From 6c690b0b848b1cdc64fd3a2428ced8aae3255802 Mon Sep 17 00:00:00 2001 From: tegwick Date: Thu, 15 Oct 2026 21:19:12 +0200 Subject: [PATCH] Review runtime collector mapping and bind delivery owner commitment Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2 --- docs/operator-runbook.md | 16 ++++++++++++++++ .../QONTO-WP-0006-canonical-cadence-adoption.md | 15 ++++++++++++++- 2 files changed, 30 insertions(+), 1 deletion(-) diff --git a/docs/operator-runbook.md b/docs/operator-runbook.md index 7fb7b2a..45e64aa 100644 --- a/docs/operator-runbook.md +++ b/docs/operator-runbook.md @@ -284,3 +284,19 @@ This source update does not deploy rapp-qonto or create its missing collector. QONTO-WP-0006-T02/T03 and AUDIT-WP-0013-T05 still hold sender/delivery and independent observation acceptance. Existing bank credential TTL, policy, identity, rate limits and process-local counter limitations are unchanged. + + +## Runtime-owned collector mapping (2026-10-15) + +RAPP-QONTO-WP-0004 supplies the concrete structured-stdout sender. Source owner +mapping preserves audit.allow/audit.deny and maps each audit.heartbeat one-to-one +to audit-core.heartbeat with data.class=audit.deny, retaining original event_class, +instance,sequence,source/window counters. No three-way fanout is introduced. +This reflects the source heartbeat assertion about deny transitions; it does not +assert no allow transitions. Receiver heartbeat_classes is audit.deny:7200 for +source frame3600 and effective grace10800. Mixed sender admission is load-bearing; +allow retains attributive semantics in the canonical inventory. Package-declared +tenant:friendly:binky is the bank-resource envelope scope; request tenant_id stays +untrusted claim data. Exact sender/source,deterministic retry IDs,retry/lag semantics +and limitations are documented in rapp-qonto/docs/audit-collector.md. The source +logger remains unchanged. No delivery/independent acceptance is claimed here. diff --git a/workplans/QONTO-WP-0006-canonical-cadence-adoption.md b/workplans/QONTO-WP-0006-canonical-cadence-adoption.md index 0bca44b..2e8d06d 100644 --- a/workplans/QONTO-WP-0006-canonical-cadence-adoption.md +++ b/workplans/QONTO-WP-0006-canonical-cadence-adoption.md @@ -8,7 +8,7 @@ status: blocked owner: codex topic_slug: qonto-canonical-cadence-adoption created: "2026-10-03" -updated: "2026-10-04" +updated: "2026-10-15" state_hub_workstream_id: "d6ed8fec-06a4-504d-8119-80575d87afbf" --- @@ -149,3 +149,16 @@ captures and receiver evidence; Qonto T02 coordinates that input. Neither owner waits on Qonto T03 completion to supply its evidence. This records the existing commitment and requests no new scope or live action. The earlier provisional owner-return note is superseded for observer task identity only. + + +## Concrete collector preparation — 2026-10-15 + +RAPP-QONTO-WP-0004 now owns isolated runtime collector implementation and actual +release/receipts, replacing the missing runtime commitment. Source mapping is +approved in docs/operator-runbook.md: one source heartbeat maps to one receiver +audit-core.heartbeat covering audit.deny, not fanout. Original counters,instance +and sequence retained; package binding is tenant:friendly:binky. Shared frame +is3600s,receiver base wait7200,effective10800. Collector source/package43tests +pass. T02 remains wait pending immutable release,credential custody/admission +and actual accepted receipts; T03 waits independent KG-WP-0005-T03. No source +fixture or prepared deployment closes either operational gate.