IU Core — 30x Structure / Auto-cut / Delivery-prep — Final Report

• Macro: IU_CORE_REMAINING_TREE_NONREPARENT_AUTOCUT_DELIVERY_30X_OPEN_GOAL
• Date: 2026-05-22
• Host: MacBook/dev /Users/nmhuyen/iu-cutter-build/repo/iu-cutter
• Production: VPS vmi3080463, container postgres (postgres:16), DB directus
• Outcome: IU_CORE_30X_STRUCTURE_AUTOCUT_DELIVERY_PREP_PASS

1. Final status

IU Core advanced from "DIEU-35 tree + reparent proven" to "every buildable document built durably + non-reparent structure ops implemented and proven on the production schema + the IU birth-gate handshake proven + a live SQL-backed PgStructureStore + the structure-event family registered + delivery seam next-step concrete." dry_run=false stays blocked; no downstream delivery; no production CUT; no execution_enabled flip; no non-reparent op durably enacted on production.

2. What changed

Repo — commit 3f69710 (parent 61714d0) + KB commit 4b0d6f5

• 012_non_reparent_structure_ops.sql (+ rollback) — six-operation structure-op layer; non-reparent ops mint IU identity only via fn_iu_create.
• runtime/180_structure_op_all_documents_tree_build.sql (+ rollback) — discovery-driven all-documents batch tree build.
• runtime/190_structure_event_family_register.sql (+ rollback) — five non-reparent structure event types + routes (dry-run-safe).
• sandbox/070_non_reparent_structure_op_probe.sql — BEGIN…ROLLBACK proof.
• runtime/110 — DOT SSOT inventory bumped 43 → 53.
• cutter_agent/iu_core/pg_structure_store.py — live SQL-backed driver.
• autocut_bridge.py — BirthSpec birth-gate handshake.
• 3 test files — +30 tests (656 → 686). Code commit 3f69710 +2213/-39 15 files; KB commit 4b0d6f5 8 files.

Production directus DB (durable)

• runtime/180 — 26 durable reparent_piece ops (DIEU-28 14, DIEU-32 12).
• Migration 012 applied (3 functions replaced; gate-closed → non-reparent code inert).
• runtime/190 applied (5 event types + 5 routes).
• Result: iu_structure_operation 19→45 (all enacted), iu_relation 19→45, nested IU 19→45, event_outbox iu-domain 18→44, iu_route_attempt 18→44.
• No non-reparent structure op durably enacted — proven in sandbox/070.

3. Repo / branch / HEAD

Branch main; HEAD before 61714d0 → 3f69710 (code) → 4b0d6f5 (KB). No push/merge/tag.

4. Production backup + gates

Backup directus-pre-iucore-30x-20260522T023541Z.dump — 75 469 906 bytes — sha256 bf2658ea1f5e04d55a7f731a7e2458785776fe5f3997d9b5ac04247e812d9c96 (279 TABLE DATA verified). All 13 mandatory gates PASS before any mutation.

5. No-hardcode / DOT / five-layer

No-hardcode PASS (0 secret matches; runtime/180 no doc/uuid). DOT PASS — runtime/110 live D9 53/53, D8 0 drift. Five-layer classified — PG real change; Directus data-only; Nuxt render only; AgentData/KB; Qdrant no impact.

6–7. Tree batch

26/26 reparent_piece plan→apply→verify ok in one atomic transaction. Post-batch: 45 enacted ops, 45 active contains, 45 nested IUs, depth 0/1/2 = 113/42/3, consistency 158=158=158. runtime/130 S8 0 stranded.

8–9. Non-reparent + birth gate

Migration 012 implements all six op types. sandbox/070 proved add/deprecate/split/merge/replace on the production schema — all five plan→apply→verify ok, rollback soft-deletes minted IUs, BEGIN…ROLLBACK zero durable rows. Birth-gate handshake proven — non-reparent ops mint IU identity only via fn_iu_create; no ungoverned IU created.

10–11. Events + worker

runtime/190 registered 5 event types + 5 routes (dry-run-safe). runtime/150 ran on the 26 real structure_op_applied events: seen=26 attempts_written=26 dead_lettered=0, totals 44/44/0, all iu_route_attempt status=dry_run.

12–14. PgStructureStore / auto-cut / delivery seam

PgStructureStore live SQL-backed driver — drive() is the StructureOpsWorkflow-equivalent envelope, proven over a fake connection (10 tests). BirthSpec birth-gate handshake added to the auto-cut bridge; sandbox/070 P9 proved the autocut-mapped add_new_piece applies ok. Delivery seam next-step package concrete (doc 05); dry_run=false is a separate sovereign macro.

15–16. Rollback / tests

Every mutation path reversible (runtime/rollback/180, rollback/012, runtime/rollback/190, per-op rollback, gates). 686 passed (was 656; +30).

17. Exact next macro

IU_CORE_DURABLE_NONREPARENT_AND_DELIVERY_SEAM — durably enact one genuine deprecate_piece (smallest non-reparent step) + run the worker dry-run on its event; then the dry_run=false delivery-seam sovereign macro. See 08.

No forbidden action

No dry_run=false; no downstream delivery; no production CUT; no broad lifecycle mutation; no ungoverned IU; no destructive cleanup; no deploy/restart; no daemon; no cron; no execution_enabled flip; no push/merge/tag; no secret logged; no non-reparent op durably enacted.