KB-5571

01 — Live Read-Only Preflight / Hard Gate 0 (10/10 PASS; 8 tables + 6 views inert; ospa=0; idle=0; subset=3 governed; 2026-06-02)

4 min read Revision 1
one-roof-governancephase1coverage-dry-runf1-readonlyhard-gate-0preflightread-onlyinert2026-06-02

01 — Live Read-Only Preflight (Hard Gate 0)

All values via read-only query_pg @ directus, role context_pack_readonly, 2026-06-02, immediately before the dry-run. No mutation.

1.1 Hard Gate 0 result — PASS (10/10)

# Gate (doc 05 §5.1) Check Live result Verdict
G-1 No production activation macro is read-only; no COMMIT/DDL planned pure query_pg SELECTs only ✅ PASS
G-2 Gate intact os_proposal_approvals=0 0 ✅ PASS
G-3 Events inactive governance event_type_registry.active all false 5 governance types, 0 active ✅ PASS
G-4 No emit baseline governance event_outbox = 0 0 ✅ PASS
G-5 No worker running gov_worker_cursor=0 rows 0 ✅ PASS
G-6 No DOT registered dot_tools=309 baseline 309 ✅ PASS
G-7 Clean tx state idle_in_transaction=0 0 ✅ PASS
G-8 Substrate inert census == readiness doc 01 8 tables + 6 views, all 0 except scope 6 ✅ PASS
G-9 Scope bounded subset = 3 governed collections 35 governed+BIRTH_REQUIRED; first 3 selected ✅ PASS
G-10 Rollback staged N/A: pure read-only F-1 has no transaction/DDL ⇒ nothing to roll back ✅ N/A

G-10 governs the F-2 rollback-only variant. This mission ran the pure read-only variant (doc 03 §3.6), the safest first pass, so no rollback path is exercised and G-10 is trivially satisfied.

1.2 Substrate table census (8 tables)

candidate_scan_run=0 · governance_build_authorization=0 · governance_candidate_object=0 · governance_candidate_state=0 · governance_object_ownership=0 · governance_responsibility_scope=6 · governance_ruleset=0 · gov_worker_cursor=0.

1.3 Substrate view census (6 views, all inert)

v_build_auth_valid=0 · v_governance_object_containment=0 (seam WHERE false) · v_governance_object_inventory=0 (seam WHERE false) · v_object_effective_owner=0 · v_object_owner_conflict=0 · v_object_owner_gap=0.

1.4 Out-of-scope invariants

Surface Value Note
os_proposal_approvals 0 ratification gate (forbidden to write)
approval_requests 211 live L2 spine
apr_approvals 42 live L2 votes
governance_relations 8 unchanged baseline
dot_tools 309 no DOT
system_issues 198,442 will not be written
event_outbox (governance) 0 zero emit
event_type_registry (governance) 5 types, 0 active register-before-emit holds
apr_action_types 14 (10 unimplemented) vocabulary; 8 gov + amend_law + enact_nrm
birth_registry 1,079,562 organic tail (+2 vs prior session close 1,079,560; not touched here)

1.5 Idle / session check

pg_stat_activity @ directus: idle in transaction = 0. (The only active session is this read-only verifier; background workers show state=NULL. No workflow_admin write session — none is opened by this mission.)

1.6 Bounded-subset confirmation

collection_registry: 168 total; 35 rows governance_role='governed' AND coverage_status='BIRTH_REQUIRED'. The dry-run subset = the lexically first 3 of those 35: agents, approval_requests, apr_action_types. Collection grain only; the 1.08M birth_registry object tail is excluded by construction. No path to row explosion (doc 03 §3.2).

1.7 Preflight verdict

PASS — CLEAR TO RUN the read-only dry-run. All 10 gates green; substrate present and inert; scope bounded to 3 collections; the activation gate is intact.

Back to Knowledge Hub knowledge/dev/reports/architecture/one-roof-phase1-coverage-dry-run-f1-readonly-2026-06-02/01-live-preflight-gates.md