IU Core — First Durable Structure Operation + Auto-cut + Worker Scale — Final Report

• Macro: IU_CORE_FIRST_DURABLE_STRUCTURE_OP_AUTOCUT_WORKER_SCALE_OPEN_GOAL
• Date: 2026-05-21
• Host: MacBook/dev /Users/nmhuyen/iu-cutter-build/repo/iu-cutter
• Production: VPS vmi3080463, container postgres (postgres:16), DB directus
• Outcome: IU_CORE_FIRST_DURABLE_STRUCTURE_OP_SCALE_PASS
• Commit: 48ec2aa (parent b9532a3)

1. Final status

The IU Core moved from "clean + dry-run-ready" to "first durable production structure operation executed, verified, and reversible." A SQL-backed plan -> apply -> verify -> rollback execution layer was built, installed, probed against real production rows with zero durable side effects, and then used to commit the first durable reparent_piece. DOT conformance, no-hardcode, five-layer classification, and the test suite all pass. dry_run=false stays blocked; no downstream delivery occurred.

2. What changed

Repo (commit 48ec2aa, +1651/-26, 17 files)

• sql/iu-core/010_structure_op_execution.sql — new migration: SQL-backed structure-op execution layer (6 functions + 1 view).
• sql/iu-core/rollback/010_structure_op_execution.rollback.sql — rollback, refuses while any operation is still enacted.
• sql/iu-core/runtime/120_structure_ops_register.sql — registers the gate CLOSED + registers fn_iu_structure_op as an IU Gateway canonical writer.
• sql/iu-core/runtime/rollback/120_...rollback.sql — disable runbook.
• sql/iu-core/runtime/130_structure_op_verification.sql — read-only S1–S9.
• sql/iu-core/runtime/140_structure_op_first_durable.sql — first durable reparent_piece runbook.
• sql/iu-core/runtime/150_route_worker_invocation.sql — disabled-by-default worker invocation + healthcheck package.
• sql/iu-core/sandbox/050_structure_op_probe.sql — BEGIN...ROLLBACK proof.
• sql/iu-core/runtime/110_...dot_conformance_scan.sql — 33 -> 41 objects.
• tests/test_iu_core_structure_op_layer.py — new (18 tests).

Production directus DB (durable)

• Migration 010 applied — 6 functions + 1 view (additive; no ALTER/DROP).
• runtime/120 applied — dot_config 'iu_core.structure_ops_enabled'='false'; fn_iu_structure_op appended to iu_create.gateway.allowed_marker_values.
• runtime/140 applied — first durable structure operation committed (operation b37fb5f1-a89e-4780-a9c3-1a8f35410a1d).
• Resulting durable rows: iu_structure_operation 0->1, iu_relation 0->1, one IU parent_or_container_ref set, one iu_tree_path recomputed depth 1.

3. Production backup + gates

• Backup: pg_dump -Fc -> /opt/incomex/backups/directus-pre-iucore-structop-20260521T151127Z.dump (74 726 211 bytes), sha256 4d07fe7cb79d54f5c05ebb90c67d9f9133e81042f3bd962fe8cb1a6fd6cb6a87.
• All 10 mandatory gates PASS before any production mutation.

4. No-hardcode / DOT / five-layer

• No-hardcode: PASS — config keys, identifiers, operation vocabulary only.
• DOT 100%: PASS — runtime/110 D9 41/41, every class ok, D8 0 drift.
• Five-layer: PG real change; Directus one-row data change; Nuxt render only; AgentData/KB reports; Qdrant no impact.

5. Tests

637 passed (was 619; +18).

6. Next macro

IU_CORE_STRUCTURE_OP_EVENT_EMISSION_AND_DIEU35_TREE_BUILD — wire fn_iu_structure_op_apply to emit IU_REPARENTED via fn_iu_emit_event, register the iu.structure_* event type + route, and reparent the remaining flat DIEU-35 leaves under their encoded parents.