02 - Apply Runtime Review

Verdict

The writer is executable and blocks several known failures, but it is not safe to execute.

Improvements

Real source-row loop calls fn_birth_register; default execute false; recomputes live plan; blocks cross-collection collision/current parity divergence; checks gateway/Stage0 freeze; ledger done requires actual_inserted=expected_delta.

Critical Defects

1. Writer does not check readiness, independent re-audit sign-off, or approved Tier. Tier2 dry-run returns would_register.
2. Source query has no ORDER BY, keyset, watermark, or resume predicate.
3. resume_marker is written but never read.
4. First successful batch consumes one_use=true permit, blocking batch two.
5. one_use=false allowance can be reused by changing run_id.
6. Failure evidence rolls back with exception.
7. No run-level reconciliation/compensation.
8. No permit FOR UPDATE or advisory/run lock.
9. No positive bounds for batch inputs.
10. No deployed QT001 DOT.

Security

All QT001 functions/procedure have default PUBLIC EXECUTE. Directus has full DML on permit and ledger tables.