coulomb/qonto-assistant
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Use the shared coordination frame for audit heartbeat defaults

Browse source 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2
This commit is contained in:
tegwick 2026-10-15 20:42:29 +02:00
parent bf8a9ede67
commit 5eb7e86f7a
5 changed files with 50 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

16
docs/operator-runbook.md
View file

@ -268,3 +268,19 @@ next. Ordinary denies (`authz_denied`, `tenant_scope`, `unknown_capability`)
never count toward this — only the two reason classes that indicate
probing/exfiltration rather than a client mistake. See
`docs/SecurityPractice.md` §9.3 and `src/qonto_assistant/security_watch.py`.
## Ecosystem coordination-frame adoption — 2026-10-15
The source heartbeat default now imports FRAME_SECONDS from the generated
qonto_assistant/coordination.py. Initial frame is f=3600s, configured once in
coordination-engine/config/coordination-frame.json. The source-owned cadence
and rapp-qonto manifest derive the same interval and preserve config SHA-256
provenance. Regenerate them with net-kingdom/tools/coordination-frame/render.py;
--check detects drift. An explicitly configured instance interval still needs
matching declaration and receiver mapping.
This source update does not deploy rapp-qonto or create its missing collector.
QONTO-WP-0006-T02/T03 and AUDIT-WP-0013-T05 still hold sender/delivery and
independent observation acceptance. Existing bank credential TTL, policy,
identity, rate limits and process-local counter limitations are unchanged.