12 - Direct Blueprint Revisions Applied

All edits were made directly to the blueprint KB docs under t1-fix7-existing-system-refactor-execution-blueprint-2026-06-08/. Cross-doc patches were issued in parallel; same-doc patches sequentially. No production mutation.

Per-doc revisions

doc 02 — design-to-live-mapping (rev 17 → 23)

• Top banner: recheck-2 disposition (6.5/8 in-blueprint; C = DESIGN_AMENDMENT_REQUIRED).
• §H.2: the prior "BLOCKER-C option 1, no byte-DDL change" claim WITHDRAWN; replaced with the DESIGN_AMENDMENT_REQUIRED ruling + Options α/β; LEGACY_* #20 rows withdrawn/fail-closed; legacy membership moved to #11 reverse-closure.
• §H.4 rule 1: U_legacy roots redefined as the independent sealed #20 protected_target TABLE rows
  • #26 protected_target_set_sha256; analyzer derives closure, never roots; dynamic calls fail closed.
• §I: disposition categories marked WITHDRAWN pending amendment (computed classifier rejected; Option β notes STUB elimination).
• §E legacy-routine row + §G traceability note: disposition/STUB escalated from "confirmation" to DESIGN_AMENDMENT_REQUIRED; owner-isolation phase model unaffected.

doc 04 — dependency-safe-construction-order (rev 33 → 36)

• Top banner: per-blocker disposition (A/F/G/H/D in-blueprint; C amendment).
• S15.4 / "Activation order" dependency note: rollback rewritten forward-only (never clear/edit activated_at; supersede via new activation + superseded_by_manifest_id; derived current-active).
• New dependency notes: Owner reachability (A, G-OWNER-UNREACHABLE), Superuser break-glass (F, G-SUPERUSER-BREAKGLASS), Author/rehearse/seal order (H, G-SEAL-AFTER-AUTHOR-REHEARSE).

doc 05 — rollback-blueprint (rev 18 → 22)

• Top banner: forward-only (G) + unique rollback_evidence_id source (E).
• S15 rollback table row + note-5 step 1: forward supersession, never clear activated_at.
• note-5 step 4: legacy restore uniquely sourced via manifest_activation.rollback_evidence_id; Option β = no body change; Option α = amended STUB body binding.

doc 06 — test-guard-blueprint (rev 25 → 29)

• Top banner: 4 guards added (36 → 40); disposition-dependent guards fail-closed pending C.
• G-NOMIXED-AUTHORITY corrected to read the derived current-active route (G).
• Added rows: G-OWNER-UNREACHABLE (A), G-SUPERUSER-BREAKGLASS (F), G-SEAL-AFTER-AUTHOR-REHEARSE (H), G-OPERATOR-AUTH-PG-NATIVE (D).
• Guard total updated 36 → 40 with the recheck-2 lineage.

doc 07 — implementation-package-split (rev 28 → 35)

• Top banner: D/H/G in-blueprint; C amendment.
• Terminology operator_authorization row + "Machine-checkable package-transition" bullet: rebound to typed PG authority (#07/#20/#21/#16/#19/#08 + CP-09 + manifest_activation payload/epoch); evidence artifact demoted to supporting-only (D).
• PKG-B scope: now authors #11/#26/#27 + U_legacy denominator before the rehearsal seal (H); C disposition rows not authored (fail-closed).
• PKG-C: rehearses/seals the complete set incl #26/#27 (H).
• PKG-D: demoted to read-only re-validation + Codex re-audit (H).
• PKG-F rollback: forward-only (G).

doc 08 — hard-blocks-do-not-touch (rev 10 → 15)

• Top banner: recheck-2 disposition.
• qt001_backfill_permit row: operator_authorization parenthetical corrected to typed PG authority (D).
• §A: added rows for superuser workflow_admin break-glass (F) and the legacy-disposition contract DESIGN_AMENDMENT_REQUIRED (C).
• §C: "did NOT do" updated (no LEGACY_*/disposition/STUB authored; recheck-2 patch report listed; confirmatory pg_roles read noted).
• §D unlock chain: inserted the design-amendment gate + T1 re-patch + Codex recheck 3 ahead of implementation-authoring.

doc 12 — final-verdict (rev 12 → 14)

• Verdict changed to FIX7_REFACTOR_BLUEPRINT_PATCH_AFTER_RECHECK_2_REQUIRES_DESIGN_AMENDMENT.
• Added the recheck-2 patch-pass section (8-blocker disposition table; guards 36 → 40; "why this status" reasoning).
• Closing "Blocking status" updated to amendment-gated; guard count note (40).

Invariants (preserved)

27 authority surfaces · 11 runtime-evidence non-authority · 14 readiness gates (DATA) · 7 hash contracts (H01..H07) · 0 new authority surface · 0 new readiness gate · 0 new hash contract · 0 new #20 column · 0 new catalog family · production mutation 0. Test/verification guards 36 → 40. All hard blocks intact.