IU Core Event Worker — 02 Backup + drift survey

Production backup (gate 3)

Taken before any durable production mutation:

• Path: /root/backups/iu-core-runtime/directus-pre-iucore-event-worker-20260521T141243Z.dump
• Size: 74,669,011 B · pg_dump -Fc custom format
• sha256: 4d0b1f60362cfedb35e0fe18a7d245e9b1c1da6ea37e78013b22e8cb9356f99e
• Verified restorable: pg_restore -l lists 1215 TABLE/FUNCTION/VIEW TOC entries (7 iu_route*).

Drift survey vs the controlled-route SSOT (doc 06 / doc 11)

Item	Controlled-route macro	This macro (2026-05-21)
information_unit	158	158 — unchanged
unit_version	165	165 — unchanged
iu_tree_path	158	158 — unchanged
event_outbox total	92,667	93,686 (+1019 organic, all system/alert)
event_outbox event_domain='iu'	0	0 — no organic iu events yet
iu_route_attempt	0	0
master gate	open	open (true)
outbound route iu.version_applied.workflow	enabled=true, dry_run=true	unchanged
inbound route iu_sql.iu_sql_link.insert	enabled=false, dry_run=true	unchanged
triggers	trg_iu_out_version, trg_iu_sql_in_iu_sql_link attached	both attached, tgenabled=O
worker artifacts	none	none (greenfield)

Findings

1. event_outbox is still the doc-06 shape — no delivery-state columns, one BEFORE-INSERT validation trigger, no AFTER trigger, no consumer. The worker must carry its own cursor. Confirmed.
2. 0 iu-domain events — opening the master gate has not yet produced any organic version_applied rows (no version_seq>1 unit_version insert has occurred). The worker's dry-run proof therefore uses synthetic events emitted via fn_iu_emit_event (doc 04).
3. iu_outbound_route_safe_chk (enabled=false OR dry_run=true) is intact — an enabled+dry_run=false route is currently impossible. This is a key constraint for the dry_run=false package (doc 08).