01 — Dual-Path Live State & Drift Verification (PHASE A)

Status: COMPLETE — DUAL-PATH PASS, ZERO ENGINEERING DRIFT.

Connectivity

• query_pg RO live (role context_pack_readonly, PostgreSQL 16.13).
• ssh contabo → docker exec postgres → psql -U directus live.
• Incomex_KB MCP live (this doc written through it).

Core governed/engineering census (both paths identical)

Metric	Live	Checkpoint	Class
approval_requests total	230	230	MATCH
PROC-OWN-01..05 rows	5	5	MATCH
axis_assignment total	25	25	MATCH
governance_object_ownership	0	0	MATCH
axis_registry	2	2	MATCH
pivot_definitions	39	39	MATCH
event_type_registry total	52	52	MATCH
event_type active	30	30	MATCH
process.* events active	0	0	MATCH
birth_registry total	1,174,025	1,174,025	MATCH (no drift)

birth_registry exactly equals the prior checkpoint's final figure (after its +21 KB-doc births). → No background birth drift at all since the last macro. Eng-collection birth rows stable (approval_requests 81, dot_tools 592, pivot_definitions 34; axis_assignment/ownership/axis_registry/ event_type_registry not birth-tracked).

Officialization gate (live)

• v_process_axis_post_vote_handler_readiness: all 5 rows = BLOCKED_NO_PRESIDENT_VOTE (president_vote_present=false, axis_owner_present=false for every PROC-OWN handler).
• v_rp_process_canon_gate_summary: official_ax_process_rp_assigned 0/453; verdict CANON_BLOCKED_OWNER_ONLY ("all engineering cleared; owner/governance authority only"); candidate_visible 69/143; verified_candidates 1/19 (job:cut, 8 members); birth_ready 0/6.

Candidate-action handlers (live)

wf_candidate_action_vocabulary = 11 actions via single backend fn_wf_candidate_action_execute, all is_checkbox=false, all preview_required=true. Gate split: SAFE_TRIAGE_PREVIEW 7 · FAIL_CLOSED_OWNER 2 (ASSIGN_OWNER, RECONCILE_TO_DOT) · FAIL_CLOSED_PRESIDENT 2 (CREATE_BIRTH_REQUEST, SEND_TO_GOVERNANCE).

Runtime / dot:kg gate (live)

• dot_config: process_dot_runtime.dry_run_only=true, execute_enabled=false, real_run_enabled=false.
• process_run_observation: 2 DRY_RUN (completed) + 4 SIMULATED_DRY_RUN (2 completed + 2 observed) = 6 obs, REAL_RUN 0. MATCH.

Trigger universe (live, v_trigger_universe_census)

DB total 525 (enabled 476): pg_trigger db_dml 381 enabled + 27 disabled (408); event_type_registry 30 enabled + 22 disabled (52); dot_tools 42 cron + 6 dual + 5 event + 4 on-deploy (57); job_queue 8. MATCH checkpoint.

• v_trigger_process_relation_candidates 69 · v_rp_trigger_visibility_gap 7 · v_ax_process_rp_visibility_after_candidate_stage 10 · trigger_guard_alerts 129 (MATCH).
• NOTE (view-scope, not a mismatch): v_trigger_host_unmanaged_census returns 4 rows live, whereas prior narrative cited "77 host" (crontab 49 / cron.d 6 / systemd-app 4 / OS 18). The view surfaces a managed subset (systemd-app class); the 77 is the raw host-scan figure from the wf adapters. Reconciled in Phase D. No governed-state divergence.

Infrastructure (SSH)

• wf-universal-scanner.timer ACTIVE → next 2026-06-05 04:10 CEST. MATCH (re-armed).
• process-discovery-policy-scan.timer ACTIVE → next 2026-06-05 06:30 CEST.
• incomex-agent-api-executor: Up 7 hours (healthy).
• Nuxt /opt/incomex/docker/nuxt-repo/web: main, ahead 17 / behind 13 vs origin. MATCH.
• UI packet present: GIT-STRATEGY-AND-APPLY.md, pages-knowledge-process-axis, server-api-process-axis.

Drift classification

• MATCH: all governed + engineering + infra metrics.
• EXPECTED_BACKGROUND_DRIFT: none observed (birth_registry flat).
• MISMATCH_BLOCKER: none.

→ Live state TRUSTED. All mutating branches cleared to proceed.