operator-run-now.md — Exact one-command-ready operator path

Run these only when you hold the stated authority. Nothing here is auto-executed.

0. DB-side acceptance (EXECUTABLE NOW, read-only, safe anytime)

Heavy guard fn — use statement_timeout=0 (NOT the 5s MCP path):

ssh contabo "docker exec postgres psql -U directus -d directus -c \
  'SET statement_timeout=0; SELECT * FROM fn_rp_ui_current_production_acceptance();'"

Expect PASS 15/15 6/6.

1. Deploy RP-current UI (BLOCKED_NO_CREDS today)

Branch feat/rp-current-supervision @ d04d8e5 — patch rp-current-supervision.patch applies clean onto origin/main (20 files, +1261 additive, eslint0/prettier PASS, 11 routes bind _current only, page fail-closed on guard). Precondition: real git creds (today credential.helper is EMPTY; main 17/13 divergent).

# on operator host with creds:
cd /opt/incomex/docker/nuxt-repo/web && git fetch && git checkout feat/rp-current-supervision
docker compose -f /opt/incomex/docker/compose.yml build nuxt
docker compose -f /opt/incomex/docker/compose.yml up -d --no-deps --force-recreate incomex-nuxt

2. Post-deploy smoke — 11 rp-current routes (PENDING_DEPLOY)

BASE=https://<production-host>
for r in \
  /rp/current /rp/current/axis/AX-PROCESS /rp/current/axis/AX-TOPIC \
  /rp/current/node ... (11 staged routes, see UI package manifest); do
  curl -s -o /dev/null -w "%{http_code} $r\n" "$BASE$r"; done
# expect 200 + guard PASS body (page withholds body unless DB guard PASS)

Do NOT report smoke PASS unless actually run (no-go ODG02).

3. Decorated-generated repoint — DO NOT APPLY (byte-identical)

Candidate v_rp_decorated_generated_candidate_noncircular parity PASS_NONCIRCULAR 87/87, but output is byte-identical to current (_current is a pass-through alias of _current_v2, and the candidate decoration IS _current_v2). 1-line CREATE OR REPLACE + rollback documented in RUNBOOK_v3 §3. Apply only on operator authority and only if no-hardcode advancement is the explicit goal.

Standby views to consult

v_rp_operator_deploy_execution_harness (gate states), v_rp_operator_deploy_no_go_guard (5 fail-closed assertions).