01 — Live Preflight & Hard Gate 0

All gates verified live via query_pg (read-only role context_pack_readonly) before any write-capable operation, and re-verified after. Verdict: PASS — proceed under rollback-only.

#	Gate	Required	Observed	✓
1	Host/DB/channel	contabo/postgres/directus	confirmed both channels	✓
2	DB name / role	directus / workflow_admin (write), context_pack_readonly (read)	confirmed	✓
3	Seam views live	rows return	inv=35, cont=35	✓
4	Inventory count	35	35	✓
5	Containment count	35	35	✓
6	Containment acyclic	no group-as-child	object_type='group' children = 0	✓
7	Active scopes	6	6	✓
8	Baseline gap	210	210	✓
9	governance_object_ownership	0	0	✓
10	governance_candidate_state	0	0	✓
11	governance_ruleset	0	0	✓
12	candidate_scan_run	0	0	✓
13	gov_worker_cursor	0	0	✓
14	governance event types active	0	5 total, 0 active	✓
15	governance event emit (event_outbox)	0	0	✓
16	system_issues baseline	captured	199,455 (organic, not ours)	✓
17	approval/e-sign	captured	appr_req=211, apr_approvals=42	✓
18	os_proposal_approvals	0	0 (the gate)	✓
19	apr_action_types	14	14	✓
20	dot_tools	captured	309	✓
21	Directus/Nuxt/Qdrant mutation	not required	not touched	✓
22	idle in transaction	0	0	✓
23	triggers on seed-target tables	known	ownership=0, ruleset=0, cursor=0, scan_run=0, candidate=0; system_issues=9, event_outbox=1	✓
24	rollback strategy	staged	single BEGIN..ROLLBACK, default ROLLBACK, savepoints for negatives	✓
25	no worker/scanner/backfill active	idle	worker_cursor=0, scan_run=0, no active gov event	✓

Additional: governance_relations=8, governance_registry=9 owner codes, collection_registry=168, birth_registry=1,084,816.

Trigger safety (decisive for the seed decision)

• Inert tables (0 non-internal triggers): governance_object_ownership, governance_ruleset, gov_worker_cursor, candidate_scan_run, governance_candidate_state. An INSERT here has no birth/outbox/issue/audit cascade (F-83-1 trap absent) — only a non-transactional sequence advance.
• NOT inert: system_issues = 9 triggers, event_outbox = 1 trigger. Any insert here fires cascades (coalesce/notify/dispatch). ⇒ issue/event persistence is correctly FORBIDDEN by default.

Gate result

All 25 gates PASS. The only write-capable activity authorized to itself was a single BEGIN..ROLLBACK rehearsal (doc 02). No condition forced a downgrade beyond the rollback-only posture already chosen.