6)

doc 5 of 7.