KB-163B

Stage 2.6A-FIX2 Rule Engine Audit

1 min read Revision 1
QT001stage2.6A-FIX2rule-engineFAIL

03 - Fail-Closed Rule Engine Audit

Verdict: RULE_ENGINE_FAIL.

Missing/NULL/unsupported signals fail; expected_result is evaluated; inactive/superseded/non-approved rows do not participate. Fatal gap: fn_qt001_eval_rule_core and fn_qt001_eval_rule_v2 cannot enforce approved_by, authority_lock, provenance, rule_checksum, or governed version lifecycle. Direct proof: approved-only rule returns PASS without authority/provenance inputs.

Schema has only four enum-like CHECK constraints and UNIQUE(rule_code). No tier/signal/authority FK, authority_lock=true constraint, nonblank provenance constraint, checksum validation, or effective version lifecycle. Directus has full DML. Registry governance columns are documentary/disguised hardcode.

Back to Knowledge Hub knowledge/dev/reports/architecture/codex-stage2-6a-fix2-qt001-policy-complete-signoff-hardcode-audit-2026-06-06/03-rule-engine-audit.md