— 10 SAFETY AUDIT

check	result	evidence
no fake API PASS	PASS	the 3 breaks are reported as breaks; smoke run against current prod returns FAIL/exit 1; guard verdict BLOCKED
no UI marked ready while any API 404/500	PASS	v_rp_production_ui_no_false_green_guard = BLOCKED_REAL_API_BREAKS_PRESENT; smoke gates on API truth not page shell
no source IU edit	PASS	no web repo reachable; handler patches are staged artifacts, not applied to source
no production handler/container mutation	PASS	no restart, no rebuild, no host .output write performed; live handler files unchanged (dated 2026-05-31)
no REAL_RUN	PASS	none invoked
no event activation	PASS	none
no authority / control-plane mutation	PASS	no apr/vote/owner/permission writes; auth lanes untouched
no fake owner/vote	PASS	none
PIVOT_MISSING not hidden	PASS	14 enumerated and classified; both grains (14 node-level, 138 leaf-level) reported
no OOM incident	PASS	only additive views created; matrix substrate is a read-only aggregate; postgres healthy throughout
no deep composite / OOM-risk query	PASS	views are thin/base-table; the 897K aggregate runs server-side in <1s; no function-backed smoke landmine created
no unsafe deploy over divergent git	PASS	no deploy performed; git not touched
rollback staged	PASS	99_rollback.sql for views; rp-apply-hotfix.sh auto-rolls-back handler swaps; operator backup dir
birth-neutral	PASS	birth_registry 1,210,816 before == 1,210,816 after the 10-view apply (RC=0)
checkpoint MCP-readable	PASS	see doc 12 + checkpoint file; read-back verified

Live mutation summary: DB = YES, 10 additive reversible birth-neutral views (one transaction, RC=0). Production handlers/containers = NO. Source = NO. Authority/birth/events = NO.

Gotchas observed and respected: pg_schema MCP tool errors with AmbiguousParameter (used information_schema.columns instead); query_pg is read-only, 5s, LIMIT 500; write_file allowlist blocks .sh and psql-strings (smoke/hotfix scripts written locally + pushed via ssh); KB uploads must be prose + markdown tables, no fenced code (all SQL/patches/scripts referenced as VPS file paths); DDL applied via ssh contabo -> docker exec -i postgres psql; the nuxt .output is a host bind-mount (existing-route hotfix needs no rebuild, new route does); nitro.mjs exports rpQuery as m for this build only.