25000x · 04 — Auto-Instantiate-From-Event productization proof

Bounded BEGIN/ROLLBACK matrix (02_auto_instantiate_productization_proof.sql)

12 probes, all green.

#	Probe	Expected	Actual
C1	invalid_input (NULL event_id)	invalid_input	✓
C2	invalid_emit_mode='shadow'	invalid_emit_mode	✓
C3	live mode + auto-instantiate gate CLOSED	live_gate_closed	✓
C4	dry_run + composer gate CLOSED	composer_gate_closed	✓
C5	non-template target	template_not_marked	✓
C6	template_collection_id all-zeros	template_collection_not_found	✓
C7	happy-path dry_run	ok, 5 pieces, digest match	✓
C8	idempotent_replay (same event×template×suffix twice)	second call returns existing	✓
C9	happy-path LIVE (both gates ON in TX)	ok, 5 pieces, digest match	✓
C10	actor-scoped rollback dry_run	reports 1/1/1 would-delete	✓
C11	post-rollback log durability	0 rows for any C* actor	✓
C12	post-rollback gates	both gates false	✓

Durable productized event

event_id              : 25000d25-0000-4000-8000-000000000001
event_type            : template.published
template_collection_id: 1cd4f881-…d8d (tpl:wf:onboarding/v2)
emit_mode             : live
actor                 : iu-core-25000x-durable
idempotency_key       : df7bcf71ffd37a70db528cbe95161b69
instance_collection_id: c23fd63d-e6af-41e9-a61e-5201360cee14
instance_collection_key: tpl-inst:auto:25000x-durable-001
digest_matches_template: true

Post-commit: 1 sidecar row + 1 lineage row + 1 collection. Both gates false.

What this productizes vs 18000x sandbox

Concern	18000x sandbox	25000x productization
Storage	TEMP _simulated_event table	none (caller supplies event_id)
Gate	composer only	composer + auto_instantiate_enabled for live
Idempotency	none	md5(event_id
Modes	always BEGIN/ROLLBACK	dry_run / live
Rollback	implicit by ROLLBACK	actor-scoped fn
Observability	none	2 views (per-row + per-template summary)
Scaleout	n=1	n=12 proven (Phase E)