--- id: RTEL-WP-0002 type: workplan title: "Provide the Q2 receiving contract and prove signal delivery" domain: financials repo: railiance-telemetry status: active owner: codex created: "2026-09-06" updated: "2026-09-06" related: - RTELE-WP-0001 - RPF-WP-0036 state_hub_workstream_id: "08a5db92-7293-50d3-b589-55287b9850b3" --- Bounded initial Q2 reference implementation for platform assurance. Producer meaning stays in S3; deployable monitoring packaging stays with a selected package owner. No public listener, credential custody or incident workflow. ## Define metadata-only receiving and retention contract ```task id: RTEL-WP-0002-T01 status: done priority: high state_hub_task_id: "ac73553d-5bd4-5dff-8307-95a29bffe474" ``` Implemented `docs/signal-contract.md` and a pinned platform stream contract. Exact identities/signals, finite states, payload limit, freshness, replay, proposed retention and local recipient semantics are explicit. Live acceptance of the proposed budgets and recipient remains T04, not implied by this schema. ## Implement durable receipt and operator inbox reference ```task id: RTEL-WP-0002-T02 status: done priority: high state_hub_task_id: "dacc9e2d-9321-5d39-afc4-88326f5c6930" ``` SQLite acceptance and notices commit together; strict rejection, duplicate idempotence, explicit acknowledgments and bounded retention are tested. This is a local private CLI implementation; acceptance says local-inbox-only. ## Prove platform adaptation and absent-emission semantics locally ```task id: RTEL-WP-0002-T03 status: done priority: high state_hub_task_id: "a8ed3588-4240-5278-b03f-04c3237a52f9" ``` Adapter preserves producer evaluation time and classifications. Tests prove failure survives receiver restart, inbox addressing/acknowledgment, never-seen and stopped-producer detection, replay refusal, wrong-scope rejection and retention of unacknowledged evidence. Local simulated-time tests establish implementation behavior, not actual scheduled notification delivery. ## Accept private runtime and controlled end-to-end delivery ```task id: RTEL-WP-0002-T04 status: wait priority: high state_hub_task_id: "ceb14fdc-b3fd-5a22-870d-d835a9d52055" ``` Choose package/runtime execution owner with cluster/activity-core; confirm the operator recipient, producer/watchdog cadence, retention/storage/backup and private authenticated access. Install only through accepted authority. Prove a controlled failure and stopped producer reach and are acknowledged by the named operator, and receiver/scheduler failure is independently detectable. Preserve receipts across restart; demonstrate capacity/retention handling. Only these receipts can satisfy RPF-WP-0036-T04. No package repo name or deployment grant is invented here. This live task holds the residual explicitly.