KB-6026

GPT Delegated Ruling — One-Roof Governance C-1/C-2/C-7; Authorize Rehearsal, No COMMIT (2026-06-01)

4 min read Revision 1
gptone-roof-governancedelegated-rulingc1c2c7rehearsal-authorizedno-commit2026-06-01

GPT Delegated Ruling — One-Roof Governance C-1/C-2/C-7; Authorize Rehearsal, No COMMIT

Date: 2026-06-01 Ruling agent: GPT Council, delegated by user for technical/council decisions.

Scope

This is a delegated technical/council ruling for moving from design/control into author-mode BEGIN..ROLLBACK rehearsals. It is NOT sovereign build approval, NOT persistent implementation approval, NOT an approval_requests/apr_approvals record, and NOT permission to COMMIT.

Decisions

C-1 — SB-2 ownership substrate pattern

APPROVED for author-mode rehearsal.

Approved pattern: additive governance_object_ownership + governance_responsibility_scope + resolution view. Do not widen the existing governance_relations CHECK. Accountable-owner uniqueness is per responsibility scope. Supporting/delegated/exception roles must not masquerade as accountable owner.

C-2 — SB-1 APR action-type vocabulary pattern

APPROVED for author-mode rehearsal.

Approved pattern: four APR action-type rows as data/vocabulary: assign_governance_owner, grant_governance_exception, delegate_authority, assign_axis_owner. Phase A must be fail-closed with handler_ref='unimplemented'/equivalent; Phase B handler activation requires separate gates. No self-approval.

C-7.1 — Input-trust policy

APPROVED default for rehearsal: per-(source,scope) governed trust; deny-by-default for high-risk/write scopes; low-risk descriptive scopes may allow-with-monitoring. Bad/untrusted input becomes input-quality finding, not governance-orphan.

C-7.2 — Ruleset owner

APPROVED default for rehearsal: policy owner = GOV-COUNCIL; GOV-SIV proposes; activation requires approval spine. Ruleset versioning is operational config versioning, not law version bump.

C-7.3 — Backfill ruleset ownership

APPROVED default for rehearsal: backfill seed runs under named council-owned ruleset; draft ruleset may seed, but high-risk verdicts stay unknown/fail-closed until activation.

C-7.4 — 60-day legacy/backfill cut-over

APPROVED default for rehearsal: 60-day council-owned configurable grace period from backfill-seed completion; after deadline unresolved legacy objects escalate to findings; no auto-remediation.

C-7.5 — Observer-trigger ruling

APPROVED in principle for later optional design/rehearsal only: default path remains cursor-tail with zero Birth modification. A fail-open observer trigger that cannot alter/block/fail Birth may be considered an external observer, but building it remains separately gated. Inline Birth-governance coupling remains forbidden.

Authorization

Authorized next: author-mode BEGIN..ROLLBACK rehearsal for SB-12, SB-13, SB-10, SB-11, combined GCOS substrate, and T6/T7 patch rehearsal, provided every run proves entry==exit, no COMMIT, no persistent mutation, and no idle transaction residue.

Not authorized

  • No COMMIT.
  • No production build.
  • No event emit.
  • No DOT registration as live.
  • No approval row creation.
  • No law enactment/version/status change.
  • No Directus/Qdrant/Nuxt mutation.
  • No persistent PG mutation.
  • No Phase-B handler activation.

Required next macro

Run the rehearsal macro only. Treat this document as the delegated technical ruling input. If any rehearsal fails or leaves residue, stop and report BLOCKED/FAILED with rollback evidence.

Back to Knowledge Hub knowledge/dev/reports/architecture/gpt-delegated-ruling-one-roof-governance-c1-c2-c7-authorize-rehearsal-no-commit-2026-06-01.md