KB-1552
UWC 13 — Hard Truth Coverage Report
3 min read Revision 1
13 — Hard Truth Coverage Report
VERDICT: COVERAGE_PARTIAL
We do NOT cover everything. Stated with numerator/denominator:
What is proven covered
- DB process-definition layer: 10/10 source classes scannable + automated (5 live scanner functions). Universe = 373.
- Verified processes: 1 / 373 (job:cut). candidate-visible: 17 / 373.
- Existing discovery surfaces retained and re-confirmed live (orphan 84, correlation_gaps 17, drift 17).
What is NOT covered
- 6 / 16 source classes have no adapter (host_crontab 49, systemd_timers 21, fs_dot_bin 288, fs_scripts 31, docker_containers 11, kb_sop_docs UNKNOWN) → ≥400 objects uncensused continuously.
- RP-assigned = 0 / 373 (0.00%) — Registries-Pivot surfaces no officially-governed process.
What source is invisible
Host cron/systemd schedules, /opt/incomex/dot/bin executor scripts, container-embedded service workflows, KB-defined SOPs. DB cannot read them; the policy-scan timer only scans DB.
Weak evidence
- REAL_RUN = 0 system-wide (only job:cut verified via correlation; dot:kg dry-run only).
- Host counts = one manual probe (STALE_MANUAL_PROBE), kb_sop = UNKNOWN.
- 981 triggers/functions deliberately excluded as components (FP control).
Orphan / RP-missing
orphan signal: 311 RP-missing definitions, 400 host-unmanaged, 178 DOTs without candidate, 7 job kinds, 7 process.* events. phantom = 0.
Owner / governance missing
gov_ownership = 0; AX-PROCESS = CANDIDATE; 0 canon process pivots; PROC-OWN-01..05 pending.
Action needed
- Build 6 host/FS/KB adapters. 2. Promote 5 scanners to production DOTs (owner birth) + wire host cron. 3. Owner ratify AX-PROCESS + bootstrap GOV-MOW ownership → begin RP assignment. 4. Get REAL_RUN evidence to lift verified beyond 1.
Automated scanner: exists or apply-ready?
LIVE-COMPUTE + apply-ready for production. 5 functions live and idempotent; production scheduling needs 1 owner birth-admission + 1 cron line. We do NOT claim "the system self-scans all workflows" — it self-scans the DB layer; host/FS/KB self-scanning requires the 6 adapters.