KB-3CAC

Stage 2.6A-FIX 01 — Codex Failure Reverification (SUPERTRACK A)

3 min read Revision 1

01 Codex Failure Reverification (SUPERTRACK A)

We did not trust the prior T1 PASS. Each Codex 2.6A finding was reproduced against the committed live objects before fixing.

Reproduced live (before fix)

  • F1 CASE tier hardcode: fn_qt001_build_plan_registry contained CASE WHEN divergence<>0 THEN TIER3 / IN-list -> TIER1. Confirmed in pg_get_functiondef.
  • F2 tier registry descriptive-only: qt001_tier_registry.eligibility_rule / parity_requirement are free text; the real engine was the CASE.
  • F3 divergence drives Tier3: CASE keyed Tier3 off divergence<>0 as if mathematically true.
  • F4 same literal blocked_reason: SELECT count(DISTINCT blocked_reason) over 13 CURRENT rows = 1.
  • F5 signoff not plan-bound: both rows of qt001_independent_review_signoff have reviewed_plan_checksum NULL; positive path accepted scope ILIKE %APPLY% without checksum compare.
  • F6 any non-superseded review grants Tier1: CASE EXISTS used only NOT r.superseded — no verdict, no validation_kind, no plan-bind.
  • F7 hardcode guard false-pass: v_qt001_hardcode_no_go_guard.pass = true while HC-05 (DANGEROUS_HARDCODE, is_authority_gate=true) sits OPEN_NEXT_LAYER.
  • F8 readiness false-green risk: v3 gates count rows / accept literal scale sentinel.
  • F9 writer public bypass: fn_dot_birth_qt001_apply, sp_dot_birth_qt001_apply, fn_birth_register all proacl NULL = PUBLIC EXECUTE.

Live reverification objects

  • v_qt001_26a_codex_failure_reverification — one row per finding F1..F9 with before-evidence, fix, and live after-value.
  • v_qt001_26a_must_not_proceed_guard — pass=true means proceeding to 2.6B/apply is correctly blocked.

After-state (committed, read-back)

F1 tier_rule_no_go_guard.pass=true; F2 predicate rules present=true; F3 parity_conservation_guard.pass=true; F4 blocked_reason_not_literal_guard.pass=true (7 distinct); F5 signoff_no_go_guard.pass=true; F6 machine TIER1 count=0; F7 hardcode_guard_v2.status=FAIL; F8 readiness_v4_no_go_guard.pass=true; F9 writer_bypass_must_block_guard.pass=true. must_not_proceed.pass=true.

Back to Knowledge Hub knowledge/dev/reports/architecture/birth-stage2-6a-fix-qt001-machine-enforced-tier-plan-signoff-hardcode-guards-2026-06-06/01-codex-failure-reverification.md