13 — MCP-Readable Checkpoint Pointer (for fresh Codex re-audit)

Canonical checkpoint: knowledge/dev/reports/architecture/checkpoint-birth-stage2-6a-fix5-qt001-remove-legacy-planner-false-proof-rebuild-2026-06-07.md.

Codex re-audit start points (live, read-only — run these queries against DB directus/public):

• Structural callgraph: SELECT pass, legacy_reached, unclassified_reached FROM v_qt001_authoritative_legacy_dependency_guard; (expect t/0/0). SELECT * FROM v_qt001_no_legacy_planner_guard; (roots_reaching_planner_v2=0). Independently verify by tracing v_qt001_authoritative_callgraph_v2 from is_root objects, OR your own pg_depend/pg_get_functiondef closure — no root should reach fn_dot_birth_qt001_plan_v2, fn_qt001_plan_all, the v4 chain, old fingerprints, or v_qt001_scale_not_safe_guard.
• Writer/driver repoint: SELECT * FROM v_qt001_writer_authoritative_repoint_status_v5; then read pg_get_functiondef('fn_dot_birth_qt001_apply'::regproc) and sp_dot_birth_qt001_apply — first writer statement is fn_qt001_plan_v5; driver loop calls fn_qt001_plan_v5.
• Fingerprint NULL-strict + state: SELECT * FROM v_qt001_plan_fingerprint_v5_null_guard; and SELECT fn_qt001_plan_fingerprint_v5(); (invalid=false, signoff/capability/scale hashes present).
• Capability behavioral: SELECT * FROM v_qt001_capability_behavioral_contract; (all unsatisfied), v_qt001_capability_no_function_exists_proof_guard, v_qt001_capability_behavior_negative_tests.
• Hardcode v6 + neg: v_qt001_hardcode_guard_v6, v_qt001_hardcode_guard_v6_negative_tests.
• No-bypass + no-tautology: SELECT bypass_chain, blocked FROM v_qt001_no_bypass_proof_v3;, v_qt001_no_tautology_proof_guard.
• Readiness/scorecard/safety: v_qt001_apply_readiness_guard_v8 (BLOCKED), v_qt001_pg_native_driven_scorecard (PG_DRIVEN_PARTIAL_BLOCKED), v_qt001_26a_fix5_must_not_proceed_guard (pass=true), v_qt001_26a_fix5_safety_audit.

Adversarial checks Codex should run: (1) confirm no reachable guard view embeds a legacy object name literal — SELECT object_name FROM qt001_authoritative_object_registry WHERE object_role='legacy_superseded' then grep each reachable view's pg_get_viewdef. (2) verify no IS NOT NULL in v_qt001_no_bypass_proof_v3. (3) verify capability contract def has no to_regproc/to_regclass. (4) verify fingerprint composite='INVALID_NULL_COMPONENT' branch exists and triggers on an eligible NULL.

SQL + rollback on host: /opt/incomex/docs/mcp-writes/birth-stage2-6a-fix5-2026-06-07/sql/ (sections 00–09, ROLLBACK_fix5_to_fix4.sql).