IU Core — 480x Composer Event / Text-as-code Roundtrip — Final Report

• Macro: IU_CORE_480X_COMPOSER_EVENT_TEXTCODE_ROUNDTRIP_PRODUCTION_READINESS_OPEN_GOAL
• Date: 2026-05-22
• Host: MacBook/dev /Users/nmhuyen/iu-cutter-build/repo/iu-cutter
• Production: VPS vmi3080463, container postgres (postgres:16), DB directus
• Outcome: IU_CORE_480X_PARTIAL_WITH_EXACT_GAP

1. Final status

Every 480x feature was authored, statically + test-proven, and read-only verified against production: composer event wiring, the text-as-code roundtrip (export + parser + fail-closed importer), a durable composed-from-scratch collection, a workflow-as-piece-set proof, the auto-cut production-ready approval package, observability, and the DOT refresh. The durable text-as-code export is real and committed. The one major deferral is the durable production apply — this session's MCP surface has no pg_dump / DDL-execution tool, so the mandatory backup gate (gate 3) cannot pass and no production mutation was performed. The work is handed to GPT/User as a single gated apply runbook. No unsafe production state exists.

2. What changed (repo)

• 016_composer_event_wiring.sql (+ rollback) — fn_iu_emit_collection _event, fn_iu_collection_checkpoint, 2 observability views, the 4 mutating composer functions CREATE OR REPLACEd to emit.
• runtime/260_composer_event_family_register.sql (+ rollback) — the 8 composer event types + 8 dry-run-safe routes.
• runtime/270_composed_from_scratch_collection.sql (+ rollback) — the first durable composed-from-scratch collection (authored).
• sandbox/110_composer_event_workflow_probe.sql — BEGIN...ROLLBACK 9-probe proof (composer events + workflow-as-pieces).
• runtime/110 — DOT SSOT inventory 84 -> 104.
• composer.py — the composer event family contract.
• text_as_code.py — serialize_corpus, parse_collection_manifest, roundtrip_collection_manifest, CollectionImportProposal / propose_collection_import.
• autocut_bridge.py — AutocutComposeApprovalPackage + builder.
• iu-tree/ — the durable text-as-code export (corpus manifest 158 IUs + the pilot collection manifest + 2 read-only PG snapshots).
• test_iu_core_480x_composer_events.py + 5 DOT-count test files updated — 792 -> 843 tests.

3. Repo / branch / HEAD

Branch main; HEAD bdf6559 -> code 9025911 -> KB f1349b3. No push/merge/tag.

4. Production backup + gates

Gate 3 (fresh pg_dump -Fc backup) — BLOCKED. The Incomex VPS MCP surface is read-only (query_pg SELECT-only) + a narrow write_file allowlist; there is no shell / docker-exec / pg_dump tool. Per the gate-failure protocol no production mutation was performed; all safe repo/authoring/read-only work continued. Gates 1, 2, 4 PASS; 5–16 are satisfied by design but moot until gate 3 is met. See doc 01.

5. 240x state verification

240x state re-verified intact: 158 IU, iu_structure_operation 57, iu_piece_collection 1, iu_piece_membership 3, iu_metadata_tag 330, iu_tree_path 158, event_outbox iu 56, iu_route_attempt 56, dead-letter 0, DOT 84/84, 792 tests, 7 AgentData reports. No repair needed.

6. No-hardcode / DOT / five-layer

• No-hardcode: PASS — 0 secret/IP/DSN, 0 uuid literal in the new SQL / Python.
• DOT: the SSOT inventory + D9 verdict bumped 84 -> 104; production stays 84/84 (not mutated). runtime/110 is the post-apply verifier.
• Five-layer: classified (doc 05) — PG additive (authored); Directus no DDL; Nuxt render-only; AgentData 7 reports; Qdrant deferred.

7. Composer event wiring

Migration 016 + runtime/260: the 8-strong composer event family, fail-closed emit helper, gated checkpoint emitter, 4 composer functions re-wired. See doc 02.

8. Composer event worker / internal delivery evidence

sandbox/110 proves emission on the production schema BEGIN...ROLLBACK (compose/add/remove/reorder/checkpoint emit; fail-closed with the master gate shut). Durable evidence is produced by runtime/270 on apply. Routes are dry_run=true; external delivery structurally impossible. See doc 02.

9. Text-as-code export / diff / validate / import

Durable export DONE — iu-tree/_corpus/corpus-manifest.md (158 IUs) + iu-tree/_collections/document/iu_core.composer.pilot-doc-001.md. Importer implemented — parse_collection_manifest + fail-closed propose_collection_import (executes=False). See doc 03.

10. Roundtrip proof

Proven on real production data: roundtrip byte-identical=True; the Python computed_digest() reproduced the SQL-stored digest 909ea67e8b9e7dd72da242cbbee02510 byte-for-byte. See doc 03.

11. Durable composed-from-scratch collection

runtime/270 authored — 2 birth-gate-minted pieces, fully reversible. Status: authored, not executed (backup gate). sandbox/110 E2 proves the path. See doc 04.

12. Workflow-as-piece-set

Proven by sandbox/110 E8/E9 — a workflow is an ordered collection of step pieces; render contiguous; validation fail-closed on a broken step. See doc 04.

13. Auto-cut bridge package

AutocutComposeApprovalPackage — the production-readiness package for the first integrated auto-cut -> composer run; pure, never executes CUT. See doc 04.

14. Delivery / observability

External delivery remains blocked. 2 new observability views (v_iu_composer_event_backlog, v_iu_collection_export_status) added to the existing health / attempt-summary / dead-letter surfaces. See doc 05.

15. Rollback / disable readiness

Every mutation path is reversible: rollback/016, runtime/rollback/260, runtime/rollback/270 (soft-deletes minted IUs). Disable via the master gate or the composer gate. See doc 05.

16. Tests

843 passed (was 792; +51 in test_iu_core_480x_composer_events.py; 5 DOT-count test files updated for the 84->104 inventory).

17. KB / AgentData reports

7 reports under v0.6-iu-core-480x-composer-event-textcode-roundtrip- production-readiness-open-goal/, uploaded to AgentData and verified by list_documents + search_knowledge.

18. Exact blockers

One blocker: the durable production apply (migration 016 + runtime/260 + runtime/270) — blocked because this session's MCP surface has no pg_dump (gate 3) and no DDL-execution tool. Everything else completed durably (the iu-tree/ export, the repo code, 843 tests) or with executable proof (sandbox/110). Hand-off: the apply runbook in doc 07.

19. No forbidden action

No external downstream delivery; no production CUT; no production mutation of any kind; no broad lifecycle mutation; no ungoverned IU created; no destructive cleanup; no destructive text-as-code import; no deploy/restart; no daemon; no cron; no execution_enabled flip; no secret logged; no push/merge/tag. GPT handoff not used as task input.