02 — Supertrack B: Operator Deploy / Repoint Standby Harness

Goal

Make the UI/repoint operator path one-command-ready without any fake deploy.

v_rp_operator_deploy_execution_harness (4 steps)

step	gate_state	blocker
DEPLOY_UI_BRANCH	BLOCKED_NO_CREDS	git credential.helper EMPTY; main 17/13 divergent
POST_DEPLOY_SMOKE_11	PENDING_DEPLOY	depends on deploy; not run/not faked
REPOINT_DECORATED_GENERATED	DO_NOT_APPLY_BYTE_IDENTICAL	no behavioral delta; operator-authority
DB_ACCEPTANCE_CHECK	EXECUTABLE_NOW	— (read-only)

v_rp_operator_deploy_no_go_guard (5 assertions, all hold)

ODG01 no deploy without creds · ODG02 no fake smoke · ODG03 repoint DO NOT APPLY · ODG04 UI binds _current+guard only · ODG05 heavy guard fn runs with statement_timeout=0 (not 5s MCP).

Live facts (carried from prior macros, re-confirmed)

• nuxt container: image nuxt-ssr-local:s174, Up 19h, healthy (no rp-current in .output yet).
• Branch feat/rp-current-supervision @ d04d8e5: 20 files, +1261 additive; patch applies clean onto origin/main; eslint0/prettier PASS; 11 routes bind _current only; page fail-closed unless DB guard PASS.
• Repoint candidate noncircular parity PASS_NONCIRCULAR 87/87, byte-identical → DO NOT APPLY.

Exact commands

See operator-run-now.md (compose build/up flags, curl BASE loop, statement_timeout=0 nuance, RUNBOOK_v3 §3 1-line repoint).

Decision

No operator credentials present and policy-safe → DID NOT DEPLOY. Blocker recorded. Path is one-command-ready; no ambiguous command remains.