04 - O4 Live Dry-run Execution Result

G3 live dry-run orchestration

Live read-only access used role context_pack_readonly. Every live SQL statement was wrapped in BEGIN READ ONLY ... ROLLBACK. The runner itself used Mode.DRYRUN and a local DryRunReporter sidecar.

Live role and state

{
  "role_is_read_only": true,
  "role_user": "context_pack_readonly",
  "pre_survey": {
    "doc_prefix": "ICX-CONST",
    "governance_accessible": true,
    "icx_total": 60,
    "icx_draft": 0,
    "icx_enacted": 60,
    "uv_enacted": 60,
    "uv_enacted_at_nonnull": 60,
    "lifecycle_log_rows": 60,
    "lifecycle_log_review_decisions": 1,
    "iu_enact_md5": "6ca9bc39e2d2be93dd8a71739fa80dc4",
    "iu_apply_edit_draft_md5": "42e96b6c9e81a2d0a28b30644d178a26",
    "lifecycle_triggers_enabled": true
  },
  "grant_matrix": {
    "cutter_exec_execute_canonical_fns": true,
    "cutter_verify_select_insert_verify_result": true,
    "directus_select_review_decision": true,
    "no_public_execute_leak": true,
    "snapshot_sha": "45d25e38ac2dd440d0e7fdbdd6a5a20df11afbaef715002db4e46ea60bd2d600"
  }
}

Runner state transitions

{
  "run_id": "ictr-20260521T021523Z-8a941203",
  "r1_stop_code": "STOP_APPROVAL_REQUIRED",
  "r1_state": "awaiting_cut_authorization",
  "r2_stop_code": "STOP_APPROVAL_REQUIRED",
  "r2_state": "awaiting_lifecycle_authorization",
  "r3_stop_code": null,
  "r3_state": "closeout_reported",
  "candidate_count_confirmed": 60,
  "lifecycle_enacted_count": 60,
  "sidecar_state_final": "success"
}

Phase results

{
  "source_pin": "passed",
  "mark": "passed",
  "cutplan": "passed",
  "pre_write_backup": "passed",
  "grant_probe": "passed",
  "cut_leg_a": "passed",
  "structural_verify": "passed",
  "leg_b_record": "passed",
  "write_verify": "passed",
  "lifecycle_enact": "passed",
  "closeout": "passed"
}

RunContext live pins subset

{
  "live_doc_prefix": "ICX-CONST",
  "live_drift_class": "post_enactment_expected",
  "live_icx_total": 60,
  "live_icx_draft": 0,
  "live_icx_enacted": 60,
  "live_uv_enacted": 60,
  "live_uv_enacted_at_nonnull": 60,
  "live_lifecycle_log_rows": 60,
  "live_lifecycle_log_review_decisions": 1,
  "live_lifecycle_triggers_enabled": true,
  "live_fn_iu_enact_md5": "6ca9bc39e2d2be93dd8a71739fa80dc4",
  "live_fn_iu_apply_edit_draft_md5": "42e96b6c9e81a2d0a28b30644d178a26",
  "live_role_is_read_only": true,
  "live_readonly_role": "context_pack_readonly",
  "live_readonly_database": "directus",
  "live_grant_probe_sha": "45d25e38ac2dd440d0e7fdbdd6a5a20df11afbaef715002db4e46ea60bd2d600",
  "live_grant_cutter_exec_execute_canonical_fns": true,
  "live_grant_cutter_verify_select_insert_verify_result": true,
  "live_grant_directus_select_review_decision": true,
  "live_grant_no_public_execute_leak": true
}

Local reporting artifacts

Dry-run local sidecar markdown files:

kb_md_count=13
02-mark.md
03-cutplan.md
04-pre_write_backup.md
05-grant_probe.md
06-cut_leg_a.md
07-structural_verify.md
08-leg_b_record.md
09-write_verify.md
10-lifecycle_enact.md
11-closeout.md
SG1-cut-authz-request.md
SG2-lifecycle-authz-request.md
STOP-STOP_APPROVAL_REQUIRED.md

Production non-mutation proof

Pre/post live read-only survey counts were identical:

{
  "icx_total": true,
  "icx_draft": true,
  "icx_enacted": true,
  "uv_enacted_at_nonnull": true,
  "lifecycle_log_rows": true
}

Result

G3 PASS. The orchestrator ran end-to-end in dry-run/read-only mode using live facts and produced local reporting artifacts without production mutation.