Stage 1 — 01 Stage 0 Reverify + Dependency Impact (Supertrack A)

Stage 1 may not proceed if Stage 0 protection is broken. It is not — all checks below verified LIVE before any Stage 1 DDL.

Stage 0 still enforced (live)

Check	Result
dot-birth-trigger-setup active path	inert wrapper md5 753dd26f…, exit 3, 0 CREATE OR REPLACE FUNCTION
dot-birth-backfill active path	inert wrapper md5 753dd26f…, exit 3
Byte-identical frozen backups	trigger-setup .stage0-frozen-2026-06-06 md5 a0b926d3… (design value); backfill f04cdbf5… (design value); frozen file has 1 CREATE OR REPLACE FUNCTION (the dangerous one, quarantined)
No execution since freeze	active wrappers mtime pinned 2026-06-06 08:04:17 (freeze time); no cron/systemd caller
Live gateway fn_birth_registry_auto	GUARDED: has_coverage_status + has_birth_exempt; norm-md5 c022f849…
v_birth_gateway_no_old_function_guard	PASS
v_birth_gateway_ssot_drift_detector	OK for both fns (live==approved)
v_birth_stage0_freeze_no_go_guard	PASS (frozen 2/2)
v_birth_stage0_regression_guard	10/10 PASS
H11a containment	check_kind=detect_only; birth rate 7–22/hr last 6h (no explosion)
Authority P0 v_authority_p0_still_contained_guard	3/3 PASS
Authority P1 v_authority_p1_regression_guard	8/8 PASS
Authority quorum v_authority_quorum_regression_guard	7/7 PASS
tga / apr	129 / 42 (unchanged)

Event-trigger guard analysis (why Stage 1 is structurally safe)

evt_trigger_guard_ddl fires only on tags {CREATE TRIGGER, ALTER TABLE}; evt_trigger_guard_drop only on {DROP TRIGGER}. Stage 1 uses ONLY CREATE OR REPLACE FUNCTION, CREATE TABLE (no ALTER), CREATE OR REPLACE VIEW, and an INSERT into a brand-new table — none of which fire the guard. Therefore tga cannot bump and no trigger can be created/altered/dropped. Confirmed post-apply: tga 129 → 129.

New guard views (created by Stage 1)

• v_birth_stage0_still_enforced_guard — 5/5 assertions pass (gateway guard, drift OK, exempt guard present, frozen 2/2, stage0 regression all pass).
• v_birth_stage1_dependency_impact_status — 6/6 dimensions safe (gateway unchanged, dots frozen, helper fns additive, register dry-run default, gateway does not call Stage 1 fns, contract drift OK).

Conclusion

Stage 0 protection fully intact; Stage 1 adds only additive objects and reopens no old hole. Dependency impact = none on the live runtime path.