FIX6 QT001 Signoff Fixed-Point + Behavioral Proof + Self-Audit — Read Me First
BIRTH Stage 2.6A-FIX6 — QT-001 — Read Me First
Date 2026-06-07. Mode EXECUTION. Live mutation YES (additive/reversible/birth-neutral). MCP read-back PASS.
Status: STAGE2_6A_FIX6_SELF_AUDITED_PG_NATIVE_DRIVEN_READY_FOR_EXTERNAL_CODEX_CONFIRMATION Verdict: PG_NATIVE_DRIVEN_PARTIAL_BLOCKED (apply BLOCKED, scale NOT_SAFE — honest, by design).
The one-paragraph truth
FIX6 answers Codex FIX5's 10 blockers not by claiming the system is now safe-to-apply (it is not, and cannot be in 2.6A) but by making every guard structurally sound, fail-closed (NULL=FAIL), and non-false-greenable, and by surfacing the things that genuinely cannot be fixed in 2.6A as hard blockers rather than faking them green. The internal Codex-style self-audit (v_qt001_fix6_self_audit.self_audit_pass) is TRUE, an independent adversarial read-only auditor returned CONFIRM_SELF_AUDITED_PARTIAL_BLOCKED, and T1 found+fixed 2 of its own defects before reporting.
Why apply is honestly BLOCKED (3 structural facts)
- PostgreSQL stores no function→function call edges in pg_depend (
func_to_func=0, verified) → a native callgraph cannot prove the apply path (plpgsql functions) is legacy-free →v_qt001_callgraph_unclassified_fail_guard.pass=false. Regex callgraph demoted to diagnostic-only. fn_qt001_plan_v5is a byte-identical clone offn_dot_birth_qt001_plan_v2(normalized_identical=true) → its full-scan eligibility is a keyset/perf BLOCKER (NOT_SAFE). FIX6 detects+blocks; does not re-author (2.6B).- The
directusapp-role owns/DDL-controls the entire control plane (262 qt001 objects) → any PG guard is rewritable by it →v_qt001_directus_mutation_blocks_readiness_guard.pass=false. REVOKE/owner-role separation is 2.6B.
Read next
- 01 reproduction of Codex B1..B10 (live evidence).
- 02 native callgraph (B) + v2-clone removal (C).
- 03 fixed-point hash (D) + signoff identity (E).
- 04 capability behavioral contract (F).
- 05 readiness v9 (G) + hardcode v7 / no-bypass v4 (H).
- 06 directus mutation risk (I) + scorecard (J).
- 07 writer/builder repoint.
- 08 self-audit + independent adversarial confirm.
- 09 safety no-worse + NEXT 2.6B.
Final live values (committed)
self_audit_pass=true; scorecard=PG_NATIVE_DRIVEN_PARTIAL_BLOCKED; readiness v9 ready=false (ssot 4/10, apply 0/4, null/missing 0); hardcode_v7=true; no_tautology=true; no_bypass all_blocked=false; capability 0/3, scale_not_safe=true, false_green pass=true (falsifiable); signoff identity pass=true; fixed_point 5/5; clone_detected=true; directus blocks pass=false; OLD legacy_dep_guard=true. Safety: births/permits/done/bindings/apply-tiers=0; tga=129; gateway all_ok=true.
Do NOT apply / open permit / proceed to 2.6B until fresh external Codex PASS.