IU Core 9000x — Qdrant Onboarding + Piece Platform DOT (PASS)

Macro tag: IU_CORE_9000X_QDRANT_ONBOARDING_AND_PIECE_PLATFORM_PASS Date: 2026-05-24 Repo: Huyen1974/iu-cutter — main post-commit Parent commit: d403648 (8000x-execute) This commit: 46c3c33

Outcome

Phase	Status
A. Baseline + pg_dump backup	PASS
B. Build Qdrant runtime driver (run_onboarding.py + qdrant_onboarding_driver.py)	PASS
C. Secret/network discovery (runner = incomex-agent-data)	PASS
D. Content policy (empty-body skip — 5 DIEU-28 IUs)	PASS
E. Qdrant dry-run + LIVE APPLY (88 points upserted, gate try/finally)	PASS
F. Retrieval / drift / vector-boundary verification	PASS
G. Piece Platform DOT kickoff (gap matrix + event roadmap)	PASS
H. Regression + healthcheck SQL fix	PASS
I. Tests / commit / reports	PASS

What is now durable in production

• Qdrant collection iu_core_iu_chunks — 61 → 149 points (+88 new, one vector per chunk per IU). 81 DIEU IUs indexed (5 empty-body DIEU-28 skipped per --empty-body-policy skip).
• public.iu_vector_sync_point — 64 → 152 rows (+88 last_actor='iu-core-9000x/qdrant_onboarding', sync_status='indexed').
• cutter_agent/iu_core/qdrant_onboarding_driver.py — runtime driver with execute_dry_run / execute_apply / execute_rollback modes; try/finally gate window; refuses production_documents; refuses draft IUs; one-vector-per-IU boundary asserted at three layers (Python, function, DB CHECK).
• ops/qdrant-onboarding-package-8000x/ — run_onboarding.py (Mac CLI)
  • in_container_run.py (agent-data CLI with psycopg2 + injected env).
• Healthcheck vector_boundary SQL fixed — now uses the same (unit_id, chunk_index) uniqueness invariant the DB CHECK enforces; multi-chunk IUs no longer trigger a false-positive breach.
• ops/piece-platform-dot-9000x/ — gap matrix + event roadmap documents (author-mode; no DOT registry change in this macro).

What is preserved unchanged

• 60 KT-B enacted ICX-CONST IUs / 61 KT-B Qdrant points — unchanged.
• Qdrant production_documents — never queried, never written (9379 points before, 9379 after; the driver refuses the collection name).
• 86 enacted DIEU IUs lifecycle_status — still enacted; onboarding did not touch lifecycle.
• All 6 IU Core write gates + retention gate — still false. The vector_sync gate was opened for the bounded apply window and closed in finally (single iu_lifecycle_log-style audit step).
• PR #669 — OPEN, MERGEABLE (not merged by us).
• Mac cron */10 * * * * — fires exit=0 with the fixed vector_boundary surface reporting 149 pts / 141 unique GREEN.

Channel set

Channel	Result	How
Mac local shell	YES	uname -a / which
SSH to contabo	YES (root@vmi3080463)	ssh contabo "id"
docker exec postgres psql -U directus	YES	proven by dry-run live run
docker exec incomex-agent-data python3	YES	python 3.11.15 + psycopg2 2.9.10
Qdrant API (in-container)	YES (auth 200)	api-key via container env
OpenAI Embeddings API (in-container)	YES (auth 200)	OPENAI_API_KEY via container env
Qdrant host port	NO (internal docker net only)	by design
Backup pg_dump	YES (79.3 MB)	sha256 captured

Backup taken pre-apply

File   : directus-pre-iucore-9000x-onboarding-20260524T110610Z.dump
Size   : 79,327,292 bytes
sha256 : 965172285878202d6df73904201cdee4e019747f7a629719bf03751180a7d7ba
TOC    : 3278 entries
Persisted at /root/backups/ on contabo