Record the availability exercise and finish the tenancy posture plan.
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 4s

Assistant: grok
Assistant-Session: 01a0d25d-d358-7e13-b84a-d007fbb7e34f
This commit is contained in:
tegwick 2026-09-24 15:53:09 +02:00
parent 6b46d1aaca
commit 8d3328b620
4 changed files with 104 additions and 36 deletions

View file

@ -21,7 +21,7 @@ tenancy:
# tenant-engine on platform-pg; the mixture is
# reported by the platform, not hidden.
current: { I: 1, A: 2, E: 2, P: 1, R: 2, V: 0 }
current: { I: 1, A: 2, E: 2, P: 1, R: 2, V: 1 }
target: { I: 1, A: 2, E: 3, P: 1, R: 2, V: 1 }
# §5.2 — declare per path, quote the minimum. The quoted E above is the
@ -104,13 +104,13 @@ tenancy:
under the §4.5 retention trigger, with P2 as the fallback — a worse answer
than archive, named now so it is not improvised later.
V: >-
No exercise establishes restart recovery for the complete audit path.
V1 is the target; replica count or Kubernetes restart policy is not
treated as evidence. Dependencies enumerated and the exercise specified in
docs/availability-recovery.md (AUDIT-WP-0008-T07); the exercise itself
awaits a live window on railiance01. V2 is not reachable at P1 as built:
platform-pg runs instances 1, and Decision 4.6.1 makes V the minimum across
synchronous providers, so V1 is the ceiling here rather than the next step.
V1 evidenced 2026-09-24 (AUDIT-WP-0008-T07). Receiver recreate recovered
in about 7 seconds. Recreating the single platform-pg primary recovered
the accept path 22 seconds after the pod terminated. The chain stayed
intact. Lease revocation and node reboot were not part of the exercise.
V2 is not reachable at P1 as built: platform-pg runs instances 1, and
Decision 4.6.1 makes V the minimum across synchronous providers, so V1
is the ceiling. Review 2026-12-31.
provider:
capability: operations.audit
@ -150,12 +150,17 @@ provider:
- "rapp-postgres/consumers/audit-core.yaml"
- "audit_core/interface.py"
V:
available: 0
available: 1
maximum: 1
conditions:
- "Exercise restart recovery across audit-core, platform-pg and OpenBao."
- "V1 is receiver recreate plus one platform-pg primary recreate, measured 2026-09-24. OpenBao lease revocation was not exercised and is not required for an accept until the current lease expires."
evidence:
- "docs/evidence/AUDIT-WP-0008-T07-v1-2026-09-24.md"
- "docs/availability-recovery.md"
evidence:
V1:
- "docs/evidence/AUDIT-WP-0008-T07-v1-2026-09-24.md"
A2:
- "audit_core/ingestion.py"
- "tests/test_ingestion.py"