04 — Delivery / text-as-code / operator runtime — hardening

1. F-1k-1 — CLOSED

1k flagged sandbox/150 as 8/9: positive-delivery probes (S4/S6) relied on live backlog carrying an undelivered structure_op_applied event. 1k delivery batch drained the backlog. Fix: self-seed INSIDE BEGIN...ROLLBACK. sandbox/150 now INSERTs 3 synthetic event_outbox rows pointing at real iu_structure_operation ids (FK-safe); seeds vanish at ROLLBACK. Discovered event_stream=update, delivery_lane=immediate, payload_classification=safe_metadata sourced from registry contract.

Result: sandbox/150 now 9/9 in BEGIN...ROLLBACK on production — gates closed (S1/S2/S3), delivers (S4), idempotent (S5/S7), batches (S6 +2), projection carries op context (S8), dead-letter open=0 (S9). F-1k-1 CLOSED.

2. Delivery seam — fully proven

9/9 stable. Internal-only; no external delivery.

3. Text-as-code apply — re-verified

sandbox/160 still 8/8 BEGIN...ROLLBACK on production. APPLY_IS_DESTRUCTIVE=False; destructive imports forbidden. Reversible bounded change + no-op idempotency lanes both proven.

4. OperatorRuntime concurrency lease — re-verified

sandbox/180 7/7: lease acquired, second instance blocked, re-entrant acquire by holder, wrong-token release refused, correct release frees, TTL-expired lease reclaimable. F-960x-1 stays closed.

5. Vector boundary probe — new

sandbox/190 8/8 (see doc 02).

6. Acceptance sandbox suite

sandbox/150 9/9, sandbox/160 8/8, sandbox/170 7/7, sandbox/180 7/7, sandbox/190 8/8 = 39 probe scenarios; 0 failures; 0 durable footprint.

7. OperatorRuntime command coverage

17 dot_iu_* operator commands (migration 017) + 5 dot_iu_vector_sync_* family. Boundary enforcement extends catalog implicitly: per-IU vector sync goes through record_plan → v2 SQL, which lease + CHECK both gate.