FIX7 P0 Owner/Operator Execution Decision Packet (2026-06-11)
FIX7 P0 — Owner/Operator Execution Decision Packet (2026-06-11)
- Audience: OWNER + OPERATOR. Authority of this doc: OPTIONS ONLY. T1 prepared the options; T1 does not choose, approve, or authorize execution.
- Machine form:
fix7-p0-owner-operator-execution-decision-packet-2026-06-11.json(byte-identical to the packet'sowner-execution-decision-template.json). - Default decision:
HOLD·execution_authorization_status = NOT_AUTHORIZED·selected_option = null·owner_signature = UNSIGNED.
Context
The Codex N7 → N8 → P7 seal is authored; the blueprint is sealed; P7 pins
canonicalizer rev3 + Packet V3 tree. The owner already gave OPT-3 (planning-only).
This packet asks for the next decision. The planning packet
(fix7-p0-implementation-planning-packet-2026-06-11/) is ready for review.
Options (cumulative)
| option | meaning | consequence |
|---|---|---|
| HOLD (default) | keep planning-only | packet preserved; nothing executes |
| AUTHORIZE_DRYRUN_ONLY | run the staging/temp dry-run (no production) | first real rollback proof; no production mutation |
| AUTHORIZE_IMPLEMENTATION_EXECUTION_NO_PRODUCTION | run the execution macro (KB/governance only) under the precondition checklist | every mutation gated + rollback-verified; PG/Directus/registry-row/system_issues/REAL_RUN/QT001/cutover STILL separate |
| AUTHORIZE_PRODUCTION_CUTOVER_LATER_SEPARATELY | later, separate cutover decision | its own macro + its own authorization; NOT granted by this template or the seal |
Fabrication guard
selected_option must be chosen by the owner; T1 leaves it null and signature
UNSIGNED. A non-null selected_option with an UNSIGNED/empty signature is an
invalid/fabricated state and is rejected by the planning validator
(OWNER_APPROVAL_FABRICATED).
Required fields if authorizing
selected_option, owner_signature, owner_signature_timestamp,
scope_of_production_surfaces_if_any.
Blocked regardless of option
REAL_RUN · QT001/apply · permit · activation · repoint · cutover · any production mutation absent a separate explicit authorization · T1 self-approval · fabricated execution/rollback evidence.
This macro does not request or assume execution approval.