Checkpoint - Codex FIX7 Refactor Blueprint Critical Review

Date: 2026-06-08 Mode: READ-ONLY production; blueprint documents not edited.

Final status

FIX7_REFACTOR_BLUEPRINT_CODEX_CRITICAL_REVIEW_FAIL_HARDCODE_OR_PG_NATIVE_GAP

Blocking summary

1. S00 owner=directus + QT001 name-pattern set is used as binding operational authority: disguised hardcode and PG-native-driven violation.
2. G-NOLEGACY is phase-deadlocked: required before the step that makes its ACL clause green.
3. Stub scope conflicts: all entrypoints in PKG-F versus apply/writer only elsewhere; rollback is not symmetric.
4. S15 rollback restores blanket PUBLIC EXECUTE without explicit atomic deactivation/supersession of the new authority path.
5. ACL snapshot/guards omit column ACL and explicit effective-role privilege proof.
6. Writer/gateway ownership expectations are ambiguous across S15/S16.
7. permit is ambiguous and conflicts with the blocked permit boundary.

Invariants / boundaries

• Official FIX7 design remains approved.
• 27 authority surfaces, 11 runtime-evidence non-authority, 14 readiness gates as DATA, 7 hash contracts: unchanged.
• No new readiness gate or hash contract approved.
• Implementation, Stage 2.6B, permit, REAL_RUN, QT001 apply, activation, repoint, owner/ACL cutover: BLOCKED.

Report path

knowledge/dev/reports/architecture/codex-fix7-refactor-blueprint-critical-review-2026-06-08/

Next: T1 revises blueprint and submits it for another Codex critical review. No implementation.