01 — Precheck, Survey, Backup, Gates

Macro

IU_CORE_REMAINING_TREE_NONREPARENT_AUTOCUT_DELIVERY_30X_OPEN_GOAL — 2026-05-22.

Host + repo

Check	Value
Host	MacBook/dev /Users/nmhuyen/iu-cutter-build/repo/iu-cutter
Branch	main
HEAD before	61714d0
Tree	clean, no remote

Production identity (positive)

Check	Value
Host	VPS vmi3080463 (ssh contabo)
Container	postgres (image postgres:16, up 4 weeks, healthy)
Role / DB	directus / directus
Version	PostgreSQL 16.13
Directus marker	directus_collections = 164
IU surface	information_unit 158, iu_tree_path 158, v_iu_tree 158

Pre-macro state survey

• information_unit 158 live, 19 nested (DIEU-35 tree), 139 flat.
• iu_structure_operation 19 (all enacted reparent_piece), iu_relation 19 (active contains).
• event_outbox iu-domain = 18 (structure_op_applied).
• iu_route_attempt 18 (all dry_run), iu_route_dead_letter open 0.
• Gates: iu_core.routes_master_enabled=true, iu_core.route_worker_enabled=true, iu_core.structure_ops_enabled=false.
• Gateway: iu_create.gateway.marker_key=app.canonical_writer; allowed_marker_values includes fn_iu_structure_op + fn_iu_create.
• 43 fn_iu* functions; migration 011 present; fn_iu_create (birth gate) and fn_iu_route_deliver (unbuilt stub) present.
• Cross-document buildability: DIEU-28 14 buildable / 27 flat; DIEU-32 12 / 23; DIEU-35 0 / 17 (already built); (null)-doc 0 / 72.

Backup

pg_dump -Fc → /opt/incomex/backups/directus-pre-iucore-30x-20260522T023541Z.dump — 75 469 906 bytes — sha256 bf2658ea1f5e04d55a7f731a7e2458785776fe5f3997d9b5ac04247e812d9c96. Verified: pg_restore --list reports 279 TABLE DATA entries (valid archive).

Mandatory gates — all 13 PASS before any production mutation

1. Host correct (MacBook repo, clean tree, HEAD 61714d0). 2. Target identity positive (DB directus, PG 16.13, 164 collections). 3. Fresh backup + sha verified. 4. DOT baseline runtime/110 43/43 PASS, no-hardcode scan clean, 656 tests pass. 5. Candidate batch by live discovery (DIEU-28 / DIEU-32). 6. Batch bounded + reversible (26 single-row reparents). 7. Rollback/compensation authored before apply (runtime/rollback/180). 8. Gateway write-guard path legitimate (fn_iu_structure_op registered). 9. Birth-gate handshake proven before any new IU identity (sandbox/070). 10. Worker dry-run-safe (fn_iu_route_deliver RAISEs). 11. Disable path known (close gates / rollback/180 / rollback/012 / rollback/190). 12. runtime/110 verifies post-change visibility (53/53 PASS). 13. No layer invisible to DOT/five-layer.