26A-31 — Command Install Plan

Install Plan Phrases

Install Plan Steps

• Create HD-only command namespace in a future phase only after explicit approval.
• Install inspect command first before any write command.
• Install write command only after inspect command is verified.
• Install rollback-inspect command before rollback command.
• Install rollback command only after rollback-inspect is verified.
• Keep all commands refusing execution unless exact phrases and one-row limits are present.
• Require dry-run/inspect result before write or rollback.
• Print result packets to the terminal after every command run.
• Never connect command installation to employee notification or publish logic.
• Never touch Payfast Office paths or files.

Future Command Guardrails

• Future inspect command must be safe to run repeatedly.
• Future write command must refuse more than one row.
• Future write command must force unpublished status.
• Future write command must force notification disabled.
• Future write command must force employee self-view disabled.
• Future write command must create a test token.
• Future write command must display created row id immediately.
• Future rollback command must require created row id and rollback phrase.
• Future rollback command must refuse published/non-test rows.
• Future rollback command must report affected row count.

Future Command Validation Rules

• approval_phrase must equal SAVE_ONE_DRAFT_SHIFT
• rollback_phrase must equal ROLLBACK_ONE_DRAFT_SHIFT
• install_plan_phrase must equal COMMAND_INSTALL_PLAN_ONLY_NO_WRITE
• row_limit must equal 1
• publish must equal no
• notify must equal no
• employee_view must equal no
• target table must be confirmed
• required columns must be confirmed
• rollback instructions must be available before any future write

No-Write Proof

• 26A-31 routes are GET-only.
• 26A-31 controller imports Route only and does not import DB, Schema, Artisan, Process, or any model.
• 26A-31 controller does not call insert, create, save, update, delete, destroy, truncate, dispatch, event, mail, notification, queue, broadcast, Artisan, Process, or migration actions.
• 26A-31 does not create app/Console command files.
• 26A-31 does not modify routes/console.php.
• 26A-31 views only display install-plan text.
• 26A-31 smoke test checks file and route presence only.

Safety Locks

• No ENV changes.
• No database writes.
• No database deletes.
• No migration creation or execution.
• No Artisan command creation or registration.
• No Artisan command execution.
• No real draft shift save.
• No real rollback or cleanup command is installed.
• No published schedule.
• No employee self-view change.
• No employee text message.
• No employee email notification.
• No payroll, POS, reservation, payment, waiver, or customer profile changes.
• No hard conflict blocking.
• No automatic scheduling.
• No Payfast Office file, route, controller, or database action.
• This phase contains no POST route and no write endpoint.

Route Readiness

Phase Trail

Next Step Notes

• Recommended next safe phase: 26A-32 — Controlled One-Row Draft Save Command Install Approval Request / Still No Write.
• Do not install a command from 26A-31.
• Do not run a command from 26A-31.
• Do not create a draft shift from 26A-31.
• Do not add a POST/write route in this phase.
• Do not send employee notifications.
• Do not publish schedules.