KB-175F

FIX6 QT001 Signoff Fixed-Point + Behavioral Proof + Self-Audit — Read Me First

3 min read Revision 1
qt001fix6readmeself-auditpg-nativepartial-blocked

BIRTH Stage 2.6A-FIX6 — QT-001 — Read Me First

Date 2026-06-07. Mode EXECUTION. Live mutation YES (additive/reversible/birth-neutral). MCP read-back PASS.

Status: STAGE2_6A_FIX6_SELF_AUDITED_PG_NATIVE_DRIVEN_READY_FOR_EXTERNAL_CODEX_CONFIRMATION Verdict: PG_NATIVE_DRIVEN_PARTIAL_BLOCKED (apply BLOCKED, scale NOT_SAFE — honest, by design).

The one-paragraph truth

FIX6 answers Codex FIX5's 10 blockers not by claiming the system is now safe-to-apply (it is not, and cannot be in 2.6A) but by making every guard structurally sound, fail-closed (NULL=FAIL), and non-false-greenable, and by surfacing the things that genuinely cannot be fixed in 2.6A as hard blockers rather than faking them green. The internal Codex-style self-audit (v_qt001_fix6_self_audit.self_audit_pass) is TRUE, an independent adversarial read-only auditor returned CONFIRM_SELF_AUDITED_PARTIAL_BLOCKED, and T1 found+fixed 2 of its own defects before reporting.

Why apply is honestly BLOCKED (3 structural facts)

  1. PostgreSQL stores no function→function call edges in pg_depend (func_to_func=0, verified) → a native callgraph cannot prove the apply path (plpgsql functions) is legacy-free → v_qt001_callgraph_unclassified_fail_guard.pass=false. Regex callgraph demoted to diagnostic-only.
  2. fn_qt001_plan_v5 is a byte-identical clone of fn_dot_birth_qt001_plan_v2 (normalized_identical=true) → its full-scan eligibility is a keyset/perf BLOCKER (NOT_SAFE). FIX6 detects+blocks; does not re-author (2.6B).
  3. The directus app-role owns/DDL-controls the entire control plane (262 qt001 objects) → any PG guard is rewritable by it → v_qt001_directus_mutation_blocks_readiness_guard.pass=false. REVOKE/owner-role separation is 2.6B.
  • 01 reproduction of Codex B1..B10 (live evidence).
  • 02 native callgraph (B) + v2-clone removal (C).
  • 03 fixed-point hash (D) + signoff identity (E).
  • 04 capability behavioral contract (F).
  • 05 readiness v9 (G) + hardcode v7 / no-bypass v4 (H).
  • 06 directus mutation risk (I) + scorecard (J).
  • 07 writer/builder repoint.
  • 08 self-audit + independent adversarial confirm.
  • 09 safety no-worse + NEXT 2.6B.

Final live values (committed)

self_audit_pass=true; scorecard=PG_NATIVE_DRIVEN_PARTIAL_BLOCKED; readiness v9 ready=false (ssot 4/10, apply 0/4, null/missing 0); hardcode_v7=true; no_tautology=true; no_bypass all_blocked=false; capability 0/3, scale_not_safe=true, false_green pass=true (falsifiable); signoff identity pass=true; fixed_point 5/5; clone_detected=true; directus blocks pass=false; OLD legacy_dep_guard=true. Safety: births/permits/done/bindings/apply-tiers=0; tga=129; gateway all_ok=true.

Do NOT apply / open permit / proceed to 2.6B until fresh external Codex PASS.

Back to Knowledge Hub knowledge/dev/reports/architecture/birth-stage2-6a-fix6-qt001-signoff-fixed-point-behavioral-proof-self-audit-2026-06-07/00-readme-first.md