KB-7D90

QT-001 Apply DOT Harden — 08 Readiness Guard v2

3 min read Revision 1
birth-gatewayqt-001stage2.5readiness2026-06-06

08 — Readiness Guard v2 (Supertrack H)

The false-pass that was repaired

v_birth_qt001_apply_dot_readiness previously asserted plan_dot_ready + three hardcoded trues + gateway_ok — and never checked that an apply procedure actually existed. With the source being pseudocode/not-deployed, it would go all-green (false-pass). It was patched to ADD: apply_runtime_procedure_exists, apply_source_not_pseudocode, false_done_structural_guard, and independent_reaudit_required = false. It can no longer go fully green while the runtime is absent or before a re-audit.

New readiness model

v_qt001_apply_readiness_guard_v2 — green ONLY if all hold:

  • apply_runtime_real (runtime_status all true)
  • permit_contract_pass · ledger_contract_pass
  • metadata_plan_pass (plan_no_go all pass)
  • collision_guard_pass
  • rehearsal_pass (rerun_delta0_rehearsal all pass)
  • no_open_unsafe_permit
  • independent_reaudit_signed_off — false (only an external T2/Codex pass flips this; the agent cannot self-certify)

Live: the 7 hardening gates = pass; independent_reaudit_signed_off = false.

v_qt001_apply_readiness_dashboard_v2 (snapshot-backed, ~0.4s):

  • hardening_gates_passed = 7/7 · all_hardening_pass = true · independent_reaudit_signed_off = false
  • apply_gate = BLOCKED_PENDING_INDEPENDENT_REAUDIT_AND_OWNER_PERMIT
  • metadata_scope_total_delta = 779 · tier1_validated_delta = 137 · tier3_divergent_blocked = 6
  • open_execute_permits = 0 · done_ledgers_v2 = 0 · plan_snapshot_refreshed_at = (live timestamp)

Stale-gate repair

v_birth_stage2_qt001_readiness_dashboard.qt001_gate recomputed from the live unclassified count: BLOCKED_PENDING_INDEPENDENT_REAUDIT: 4 identities NEEDS_OWNER; apply runtime hardened 2026-06-06; fresh independent re-audit + owner permit required before any apply (no more hardcoded "43").

Anti-false-pass principle

Readiness cannot go green unless the runtime is real (procedure exists + not pseudocode + structural false-done guard) AND a rehearsal passed AND an independent re-audit is signed off externally. The agent reports numbers; it does not ratify them.

Back to Knowledge Hub knowledge/dev/reports/architecture/birth-stage2-qt001-apply-dot-harden-permit-ledger-2026-06-06/08-readiness-guard-v2.md