KB-1CBA rev 28

tool-kiem-thu — 00 Index

12 min read Revision 28
tool-kiem-thuindex00-indeximplementation-package-dotreuse-auditbaseline-reconciliationauthority-decision-matrix2026-06-09

00 — Index — tool-kiem-thu

Central index for the Implementation Package DOT initiative. One line per document. Updated: 2026-06-09 · Current phase: baseline → authority matrix → BCDGH_SEALED by Codex → Authority Contract v0.1 AUTHORITY_CONTRACT_V0_1_READY_FOR_GPT_REVIEW → Reuse Extraction Map v0.1 REUSE_EXTRACTION_MAP_READY_FOR_GPT_REVIEW → GPT review next. No implementation/tool/schema/runner/mutation authorized.

Documents (chronological)

Path Kind Status Hook
README.md readme active What the initiative is + folder rules.
00-index.md index active This file.
planning/implementation-package-dot-v0-1-feasibility-plan-2026-06-09.md plan SUPERSEDED (maturity + readiness) First feasibility plan. Useful for the 8-check shape only. Its "PARTIAL / mostly design" framing understated the estate.
reports/text-as-code-reuse-anti-duplication-audit-2026-06-09.md audit RATED UNSAFE by Codex Reuse/anti-duplication audit. Found much deployed infra, but omitted the count ledger → Codex CLAUDE_AUDIT_UNSAFE_TO_USE_FOR_PLANNING. Read with the baseline + Codex review.
reviews/codex-crosscheck-text-as-code-reuse-audit-2026-06-09.md review (Codex) active Adversarial cross-check: CLAUDE_AUDIT_UNSAFE_TO_USE_FOR_PLANNING / NEEDS_FRESH_BASELINE_FIRST. Confirms the DOT-count was several different sets/dates; lists 10 authority gates.
reports/dot-registry-directus-text-as-code-baseline-reconciliation-2026-06-09.md baseline BASELINE_READY_FOR_AUTHORITY_DECISION Read this for any count. Fresh live (07:11 UTC) denominator-separated ledger: registry 309 / operational-FS 214 / fs-confirmed 186 / actual_count 163 / command-catalog 54 / registry-no-file 41; flows 128; IU 219 / TAC 102 (no compat view). Counts NOT collapsed.
reports/dot-registry-directus-text-as-code-baseline-reconciliation-2026-06-09.json baseline (machine) active Machine-readable snapshot of the same ledger (surfaces[], denominator/query/mode/ts/confidence/conflicts).
reports/authority-decision-matrix-draft-after-baseline-2026-06-09.md decision matrix (DRAFT) AUTHORITY_MATRIX_READY_FOR_GPT_REVIEW The decision frame. 10 authority domains A–J, each with recommended option + confidence + evidence + risks + prohibition + Codex-required + blocks-spec. Decide-now: A/E/F/I/J. Codex-seal: C/D/G/H(+B). Fresh-read: actual_count filter / OS listing / scripts-42 / Đ23 inverse-check. Does NOT decide — frames decisions.
reports/authority-decision-matrix-draft-after-baseline-2026-06-09.json decision matrix (machine) active Machine-readable mirror: domains[] with recommended/confidence/evidence/risks/prohibited/codex/blocks + closure_plan + ip_dot_impact + questions_for_review.
reports/authority-matrix-fresh-read-closure-bcdgh-2026-06-09.md fresh-read closure FRESH_READ_CLOSURE_PARTIAL Read this for B/C/D/G/H. Read-only closure of the 5 deferred domains. Resolves: G=EXISTING_AUTHORITY_SUFFICIENT, H=NO_BRIDGE_DUAL_REPORT_ONLY, 41-vs-4 fully explained, "42 surface"=/opt/incomex/scripts (separate, not DOT). 🔴 C's 186∩command-catalog formula WITHDRAWN — join=0, disjoint spaces; safe read-only set exists only on IU layer (15 mutating=false). actual_count=163 = external-sync artifact, UNVERIFIABLE/UNSAFE.
reports/authority-matrix-fresh-read-closure-bcdgh-2026-06-09.json fresh-read closure (machine) active Machine-readable mirror: domains B/C/D/G/H + counts[] + safe_call_set_result + tac_iu_result + duplicate_graph_orphan_result + matrix_patch + permanently_unverifiable_readonly.
reviews/codex-seal-authority-matrix-bcdgh-2026-06-09.md Codex authority seal BCDGH_SEALED Read this for final B/C/D/G/H authority wording. B=no filesystem calls in v0.1; C=no calls until separate contract; D=fresh code-keyed current diff; G=reuse existing/no new resolver; H=dual-report/no bridge authority.
contracts/authority-contract-v0-1-2026-06-09.md authority contract AUTHORITY_CONTRACT_V0_1_READY_FOR_GPT_REVIEW The binding contract. Records sealed B/C/D/G/H + adopted A/E/F/I/J, the denominator contract (7 separate denominators), allowed/prohibited envelope, existing-authority reuse map, unresolved/deferred list, and the gate to the next phase. Not a tool/schema/runner; no mutation.
contracts/authority-contract-v0-1-2026-06-09.json authority contract (machine) active Machine-readable mirror: status/scope/denominator_contract/allowed/prohibited/reuse/unresolved/gate/sealed_decisions A–J/parallel_authority_risk.
reports/reuse-extraction-map-v0-1-2026-06-09.md reuse extraction map REUSE_EXTRACTION_MAP_READY_FOR_GPT_REVIEW The reuse map. 18 capabilities each classified A REUSE_AS_IS / B REUSE_WITH_ADAPTER (read-only) / C REFERENCE_ONLY / D PROHIBITED_OVERLAP / E TRUE_GAP / F UNVERIFIED. Biggest reuse = deployed reconciliation+graph+corpus read surfaces (read-only). Biggest prohibited = any 2nd runner/invoker + 3rd manifest/logger/graph-resolver/TAC↔IU bridge. True gaps (all DEFERRED): command-runner+exit-codes, claim↔test run-binder, generic manifest schema, --selftest+module_sha256, audit_dead_links() engine. Gap-only Spec readiness = PARTIAL_READY (read-only surface ready; execution gaps carved out).
reports/reuse-extraction-map-v0-1-2026-06-09.json reuse extraction map (machine) active Machine-readable mirror: capability_map[] (18) + reuse_as_is/adapter/reference/prohibited/true_gaps/unverified + gap_only_spec_readiness + parallel_authority_risk.
checkpoints/checkpoint-implementation-package-dot-v0-1-feasibility-plan-2026-06-09.md checkpoint active First plan session.
checkpoints/checkpoint-text-as-code-reuse-anti-duplication-audit-2026-06-09.md checkpoint active Reuse-audit session.
checkpoints/checkpoint-dot-registry-directus-text-as-code-baseline-reconciliation-2026-06-09.md checkpoint active Baseline-reconciliation session.
checkpoints/checkpoint-authority-decision-matrix-draft-after-baseline-2026-06-09.md checkpoint active Authority-decision-matrix-draft session.
checkpoints/checkpoint-authority-matrix-fresh-read-closure-bcdgh-2026-06-09.md checkpoint active B/C/D/G/H fresh-read closure session.
checkpoints/checkpoint-codex-seal-authority-matrix-bcdgh-2026-06-09.md checkpoint active Codex seal snapshot: BCDGH_SEALED, no production mutation, Authority Contract v0.1 next.
checkpoints/checkpoint-authority-contract-v0-1-2026-06-09.md checkpoint active Authority Contract v0.1 session: AUTHORITY_CONTRACT_V0_1_READY_FOR_GPT_REVIEW, no mutation, Reuse Extraction Map next.
checkpoints/checkpoint-reuse-extraction-map-v0-1-2026-06-09.md checkpoint active Reuse Extraction Map v0.1 session: REUSE_EXTRACTION_MAP_READY_FOR_GPT_REVIEW, Gap-only Spec readiness PARTIAL_READY, no mutation, GPT review next.

Current verdict & phase

Current authoritative status: REUSE_EXTRACTION_MAP_READY_FOR_GPT_REVIEW (on top of AUTHORITY_CONTRACT_V0_1_READY_FOR_GPT_REVIEW and BCDGH_SEALED). The Reuse Extraction Map v0.1 (reports/reuse-extraction-map-v0-1-2026-06-09.{md,json}) is now written — it maps all 18 required capabilities into the six reuse classes against the sealed Authority Contract, with no mutation. It downgrades the pre-seal reuse audit's "call directly" reuse to read-only reads and reclassifies the command-runner "true gap" as DEFERRED behind the not-yet-sealed Call Contract. Gap-only Spec readiness = PARTIAL_READY: the read/report-only gap surface (existence resolver, claim-inventory extractor existence-half, dual-corpus reporter, reconciliation report, provenance writer, read-only dead-link report, FIX7 read/report pilot) may be specced; the execution-dependent gaps (command-runner, run/pass binder, generic manifest schema) are carved out behind the Call Contract and the two unresolved owner decisions. Next = GPT review of the map.

Prior authoritative status: AUTHORITY_CONTRACT_V0_1_READY_FOR_GPT_REVIEW (on top of BCDGH_SEALED). The Authority Contract v0.1 (contracts/authority-contract-v0-1-2026-06-09.md) is written — it records the sealed B/C/D/G/H plus adopted A/E/F/I/J as a single binding constraint document, with the denominator contract, allowed/prohibited envelope, reuse map, unresolved list, and the gate to the Reuse Extraction Map phase. It creates no new law/tool/schema/runner and mutated nothing. Codex sealed B/C/D/G/H with fail-closed modifications: v0.1 invokes nothing; the latest code-keyed reliability view is canonical for the current registry→filesystem diff while older name-keyed output remains separately labelled; existing graph/duplicate/orphan authorities must be reused; TAC and IU remain dual-report-only with no bridge/canonical selection. Counts remain runtime evidence, never constants.

Historical matrix status: AUTHORITY_MATRIX_READY_FOR_GPT_REVIEW on top of BASELINE_READY_FOR_AUTHORITY_DECISION. Its denominator separation remains valid: 309 registry ≠ 214 operational-FS ≠ 186 fs-confirmed ≠ 163 actual_count ≠ 54 command-catalog ≠ 41 registry-no-file. Never collapse these into one DOT count. The matrix’s pending B/C/D/G/H decisions are superseded by the Codex seal; TAC↔IU corpus authority remains unresolved by design, and Directus 100%-DOT-control remains unproven.

Historical fresh-read closure: FRESH_READ_CLOSURE_PARTIAL supplied the evidence later sealed by Codex. Its durable findings remain: G existing-authority sufficient; H no-bridge dual-report-only; D’s 41-vs-4 divergence is explained by base/key/population; C’s 186 ∩ command-catalog formula is withdrawn; filesystem-186 is not directly callable; CAT-006 actual_count=163 is unsafe as an authority denominator; /opt/incomex/scripts is a separate non-DOT surface. Final B/C/D/G/H wording is only in the Codex seal report.

Live reconciliation surfaces already deployed (reuse, don't rebuild)

dot_tools, meta_catalog (CAT-006), pivot_definitions/pivot_results (PIV-007/PIV-104), wf_fs_dot_bin_snapshot, _recon_dot_fs_inventory, v_dot_fs_reconciliation, v_dot_registry_no_file, v_dot_reconciliation_reliability, dot_iu_command_catalog/_run/_runtime_lease, dot_operations, law_dot_enforcement, directus_flows (watchdog/sync), fn_tac_log_checker_issuesystem_issues, universal_edges/v_kg_edges_all/entity_dependencies, Đ19/Đ23 engines, information_unit/tac_logical_unit.

Minimal next step (exactly one)

GPT review the Reuse Extraction Map v0.1 (reports/reuse-extraction-map-v0-1-2026-06-09.{md,json}) — review the six-class assignments and the PARTIAL_READY gap-readiness call before any Gap-only Scope Spec. If approved, the next phase is a Gap-only Scope Spec scoped to the read/report-only gap surface only; the execution-dependent gaps stay carved out behind the Call Contract and the two unresolved owner decisions (iu_corecutter_governance lineage; TAC↔IU corpus authority). Still not permitted: Implementation Package DOT scope spec for execution gaps, verifier code, schema, runner, command invocation. Do not implement, invoke, install, mutate, or create a tool/schema/runner.

Subfolders

  • contracts/active. Binding authority contracts (Authority Contract v0.1 + machine mirror).
  • designs/ — (after the Reuse Extraction Map) Extraction Map / gap-only mini-spec.
  • references/ — pointers to consumed foundations.