KB-688F

PD Full Operationalization — 01 Live State & SSOT

3 min read Revision 1

01 — Live State & SSOT Confirmation

SSOT read: checkpoint-process-discovery-closeout-2026-06-04.md + checkpoint-dot-agent-api-endpoint-dryrun-readiness-2026-06-04.md. Old reports treated as evidence; live evidence verified below and wins.

Containers (10 + 1 new)

postgres, incomex-directus, incomex-nuxt, incomex-nginx, incomex-claude-mcp, incomex-claude-kb, incomex-agent-data, incomex-qdrant, uptime-kuma, pg-restore-test-* + new incomex-agent-api-executor (this run).

DB baseline (pre-mutation)

births=1,163,464 · guard_alerts=129 · process_run_observation=4 · process_component_observation=6 · DRY_RUN=0 · REAL_RUN=0 · contracts=2 · bound=0.

Contracts (pre)

DOT_KG_EXPLAIN — PLAN_ONLY / contract_ready / endpoint_ref NULL / ns DRYRUN-NS:dot:kg:explain / fixture FIXTURE:dot:kg:explain:v1 / no_mutation=true.
DOT_KG_EXPLAIN_VERIFY — VERIFY_ONLY / contract_ready / endpoint_ref NULL (deterministic verifier).

Dispatcher (`fn_process_agent_api_dispatch`) — confirmed fail-closed

Refuses unless process_dot_runtime.{execute_enabled=false, real_run_enabled=false, dry_run_only=true}; refuses REAL_RUN; refuses missing correlation/fixture/contract/unknown dot; refuses DRY_RUN while endpoint_ref NULL. Always writes SIMULATED_DRY_RUN (it is a recorder, never an executor) — so a genuine DRY_RUN row requires a deliberate upgrade backed by the real executor's verified output. CHECK domain on process_run_observation.evidence_type = {REAL_RUN, DRY_RUN, SIMULATED_DRY_RUN, BACKFILLED_EVIDENCE}.

Infra facts (live)

docker network docker_incomex shared by postgres + agent-data (+ new executor).
OPENAI_API_KEY present in incomex-agent-data (sk-proj, 164 chars); openai SDK 1.97.0; api.openai.com egress OK. No Anthropic key.
No pg_cron (extensions: btree_gist, pgcrypto, plpgsql, postgres_fdw) → scheduling via systemd timers (host already uses this pattern).
governance_object_ownership = 0 rows system-wide (cannot pre-stage ownership; owner gate is real).
7 process.* event types all active=false (do-not-activate).
axis_registry: AX-PROCESS=CANDIDATE, AX-TOPIC=CANDIDATE. PIV-340..353 all classification=CANDIDATE.