00 — Readme First

Macro: PROCESS_DISCOVERY_ENDPOINT_SERVICE_DEPLOY_DRYRUN_UI_REGISTRATION_CONTENT_AND_POLICY_CLOSEOUT Date: 2026-06-04 · Status: PARTIAL (all safe branches done; deploy + dry-run owner/operator-gated) Execution mode: EXECUTION_MODE.

Headline

The blocker moved from "no agent_api producer endpoint — external infra missing" to "endpoint service authored, staged, and logic-proven; deploy + bind are owner/operator-gated."

Two material advances this run:

1. Endpoint service now exists as real code — a fail-closed, no-mutation FastAPI producer service, staged at /opt/incomex/docs/mcp-writes/process-discovery-endpoint-service-2026-06-04/, whose no-LLM wiring self-test PASSES on the VPS.
2. The "no credential" premise was overturned by live evidence — an OpenAI credential and egress already exist on the VPS. The producer is implementable now; what remains is owner authorization to reuse the credential + an operator deploy.

Plus a real bug fix: the deterministic verifier fn_dryrun_fixture_selfcheck crashed on its failure path (untyped-literal array append). Fixed live; negative controls now work. (Prior reports claimed the negative control returned a reason — live evidence showed it raised. Live evidence wins.)

Live mutation: YES (additive, reversible, birth-free)

• Fixed fn_dryrun_fixture_selfcheck (pure function; failure path).
• 3 v7 closeout views.
• births 1,163,447 == 1,163,447 (no births); guard_alerts 129; DRY_RUN 0; REAL_RUN 0.

Read order

01 live state · 02 endpoint feasibility/impl · 03 binding+dry-run · 04 v7/UI · 05 job:cut · 06 dot:kg · 07 D1/D2 · 08 policy · 09 roadmap · 10 safety · 11 next · 12 summary · 13 checkpoint.

Exact blocker (one line)

Owner authorization to reuse the existing OpenAI credential for a new no-mutation DOT executor, plus an operator deploy of the staged container and the endpoint bind — after which the first true DRY_RUN runs via the existing dispatcher.