Phase 3 — D30 regression matrix

All 8 D30 invariants checked at exit. All PASS.

#	Invariant	Expected	Observed	Verdict
T1	event_outbox row count unchanged + 0 pilot-origin rows	baseline 134,803; pilot-origin (created_at >= 15:13:00+00) = 0	134,803 / 0	✅
T2	iu_vector_sync_point row count unchanged	152 → 152	152	✅
T3	production_documents absent	to_regclass = NULL	NULL	✅
T4	pg_cron extension absent	empty	(0 rows)	✅
T5	5 MARK/CUT alias signatures unchanged	identical to baseline	identical (see below)	✅
T6	Substrate gates safe at exit	all OFF except heartbeat.enabled=true	matches	✅
T7	No broad worker / no new daemon	only 2 heartbeats (pilot + legacy passive)	2 heartbeats	✅
T8	iu_route_worker_cursor.iu_outbound_default.last_run_at frozen	2026-05-22 11:31:41+00	2026-05-22 11:31:41+00	✅

T5 — alias signatures (verified at exit, identical to entry)

fn_iu_op_mark_file(p_source_text text, p_source_ref text, p_pieces jsonb, p_actor text,
                   p_source_kind text, p_idempotency_key text, p_mark_report_md text, p_workflow_ref text)
fn_iu_op_verify_mark(p_staging_record_id uuid, p_approve boolean,
                     p_approval_doc_id text, p_approver text, p_actor text)
fn_iu_op_cut(p_staging_record_id uuid, p_apply boolean, p_actor text, p_open_composer boolean)
fn_iu_op_verify_cut(p_run_id uuid, p_actor text)
fn_iu_op_cleanup_dry_run(p_older_than_days integer, p_actor text)

T6 — exit gate snapshot

iu_core.composer_enabled        | false
queue.dlq.replay_enabled        | false
queue.heartbeat.enabled         | true
queue.job_substrate.enabled     | false
queue.lease.reaper_dry_run_only | true
queue.lease.reaper_enabled      | false
queue.notify.enabled            | false
queue.runtime.phase             | phase2_governance
queue.worker.enabled            | false

These are bitwise identical to the entry snapshot in 02-baseline-and-backup.md.

T7 — heartbeats

executor_name        | executor_kind   | last_tick_status | last_tick_at                  | age
---------------------+-----------------+------------------+-------------------------------+----------------------
dieu45_phase3_pilot  | external_worker | ok               | 2026-05-26 15:17:39.389501+00 | 00:03:14.71
iu_outbound_default  | PG_worker       | warn             | 2026-05-22 11:31:41.928657+00 | 4 days 03:49:12.17

No new daemon was started. The pilot heartbeat is a single passive caller (we invoked fn_queue_heartbeat_tick from psql twice — at enqueue time and at completion).

Forbiddens audit (15/15 honored)

1. No broad worker start — verified by T7 + T8.
2. No pg_cron install — T4.
3. No CHECK widening — iu_piece_membership.piece_role CHECK unchanged (title|intro|body|step|clause|appendix|reference).
4. No event_outbox schema change — T1.
5. No Qdrant write — T2 + vector_excluded=true on staging.
6. No production_documents creation — T3.
7. No START-HERE.md change.
8. No law text change.
9. No MOT / customer / email runtime activation.
10. No DLQ apply requeue — queue.dlq.replay_enabled=false at entry and exit.
11. No PG upgrade — still PG 16.13.
12. No new extension — {btree_gist, pgcrypto, plpgsql, postgres_fdw} unchanged.
13. No dot_iu_operator_* catalog mutation — alias surface unchanged (T5).
14. No retro patch to 06a2fc30… Codex staging — left as carry-forward.
15. No alias-bypass cut — every CUT call went through fn_iu_op_cut.

All recorded mutations are within the allowed set declared in the mission prompt:

• 1 staging record + 3 payload rows (pilot)
• 17 information_unit rows (DIEU-37 cut output)
• 6 job_queue rows (pilot, all succeeded)
• 2 heartbeat ticks on dieu45_phase3_pilot
• 4 dot_config flips (substrate + composer ON during pilot, both OFF at exit)