12 — Final Summary

Status: PARTIAL → STAGE2_6A_FIX5_LEGACY_PLANNER_REMOVED_FALSE_PROOF_REBUILT_READY_FOR_CODEX_REAUDIT. Execution mode: principal-delegate. Live mutation: YES (additive/reversible/birth-neutral). MCP read-back: PASS.

Completion contract (PARTIAL — 2.6B risks remain but are structurally blocking):

• writer/driver/builder/current-plan no longer reach legacy planner v2 — DONE (recursive callgraph: legacy_reached=0, roots_reaching_planner_v2=0; plan_v2 sentinel-only).
• fingerprint includes signoff + capability and fails on NULL — DONE (fingerprint v5, invalid on eligible/undocumented NULL).
• capability proof is behavioral not function-existence — DONE (behavior + operational evidence; existence/free-text rejected).
• hardcode guard catches all Codex FIX4 defects — DONE (hardcode v6 + negative tests).
• no-bypass proof has no tautology — DONE (no_bypass v3 + no_tautology guard).
• readiness v8 remains BLOCKED for structural reasons — DONE (6 gates red: public/directus + 4 APPLY).
• PG verdict not PG_HOSTED_HARDCODE_REMAINS — DONE (PG_DRIVEN_PARTIAL_BLOCKED).
• no apply — DONE.

Why PARTIAL not PASS: PUBLIC EXECUTE revoke, Directus owner-DML/ownership separation, and real keyset/resume/perf capability are explicitly forbidden in this macro and routed to 2.6B; they remain OPEN but are structurally blocking (readiness BLOCKED, scale NOT_SAFE).

12/12 Codex FIX4 blockers now_safe (11 FIXED + 1 ROUTED_2_6B_BLOCKING). Tier dist unchanged (TIER2 7 / TIER3 6 / BLOCKED 6 / INELIGIBLE 55 / TIER1 0). CURRENT plan = PLAN-d0272db42f77 v5.

NEXT: BIRTH_STAGE2_6A_FIX5_CODEX_REAUDIT — fresh independent Codex re-audit BEFORE any permit/apply/2.6B. Exact blocker: independent re-audit + owner ratification; zero engineering blocker. Do NOT proceed to 2.6B until Codex PASS.