10 - Self-Review: Cross-Layer Boundary (Codex check 10)

PASS only if Stage 2.6B, QT001 apply, REAL_RUN, registry-pivot, and governance reconciliation all remain later/blocked.

What the patch changed vs what it preserved

The patch only re-grounded how the FIX7 QT001 control-plane refactor identifies its target set, phases its guards, neutralizes/restores, snapshots ACLs, pins the gateway, and names its authorization. It added no new scope and relaxed no boundary.

Boundary verification

layer / concern	status after patch
Stage 2.6B (permit/run/keyset/resume + authority revoke)	BLOCKED — separate program; not a FIX7 package (doc 07 sequencing note; doc 08 §A)
qt001_backfill_permit / admission permit	BLOCKED — explicitly distinct from operator_authorization; never opened in planning (doc 07 §Terminology; doc 08; G-NO-QT001-PERMIT-DURING-FIX7)
REAL_RUN_authority	BLOCKED — separate gate after activation (doc 08)
QT001 apply (fn_dot_birth_qt001_apply / sp_*)	BLOCKED since Codex NOT_SAFE; under FIX7 both are sealed STUB_FAIL_CLOSED members; unlocked only by a separate apply/backfill gate, never an operator_authorization alone
registry-pivot / system-of-record cutover	BLOCKED / OUT OF SCOPE — FIX7 repoint is scoped to the QT001 control-plane writer/gateway, not a registry-of-record pivot (doc 08 §A, §E)
governance reconciliation / ∂43 context-truth / QT-006 lifecycle / raw birth-as-truth / memory-harness alignment	BLOCKED / OUT OF SCOPE (doc 08 §E)
birth gateway + DOT-118/119	DO_NOT_TOUCH — unchanged; G-BIRTH-NEUTRAL + G-DOT-FROZEN intact
Directus app authority (directus_* + business base tables)	preserved — cutover scoped to control objects only (G-DIRECTUS-APP-INTACT); SELECT re-granted via #21 (G-DIRECTUS-READ)

Governance-change gating (law-aligned)

The two governance-change packages PKG-F (authoritative repoint + legacy EXECUTE revoke) and PKG-G (owner/ACL cutover) each require a fresh independent Codex re-audit + operator_authorization before running. Grounded in the law's real §4G, which lists governance_change as a stop_without_asking_if hard-stop the surgical-drift allowance does not cover — so neither may be carried as a mechanical continuation of PKG-E.

Verdict

PASS — every adjacent layer remains later/blocked; the patch touched only the FIX7 QT001 control-plane refactor's execution detail and tightened, rather than widened, the boundaries.