01 — Dual-Path Live State & Drift Audit (2026-06-04)

Method

Path 1: query_pg MCP (read-only role, READ ONLY txn, statement_timeout 5s). Path 2: ssh contabo → docker exec postgres → psql -U directus -d directus. Both paths executed independently; numbers compared cell-by-cell.

Headline reconciliation (both paths identical)

Metric	Live value	Path1	Path2	Checkpoint	Classification
births total	1,174,050	✓	✓	1,174,025	EXPECTED_BACKGROUND_DRIFT (+25)
approval_requests	230	✓	✓	230	MATCH
axis_assignment	25	✓	✓	25	MATCH
governance_object_ownership	0	✓	✓	0	MATCH
axis_registry	2	✓	✓	2	MATCH
pivot_definitions	39	✓	—	39	MATCH
dot_tools	309	✓	✓	309	MATCH
event_type_registry	52	✓	—	52	MATCH
official AX-PROCESS RP	0/453	✓	✓	0/453	MATCH
PROC-OWN votes	0	✓	✓	0	MATCH
REAL_RUN	0	✓	✓	0	MATCH
DRY_RUN	2	✓	✓	2	MATCH
SIMULATED	4	✓	—	4	MATCH
process.* events active	0/7	✓	✓	0/7	MATCH
real_run_enabled	false	✓	—	false	MATCH

Drift classification

• MATCH: all engineering-critical collections (approval_requests, axis_assignment, ownership, axis_registry, pivot_definitions, dot_tools, event activation, REAL_RUN, real_run_enabled).
• EXPECTED_BACKGROUND_DRIFT: births +25 since prior checkpoint. Source breakdown (birth_registry by collection_name): entity_labels 868,976; system_issues 216,918; registry_changelog 71,551; knowledge_documents 6,193. These are background scanners + KB doc uploads + auto label/issue generation; none are governance/engineering writes.
• MISMATCH_BLOCKER: NONE.

Verdict

Live state is trusted. No silent drift in any engineering collection. Mutating branches are safe to proceed under authority gates. The +25 birth drift is background and does not touch governance, axis, ownership, or REAL_RUN state.