Checkpoint — Codex Seal Authority Matrix B/C/D/G/H

Date: 2026-06-09
Final status: CODEX_SEAL_READY
Seal verdict: BCDGH_SEALED
Production mutation: NO

Seal summary

Domain	Verdict	Sealed choice
B	MODIFY → SEALED	Option 5: filesystem-DOT can-run unavailable for v0.1; no invoke. Presence, mapping, and historical proof-of-run remain separate facts.
C	MODIFY → SEALED	Option 5: no calls until a separate call contract exists; v0.1 read/report only.
D	MODIFY → SEALED	Option 1: latest code-keyed reliability view is canonical current diff; stale name-key view remains separate diagnostic only.
G	SEALED	Reuse existing graph/duplicate/orphan authorities; new resolver prohibited until a concrete miss is proven.
H	SEALED	No bridge in fresh-read snapshot; dual-report only; no choose/merge/build; corpus authority unresolved.

Parallel-authority risk

• New runner authority: NO.
• New registry authority: NO.
• New logger authority: NO.
• New graph/duplicate authority: NO.
• New TAC/IU corpus authority: NO.

Boundaries

No implementation, installation, PG/Directus/registry/filesystem mutation, DOT invocation, detector execution, logger write, schema creation, runner creation, or FIX7 resume occurred or is authorized.

No count is sealed as a constant. Runtime evidence must retain surface, timestamp, denominator, key, population, and diff direction.

Minimal next step

Write Authority Contract v0.1 using the sealed B/C/D/G/H wording plus already-adopted A/E/F/I/J. Do not implement anything.

Report

knowledge/dev/laws/tool-kiem-thu/reviews/codex-seal-authority-matrix-bcdgh-2026-06-09.md