RP Automation Actuation & REALRUN Closeout — 2026-06-05

20-phase Program Macro (EXECUTION). Context rebuilt from MCP checkpoints + live production. Live evidence wins.

Final status: PARTIAL

Verdict: AUTOMATION_ACTUATION_PREVIEW_PROVEN_WITH_OWNER_BLOCKERS. Moved from AUTOMATION_REALITY_VERIFIED_WITH_PARTIAL_SOURCES → AUTOMATION_ACTUATION_PREVIEW_PROVEN · SCANNER_PROVENANCE_WIRED · REALRUN_LADDER_ACTION_READY.

What changed this macro (all additive / reversible / birth-free)

1. Scanner provenance lie FIXED. Patched /opt/incomex/dot/scanners/wf_scan_orchestrator.sh (reversible; backup *.bak-20260605-prov) to INSERT wf_scanner_run_log + UPDATE workflow_scanner_registry each run. Ran one controlled scan (rc=0). Both tables now fresh (2026-06-05 09:02; were frozen 2026-06-04). Scheduler/timer untouched.
2. 3 provenance-referencing views made DERIVED so they stay honest AND keep teeth (re-freeze ⇒ re-stale/re-fail): v_rp_scanner_automation_reality, v_rp_db_host_source_drift_detector, v_rp_adapter_automation_regression_guard.
3. Action-queue actuation proven in preview/dry-run: 7 safe-triage previews + 14 live orphan dry-runs (full 132 projected), all PREVIEW ok=true, birth-free.
4. Handler safety proven live: every owner/president/canon/non-human/unknown path fail-closed.
5. REALRUN ladder + no-go guard built; all 8 no-go conditions hold.
6. New views (11) + 3 consistency replacements; 0 births.

Live mutation: YES (additive / reversible / birth-free / OOM-safe)

• 1 orchestrator script edit (backed up).
• 11 new views + 3 CREATE OR REPLACE.
• 1 controlled scanner run (idempotent, wf_* only).
• 26 audit-log rows from preview/dry-run proofs (wf_candidate_action_log; birth-free).
• NO data/canon/ownership/vote/event/REAL_RUN/source-IU/UI/scheduler mutation.

Doc index

01 dual-path+OOM baseline · 02 provenance root cause · 03 provenance patch · 04 action inventory v2 · 05 safe-triage plan · 06 preview actions · 07 orphan dry-run · 08 handler safety · 09 actuation boundary · 10 REALRUN ladder · 11 event/emit · 12 candidate-discovery wiring · 13 drift v2 · 14 scorecard v2 · 15 UI/operator · 16 regression · 17 safety/no-fake · 18 final summary · 19 MCP checkpoint.

Next macro

SESSION_HANDOFF_AND_PAUSE_UNTIL_OPERATOR_AUTHORITY — all safe engineering exhausted; remaining levers are owner/president/operator-gated.