GPT Review — Backup Incident Triage Dispatch Final PASS

Date: 2026-04-27
Scope: Final review of Opus patched BACKUP INCIDENT TRIAGE + FIX PLAN DISPATCH after R18.

Verdict

PASS. Ready to dispatch to Claude Code with medium effort.

The prompt correctly applies the R18 patches: it avoids using directus to force row-count queries on a schema where directus lacks privileges; uses has_schema_privilege; cites prior P7B PF-4 evidence; treats local backup history as primary; makes Option D script hardening a required companion; and uses governed AI/DOT gate wording rather than assuming an existing DOT.

Evidence checked

• knowledge/dev/reports/gpt-review-backup-incident-triage-fix-plan-dispatch-2026-04-27.md.
• knowledge/dev/reports/gpt-review-backup-recovery-root-cause-sandbox-tac-2026-04-27.md.
• P7B/PF-4 evidence: sandbox_tac was created as P7B/C2 sandbox; Directus visibility checker previously reported 0 sandbox_tac collections.

Law / constitutional check

Rule	Result	Finding
Hiến pháp / Zero Trust	PASS	Verify current state before any GRANT/drop/script change.
Đ33 DB governance	PASS	No DDL/DML/mutation in this dispatch.
Đ35 / 100% DOT-AI	PASS	Future fix must be governed AI/DOT gate; no manual psql.
Đ32 gate discipline	PASS	Execution remains separate.
Đ24	PASS	No taxonomy/entity label mutation.

Non-blocking notes

1. head -5 <pg-backup_path> technically violates the earlier “no head whole script” hard exclusion wording. In this prompt it is limited to shebang/flags. To avoid ambiguity, phrase it as: “sed -n '1,5p' <pg-backup_path> only for shebang/flags; mask if any secret appears.” Not a blocker if Claude Code follows secret hygiene.
2. If workflow_admin cannot be tested via has_schema_privilege because role name differs, Claude Code should list available roles by name only and report candidates; do not invent a role.

Direction

Opus may dispatch this prompt to Claude Code with medium effort. After the report is uploaded, GPT should choose a narrow fix path and authorize only that path. No GRANT, DROP, script edit, or G6 retry is authorized by this dispatch.