10 — dot:kg REALRUN Authority + Preflight Hardening + REALRUN (Phases L, M, N)

Live preflight — v_dotkg_realrun_preflight → OVERALL_VERDICT = REALRUN_BLOCKED_MULTI_GATE (NO_GO)

Gate	Value	Status	Unblock
gate_real_run_enabled	false	BLOCK	owner-authorized dot_config flip
gate_execute_enabled	false	BLOCK	owner-authorized dot_config flip
gate_dry_run_only_cleared	true	BLOCK	set process_dot_runtime.dry_run_only=false
gate_dotkg_owner_present	0	BLOCK	PROC-OWN-04 assign dot:kg family owner
gate_contract_realrun_mode	DRY_RUN	BLOCK	promote DOT_KG_EXPLAIN contract DRY_RUN→REAL_RUN
precond_endpoint_bound	1	GO	executor:8090/dispatch bound
boundary_no_mutation_assertion	1	GO	fail_closed_no_mutation held
precond_dry_run_evidence	2	GO	2 correlated DRY_RUN satisfied
invariant_real_run_count_zero	0	GO	must stay 0 until every gate GO + authority

4 GO / 5 BLOCK.

Phase L — authority re-check

dot_agent_api_contract: 2 rows, DOT_KG_EXPLAIN mode = DRY_RUN. real_run_enabled/execute_enabled false; dry_run_only true. dot:kg owner absent. No REAL_RUN authority.

Phase M — preflight hardening

Preflight view is current and complete (no update needed). Expected observation plan when REAL_RUN authorized: producer+verifier correlated pair via executor:8090/dispatch, writing process_run_observation (evidence_type REAL_RUN) + process_component_observation, under the no-mutation boundary. No REAL_RUN executed.

Phase N — REALRUN

All 5 BLOCK gates open. → BLOCKED. NOT executed. NOT faked. REAL_RUN count stays 0.

Exact blocker: dot:kg owner (PROC-OWN-04) + 3 dot_config flips + contract promotion + external executor health confirmation.