IU Core — 1k+ vector boundary · UI assembly · acceptance — Final report

• Macro: IU_CORE_1K_PLUS_QDRANT_VECTOR_BOUNDARY_UI_ASSEMBLY_ACCEPTANCE_OPEN_GOAL
• Date: 2026-05-23
• Host: MacBook/dev /Users/nmhuyen/iu-cutter-build/repo/iu-cutter
• Production: VPS vmi3080463, container postgres (postgres:16), DB directus
• Outcome: IU_CORE_1K_PLUS_VECTOR_UI_ASSEMBLY_ACCEPTANCE_PASS

1. Final status

IU Core moved from "production-ready core + vector substrate" to external-integration-ready + UI-assembly-ready + functionally complete. Binding per-IU vector-boundary rule enforced at the DB layer (sandbox/190 8/8). Directus-ready three-axis UI envelope view returns 163 rows on production. F-1k-1 CLOSED (sandbox/150 9/9). DOT 121→123. No unsafe state; no forbidden action.

2. What changed

Production (durable): migration 020 — 6 additive cols + 1 CHECK + 1 fn + 1 view; 0 IU data changed. Repo (code commit 00e8cc6): sql/iu-core/020 + rollback, sandbox/190, sandbox/150 self-seed, vector_sync.py boundary helpers + v2 routing, runtime/110 DOT bump 121→123, tests/test_iu_core_1k_plus_vector_boundary.py (+25 tests), 9 prior-macro test DOT-count updates. KB (commit 8cae3db): 7 reports.

3. Repo / branch / HEAD

Branch main; HEAD a236ed3 → 00e8cc6 (code) → 8cae3db (KB). No push/merge/tag.

4. Production backup + gates

pg_dump -Fc /opt/incomex/backups/directus-pre-iucore-1kplus-20260523T021535Z.dump, 77,149,678 bytes, sha256 c8051e6db63260594d747d9f53b61584e7cd81c871da345bad957a596184e70e, 3181 entries. All 21 mandatory gates PASS.

5. Current-state verification + 1k repair

Production verified at 1k handoff (DOT 121/121, iu=163, coll=3, membership=8, cmd_run=18, change_log=56, route_attempt=68, dead-letter open 0, vec_sync_point=3, lease 0). No repair needed.

6. Vector boundary enforcement

Migration 020 adds 6 cols + 1 CHECK + 1 v2 record fn. Rule enforced at THREE layers: application (assert_boundary + build_iu_point_set + chunk_iu_body), function (fn_iu_vector_sync_record_v2 raises check_violation), DB (CHECK constraint). sandbox/190 proves all three at runtime 8/8.

7. Qdrant / vector sync

DONE_WITH_EXTERNAL_BLOCKER — both secrets exist on VPS (QDRANT_LOCAL_API_KEY, OPENAI_API_KEY); remaining external-only is embedder wiring + IU Core collection name (separate from agent-data's shared production_documents).

8. AgentData / semantic sync

7 reports uploaded + verified by list_documents + search_knowledge.

9. Three-axis UI / API surfaces

v_ui_iu_three_axis_envelope on production; 163 rows. All three axes pre-joined. Directus exposure step deploy-gated; runbook in doc 03 §5. UI boundary preserved.

10. Delivery seam / F-1k-1 closure

sandbox/150 rewritten to self-seed 3 synthetic structure events inside its own BEGIN...ROLLBACK. Result: 9/9 on production (was 8/9). F-1k-1 CLOSED.

11. Text-as-code hardening

sandbox/160 re-verified 8/8. APPLY_IS_DESTRUCTIVE=False holds.

12. OperatorRuntime concurrency + command coverage

sandbox/180 re-verified 7/7 — F-960x-1 stays CLOSED. Catalog unchanged (17 dot_iu_* + 5 dot_iu_vector_sync_*).

13. Acceptance matrix

19 capability rows, 17 DONE, 1 DONE_WITH_EXTERNAL_BLOCKER, 0 PARTIAL, 0 BLOCKED. IU Core functionally complete.

14. Guide / roadmap update

1k+ default scale preserved. Existing prompt guide keeps 1x safety definition. Roadmap spine unchanged.

15. DOT / no-hardcode / five-layer

DOT 123/123, D8 drift 0. No-hardcode PASS. Five-layer: PG additive/durable, Directus/Nuxt none (deploy-gated), AgentData 7 reports, Qdrant code-tightened but no external write.

16. KB / AgentData reports

7 reports under v0.6-iu-core-1k-plus-vector-ui-assembly-acceptance-open-goal/, uploaded to AgentData + verified.

17. Tests

1045 passed (was 1020; +25). DOT-count assertions updated 121→123 across test_iu_core_ddl.py + 6 prior-macro test files.

18. Findings

F-1k-1 — CLOSED. F-960x-1 — CLOSED (re-verified). No new findings.

19. Forbidden actions — none performed

No external delivery; no destructive vector reindex; no cross-IU chunk; no hardcoded secret/connector/embedder; no broad lifecycle mutation; no ungoverned IU creation; no destructive cleanup; no unsafe deploy/restart; no execution_enabled flip; no direct Nuxt business logic; no direct PG from Nuxt; no Directus bypass; no secret logging; no push/merge/tag.

20. Completion ruling

IU Core is functionally complete. External integration (Qdrant write + Directus collection + Nuxt screen wiring) is the remaining work and is deploy/secret-gated outside this repo.