O8 Report 01 — Precheck (live) & deployed-runtime survey

• macro: v0.6-o8-production-run-readiness-command-package
• date_utc: 2026-05-21
• host: vmi3080463 (Contabo · 38.242.240.89)
• gates covered: G0 PRECHECK-LIVE, G1 deployed-runtime survey

G0 — PRECHECK-LIVE

Check	Result	Evidence
Running on Contabo	PASS	hostname=vmi3080463, ip 38.242.240.89, uptime 97 d
v0.6 path exists	PASS	/opt/incomex/dot/iu-cutter-v0.6 present, source HEAD 6625f76
v0.4 path intact / untouched	PASS	/opt/incomex/dot/iu-cutter = v0.4 skeleton, owner 501:staff, unchanged
execution_enabled=False	PASS	orchestrator.__execution_enabled__ = False (live import confirmed)
O7 reports / state exist	PASS	iu-cutter-v0.6-o7-sidecar/ — 8 reports + 2 dry-run runs + smoke summary
KB read works	PASS	directus.public.knowledge_documents readable via postgres container psql
KB upload path works	PASS	agent-data MCP upload_document (container incomex-agent-data healthy)
No production mutation since O7	PASS	row counts information_unit=158, unit_version=165, iu_lifecycle_log=60, ICX-CONST enacted 60 — identical to O7 before/after

G0 = PASS. The live state matches the expected post-O7 state.

G1 — deployed-runtime survey

deployed_artifact:
  path:        /opt/incomex/dot/iu-cutter-v0.6
  source_HEAD: 6625f768841dd80a9d524fb722889731edc53c07 (6625f76)
  __version__: 0.6.0-O4-live-dryrun-orchestration
  __milestone__: O4            # CODE milestone numbering (O1 contracts ..
                               # O2 simulator .. O3 read-only .. O4 live-dryrun)
  __execution_enabled__: False
  deployed_utc: 2026-05-21T03:55:23Z (DEPLOY-MANIFEST)
  source_files_mtime: 2026-05-21 04:16  (byte-unchanged since O7 run at 04:23)

cli_runner:
  cutter orchestrate subcommand: ABSENT
       (design doc 06 §2.10 specified `orchestrate cut/resume/void/batch`;
        never implemented — O7 also recorded this)
  O7 used a read-only sidecar runner: iu-cutter-v0.6-o7-sidecar/o7_live_dryrun_runner.py

sidecar_rollback_path:
  O7 sidecar: `rm -rf /opt/incomex/dot/iu-cutter-v0.6-o7-sidecar`  (documented in O7)
  O8 sidecar: `rm -rf /opt/incomex/dot/iu-cutter-v0.6-o8-sidecar`  (this package)

service_state:
  systemd / cron / docker service for the orchestrator: NONE
  no daemon, no restart, manual-CLI model only

tests:
  pytest is NOT installed in the system `python3` (3.12.3); the suite was
  not re-run this macro. O7 GPT ruling certified 366/366 PASS at HEAD
  6625f76; deployed source files are byte-unchanged since O7. Import
  smoke PASS: `import cutter_agent.orchestrator` → version/milestone/
  kill-switch as above.

G1 critical finding — no live-execution code path exists

Inspection of the five mutating phase bodies (orchestrator/phases/{backup,cut_leg_a,leg_b_record,write_verify,lifecycle_enact}.py) shows each contains only the Mode.DRYRUN simulator path. After the kill-switch guard if mode==LIVE and not __execution_enabled__: raise, every body falls through to discoverer.simulate_*(). There is:

• no Mode.LIVE execution branch in any phase,
• no live-write discoverer (LiveDryRunDiscoverer docstring: "simulator-only phase bodies … no production write path is reachable"; the Discoverer protocol is read-only),
• phase comments that defer it ("live wiring O4+", "O4 wires LegBRecorder") — never done.

Consequence (carried into Reports 04 / 08 / 09 as GAP-9): flipping __execution_enabled__ to True would not produce a production cut — it would skip the refusal and run the simulator under a live label, a structural false-PASS hazard.

G1 = PASS as a survey; it surfaces the decisive O8 blocker (GAP-9).