GPT Review — Production DDL/Collection Gate Design v0.2

Date: 2026-04-28

Verdict

PASS with minor patch. v0.2 correctly incorporates the probe findings and is suitable as an umbrella design after one wording fix.

Accepted improvements

• Correct G6 function names.
• Correct fn_tac_log_checker_issue whitelist.
• Recognizes /tmp as ephemeral and requires canonical DDL persistence.
• Separates dry-run seed manifest from production retargeted seed manifest.
• Splits execution into Gate A/B/C.
• Keeps all doc-only warnings.

Required patch

Gate B pre-check R3 currently says:

Live verify: POST /collections meta-only payload accepted — Test on 1 collection first

This is not a pre-check; it is a mutation. Patch wording to:

R3: Live verify payload shape read-only from Directus schema/API metadata and current collection metadata. Do not POST in pre-check.

Then add in Gate B execution phase:

Execution should proceed sequentially: create/register the first low-risk collection metadata entry, verify it, then continue with the remaining 13. If first registration fails, stop and rollback/delete only that metadata entry if created.

Additional non-blocking patch

For Gate A function post-check, clarify expected count:

public.fn_tac_* expected = 7 total: existing whitelist fn_tac_log_checker_issue + 6 new TAC functions. The 6 new TAC functions must match the exact inventory in §2.2.

Governance check

Rule	Result	Finding
Hiến pháp / Zero Trust	PASS with patch	Evidence-based corrections are included.
Đ32	PASS	All mutations remain behind separate gates.
Đ33	PASS	Production DDL remains gated.
Đ35	PASS	DOT/governed path preserved.
Đ24	PASS	No label/entity-label mutation.

Direction

Patch v0.2 as above, then persist to KB as v0.3 or patched v0.2. After that, stop for GPT/User review. Do not start Gate A/B/C execution.