13 — Final Build-Readiness Matrix

Package: one-roof-axis-auth-proposal-operational-hardening-build-ready-design-2026-06-02 Mode: DESIGN ONLY · READ-ONLY · NO COMMIT · NO MUTATION Question answered: what is design-build-ready now, what is blocked, and by what.

---

13.1 Design-readiness by deliverable area

Area	Design build-ready?	Blocker to BUILD	Auth level to build	Go/No-Go to build NOW
Authorization model (M-1 redefinition)	YES (docs 02/03)	bootstrap: changes the authority model	L2 + L4 (one-time)	NO-GO (needs ratification)
SB-0 governance_build_authorization + view + verifier	YES — CREATE-TABLE level (doc 03)	depends on auth-model ratification	L2 + L4 then build	NO-GO
SB-0 action-type rows	YES (doc 03 §3.3)	F-83-1 re-wire (H2)	L2	NO-GO
fn_auto_approve_add hardening (P5)	YES (doc 12 P5)	none material (reversible)	L1/L2	GO-WHEN-AUTHORIZED (earliest safe build)
SB-12 / SB-13 / SB-10 / SB-11 / SB-2 / SB-1	YES (rehearsed-green; doc 11)	SB-0 first; SB-12→SB-10 FK; C-1/C-2	per-step L3	NO-GO until SB-0
Axis axis_registry (SB-AXIS-1)	YES — CREATE-TABLE level (doc 05 §5.1)	this package accepted; SB-0; SB-2	L2 → L3	NO-GO
Axis axis_assignment (SB-AXIS-2)	YES — CREATE-TABLE level (doc 05 §5.2)	SB-AXIS-1	L3	NO-GO
SB-3 envelope generalization	YES (design; doc 04 §4.8)	SB-AXIS-1	L3	NO-GO
Proposal/review/agent model	YES (reuse decision exact; doc 06)	no new table; needs SB-0 for apply	L0–L3	design-complete; apply NO-GO
Topic workflows	YES (criteria exact; doc 07)	FAC-08 op decision; axis tables	L2 + L3	NO-GO
Reconstruction/containment	YES (integrity-testable; doc 08)	structural fixes need ladder	L2/L3	validate=GO-read-only; fix NO-GO
Coverage detectors	YES (inputs/issue-types exact; doc 09)	SB-10..13 + SB-11 + C-7	L3	NO-GO (scanner)
UI projection contracts	YES (view contracts; doc 10)	views + axis model	L3	NO-GO (no UI build)
Promotion/sync transaction	YES (doc 16)	SB-0 + axis tables + SB-11 (signal)	L3	NO-GO
T6/T7/backfill/topic-UI/KG-dynamic/IU-island	design-direction	both models + C-7 rulings + Điều 38/39 reconcile	L2/L3 + C-7	NO-GO (defer)
G-APPLY mutating apply DOT	n/a	A-9 sovereign sign-off	L4	NEVER-NOW

Design-readiness verdict: every Class A/B/C item is design-build-ready (CREATE-TABLE / state-machine / detector / view level). Class D is design-direction only (correctly deferred). No item is build-GO now; the single gate is the L2+L4 authorization-model ratification.

---

13.2 What is genuinely build-ready vs what still needs design

Build-ready (CREATE-TABLE / algorithm level)	Still needs design / decision
governance_build_authorization + v_build_auth_valid + verifier (docs 02/03)	exact TTL per tier; sovereignty ceiling N (doc 03 O-AUTH-2/3)
axis_registry + axis_assignment columns/constraints/indexes (doc 05)	iu_metadata_tag fold-in timing (doc 05 O-STORE-1)
proposal reuse map + agent roles (doc 06)	per-axis doc_reviews gate defs (doc 06 O-PROP-2)
topic promotion criteria (doc 07)	FAC-08 cardinality/max + thresholds (council L2)
reconstruction fingerprint + containment checks (doc 08)	—
coverage detector inputs + issue types (doc 09)	per-type materiality + stale_after rows (doc 09 O-COV-1)
UI view contracts (doc 10)	exact view DDL + Directus exposure (doc 10 O-UI-1)
promotion transaction (doc 16)	governance event domain registration (SB-11) for async refresh

---

13.3 The one gate

                         ┌─────────────────────────────────────┐
   EVERYTHING WAITS ON → │  L2 council + L4 sovereign ratify    │
                         │  the authorization model (M-1 + SB-0)│
                         └───────────────┬─────────────────────┘
                                         │ (the only act the new model
                                         │  cannot remove from the President)
                          ┌──────────────┴───────────────┐
                          ▼                               ▼
                   build SB-0, then            (P5 fn_auto_approve_add
                   spine, then axis,            hardening may land first,
                   each per-step L3             standalone, reversible)

Forbidden-compliance: design-only; read-only; no build authorized by this matrix.