SUPERTRACK I. Goal: prove there is no path from the current state to apply eligibility.

v_qt001_26a_fix3_no_bypass_proof — eleven preconditions, all blocked=true: no_safe_exact_signoff (signoff_satisfies_v3 over all candidates = 0); no_tier_allows_apply (qt001_tier_registry.apply_allowed all false); no_open_execute_permit (zero open execute permits); public_execute_risk_open_but_contained (PUBLIC EXECUTE open but forces readiness BLOCKED; REVOKE routed 2.6B); directus_dml_risk_open_but_contained (app DML open but forces readiness BLOCKED; REVOKE routed 2.6B); scale_not_safe (capability contract unsatisfied); readiness_blocked (overall_ready false); governance_enforced (all active rules pass machine governance); hardcode_v4_core_sound; writer_fail_closed_in_body (fn_dot_birth_qt001_apply in-body lockdown); done_ledgers_zero. bool_and(blocked) = true.

The two open control-plane risks (public/directus) are framed as contained rather than as bypass paths: they do not by themselves create an apply path — they force readiness BLOCKED and the writer fails closed — so the proof conclusion ("no path to apply eligibility") is exact. Any attempted eligibility chain breaks before the writer/apply: a SAFE exact plan-bound signoff is absent, no tier has apply_allowed, no execute permit is open, scale is not safe, readiness is blocked, and the writer reads all of these in-body.

Companion guard v_qt001_26a_fix3_must_not_proceed_guard: readiness_blocked, no_open_execute_permit, no_exact_signoff, scale_not_safe, governance_sound, hardcode_v4_sound all true; pass true.