07 — Final GO / NO-GO for the Next Step

7.1 This mission's verdict

F-1 read-only dry-run: PASS. The coverage path (inventory seam → owner-resolution → gap) was proven correct, bounded, explainable, and honest over a 3-collection subset with zero mutation and entry==exit. The activation gate (os_proposal_approvals=0) is intact.

7.2 Staircase position (readiness doc 07 §7.1)

Step	State after this mission
F-0 readiness/boundary design	✅ done (prior pkg)
F-1 read-only dry-run	✅ done — this package
F-2 rollback-only dry-run	eligible (F-1 clean) — not yet run
F-3 rollback rehearsal of seam wiring	gated on F-2 + acyclic screen
F-4 ratified seam wiring (COMMIT)	NO-GO — L2+L4 ratification
F-5 small seeded run	NO-GO — F-4 + seed authorization
F-6 event-type activation	NO-GO — ratification + per-type auth
F-7 first real emit	NO-GO — production activation

7.3 GO

GO — F-2 rollback-only dry-run is the recommended next executable step (readiness doc 07 §7.2): wire Seam-A (and optionally a draft governance_ruleset seed) inside a single BEGIN..ROLLBACK on the ssh contabo → docker exec psql -U workflow_admin channel, re-run the gap logic against the now-live-in-txn seam, verify counts bounded (≤18 subset / per-scope ceilings per F-DR-1), then ROLLBACK and prove entry==exit. This proves the path with the real view object (not just inline SQL) while persisting nothing.

Conditions for the F-2 GO (all currently TRUE — re-verify immediately before):

• preflight gates G-1..G-9 green (G-10 rollback-restore script staged becomes required for F-2);
• per-scope ceilings adopted (F-DR-1);
• single transaction, default ROLLBACK, no COMMIT;
• the SB-2 inert-restore script confirmed on disk before starting.

7.4 NO-GO (unchanged, firm)

• F-4 seam COMMIT and all activation (F-4..F-7): NO-GO — blocked by the unsolved L2 council + L4 sovereign ratification of the authorization model (os_proposal_approvals=0). Agent cannot satisfy; human-only.
• Any axis/assignment/topic coverage dry-run: NO-GO — axis_registry/axis_assignment/coverage_rule ABSENT (F-DR-4).
• Object-grain (birth_registry) dry-run: NO-GO for a first run — 1.08M source; collection grain + SB-13 cursor only.
• Any emit / system_issues / notification: NO-GO — zero-emit boundary.

7.5 Remaining blockers

1. L2+L4 ratification of the authorization model (the one gate) — human B-RATIFY intake. Unsolved.
2. Ratified seam-wiring decision (collection-grain inventory; acyclic containment) — coverage/coupling decision owned by governance, not engineering.
3. Axis substrate build — unblocks axis coverage.
4. F-DR-1 ceiling correction — fold per-scope gap ceiling (object × 6) into the next macro's in-flight gates.
5. F-DR-6 — reconcile/locate the missing GPT-review artifact.

7.6 Next macro

ONE_ROOF_PHASE1_COVERAGE_DRY_RUN_F2_ROLLBACK_ONLY — wire Seam-A (± draft ruleset) inside BEGIN..ROLLBACK, re-run gap logic against the live view, verify bounded + entry==exit, ROLLBACK. In parallel: GPT review of this F-1 package; human B-RATIFY intake for the authorization model (the only thing that unblocks F-4+).

7.7 Final verdict

GO (F-2 rollback-only) · NO-GO (F-4+ activation, axis, object-grain, emit). The read-only path is proven; the activation boundary and ratification gate are preserved exactly.