13 — MCP-Readable Checkpoint (compact)

STATUS=PARTIAL MODE=EXECUTION/principal-delegate LIVE_MUTATION=YES(additive/reversible/birth-neutral) MACRO_NET_BIRTHS=0 DATE=2026-06-06.

STAGE1_REVERIFY=PASS (stage0 5/5, gateway no_go 4/4, contract all_ok, drift 0, fns present, H11a/H11b detect_only, authority P1 8/8 quorum 7/7, no-worse 5/5, qt-compat 8/8).

IDENTITY: required=74 resolvable_before=31 resolvable_after=70 (synthetic_id 33 + column 34 + legacy 3) unclassified=4 no_table=2. Classified 39 by mirroring live trigger TG_ARGV (7 column [apr_action_types=action_code; checkpoint_instances,checkpoint_type_overrides,comments,table_proposals,trigger_registry,workflow_categories=code] + 32 synthetic_id). NEEDS_OWNER 4 = apr_request_types,binding_registry,nrm_doc_type_config (no-id realtime-divergent) + nrm_approval_rules (composite PK).

METADATA_REPAIR=APPLIED(39)+ACTION_PACK(4). Birth-neutral DO block, rehearsed BEGIN..ROLLBACK then committed. collection_registry.birth_code_* only; coverage_status untouched; invisible to live gateway (does not read birth_code_*).

DRYRUN: eligible=39 delta_collections=5 expected_new_births=137 [dot_domain_rules 67, apr_approvals 42, normative_relations 18, apr_action_types 6, field_type_equivalences 4] all governed, zero duplicate risk. cross-checked vs fn_birth_register dry-run (would_register/skipped/blocked all correct).

APPLY_REHEARSAL=PROVEN: real fn_birth_register(...,false) over 5 collections in BEGIN..ROLLBACK -> applied_delta=137, rerun_delta=0 (idempotent), ROLLBACK -> birth restored 1,210,868. COMMITTED NOTHING.

APPLY_DECISION=ACTION_READY_PENDING_T2_AND_PERMIT (not committed). Reasons: packet section 7 no-self-certify; 0 open permits (fail-closed); all 5 targets governed + births immutable.

PLAN_DOT + APPLY_DOT = SOURCE ONLY (fn_dot_birth_qt001_plan read-only; sp_dot_birth_qt001_apply gated/fail-closed). Old dot-birth-backfill + dot-birth-trigger-setup remain FROZEN. No apply-capable fn deployed live.

ANCHORS: birth_registry=1,210,868 tga=129 apr=42 open_permits=0 ledger_planned=5 ledger_done=0.

VIEWS_LIVE(25): stage2_dependency_guard, stage2_no_worse_guard, stage2_identity_blocker_{inventory,classification}, stage2_identity_fix_priority, stage2_metadata_repair_{plan,status}, stage2_metadata_no_go_guard, stage2_required_collection_preflight, stage2_required_gap_inventory, stage2_required_no_go_guard, qt001_{plan_dot_readiness,collection_plan_surface,apply_dot_readiness,apply_no_go_guard,permit_status,backfill_ledger_status,dryrun_result,dryrun_summary,dryrun_no_go_guard,apply_decision,apply_result,rerun_delta_guard}, stage2_cross_layer_impact_guard, stage2_rp_object_truth_guard.

GUARDS_GREEN: dependency 6/6, no_worse 6/6, metadata_no_go 5/5, required_no_go 5/5, dryrun_no_go 4/4, cross_layer 7/7, rp_object_truth 4/4.

SAFETY=CLEAN: no danger DOT, no gateway/trigger change, no source edit, no bulk backfill, no owner/vote/RP/realrun/event/UI, no historical delete, OOM safe. Rollback staged 99_rollback_stage2.sql.

VPS_SQL=/opt/incomex/docs/mcp-writes/birth-stage2-2026-06-06/ (01_classify, 02_views, 02b_fix, 03_apply_rehearsal, 04/05 DOT source, 10_dryrun_numbers, 99_rollback).

NEXT=T2_REVIEW_STAGE2_BEFORE_APPLY -> BIRTH_STAGE2_QT001_APPLY_IF_READY ; parallel BIRTH_STAGE2_METADATA_REPAIR_CONTINUE (4 needs-owner + 2 no-table). BLOCKER=independent T2 + owner permit; zero eng blocker.