Review runtime collector mapping and bind delivery owner commitment
Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2
This commit is contained in:
parent
5eb7e86f7a
commit
6c690b0b84
2 changed files with 30 additions and 1 deletions
|
|
@ -284,3 +284,19 @@ This source update does not deploy rapp-qonto or create its missing collector.
|
|||
QONTO-WP-0006-T02/T03 and AUDIT-WP-0013-T05 still hold sender/delivery and
|
||||
independent observation acceptance. Existing bank credential TTL, policy,
|
||||
identity, rate limits and process-local counter limitations are unchanged.
|
||||
|
||||
|
||||
## Runtime-owned collector mapping (2026-10-15)
|
||||
|
||||
RAPP-QONTO-WP-0004 supplies the concrete structured-stdout sender. Source owner
|
||||
mapping preserves audit.allow/audit.deny and maps each audit.heartbeat one-to-one
|
||||
to audit-core.heartbeat with data.class=audit.deny, retaining original event_class,
|
||||
instance,sequence,source/window counters. No three-way fanout is introduced.
|
||||
This reflects the source heartbeat assertion about deny transitions; it does not
|
||||
assert no allow transitions. Receiver heartbeat_classes is audit.deny:7200 for
|
||||
source frame3600 and effective grace10800. Mixed sender admission is load-bearing;
|
||||
allow retains attributive semantics in the canonical inventory. Package-declared
|
||||
tenant:friendly:binky is the bank-resource envelope scope; request tenant_id stays
|
||||
untrusted claim data. Exact sender/source,deterministic retry IDs,retry/lag semantics
|
||||
and limitations are documented in rapp-qonto/docs/audit-collector.md. The source
|
||||
logger remains unchanged. No delivery/independent acceptance is claimed here.
|
||||
|
|
|
|||
|
|
@ -8,7 +8,7 @@ status: blocked
|
|||
owner: codex
|
||||
topic_slug: qonto-canonical-cadence-adoption
|
||||
created: "2026-10-03"
|
||||
updated: "2026-10-04"
|
||||
updated: "2026-10-15"
|
||||
state_hub_workstream_id: "d6ed8fec-06a4-504d-8119-80575d87afbf"
|
||||
---
|
||||
|
||||
|
|
@ -149,3 +149,16 @@ captures and receiver evidence; Qonto T02 coordinates that input. Neither
|
|||
owner waits on Qonto T03 completion to supply its evidence. This records the
|
||||
existing commitment and requests no new scope or live action. The earlier
|
||||
provisional owner-return note is superseded for observer task identity only.
|
||||
|
||||
|
||||
## Concrete collector preparation — 2026-10-15
|
||||
|
||||
RAPP-QONTO-WP-0004 now owns isolated runtime collector implementation and actual
|
||||
release/receipts, replacing the missing runtime commitment. Source mapping is
|
||||
approved in docs/operator-runbook.md: one source heartbeat maps to one receiver
|
||||
audit-core.heartbeat covering audit.deny, not fanout. Original counters,instance
|
||||
and sequence retained; package binding is tenant:friendly:binky. Shared frame
|
||||
is3600s,receiver base wait7200,effective10800. Collector source/package43tests
|
||||
pass. T02 remains wait pending immutable release,credential custody/admission
|
||||
and actual accepted receipts; T03 waits independent KG-WP-0005-T03. No source
|
||||
fixture or prepared deployment closes either operational gate.
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue