{
  "schema_version": "0.1",
  "record_kind": "service_objectives_and_usage_observations",
  "resource_id": "resource:tenant:coulomb:coulomb-social",
  "service_id": "coulomb-social",
  "workload_id": "coulomb-social",
  "tenant_id": "tenant:coulomb",
  "environment": "production",
  "cost_attribution_key": "resource:tenant:coulomb:coulomb-social",
  "created_at": "2026-08-12T09:03:47Z",
  "service_objectives": {
    "availability": {
      "target": "99.5_percent_monthly",
      "scope": "HTTPS app.coulomb.social application responses excluding scheduled maintenance and dependency outages (OIDC, apps-pg, cluster)",
      "measurement": "synthetic GET /healthz success ratio + ingress 5xx from platform telemetry when available",
      "notes": "Not a contractual SLA; planning objective for infrastructure options."
    },
    "latency": {
      "healthz_p99_ms": 500,
      "authenticated_html_p95_ms": 1500,
      "space_markdown_render_p95_ms": 3000,
      "notes": "Markdown path includes Forgejo fetch; cold cache may exceed target — track separately."
    },
    "recovery": {
      "rpo_minutes": 60,
      "rto_minutes": 240,
      "notes": "RPO/RTO for app DB via apps-pg backup ownership; content RPO/RTO inherits Forgejo backup policy for bound repos."
    },
    "retention": {
      "app_database_backup_days": 30,
      "application_logs_days": 14,
      "session_cookie": "browser session; no long-lived app refresh tokens in v1",
      "notes": "Backup retention executed by apps-pg/platform; app requires ≥30 days logical recoverability."
    },
    "tenant_isolation": {
      "model": "tenant_id column isolation within instance + instance_per_client deployments",
      "default_tenant": "tenant:coulomb",
      "cross_tenant_list": "forbidden — Space queries filter by session tenant_id",
      "identity": "NetKingdom OIDC (issuer, subject) Member binding; no local passwords"
    },
    "security": {
      "authn": "OIDC public client + session cookies Secure/HttpOnly/SameSite=Lax in prod",
      "secrets": "K8s Secret coulomb-social-env / OpenBao; never in git",
      "content_xss": "bleach-sanitized markdown HTML"
    }
  },
  "observations": [
    {
      "name": "public_healthz",
      "value": "ok",
      "unit": "status",
      "observed_at": "2026-08-12T09:03:47Z",
      "method": "curl -fsS https://app.coulomb.social/healthz",
      "authority": "coulomb-social"
    },
    {
      "name": "public_landing_http_status",
      "value": "200",
      "unit": "http_status",
      "observed_at": "2026-08-12T09:03:47Z",
      "method": "curl -o /dev/null -w status https://app.coulomb.social/",
      "authority": "coulomb-social"
    },
    {
      "name": "demo_fixture_raw_bytes",
      "value": "586",
      "unit": "bytes",
      "observed_at": "2026-08-12T09:03:47Z",
      "method": "GET Forgejo raw docs/space-fixtures/demo/pages/index.md",
      "authority": "coulomb-social + forgejo.coulomb.social public raw"
    },
    {
      "name": "declared_replicas",
      "value": "1",
      "unit": "count",
      "observed_at": "2026-08-12",
      "method": "chart values replicaCount",
      "authority": "railiance-apps/charts/coulomb-social/values.yaml"
    },
    {
      "name": "declared_cpu_request_millicores",
      "value": "100",
      "unit": "millicores",
      "observed_at": "2026-08-12",
      "method": "chart resources.requests.cpu",
      "authority": "railiance-apps"
    },
    {
      "name": "declared_memory_request_mi",
      "value": "256",
      "unit": "Mi",
      "observed_at": "2026-08-12",
      "method": "chart resources.requests.memory",
      "authority": "railiance-apps"
    },
    {
      "name": "declared_cpu_limit_millicores",
      "value": "1000",
      "unit": "millicores",
      "observed_at": "2026-08-12",
      "method": "chart resources.limits.cpu",
      "authority": "railiance-apps"
    },
    {
      "name": "declared_memory_limit_mi",
      "value": "1024",
      "unit": "Mi",
      "observed_at": "2026-08-12",
      "method": "chart resources.limits.memory",
      "authority": "railiance-apps"
    },
    {
      "name": "media_persistence_enabled",
      "value": "false",
      "unit": "bool",
      "observed_at": "2026-08-12",
      "method": "chart persistence.media.enabled",
      "authority": "railiance-apps"
    },
    {
      "name": "helm_image_tag",
      "value": "7fcd0cf",
      "unit": "git_sha_short",
      "observed_at": "2026-08-12",
      "method": "helm/coulomb-social-values.yaml image.tag",
      "authority": "railiance-apps"
    },
    {
      "name": "portfolio_ready_replicas",
      "value": "1",
      "unit": "count",
      "observed_at": "2026-08-11",
      "method": "Kubernetes API sample in RESOURCE-WP-0003 initial portfolio discovery",
      "authority": "resource-control discovery (reef-railiance)"
    },
    {
      "name": "commissioned_on",
      "value": "2026-08-09",
      "unit": "date",
      "observed_at": "2026-08-11",
      "method": "inventory record lifecycle.commissioned_on",
      "authority": "resource-control/data/resources/coulomb-social-production.json"
    },
    {
      "name": "app_database_gb_logical",
      "value": "unknown",
      "unit": "GB",
      "observed_at": "2026-08-12",
      "method": "not measured this session (kubectl/apps-pg access unavailable)",
      "authority": "coulomb-social — gap; platform may supply"
    },
    {
      "name": "production_member_count",
      "value": "unknown",
      "unit": "count",
      "observed_at": "2026-08-12",
      "method": "not queried (no production DB shell this session)",
      "authority": "coulomb-social — gap"
    },
    {
      "name": "observed_cpu_millicores",
      "value": "unknown",
      "unit": "millicores",
      "observed_at": "2026-08-12",
      "method": "metrics-server sample unavailable this session",
      "authority": "railiance-cluster when sampled"
    },
    {
      "name": "observed_memory_mi",
      "value": "unknown",
      "unit": "Mi",
      "observed_at": "2026-08-12",
      "method": "metrics-server sample unavailable this session",
      "authority": "railiance-cluster when sampled"
    },
    {
      "name": "local_dev_member_count",
      "value": "2",
      "unit": "count",
      "observed_at": "2026-08-12T09:03:47Z",
      "method": "local sqlite Member.objects.count() after pytest/dev use — not production",
      "authority": "coulomb-social workstation (non-prod)"
    }
  ],
  "dependency_slo_inheritance": [
    {
      "dependency": "resource:railiance:apps-pg",
      "inherits": ["database backup", "DB RPO/RTO physical path"]
    },
    {
      "dependency": "resource:railiance:reef-railiance:k3s",
      "inherits": ["node availability", "pod scheduling"]
    },
    {
      "dependency": "resource:railiance:forgejo",
      "inherits": ["space markdown durability", "git history"]
    },
    {
      "dependency": "NetKingdom KeyCape / Authelia",
      "inherits": ["authentication availability", "MFA path"]
    }
  ],
  "source_evidence": [
    "docs/resource-evidence/service-objectives-and-observations-2026-08.md",
    "docs/deploy.md",
    "docs/identity/smoke.md",
    "docs/adr/ADR-0001-netkingdom-identity.md",
    "docs/adr/ADR-0002-space-content-forgejo-markdown.md"
  ]
}