<!-- DOC_STATUS: ACTIVE_NON_AUTHORITY -->

FIX7 P0 — Owner / GPT Production Decision Packet (2026-06-12)

This document selects nothing. Default = HOLD_PRODUCTION.

The production-readiness surface scoping lane is complete. Production itself is not authorized and remains separately gated. This packet gives the owner/GPT the options and the exact preconditions.

Current state (after this lane)

• No-production implementation execution: APPLIED (prior lane).
• Canonical governance fold TKT-OBJ-442..461: APPLIED this lane (optional bookkeeping; does NOT unblock production). Canonical body max 441→461, next free 462.
• Production: BLOCKED (7 OPEN blockers). Nothing production was touched; no live system contacted.

Options (choose exactly one; default HOLD)

1. HOLD_PRODUCTION (default, recommended) — do nothing further.
2. AUTHORIZE_PRODUCTION_REHEARSAL_ONLY — clone/isolated rehearsal to PROVE snapshot/restore; no production.
3. AUTHORIZE_PRODUCTION_DRYRUN_ONLY — production read-only dry-run (entry==exit), no mutation.
4. AUTHORIZE_PRODUCTION_REALRUN_PRECHECK_ONLY — real-run pre-checks, still no mutation.
5. AUTHORIZE_PRODUCTION_EXECUTION — actual production apply (requires ALL blockers resolved + per-action grants).

Preconditions before ANY production execution (all OPEN)

blocker	actor	gate
FIX7-P0-PROD-BIRTH-SURFACE-1	owner + operator	scope production object-birth surface (not invented)
FIX7-P0-PROD-CI-SCOPE-1	owner + operator	CI seal-vs-bytes scope (design off-production)
FIX7-P0-DRYRUN-PROD-ROLLBACK-1	operator	PROVE production snapshot/restore
FIX7-P0-PROD-OPT4-1	owner	explicit production OPT-4
FIX7-P0-PLAN-REALRUN-1	owner	separate REAL_RUN grant
FIX7-P0-PLAN-SEPARATE-AUTH-1	owner	distinct grant per QT001-apply/permit/activation/repoint/cutover
FIX7-P0-OPERATOR-INPUT-1	operator	production surface map + snapshot/restore design

Recommendation

If you are not holding, authorize option 2 (rehearsal only) on an isolated clone first — it discharges the single highest-leverage blocker (FIX7-P0-DRYRUN-PROD-ROLLBACK-1) with zero production risk. Do not jump to option 5 until every blocker above is closed and each irreversible action (REAL_RUN, QT001/apply, permit, activation, repoint, cutover) has its own explicit grant.