FIX7 Exact 14 Readiness Gate Adapter Rules
Exact 14 Readiness Gate Adapter Rules
All adapters (control_epoch)->(gate_code,value_boolean,observed_at,evidence_id,source_set_sha256), STABLE read-only, source/signature/dependency bound, exactly one row. Zero/multi/NULL/wrong/stale/unknown=false; both-EXCEPT; no bool_and-alone.
Exact rows: OBJECT_AUTHORITY_IMMUTABLE/fact_object_authority/owner+ACL+source exact, owner cp_owner, no unauthorized grants/300s/test one DML grant false; READINESS_MANIFEST_EXACT/fact_readiness_manifest_exact/one active sealed exact 14/count/hash/ordinal/300s/delete-add-null false; SIGNOFF_AUTHENTIC/fact_signoff_authentic/exact current plan-scope-tier-action-hash-epoch/evidence/principal+human separation/900s/fake-expired-self-same-human false; CAPABILITY_BEHAVIORAL/fact_capability_behavioral/exact 3 fresh behavioral runs/900s/fake-verified-omit-stale false; DEPENDENCY_TRUTH/fact_dependency_truth/native+analyzer exact/all resolved/current hashes/86400s immediate drift/source drift false; NO_BYPASS_ALL_BLOCKED/fact_no_bypass_all_blocked/exact 14 vector blocked facts/300s/remove-add false; CANONICAL_HASH_SHA256/fact_canonical_hash/exact 7 SHA256 contracts/no MD5/300s/key mutation false; PLANNER_NOT_CLONE/fact_planner_not_clone/source differs legacy+behavior corpus/300s/clone false; SCALE_SAFE/fact_scale_safe/keyset+resume+perf <=600000ms <=1073741824 bytes zero errors/900s/OFFSET-threshold false; GATEWAY_PASS/fact_gateway_pass/exact sealed failclosed gateways no side route/300s/source-side route false; FREEZE_PASS/fact_freeze_pass/exact protected freeze no unapproved write/repoint/300s/unfreeze false; PERMIT_POLICY_PASS/fact_permit_policy_pass/no permit REAL_RUN apply and policy exact/300s/open permit false; TIER_POLICY_PASS/fact_tier_policy_pass/typed manifest derived exact scope no hidden branch/300s/unknown-hidden-missing false; WRITER_FAIL_CLOSED/fact_writer_fail_closed/every writer through gateway+acceptance, no direct authority, sealed rollback stub/300s/legacy or PUBLIC false.
Every item binds adapter/source/signature/source set/rule/freshness/negative evidence/epoch into readiness hash. Only one typed TRUE with fresh immutable evidence is acceptable.