09 — REALRUN Authority Packet

View: v_rp_realrun_authority_packet. Backing guard: v_rp_realrun_no_go_guard (8/8 hold).

Runtime levers (current values, live)

ord	lever	current_value	required_for_no_go	actor	flip_condition
1	process_dot_runtime.real_run_enabled	false	false	OPERATOR_AUTHORITY	flip true only after officialization + preview/dryrun evidence
2	process_dot_runtime.execute_enabled	false	false	OPERATOR_AUTHORITY	flip true with real_run
3	process_dot_runtime.dry_run_only	true	true	OPERATOR_AUTHORITY	set false to leave dry-run
4	piece_event_runtime.emit_enabled	false	false	OPERATOR_AUTHORITY	flip after PROC-OWN-05
9	no_go_guard	ALL_8_HOLD	ALL_8_HOLD	GUARD	preview/dryrun evidence required before any flip

REALRUN no-go guard (8/8 hold)

real_run_enabled false · execute_enabled false · dry_run_only true · emit_enabled false · operator_runtime off · no president vote for candidates · AX-TRIGGER unregistered · 7 process.* events inactive.

dot:kg REALRUN ladder & process discovery

The dot:kg family (PROC-OWN-04) and process-discovery runtime only execute real runs once real_run_enabled/execute_enabled flip and dry_run_only clears. Today the system is dry-run-only: discovery and handlers project effects, write nothing.

Preview/dryrun evidence required before flip

Before any flip: PROC-OWN officialization (president), owner assignment, and the documented preview/dry-run evidence (7 safe-triage previews + 132 orphan dry-runs + handler 7/7 + this packet). The flip is an operator/authority act, not an agent act.

Rollback / no-go

Each flag flips back to dry-run (reversible). No-go: REAL_RUN flipped while the 8/8 guard holds or before president officialization. Do not flip REAL_RUN.