Checkpoint — Process Axis Owner/Canon · Correlated dot:kg Dry-run · Compose/Content Return (short SSOT)

Date: 2026-06-04 · Macro: PROCESS_AXIS_OWNER_CANON_DOTKG_CORRELATED_DRYRUN_UI_COMPOSE_AND_CONTENT_RETURN Final status: PARTIAL — all safe engineering branches executed; only true owner/governance decisions remain (now a live queue). Execution mode: EXECUTION_MODE. RO=query_pg; RW=ssh contabo→docker exec -i postgres psql -U directus -d directus; KB=agent-data; staging=/opt/incomex/docs/mcp-writes/process-axis-owner-canon-dotkg-correlated-dryrun-ui-compose-content-return-2026-06-04/.

Live mutation: YES (additive, reversible)

• births 1,163,479 → 1,163,484 (+5 = the 5 owner-decision approval rows; these ARE the governance queue, expected/bounded). All other work birth-free: compose promotion, correlated dry-run observations, scan summary view = 0 births.
• guard_alerts 129 (last digest). MCP read-back PASS.

Compose promotion: DONE

incomex-agent-api-executor was a plain docker run (empty compose labels). Promoted to compose-managed (project=docker / service=agent-api-executor) in /opt/incomex/docker/docker-compose.yml. Verified: healthy; loopback 127.0.0.1:8090 only (no public route); read_only / cap_drop ALL / no-new-privileges / user 10001; OPENAI_API_KEY from .env (reuses agent-data key). Fail-closed proven post-promotion: healthz dry_only=true/writes_db=false, selfcheck 7/7, REAL_RUN→403. Rollback: docker-compose.yml.pre-executor-20260604T084441Z + /opt/incomex/docker/ROLLBACK-executor-docker-run.sh.

Correlated dry-run: DONE

Fresh real /dispatch DRY_RUN (is_mock=false, writes_db=false, verifier.pass=true/5) → corr dryrun-pair-20260604T084721Z. Wrote run 703f08e4-58d6-460f-8592-5fed5660f262 + producer(DOT_KG_EXPLAIN)+verifier(DOT_KG_EXPLAIN_VERIFY) DRY_RUN components sharing one correlation_id via fn_process_run_observe/fn_process_component_observe (birth-free). dot:kg: dry_run_observed → correlated_dryrun_observed. Verifier modeled as deterministic component (endpoint NOT bound — owner decision retained). REAL_RUN=0. Invariant held: verified_candidates_v3 = ONLY job:cut.

Owner/governance drain: DONE (actionable queue)

5 PENDING requests inserted, action='review' (no auto-approve leak — guarded), clean vocab (prior macro skipped citing "no vocab"; vocab now exists):

• PROC-OWN-01 assign_axis_owner / AX-PROCESS
• PROC-OWN-02 register_axis / AX-PROCESS canon + PIV-340..353 canon
• PROC-OWN-03 assign_governance_owner / job:cut register+owner+birth
• PROC-OWN-04 assign_governance_owner / dot:kg family owner + 10-process split
• PROC-OWN-05 activate_event_type / 7 process.* events governance_object_ownership still 0 (no fake owner inserted).

job:cut: VERIFIED_PENDING_OWNER — sole verified candidate, 8 members. One owner decision (PROC-OWN-03) registers it; no rediscovery.

dot:kg: correlated_dryrun_observed. 10-process split packet final. Owner=PROC-OWN-04, events=PROC-OWN-05.

AX-PROCESS pivots: AX-PROCESS=CANDIDATE; PIV-340..353 (14) CANDIDATE; candidate surfaces live. Canon owner-gated (PROC-OWN-02) — unretirable births not inserted.

Policy scheduler: HARDENED. timer enabled/active (next 2026-06-05 06:30). New RO view v_process_discovery_policy_scan_summary (orphan 84 / corr-gaps 17 / drift 17 / dry 2 / real 0 / correlated_pairs 1 / verified 1 / owner_pending 5 / events_inactive 7).

Content resume: GO. Companion KB docs written on Topic×Process surfaces (knowledge_graph cluster + dot-kg SOP operational section + process-discovery narrative). No source IU edit.

Three-macro roadmap

1. PROCESS_AXIS_OWNER_DECISIONS_CANON_AND_EVENTS (drain PROC-OWN-01..05 → canon → births → split → activate events).
2. PROCESS_DISCOVERY_UI_RP_DEPLOY_AND_CONTENT_EXPANSION (operator Nuxt deploy + content build).
3. DOT_KG_REAL_RUN_LADDER_AND_PRODUCTION_READINESS (runtime gate → first REAL_RUN → verified beyond job:cut).

Next macro

PRIMARY PROCESS_AXIS_OWNER_DECISIONS_CANON_AND_EVENTS (parallel: content expansion + operator UI deploy).

Exact blocker

Owner/governance only: decide PROC-OWN-01..05. No engineering blocker remains in endpoint/compose/dry-run/correlation/scheduler/UI-packet.

Safety audit: PASS — no production DOT exec, no REAL_RUN, no mutating agent_api, no fake verified, no birth/canon beyond the 5 intended decision rows, no AX-PROCESS promotion, no approval approved, no event activation, no source IU edit, no workflow execution.

Artifacts

Report dir knowledge/dev/reports/architecture/process-axis-owner-canon-dotkg-correlated-dryrun-ui-compose-content-return-2026-06-04/ (docs 00–15). Staging+SQL /opt/incomex/docs/mcp-writes/process-axis-owner-canon-dotkg-correlated-dryrun-ui-compose-content-return-2026-06-04/{sql,evidence}/. Continues checkpoint-process-discovery-full-operationalization-2026-06-04.md.