Checkpoint - Codex FIX7 Blueprint Recheck 3 After Option Beta Patch

Date: 2026-06-09 Mode: READ-ONLY production; blueprint not edited. Final status: FIX7_REFACTOR_BLUEPRINT_CODEX_RECHECK_3_NEEDS_T1_FIX

Accepted: STUB/body path removed; DO_NOT_TOUCH authority subtraction removed; invariants/boundaries preserved; Option Beta remains the correct design.

Remaining blockers:

1. U_legacy is typed as PG object identities but its closed denominator unions object identities, principals, and scheduler/DOT entry vectors. These domains cannot be both-EXCEPT-equal and non-object records cannot receive the uniform owner/body/#21 end-state.
2. #21 principal/effective-privilege evaluation must be a separate exact privilege-tuple universe, not membership in U_legacy.
3. Entry vectors/DOT/scheduler coverage must be a separate bypass-vector guard mapping to U_legacy objects or independently blocked states.
4. G-LEGACY-NO-DISPOSITION-AUTHORITY says it scans the whole blueprint while current checkpoint/final-history sections retain old operational disposition/STUB instructions without an exact superseded/non-authority boundary.

T1 must perform a narrow correction pass, then focused Codex recheck. No design amendment required. Implementation, Stage 2.6B, permit, REAL_RUN, QT001 apply, activation, repoint, and cutover remain BLOCKED.

Report: knowledge/dev/reports/architecture/codex-fix7-blueprint-recheck-3-after-option-beta-patch-2026-06-08/