100000x · 00 Summary — IU_CORE_100000X_REAUTHOR_APPLY_CUT_VERIFY_FULL_PROOF_PASS

Date: 2026-05-26 Channel: workflow_admin socket-trust (Docker postgres container, db directus) Mode: Live apply for 040R/041R; proof in BEGIN/ROLLBACK Verdict: PASS — full pipeline INPUT → MARK → VERIFY-MARK → APPROVE → CUT → VERIFY-CUT → CLEANUP-DRY-15D operational.

Macro charter

Re-author 040R / 041R against live schema/signatures (pre-authorized by user); apply; run full end-to-end proof; clean rollback; ready for real Điều 37 cut.

What landed durable

Object	Pre	Post	Δ
public schema functions	500	502	+2 (fn_iu_cut_from_manifest, fn_iu_verify_cut_result)
dot_iu_command_catalog rows	34	36	+2 (dot_iu_cut_from_manifest piece+true+true; dot_iu_verify_cut_result health+false+false)
dot_iu_command_run rows	18	21	+3 smoke-test refusal audits (G1 not_found + G2 wrong_kind + V refused)
pg_dump size	893,887,758	893,909,489	+21,731 B
IU / DIEU axes / staging / VSP / piece_membership	—	—	unchanged (proof rolled back)
composer_enabled / retention_enabled	false	false	unchanged
production_documents	absent	absent	structurally untouched

End-to-end proof (FIXTURE-NVSZ-PROOF-100000x)

Check	Required	Observed	Verdict
input_to_staging	ok:true, lifecycle=pending_review	yes	✅
mark	1 staging + 3 payloads (cut_manifest/mark_report/coverage_proof)	3 parts (796B+85B+21B)	✅
verify_mark dry-run + apply	verdict=approved, axes ok, lifecycle→approved	yes	✅
approve	approved_at + approved_by + approval_doc_id NOT NULL	yes	✅
cut_from_approved_manifest	applied:true, pieces_created_count=2	yes	✅
verify_cut	verdict=verified, axes A/B/C + no_vector ok, problems=[]	yes	✅
cleanup_dry_run_15d	0 eligible	0	✅
no_vector_pollution	vsp count unchanged + 0 refs to new pieces	152=152 + 0 refs	✅

Refusal matrix verified (live)

Path	Expected refusal_code	Observed
Empty UUID	not_found	✅
sql_snapshot row	wrong_kind	✅
Already-consumed staging	not_approved	✅
p_source_hash := 'WRONG_HASH' vs manifest	source_changed	✅
Composer gate closed	composer_gate_closed	✅

G4 (incomplete_approval) and G5 (digest invalid) covered by code path but not exercised via dedicated fixture; they share the same return-shape pattern as G1-G3 above.

Drifts patched in 100000x (surgical, contract-preserved)

1. fn_iu_create return key is iu_id (not id as some memory recorded). 040R extracts via (result->>'iu_id')::uuid.
2. fn_iu_create does not write sort_order / section_type / doc_code / section_code to information_unit (those live in identity_profile jsonb). 040R follows up each create with an UPDATE.
3. iu_staging_record.source_kind CHECK vocab is {agent,user,system,import} — proof fixture uses system (90000x had fixture, invalid).
4. section_type vocab is {appendix, article, changelog, checklist, definition, governance_process, heading, instruction_block, paragraph, principle, process, section, technical_spec} — clause is NOT valid (it's a piece_role value). Proof fixture uses paragraph.
5. referenced_iu_ids is uuid[] — comparisons need IN (SELECT unnest(...)), not = ANY((SELECT col)).
6. iu_staging_record has no manifest_digest column — value is asserted via manifest.manifest_digest (32-hex) + recorded in metadata.determinism_digest.

All six are local mechanical drifts; contract/signature/algorithm of 040R/041R preserved versus 90000x intent.

Cross-references

• [[project-iu-core-91000x-apply-mark-to-cut-pipeline-and-proof-partial-with-exact-gap-2026-05-26]] — prior macro that applied 037-039 and identified the gap re-authored here.
• 80000x operational doctrine — MARK is not CUT.
• [[feedback-fn-iu-create-returns-jsonb-not-uuid]] — refresh: return key is iu_id, not id.
• [[feedback-honest-channel-block-beats-partial-trigger]] — channel discipline; in-TX composer gate toggle.

Operator next gate

Run a real Điều 37 source through the same pipeline (see report 08).