tegwick
b9349782f4
Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ec5-7e2b-7743-ac08-719e1b0f42e2
66 lines
2.2 KiB
YAML
66 lines
2.2 KiB
YAML
# Source-owned declaration for the qonto-assistant structured audit stream.
|
|
# The semantic shape follows the Taxonomy draft in
|
|
# kings-guard/specs/EmissionCadenceDeclaration.md. This repository owns the
|
|
# concrete emission claim even while the fleet-wide schema remains a draft.
|
|
|
|
audit_emission_cadence:
|
|
schema_version: "0.1"
|
|
source: qonto-assistant
|
|
stream_id: qonto-assistant.audit
|
|
transport: structured-stdout
|
|
instance_boundary: process
|
|
|
|
ordering:
|
|
instance_field: stream_instance_id
|
|
sequence_field: stream_sequence
|
|
sequence_starts_at: 1
|
|
gap: finding
|
|
reset: permitted-only-when-stream_instance_id-changes
|
|
|
|
event_classes:
|
|
audit.allow:
|
|
evidence_class: attributive
|
|
completeness_claimed: false
|
|
audit.deny:
|
|
evidence_class: load-bearing
|
|
form: heartbeat-or-reconciliation
|
|
rate_monitoring: forbidden
|
|
completeness_claimed: true
|
|
audit.heartbeat:
|
|
evidence_class: load-bearing
|
|
role: positive-liveness-and-reconciliation-claim
|
|
|
|
heartbeat:
|
|
event_class: audit.heartbeat
|
|
interval: PT24H
|
|
interval_config: QONTO_AUDIT_HEARTBEAT_INTERVAL_SECONDS
|
|
default_interval_seconds: 86400
|
|
lifecycle:
|
|
startup: required
|
|
periodic_while_process_active: required
|
|
shutdown: best-effort
|
|
quiet_assertion: nothing-to-report
|
|
active_instance_missing: finding
|
|
scale_to_zero_semantics: >
|
|
No periodic heartbeat is promised while no process instance exists.
|
|
Observers track each stream_instance_id from its startup heartbeat until
|
|
a shutdown heartbeat or expiry after a missing active-instance cadence.
|
|
|
|
reconciliation:
|
|
source_counts_field: source_transition_counts
|
|
window_counts_field: window_transition_counts
|
|
counted_classes:
|
|
- audit.allow
|
|
- audit.deny
|
|
snapshot_endpoint: /v1/audit/reconciliation
|
|
compare_observed: >
|
|
Count received request events by event_class and stream_instance_id, then
|
|
compare them with the heartbeat source counts and stream sequence.
|
|
divergence: finding
|
|
undrained_local: lag-not-divergence
|
|
persistence: process-local
|
|
|
|
event_context:
|
|
identity_binding_field: identity_binding
|
|
egress_destination_field: egress_destination
|
|
qonto_egress_destination: qonto-thirdparty-api
|