Overall STAGE2_6A_FIX4_AUTHORITATIVE_PATH_REPOINTED_NO_LEGACY_BYPASS_READY_FOR_CODEX_REAUDIT. PARTIAL (actual PUBLIC/Directus REVOKE + real keyset/resume/perf remain 2.6B; all current paths structurally blocked).

Permanent/connected? Yes — every authoritative caller (writer/builder/tier/signal/signoff/current-plan/readiness) consumes the v4 family ONLY; v_qt001_writer_no_legacy_dependency_guard proves 0 legacy references and is enforced inside the writer + readiness v7 + hardcode v5, so regression is caught automatically. Impossible to mistake? Authority is by controlled registry FK + immutable evidence, not non-empty strings; capability by verifier+guard evidence, not free text; BLOCK is fail-closed; fingerprint is acyclic + NULL-strict. 100% automatic/scale-safe? Not yet — keyset/resume/auto-refresh/representative perf gate are routed 2.6B; scale stays NOT_SAFE and readiness stays BLOCKED by design.

Codex defects: 9 FIXED + 2 ROUTED_2_6B; hardcode guard v5 11/11; no-bypass 11/11; readiness v7 BLOCKED (6 red gates); machine tier TIER2=7/TIER3=6/BLOCKED=6/INELIGIBLE=55/TIER1=0. Birth-neutral (delta 0). Next: BIRTH_STAGE2_6B_QT001_PERMIT_RUN_KEYSET_RESUME_AND_AUTHORITY_REVOKE then fresh independent Codex re-audit BEFORE any permit/apply.