KB-1552

UWC 13 — Hard Truth Coverage Report

3 min read Revision 1

13 — Hard Truth Coverage Report

VERDICT: COVERAGE_PARTIAL

We do NOT cover everything. Stated with numerator/denominator:

What is proven covered

  • DB process-definition layer: 10/10 source classes scannable + automated (5 live scanner functions). Universe = 373.
  • Verified processes: 1 / 373 (job:cut). candidate-visible: 17 / 373.
  • Existing discovery surfaces retained and re-confirmed live (orphan 84, correlation_gaps 17, drift 17).

What is NOT covered

  • 6 / 16 source classes have no adapter (host_crontab 49, systemd_timers 21, fs_dot_bin 288, fs_scripts 31, docker_containers 11, kb_sop_docs UNKNOWN) → ≥400 objects uncensused continuously.
  • RP-assigned = 0 / 373 (0.00%) — Registries-Pivot surfaces no officially-governed process.

What source is invisible

Host cron/systemd schedules, /opt/incomex/dot/bin executor scripts, container-embedded service workflows, KB-defined SOPs. DB cannot read them; the policy-scan timer only scans DB.

Weak evidence

  • REAL_RUN = 0 system-wide (only job:cut verified via correlation; dot:kg dry-run only).
  • Host counts = one manual probe (STALE_MANUAL_PROBE), kb_sop = UNKNOWN.
  • 981 triggers/functions deliberately excluded as components (FP control).

Orphan / RP-missing

orphan signal: 311 RP-missing definitions, 400 host-unmanaged, 178 DOTs without candidate, 7 job kinds, 7 process.* events. phantom = 0.

Owner / governance missing

gov_ownership = 0; AX-PROCESS = CANDIDATE; 0 canon process pivots; PROC-OWN-01..05 pending.

Action needed

  1. Build 6 host/FS/KB adapters. 2. Promote 5 scanners to production DOTs (owner birth) + wire host cron. 3. Owner ratify AX-PROCESS + bootstrap GOV-MOW ownership → begin RP assignment. 4. Get REAL_RUN evidence to lift verified beyond 1.

Automated scanner: exists or apply-ready?

LIVE-COMPUTE + apply-ready for production. 5 functions live and idempotent; production scheduling needs 1 owner birth-admission + 1 cron line. We do NOT claim "the system self-scans all workflows" — it self-scans the DB layer; host/FS/KB self-scanning requires the 6 adapters.

Back to Knowledge Hub knowledge/dev/reports/architecture/universal-workflow-census-automated-dot-scanner-system-2026-06-04/13-hard-truth-coverage-report.md