00 — Readme First

Macro: DOT_PROCESS_DISCOVERY_RUNNER_DRYRUN_UI_AND_REGISTRATION_READINESS · 2026-06-04 Final status: PARTIAL — every safe branch executed LIVE and verified; a true DRY_RUN of the agent_api pilot pair is blocked on a missing agent_api plan-only contract. Exact next action exists. Execution mode: EXECUTION_MODE · Live mutation: YES (birth-free). RO=query_pg; RW=ssh contabo→docker exec -i postgres psql -U directus; KB=upload_document; staging=/opt/incomex/docs/mcp-writes.

What this run changed (all additive, reversible, birth-free)

• 1 plan/verify-only runner fn_process_dryrun_prepare_pair(...) — fail-closed, cannot execute a DOT; records a fixture-bound SIMULATED_DRY_RUN observation only.
• 4 read-only v4 views — v_process_discovery_runner_status, v_process_discovery_dryrun_readiness, v_process_discovery_candidate_status_v4, v_process_discovery_birth_readiness_v4.
• 1 no-execute test observation — fixture FIXTURE:dot:kg:explain:v1, correlation DRYRUN:dot:kg:explain:fixture-v1, 1 run + 2 components, idempotent.
• KG fixture authored + staged (sha256 4ecd33b7…).
• birth_registry 1,158,319 before == after; trigger_guard_alerts 129 unchanged; MCP read-back PASS.

The one decisive correction to prior checkpoints

Prior SSOT said "no DOT runner exists." Refined: no runner exists for the agent_api DOT subset (which includes the EXPLAIN pilot pair). Runners DO exist elsewhere — that is precisely why job:cut is the only verified candidate:

• job:cut → iu-cutter-v0.6 Python orchestrator with real Mode.DRYRUN, kill-switch, RO sidecar (o7_live_dryrun_runner.py, 366/366 tests). TRUE_DRY_RUN_RUNNER_EXISTS.
• IU-command layer dot_iu_command_run → working plan/apply/verify runner (gate refusals fire). TRUE_PLAN_RUNNER_EXISTS (command-keyed, no process_run_id).
• dot-hc-executor → generic bash executor (--dry-run) for system_health_checks (Đ22 §4.3).
• DOT_KG agent_api subset (12 incl. EXPLAIN) → BLOCKED_BY_MISSING_AGENT_API_CONTRACT (no dispatcher binds DOT code → agent_api; MOCK_ONLY_POSSIBLE).
• DOT_KG pg_function subset (14) → invocable functions, but function_name unregistered; invocation = REAL_RUN (gated off).

Read order

01 live state · 02 runner discovery · 03 runner implementation · 04 fixture · 05 no-execute test · 06 true dry-run result/blocker · 07 events · 08 v4 views · 09 RP/UI · 10 registration · 11 safety audit · 12 next macro · 13 final summary · 14 MCP checkpoint.

Artifacts

Staged: /opt/incomex/docs/mcp-writes/dot-runner-dryrun-2026-06-04/{v4_apply.sql,v4_rollback.sql,dot_kg_explain_fixture_v1.json,plan_only_runner.example.sh} (public preview: https://vps.incomexsaigoncorp.vn/ui-preview/mcp-writes/dot-runner-dryrun-2026-06-04/). Checkpoint: checkpoint-dot-runner-dryrun-registration-readiness-2026-06-04.md. Continues checkpoint-dot-wrapper-correlation-harness-2026-06-04.md.