dot-iu-cutter v0.5 — Final Write-VERIFY / DOT-992 Report

doc 7 of 7 · 2026-05-20 · M2 macro · closeout

final_result         : A — WRITE_VERIFY_PASS
route_back           : GPT / User (M3 lifecycle assessment recommended next)
production_mutation  : +2 rows in cutter_governance.* (1 verify_result +
                       1 verifier dot_pair_signature) in 1 atomic txn @
                       2026-05-20T06:03:30Z under cutter_verify, DOT-992 lane,
                       StubSigning placeholder.
audit-debt remaining : ~22.2h (out of 24h budget from leg-A CUT)

1. Verdict

status                        : WRITE_VERIFY_PASS
gates                         : G0..G7 all PASS
production_mutation_in_scope  : 2 rows persisted (intended)
production_mutation_out_scope : NONE
fabrication                   : NONE — every value derived from live state or
                                ratified pins. live VERIFY facts re-read at
                                G5 via 1 CTE query inside the txn-owning conn.
DOT-992_signing               : StubSigning placeholder (consistent with
                                M1 D-4 ; real cryptography remains deferred)
SoD                           : preserved (executor_tool_revision !=
                                verifier_tool_revision ; tool_revision_match=false ;
                                signer_dot_id distinct ; signer_identity distinct)
lifecycle                     : draft uniform UNCHANGED (no draft→enacted)
source_document               : UNCHANGED
deploy / merge / push / tag   : NONE
secret_read                   : NONE

2. M2 persisted facts

verify_result_id              : 18278460-438c-4fb4-bf9c-997c82447f92
verifier_signature_id         : f5c3ee34-7f9f-4af3-879d-1bdcf5508a8f
payload_hash (committed)      : 51feacd5a863b2473c63c30406acb1808c671ee16334780494f949630ff85388
linkage :
  change_set_id               : 456c6830-a747-4b53-ac2f-665e25e12cd0
  manifest_id (envelope_id)   : 638cf363-f45a-4bb3-b9bb-928c5e24c15b
  review_decision_id          : 29c88a7b-60f7-41bd-af45-43cc9b9f41c0
  executor_signature_id (DOT-991): 3a249063-e33a-406a-9302-2e9e646a0938
  verifier_signature_id (DOT-992): f5c3ee34-7f9f-4af3-879d-1bdcf5508a8f
  prior_signature_id chain    : f5c3ee34-… → 3a249063-…  (verifier→executor chain)
manifest_version              : d99a31d4a4be907c510ae15965e9f7bb3387e9e28676e9f32adf463828b1aa28
executor_tool_revision        : iu-cutter@f20c79c+canonical-A4-patch+autocommit-fix
verifier_tool_revision        : iu-cutter@f20c79c+write-verify-dot992-stub
verdict                       : pass
state                         : complete
canonicalization_rule_used    : canon-md-v0.1.0
findings.iu_count             : 60
findings.uv_count             : 60
findings.anchored_exact       : 60
findings.distinct_canonical   : 60
findings.distinct_content_hash: 60
findings.body_hash_match_60   : 60
findings.section_type         : {principle:15, section:3, article:42}
findings.dieu_44_intrusion    : 0
findings.lifecycle_uniform_draft       : true
findings.publication_type_uniform_law  : true
findings.reconstruction       : pass
findings.writer_digest_equiv  : pass

3. Gate disposition recap

G0  SSOT + live state                       : PASS
G1  verify_result + DOT-992 schema survey   : PASS (26 cols ; 6 FKs ; XOR CHECK ;
                                              cutter_verify INSERT confirmed)
G2  payload construction                    : PASS (DISCOVER-FIRST done ;
                                              ledger_v2_canonical_verify authored)
G3  local fake-conn tests                   : PASS 30/30 in 0.002s ; no psycopg
G4  rollback-only-smoke                     : PASS exit 0 ; DB byte-identical
G5  commit (durable write)                  : PASS exit 0 ; 2 rows persisted
G6  post-write verification                 : PASS (linkage + invariants ; no
                                              unintended mutation)
G6.5 rollback / compensation                : NOT REQUIRED
G7  KB upload of 7 reports                  : PASS (this report set)

4. Artifact provenance

in-repo (laptop ; HEAD f20c79c untouched ; new files untracked) :
  cutter_agent/ledger_v2_canonical_verify.py    sha256 18ee4ca2ae28c3b21d76c3e1591b5a718123464f50b4e7f8d11e9a008b6dff97
  tests/test_ledger_v2_canonical_verify.py      sha256 c46370affaf0b357c983ccfcaf2a011e5e51512e1cf28379746024c09ff160da

ephemeral (contabo /tmp ; sovereign-authored) :
  /tmp/iu-cutter-v05-stage/cutter_agent/
    ledger_v2_canonical_verify.py               sha256 18ee4ca2ae28c3b21d76c3e1591b5a718123464f50b4e7f8d11e9a008b6dff97
  /tmp/cutter_verify_runner.py                  sha256 ac071f69bec6094e86a95b3f116572737564fb8a7d7c004d74041144ac3a8302

remote DB                  : directus (PostgreSQL inside `postgres` container ;
                              local-trust-auth from 127.0.0.1)
auth principal (writes)    : cutter_verify
auth method                : pg_hba trust-auth via container netns share
auth principal (probes)    : directus (SSH-shell ; read-only schema only)
                              context_pack_readonly (MCP ; no cutter_governance USAGE)
docker image (sidecar)     : agent-data-local:latest
sidecar network            : container:postgres

git on contabo (/opt/incomex/dot) : HEAD e93424b (v0.4 baseline ; v0.5 code
                                                   still lives ONLY on laptop +
                                                   contabo /tmp stage)
git on laptop (iu-cutter)         : HEAD f20c79c untouched ; uncommitted new files :
                                     cutter_agent/cutprod_canonical.py
                                     cutter_agent/ledger_v2_canonical_cut.py     (M1)
                                     cutter_agent/ledger_v2_canonical_verify.py  (M2 NEW)
                                     cutter_agent/prod_iu_adapter_canonical.py
                                     tests/test_ledger_v2_canonical_cut.py        (M1)
                                     tests/test_ledger_v2_canonical_verify.py     (M2 NEW)
                                     tests/test_prod_iu_adapter_canonical.py
                                  ⇒ commit + ratification remain deferred per
                                     M1 closeout ruling (M4 commit-and-merge).

5. Forbidden actions — confirmed NOT taken

lifecycle draft→enacted mutation  : NOT TAKEN
deploy / restart                  : NOT TAKEN
merge / push / tag                : NOT TAKEN
hard delete                       : NOT TAKEN
source_document mutation          : NOT TAKEN
source_version mutation           : NOT TAKEN
fabricate verify_result rows      : NOT TAKEN
bypass governance                 : NOT TAKEN
SQL outside M2 scope              : NOT EMITTED
secret leak                       : NOT TAKEN (no .env access ; no DSN with password)
self-advance to next macro        : NOT TAKEN (STOP → GPT/User)

6. Recommended next macros

M3  lifecycle draft → enacted (sovereign architectural decision) :
  · post-CUT package doc 4 surveyed 3 sovereign options ;
  · M3 requires a sovereign-ruled canonical transition function
    (e.g., `public.fn_iu_enact(p_canonical_address, p_actor, …)`) before
    any lifecycle column mutation is permitted ;
  · likely xhigh-effort due to enactment-semantics architecture ambiguity.

M4  commit-and-merge :
  · ratify the 7 untracked v0.5 canonical files on the laptop ;
  · push to remote ; tag v0.5.0-canonical-cut-and-verify ;
  · contabo /opt/incomex/dot update to the v0.5 HEAD.

M5  release / automation readiness :
  · per post-CUT doc 5 sequence ;
  · folds StubSigning replacement (DOT-991 + DOT-992 real crypto) workstream.

M2 ITSELF                                    : COMPLETE

7. STOP

result               : A — WRITE_VERIFY_PASS
route                : GPT / User
self-advance         : PROHIBITED (per macro contract)

doc 7 of 7.