dot-iu-cutter v0.5 WS-Q5 — Seed Data REVISED Draft (DML, INSERT-only)

Phase: v0_5_WS_Q5_seed_privilege_revised_command_package · Nature: command_package_revision_only / no_execution · Date: 2026-05-18 Authority (consumed, NOT reopened): GPT command-review …WS-Q5-seed-privilege-authoring-gpt-command-review-2026-05-18 (PASS_WITH_RULINGS_AND_REQUIRED_REVISION). Supersedes …/v0.5-ws-q5-seed-privilege-authoring/…seed-data-draft… for execution.

⚠️ GATING BANNER — DO NOT EXECUTE

phase: seed_revision ; dml_executed: none ; insert_only: true     # QG8
update: 0 ; delete: 0 ; on_conflict: 0 ; production_write: none
seed_execution_role (when later authorized): workflow_admin        # QG5 / OD-PV4
execution_authorized: false ; self_advance: PROHIBITED
decision_authority: GPT / User ONLY

Plain INSERT (no ON CONFLICT): the 12 tables are catalog-verified empty and this is the sole bootstrap — collision impossible; idempotency is the pre-seed emptiness gate (verification-plan §0), not ON CONFLICT. All timestamps a single deterministic constant.

---

0. Revision summary vs prior authoring package

applied_GPT_rulings:
  OD-SF1  -> seed ONLY 3 approved source families; 6 explicitly DEFERRED (§7)
  OD-EK1  -> entity_kind = WS-2 D5 set ONLY (5), no illustrative extras
  OD-MK1  -> metadata_key = idempotency_key ONLY
  OD-MC1  -> 8 matcher rows kept: each traces directly to a WS-2 D3 profile
             level matcher_ref (no speculative pattern bloat; detection=DEFERRED)
  OD-SM1  -> status markers kept as EXACT UTF-8 (U+2705 / U+1F4CB)
  BR-A1   -> address scheme ALREADY_LOCKED "<DOCPREFIX>/<L1>-<L2>-...-<Lk>"
net_change_to_executable_seed: row count UNCHANGED at 31 (the prior package's
  6 non-document families were already non-executable; this revision makes
  their exclusion an explicit deferral list, removes the inline commented block)

deterministic_constant: TIMESTAMPTZ '2026-05-18T00:00:00+00'
principal: registered_by/created_by := 'ws-q5-seed-bootstrap'
insert_order (FK-safe parents->children):
  1 matcher_config_registry        8   WS-2 D3 matcher_ref
  2 address_template_registry      2   WS-2 D6 + BR-A1 locked
  3 grammar_profile                2   WS-2 D3 Profile A/B
  4 grammar_profile_level          8   WS-2 D3 level_definitions (A=3,B=5)
  5 grammar_profile_status_marker  2   WS-2 D3 Profile A markers
  6 entity_kind_registry           5   WS-2 D5 seed set
  7 source_family_registry         3   WS-2 D2 — APPROVED subset only
  8 metadata_key_registry          1   v0.4 §4 idempotency_key
TOTAL executable seed: 31 rows / 8 tables
NOT seeded (0 rows, intentional): entity_reference_registry,
  source_document_registry, source_document_version_registry, authority_override

1. matcher_config_registry — WS-2 D3 (matcher = config row; OD-MC1 traceable)

-- @authority WS-2 D3 Profile A/B level matcher_ref. detection=DEFERRED is an
-- explicit deferral marker (NOT speculative pattern) — OD-MC1 ACCEPT_AS_DRAFT.
INSERT INTO cutter_governance.matcher_config_registry
  (matcher_ref, matcher_kind, matcher_definition, description, lifecycle, registered_by, registered_at)
VALUES
 ('mc.icx.nguyen_tac','heading-rule','{"matcher_kind":"heading-rule","level":"NGUYEN_TAC","numbering_scheme":"arabic","detection":"DEFERRED_WS2_no_concrete_pattern"}'::jsonb,'Incomex Constitution — 15 Nguyên tắc Nền tảng','active','ws-q5-seed-bootstrap',TIMESTAMPTZ '2026-05-18T00:00:00+00'),
 ('mc.icx.kien_truc','heading-rule','{"matcher_kind":"heading-rule","level":"KIEN_TRUC_SECTION","numbering_scheme":"letter","detection":"DEFERRED_WS2_no_concrete_pattern"}'::jsonb,'Incomex Constitution — Kiến trúc Hạ tầng A/B/C','active','ws-q5-seed-bootstrap',TIMESTAMPTZ '2026-05-18T00:00:00+00'),
 ('mc.icx.dieu','structural','{"matcher_kind":"structural","level":"DIEU","numbering_scheme":"arabic","detection":"DEFERRED_WS2_no_concrete_pattern"}'::jsonb,'Incomex Constitution — Mục lục Luật Điều 0..44','active','ws-q5-seed-bootstrap',TIMESTAMPTZ '2026-05-18T00:00:00+00'),
 ('mc.vn.chuong','heading-rule','{"matcher_kind":"heading-rule","level":"CHUONG","numbering_scheme":"roman","detection":"DEFERRED_WS2_no_concrete_pattern"}'::jsonb,'VN national law — Chương','active','ws-q5-seed-bootstrap',TIMESTAMPTZ '2026-05-18T00:00:00+00'),
 ('mc.vn.dieu','structural','{"matcher_kind":"structural","level":"DIEU","numbering_scheme":"arabic","detection":"DEFERRED_WS2_no_concrete_pattern"}'::jsonb,'VN national law — Điều','active','ws-q5-seed-bootstrap',TIMESTAMPTZ '2026-05-18T00:00:00+00'),
 ('mc.vn.khoan','structural','{"matcher_kind":"structural","level":"KHOAN","numbering_scheme":"arabic","detection":"DEFERRED_WS2_no_concrete_pattern"}'::jsonb,'VN national law — Khoản','active','ws-q5-seed-bootstrap',TIMESTAMPTZ '2026-05-18T00:00:00+00'),
 ('mc.vn.diem','structural','{"matcher_kind":"structural","level":"DIEM","numbering_scheme":"letter","detection":"DEFERRED_WS2_no_concrete_pattern"}'::jsonb,'VN national law — Điểm','active','ws-q5-seed-bootstrap',TIMESTAMPTZ '2026-05-18T00:00:00+00'),
 ('mc.vn.doan','structural','{"matcher_kind":"structural","level":"DOAN","numbering_scheme":"none","detection":"DEFERRED_WS2_no_concrete_pattern"}'::jsonb,'VN national law — Đoạn','active','ws-q5-seed-bootstrap',TIMESTAMPTZ '2026-05-18T00:00:00+00');

2. address_template_registry — WS-2 D6 + BR-A1 LOCKED <DOCPREFIX>/<L1>-<L2>-...-<Lk>

-- BR-A1 = ALREADY_LOCKED (GPT). docprefix_sep='/', level_sep='-',
-- encodes_status=false (status is metadata, never in address).
INSERT INTO cutter_governance.address_template_registry
  (address_template_ref, template_pattern, docprefix_separator, level_separator, encodes_status, description, lifecycle, registered_by, registered_at)
VALUES
 ('at.icx.const.v4','<DOCPREFIX>/<L1>-<L2>-...-<Lk>','/','-',false,'Incomex internal Architecture Constitution v4 address template (BR-A1 locked)','active','ws-q5-seed-bootstrap',TIMESTAMPTZ '2026-05-18T00:00:00+00'),
 ('at.vn.law','<DOCPREFIX>/<L1>-<L2>-...-<Lk>','/','-',false,'Vietnam national law address template (BR-A1 locked)','active','ws-q5-seed-bootstrap',TIMESTAMPTZ '2026-05-18T00:00:00+00');

3. grammar_profile — WS-2 D3 Profile A/B (FK -> address_template_registry)

INSERT INTO cutter_governance.grammar_profile
  (grammar_profile_ref, display, address_template_ref, lifecycle, registered_by, registered_at)
VALUES
 ('incomex-architecture-constitution-v4','Incomex Architecture Constitution v4 (internal law)','at.icx.const.v4','active','ws-q5-seed-bootstrap',TIMESTAMPTZ '2026-05-18T00:00:00+00'),
 ('vn-national-law','Vietnam National Law (external government law)','at.vn.law','active','ws-q5-seed-bootstrap',TIMESTAMPTZ '2026-05-18T00:00:00+00');

4. grammar_profile_level — WS-2 D3 level_definitions[] (FK -> grammar_profile, matcher_config_registry)

INSERT INTO cutter_governance.grammar_profile_level
  (grammar_profile_ref, level_seq, level, matcher_kind, matcher_ref, numbering_scheme, is_leaf_candidate)
VALUES
 ('incomex-architecture-constitution-v4',1,'NGUYEN_TAC','heading-rule','mc.icx.nguyen_tac','arabic',true),
 ('incomex-architecture-constitution-v4',2,'KIEN_TRUC_SECTION','heading-rule','mc.icx.kien_truc','letter',true),
 ('incomex-architecture-constitution-v4',3,'DIEU','structural','mc.icx.dieu','arabic',true),
 ('vn-national-law',1,'CHUONG','heading-rule','mc.vn.chuong','roman',false),
 ('vn-national-law',2,'DIEU','structural','mc.vn.dieu','arabic',false),
 ('vn-national-law',3,'KHOAN','structural','mc.vn.khoan','arabic',true),
 ('vn-national-law',4,'DIEM','structural','mc.vn.diem','letter',true),
 ('vn-national-law',5,'DOAN','structural','mc.vn.doan','none',true);

5. grammar_profile_status_marker — WS-2 D3 Profile A (exact UTF-8 — OD-SM1)

-- OD-SM1 APPROVE_EXACT_UTF8: marker MUST be inserted as exact UTF-8, NOT
-- ASCII-normalized. Verification asserts hex codepoints (not glyph).
INSERT INTO cutter_governance.grammar_profile_status_marker
  (grammar_profile_ref, marker, maps_to)
VALUES
 ('incomex-architecture-constitution-v4','✅','enacted'),          -- U+2705  hex e2 9c 85
 ('incomex-architecture-constitution-v4','📋','controlled_draft'); -- U+1F4CB hex f0 9f 93 8b

6. entity_kind_registry — WS-2 D5 seed set ONLY (OD-EK1 KEEP_WS2_D5_SEED_SET_ONLY)

INSERT INTO cutter_governance.entity_kind_registry
  (entity_kind, display, description, default_source_system_hint, lifecycle, registered_by, registered_at)
VALUES
 ('sql_entity','SQL entity','Live row/table in a PostgreSQL source system','postgres','active','ws-q5-seed-bootstrap',TIMESTAMPTZ '2026-05-18T00:00:00+00'),
 ('code_module','Code module','Source code module/unit in a repository','github','active','ws-q5-seed-bootstrap',TIMESTAMPTZ '2026-05-18T00:00:00+00'),
 ('git_file','Git file','A file path tracked in a git repository','github','active','ws-q5-seed-bootstrap',TIMESTAMPTZ '2026-05-18T00:00:00+00'),
 ('directus_item','Directus item','An item in a Directus collection','directus','active','ws-q5-seed-bootstrap',TIMESTAMPTZ '2026-05-18T00:00:00+00'),
 ('report_path','Report path','A stored report artifact addressed by path','knowledge-base','active','ws-q5-seed-bootstrap',TIMESTAMPTZ '2026-05-18T00:00:00+00');

7. source_family_registry — WS-2 D2, APPROVED subset ONLY (OD-SF1 ruling)

-- @authority WS-2 D2. GPT OD-SF1 ruling: SEED_AUTHORIZED_SUBSET_ONLY.
-- Exactly the 3 GPT-approved DOCUMENT families (bind to the 2 authorized
-- grammar profiles). NO generic profile invented; schema nullability UNCHANGED.
INSERT INTO cutter_governance.source_family_registry
  (source_family, display_vi, display_en, authority_semantics_default, grammar_profile_ref, version_policy, status_policy, default_parser_profile_ref, lifecycle, registered_by, registered_at)
VALUES
 ('internal_incomex_constitution','Hiến pháp Kiến trúc nội bộ','Internal Incomex Architecture Constitution','normative_authority','incomex-architecture-constitution-v4','living_document','enacted_only',NULL,'active','ws-q5-seed-bootstrap',TIMESTAMPTZ '2026-05-18T00:00:00+00'),
 ('internal_incomex_law','Luật nội bộ (Điều 0..44)','Internal Incomex Law','normative_authority','incomex-architecture-constitution-v4','living_document','enacted_only',NULL,'active','ws-q5-seed-bootstrap',TIMESTAMPTZ '2026-05-18T00:00:00+00'),
 ('external_government_law','Luật nhà nước','External government law','normative_authority','vn-national-law','external_pinned','enacted_only',NULL,'active','ws-q5-seed-bootstrap',TIMESTAMPTZ '2026-05-18T00:00:00+00');

# EXPLICITLY DEFERRED — NOT in this execution package (GPT OD-SF1, QG2):
deferred_source_families:
  - internal_process
  - sql_entity
  - code_artifact
  - report
  - lesson
  - architecture_note
deferral_reason: source_family_registry.grammar_profile_ref is NOT NULL FK;
  WS-2 D3 authorized only 2 grammar profiles; these are non-document/artifact
  sources with no ratified grammar binding.
future_options (GPT, separate gate — NOT this phase):
  - ratified grammar/profile binding for non-document/artifact sources
  - separate source_kind modeling if not grammar-parsed documents
  - schema/design revision through a separate gate

8. metadata_key_registry — idempotency_key ONLY (OD-MK1 SEED_IDEMPOTENCY_KEY_ONLY)

-- @authority v0.4 Hybrid §4 ("idempotency_key graduate đầu"). No other key
-- until concrete query/write needs are ratified (GPT OD-MK1).
INSERT INTO cutter_governance.metadata_key_registry
  (metadata_key, key_namespace, key_type, allowed_values_policy, cardinality_policy, mutability_policy, index_policy, hot_threshold_hint, lifecycle, owner_role, created_by, created_at)
VALUES
 ('idempotency_key','lineage','text','free','single','immutable','promoted_index',NULL,'active','cutter_governance','ws-q5-seed-bootstrap',TIMESTAMPTZ '2026-05-18T00:00:00+00');

9. Open decisions still deferred (NOT self-resolved)

OD-SF1 deferred 6 families (future options above) — separate gate
OD-MC1 concrete matcher detection internals — later WS-2 / parser-design
OD-SEQ1 source_document precedence -> 3 registries intentionally 0 rows
authority_override: 0 rows (WS-2 D4 — only for a real misclassified IU)
all flagged; none decided here (Agent does not self-resolve).

10. Statements

• QG1: revised seed = GPT-approved subset only. QG2: 6 families explicitly listed deferred. QG5: seed execution role = workflow_admin (recorded; not run). QG8: nothing executed.
• No GRANT, no schema ALTER, no generic grammar profile, no nullability change, no Directus, no CUT/VERIFY, no deploy, no git commit, no self-advance.
• Self-advance PROHIBITED — doc 1 of 6; STOP → route GPT/User.

Companion: seed-rollback-revised-draft, privilege-grant-revised-draft, privilege-rollback-revised-draft, seed-privilege-revised-verification-plan, seed-privilege-revised-command-package-report.