02 — Live Preflight Baseline (read-only + author-mode R0)

Package: one-roof-auth-axis-bootstrap-ratification-rehearsal-go-nogo-2026-06-02 Mode: READ-ONLY baseline + in-transaction R0 capture · NO MUTATION Channels: (a) MCP query_pg db directus (read-only role, statement_timeout 5s); (b) author-mode ssh contabo → docker exec -i postgres psql -U workflow_admin -d directus (PG 16.13).

---

2.1 Object existence (to_regclass, read-only channel, pre-rehearsal)

Object	Result
governance_build_authorization (SB-0)	NULL — ABSENT
v_build_auth_valid	NULL — ABSENT
axis_registry	NULL — ABSENT
axis_assignment	NULL — ABSENT
os_proposal_approvals	present
approval_requests / apr_approvals / apr_action_types	present
birth_registry	present

2.2 Counts & gate state (R0 baseline)

Surface	Live value
os_proposal_approvals	0 (⇒ COMMIT_FORBIDDEN)
approval_requests	211
apr_approvals	42
apr_action_types	6 (add_field med, amend_law high, create_item low, enact_nrm high, patch_ops_code high, update_item low)
birth_registry	1,074,279 (organic; +2 vs verification report's 1,074,277 earlier today — live growth, no commit)
idle-in-transaction (db directus)	0

The R0 row captured inside the rehearsal transaction (author-mode channel) was identical: appr=211 votes=42 actypes=6 osprop=0 birth=1074279, all four rehearsal objects NULL.

2.3 Backing-evidence selection (safety improvement vs prior run)

To prove the valid-grant path without writing to the live approval spine, this run located real rows that exercise the verifier:

• Valid backing = APR-S178F18-FALLBACK-5 — status='approved', proposed_action_code='patch_ops_code' (risk high), proposer NULL, votes = gemini/gpt (ai_council, approve) + president (human, approve). Recomputed quorum_passed = TRUE.
• Insufficient backing = APR-0234 — status='approved', 0 votes ⇒ quorum_passed = FALSE (approved-but-no-quorum).
• Forged backing = APR-FORGED-NOEXIST — no such request ⇒ JOIN yields nothing ⇒ excluded.

Consequently the rehearsal inserts rows only into rehearsal-only tables and reads real tables; approval_requests/apr_approvals/apr_action_types/birth_registry are never written, so the F-83-1 birth-trigger hazard is not even reached this run (it remains a documented build-time prerequisite — doc 03 §3.6, carried in doc 06).

2.4 Live quorum rule captured verbatim (F-AUTH-LIVE-1 source)

fn_apr_quorum_check (live trigger function) encodes: president = approver_type='human' AND approver ILIKE '%president%'; high = president≥1 ∧ ai_council≥2; medium = president≥1; low = total≥1; any reject blocks; proposer self-approve raises. The rehearsal's quorum_passed(text) mirrors this exactly so the view and the trigger can never disagree (INV-4). This confirms F-AUTH-LIVE-1: the president filter is approver_type='human' + ILIKE '%president%', not approver_type='president'.

2.5 Preflight verdict

Baseline is exactly the hardening package's stated state: nothing built, nothing committed, no SB-0/axis substrate. Author-mode channel reachable and read-write capable (required for DDL-under-rollback). Read-only channel confirms gate red (os_proposal_approvals=0). Cleared to run the rehearsal (doc 03/04/05). Entry==exit re-verified post-rollback in doc 03 §3.6 and independently in doc 06.

2.6 Cross-links

• baseline for [[03-sb0-authorization-rehearsal-results]] and [[04-axis-registry-assignment-rehearsal-results]].
• gate state feeds [[01-ratification-decision-record]].