O8C Report 09 — Final O8C report

• macro: v0.6-o8c-real-db-rollback-proof-readiness
• date_utc: 2026-05-21 · host: vmi3080463 (Contabo · 38.242.240.89) · effort: high
• FINAL RESULT: A — O8C_REAL_DB_ROLLBACK_PROOF_READY

1. Summary

O8C ratified the deployed O8B state as the Contabo state-of-record, then proved — against the live production database — that the v0.6 ProductionLiveExecutionAdapter reaches a real DB path inside a rollback-only transaction with no persistent mutation. The adapter's exact cut_leg_a SQL contract (public.fn_iu_create) executed on the live directus DB and returned status='created' — a genuine information_unit+unit_version pair was inserted (158 → 159) and then ROLLED BACK (→ 158, 0 rows leaked). The kill-switch stayed False throughout; the v0.4 skeleton and the deployed tree are untouched.

2. Gate roll-up

Gate	Outcome
G0 precheck-live	PASS — Contabo; active v0.6 == O8B manifest 82/82; kill-switch OFF; v0.4 intact; KB read OK (Report 01)
G1 version/milestone survey	PASS — milestone reads O4; mismatch classified patchable-on-Mac (Report 02)
G2 baseline tests/smoke	PASS — py_compile 67 OK; 394/394; targeted 28/28 (Report 03)
G3 rollback-only proof design	PASS — safe cutter_exec/cutter_verify path; zero-persistence proven for fn_iu_create (Report 04)
G4 execute rollback-only proof	PASS — 9/9 ALL_PROOFS_PASS; real write rolled back; counts unchanged (Report 05)
G5 gap closure/sharpening	PASS — F1 PARTIAL; F2/F3 OPEN-sharpened; F4/GAP5/6/7/8 OPEN with exact next actions (Report 06)
G6 next command package	PASS — Mac milestone-ratify package + VPS GAP5 package; no run authorised (Report 07)
G7 cleanup/disable	PASS — kill-switch OFF; nothing started; trees intact (Report 08)
G8 KB reporting	PASS — this 9-doc package

3. PASS criteria — all met

precheck_live_v0.6_eq_o8b_deployed_state:   YES — artifact 703559c, 82/82 sha256
execution_enabled_false_before_and_after:   YES — PROOF-1 / PROOF-9
v0_4_skeleton_untouched:                    YES — dot HEAD e93424b
tests_smoke_baseline_pass:                  YES — 394/394 + 28/28
version_milestone_mismatch_classified:      YES — patchable-on-Mac (Report 02)
real_db_rollback_only_proof_ran:            YES — 9/9 ALL_PROOFS_PASS
transaction_rollback_row_counts_unchanged:  YES — 9 tables == O8B baseline; 0 leaked
production_live_adapter_no_simulator:       YES — PROOF-3
f1_f2_f3_f4_gap5_6_7_8_closed_or_sharpened: YES — Report 06 matrix
kb_reports_uploaded:                        YES — this package

4. What O8C proved about the adapter

connection_provider_seam:   reaches the live directus DB as the genuine
                            cutter_exec / cutter_verify roles (PostgreSQL 16.13)
cut_leg_a_sql_contract:     public.fn_iu_create executes real-DB rollback-only,
                            status='created', information_unit 158->159->ROLLBACK
verify_path_sql_contract:   verify_result count + enacted-immutability trigger
                            survey — valid against the real schema
kill_switch:                gates all 6 adapter methods before any DB connect,
                            even with a real DB wired
simulator_fallback:         impossible — require_live_adapter refuses every
                            non-LiveExecutionAdapter

5. Honest residue (carried forward — does NOT block the O8C result)

F1  PARTIAL — connection seam + cut_leg_a SQL contract real-DB-proven; the
    adapter METHOD BODIES end-to-end need the GAP-7 sovereign kill-switch flip;
    host has psycopg2 only — production connection_provider needs psycopg3 / a shim.
F2  OPEN (sharpened) — cutplan rows need body/title/unit_kind/explicit-vocab
    section_type/owner_ref for fn_iu_create to return 'created'.
F3  OPEN (sharpened) — production governance_writer / verify_writer off the N=60 pin.
F4  OPEN — no BACKUP_GPG_FPR / GPG key provisioned.
GAP5 OPEN — /var/lib/cutter dirs + orchestrator config absent (VPS package ready).
GAP6 OPEN — per-cut revert/compensation unaddressed.
GAP7 OPEN — sovereign SG_1/SG_2 ruling (the authorising kill-switch flip).
GAP8 OPEN — no safe target document selected.

6. Non-mutation attestation

production_mutation:          NONE — one rollback-only txn, never committed
probe_rows_leaked:            0  (canonical_address LIKE 'ICX-CONST/O8C-RB-PROBE%')
production_row_counts:        unchanged — 158 IU / 165 UV / 60 lifecycle-log
                              + 6 governance tables == O8B-retry Report-07 baseline
execution_enabled:           False — never flipped (deployed tree + proof)
deployed_v0.6:                byte-unchanged (82/82 sha256 vs O8B manifest)
v0.4_skeleton:                untouched (dot HEAD e93424b)
vps_source_patched:           NO — milestone bump routed to the Mac SSOT
service / cron / docker:      none installed / started / restarted
live CUT / VERIFY / enact:    NONE
Mode.LIVE simulator fallback: impossible by construction (proven)
secrets logged:               none — DB creds read from .env, never emitted
real_crypto:                  untouched (StubSigning interface only)

7. Forbidden-action attestation

Forbidden	Status
Persistent production mutation	NOT DONE — rollback-only, 0 rows leaked
Leave execution_enabled True	NOT DONE — stays False
Live CUT / VERIFY / enact commit	NOT DONE
Delete v0.4 skeleton	NOT DONE
Patch source on the VPS as SSOT	NOT DONE — routed to Mac
Deploy / restart a service	NOT DONE — none exists
Log secrets	NOT DONE
Ask the User for an artifact / secret	NOT DONE
Hardcode secrets / runtime IDs	NOT DONE — creds from .env at runtime
Real crypto replacement	NOT DONE
Fake PASS	NOT DONE — F1 residue + all gaps disclosed honestly

8. Recommended next macro

next:  O8D — combine (Mac) the O8C milestone-ratify (Report 07 §A) with the
       F2 cutplan content-enrichment + F3 governance/verify writers, in ONE
       larger high-effort macro (per the O8B ruling's scope-sizing note).
then:  VPS — GAP5 runtime provisioning (Report 07 §B) + F4 backup GPG.
later: GAP6 per-cut revert, GAP8 safe target document, then GAP7 sovereign
       SG_1/SG_2 ruling -> the first authorised orchestrator-managed run.

9. STOP

final_outcome:        A — O8C_REAL_DB_ROLLBACK_PROOF_READY
production_mutation:  NONE
execution_enabled:    False (unchanged)
next_action:          STOP -> route to GPT / User