KB-7A2A

T1 FIX7 Blueprint Patch - Direct Blueprint Revisions Applied

5 min read Revision 1
fix7codex-patchdirect-revisions2026-06-08

11 - Direct Blueprint Revisions Applied

Every patch this pass made to the FIX7 refactor blueprint, with the old issue, the correction, the Codex blocker, and the resulting blueprint-doc revision. Production stayed READ-ONLY; existing docs were patched in place (no duplicate docs).

blueprint doc rev (after) Codex blocker(s) old issue → correction
00 readme-first 3 all self-verdict advanced to ..._T1_PATCHED_AFTER_CODEX_FAIL_READY_FOR_CODEX_RECHECK; patch-pass summary added
01 inventory 5 1 (B/H/I) "46 functions" prose → live 45 fns + 1 proc; name-pattern fragility (views 0/183/196) documented; sealed-set framing; count made non-authority
02 design-to-live 8 1, 3, 6 §G item 1 reworded to sealed set + disposition; new §H (sealed legacy-disposition set, #20 typed identity, candidate→sealed pipeline) + §I (5 dispositions); §E rows reference dispositions
03 gap-classification 3 1, 7 G-17 → qt001_backfill_permit + G-NO-QT001-PERMIT-DURING-FIX7; disposition-guarantee note (sealed set, dispositions, invariants intact)
04 construction-order 23 1, 2, 3, 4, 6 S00 candidate=diagnostic / operational target=sealed #20; S09 seals #20 legacy-disposition rows; S13 → G-NOLEGACY-PRE + G-WRITER-GATEWAY-IDENTITY; S15 sealed set + stub-only-STUB_FAIL_CLOSED + PRE/POST + atomic; S16 sealed set + complete ACL snapshot + no gateway owner transition; S17 sealed FREEZE/DEPRECATE; S19 35 guards; repoint+atomicity notes (deactivation-first, G-NOMIXED-AUTHORITY); new §Writer-gateway-identity (phase-explicit)
05 rollback 10 4, 5 S15 rollback = atomic deactivation-first; invariant 3 expanded (column ACL + effective role membership + sequence/default/PUBLIC/Directus/cp + snapshot hash + both-direction verify); note 5 rewritten (ordered 5-step sequence + G-NOMIXED-AUTHORITY + CR-E3 distinction)
06 test-guard 16 1, 2, 4, 5, 6, 7 G-NOLEGACY split → PRE/POST; G-PGNATIVE + G-OWNER-CUTOVER tightened; +G-LEGACY-TARGET-SEALED, +G-NOMIXED-AUTHORITY, +G-WRITER-GATEWAY-IDENTITY, +G-NO-QT001-PERMIT-DURING-FIX7; total 30→35; guard-quality rule 1 reference updated
07 package-split 21 1, 2, 3, 5, 7 new §Terminology (operator_authorization vs qt001_backfill_permit vs REAL_RUN_authority); PKG-D → G-NOLEGACY-PRE only; PKG-E/F/G permit→operator_authorization; PKG-F stub-scope fix + PRE/POST + atomic rollback; PKG-G complete ACL snapshot; machine-checkable transition evidence; §4G citation corrected; diagram updated
08 hard-blocks 7 6, 7 admission-permit row → qt001_backfill_permit + distinct from operator_authorization; QT001-apply row clarified (never unlocked by operator_authorization alone)
12 final-verdict 8 all status advanced; new "Codex critical-review patch pass" section (7-blocker table + A-K alignment); track-summary guards 30→35
checkpoint (blueprint) 6 all status advanced; Codex-patch-pass section

Cross-impact check

  • Invariants: 27 authority surfaces / 11 runtime-evidence / 14 readiness gates (DATA) / 7 hash contracts — all unchanged by every patch. The sealed legacy-disposition set is DATA rows in existing #20 (+ #27) and one typed disposition column; no surface/gate/hash added.
  • Guards: 30 → 35 (TEST/VERIFICATION guards only). The +5 are G-NOLEGACY split (+1 net), G-LEGACY-TARGET-SEALED, G-NOMIXED-AUTHORITY, G-WRITER-GATEWAY-IDENTITY, G-NO-QT001-PERMIT-DURING-FIX7.
  • Hard blocks: all intact and several tightened (QT001 apply, permit, registry-pivot, birth gateway, DOTs).
  • No prior XHigh/Max conclusion reversed: the patches strengthen XH-2 (now over the sealed set), MB-01 (now a sealed exact-set, not an adjective list), ME-01 (now column-ACL + effective-privilege complete), MG-01 (now machine-checkable + law citation corrected).
  • Honesty corrections surfaced: the live routine count is 45 functions + 1 procedure (not "46 functions"); the law's real §4G is "Surgical Drift Patch Allowance" (governance_change hard-stop), and the law has no "permit" term — both corrected in-blueprint rather than propagated.
Back to Knowledge Hub knowledge/dev/reports/architecture/t1-fix7-blueprint-patch-after-codex-critical-fail-2026-06-08/11-direct-blueprint-revisions-applied.md