50 — Next Paste-Ready Prompts (GCOS Build-Prep Follow-Up)

Path: knowledge/dev/reports/architecture/one-roof-governance-technical-addendum-and-implementation-index-2026-06-01/ Doc: 50. Role: Paste-ready prompts for the next macros after this build-prep bundle (docs 45–49). Each is self-contained and state-recovers from this package (do not reply "ready for instruction"; begin with live checks — muc-tieu-mo §3.1). Status: Prompt list only. Build remains NO-GO until C-7 ruled + rehearsals green + approvals recorded (os_proposal_approvals > 0). Date: 2026-06-01.

---

50.0 Recommended order

P1 (C-7 council) ∥ P5 (critique/re-attack) first (decision + adversarial, both safe) → P2 (SB-12/13 rehearsal) then P3 (SB-10 rehearsal) then P4 (SB-11 register rehearsal) (operator, BEGIN..ROLLBACK, no commit) → P6 (SB-1/SB-2 build line) in parallel → only after C-7 + rehearsals + approvals: P7 (gated build sequence) → P8 (T6/T7 build with 10 addenda). Apply DOT stays NO-GO throughout.

---

50.1 P1 — Convene C-7 council decision (doc 46)

MISSION: C-7 COUNCIL DECISION INTAKE (decision-only, no build, no self-approval)
0. STATE RECOVER from this package: read muc-tieu-mo law; docs 00, 45, 46 (C-7 packet), 42. State controlling/complete/NO-GO. Begin with live checks; do not ask for prior chat.
1. HARD GATE 0: no PG/Directus/Qdrant/Nuxt mutation; no schema/DOT/event registration; no emit; no approval/self-approval; no law/version change. This intake records council/sovereign decisions; it does not build.
2. For each C-7 item (46.1 input-trust, 46.2 ruleset owner, 46.3 backfill ruleset, 46.4 60-day cut-over, 46.5 observer-trigger): present the question, recommended default, rejected alternatives, what it unlocks/does-not-unlock, the ratifiable wording, and risks. Capture the council/sovereign ruling verbatim (proposer ≠ approver; GOV-SIV proposes, GOV-COUNCIL + President decide).
3. Record each ruling as a governed decision (where built later: governance_ruleset/registry_changelog/APR) — NOT as an inline code default. Until a ruling is recorded, the item stays PENDING and its dependent build step stays NO-GO.
4. SUCCESS: all 5 items either RULED (with verbatim wording + who decided) or explicitly PENDING with the blocker. Update doc 49 §49.1 A-3..A-7 status. No build, no commit, no self-approval. Return doc 45 §45.8 fields.

---

50.2 P2 — SB-12 + SB-13 author-mode rehearsal (operator, BEGIN..ROLLBACK, no commit)

MISSION: SB-12 + SB-13 AUTHOR-MODE REHEARSAL (BEGIN..ROLLBACK, NO COMMIT)
0. STATE RECOVER: muc-tieu-mo law; docs 45, 42, 38 (SB-12), 39 (SB-13), 48 (prompts 1+2+7).
1. HARD GATE 0: no COMMIT; no worker start; no emit; no approval; no law change. Read-only pre-flight via query_pg; DDL rehearsal via operator (ssh contabo -> docker exec postgres psql -U workflow_admin -d directus); end in ROLLBACK.
2. Run doc 48 Prompt 1 (SB-12) then Prompt 2 (SB-13), then Prompt 7 (entry==exit verification) after each.
3. SUCCESS: governance_ruleset + gov_worker_cursor each created then ROLLBACK'd (entry==exit proven); watermark predicate tested on int (birth/changelog) AND uuid (outbox) sources; evolution_snapshots/queue_heartbeat/event_pending reuse rehearsed and rolled back; os_proposal_approvals still 0; zero commit. Report doc 49 §49.9 fields. Build NO-GO.

---

50.3 P3 — SB-10 candidate-state rehearsal (operator, BEGIN..ROLLBACK, no commit)

MISSION: SB-10 KEYSTONE AUTHOR-MODE REHEARSAL (BEGIN..ROLLBACK, NO COMMIT)
0. STATE RECOVER: muc-tieu-mo law; docs 45, 42, 40 (SB-10), 34, 48 (prompts 3+7). PREREQ: P2 (SB-12+SB-13) rehearsed green.
1. HARD GATE 0: no COMMIT; no checked-forever boolean; no emit; no approval; no law change. End ROLLBACK.
2. Run doc 48 Prompt 3 (SB-10) then Prompt 7. Re-verify live: birth_registry size + canonical_address=0 non-null (=> candidate_key = collection_name||':'||entity_code); 3 candidate tables absent.
3. SUCCESS: governance_candidate_state (+ optional object/run) created then ROLLBACK'd; NO is_governed/checked boolean present (grep); group-grain Δrows=0 proven; entry==exit proven; os_proposal_approvals still 0. Report doc 49 §49.9. Build NO-GO.

---

50.4 P4 — SB-11 register-before-emit rehearsal (operator, no commit, no emit)

MISSION: SB-11 REGISTER-BEFORE-EMIT REHEARSAL (BEGIN..ROLLBACK, NO COMMIT, NO EMIT)
0. STATE RECOVER: muc-tieu-mo law (incl. Điều 45); docs 45, 42, 41 (SB-11), 24, 48 (prompts 4+7). PREREQ: P3 green.
1. HARD GATE 0: no COMMIT; NO EMIT to event_outbox; no DOT registration; no approval; no law change. 0 new tables (pure reuse). End ROLLBACK.
2. Run doc 48 Prompt 4 (register governance domain rows active=false) then Prompt 7. Assert event_outbox governance count == 0 at exit (zero emit).
3. SUCCESS: governance domain rows registered active=false then ROLLBACK'd; 0 new tables; zero emit; register-before-emit proven; os_proposal_approvals still 0. Report doc 49 §49.9. Build NO-GO.

---

50.5 P5 — Critique / re-attack of this build-prep bundle (adversarial, safe)

MISSION: GCOS BUILD-PREP BUNDLE CRITIQUE & RE-ATTACK (analysis-only, no mutation)
0. STATE RECOVER: muc-tieu-mo law; docs 45–49 + 38–42. State controlling/complete/NO-GO.
1. HARD GATE 0: read-only analysis; no mutation of any kind.
2. Adversarially attack docs 45–49: (a) does doc 45 actually close the docs 24/25 stale-read risk — try to find a path where a build agent still misses GCOS; (b) does doc 47's PASS hold — re-run the 4 thresholds and try to find an uncaught missed-object/stale-verdict/island path; (c) are doc 46's defaults safe — attack each C-7 recommendation; (d) are doc 48's rehearsals truly entry==exit and non-committal; (e) does doc 49 have a MUST item that can be silently skipped. Add any NEW scenarios beyond the 74.
3. SUCCESS: a critique report listing any holes found (with severity + required fix) or an explicit "no new uncaught critical path" confirmation; new scenarios appended; doc 47 residual register updated if needed. No mutation. Return doc 45 §45.8 fields.

---

50.6 P6 — SB-1 / SB-2 build line (owner substrate; C-1/C-2; design→rehearsal)

MISSION: SB-1/SB-2 BUILD-PREP (owner substrate; gated; design + rehearsal only)
0. STATE RECOVER: muc-tieu-mo law; docs 00, 03, 16 (SB-1), 17 (SB-2), 18 (PG evidence), 19 (rehearsal), 20 (readiness), 23 (C-1/C-2 packet), 27 (auto-approve), 45.
1. HARD GATE 0: no COMMIT; no apply; no self-approval; governance APRs use action='review' never 'add' (doc 27). Rehearsal BEGIN..ROLLBACK only.
2. Re-verify live: governance_object_ownership + governance_responsibility_scope ABSENT; apr_action_types; fn_apr_quorum_check; fn_auto_approve_add timing; os_proposal_approvals=0. Run doc 19 rehearsal (BEGIN..ROLLBACK) + entry==exit.
3. SUCCESS: SB-1 Phase-A action-types (handler_ref='unimplemented') + SB-2 additive ownership table + 6-row scope rehearsed reversibly; C-1/C-2 council status updated (doc 23); owner-relevant T6 work unblocked-on-build (not built). No commit, no apply. Report doc 49 §49.9.

---

50.7 P7 — Gated GCOS build sequence (ONLY after C-7 ruled + rehearsals green + approvals)

MISSION: GATED GCOS SUBSTRATE BUILD (SB-12 → SB-13 → SB-10 → SB-11) — RUN ONLY IF GATES PASS
0. STATE RECOVER: muc-tieu-mo law; docs 45, 42, 49 (gate checklist), 46 (C-7 rulings), 48 (rehearsal evidence), 38–41.
1. HARD GATE 0 + doc 49 MASTER GATE: VERIFY os_proposal_approvals > 0 with a named sovereign approval for THIS step; C-7.2/C-7.3 ruled; rehearsals green (entry==exit); rollback staged. If ANY doc 49 MUST item is NOT-MET => STOP, do not COMMIT, report which.
2. If and only if all gates pass: build in order SB-12 → SB-13 → SB-10 → SB-11; each step additive, reversible, with its rollback staged; SB-11 governance rows active=false (no emit). After each step, run the doc 49 §49.4 evidence + a post-commit verification.
3. SUCCESS: each blocker built only with its gate PASS + sovereign approval + reversible rollback; zero emit; apply DOT untouched (NO-GO); no-island/no-hardcode attested. Report doc 49 §49.9 with COMMIT authorization evidence (A-1). If gates fail, this is a BLOCKED report, not a build.

---

50.8 P8 — T6/T7 build with the 10 addenda (ONLY after P7 complete)

MISSION: T6/T7 BUILD WITH THE 10 GCOS ADDENDA — RUN ONLY AFTER GCOS SUBSTRATE BUILT
0. STATE RECOVER: muc-tieu-mo law; docs 45 (§45.4 the 10 addenda, count=10), 42, 49, 35 §3.2, 24 (T7), 25 (T6), 48 (prompt 6).
1. HARD GATE 0 + doc 49: os_proposal_approvals>0; SB-10/11/12/13 BUILT; full taxonomy incl. 19 GCOS finding types; G-RBE (governance domain active=true only now, register-before-emit). Apply DOT NO-GO. UI summary-views only.
2. Apply the 10 addenda (doc 45 §45.4): patch docs 24/25/concept §11 per §3.2; register the 7 T6 scanner DOTs + 4 GCOS DOTs (+ dot_coverage_required rows); activate governance event types; re-key auto-close by (coalesce_key, ruleset_version); L1 reads dirty+stale candidate set; production gate fail-closed for high-risk stale/unknown.
3. SUCCESS: T6/T7 built on the GCOS substrate (no rescan-everything, no checked-forever boolean); 10 addenda applied; reversible; no-island/no-hardcode; apply NO-GO; residual controls RR-1..RR-12 satisfied. Report doc 49 §49.9.

---

50.9 Standing constraints on every prompt above

• State-recover from this package; begin with live checks; never reply "ready for instruction" (muc-tieu-mo §3.1).
• Live verification wins old report — re-run the doc 45 §3 block; use current numbers.
• os_proposal_approvals = 0 ⇒ COMMIT_FORBIDDEN — P2–P6 are rehearsal/design (ROLLBACK, no commit); P7/P8 commit ONLY with a recorded sovereign approval per doc 49.
• No self-approval; no hidden local governance island; no hardcode; no implementation disguised as design.
• Write any new docs inside THIS package; return doc 45 §45.8 / doc 49 §49.9 fields.