IU Core Runtime Activation E2E — 10 Next macro approval package

Recommended next macro: CONTROLLED ROUTE + MASTER-GATE ACTIVATION

The runtime layer is installed but inert. The next macro performs the two behaviour-changing steps (runtime/README.md steps 4 & 5) plus the H4 reconcile.

Scope (durable production changes to request)

1. Apply migration 006 — H4 reconcile (idempotent ALTER, iu_structure_operation is empty → instant).
2. Enable the outbound route in dry-run live:

   UPDATE public.iu_outbound_route   SET enabled=true, dry_run=true, updated_at=now() WHERE route_code='iu.version_applied.workflow';
   

3. Open the master gate (final activation):

   INSERT INTO public.dot_config (key,value,description)VALUES ('iu_core.routes_master_enabled','true','IU Core runtime — opened by <macro-id>')ON CONFLICT (key) DO UPDATE SET value='true', updated_at=now();
   

4. After reviewing real iu_route_attempt / event_outbox evidence, a further macro flips dry_run=false for live delivery.

Mandatory pre-work for that macro

• Fresh pg_dump -Fc backup (as here).
• Rule on the version_seq divergence (doc 04): decide whether the event_outbox path should filter version_seq>1 like the existing iu_notification_event path, or emit on first version too.
• Confirm a route worker / consumer exists for event_outbox before dry_run=false, else events accumulate undelivered.

Disable runbook (already proven safe)

1. Close the master gate (dot_config value → 'false') — instant, global.
2. UPDATE … SET enabled=false per route_code.
3. runtime/rollback/030_trigger_attach.rollback.sql to detach triggers.

Alternatives

• Defer — leave inert; the substrate + runtime layer are stable.
• Structure-ops enablement macro — populate iu_tree_path / iu_relation for the real 158-IU tree (currently all depth 0) under the gateway guard.
• Apply 006 only — minimal macro, just the H4 reconcile, no gate change.