{ "doc": "fix7-p0-final-codex-executable-review-capsule-machine-report", "date": "2026-06-12", "macro": "FIX7_P0_FINAL_CODEX_EXECUTABLE_REVIEW_CAPSULE_AND_HANDOFF_READINESS_MACRO_2026_06_12", "final_status": "FIX7_P0_CODEX_EXECUTABLE_CAPSULE_READY_FOR_AUDIT", "closes_blocker": "CODEX_FIX7_P0_FINAL_PRE_REAL_DATA_READINESS_AUDIT_BLOCKED (raw_byte_executable_packet_materialized=false)", "capsule": { "path": "/Users/nmhuyen/Documents/Manual Deploy/web-test/codex_review_evidence/fix7-p0-final-pre-real-data-readiness-2026-06-12/", "path_tested": true, "file_count_total": 207, "sealed_manifest_entries": 200, "capsule_tree_sha256": "d1cc08748b0231730111447c0bb1e7d6836dbd71e1c206b9a90adc06af0bac7e", "verify_capsule_exit": 0, "rerun_all_exit": 0, "json_manifests_parse": true, "logs": ["logs/selftest-commands.log", "logs/verify-capsule.log", "logs/rerun-all.log", "logs/json-parse.log"] }, "packet_trees_verified": { "final_readiness": "b476b547009f905898229a869094504986822eec3eb02103479e6231bc55cd90", "ci_adoption": "b22c08d0a69688039de8ccbd78686b9195c9eb19e24440a192d1760afef26d63", "hardening": "59788d04c8d7afb01b28e7c05f23aa9c2b708f03d5dae02096c4c024287e20e4", "noprod_execution": "72b24b8a7e636a51fe184fb7961e2824a58cb1511a119fe14ac43432fe787bb2", "prod_scoping": "154e6ff180ca1f2853426aa2fc6f4730943d36dfb053d3ae46a244260854465c", "rehearsal_rollback": "7a9364c5b64d95350da4023ad101a902fc77eb994c487f995412fe547bd847f9", "shaped_clone_ci_gate": "2fa3d54e9d8335518c7974e1e6b99616344bcb743d3dc794d7858322b53c46da", "authority_seal": "3890cd3467720b3f2c105625e2e1dc627fd2e7fdfb74d9059bad95bece12a234" }, "governance_bytes": { "registry_json": "93abf50de03e74be6fe1878779e20941cf3b6b8171f1f7b59dd4f912518a8db9 (65919 B, kb rev 26)", "registry_md": "a6926f8ef0ab529a969490a1a11e0bd72014e3c57fba7b113b03f8f1795947ec (68193 B, kb rev 25)", "index_00": "d1d5e7d7ff6bc8987d293a9c5156ad2085b44b0d38f123bf8e39d2fb2716cdb1 (101194 B, kb rev 117)" }, "bad_input_proof": { "capsule_probes": 10, "all_fail_closed": true, "any_fail_open": false, "forbidden_tokens_leaked": [], "sealed_lane_probes_rerun": "12/12 fail-closed (final lane), 9/9 (scoping), hardening probes PASS" }, "production_only_skip": [ "real-production-data clone rehearsal (operator dump + separate authorization required; machinery proven on generated surrogate)", "production execution / REAL_RUN / QT001 / cutover / CI deploy (forbidden, unselected)" ], "not_in_capsule": { "fix7-p0-implementation-planning-packet-2026-06-11": "KB-only, tree f470d0d0..., not required for the final-readiness audit question; documented in EVIDENCE_PATH_MAP.json" }, "forbidden_surfaces": { "production_mutation": false, "production_db_directus_live_contact": false, "real_run": false, "qt001_apply": false, "permit_activation_repoint_cutover": false, "ci_deploy_trigger": false, "secrets_changed_or_copied": false, "real_production_data_copied": false, "real_data_or_production_decision_selected": false, "evidence_deleted": false, "canonical_fold": false }, "object_allocation": "TKT-OBJ-520..530 standalone addendum APPLY_NOW=NO above 519; registry rev26/25/117 max 507 untouched", "codex_next_instruction": "Run audit only from the local capsule path; no MCP; first commands: cd <capsule>; pwd; find . -maxdepth 2 -type f | sort | sed -n '1,80p'; bash VERIFY_CAPSULE.sh; bash RERUN_ALL.sh. Allowed statuses: CODEX_FIX7_P0_EXECUTABLE_CAPSULE_AUDIT_PASS | _REJECTED | _BLOCKED_BY_CHANNEL.", "next_actor": "owner routes Codex at the capsule; after PASS, owner/GPT real-data decision (default HOLD_REAL_DATA); production remains NOT authorized" }