17 — President / Operator One-Page Runbook (Phase V)

Everything technical is done. Four human actions remain. Do them in this order.

1. PRESIDENT — vote (unblocks the whole governance chain)

Approve, as human president, in this exact order:

1. PROC-OWN-01 (assign AX-PROCESS axis owner) — independent, do first.
2. PROC-OWN-02 (register/canon AX-PROCESS axis) — needs 01.
3. PROC-OWN-03 (register job:cut = first official process) — needs 02. → official RP 0→1.
4. PROC-OWN-05 (activate process.* events) — needs an official process.
5. PROC-OWN-04 (dot:kg family owner) — independent; needed for dot:kg REAL_RUN.

High-risk handlers require ≥1 human-president vote + ≥2 ai_council; AI can never cast the president vote. Handlers are fail-closed until your vote lands.

2. UI OPERATOR — ship the dashboard

On contabo, in /opt/incomex/docker/nuxt-repo/web, with GitHub push auth:

• git push origin feat/process-axis-dashboard (branch @614b668, 2 files/+159).
• Open PR (base main), review, merge. Never force-push. Never touch main.
• Deploy: pull merged main → rebuild + restart the nuxt service → smoke test /knowledge/process-axis.

3. dot:kg OWNER + OPERATOR — REAL_RUN (only when ready)

After PROC-OWN-04: flip process_dot_runtime.dry_run_only=false, execute_enabled=true, real_run_enabled=true; promote DOT_KG_EXPLAIN contract DRY_RUN→REAL_RUN; confirm executor health; then run guarded REAL_RUN. Verify process_run_observation REAL_RUN row appears.

4. AX-TRIGGER OWNER (Dieu-39) — canon the trigger axis

Authorize AX-TRIGGER into axis_registry.

⛔ NO-GO LIST

• ❌ No fake/auto president vote, owner, canon, official RP, event, or REAL_RUN.
• ❌ No REAL_RUN until ALL 5 preflight BLOCK gates are GO.
• ❌ No force-push; no deploying local diverged main.
• ❌ No use of gh_pat_sync_secrets for code push (wrong scope).
• ❌ No insert into system_issues for status.