Orchestrator O1 · 01 SSOT + Repo Precheck

doc 1 of 6 · 2026-05-20 · G0 gate

phase                : G0 — SSOT + repo
outcome              : G0 PASS
production_mutation  : NONE

1. SSOT (KB)

• mcp__agent-data__get_document on the prep docs (GPT ruling + design package) returned content for both — the rulings authorise O1 authoring-only and the design package (7 docs in v0.5-automation-orchestrator-design/) is intact.
• mcp__agent-data__upload_document works (this doc proves it).

2. Repository identity (pre-O1)

working_directory : /Users/nmhuyen/iu-cutter-build/repo/iu-cutter
remote            : (none — push impossible)
branch            : feature/constitution-snapshot-mark-dryrun
working_tree      : clean
tags              : none

3. HEAD census (pre-O1)

feature_head : 0a64a61   (== expected)
main_head    : 0a64a61   (== expected)

Matches the prior MAIN_FF_AFTER_HARDCODE_CLEAN_PASS ruling.

4. Baseline tests (pre-O1)

$ python3 -m unittest discover -s tests
Ran 265 tests in 0.167s
OK

The 265-test clean baseline established by the audit + light-followups is the reference point. Any O1 work must keep all 265 green and add coverage on top.

5. Forbidden surface (re-asserted for the O1 macro)

Forbidden	Status
Production mutation	NOT EXECUTED
Live CUT / VERIFY / enact	NOT EXECUTED
Deploy / restart	NOT EXECUTED
Push / tag	NOT EXECUTED
Source_document/source_version mutation	NOT EXECUTED
Hardcode secrets / runtime IDs	NOT EXECUTED
Replace StubSigning with real crypto	NOT EXECUTED (O6)
Re-open architecture decisions	NOT NEEDED — design package PASS holds

6. Verdict

g0_outcome     : PASS
ssot_reachable : true
repo_state     : clean, feature == main == 0a64a61
baseline_tests : 265/265 OK
design_holds   : YES — no architectural gap surfaced