{ "document_kind": "design_artifact_machine_summary", "not_a_runtime_schema": true, "not_a_manifest": true, "tool": "Implementation Package DOT (Tool-Kiem-Thu)", "version": "v0.1", "mode": "read_report_only", "date": "2026-06-09", "status": "GAP_ONLY_SCOPE_SPEC_v0_1_READY_FOR_CODEX_CHECKPOINT", "readiness": {"read_report_surface": "READY", "execution_surface": "DEFERRED", "inherited": "PARTIAL_READY"}, "production_mutation": false, "fresh_live_read_taken": false, "governing_authority": [ "contracts/authority-contract-v0-1-2026-06-09.md (AUTHORITY_CONTRACT_V0_1_READY_FOR_GPT_REVIEW)", "reviews/codex-seal-authority-matrix-bcdgh-2026-06-09.md (BCDGH_SEALED)", "reports/reuse-extraction-map-v0-1-2026-06-09.md (REUSE_EXTRACTION_MAP_READY_FOR_GPT_REVIEW / PARTIAL_READY)", "reports/authority-matrix-fresh-read-closure-bcdgh-2026-06-09.md (FRESH_READ_CLOSURE_PARTIAL)", "reports/dot-registry-directus-text-as-code-baseline-reconciliation-2026-06-09.md (BASELINE_READY_FOR_AUTHORITY_DECISION)" ], "what_v0_1_is": [ "read/report-only inspector over an implementation/testing dossier (KB package)", "consumer of named sealed read surfaces + read-only file-report-only adapters", "evidence/provenance discipline enforcer (refuses bare counts)", "dual-corpus reporter (TAC/IU never joined)", "carve-out engine (labels execution-dependent questions DEFERRED)" ], "what_v0_1_is_not": [ "runner/dispatcher", "registry/catalog authority", "logger/sink", "graph/duplicate/orphan/canonical-id resolver", "TAC/IU bridge or corpus authority", "proof-of-run", "mutation path", "FIX7 verifier / FIX7 resume" ], "denominator_contract": [ {"id": 1, "count": 309, "surface": "dot_tools = meta_catalog CAT-006 = PIV-007 = PIV-104", "use": "listing only", "not": "runnable/file-backed count; constant"}, {"id": 2, "count": 214, "surface": "wf_fs_dot_bin_snapshot OPERATIONAL", "use": "filesystem presence", "not": "proof of safe execution"}, {"id": 3, "count": 186, "surface": "wf_fs_dot_bin_snapshot mapped / v_dot_reconciliation_reliability CONFIRMED", "use": "reconciliation diagnostic", "not": "safe-call set; 186 ∩ command-catalog WITHDRAWN join=0"}, {"id": 4, "count": 163, "surface": "meta_catalog CAT-006 actual_count; local web-test checkout", "use": "UNSAFE/UNVERIFIED", "not": "authority denominator; runtime proof"}, {"id": 5, "count": 54, "surface": "dot_iu_command_catalog (15 mutating=false)", "use": "IU command catalog surface (read-only report)", "not": "DOT tool count; authorized v0.1 call set"}, {"id": 6, "count": "128/36", "surface": "directus_flows (128 total / 111 active / 36 DOT-named)", "use": "Directus flow surface (observe read-only)", "not": "proof of 100% DOT control"}, {"id": 7, "count": "219/102", "surface": "information_unit (219) and tac_logical_unit (102); 0 joining views", "use": "two separate corpora — dual-report only", "not": "merged corpus; either chosen canonical; a bridge"} ], "denominator_rules": {"collapse_prohibited": true, "single_dot_number": "disguised hardcode", "load_bearing_set": "always runtime query against named surface, never literal"}, "allowed_read_only_inputs": [ "KB document_id+path+revision", "dot_tools listing (309)", "v_dot_reconciliation_reliability over wf_fs_dot_bin_snapshot (canonical 186/100/19/4)", "v_dot_registry_no_file (41) / v_dot_fs_reconciliation (diagnostic only)", "wf_fs_dot_bin_snapshot presence (214/186)", "dot_iu_command_catalog/_run/_runtime_lease (read-only report)", "universal_edges (2199)/v_kg_edges_all (2259)/entity_dependencies (142)", "Đ19 orphan result surfaces", "duplicate-engine result views", "Đ43 context pack surfaces", "information_unit (219) + tac_logical_unit (102) dual-report", "directus_flows (read observe)", "system_issues (read-only)", "Authority Contract §3 7-denominator contract + baseline ledger" ], "output_contract": { "surface": "file-report-only under knowledge/dev/laws/tool-kiem-thu/", "triplet": ["reports/<inspection>-<date>.md", "reports/<inspection>-<date>.json", "checkpoints/checkpoint-<inspection>-<date>.md"], "report_md_sections": ["header", "verdict", "dossier_identity", "denominator_ledger", "claim_evidence_inventory", "declared_artifact_existence", "registry_fs_reconciliation", "graph_orphan_deadlink", "dual_corpus", "unverified_stale", "deferred_carveouts", "cross_references"], "report_json_keys": ["tool", "version", "mode", "production_mutation", "inspection_id", "observation_window_utc", "authority_contract_ref", "verdict", "verdict_is_proof_of_run(false)", "dossier_identity", "denominator_ledger[]", "claim_evidence_inventory[]", "declared_artifact_existence[]", "reconciliation", "graph_orphan_deadlink[]", "dual_corpus", "unverified[]", "deferred_carveouts[]", "prohibited_overlaps_respected[]", "cross_references[]"] }, "provenance_required_fields": ["source_surface", "denominator", "query", "observation_timestamp_utc", "match_key", "population", "confidence", "both_direction_diffs(for reconciliation)"], "verdict_vocabulary": { "per_dossier": ["READ_REPORT_PASS", "READ_REPORT_FLAG", "READ_REPORT_BLOCKED", "NOT_APPLICABLE"], "per_claim_or_artifact": ["RESOLVED", "UNRESOLVED", "AMBIGUOUS", "EVIDENCE_PRESENT", "EVIDENCE_ABSENT", "EVIDENCE_UNVERIFIED"], "iron_rule": "strongest positive for an executable claim = EVIDENCE_PRESENT with is_proof_of_run:false; 'ran/PASS' NOT AVAILABLE in v0.1", "p11e_run_status_note": "ran_clean|ran_with_drift|not_ready|error_running adopted as REFERENCE-ONLY vocabulary for the future run-half, NOT v0.1 output" }, "failure_modes": [ {"id": "F1", "mode": "missing identity/blueprint/revision", "verdict": "READ_REPORT_BLOCKED"}, {"id": "F2", "mode": "bare count without provenance", "verdict": "READ_REPORT_FLAG"}, {"id": "F3", "mode": "collapsed denominator", "verdict": "READ_REPORT_BLOCKED"}, {"id": "F4", "mode": "executable claim without evidence artifact", "verdict": "EVIDENCE_ABSENT/READ_REPORT_FLAG"}, {"id": "F5", "mode": "prose-only PASS", "verdict": "READ_REPORT_FLAG"}, {"id": "F6", "mode": "declared artifact unresolved", "verdict": "UNRESOLVED/READ_REPORT_FLAG"}, {"id": "F7", "mode": "path/reference ambiguity", "verdict": "AMBIGUOUS/READ_REPORT_FLAG"}, {"id": "F8", "mode": "TAC/IU joined/chosen", "verdict": "READ_REPORT_BLOCKED"}, {"id": "F9", "mode": "stale diagnostic (41) overrides canonical (4)", "verdict": "READ_REPORT_FLAG"}, {"id": "F10", "mode": "attempt to invoke FS DOT / IU command / detector", "verdict": "READ_REPORT_BLOCKED"}, {"id": "F11", "mode": "attempt to mutate / write system_issues", "verdict": "READ_REPORT_BLOCKED"}, {"id": "F12", "mode": "evidence artifact unconfirmable read-only", "verdict": "EVIDENCE_UNVERIFIED"} ], "master_fail_closed": "when in doubt, flag or block, never pass; absence of evidence = EVIDENCE_ABSENT/FLAG; 'Không chắc đúng = sai'", "in_scope_adapters": [ "R1 declared-artifact existence resolver", "R2 claim-inventory extractor (existence half)", "R3 registry↔FS reconciliation report", "R4 dual-corpus reporter", "R5 provenance report writer", "R6a read-only dead-link report", "R7 FIX7 read/report pilot", "R8 flow/command-catalog reporters" ], "deferred_carveouts": [ {"capability": "command-runner with exit codes", "future_contract": "Call Contract", "codex_review": true}, {"capability": "run/pass half of claim↔test binder", "future_contract": "Call Contract", "codex_review": true}, {"capability": "generic package_manifest schema", "future_contract": "iu_core↔cutter_governance lineage decision + Codex schema review", "codex_review": true}, {"capability": "--selftest N/N + module_sha256 self-pin", "future_contract": "post-spec build", "codex_review": "at impl"}, {"capability": "audit_dead_links() engine + system_issues sink", "future_contract": "system_issues write contract", "codex_review": true}, {"capability": "Directus 100%-DOT-control proof + write path", "future_contract": "Directus DOT-control proof contract", "codex_review": true}, {"capability": "TAC↔IU bridge/resolver", "future_contract": "TAC↔IU bridge contract (owner+Codex)", "codex_review": true}, {"capability": "OPA/Conftest/Squawk/CI/Git hooks", "future_contract": "CI/policy-gate integration contract", "codex_review": true} ], "prohibited_overlaps": [ "runner/dispatcher", "filesystem DOT invocation", "IU command invocation", "Directus mutation", "PG mutation", "registry mutation/forking dot_tools", "system_issues write", "new logger/sink", "new graph/duplicate/orphan/canonical-id resolver", "executing detector functions / writing findings", "TAC↔IU merge/bridge/reconciliation/canonical choice", "reconciliation cleanup/rebirth", "3rd cut/verify/manifest authority", "OPA/Conftest/Squawk/CI/Git hooks", "proof-of-run semantics", "Directus 100%-DOT-control proof", "prose-only PASS", "collapsed counts/single canonical DOT number", "build before review+approval", "FIX7 resume / running FIX7 executables" ], "parallel_authority_risk": {"new_runner": "NO", "new_registry": "NO", "new_logger": "NO", "new_graph_duplicate": "NO", "new_tac_iu_corpus": "NO"}, "held_out_unverified": [ "actual_count=163 filter (UNSAFE)", "direct OS listing of /opt/incomex/dot/bin & /scripts (unreachable read-only)", "filesystem DOT runnability (NOT AVAILABLE)", "Directus 100%-DOT-control (PARTIAL_EVIDENCE_ONLY)", "doc-level canonical-id gap (UNPROVEN)", "iu_core↔cutter_governance lineage (owner decision)", "TAC↔IU corpus authority (unresolved by design)", "/opt/incomex/scripts '42' (separate non-DOT surface)" ], "cross_references": [ "designs/implementation-package-dot-v0-1-gap-only-scope-spec-2026-06-09.md", "designs/fix7-read-report-pilot-design-for-implementation-package-dot-v0-1-2026-06-09.md", "planning/mvp-read-report-inspector-implementation-plan-no-code-2026-06-09.md", "designs/acceptance-test-matrix-implementation-package-dot-v0-1-2026-06-09.md", "planning/future-contracts-queue-after-v0-1-2026-06-09.md", "reviews/codex-checkpoint-packet-gap-only-spec-and-fix7-pilot-2026-06-09.md", "checkpoints/action-ready-blockers-after-gap-only-spec-2026-06-09.md", "checkpoints/checkpoint-gap-only-spec-and-fix7-pilot-design-2026-06-09.md" ] }