07 — Next macro package

State at handoff

• Commit 194f5ca on main (parent 5edd132); KB commit 0985cd0. 932 tests.
• Production directus DB: migrations 001–018 + the runtime layer through 280 — DOT 113/113, D8 drift 0.
• information_unit 160, iu_piece_collection 2, iu_piece_membership 5.
• Composer event family live on the 'delayed' lane; 4 durable composer events, all dry-run-delivered, 0 sent external, 0 dead-lettered.
• Operator runtime: substrate live, dot_iu_command_catalog 17 rows, dot_iu_command_run 4 rows (the bounded proof). OperatorRuntime proven plan/apply/verify/refuse end-to-end.
• All gates inert/closed except the master gate (controlled emission) and the route worker (dry-run only). iu_core.operator_runtime_enabled=false.

No blocker

Every approved branch of this macro completed. There is no carried production-apply gap.

Open gaps carried forward

1. Durable integrated auto-cut → composer run — sandbox/140 proves the flow non-durably (3 birth-gate pieces, events, worker, digest). The durable run mints information_unit rows from a synthetic OR discovered cut, with the composer event family observing it on the bus durably, the AutocutComposeApprovalPackage as the approval object, and runtime/rollback/<n> (soft-delete the minted IUs, drop the collection) as the reversal. This is the recommended FIRST slice of the next macro.
2. Operator runtime gate-open production window — this macro proved apply durably for a read-only command under a briefly-open gate. A durable MUTATING apply (e.g. dot_iu_create_file_from_pieces) through the runtime, gated and reversible, is the natural next operator-runtime slice.
3. External delivery gate — every composer route is dry_run=true. A dry_run=false delivery into the internal fn_iu_route_deliver seam remains a separate sovereign macro.
4. Text-as-code controlled import/apply — propose_collection_import is fail-closed and non-destructive; a durable importer (parse → propose → gated apply) is a separate macro. IMPORT_IS_DESTRUCTIVE stays False.
5. Axis-B inferred lane — still 0 inferred rows; needs a deterministic classifier (carried from 120x/240x).
6. Operator-console UI — v_dot_iu_command_registry / v_dot_iu_command_run_health are ready to power an operator console; dot_commands.py + OperatorRuntime is the command vocabulary + executor that UI would call.
7. Qdrant / vector sync — the iu-tree/ manifests remain natural deterministic vector-index units.

Recommended next macro

IU_CORE_960X_DURABLE_AUTOCUT_COMPOSER_AND_OPERATOR_MUTATION — combine gap #1 (the first DURABLE integrated auto-cut → composer run, minting a bounded set of birth-gate IUs into one inert collection with the composer event family observing it) with gap #2 (a durable mutating apply through OperatorRuntime — turning the operator runtime from "read-only proven" to "governed mutation proven"). Both are additive, bounded, reversible, and build directly on this macro's applied substrate.

Alternatives if a smaller slice is preferred: the text-as-code controlled importer (gap #4) or the axis-B inference pass (gap #5) — both repo-side, no production mutation.

Verification gate before 960x

960x should start only after GPT/User has verified, via AgentData list_documents + search_knowledge, that this macro's 7 reports are present and searchable, and that production reports DOT 113/113.