FIX7 Level-B Pipeline And Operator Runbook

Only allowed privileged channel: .github/workflows/fix7-level-b.yml invoking scripts/fix7/level-b/run.sh and fixed sql/fix7/level-b files. Packet path knowledge/dev/reports/architecture/fix7-level-b-packets/{packet_id}/; ID regex ^FIX7-[ABC]-[0-9]{8}-[0-9]{3}$. Workflow_dispatch requires packet ID/mode/expected commit; production-owner environment approval; runtime secret manager credential; exact reviewed commit; immutable outputs. If unavailable status FIX7_BLOCKED_LEVEL_B_PIPELINE_UNAVAILABLE; no manual psql/SSH SQL/Directus admin fallback.

Exact stages: preflight, rollback-only rehearsal, FIX7a additive with authority_cutover_complete=false, FIX7b owner/ACL cutover, FIX7c activation then writer repoint, post-activation verifier within 15 minutes. Any missing/extra/NULL/unknown/stale/hash/epoch/quorum/rollback/drift/pipeline failure stops. Manual privileged SQL forbidden.