10 — Final Summary

Macro: DOT_EXECUTION_WRAPPER_CORRELATION_PATCH_AND_KG_DRYRUN_HARNESS · 2026-06-04 Final status: PARTIAL — all safe design/package/harness work done LIVE; true dry-run blocked on a non-existent DOT runner + fixture. Exact next action exists. Execution mode: EXECUTION_MODE · Live mutation: YES (birth-free).

Done (live, additive, reversible, birth-free)

• Runner inventory complete — proved no DOT runner exists; the IU-command layer holds the reusable safe-runtime scaffolding (fn_dot_iu_operator_runtime_enabled, fn_assert_safe_for_dot_action, lease, fn_dot_iu_command_log); DOT layer (agent_api) has none.
• Wrapper design complete — gate→lease→header-observe→component-observe→(optional event), generic inputs/outputs, status model mapped to live CHECK domains.
• No-execute harness LIVE — fn_process_run_observe, fn_process_component_observe (pure-insert, fail-closed, REAL_RUN-refusing, idempotent) + 3 process_dot_runtime.* toggles + v_process_dot_wrapper_status. births 1,158,306 == before. MCP read-back PASS.
• KG pilot package complete — pair, ids, idempotency keys, fixture spec, event sequence, expected rows, cleanup. Classified WRAPPER_READY_BUT_FIXTURE_MISSING → BLOCKED_BY_NO_RUNNER.
• Event plan complete — 7 process.* types catalogued (all inactive); reference-without-emit semantics; payload contract; activation packet staged (not applied).
• Status-upgrade rules complete — ladder + invariants re-proven; "DRY_RUN_PREPARED" kept out of the evidence_type domain to avoid inflation.
• RP/UI impact complete — 3 routes, badge rules, anti-fake verified-only-from-v3.
• Next macro chosen — DOT_EXECUTION_WRAPPER_IMPLEMENTATION (runner + plan-mode + fixture), then DOT_KG_TRUE_DRY_RUN_ONE_PAIR.

NOT done (forbidden / blocked — correctly)

0 DOT executed · 0 REAL_RUN · 0 verified marked · 0 process born/canon/promoted · 0 approval approved · 0 event activated · 0 IU/doc edit · 0 workflow run. New DRY_RUN observation NOT written (no true dry-run occurred) — SIMULATED_DRY_RUN retained.

Honesty posture

The harness is deliberately incapable of executing a DOT. It records correlated observations only. REAL_RUN is refused at write time. Verification remains computed solely from REAL_RUN + cross-component correlation in the v3 views. Nothing simulated or dry can reach verified_candidates_v3 (still only job:cut).

Exact blocker

A DOT runner that invokes agent_api in an asserted plan/verify-only, no-mutation mode + a KG fixture (input + expected output). Plus, downstream: owner registration for dot:kg, process.* activation, and owner birth admission. No engineering blocker remains on the observation/correlation layer.

Artifacts

Apply contabo:/tmp/dot_exec_wrapper_apply.sql · Rollback contabo:/tmp/DOT_EXEC_WRAPPER_ROLLBACK.sql · Report dir …/dot-execution-wrapper-correlation-patch-kg-dryrun-harness-2026-06-04/ (docs 00–11) · Checkpoint checkpoint-dot-wrapper-correlation-harness-2026-06-04.md.