01 — Pre-check · live survey · backup · gates

• Macro: IU_CORE_1K_VECTOR_SYNC_OPERATOR_UI_DELIVERY_ACCEPTANCE_OPEN_GOAL
• Date: 2026-05-22
• Host: MacBook/dev /Users/nmhuyen/iu-cutter-build/repo/iu-cutter (git + python3 + psql + pg_dump + ssh — all verified present)
• Production: VPS vmi3080463, container postgres (postgres:16), DB directus, reached over SSH host contabo.

1. Repo baseline

Branch main; HEAD 5b743c0 (960x KB closeout); working tree clean. 981 tests pass at baseline.

2. Live production survey (pre-mutation)

object	count	matches 960x handoff
information_unit	163	yes
iu_piece_collection	3	yes
iu_piece_membership	8	yes
dot_iu_command_run	18	yes
iu_tree_change_log	56	yes
iu_route_attempt	68	yes
iu_route_dead_letter	0	yes
dot_iu_command_catalog	17	yes

Gates at baseline: composer_enabled=false, delivery_enabled=false, operator_runtime_enabled=false, structure_ops_enabled=false, routes_master_enabled=true, route_worker_enabled=true — the controlled 500x/960x end-state. No vector_sync gate existed (confirmed).

DOT conformance (runtime/110) 113/113 — table 16 / view 16 / function 40 / trigger 3 / config 7 / event_type 15 / route 16; D8 drift 0.

Verdict: production verified at migrations 001–018 + runtime through 300, DOT 113/113 — exactly the 960x handoff. No repair needed.

3. Containers discovered

postgres (prod DB), incomex-directus (directus 11.5), incomex-nuxt, incomex-qdrant (qdrant/qdrant:latest), pg-restore-test-…. The Qdrant container exists — the 960x "no connector" blocker is now buildable.

4. Backup (gate 3)

pg_dump -Fc → /opt/incomex/backups/directus-pre-iucore-1k-20260522T142308Z.dump

• size 76,411,584 bytes
• sha256 59222fbabbb4027b72e0c68a11cb221ab4cdb3f54b763adfb7a6887b5ddfa17a
• pg_restore -l → 3159 archive entries (valid).

5. Mandatory gates

All 17 mandatory gates PASS: correct host + tools; production directus positively identified; fresh hashed backup; DOT/no-hardcode/five-layer baseline clean; scope discovered live; the migration-019 mutation is additive + reversible (rollback/019); every command/event is registry/DOT-backed; OperatorRuntime cannot bypass governed SQL; the new lease makes the gate window concurrency-safe; vector sync cannot destructively overwrite the external store (gate + double switch); delivery stays internal-only; text-as-code stays fail-closed; no UI deploy/restart; the disable path is known for every gate. Production mutation approved.