T1 FIX7 Adversarial Review - 03 Readiness Denominator (SUPERTRACK C)
03 — Readiness Exact-Set Denominator Review (SUPERTRACK C)
Source: 03-readiness-denominator-spec.md.
Checks
| # | Requirement | Spec answer | Verdict |
|---|---|---|---|
| C.1 | 14-gate denominator exact + sealed | denominator = every row of the single ACTIVE READINESS_GATE manifest (sealed, owner-only) | PASS |
| C.2 | 14 gate IDs specified | named: OBJECT_AUTHORITY_IMMUTABLE, READINESS_MANIFEST_EXACT, SIGNOFF_AUTHENTIC, CAPABILITY_BEHAVIORAL, DEPENDENCY_TRUTH, NO_BYPASS_ALL_BLOCKED, CANONICAL_HASH_SHA256, PLANNER_NOT_CLONE, SCALE_SAFE, GATEWAY_PASS, FREEZE_PASS, PERMIT_POLICY_PASS, TIER_POLICY_PASS, WRITER_FAIL_CLOSED | PASS (all 14 named) |
| C.3 | missing gate fails | exact expected=actual in both EXCEPT directions; missing fails | PASS |
| C.4 | extra gate fails | both-EXCEPT comparison; extra fails | PASS |
| C.5 | NULL gate fails | "no NULL/missing/extra/unknown/stale"; bool_and-alone forbidden | PASS |
| C.6 | deleted failing gate cannot green readiness | delete-failing-result, fake/extra, NULL, stale all fail; manifest immutable + owner-only | PASS (design) |
| C.7 | denominator not Directus-changeable | Directus-no-write; reduced manifest requires exact critical quorum | PASS (design) — LIVE-gated until cutover |
| C.8 | manifest activation + hash binding | reduced manifest only via Q_CRITICAL_3 + hash/epoch binding | PASS |
| C.9 | freshness requirement | post-activation verifier complete + per-gate freshness | PASS (global); per-gate freshness values "in the full spec" (not shown) |
Strength
The denominator design is exact-set, sealed, owner-only, both-EXCEPT, NULL-strict, bool_and-alone-forbidden, and quorum-gated to change. This is a complete and correct answer to the FIX6 "mutable/self-defined denominator" and "bool_and NULL-ignore" findings. The denominator is bounded by gate count (14), not object count — scale-safe (see doc 15).
Residual (cross-ref doc 02)
Each gate's adapter name + rule set + freshness is deferred to "the full spec" and not in the KB. The denominator structure is complete; the per-gate enforcement logic is named-not-shown. This does not make the denominator mutable, but it means T1 cannot author the 14 adapters without the rule sets (guess risk).
Verdict: READINESS_SPEC_COMPLETE (denominator) — with a flagged dependency
No mutable-denominator bypass in the design. Denominator semantics are COMPLETE and scale-safe. But publish the 14 gate adapter rule sets + per-gate freshness (cross-ref B) before T1 implements; otherwise the per-gate logic is guessed.