CHECKPOINT — RP UI Operator Deploy + Decorated-Generated Repoint + Final Acceptance

Date: 2026-06-05 · 20-phase Program Macro executed.

Final status: PARTIAL

Verdict: RP_DB_SUPERVISION_READY__OOM_INCIDENT_FIXED__DECORATED_GENERATED_REPOINT_READY_OPERATOR__UI_AND_OFFICIALIZATION_OPERATOR_AUTHORITY_GATED. All safe engineering complete AND a live production OOM incident — which the prior checkpoint wrongly marked closed — was found and genuinely fixed. Remaining = operator (UI git push/deploy; optional decorated-generated repoint) + authority (official RP, synthetic-axis registration, REALRUN). No engineering blocker remains.

Execution mode

EXECUTION. Live DB mutation = YES but birth-free (additive views/functions only; birth_registry before==after on every apply: 1,205,369 and 1,205,389 pairs). No source-IU edit, no canon, no birth, no event activation, no REAL_RUN, no UI push/deploy, no current repoint.

Live mutation: YES (additive / reversible / birth-free / OOM-safe)

New objects: fn_rp_ui_current_production_acceptance (+ neutralized view v_rp_ui_current_production_acceptance_dashboard), hardened fn_rp_ui_deploy_final_readiness_guard (gate 5), v_rp_oom_landmine_detector, v_rp_guard_safety_status, v_rp_universal_node_ui_contract_decorated_generated_candidate, fn_rp_decorated_generated_parity (+ view v_rp_decorated_generated_full_column_parity), fn_rp_generator_replacement_readiness (+ dashboard), fn_rp_final_operating_acceptance (+ dashboard). SQL: /opt/incomex/docs/mcp-writes/rp-ui-operator-deploy-decorated-generator-2026-06-05/{01_phase2_oom_neutralize,02_fix_detector_depgraph,03_decorated_generated,04_dashboards,05_verify_regression,99_rollback,RUNBOOK_v2}.

OOM INCIDENT — REOPENED AND FIXED (the headline)

Live postgres logs showed 5 signal-9 OOM crashes on 2026-06-05: 05:28:27, 05:54:43, 05:58:47, 05:59:34, 06:04:02 UTC — AFTER the prior checkpoint claimed the landmine neutralized. Cause: the prior session querying/EXPLAINing the deep-composite landmine VIEW v_rp_ui_current_production_acceptance_dashboard and the pre-fix deploy-guard view (EXPLAIN-alone crashes = planner-side). Auto-recovered each time, no data loss. Root pattern: the smoke probe v_rp_ui_current_smoke_probe expands the deep contract stack ~15×; any ONE statement combining it with another deep stack OOMs the planner. FIX: (1) neutralized the landmine → function-backed (each gate a SEPARATE single-stack statement); (2) hardened the deploy-guard function (removed the heavy validation cross-join from gate 5); (3) added a dependency-graph detector v_rp_oom_landmine_detector + v_rp_guard_safety_status. RESULT: 0 live crash landmines; OOM_SAFE; no signal-9 since 06:04:02 (DB stable through the whole session). fn_rp_ui_deploy_final_readiness_guard() confirmed safe (clean cancel, never OOM).

Dual-path verification

PASS. query_pg read-only matched ssh→docker→psql (statement_timeout=0 for composite views, each deep view STANDALONE — never combined). Guard PASS, 87=87, smoke 15/15, anti-false-green 6/6, invariant_v2 87 pop / 0 real-fail, generated_v2 87, decorated-generated parity PASS.

OOM guard status

OOM_SAFE__NO_LIVE_SMOKE_COMBO_LANDMINE. detector: 0 CRASH_LANDMINE, 3 SAFE_FUNCTION_BACKED, 9 SLOW_BOUNDED_NO_SMOKE, 15 SAFE. Canonical guards are function-backed and gate-isolated. Rule documented: never combine the smoke probe with another deep stack in one statement; never EXPLAIN a smoke-combo view.

UI deploy status

UI_DEPLOY_BLOCKED_BY_GIT (operator-gated). Branch feat/rp-current-supervision @ d04d8e5624f92d26b868c93adc50fca5e2f07b7f, worktree /opt/incomex/docker/nuxt-repo/web-rp-current (tracked tree clean; untracked = gitignored lint configs). Feature diff = 20 files / +1261 / additive; patch applies clean onto origin/main (0 conflicting paths). No agent creds; local main 17 ahead / 13 behind origin/main. Shipped UI re-verified: eslint exit 0, prettier clean, no-stale PASS (19 files / 35 _current refs / 0 stale). (CI helper .mjs has 16 node-CLI eslint cosmetics — not shipped-UI defects.)

Post-deploy smoke

No deploy → 11-route HTTP smoke staged (RUNBOOK §2). DB-side smoke GREEN: fn_rp_ui_current_production_acceptance() = PASS / 15-15 / 6-6 / UI_CURRENT_READY_FOR_OPERATOR_DEPLOY.

Decorated-generated candidate + full-column parity

v_rp_universal_node_ui_contract_decorated_generated_candidate = generated_v2 backbone ⋈ current decoration. v_rp_decorated_generated_full_column_parity = DECORATED_GENERATED_FULL_COLUMN_PARITY_PASS: 87/87 rows (gen_only 0 / cur_only 0), 0 count diffs, route/action/reliability 87/87, substrate 81/87 (6 by-design NULLs the current contract also carries). Function-backed (OOM-safe).

Repoint decision

DO NOT repoint → DECORATED_GENERATED_REPOINT_READY_OPERATOR. Candidate is circular (decoration from _current, a thin alias of _current_v2) — a real repoint must rewire decoration to _current_v2; no-hardcode decoration is authority-gated (58 view-edits). Production green; repoint has no upside now. Engineering-ready as an operator step (rewire + re-prove + rollback). Production _current/_current_v2 and v1 sentinel untouched.

Generator / no-hardcode dashboard

v_rp_generator_replacement_readiness_dashboard = DECORATED_GENERATED_REPOINT_READY_OPERATOR (parity PASS, guard PASS, OOM_SAFE, repointed false, no_hardcode_ready false).

Final RP acceptance dashboard

v_rp_final_operating_acceptance_dashboard = RP_DB_SUPERVISION_READY__UI_AND_REPOINT_AND_OFFICIALIZATION_OPERATOR_AUTHORITY_GATED (ui_deployed false, db_supervision_ready true, current_guard PASS, generator REPOINT_READY_OPERATOR, no_hardcode false, official_rp 0, AX-PROCESS/AX-TOPIC CANDIDATE, AX-TRIGGER unregistered, realrun false, OOM_SAFE).

Runbook

/opt/incomex/docs/mcp-writes/rp-ui-operator-deploy-decorated-generator-2026-06-05/RUNBOOK_v2.md — OOM warning, UI deploy (2 paths), post-deploy smoke (11 routes), decorated-generated repoint, rollback, no-go list.

Regression / incident tests

generator parity regression 6/6 · decorated parity PASS · deploy guard PASS · smoke 15/15 · anti-false-green 6/6 · OOM detector 0 CRASH_LANDMINE · v1 sentinel retained · no signal-9 since 06:04.

Safety / no-fake audit (UNCHANGED)

official AX-PROCESS RP 0 · ownership 0 · axis_registry 2 (0 ACTIVE; AX-TRIGGER synthetic) · PROC-OWN 5 req / 0 votes · real_run_enabled false · events active 30 · trigger_guard_alerts 129 · all DDL birth-free · v1 sentinels retained · no source-IU edit · no UI push/deploy · no OOM-risk guard introduced.

Exact blockers

Operator/git: push feat/rp-current-supervision @ d04d8e5 (no agent creds; divergent git 17/13) → rebuild incomex-nuxt → 11-route post-deploy smoke.
Operator/repoint (engineering-ready): rewire decorated-generated candidate to _current_v2, re-prove parity, repoint, rollback staged.
Authority: president PROC-OWN vote (official RP); AX-PXT register + live-ledger refactor; AX-TRIGGER owner + president register (unlocks 58-view-edit no-hardcode registryization); REALRUN flip.

Next macro

RP_POST_DEPLOY_FINAL_ACCEPTANCE_AND_DECORATED_GENERATOR_REPOINT (macro options 1+2) — once operator pushes/deploys, run post-deploy HTTP smoke + apply decorated-generated repoint (rewired to _current_v2) + final acceptance. Authority track (option 3) proceeds in parallel.

Artifacts

Report dir: knowledge/dev/reports/architecture/rp-ui-operator-deploy-decorated-generator-repoint-final-acceptance-2026-06-05/00..19. SQL/runbook: /opt/incomex/docs/mcp-writes/rp-ui-operator-deploy-decorated-generator-2026-06-05/. Prior SSOT: checkpoint-rp-generator-parity-fix-contract-replace-ui-deploy-standby-2026-06-05.md.