O8D Report 08 — VPS test + rollback-only proof result (G7)

• macro: v0.6-o8d-mac-patch-deploy-multigap-proof
• date_utc: 2026-05-21 · host: Contabo vmi3080463 · Python 3.12.3
• gate covered: G7 VPS tests + rollback-only proof
• result: G7 PASS

1. Deployed-tree tests

py_compile:   67 / 67 files OK
import check: cutter_agent.orchestrator -> milestone O8B,
              version 0.6.0-O8B-live-execution-wiring, exec_enabled False;
              Psycopg2ConnectionShim importable: OK
full suite:   python3 -m unittest discover -s tests
              Ran 412 tests in 3.440s   OK

2. Rollback-only DB proof — o8d_rollback_proof.py

Harness imports cutter_agent from the deployed cad989a tree; connects with psycopg2 to the live directus DB as the genuine cutter_exec role (the postgres container publishes 127.0.0.1:5432; credentials read from /opt/incomex/docker/.env at runtime, never emitted). Exercises the O8D-patched code (P2 shim + P3 F2-enriched rows).

PROOF-1  PASS  kill-switch OFF — execution_enabled()=False  milestone=O8B
PROOF-2  PASS  ProductionLiveExecutionAdapter.cut_leg_a refused before any
               DB connect while kill-switch OFF; provider_calls=0
               (O8D did NOT weaken the gate)
PROOF-3  PASS  Psycopg2ConnectionShim wraps a REAL psycopg2 connection and
               serves the psycopg-v3 .execute()/.fetchone() surface;
               role=cutter_exec db=directus
PROOF-4  PASS  extended cut_leg_a guard — F2-enriched CutplanRow passes
               (missing=[]); a bare row is refused for [body, title]
PROOF-5  PASS  fn_iu_create driven THROUGH the shim from an F2-enriched
               CutplanRow (adapter _rf() helper) -> status='created';
               information_unit 158 -> 159 in-txn, then ROLLBACK
PROOF-6  PASS  counts before=(158,165,60) after=(158,165,60);
               probe_rows_leaked=0
PROOF-7  PASS  kill-switch STILL OFF after the proof

O8D_ROLLBACK_PROOF  7/7  ALL_PROOFS_PASS

3. The headline — patched code, real write, fully rolled back

The O8D psycopg2 shim (P2) and the O8D F2-enriched cutplan row contract (P3) were both exercised against the live production database. An F2-enriched CutplanRow supplied every parameter public.fn_iu_create needs; the call — routed through Psycopg2ConnectionShim — returned status='created', inserting a genuine information_unit row pair (158 → 159) inside a transaction that was then ROLLED BACK (→ 158, 0 rows leaked).

4. Independent row-count verification (read-only query_pg MCP)

Table	pre-proof	post-proof
public.information_unit	158	158
public.unit_version	165	165
public.iu_lifecycle_log	60	60
probe ICX-CONST/O8D-RB-PROBE%	0	0

Out-of-band MCP snapshots before AND after the proof — production row counts unchanged, zero probe rows leaked.

5. G7 verdict

vps_py_compile_import_tests:  67 OK / import OK / 412-412 PASS
execution_enabled:            False (before and after)
rollback_only_proof:          7/7 ALL_PROOFS_PASS
patched_code_real_db_proven:  YES — P2 shim + P3 F2 rows drove fn_iu_create
transaction_outcome:          ROLLBACK — never committed
row_counts_unchanged:         YES — 158/165/60, independently MCP-verified
persistent_mutation:          NONE — 0 probe rows leaked
g7:                           PASS