Record release transport and sampled health observer progress

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0e241-8285-7a63-8c0c-51c9cb824dc3
This commit is contained in:
tegwick 2026-09-27 17:04:49 +02:00
parent 7a9ff81ce5
commit bcdb02323c

View file

@ -113,3 +113,14 @@ It is not connected to production credentials or scheduling. Authenticated
Git/ArgoCD transport, admitted identity, real receipt issuers/continuous observer
and transport-level rollback proof remain required. This source-only change does
not reset the production observation window.
The fixed Git/ArgoCD transport adapter and persistent health observer are now
implemented and tested with disposable real Git repositories and simulated
Kubernetes responses. Real Git rollback, lost-response recovery, concurrent-writer
refusal and wrong-cluster refusal pass. Health attestation requires a full 24 hours
of actual samples, no more than 90 seconds apart; gaps and clock regressions reset
or invalidate the interval. It cannot infer that history from the rollout timestamp.
Production credential admission, real invariant probes/signing issuers, Temporal
registration and authenticated Kubernetes failure tests remain open. See the
[broker implementation](../../activity-core/docs/release-broker.md) for that boundary.