08 — Next Macro Package

State at handoff

• Code commit 3f69710 on main (parent 61714d0); KB commit 4b0d6f5. 686 tests.
• Migrations 001–012 + runtime 010–050/060/090/120/140/160/170/180/190 on production.
• 45 nested IUs (DIEU-28/32/35 trees all built); iu_structure_operation 45 enacted; 44 structure_op_applied events; 44 worker dry_run attempts.
• DOT 53/53, no-hardcode clean, five-layer classified.
• Non-reparent structure ops implemented (migration 012) + proven on the production schema (sandbox/070) but not durably enacted.
• dry_run=false blocked; structure-op gate closed.

Open gaps (exact)

1. Durable non-reparent ops — migration 012's add/split/merge/deprecate/ replace are proven (sandbox/070 BEGIN…ROLLBACK) but never committed on production. A durable enactment needs a real source case + a sovereign-approved bounded batch.
2. Durable non-reparent event emission + worker dry-run — the five structure_* event types are registered but no durable event of those types exists yet. Follows gap #1.
3. dry_run=false delivery — fn_iu_route_deliver still unbuilt; the delivery seam is scoped (doc 05) but not built.
4. PgStructureStore live DB run — proven over a fake connection; a real psycopg-backed run against production (gated, dry-run-safe) is unproven.
5. (null)-doc 72 IUs — still no encoded hierarchy; 60 non-draft. Not buildable by reparent.

Recommended next macro

IU_CORE_DURABLE_NONREPARENT_AND_DELIVERY_SEAM

Lowest-blast-radius first:

1. Durable non-reparent micro-batch — pick one genuine real-content deprecate_piece (the only non-reparent op with no birth gate and no lineage edge — the smallest safe step) and enact it durably under a sovereign-approved bounded transaction, then run the worker dry-run on its structure_piece_deprecated event. Closes gaps #1 + #2 with the smallest footprint.
2. dry_run=false delivery seam (separate, higher blast radius) — build fn_iu_route_deliver + the sql_function consumer (fn_iu_structure_consumer → iu_tree_change_log), relax the route CHECK per-route via the dot_config allowlist, add iu_core.delivery_enabled, run a bounded worker delivery, verify, disable. Sovereign macro.

Alternatives

• Auto-cut production bridge — drive a real orchestrator CutResult through AutocutBridge → PgStructureStore → the SQL layer (still gated, no production CUT). The BirthSpec handshake is now in place.
• Text-as-code layer kickoff — begin the IU-content-as-code layer on top of the now-complete tree + structure-op substrate.

Recommended first: the durable deprecate_piece micro-batch — the smallest safe step from "proven" to "durably enacted".