O9 Report 08 — Readiness verification (G8)

• macro: v0.6-o9-first-automated-production-run-readiness
• date_utc: 2026-05-21 · host: Contabo vmi3080463
• gate covered: G8 — post-run / approval-ready verification
• result: G8 PASS — no run executed; all packages verified runnable; exact missing approvals enumerated

1. DB state — re-verified UNCHANGED (non-mutation proof)

End-of-macro counts, re-queried, vs. the G0 baseline:

public.information_unit:            158  == baseline   (98 draft + 60 enacted)
public.unit_version:                165  == baseline
public.iu_lifecycle_log:             60  == baseline
public.information_unit enacted:     60  == baseline   (ICX-CONST)
cutter_governance.cut_change_set:     2  == baseline
cutter_governance.review_decision:    3  == baseline
cutter_governance.verify_result:      2  == baseline
execution_enabled():              False  == baseline
=> ZERO persistent production mutation across the whole macro.

2. Package runnability verification

Package	Runnable?	Verification performed
backup_runner (Report 02)	YES	py_compile OK; --selftest fail-closed as designed; ProductionLiveExecutionAdapter(backup_runner=…) accepts it; bad-spec → BackupRunnerError
Grant package (Report 03)	YES	exact deployment_grant_matrix SQL run live (4/4 TRUE → grant_probe passes); 2-GRANT package is plain DDL; workflow_admin owner/superuser present to apply it
Target intake (Report 04)	SPEC-COMPLETE	registry fields + INSERT contract + criteria C1–C7 enumerated; blocked on precondition P-A/P-B (discover/cutplan front-end is ICX-CONST-shaped)
Command package (Report 06)	YES (gated)	phase order + SG_1 pause point code-verified; invocation contract matches OrchestratorRunner.cut/.resume + validate_sovereign_approval; gated on PRE-1..PRE-4
Test suite	YES	471/471 green on the deployed fdcf580 tree
Kill-switch	VERIFIED	Mode.LIVE refused while execution_enabled False (functional check + 471 suite)

3. Exact missing items before a first automated production run

BLOCKER-1  GAP7 — explicit valid SG_1 sovereign approval doc.
           Owner: sovereign. Form: Report 05 §3 contract
           (gate/run_id/signed_utc/allowance lines; run_id known only after
           the cut() pause). /var/lib/cutter/approvals/ is empty.
BLOCKER-2  GAP7 — authorisation to flip __execution_enabled__ True
           (single-run-scoped). Owner: sovereign. Separate from BLOCKER-1.
BLOCKER-3  F4 — BACKUP_GPG_FPR keypair not provisioned. Owner: operator
           (secret creation). Package: Report 02 §4. backup_runner itself
           is now READY.
BLOCKER-4  GAP8 — no safe target. Owner: operator + sovereign.
           Sub-precondition: the discover/mark/cutplan front-end is
           ICX-CONST-shaped (Report 04 §3) — needs P-A (source patch:
           generic snapshot parser) OR P-B (sovereign-scoped re-exercise).
GRANT      O9 grant package (Report 03 §4) — 2 SELECTs to cutter_exec.
           Owner: workflow_admin. Not a blocker by itself; apply at run time.

4. State of the first-run path

CLOSED / READY:  G0 precheck · G1 tests 471/471 · grant_probe gate (passes
                 as-is) · backup mechanism + backup_runner · command package
PACKAGED:        F4 GPG-key operator package · 2-grant package ·
                 GAP8 target-intake package · SG_1 approval contract
OPEN (sovereign/operator): BLOCKER-1..4 above

5. Verdict

g8:                  PASS — no run; DB unchanged; packages runnable;
                     missing approvals enumerated exactly
production_mutation: NONE
execution_enabled:   False