Birth Gateway SSOT + QT-001 Design — Final Summary

Status: PASS — specific enough for T1 staged implementation. No implementation performed.

Core Decisions

• Gateway source: immutable versioned Git migration release.
• Runtime proof: append-only semantic function contract registry + SHA-256 verifier.
• Setup DOT: trigger reconcile only; never redefine the gateway.
• Realtime and QT-001: share policy, identity resolver, and register function.
• QT-001: one-collection plan/apply DOT pair, exact preflight, batch transactions, audit ledgers, uncertified births.
• Deferred/exempt: no direct managed birth.
• QT-003/QT-003R: hard first-row gate; >0 rows route QT-001.
• QT-005: one orchestrated state transition preserving history.
• QT-006: separate approved universal lifecycle-state program; birth fact remains immutable.

Highest immediate risk: the active setup DOT can replace the guarded function with stale logic. First macro: BIRTH_P0_STAGE0_DANGEROUS_DOT_EXECUTION_FREEZE.