01 - O4 SSOT + Repo Precheck

3 câu Tuyên ngôn

1. Vĩnh viễn: O4 nối live read-only facts vào dry-run runner bằng seam, không mở production write path.
2. Nhầm được không: gates kiểm repo HEAD, read-only role, Mode.LIVE refusal, and execution_enabled=False trước khi chạy.
3. 100% tự động: nếu precondition lệch thì STOP; nếu pass thì runner tự tạo state sidecar, sovereign request docs, closeout, and idempotent resume proof.

KB / SSOT read

• .claude/skills/incomex-rules.md read.
• search_knowledge("operating rules SSOT"): OR v7.58 found.
• search_knowledge("hiến pháp v4.0 constitution"): Constitution v4.6.3 found.
• Feature sync closeout ruling read: knowledge/dev/laws/dieu44-trien-khai/reviews/dot-iu-cutter-v0.6-feature-sync-to-main-o3-pass-gpt-ruling-2026-05-21.md.
• O3 pass package read: knowledge/dev/laws/dieu44-trien-khai/v0.6-orchestrator-o3-live-readonly-discovery/.
• O2 package read: knowledge/dev/laws/dieu44-trien-khai/v0.6-orchestrator-o2-phase-body-e2e-authoring/.
• Automation design read: knowledge/dev/laws/dieu44-trien-khai/v0.5-automation-orchestrator-design/.

Starting repo state

Repo: /Users/nmhuyen/iu-cutter-build/repo/iu-cutter

branch=feature/constitution-snapshot-mark-dryrun
main_HEAD=3d26a09
feature_HEAD=3d26a09
working_tree_clean=true
remote_output=<empty>
tag_points_at_HEAD=<empty>

Kill-switch:

milestone=O3
version=0.6.0-O3-live-readonly-discovery
execution_enabled=False

Post-implementation repo state

branch=feature/constitution-snapshot-mark-dryrun
HEAD=6625f76
main_HEAD=3d26a09
feature_HEAD=6625f76
working_tree_clean=true
remote_output=<empty>
tag_points_at_HEAD=<empty>

Kill-switch:

milestone=O4
version=0.6.0-O4-live-dryrun-orchestration
execution_enabled=False

Result

G0 PASS. No production mutation, live execution, deploy, push, or tag.