10 — Mega Prompt Pack (Branch J) — 30 paste-ready, self-contained prompts

STANDARD PREAMBLE (paste at the top of every prompt below):

Host: contabo VPS (vmi3080463). Container: postgres (postgres:16). DB: directus (PG 16.13). Read channel: MCP query_pg — MUST pass database:"directus" (role context_pack_readonly, READ ONLY, 5s, LIMIT 500). Apply channel (only if a safe commit is in scope): ssh contabo "/usr/bin/docker exec -i postgres psql -U workflow_admin -d directus" — feed SQL via a .sql file (< f.sql); use server-side SET LOCAL statement_timeout + idle_in_transaction_session_timeout; author rollback first; prove durability from a FRESH connection. HARD GATE 0: confirm host/container/db; fn_iu_gate_verify_closed() all safe; pg_stat_activity idle-in-transaction = 0; snapshot baseline (meta 169 / coll 168 / gov 9 / evt 40 / iurel 60 / iu 219 / gate 0). FORBIDDEN (all prompts): no self-minted approval; no law enactment by agent; no Candidate Registry commit without valid human Điều 32; no 4-Mothers runtime generation; no real workflows/tasks/forms/reports; no Nuxt/UI; no Directus mutation; no vector write; allow_no_review_decision and vector_sync_enabled stay false; no gate left open; no second SoT; no open idle tx; never client-timeout-kill an open tx; no event delivery; no job execution. Do not ask the user for choices — use safe defaults and defer human-only steps to an execution packet. Do real work, not fake work.

---

Group A — Human activation

P1 — G1 human activation. Execute the Candidate Registry birth of field_registry (FIELD-001/CAT-1011), input_form_registry (FORM-001/CAT-1012), tier_registry (TIER-001/CAT-1013). One BEGIN..COMMIT per registry: SET LOCAL app.allow_meta_update='true'; insert meta_catalog managed row + category; create table via governed birth; assert fn_pre_birth_check(...) returns 5/5; attach Điều 32 review_decision (manifest_envelope, cross_sign>=2 human/council, NOT automated_agent); assign tier_registry owner = GOV-COUNCIL. Author soft-retire + hard-DROP rollback first. Post-verify from a fresh connection: meta_catalog=172, collection_registry=171, 3 birth rows, +60 cascade decomposed. STOP if pre_birth_check<5/5 or cross_sign<2.

P2 — G2 law enactment. Enact Điều 37-H human-org-role law: create human_org_role + human_role_grant; seed 6 roles × verbs {view,edit,approve,delegate,escalate}; approve human-only (CHECK forbids automated principals); map Directus policy objects (config only, no UI). Additive tx; rollback = DROP both + revert policy objects. Defer the sovereign enactment signature to the human session; produce the exact enactment packet.

P3 — G3 production review_decision governance. Commit fn_review_decision_propose (propose-only; CHECK: automated_agent => NOT approve/reject) + catalog row. Do NOT mint approve authority to any agent. Document the human/council approve path in cutter_governance (privilege-walled). Rollback = DROP FUNCTION + catalog row. Verify no path lets an automated principal approve/reject.

P4 — G4 factory active flip. In a tx: UPDATE governance_registry SET status='active' WHERE code IN ('GOV-MOW','GOV-MOT','GOV-MOIT','GOV-MOUT') AND status='draft' (column is code). BEFORE COMMIT assert pairwise-disjoint can_create (0 rows from the overlap query), that can_create ∩ must_not_own = ∅ per row, and that tier_registry is owned by exactly one row. Requires G1+G2 committed. Rollback = set status back to draft. Council approval is the gating human act — produce the packet, do not self-approve.

Group B — Config-only Phase 0

P5 — Phase 0 config-only implementation. After G1, draft config-only definition rows for all 4 mothers per the envelopes (doc 03). Only status='draft'/config rows; NO runtime artifacts, NO event delivery, NO UI. Each row: clear factory_owner, candidate_registry_dependency, rollback path. Verify no dot_run rows are created by execution.

P6 — MOW config prototype. Draft workflow-template definitions in workflows owned by GOV-MOW (config-only, status=draft). No workflow execution, no queue. Prove ownership = GOV-MOW only; rollback = retire drafts.

P7 — MOT config prototype. Draft task-template definitions in tasks owned by GOV-MOT (config-only). No task instances, no run. Rollback = retire drafts.

P8 — MOIT config prototype. After G1, draft field + input-form registry definition rows owned by GOV-MOIT. No live form render, no ingestion. Verify can_create subset of {field_registry, input_form_registry}. Rollback = retire rows.

P9 — MOUT config prototype. Draft design_template definitions owned by GOV-MOUT; reference tier_registry tiers (owner GOV-COUNCIL). No report generation, no publish. Rollback = retire drafts.

P10 — No-double-ownership verifier. Build a standing read-only health DOT asserting pairwise-disjoint can_create across gov_group='mother' rows and that every output target is owned by exactly one Mother (the GROUP BY HAVING count>1 query => 0 rows). Fail loudly on violation. Wire as read-only catalog row.

P11 — Birth contract verifier. Build a read-only check that, given a candidate (collection, code, dot_origin), reports fn_pre_birth_check results + whether meta_catalog managed row + category exist + birth_registry idempotency. Use it as the pre-flight for any future birth.

P12 — Factory health verifier. Read-only DOT: for each mother row report status (draft/active), can_create, whether its output targets exist as tables/collections, and Điều 7 compliance. One-call factory board.

Group C — IU Pilot

P13 — IU Pilot Day 1 live run. Run the pilot operating protocol read-only: fn_phase0_cockpit() one-call board, gate verify (all_safe=true, 10 gates), counts/drift, fn_iu_kg_edge_audit() (metrics: 2259 edges), lifecycle/structure-ops, b/c/f wrappers (fn_iu_bcf_harness_run). Record evidence. Forbidden: runtime, emit, real route writes. DLQ (iu_route_dead_letter + job_dead_letter) must stay 0.

P14 — IU Pilot Day 1 closeout. End-of-day: fn_iu_gate_verify_closed all_safe=true; idle-in-tx 0; DLQ triaged/0; any open gate force-closed via watchdog. Append daily readings to the pilot evidence log.

P15 — IU Pilot Week 1 monitoring. Daily health trend (iu count, dlq, outbox/inbox, lifecycle, kg audit) for 7 days; flag any drift from baseline (information_unit 219 / iu_relation 60 / v_kg_edges_all 2259). Read-only.

P16 — IU incident/DLQ drill. In BEGIN..ROLLBACK only: force a DLQ entry via a dedicated test worker cursor + test route (dry_run=false); exercise fn_iu_route_dead_letter_replay (dry-run first); prove real 15 routes untouched (dry_run=true). Never flip emit globally; ROLLBACK to clean.

Group D — Governance / Cockpit

P17 — Governance Cockpit v2 build. NOTE: fn_phase0_cockpit() is ALREADY live-computing (gates/candidate_registry/factories/mother_events/kg/counts/blockers). Build the ADDITIVE v2 (doc 05): extend it (or a new fn_phase0_cockpit_v2()) with a pilot block (iu_outbound_route, iu_route_attempt, iu_route_dead_letter, job_dead_letter, iu_sql_link, iu_lifecycle_log, iu_structure_operation), a kg_detail block (fn_iu_kg_edge_audit), and a pending_review block (post-G3). Read-only, CREATE OR REPLACE / reversible. No UI. Verify it matches live state.

P18 — Gate dashboard data pack. Build read-only views v_phase0_gate_status + v_phase0_pilot_health wrapping fn_iu_gate_verify_closed and the iu/dlq/route counts. One-query operator dashboard. No UI.

P19 — Review decision queue pack. After G3, build v_phase0_pending_review listing proposed review_decisions awaiting human approve, with manifest binding + proposer + cross_sign count. Read-only; approve stays human.

P20 — Human-org-role policy implementation. Implement the Directus policy mapping for the 6 Điều 37-H roles (config objects only). Verify approve maps to no automated principal. Document grant->policy resolution.

Group E — KG / DOT

P21 — KG relation vocab expansion. iu_relation.relation_type is a 6-value CHECK (contains, derived_from, supersedes, replaced_by, merged_from, split_from); relation_status CHECK is active/superseded/retired/cancelled. Expanding the vocab requires ALTER TABLE ... DROP CONSTRAINT + ADD CONSTRAINT (DDL) — an atom-law change that MUST be Đ-gated and human-enacted. Produce the exact DDL + rollback; defer enactment. Verify no live edge would violate the new set.

P22 — KG DOT relation inserter. Commit fn_iu_kg_relation_insert(from,to,type,provenance,confidence) enforcing type ∈ the 6-value relation_type CHECK set, provenance non-null (Đ39), confidence in [0,1], no self-loop (source<>target), endpoints exist; gated by gateway allowlist. Catalog row category=write. First non-contains write is human-reviewed.

P23 — KG audit automation. Commit fn_iu_kg_relation_audit() (extends fn_iu_kg_edge_audit with per-type distribution + orphan detail), read-only STABLE + catalog row. Schedule as a daily read-only health check.

P24 — v_kg_edges_all projection hardening. Verify v_kg_edges_all projects assertion_mode + evidence; if missing, CREATE OR REPLACE VIEW (append-only columns) to expose them. Keep it a pure projection (no SoT). Confirm count stays 2259 (60+2199).

Group F — Design / Runtime

P25 — Master Design truth patch. Apply the doc 06 patch block (dated 2026-05-29 verification) to Rev5 status lines: G1-G4 states, static cockpit, 8-atom relation table, dormant mother events, Candidate Registry absent. Patch only status lines; preserve design intent.

P26 — 4 Mothers runtime readiness review. Per mother, enumerate exact runtime blockers (doc 08) + the minimal additional artifacts (executor, P-pub authority, Directus policy) needed to go from config-only to runtime. Output a per-mother readiness matrix. Document-only.

P27 — Event/Queue mother worker readiness. Design the executor/worker contract for iu_emit_outbox/iu_event_inbox: executor_class, retry_policy, idempotency_key, dlq_replay_request. Confirm these are absent today. Document-only; no worker deployment.

P28 — Nuxt template readiness (document-only). Inventory templates/pages per Điều 28; map each to a born collection + Điều 37-H role/policy. No Nuxt build/deploy. Output the exposure-readiness doc.

P29 — Directus exposure readiness (document-only). Map which born collections (post-G1) should be exposed as Directus collections/fields and under which policies (post-G2). No Directus mutation. Output the exposure plan.

P30 — Phase 0 final go/no-go. Re-run Hard Gate 0 + the full verification snapshot; regenerate the go/no-go board (doc 09); confirm zero drift or document exact drift; recommend the next campaign macro. Read-only.