GPT Final Review — Production DDL/Collection Gate Design v0.2

Date: 2026-04-28

Verdict

PASS. Upload to KB.

The final v0.2 design incorporates the required probe corrections and the final Gate B wording patch. It is appropriate as a doc-only umbrella design for future Gate A/B/C execution prompts.

Confirmed corrections

• Exact 6 G6 functions are listed correctly.
• Existing public.fn_tac_log_checker_issue is correctly treated as whitelist, not an error.
• /tmp DDL bundle is treated as ephemeral and requires persistence/canonicalization before execution.
• Seed retarget from p9_g6_dryrun. to public. is explicit.
• Execution is split into Gate A (DDL), Gate B (Collections), Gate C (Seed).
• Gate B pre-check no longer performs POST mutation.
• Gate B execution strategy uses first-collection verification before continuing.
• Document remains doc-only and does not authorize mutation.

Governance check

Rule	Result	Finding
Hiến pháp / Zero Trust	PASS	Evidence/probe-based design.
Đ32	PASS	Future DDL/Directus/seed mutations remain gated.
Đ33	PASS	Schema changes require separate Gate A execution prompt.
Đ35	PASS	DOT/governed flow preserved.
Đ24	PASS	No label/entity-label mutation.
Đ39	PASS	AI proposes, User authorizes later.

Direction

Opus should upload/persist this final v0.2 to KB at:

knowledge/dev/laws/dieu38-trien-khai/P9-production-ddl-collection-gate-design.md

Then STOP. Do not execute Gate A/B/C.

Next doc-only step

After upload, the recommended next step is Gate A Production DDL Execution Prompt Design as doc-only draft only, not execution.

Gate A design must include:

• canonical DDL persist/canonicalize sub-step;
• production DDL candidate SHA;
• live pre-checks;
• backup PF-07 v0.5;
• trigger guard health check;
• explicit whitelist for fn_tac_log_checker_issue;
• rollback excluding whitelist;
• action log path;
• no Gate B/C/G8B/G11/P9.