KB-7A2A
T1 FIX7 Blueprint Patch - Direct Blueprint Revisions Applied
5 min read Revision 1
fix7codex-patchdirect-revisions2026-06-08
11 - Direct Blueprint Revisions Applied
Every patch this pass made to the FIX7 refactor blueprint, with the old issue, the correction, the Codex blocker, and the resulting blueprint-doc revision. Production stayed READ-ONLY; existing docs were patched in place (no duplicate docs).
| blueprint doc | rev (after) | Codex blocker(s) | old issue → correction |
|---|---|---|---|
| 00 readme-first | 3 | all | self-verdict advanced to ..._T1_PATCHED_AFTER_CODEX_FAIL_READY_FOR_CODEX_RECHECK; patch-pass summary added |
| 01 inventory | 5 | 1 (B/H/I) | "46 functions" prose → live 45 fns + 1 proc; name-pattern fragility (views 0/183/196) documented; sealed-set framing; count made non-authority |
| 02 design-to-live | 8 | 1, 3, 6 | §G item 1 reworded to sealed set + disposition; new §H (sealed legacy-disposition set, #20 typed identity, candidate→sealed pipeline) + §I (5 dispositions); §E rows reference dispositions |
| 03 gap-classification | 3 | 1, 7 | G-17 → qt001_backfill_permit + G-NO-QT001-PERMIT-DURING-FIX7; disposition-guarantee note (sealed set, dispositions, invariants intact) |
| 04 construction-order | 23 | 1, 2, 3, 4, 6 | S00 candidate=diagnostic / operational target=sealed #20; S09 seals #20 legacy-disposition rows; S13 → G-NOLEGACY-PRE + G-WRITER-GATEWAY-IDENTITY; S15 sealed set + stub-only-STUB_FAIL_CLOSED + PRE/POST + atomic; S16 sealed set + complete ACL snapshot + no gateway owner transition; S17 sealed FREEZE/DEPRECATE; S19 35 guards; repoint+atomicity notes (deactivation-first, G-NOMIXED-AUTHORITY); new §Writer-gateway-identity (phase-explicit) |
| 05 rollback | 10 | 4, 5 | S15 rollback = atomic deactivation-first; invariant 3 expanded (column ACL + effective role membership + sequence/default/PUBLIC/Directus/cp + snapshot hash + both-direction verify); note 5 rewritten (ordered 5-step sequence + G-NOMIXED-AUTHORITY + CR-E3 distinction) |
| 06 test-guard | 16 | 1, 2, 4, 5, 6, 7 | G-NOLEGACY split → PRE/POST; G-PGNATIVE + G-OWNER-CUTOVER tightened; +G-LEGACY-TARGET-SEALED, +G-NOMIXED-AUTHORITY, +G-WRITER-GATEWAY-IDENTITY, +G-NO-QT001-PERMIT-DURING-FIX7; total 30→35; guard-quality rule 1 reference updated |
| 07 package-split | 21 | 1, 2, 3, 5, 7 | new §Terminology (operator_authorization vs qt001_backfill_permit vs REAL_RUN_authority); PKG-D → G-NOLEGACY-PRE only; PKG-E/F/G permit→operator_authorization; PKG-F stub-scope fix + PRE/POST + atomic rollback; PKG-G complete ACL snapshot; machine-checkable transition evidence; §4G citation corrected; diagram updated |
| 08 hard-blocks | 7 | 6, 7 | admission-permit row → qt001_backfill_permit + distinct from operator_authorization; QT001-apply row clarified (never unlocked by operator_authorization alone) |
| 12 final-verdict | 8 | all | status advanced; new "Codex critical-review patch pass" section (7-blocker table + A-K alignment); track-summary guards 30→35 |
| checkpoint (blueprint) | 6 | all | status advanced; Codex-patch-pass section |
Cross-impact check
- Invariants: 27 authority surfaces / 11 runtime-evidence / 14 readiness gates (DATA) / 7 hash
contracts — all unchanged by every patch. The sealed legacy-disposition set is DATA rows in
existing #20 (+ #27) and one typed
dispositioncolumn; no surface/gate/hash added. - Guards: 30 → 35 (TEST/VERIFICATION guards only). The +5 are G-NOLEGACY split (+1 net), G-LEGACY-TARGET-SEALED, G-NOMIXED-AUTHORITY, G-WRITER-GATEWAY-IDENTITY, G-NO-QT001-PERMIT-DURING-FIX7.
- Hard blocks: all intact and several tightened (QT001 apply, permit, registry-pivot, birth gateway, DOTs).
- No prior XHigh/Max conclusion reversed: the patches strengthen XH-2 (now over the sealed set), MB-01 (now a sealed exact-set, not an adjective list), ME-01 (now column-ACL + effective-privilege complete), MG-01 (now machine-checkable + law citation corrected).
- Honesty corrections surfaced: the live routine count is 45 functions + 1 procedure (not "46 functions"); the law's real §4G is "Surgical Drift Patch Allowance" (governance_change hard-stop), and the law has no "permit" term — both corrected in-blueprint rather than propagated.