{ "doc": "tool-kiem-thu-object-registry", "date": "2026-06-10", "authority_of_this_doc": "KB-level governance record; NOT a production registry insertion; no birth_registry/Directus row created", "source_rule": "KB-FIRST/PG-FIRST/NATIVE-DRIVEN/LOCAL-LAST", "final_status": "BIRTH_GOVERNANCE_ONBOARDING_PASS_AUTO_SYSTEM_PARTIAL", "auto_gov_legend": "NONE=no native detection path; BORN-UNCERTIFIED=auto-births into governed collection but certified=false/owner=null; GOVERNED=fully governed", "objects": [ {"id":"TKT-OBJ-001","name":"ip_dot_inspector","type":"tool/code","location":"repo Huyen1974/tool-kiem-thu-ci:ip_dot_inspector/","by":"Phase2","status":"PASS(exit1 READ_LEVEL_FAIL)","authority":"evidence-only","lifecycle":"active-pilot","owner":"OPERATOR","auto_gov":"NONE","allowed":"offline packet read to local report","prohibited":"live PG/KB read, gate use, KB write, production","promotion":"Phase4 Call Contract (Codex)"}, {"id":"TKT-OBJ-002","name":"tools/build_guard.py","type":"tool/code","location":"repo","by":"Phase2","status":"PASS NO_BUILD_GUARD_VIOLATION","authority":"evidence-only","lifecycle":"active-pilot","owner":"OPERATOR","auto_gov":"NONE"}, {"id":"TKT-OBJ-003","name":"inspector/main.py 12-probe harness","type":"tool/code","location":"repo","by":"B4prime","status":"PASS 12/12","authority":"evidence-only","lifecycle":"reference-evidence","owner":"OPERATOR","auto_gov":"NONE"}, {"id":"TKT-OBJ-004","name":"b7_validate.py","type":"tool/code","location":"local /tmp/tki-ci/b7_validate.py","by":"B7","status":"PASS 10/10+7/7","authority":"evidence-only","lifecycle":"retained-evidence-local-non-authority","owner":"OPERATOR","auto_gov":"NONE","retention":"local artifact; cleanup or retain-reason required"}, {"id":"TKT-OBJ-005","name":"tests/test_acceptance.py","type":"test-harness","location":"repo","by":"Phase2","status":"PASS 31/31 run27248508492","authority":"evidence-only","lifecycle":"active-pilot","owner":"OPERATOR","auto_gov":"NONE"}, {"id":"TKT-OBJ-006","name":"seccomp-startup-safe.json","hash":"sha256:d11c2bb0adb6d9135fe03fc10576772ffc427d080d4e4a438f0c9ddfafd09260","type":"security-profile","location":"repo","by":"B4prime","status":"PASS used in 12/12","authority":"evidence-only","lifecycle":"reference-evidence","owner":"OPERATOR","auto_gov":"NONE"}, {"id":"TKT-OBJ-007","name":"seccomp-deny-by-default.json","hash":"sha256:68b07c179a8c338d8aedca940150982106c793b75daadfaa323109ac309e8dbe","type":"security-profile","location":"repo","by":"B4prime","status":"UNRUNNABLE-under-runc honest-defect","authority":"evidence-only","lifecycle":"superseded-by-TKT-OBJ-006-for-attestation","owner":"OPERATOR","auto_gov":"NONE"}, {"id":"TKT-OBJ-008","name":"deny-by-default docker run invocation (L1 boundary)","type":"runtime-config","location":"design-doc+CI workflows","by":"B4prime","status":"PASS","authority":"design-authority","lifecycle":"reference-evidence","owner":"OPERATOR","auto_gov":"NONE"}, {"id":"TKT-OBJ-009","name":"Dockerfile.sandbox / Dockerfile.mvp (distroless nonroot 65532)","type":"container-def","location":"repo","by":"Phase2/B4prime","status":"PASS","authority":"evidence-only","lifecycle":"active-pilot","owner":"OPERATOR","auto_gov":"NONE"}, {"id":"TKT-OBJ-010","name":"built image digest","hash":"sha256:a75f623555d9a45749f28969de82db76ee6d183dc0de66371fcc8f52f38fb46e","type":"container-image","location":"ephemeral CI","by":"B4prime","status":"ephemeral","authority":"evidence-only","lifecycle":"pending-cleanup-ephemeral","owner":"OPERATOR","auto_gov":"NONE"}, {"id":"TKT-OBJ-011","name":"repo Huyen1974/tool-kiem-thu-ci","type":"ci-repo-venue","location":"GitHub","by":"Phase2/3-CI-route","status":"RETAINED-inert","authority":"evidence-only","lifecycle":"retained-evidence","owner":"OPERATOR","auto_gov":"NONE","retention":"reproducible source-of-record + 30d artifacts; workflow_dispatch only; delete cmd: gh repo delete Huyen1974/tool-kiem-thu-ci --yes","prohibited":"secrets, WIF, terraform, prod link, auto-trigger"}, {"id":"TKT-OBJ-012","name":".github/workflows/b4-prime-sandbox-attestation.yml","type":"ci-workflow","location":"repo","by":"B4prime","status":"PASS","authority":"evidence-only","lifecycle":"reference-evidence","owner":"OPERATOR","auto_gov":"NONE"}, {"id":"TKT-OBJ-013","name":".github/workflows/phase2-3-mvp.yml","type":"ci-workflow","location":"repo","by":"Phase2/3","status":"PASS","authority":"evidence-only","lifecycle":"reference-evidence","owner":"OPERATOR","auto_gov":"NONE"}, {"id":"TKT-OBJ-014","name":"GitHub-hosted ephemeral ubuntu-latest runner (not Mac-local)","type":"runner-venue","location":"GitHub","by":"Phase2/3/B4prime","status":"ephemeral","authority":"evidence-only","lifecycle":"n/a-ephemeral","owner":"OPERATOR","auto_gov":"NONE"}, {"id":"TKT-OBJ-015","name":"CI run artifacts (phase2-3-offline-mvp-evidence, B4prime attestation)","runs":["27247749834","27248508492","27247543884"],"type":"evidence-artifact","location":"GitHub 30d retention","by":"Phase2/3/B4prime","status":"retained-30d","authority":"evidence-only","lifecycle":"retained-evidence-auto-expire","owner":"OPERATOR","auto_gov":"NONE"}, {"id":"TKT-OBJ-016","name":"packet PKT-B7-REF-2026-06-10-001","schema":"b7-governed-packet/v1","manifest_hash":"sha256:bba872b9a1f449e538b3db98fa26be71d6bb532ed604add66d91cbc4e56e6097","items":6,"type":"governed-export-packet","location":"local /tmp/tki-ci/b7-governed-packet-sample-2026-06-10.json","by":"B7","status":"reference-validated 10/10+7/7","authority":"evidence-only","lifecycle":"retained-evidence-local-non-authority","owner":"OPERATOR","auto_gov":"NONE","native_precedent":"context_pack_manifest, v_iu_collection_manifest"}, {"id":"TKT-OBJ-017","name":"fixtures/fix7-fixture-A-packet.json (+A'/B/C/D)","type":"fixture","location":"repo","by":"Phase3/B7","status":"PASS bound to tests #42-#45","authority":"evidence-only","lifecycle":"reference-evidence","owner":"OPERATOR","auto_gov":"NONE"}, {"id":"TKT-OBJ-018","name":"6 named-query IDs NQ--V1","type":"named-query-catalog","location":"design-doc/packet","by":"B7","status":"PROVISIONAL","authority":"provisional-non-authority","lifecycle":"pending-promotion-B7-EXP-1","owner":"AUTHORITY","auto_gov":"NONE","native_shape":"adapts dot_iu_command_catalog (does not fork/write)"}, {"id":"TKT-OBJ-019","name":"Packet schema b7-governed-packet/v1","type":"schema","location":"designs/b7-governed-packet-schema-2026-06-10.md","by":"B7","status":"design-complete reference-validated","authority":"design-authority","lifecycle":"pending-promotion","owner":"AUTHORITY","auto_gov":"NONE"}, {"id":"TKT-OBJ-020","name":"Export-step contract","type":"contract","location":"contracts/b7-governed-export-step-contract-2026-06-10.md","by":"B7","status":"design-complete","authority":"design-authority","lifecycle":"pending-promotion-owner+Codex","owner":"AUTHORITY","auto_gov":"NONE"}, {"id":"TKT-OBJ-021","name":"Named-query catalog spec","type":"design-spec","location":"designs/b7-named-query-catalog-spec-2026-06-10.md","by":"B7","status":"PROVISIONAL","authority":"provisional-non-authority","lifecycle":"pending-promotion-B7-EXP-1","owner":"AUTHORITY","auto_gov":"NONE"}, {"id":"TKT-OBJ-022","name":"MVP consumption contract","type":"contract","location":"contracts/offline-mvp-governed-packet-consumption-contract-2026-06-10.md","by":"B7","status":"design-complete","authority":"design-authority","lifecycle":"reference-evidence","owner":"SYSTEM","auto_gov":"NONE"}, {"id":"TKT-OBJ-023","name":"B7 acceptance test matrix","type":"design","location":"designs/b7-governed-export-packet-acceptance-test-matrix-2026-06-10.md","by":"B7","status":"design-complete","authority":"design-authority","lifecycle":"reference-evidence","owner":"SYSTEM","auto_gov":"NONE"}, {"id":"TKT-OBJ-024","name":"Authority Contract v0.1 (+json)","type":"contract","location":"contracts/authority-contract-v0-1-2026-06-09.md","by":"Phase0","status":"sealed B/C/D/G/H","authority":"design-authority","lifecycle":"active","owner":"AUTHORITY","auto_gov":"NONE"}, {"id":"TKT-OBJ-025..035","name":"Phase2/3/B4prime/B7 evidence+report+rawlog+checkpoint+planning KB docs","type":"evidence/report/checkpoint","location":"knowledge/dev/laws/tool-kiem-thu/{reports,checkpoints,planning}/","by":"Phase2/3/B4prime/B7","status":"retained","authority":"evidence-only / design-authority","lifecycle":"retained-evidence","owner":"SYSTEM","auto_gov":"BORN-UNCERTIFIED-if-synced (certified=false/owner=null/address=null) else NONE","note":"full folder=113 docs rev86; none is production authority"}, {"id":"TKT-OBJ-036","name":"New object species proposed (offline-inspector-tool, sandbox-attestation-profile, ci-evidence-repo, governed-export-packet, provisional-named-query-catalog, evidence-bundle, non-gating-report-artifact, action-ready-blocker-packet)","type":"species/taxonomy","status":"PROVISIONAL not-in-entity_species","authority":"provisional-non-authority","owner":"AUTHORITY","auto_gov":"NONE"}, {"id":"TKT-OBJ-037","name":"New lifecycle statuses (reference-validated, provisional-non-authority, retained-evidence, deferred-action-ready)","type":"status-vocab","status":"PROVISIONAL","authority":"provisional-non-authority","owner":"AUTHORITY","auto_gov":"NONE"}, {"id":"TKT-OBJ-038","name":"New authority classes (provisional-non-authority, design-authority, evidence-only)","type":"authority-vocab","status":"PROVISIONAL","authority":"provisional-non-authority","owner":"AUTHORITY","auto_gov":"NONE"}, {"id":"TKT-OBJ-039","name":"New blocker classes (B7-EXP-1, B7-EXP-2/D9, D10, D11, D4-D8, B0-triple-prime)","type":"blocker-taxonomy","status":"open","authority":"evidence-only","owner":"AUTHORITY","auto_gov":"NONE"}, {"id":"TKT-OBJ-040","name":"New roadmap phase Phase 3.5 Birth/Governance Onboarding","type":"roadmap-object","status":"created-by-this-macro","authority":"design-authority","owner":"SYSTEM","auto_gov":"NONE"}, {"id":"TKT-OBJ-041","name":"This macro's 15 governance deliverables","type":"governance-doc","status":"created 2026-06-10","authority":"KB-level-governance (not production registry)","owner":"SYSTEM","auto_gov":"BORN-UNCERTIFIED-if-synced"}, {"id":"TKT-OBJ-042","name":"Checkable FIX7 Blueprint Package","type":"checkable-package-derived-view","location":"designs/fix7-blueprint-checkable-package-2026-06-10.md","by":"FIX7-support-macro","status":"built","authority":"provisional-non-authority","lifecycle":"reference-re-derivable","owner":"SYSTEM","auto_gov":"BORN-UNCERTIFIED-if-synced","prohibited":"become 2nd canonical authority over blueprint (Lens4); seal/approve"}, {"id":"TKT-OBJ-043","name":"FIX7 Article-14 Executable-Evidence Check Report (5-lens)","type":"check-report","location":"reports/fix7-blueprint-article14-executable-evidence-check-report-2026-06-10.md","by":"FIX7-support-macro","status":"FAIL-non-gating","authority":"evidence-only","lifecycle":"retained-evidence","owner":"SYSTEM","auto_gov":"BORN-UNCERTIFIED-if-synced","note":"agrees with+structures Codex Recheck-8 NEEDS_T1_FIX; overrides nothing"}, {"id":"TKT-OBJ-044","name":"FIX7 Approval-Acceleration Punch-List","type":"advisory-report","location":"reports/fix7-blueprint-approval-acceleration-punch-list-2026-06-10.md","by":"FIX7-support-macro","status":"READY-advisory","authority":"evidence-only","lifecycle":"active","owner":"SYSTEM","auto_gov":"BORN-UNCERTIFIED-if-synced","prohibited":"approve blueprint (owner/Codex only)"}, {"id":"TKT-OBJ-045","name":"Article-14 5-Lens Detector Spec","type":"design-spec","location":"designs/article14-executable-evidence-5lens-detector-spec-2026-06-10.md","by":"FIX7-support-macro","status":"defined","authority":"design-authority-provisional","lifecycle":"active","owner":"SYSTEM/AUTHORITY","auto_gov":"BORN-UNCERTIFIED-if-synced","prohibited":"promote to reusable framework without owner+Codex (Recheck-8 K scope)"}, {"id":"TKT-OBJ-046","name":"Checkpoint FIX7 blueprint checkability support","type":"checkpoint","location":"checkpoints/checkpoint-fix7-blueprint-checkability-support-2026-06-10.md","by":"FIX7-support-macro","status":"created","authority":"evidence-only","lifecycle":"retained-evidence","owner":"SYSTEM","auto_gov":"BORN-UNCERTIFIED-if-synced"}, {"id":"TKT-OBJ-047","name":"materialize_canonicalizer.py (P1 byte-extraction command)","type":"tool-script","location":"packets/fix7-codex-recheck-9-2026-06-10/ (run artifact)","hash":"sha256:b854d1492b3ce126bb5370efb95fc9a5520b246b9b71994bb2b63ace3c55ac50","by":"FIX7-exec-approval-lane-macro","status":"run exit0","authority":"non-authority-utility","lifecycle":"active","owner":"OPERATOR","auto_gov":"NONE"}, {"id":"TKT-OBJ-048","name":"canonicalizer-fix7-canon-v1-ssot.py (materialized)","type":"derived-executable","hash":"sha256:9355f076f5c2c79906e9c5d439d89a287a5d71687ad33a326d2faff37999044b","by":"FIX7-exec-approval-lane-macro","status":"runs 22/22 exit0","authority":"derived-from-SSOT-md-not-independent","lifecycle":"active","owner":"OPERATOR","auto_gov":"NONE","prohibited":"duplicate authority"}, {"id":"TKT-OBJ-049","name":"fix7_canon_v1_ssot_extended.py (production-complete canonicalizer reference)","type":"canonicalizer-reference","location":"packets/fix7-codex-recheck-9-2026-06-10/fix7_canon_v1_ssot_extended.py","hash":"sha256:196d98011b38d32a4046c5565bdd01906ea737a3e304ccf8229dd7c1c7e8dfdc","by":"FIX7-exec-approval-lane-macro","status":"36/36 PASS; produces 6/8 digests; runnable-from-KB","authority":"provisional-reference-becomes-SSOT-fence-via-P-EXT-1","lifecycle":"active-candidate","owner":"SYSTEM/AUTHORITY","auto_gov":"NONE","prohibited":"treat as sealed SSOT before Codex"}, {"id":"TKT-OBJ-050","name":"FIX7-CODEX-RECHECK-9-PACKET (README_FOR_CODEX,manifest.json,RERUN.sh,HASH_MANIFEST,raw logs)","type":"evidence-packet","location":"packets/fix7-codex-recheck-9-2026-06-10/","by":"FIX7-exec-approval-lane-macro","status":"reproducible runnable-from-KB","authority":"provisional-non-authority evidence-only","lifecycle":"active","owner":"SYSTEM","auto_gov":"NONE","frozen_membership":"f2bda8effc7be19b54722828126b82d7d2d48bee5e5e5dc0c8f347ce210fe251","prohibited":"seal/approve"}, {"id":"TKT-OBJ-051","name":"FIX7 executable approval lane master report","type":"report","location":"reports/fix7-executable-approval-lane-master-report-2026-06-10.md","status":"created","authority":"provisional-non-authority","lifecycle":"retained-evidence","owner":"SYSTEM","auto_gov":"BORN-UNCERTIFIED-if-synced"}, {"id":"TKT-OBJ-052","name":"FIX7 executable claim ledger","type":"report","location":"reports/fix7-executable-claim-ledger-2026-06-10.md","status":"created","authority":"provisional-non-authority","lifecycle":"retained-evidence","owner":"SYSTEM","auto_gov":"BORN-UNCERTIFIED-if-synced"}, {"id":"TKT-OBJ-053","name":"FIX7 Article-14 repair patch packet P-EXT-1","type":"patch-packet","location":"checkpoints/fix7-article14-repair-patch-packet-2026-06-10.md","status":"APPLIED-2026-06-10-KB-rev2 (owner-authorized; SSOT 8f80f9f0->144eb3d9)","authority":"provisional-apply-gated (now applied; Codex still seals)","lifecycle":"applied","owner":"SYSTEM/AUTHORITY","auto_gov":"BORN-UNCERTIFIED-if-synced","prohibited":"silent in-place mutation of artifact under Codex review"}, {"id":"TKT-OBJ-054","name":"FIX7 executable artifact evidence report","type":"report","location":"reports/fix7-executable-artifact-evidence-report-2026-06-10.md","status":"created","authority":"provisional-non-authority","lifecycle":"retained-evidence","owner":"SYSTEM","auto_gov":"BORN-UNCERTIFIED-if-synced"}, {"id":"TKT-OBJ-055","name":"FIX7 digest/seal reproduction report","type":"report","location":"reports/fix7-digest-seal-reproduction-report-2026-06-10.md","status":"created","authority":"provisional-non-authority","lifecycle":"retained-evidence","owner":"SYSTEM","auto_gov":"BORN-UNCERTIFIED-if-synced"}, {"id":"TKT-OBJ-056","name":"FIX7 forbidden-scope enforcement report","type":"report","location":"reports/fix7-forbidden-scope-enforcement-report-2026-06-10.md","status":"created","authority":"provisional-non-authority","lifecycle":"retained-evidence","owner":"SYSTEM","auto_gov":"BORN-UNCERTIFIED-if-synced"}, {"id":"TKT-OBJ-057","name":"FIX7 Tool-Kiem-Thu support package","type":"design-support","location":"designs/fix7-tool-kiem-thu-support-package-2026-06-10.md","status":"created","authority":"provisional-non-authority-non-gating","lifecycle":"active","owner":"SYSTEM","auto_gov":"BORN-UNCERTIFIED-if-synced","prohibited":"claim gate PASS"}, {"id":"TKT-OBJ-058","name":"FIX7 approval-lane cross-impact report","type":"report","location":"reports/fix7-approval-lane-cross-impact-report-2026-06-10.md","status":"created","authority":"provisional-non-authority","lifecycle":"retained-evidence","owner":"SYSTEM","auto_gov":"BORN-UNCERTIFIED-if-synced"}, {"id":"TKT-OBJ-059","name":"FIX7 approval-lane new-object governance update","type":"governance","location":"governance/fix7-approval-lane-new-object-governance-update-2026-06-10.md","status":"created","authority":"governance-KB-level","lifecycle":"active","owner":"SYSTEM","auto_gov":"BORN-UNCERTIFIED-if-synced"}, {"id":"TKT-OBJ-060","name":"Action-ready blocker after FIX7 executable approval lane","type":"checkpoint","location":"checkpoints/action-ready-blocker-after-fix7-executable-approval-lane-2026-06-10.md","status":"open","authority":"provisional-non-authority","lifecycle":"active","owner":"SYSTEM/AUTHORITY","auto_gov":"BORN-UNCERTIFIED-if-synced"}, {"id":"TKT-OBJ-061","name":"Checkpoint FIX7 executable approval lane","type":"checkpoint","location":"checkpoints/checkpoint-fix7-executable-approval-lane-2026-06-10.md","status":"created","authority":"provisional-non-authority","lifecycle":"retained-evidence","owner":"SYSTEM","auto_gov":"BORN-UNCERTIFIED-if-synced"}, {"id":"TKT-OBJ-062","name":"FIX7 + Tool-Kiem-Thu current state and next roadmap","type":"planning","location":"planning/fix7-tool-kiem-thu-current-state-and-next-roadmap-2026-06-10.md","status":"created","authority":"provisional-non-authority","lifecycle":"active","owner":"SYSTEM","auto_gov":"BORN-UNCERTIFIED-if-synced"}, {"id":"TKT-OBJ-063","name":"manifest_tool.py (manifest generator + fail-closed verifier)","type":"tool/code","location":"packets/fix7-codex-recheck-9-2026-06-10/manifest_tool.py","by":"residual-approval-seal-lane-macro","status":"--emit/--verify run exit0; tamper->exit1 (fail-closed proven)","authority":"non-authority-utility (evidence-integrity verifier; NOT seal/gate)","lifecycle":"active","owner":"OPERATOR/SYSTEM","auto_gov":"NONE","note":"recomputes every manifest.json hash from disk+produce; RERUN.sh step 6; only literal is labelled historical ssot_old_sha256"}, {"id":"TKT-OBJ-064","name":"FIX7 P-EXT-1 apply + recheck-9 handoff report","type":"report","location":"reports/fix7-p-ext-1-apply-and-recheck9-handoff-report-2026-06-10.md","by":"residual-approval-seal-lane-macro","status":"created","authority":"provisional-non-authority","lifecycle":"retained-evidence","owner":"SYSTEM","auto_gov":"BORN-UNCERTIFIED-if-synced"}, {"id":"TKT-OBJ-065","name":"FIX7 Codex recheck-9 final handoff","type":"checkpoint/handoff","location":"checkpoints/fix7-codex-recheck-9-final-handoff-2026-06-10.md","by":"residual-approval-seal-lane-macro","status":"created","authority":"provisional-non-authority","lifecycle":"active","owner":"SYSTEM","auto_gov":"BORN-UNCERTIFIED-if-synced"}, {"id":"TKT-OBJ-066","name":"FIX7 recheck-9 remaining authority blocker ledger","type":"checkpoint/ledger","location":"checkpoints/fix7-recheck9-remaining-authority-blocker-ledger-2026-06-10.md","by":"residual-approval-seal-lane-macro","status":"open (N7/N8/P7/owner)","authority":"provisional-non-authority","lifecycle":"active","owner":"SYSTEM/AUTHORITY","auto_gov":"BORN-UNCERTIFIED-if-synced"}, {"id":"TKT-OBJ-067","name":"Checkpoint FIX7 P-EXT-1 apply + recheck-9 handoff","type":"checkpoint","location":"checkpoints/checkpoint-fix7-p-ext-1-apply-and-recheck9-handoff-2026-06-10.md","by":"residual-approval-seal-lane-macro","status":"created","authority":"provisional-non-authority","lifecycle":"retained-evidence","owner":"SYSTEM","auto_gov":"BORN-UNCERTIFIED-if-synced"}, {"id":"TKT-OBJ-068","name":"FIX7 P-EXT-1 handoff new-object governance update","type":"governance","location":"governance/fix7-p-ext-1-handoff-new-object-governance-update-2026-06-10.md","by":"residual-approval-seal-lane-macro","status":"created","authority":"governance-KB-level","lifecycle":"active","owner":"SYSTEM","auto_gov":"BORN-UNCERTIFIED-if-synced"}, {"id": "TKT-OBJ-069", "name": "P-EXT-2 patch (fail-closed produce) APPLIED to SSOT fence", "type": "patch/state-transition", "location": "blueprint path canonicalizer-fix7-canon-v1-ssot.md (KB rev3)", "by": "recheck9-hardening-lane-macro", "status": "applied; byte-exact re-fetch proven (49c386a9\u2026)", "authority": "load-bearing SSOT content change; candidate not sealed", "lifecycle": "active", "owner": "OWNER-authorized via lane macro", "auto_gov": "NONE"}, {"id": "TKT-OBJ-070", "name": "manifest format FIX7-R9-MANIFEST-V2 + manifest_tool.py V2 (authority/explanatory split; full recompute deep-diff verify; scan/complete/emit-hash-manifest modes)", "type": "tool/code", "location": "packets/fix7-codex-recheck-9-2026-06-10/manifest_tool.py (rev2)", "by": "recheck9-hardening-lane-macro", "status": "verify exit0 nominal; every tamper class exit1", "authority": "non-authority-utility (NOT seal/gate)", "lifecycle": "active", "owner": "OPERATOR/SYSTEM", "auto_gov": "BORN-UNCERTIFIED-if-synced"}, {"id": "TKT-OBJ-071", "name": "adversarial_suite.py (12 tamper classes + 4 controls; 22/22)", "type": "tool/code", "location": "packets/fix7-codex-recheck-9-2026-06-10/adversarial_suite.py", "by": "recheck9-hardening-lane-macro", "status": "exit0; expected-fail tests gated", "authority": "non-authority-utility", "lifecycle": "active", "owner": "OPERATOR/SYSTEM", "auto_gov": "BORN-UNCERTIFIED-if-synced"}, {"id": "TKT-OBJ-072", "name": "kb_fetch_reconstruct.py (KB fresh-fetch packet reconstruction, fail-closed)", "type": "tool/code", "location": "packets/fix7-codex-recheck-9-2026-06-10/kb_fetch_reconstruct.py", "by": "recheck9-hardening-lane-macro", "status": "RECONSTRUCTION OK 28 files; tree identical 21752e19\u2026", "authority": "non-authority-utility; read-only", "lifecycle": "active", "owner": "OPERATOR/SYSTEM", "auto_gov": "BORN-UNCERTIFIED-if-synced"}, {"id": "TKT-OBJ-073", "name": "RERUN.sh V2 (strict 10-gate rerun)", "type": "tool/script", "location": "packets/fix7-codex-recheck-9-2026-06-10/RERUN.sh", "by": "recheck9-hardening-lane-macro", "status": "exit0 nominal; exit1 on every tamper", "authority": "non-authority-utility", "lifecycle": "active", "owner": "OPERATOR/SYSTEM", "auto_gov": "BORN-UNCERTIFIED-if-synced"}, {"id": "TKT-OBJ-074", "name": "HASH_MANIFEST.txt (28-entry bidirectional hash manifest)", "type": "evidence", "location": "packets/fix7-codex-recheck-9-2026-06-10/HASH_MANIFEST.txt", "by": "recheck9-hardening-lane-macro", "status": "emitted; shasum -c OK", "authority": "evidence-only", "lifecycle": "active", "owner": "SYSTEM", "auto_gov": "BORN-UNCERTIFIED-if-synced"}, {"id": "TKT-OBJ-075", "name": "Packet V2 KB-native surface (19 docs: README/RERUN/HM/manifest/tools/evidence\u00d76/logs\u00d76; corpus via canonical blueprint ids; old divergent root extended.py DELETED)", "type": "packet", "location": "packets/fix7-codex-recheck-9-2026-06-10/", "by": "recheck9-hardening-lane-macro", "status": "published; fresh-fetch reconstruction PASS", "authority": "provisional-non-authority; evidence-only", "lifecycle": "active", "owner": "SYSTEM", "auto_gov": "BORN-UNCERTIFIED-if-synced"}, {"id": "TKT-OBJ-076", "name": "R9-B1..B5 hardening master report", "type": "report", "location": "reports/fix7-recheck9-r9-b1-b5-hardening-master-report-2026-06-10.md", "by": "recheck9-hardening-lane-macro", "status": "created", "authority": "provisional-non-authority", "lifecycle": "active", "owner": "SYSTEM", "auto_gov": "BORN-UNCERTIFIED-if-synced"}, {"id": "TKT-OBJ-077", "name": "Manifest verifier completeness report (R9-B1)", "type": "report", "location": "reports/fix7-recheck9-manifest-verifier-completeness-report-2026-06-10.md", "by": "recheck9-hardening-lane-macro", "status": "created", "authority": "provisional-non-authority", "lifecycle": "active", "owner": "SYSTEM", "auto_gov": "BORN-UNCERTIFIED-if-synced"}, {"id": "TKT-OBJ-078", "name": "Produce fail-closed negative tests report (R9-B2)", "type": "report", "location": "reports/fix7-recheck9-produce-failclosed-negative-tests-2026-06-10.md", "by": "recheck9-hardening-lane-macro", "status": "created", "authority": "provisional-non-authority", "lifecycle": "active", "owner": "SYSTEM", "auto_gov": "BORN-UNCERTIFIED-if-synced"}, {"id": "TKT-OBJ-079", "name": "RERUN strictness report (R9-B3)", "type": "report", "location": "reports/fix7-recheck9-rerun-strictness-report-2026-06-10.md", "by": "recheck9-hardening-lane-macro", "status": "created", "authority": "provisional-non-authority", "lifecycle": "active", "owner": "SYSTEM", "auto_gov": "BORN-UNCERTIFIED-if-synced"}, {"id": "TKT-OBJ-080", "name": "KB-native packet completeness report (R9-B4)", "type": "report", "location": "reports/fix7-recheck9-kb-native-packet-completeness-report-2026-06-10.md", "by": "recheck9-hardening-lane-macro", "status": "created", "authority": "provisional-non-authority", "lifecycle": "active", "owner": "SYSTEM", "auto_gov": "BORN-UNCERTIFIED-if-synced"}, {"id": "TKT-OBJ-081", "name": "Current KB byte hash proof (R9-B5)", "type": "report", "location": "reports/fix7-recheck9-current-kb-byte-hash-proof-2026-06-10.md", "by": "recheck9-hardening-lane-macro", "status": "created", "authority": "provisional-non-authority", "lifecycle": "active", "owner": "SYSTEM", "auto_gov": "BORN-UNCERTIFIED-if-synced"}, {"id": "TKT-OBJ-082", "name": "Codex-adversarial selfcheck report", "type": "report", "location": "reports/fix7-recheck9-codex-adversarial-selfcheck-report-2026-06-10.md", "by": "recheck9-hardening-lane-macro", "status": "created", "authority": "provisional-non-authority", "lifecycle": "active", "owner": "SYSTEM", "auto_gov": "BORN-UNCERTIFIED-if-synced"}, {"id": "TKT-OBJ-083", "name": "Packet V2 rerun handoff (supersedes V1 handoff)", "type": "checkpoint", "location": "checkpoints/fix7-codex-recheck-9-rerun-packet-v2-handoff-2026-06-10.md", "by": "recheck9-hardening-lane-macro", "status": "created", "authority": "provisional-non-authority", "lifecycle": "active", "owner": "SYSTEM", "auto_gov": "BORN-UNCERTIFIED-if-synced"}, {"id": "TKT-OBJ-084", "name": "Checkpoint R9-B1..B5 hardening lane", "type": "checkpoint", "location": "checkpoints/checkpoint-fix7-recheck9-r9-b1-b5-hardening-2026-06-10.md", "by": "recheck9-hardening-lane-macro", "status": "created", "authority": "provisional-non-authority", "lifecycle": "active", "owner": "SYSTEM", "auto_gov": "BORN-UNCERTIFIED-if-synced"}, {"id": "TKT-OBJ-085", "name": "Current-state: packet V2 hardened awaiting Codex rerun", "type": "current-state", "location": "knowledge/current-state/reports/fix7-recheck9-packet-v2-current-state-2026-06-10.md", "by": "recheck9-hardening-lane-macro", "status": "created", "authority": "provisional-non-authority", "lifecycle": "active", "owner": "SYSTEM", "auto_gov": "BORN-UNCERTIFIED-if-synced"}, {"id": "TKT-OBJ-086", "name": "This rev5 governance update", "type": "governance", "location": "governance/fix7-recheck9-hardening-new-object-governance-update-2026-06-10.md", "by": "recheck9-hardening-lane-macro", "status": "created", "authority": "governance-KB-level", "lifecycle": "active", "owner": "SYSTEM", "auto_gov": "BORN-UNCERTIFIED-if-synced"} ], "native_surfaces_reused_readonly": ["role context_pack_readonly","dot_tools(309)","information_unit(219)","tac_logical_unit(102)","v_dot_reconciliation_reliability(309)","v_dot_registry_no_file(41)","system_issues(224019)","dot_iu_command_catalog","context_pack_manifest","v_iu_collection_manifest","query_pg gateway"], "orphan_summary": {"before_macro":"all TKT-OBJ- orphaned wrt native birth/governance (0 rows in birth_registry)","after_macro":"all classified at KB level OR have action-ready blocker; production-registry insertion deferred to AUTHORITY"} }