09 Safety and No-Apply Audit (SUPERTRACK I)

All anchors hold; the change is additive, reversible, birth-neutral; no apply occurred.

Anchors (baseline -> post-commit)

• birth_registry total: 1,210,956 -> 1,210,956 (DDL/DML birth-neutral; later KB report uploads add provenance births only).
• qt001-apply-origin births: 0 -> 0.
• open execute permits: 0 -> 0. done ledgers: 0 -> 0.
• trigger_guard_alerts (tga): 129 -> 129 (no CREATE TRIGGER, no ALTER TABLE; inline CHECK + CREATE UNIQUE INDEX did not trip evt_trigger_guard).
• apr_approvals: 42 -> 42.
• gateway contract integrity all_ok=true; gateway norm-md5 c022f849 present (unchanged).
• Stage 0 freeze guard: 5/5 pass (dangerous DOTs remain frozen).

No-apply / no-mutation confirmations

No real apply. No permit opened. No done ledger. Tier1 target births unchanged. QT001-origin births 0. Gateway function body unchanged. No trigger change. No old DOT unfreeze. No owner/vote/RP/REALRUN/event/UI mutation. No writer enablement. No broad permission change. No fixed Tier1 list. No literal independent_reaudit_signed_off controlling readiness. No fixed 5/137/39/13/779 count. No CASE hardcode tier classification.

OOM / scale safety

All work was metadata-scale (13-row plan, 11 rule rows, 74-row snapshot). Rehearsed first as BEGIN..ROLLBACK (birth before==after, no error), then committed via psql -1. Rollback staged at 99_rollback.sql (restores both original functions, drops new objects, deletes HC-12/HC-13, rebuilds plan with legacy builder).

Method

ssh contabo -> docker exec -i postgres psql -U directus -d directus. DDL files under /opt/incomex/docs/mcp-writes/birth-stage2-6a-fix-2026-06-06/ (01_engine, 02_rules_and_fns, 03_views, 04_readiness_v4_and_a_i, 05_regen_and_inventory, 91_verify, 99_rollback).