IU Core Constitution/DOT Hygiene — 06 Scale-readiness ruling

Constitution conformance scorecard

Constitution requirement	Status	Evidence
1. No hardcode (absolute)	PASS	doc 02 — 0 open VIOLATION_TO_FIX; all literals SSOT/config/registry
2. DOT 100%	PASS	doc 03 — runtime/110 covers 33/33; live conformance proven
3. Five-layer sync	PASS	doc 04 — all 5 layers classified; 4 unaffected, justified
4. Automation first	PASS (1 deferred)	doc 05 — every path automated except worker scheduling (HYG-6)
5. Reversible by default	PASS	doc 05 — disable/rollback/verify for every mutation path
6. Evidence first	PASS	counts, conformance verdict, tests, commit hash throughout

Remaining blockers (architecture / authority — not safe to repair here)

1. Worker invocation/scheduling (HYG-6). The route worker is invocation-based with no daemon/cron. Acceptable while inert; a real scheduler is a persistent component requiring sovereign approval. Must be designed disabled-by-default with a healthcheck and rollback — it is a first-class item of the next macro, not a hygiene repair.
2. dry_run=false chain — unchanged, all five blockers from the worker-live macro's doc 06 stand: delivery seam unbuilt, route CHECK forbids enabled+dry_run=false, no organic consumer evidence, cursor safety-lag, invocation mechanism. Out of scope here by the forbidden list.
3. No organic IU events — event_outbox still has 0 event_domain='iu' rows. Only a real structure-op or cut produces them.

None of these leaves any unsafe production state. The system is inert and dry-run-safe between invocations.

Ruling — SCALE-READY for the next durable macro

The IU Core foundation is hygiene-clean and scale-ready. No-hardcode, DOT visibility, five-layer sync, reversibility, and evidence-first all PASS. The substrate can now safely take its first durable structure-op.

Recommended next macro — First durable structure-op

IU_CORE_FIRST_DURABLE_STRUCTURE_OP_OPEN_GOAL (carries forward worker-live doc 07 Option A).

• Build a live PostgreSQL-backed StructureStore so structure_ops_workflow.py drives a real reparent_piece on the flat 158-IU tree — the lowest-risk op (no IU creation, no birth gate).
• Sequence: plan (dry-run, iu_structure_operation planned) → sovereign approval → apply (enacted, adjacency + iu_relation + iu_tree_path refresh) → verify → keep or rollback.
• Mandatory gates: fresh pg_dump -Fc; BEGIN … ROLLBACK probe before the durable apply; run runtime/110 before and after as the DOT conformance guard; five-layer re-classification.
• Unblocks: the first organic IU events → the worker records organic iu_route_attempt dry_run rows → clears dry_run=false blocker 3.
• Fold the worker scheduling design (HYG-6) into the same macro: disabled-by-default, healthcheck-backed, with rollback.

Alternatives (lower priority): auto-cut integration proof (needs the live StructureStore first); dry_run=false controlled delivery (best after organic evidence exists).