09 — RP Roadmap After Cleanup

Carries forward the older RP Master Design (knowledge/dev/design/registries-pivot-os-agency/, v0.1, not ratified) — do not lose those requirements.

Immediate (operator, credentialed — unblocks this macro)

• R0 Register dot-pivot-update via dot-dot-register; apply the 3 composition fixes via apply_composition_fixes.sh --commit; verify mismatch 3→0. (1 short session.)

Near-term (governed, no L2)

• R1 Schema split — the root category error. Replace the overloaded registry_group with domain_facet (FAC-02 / L1 governance) + pivot_kind (default/cross_table/ l2_drill/matrix/test) + drill_level (the td-matrix ladder depth). This dissolves drill_overload (becomes a first-class drill_level, not a fake mismatch) and makes the domain-vs-shape distinction structural. Author via dot-schema-* (anti-drift) DOTs.
• R2 Naming ratification — council decides FAC-02 for the 6 provisional domain rows (quy_trình×5, dữ_liệu×1) and the 5 rp_local governance_infra rows; add LBL-106 "Quy trình" if chosen; then dot-pivot-update --field registry_group/domain_facet per §06.
• R3 Anti-drift activation — apply v_rp_classification_health; fold AD-1..9 into dot-pivot-health (DOT-114) as auditor; read-only scheduled check.

RP UI/API read implementation (Đ26 Layers)

• R4 Build the L1→L5 drill UI on v_rp_classification_governance_map + meta_catalog virtual rows (no business logic in Nuxt). Badges + mandatory L2 banner (§08).
• R5 parent_code / drilldown mapping — wire pivot_definitions.parent_code to L2/L3 navigation; reconcile with pivot_kind=l2_drill rows (PIV-201..206).

Larger RP features (from Master Design)

• R6 Missing-pivot bundle — dot-pivot-declare --auto-from-meta-catalog to close any registry_collection with no pivot; then classify via dot-pivot-update.
• R7 Orphan / phantom / label / pin features — orphan counts per composition_level into the L1 table; phantom detection; entity_labels projection; pinned pivots.
• R8 Count-integrity read-only rehearsal (the older M1 REGISTRIES_PIVOT_COUNT_INTEGRITY_ READONLY_REHEARSAL, BEGIN..ROLLBACK) — still valid, gated by RP design ratification (RG1).

Post-L2 (only when human L2/L4 ospa≥1 opens the gate — separate macro)

• R9 When the L2 object-ownership gate opens, attach RP pivots as governed objects and upgrade the classification view to consume L2 ownership. Independent of all the above; RP classification needs no L2. Gate executor = ONE_ROOF_PRODUCTION_ROLLOUT_EXECUTE_ON_RATIFICATION.

Next macro (no gate)

REGISTRIES_PIVOT_REGISTER_COMMIT_AND_SCHEMA_SPLIT — on credentialed go: run R0, then author the R1 schema split (domain_facet + pivot_kind + drill_level) with anti-drift, and begin R2 naming ratification. The single blocker for R0 is operator credentials; the single blocker for R9 is human L2/L4 ospa≥1.