13 — GPT / MCP-Readable Checkpoint (machine summary)

macro: PROCESS_DISCOVERY_FULL_OPERATIONALIZATION
date: 2026-06-04
status: PARTIAL_HEADLINE_BLOCKER_CLEARED
execution_mode: EXECUTION_MODE
live_mutation: true   # additive, reversible
prod_access:
  ro: query_pg
  rw: ssh contabo -> docker exec -i postgres psql -U directus -d directus
  kb: upload_document
endpoint:
  deployed: true
  container: incomex-agent-api-executor
  image: agent-api-executor-local:v1
  exposure: loopback 127.0.0.1:8090 + docker_incomex internal; no public route
  hardening: read_only,cap_drop=ALL,no-new-privileges,user10001,no_db_driver
  credential: reused OPENAI_API_KEY from incomex-agent-data (owner-authorized); env_file 0600
  provider: openai/gpt-4o
  bound_dot: DOT_KG_EXPLAIN
  verify_dot_bound: false  # deterministic verifier; owner decision
dry_run:
  done: true
  rows_dry_run: 1
  rows_real_run: 0
  candidate: PROC-CAND:dot:kg
  verifier_pass: true
  is_mock: false
  correlation_id: dryrun-kgexplain-20260604T081942Z
  narrative_sha256: dd1aa6598f8c45c9bd79e480b100de89f4acc25c3df728e0cff806aee7d59f92
  evidence_file: /opt/incomex/docs/mcp-writes/process-discovery-endpoint-service-2026-06-04/evidence/dispatch_dryrun_output.json
invariants:
  births_before: 1163464
  births_after: 1163464
  guard_alerts: 129
  verified_candidates: [PROC-CAND:job:cut]
  dotkg_status: dry_run_observed
v8_views: [endpoint_deploy_status, first_dryrun_status, process_axis_operational_status, return_to_content_status]
jobcut: {status: verified_candidate, members: 8, gate: VERIFIED_PENDING_OWNER, owner_missing: true, approval_inserted: false}
dotkg: {status: dry_run_observed, next: correlated_explain_verify_dryrun_pair, split: 10_process_defs, events_inactive: 7}
ax_process: {axis_status: CANDIDATE, pivots: PIV-340..353 all CANDIDATE, canon: owner_gated}
policy_scheduler: {mechanism: systemd_timer, unit: process-discovery-policy-scan.timer, schedule: daily 06:30, read_only: true, enabled: true}
return_to_content: {verdict: PROCESS_DISCOVERY_SUFFICIENT_FOR_CONTENT_WORK, go: true}
next_macro_primary: PROCESS_AXIS_OWNER_DRAIN_AND_CANON
next_macro_parallel: [INFORMATION_PIECE_CONTENT_WORK_RESUME_ON_TOPIC_PROCESS_SURFACES, DOT_KG_CORRELATED_DRYRUN_AND_REAL_RUN_LADDER]
exact_blocker: owner/governance decisions only (assign owners -> canon pivots -> birth job:cut -> split dotkg -> activate events -> enable runtime for first REAL_RUN)
safety_audit: PASS
rollback:
  unbind: "UPDATE dot_agent_api_contract SET endpoint_ref=NULL, mode='PLAN_ONLY', contract_status='contract_ready' WHERE dot_code='DOT_KG_EXPLAIN';"
  del_obs: "DELETE FROM process_component_observation WHERE correlation_id='dryrun-kgexplain-20260604T081942Z'; DELETE FROM process_run_observation WHERE correlation_id='dryrun-kgexplain-20260604T081942Z';"
  drop_v8: sql/v8_rollback.sql
  rm_service: "docker rm -f incomex-agent-api-executor; docker rmi agent-api-executor-local:v1"
  rm_scheduler: "systemctl disable --now process-discovery-policy-scan.timer; rm units + script"