01 — Precheck, live survey, backup, gates

• Macro: IU_CORE_500X_INTEGRATED_AUTOCUT_AND_OPERATOR_RUNTIME_OPEN_GOAL
• Date: 2026-05-22
• Host: MacBook/dev /Users/nmhuyen/iu-cutter-build/repo/iu-cutter
• Production: VPS vmi3080463 (ssh contabo), container postgres (postgres:16, server 16.13), DB directus, role directus.

1. Host + tools

MacBook host has git, python3 3.11, psql 14.17, pg_dump 14.17, and SSH access to the VPS. SQL is applied by piping each self-transacted file through ssh contabo 'docker exec -i postgres psql -U directus -d directus -v ON_ERROR_STOP=1'. Gate 1 PASS.

2. Production identity

current_database = directus, server PostgreSQL 16.13, information_unit 160, iu_piece_collection 2, iu_piece_membership 5 — matches the 500x closeout final report exactly. Gate 2 PASS.

3. 500x state verification

Surveyed read-only before any change:

• Gates: composer_enabled=false, delivery_enabled=false, routes_master_enabled=true, route_worker_enabled=true, structure_ops_enabled=false, delivery_live_routes='' — the 500x end-state, unchanged.
• Composer events: 4 on the 'delayed' lane (1 collection_created + 2 piece_added_to_collection + 1 collection_rendered). Structure events 44 + 12 on 'immediate'.
• Route attempts: 59 dry_run + 1 sent (the historical 60x runtime/220 internal-delivery proof — NOT an external delivery). Dead-letter open 0.
• Collections: iu_core.composer.pilot-doc-001, iu_core.composer.scratch-file-001.
• runtime/110 DOT scan: 106/106, every D9 class ok, D8 drift 0.
• baseline 879 tests pass locally before this macro's work.
• The 7 500x AgentData reports verified present + searchable via list_documents + search_knowledge.
• dot_iu* / v_dot_iu* / fn_dot_iu* namespace empty — clean for migration 018.

Production was exactly at the 500x closeout surface. No repair needed.

4. Package integrity

018_operator_runtime.sql (+rollback), runtime/280 (+runtime/rollback), sandbox/130, sandbox/140 — all present, all self-transacted; migration 018 is CREATE TABLE IF NOT EXISTS / CREATE OR REPLACE / INSERT … ON CONFLICT DO NOTHING only (no ALTER / DROP / data). Gate 5 PASS.

5. Backup — Gate 3 PASS

pg_dump -Fc of the directus DB:

• Path: /opt/incomex/backups/directus-pre-iucore-540x-20260522T091458Z.dump
• Size: 76,009,613 bytes
• sha256: ec7f0c3f42e6b76f4d7c59ad835d71b348db4901e1e033e86e6790c49c40b060
• Verified: pg_restore -l reads a valid archive — dbname: directus.

6. Gate summary

All 16 mandatory gates PASS before the first production mutation: correct host+tools, target identity, fresh verified backup, DOT/no-hardcode baseline clean, package integrity, bounded+reversible operation, rollback files present, registry-backed vocabulary, the runtime structurally unable to bypass governed SQL, auto-cut cannot run uncontrolled CUT, governed birth gate, tree consistency, worker dry-run-only, fail-closed text-as-code import, known disable path, AgentData report path.