10 — Safety Audit (production no-worse)

Live read-back AFTER commit:

• gateway fn_birth_registry_auto norm-md5 = 9393db3c068a6de6bbcb68be2c8d1692 — UNCHANGED (gateway body not modified).
• trigger_guard_alerts = 129 — unchanged. apr_approvals = 42 — unchanged.
• birth_registry total = 1,211,106 (baseline ~1,211,105 at start; +1 from unrelated realtime activity). qt001_origin_births = 0.
• open execute permits = 0. done backfill ledgers = 0. signoff bindings = 0. tiers apply_allowed = 0.
• Stage 0 DOT freeze guard = PASS 2/2 (danger DOTs frozen). gateway contract integrity all_ok = true.
• v_qt001_26a_fix5_safety_audit.pass = true.

Forbidden actions NOT taken: no QT-001 apply; no permit opened; no birth_registry write (KB/report docs only); no trigger change; no gateway body change; no old DOT unfreeze; no owner/vote/RP/REALRUN/event/UI deploy; no 2.6B; no new "safe" wrapper left un-repointed (all authoritative callers repointed to v5).

Reversibility: all changes additive (new tables/functions/views) or CREATE OR REPLACE on 6 functions whose FIX4 bodies are captured in ROLLBACK_fix5_to_fix4.sql (6 CREATE OR REPLACE + CURRENT-plan revert to v4). Rehearsed BEGIN..ROLLBACK twice (full build + guard battery) before COMMIT. OOM-safe: heavy closure/build run via ssh psql with statement_timeout 180s; readiness ~3.5s after MATERIALIZED-edge optimization.