04 — Post-Human Verification Checklist

Package: one-roof-human-ratification-handoff-2026-06-02 Run these AFTER the human L2 + L4 act (doc 03 steps A–C), BEFORE any build. All queries are read-only SELECTs (the live channel is AST-validated, READ ONLY, 5s timeout). They prove the human act happened and that nothing was over-done. If any check FAILS → ratification is NOT verified → BUILD stays NO-GO. Do not proceed.

---

Baseline (pre-human, recorded this run, 2026-06-02)

os_proposal_approvals = 0      approval_requests = 211      apr_approvals = 42
apr_action_types = 6           governance_build_authorization = ABSENT
axis_registry / axis_assignment = ABSENT
APR-BOOT-AUTHMODEL-1 = absent   idle_in_transaction = 0

Verification proves the deltas below relative to this baseline.

---

V1 — The request exists and was approved by the quorum machinery

SELECT id, code, action, status, proposed_action_code
FROM approval_requests
WHERE code = 'APR-BOOT-AUTHMODEL-1';

PASS when: exactly 1 row; action = 'modify'; status = 'approved'; proposed_action_code is NULL/blank. (Note: approval_requests has no quorum_passed column — status='approved', set by the fn_apr_quorum_check trigger, IS the quorum-passed signal. A status still pending means quorum did NOT pass → FAIL.)

V2 — The L2 votes satisfy the high-risk quorum rule

List the votes for human inspection:

SELECT a.approver, a.approver_type, a.decision, a.created_at
FROM apr_approvals a
JOIN approval_requests r ON r.id = a.apr_id
WHERE r.code = 'APR-BOOT-AUTHMODEL-1'
ORDER BY a.created_at;

Count check:

SELECT
  count(*) FILTER (WHERE a.decision ILIKE 'appr%' AND a.approver ILIKE '%president%') AS president_human_approvals,
  count(*) FILTER (WHERE a.decision ILIKE 'appr%' AND a.approver NOT ILIKE '%president%') AS council_other_approvals,
  count(*) FILTER (WHERE a.decision ILIKE 'rej%')                                       AS rejects,
  count(*)                                                                              AS total_votes
FROM apr_approvals a
JOIN approval_requests r ON r.id = a.apr_id
WHERE r.code = 'APR-BOOT-AUTHMODEL-1';

PASS when: president_human_approvals ≥ 1 (and that voter is a human approver_type — confirm in the list query, F-AUTH-LIVE-1), council_other_approvals ≥ 2 (both ai_council), rejects = 0, and the proposer is not among the approvers (confirm against the doc 03 §A filer).

V3 — The L4 sovereign e-sign exists

SELECT id, signature_text, first_name, last_name, email,
       esignature_agreement, proposal, date_created
FROM os_proposal_approvals
ORDER BY date_created DESC;

PASS when: at least 1 row with esignature_agreement = true, genuine President signature fields, and proposal referencing APR-BOOT-AUTHMODEL-1. Count form:

SELECT count(*) AS sovereign_esigns
FROM os_proposal_approvals
WHERE esignature_agreement = true;

PASS when: sovereign_esigns ≥ 1 (baseline was 0).

V4 — Counts changed exactly as expected (and no more)

SELECT
  (SELECT count(*) FROM approval_requests)     AS approval_requests,     -- expect 212  (was 211, +1)
  (SELECT count(*) FROM apr_approvals)         AS apr_approvals,         -- expect >= 45 (was 42, +>=3)
  (SELECT count(*) FROM os_proposal_approvals) AS os_proposal_approvals; -- expect >= 1  (was 0)

PASS when: approval_requests = 212, apr_approvals ≥ 45, os_proposal_approvals ≥ 1.

V5 — The not-yet-built substrate is STILL ABSENT (the human act must not have built anything)

SELECT
  (SELECT count(*) FROM apr_action_types) AS apr_action_types,  -- MUST still be 6
  (SELECT count(*) FROM information_schema.tables
     WHERE table_name = 'governance_build_authorization')       AS gba_tables,   -- MUST be 0
  (SELECT count(*) FROM information_schema.tables
     WHERE table_name IN ('axis_registry','axis_assignment'))   AS axis_tables,  -- MUST be 0
  (SELECT count(*) FROM pg_stat_activity
     WHERE state = 'idle in transaction')                       AS idle_in_tx;   -- MUST be 0

PASS when: apr_action_types = 6, gba_tables = 0, axis_tables = 0, idle_in_tx = 0. (The governance action-types, SB-0, and axis tables are created later, inside the gated build — not by the human ratification. If any appear here, something was built out-of-band → investigate before proceeding.)

---

Verdict table

Check	Must be true	Meaning if it fails
V1	request exists, action='modify', status='approved', blank proposed_action_code	request not filed, or quorum not passed, or filed wrong → NO-GO
V2	≥1 president-human + ≥2 ai_council approve, 0 rejects, proposer excluded	L2 quorum not satisfied → NO-GO
V3	≥1 sovereign e-sign, esignature_agreement=true, linked	L4 sovereign sign-off missing → NO-GO
V4	+1 request, +≥3 votes, +≥1 e-sign vs baseline	act incomplete → NO-GO
V5	action-types still 6; GBA/axis still absent; idle-tx 0	something built/leaked out-of-band → investigate, NO-GO

RATIFICATION VERIFIED = V1 ∧ V2 ∧ V3 ∧ V4 ∧ V5 all PASS. Only then does the build gate in doc 05 open. Any single FAIL ⇒ BUILD remains NO-GO.

---

Attestation

These are read-only verification queries to be run after the human act. As of this package, the human act has not occurred (APR-BOOT-AUTHMODEL-1 absent; os_proposal_approvals=0), so none of V1–V4 would pass today — by design. No mutation was performed.

Cross-links: build gate [[05-next-build-gate-and-prompt]] · Directus steps [[03-directus-manual-action-guide]] · overview [[00-overview-state-recovery]].