Review runtime collector mapping and bind delivery owner commitment

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2
This commit is contained in:
tegwick 2026-10-15 21:19:12 +02:00
parent 5eb7e86f7a
commit 6c690b0b84
2 changed files with 30 additions and 1 deletions

View file

@ -284,3 +284,19 @@ This source update does not deploy rapp-qonto or create its missing collector.
QONTO-WP-0006-T02/T03 and AUDIT-WP-0013-T05 still hold sender/delivery and
independent observation acceptance. Existing bank credential TTL, policy,
identity, rate limits and process-local counter limitations are unchanged.
## Runtime-owned collector mapping (2026-10-15)
RAPP-QONTO-WP-0004 supplies the concrete structured-stdout sender. Source owner
mapping preserves audit.allow/audit.deny and maps each audit.heartbeat one-to-one
to audit-core.heartbeat with data.class=audit.deny, retaining original event_class,
instance,sequence,source/window counters. No three-way fanout is introduced.
This reflects the source heartbeat assertion about deny transitions; it does not
assert no allow transitions. Receiver heartbeat_classes is audit.deny:7200 for
source frame3600 and effective grace10800. Mixed sender admission is load-bearing;
allow retains attributive semantics in the canonical inventory. Package-declared
tenant:friendly:binky is the bank-resource envelope scope; request tenant_id stays
untrusted claim data. Exact sender/source,deterministic retry IDs,retry/lag semantics
and limitations are documented in rapp-qonto/docs/audit-collector.md. The source
logger remains unchanged. No delivery/independent acceptance is claimed here.

View file

@ -8,7 +8,7 @@ status: blocked
owner: codex
topic_slug: qonto-canonical-cadence-adoption
created: "2026-10-03"
updated: "2026-10-04"
updated: "2026-10-15"
state_hub_workstream_id: "d6ed8fec-06a4-504d-8119-80575d87afbf"
---
@ -149,3 +149,16 @@ captures and receiver evidence; Qonto T02 coordinates that input. Neither
owner waits on Qonto T03 completion to supply its evidence. This records the
existing commitment and requests no new scope or live action. The earlier
provisional owner-return note is superseded for observer task identity only.
## Concrete collector preparation — 2026-10-15
RAPP-QONTO-WP-0004 now owns isolated runtime collector implementation and actual
release/receipts, replacing the missing runtime commitment. Source mapping is
approved in docs/operator-runbook.md: one source heartbeat maps to one receiver
audit-core.heartbeat covering audit.deny, not fanout. Original counters,instance
and sequence retained; package binding is tenant:friendly:binky. Shared frame
is3600s,receiver base wait7200,effective10800. Collector source/package43tests
pass. T02 remains wait pending immutable release,credential custody/admission
and actual accepted receipts; T03 waits independent KG-WP-0005-T03. No source
fixture or prepared deployment closes either operational gate.