Checkpoint — Gap-only Spec rev2 after Codex Article-14 Block

Session: PROGRAM_MACRO_REPAIR_GAP_ONLY_SPEC_AFTER_CODEX_ARTICLE14_BLOCK Date: 2026-06-09 Final status: REV2_READY_FOR_CODEX Production mutation: NO. No PG/Directus/registry/filesystem mutation, no system_issues write, no tool/schema/runner created, no command run, no detector executed, no FIX7 resumed, no denominator collapsed, no sealed decision reopened, no fresh live read taken. writes_performed: 10 KB design documents under knowledge/dev/laws/tool-kiem-thu/ (the deliverables; sealed Domain I file-report-only). Disclosed, not hidden (Codex fix 12). Method note (per user direction): the obvious Article-14 / hardcode / fake-green / self-reference holes were found and fixed here, by self-audit, before re-routing to Codex — not left for Codex to find.

1. What happened

Codex rated rev1 BLOCKED_BY_AUTHORITY_OR_ARTICLE14_RISK (MVP: NO) with 12 required fixes. This macro read the Constitution's 15 principles (esp. Article 13 PG-first/native/driven and Article 14 executable-immediately), read the full Codex review, read all 10 prior deliverables, then authored a rev2 layer (rev2 filenames; rev1 preserved with trace) that repairs all 12 with explicit design changes + a self-audit. The sealed B/C/D/G/H decisions were not reopened.

2. The root defect and the structural fix

Defect: rev1 equated "a referenced evidence artifact resolves" with "the executable claim is proven at read level" ⇒ a positive READ_REPORT_PASS could be emitted while a load-bearing executable claim stayed unproven (the Recheck-8 class — declared .py SSOT absent, invocation exited 2). Fix: the Article-14 evidence-adequacy chain — claim → claim_type → required_evidence_class[] → evidence_artifact/reference → evidence_capability → evidence_adequacy_verdict → dossier_verdict + article14_status. A resolving reference yields only ARTIFACT_EXISTENCE_EVIDENCE; a positive verdict requires the capability step (right kind + bound + independent + provenanced + non-contradictory) and is forbidden for execution-class claims, which force ARTICLE14_NOT_PROVEN_EXECUTION_UNVERIFIED. READ_REPORT_PASS is removed; final verdicts are READ_LEVEL_ACCEPTABLE / READ_LEVEL_FAIL / BLOCKED / UNVERIFIED; FLAG/FAIL/BLOCKED/UNVERIFIED never exit 0.

3. Deliverables (created this session)

1. designs/implementation-package-dot-v0-1-gap-only-scope-spec-rev2-2026-06-09.md
2. designs/implementation-package-dot-v0-1-gap-only-scope-spec-rev2-2026-06-09.json
3. designs/fix7-read-report-pilot-design-rev2-for-implementation-package-dot-v0-1-2026-06-09.md
4. planning/mvp-read-report-inspector-implementation-plan-no-code-rev2-2026-06-09.md
5. designs/acceptance-test-matrix-implementation-package-dot-v0-1-rev2-2026-06-09.md
6. reports/codex-fix-ledger-gap-only-spec-rev2-2026-06-09.md
7. reviews/codex-checkpoint-packet-gap-only-spec-and-fix7-pilot-rev2-2026-06-09.md
8. checkpoints/action-ready-blockers-after-gap-only-spec-rev2-2026-06-09.md
9. checkpoints/checkpoint-gap-only-spec-rev2-after-codex-block-2026-06-09.md (this doc)
10. 00-index.md (updated to rev2 phase)

4. Codex 12-fix status

All 12/12 = addressed (full table in the fix ledger). 1 PASS-removal · 2 adequacy chain · 3 extractor limitation · 4 FIX7 counter-fixture · 5 counts→dated examples · 6 >=2→all-relevant-distinct · 7 41/4 & 219/102→role/key/provenance · 8 exit/fake-green · 9 capability guards + negative tests · 10 dead-link advisory · 11 contract-status normalized + PROGRAM_MACRO_READY removed · 12 writes_performed[].

5. Self-audit (Track 12 — Constitution / Article 14 / PG-first)

Check	Verdict	Evidence
Article 14 (no prose-claims-executable-without-runnable-proof)	PASS	Adequacy chain + article14_status forces NOT_PROVEN for all execution claims; ACCEPTABLE structurally unavailable for them.
No prose-only PASS	PASS	FLAG_PROSE_ONLY_PASS⇒FAIL; claim type 13 forbidden; F5.
No hidden hardcode	PASS	Counts are dated fixtures only; checks are role/key/provenance/separation; F2/F3.
No fake-green	PASS	Exit 0 only for ACCEPTABLE; FLAG/FAIL/BLOCKED/UNVERIFIED never exit 0; G8/F15.
PG-first / native / driven (Article 13)	PASS	Consume governed PG surfaces; read-only role drives the boundary; file report = evidence only; no alternate SSOT.
No parallel authority	PASS	Wall §18; advisory-only coverage; dual-report only; B/C/D/G/H not reopened.
No run/write violation	PASS	Capability enums + static/runtime guard; only KB report writes, disclosed via writes_performed.
Claim/evidence adequacy	PASS	Adequacy chain + 12 evidence classes + 13 claim types; reference-alone never positive.
FIX7 pilot catches Recheck-8 class	PASS (read-level adequacy half)	Fixture C (resolvable-but-insufficient) ⇒ FAIL+NOT_PROVEN; full run-proof honestly deferred to Call Contract.
Codex 12 fixes addressed	PASS	Fix ledger 12/12 = YES.

All checks PASS ⇒ final status REV2_READY_FOR_CODEX (not PARTIAL/BLOCKED). The single honest caveat: the FIX7 pilot catches the adequacy half of Recheck-8 at read level; proving an executable actually runs is the deferred Call/Proof-of-run contract — by sealed design, not an omission.

6. Verdicts

• MVP readiness: still NOT authorized; blocked on B0′ (fresh Codex re-seal of rev2) and, for acceptance, B4 (capability guards built + negative tests pass). No PROGRAM_MACRO_READY claim.
• Sealed decisions: B/C/D/G/H intact, not reopened.
• Authority Contract: READY_FOR_GPT_REVIEW, records sealed constraints, not binding as a whole.

7. Minimal safe next step

Route reviews/codex-checkpoint-packet-gap-only-spec-and-fix7-pilot-rev2-2026-06-09.md to Codex (optionally GPT first) for re-review. Do not implement, invoke, install, mutate, or create a tool/schema/runner before Codex re-seals rev2.

Cross-references

• All rev2 deliverables (see §3).
• Codex review (12 fixes): reviews/codex-review-gap-only-spec-fix7-pilot-mvp-readiness-2026-06-09.md.
• Constitution: knowledge/dev/laws/constitution.md (NT13 Article 13, NT14 Article 14).