IU Core Worker Live — 08 Final report

Macro: IU_CORE_WORKER_LIVE_DRYRUN_STRUCTURE_AUTOCUT_DELIVERY_PREP_OPEN_GOAL Date: 2026-05-21 · Outcome: IU_CORE_WORKER_LIVE_DRYRUN_AND_INTEGRATION_PREP_PASS

1. Final status — PASS

IU Core moved from "route worker installed but inert" to worker enabled and dry-run proven on production, dry-run-safe, with zero durable side effects; and the structure-ops / auto-cut / delivery-seam design packages became repo-backed, unit-tested code. No forbidden action taken.

2. What changed

• Production directus (durable): worker gate dot_config 'iu_core.route_worker_enabled' false→true; one committed dry-run worker run (seen=0). No iu_route_attempt / iu_route_dead_letter / event_outbox / IU / UV / tree row changed.
• Repo: runtime/090 (+rollback) 100; sandbox/040 probe; three new cutter_agent/iu_core/ modules; +27 tests; READMEs.

3. Repo

Branch main; HEAD 4e86c64 → 41d4fd7 (parent 4e86c64). Commit 41d4fd7 — feat(iu-core): worker live dry-run activation + structure-ops/auto-cut/delivery skeletons — 11 files, +1203/-11. Tree clean. No push/merge/tag.

4. Production backup / gate

/root/backups/iu-core-runtime/directus-pre-iucore-worker-live-20260521T142925Z.dump · 74,706,868 B · sha256 5d14dbdca0f88ab09e124ecba529b5714521bb3236d19ba2197be674ed59c38b. All 8 mandatory gates PASS (doc 01).

5. Worker gate result

Worker gate OPEN (route_worker_enabled='true') via runtime/090. The worker is invocation-based — no daemon, no cron, no service started. Reversible: runtime/080 / rollback/090.

6. Worker dry-run live evidence

runtime/090 first run seen=0 (no organic events). runtime/100 L1–L9 PASS. sandbox/040 BEGIN…ROLLBACK probe — 9 scenarios PASS, POST-ROLLBACK 0/0/0: dry-run pass, cursor + key idempotency, healthcheck, fail-closed delivery, dead-letter, replay, both gates (doc 02).

7. Cursor / audit / dead-letter / healthcheck

All verified — cursor advances atomically with attempt writes; one attempt per event; UNIQUE dedup on re-claim; dead-letter snapshots failures; fn_iu_route_dead_letter_replay fail-closed and resolves on dry-run; fn_iu_route_worker_health healthy (doc 02).

8. Delivery seam package

cutter_agent/iu_core/delivery_seam.py — fail-closed dispatcher contract (6 target kinds, request/outcome shapes, UnbuiltDeliveryTarget default, dispatch_delivery). seam_is_fail_closed()=True (doc 03).

9. Structure-ops executable package

cutter_agent/iu_core/structure_ops_workflow.py — plan/apply/verify/rollback driver over a StructureStore; InMemoryStructureStore test seam; executable end-to-end; live SQL-backed store is the next-macro skeleton (doc 04).

10. Auto-cut bridge package

cutter_agent/iu_core/autocut_bridge.py — pure post-lifecycle_enact mapper CutResult → (StructureOpRequest[], SqlLinkRequest[]), idempotent by keys. No production CUT (doc 05).

11. dry_run=false readiness

Updated (doc 06): worker gate opened + dry-run behaviour proven + delivery contract authored. Remaining blockers: seam build, route CHECK relax, organic evidence, cursor lag, invocation mechanism.

12. Tests

613 passed (was 586; +27 — TestRouteWorkerEnableRuntime +7, TestDeliverySeam +7, TestStructureOpsWorkflow +7, TestAutocutBridge +6). py_compile clean.

13. KB reports

8 docs in …/v0.6-iu-core-worker-live-dryrun-structure-autocut-delivery-prep-open-goal/ (01 precheck, 02 evidence, 03 delivery seam, 04 structure-ops, 05 auto-cut, 06 dry_run=false readiness, 07 next macro, 08 final).

14. Exact next macro

First durable structure-op — a live StructureStore driving structure_ops_workflow.py for one reparent_piece on the flat 158-IU tree (plan → sovereign-approved apply → verify). It produces the organic IU events both the auto-cut proof and the dry_run=false macro need. Alternatives: auto-cut integration proof, dry_run=false delivery (doc 07).

Forbidden actions — none taken

No dry_run=false; no downstream delivery; no persistent worker/daemon; no deploy/restart; no lifecycle mutation of existing IUs; no production CUT; no production VERIFY beyond read-only; no execution_enabled flip; no destructive cleanup; no secret logged; no push/merge/tag.