IU Design-vs-Live Gap / DOT Ops / Workflow Design Registry Audit

Doc 00 — Overview, Control & Verdicts (2026-05-29)

Mission: IU_DESIGN_VS_LIVE_GAP_DOT_OPS_AND_WORKFLOW_DESIGN_REGISTRY_AUDIT. Class: read-only audit + design decision + DOT gap matrix + authority packs. Zero production mutation. UI and 4 Mothers runtime paused.

1. Hard Gate 0 — environment & safety (PASS)

Check	Result
Host	contabo VPS (MCP Incomex_VPS)
Container	postgres (image postgres:16, Up 6 weeks, healthy)
Database	directus (PostgreSQL 16.13)
Read channel identity	context_pack_readonly (read-only, AST-validated, 5s timeout, LIMIT 500)
idle in transaction residue	0
fn_iu_gate_verify_closed()	all_safe=true, never_flip_intact=true, all_governed_closed=true (10 gates)

Never-flip gates intact: iu_core.vector_sync_enabled=false, iu_enact.allow_no_review_decision=false. 8 governable gates all closed (false): composer, delivery, operator_runtime, structure_ops, three_axis_auto_refresh, piece_event emit, dlq.replay, job_substrate.

2. Baseline snapshot (entry == exit; read-only session, zero drift)

Object	Count
information_unit	219
iu_relation	60
v_kg_edges_all	2259 (2199 universal + 60 iu_relation)
iu_sql_link	3
iu_split_set / iu_merge_set	1 / 0
event_type_registry	40
dot_iu_command_catalog	53
dot_iu_command_run	55
Vector: iu_vector_sync_point	152 (149 indexed + 3 dryrun)
iu_qdrant_collection_registry	1 (iu_core_iu_chunks, active)
collection_registry_vector_policy	2
Workflow substrate: workflows / workflow_steps / step_relations	2 / 70 / 80
workflow_categories / workflow_change_requests	3 / 3
tasks / design_templates	10 / 1
dot_tools (constitutional Đ35 SSOT)	309 (only 2 IU-related)

3. Headline verdicts

Branch	Verdict	One-line
A — Design vs Live	PARTIAL (live ahead on machinery; 1 confirmed open gap, 1 doc-stale)	IU capabilities are LIVE; G2 post-cut axis autowire is NOT wired (confirmed: 0 cut fns call fn_iu_post_cut_axis_materialize); G1 split/merge review_decision_id is closed live (design doc stale).
B — Vector / no-cross-IU	PARTIAL-PASS	No-cross-IU isolation structurally PROVEN (CHECK + write-guard + 0 multi-IU point_keys). BUT not greenfield: 149 IU chunks were indexed historically via CLI (2026-05-22→24), PG registry vs Qdrant note disagree on point count, and reindex did not go through a DOT (design requires it).
C — DOT completeness	PARTIAL (~68% op coverage; low Đ35 integration)	~15/22 repeated ops have a dot_iu_* wrapper. Gaps: reconstruct, emit, capture, route-worker, DLQ-replay, IU-relation-write, enact, vector-reindex. IU DOT catalog is a parallel table, not registered in dot_tools, and has no Đ35 Tier-A paired_dot.
D — Workflow inventory	GAP (fragmented + not IU-bound)	Workflow substrate exists (workflows/workflow_steps/relations, 70 steps) but stores body inline (bpmn_xml, narrative, description, trigger_in/out_text) — 0 IU-binding columns → violates Rev2 IU-centered doctrine. Processes also scattered across reports, prompts, DOTs, code.
E — MOWD decision	RECOMMEND HYBRID (Option 3)	MOW remains the Mother; workflow design becomes a governed def-side sub-registry under MOW. Not a 5th Mother (Đ7 / Đ37 §4.8/§4.12). Matches Rev2 def/run split + GPT-DIR hypothesis.
F — Blueprint schema	PROPOSED (design-only, no DDL)	PG-first, IU-bound (no inline body), proposal-gated workflow_design + workflow_design_step + bindings to DOT/SQL/event/code/report + def↔run link + KG relations.
G — Governance/UI scale	DEFINED	Treeview domain→company→dept→specialty→workflow→task, traffic-light health, Kaizen via change_requests/proposal, drilldown, superadmin/staff (future human-org-role law gap), auto-discovery over manual declaration (NT11).
H — Next plan	5 sequenced macros	Fix G2 → add missing DOTs + Đ35-register → close vector reconcile gap → MOW design sub-registry → read-only UI proof → then 4 Mothers.

4. Top bugs / gaps (priority-ordered)

1. [BUG/HIGH] G2 post-cut axis autowire not wired — fn_cut_complete exists; 0 cut functions call fn_iu_post_cut_axis_materialize. Cuts do not auto-refresh axes B/C; requires manual DOT iu.post_cut.axis_materialize. (Doc 01)
2. [GAP/HIGH] Workflow substrate not IU-bound — inline body text in workflows/workflow_steps contradicts IU-centered doctrine; blocks IU-as-smart-brick for processes. (Docs 04/06)
3. [GAP/MED] 8 IU ops lack DOT wrappers — reconstruct, emit, capture, route-worker, DLQ-replay, IU-relation-write, enact, vector-reindex. (Doc 03)
4. [GAP/MED] IU DOT catalog ⊄ dot_tools; no Đ35 paired Tier-A — parallel governance surface. (Doc 03)
5. [GAP/MED] Vector PG↔Qdrant reconciliation — 149 PG "indexed" rows vs Qdrant note "0 points"; reindex done via CLI not DOT; no reconcile DOT/health. (Doc 02)

5. Package contents

• 00 — this overview & control
• 01 — IU design-vs-live gap matrix
• 02 — vector / no-cross-IU-vector audit
• 03 — IU DOT operational completeness matrix
• 04 — process/workflow design inventory gap
• 05 — MOW vs MOWD decision memo
• 06 — workflow design blueprint schema (design-only)
• 07 — governance/UI scale implications
• 08 — next implementation plan + 5 macro prompts
• 09 — law / forbidden-list / self-review

6. Forbidden-compliance (this session)

No 4 Mothers runtime · no UI/Nuxt impl · no Directus mutation · no Qdrant/vector write · no production data mutation · no law enactment · no hidden second SoT · no raw table creation for MOWD · no self-approval · no gate opened/left open · no event delivery/job execution. All checks read-only; entry==exit snapshot confirms zero mutation.