Checkpoint — DOT/Registry/Directus/Text-as-Code Baseline Reconciliation

Date: 2026-06-09 · Verdict: BASELINE_READY_FOR_AUTHORITY_DECISION · Production mutation: NO Nature: evidence snapshot + reconciliation (anti-sloppy). Main-process live reads only — NO background sub-agents (addresses Codex §8 method defect).

1. Why this ran

User: the prior reuse audit reported a fraction of the DOT estate (e.g. quoted small denominators when the registry holds 309). Codex cross-check (reviews/codex-crosscheck-text-as-code-reuse-audit-2026-06-09.md) rated it CLAUDE_AUDIT_UNSAFE_TO_USE_FOR_PLANNING / NEEDS_FRESH_BASELINE_FIRST — no canonical, dated, multi-surface count ledger; a single DOT count = false invariant / disguised hardcode. This task = produce that fresh, timestamped, denominator-separated baseline.

2. Evidence mode

LIVE-READ PostgreSQL 16.13, DB directus, role context_pack_readonly (READ ONLY txn, 5s timeout) via mcp__claude_ai_Incomex_VPS__query_pg; UTC anchor 2026-06-09 07:11:52. Directus directus_health=ok. list_docker (postgres:16 up 7w). Local find (Bash). KB read (agent-data). No mutation.

3. The reconciliation (counts DO NOT collapse — each is a different denominator)

• DOT registry rows = 309 (dot_tools live; active 291 / published 16 / null 2). CAT-006 record_count=309, active_count=309. PIV-007=309, PIV-104 group-sum=309. Pivot/registry consistent + fresh (refreshed 07:07). 🔴 registry frozen since 2026-04-02 (max date_updated).
• CAT-006 actual_count = 163 (scan 06:00) — in-row 309-vs-163 conflict; filter definition UNVERIFIED. baseline_count=151.
• Filesystem (PG mirror): freshest wf_fs_dot_bin_snapshot (06-09 02:10) = 289 objects / 214 operational / 75 backup / 186 mapped to a registry code. Older _recon_dot_fs_inventory (06-03) = 287 files (all exec, 76 backup).
• Reliability stratification of the 309 registry rows (v_dot_reconciliation_reliability): 186 DOT_EXECUTABLE_CONFIRMED + 100 DOT_REGISTERED + 19 DOT_HELPER_TOOL + 4 DOT_MISSING_FILE = 309.
• Diffs: registry-no-file v_dot_registry_no_file=41 (vs fresh DOT_MISSING_FILE=4 — different FS base/key); file-no-registry=16 pure / 26 incl backups (06-03) or 28 (06-09 derived). dot_tools file_path=228, script_path=119, classification='real'=0.
• Execution/command surfaces (separate): dot_iu_command_catalog=54, dot_iu_command_run=55, dot_operations=20, law_dot_enforcement=272 (≠ old 272 dot_tools), taxonomy 58 / facets 10 / matrix 36, dot_iu_runtime_lease (exists).
• Directus: 128 flows (active 111 / inactive 17); trigger event 121 / schedule 5 / webhook 2; 36 DOT-named ([DOT-REG] mirror ~21, [WATCHDOG] dot_tools→Changelog 3, [DOT] sync, [AUTO-ID]). Control = PARTIAL_EVIDENCE_ONLY (sync/watchdog present; manual-mutation block NOT proven).
• Text-as-Code corpus: information_unit=219 (supersedes stale 98/175), tac_logical_unit=102 (supersedes 86), tac_unit_version=102, tac_publication_member=102, tac_publication=4. No DB compat view bridges them (pg_views=0) → authority UNRESOLVED.
• Repo/local: …/web-test/dot/bin = 163 files/exec (= the "163"; local checkout, not prod/registry).

4. Old-number mapping (comparison only)

309=registry; 287/288=FS snapshot; 214=operational FS; 186=fs-confirmed; 163=local checkout & actual_count; 54=command catalog; 41=registry-no-file; 18-19≈file-no-registry; 111=active flows; 272(today)=law_dot_enforcement (NOT dot_tools); 75/82/93/95/97 = dated Mar snapshots. None collapse.

5. BLOCKED / UNVERIFIED (not filled with judgment)

• /opt/incomex/scripts "42" surface — BLOCKED (read_file allowlist; not local).
• Direct OS listing of /opt/incomex/dot/bin — BLOCKED (used PG mirror).
• CAT-006.actual_count=163 filter — UNVERIFIED (value known, definition not).
• TAC↔IU corpus authority — UNRESOLVED (owner decision).
• Đ23 inverse-check unmonitored/unregistered — UNVERIFIED (not run).

6. Documents

• Created: reports/dot-registry-directus-text-as-code-baseline-reconciliation-2026-06-09.md (main) + .json (machine snapshot).
• Created: this checkpoint.
• Updated: 00-index.md.

7. NOT done (hard constraints honored)

❌ no install · ❌ no tool/schema/runner/spec · ❌ no registry edit · ❌ no Directus update · ❌ no PG mutation (read-only only) · ❌ no orphan/staged cleanup · ❌ no FIX7 resume · ❌ no authority decided by assumption · ❌ old reports NOT used as live truth.

8. Minimal next step (exactly one)

Owner authority decision designating, from this ledger: (a) canonical DOT denominator + registry↔FS reconciliation contract (309/214/186/163), and (b) canonical TAC↔IU corpus (219 vs 102) — recorded as a contract, not collapsed. No tool/schema/runner/spec until then.