tegwick
a32c0f1541
Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883
88 lines
3.3 KiB
Markdown
88 lines
3.3 KiB
Markdown
---
|
|
id: RTEL-WP-0002
|
|
type: workplan
|
|
title: "Provide the Q2 receiving contract and prove signal delivery"
|
|
domain: financials
|
|
repo: railiance-telemetry
|
|
status: active
|
|
owner: codex
|
|
created: "2026-09-06"
|
|
updated: "2026-09-06"
|
|
related:
|
|
- RTELE-WP-0001
|
|
- RPF-WP-0036
|
|
state_hub_workstream_id: "08a5db92-7293-50d3-b589-55287b9850b3"
|
|
---
|
|
|
|
Bounded initial Q2 reference implementation for platform assurance. Producer
|
|
meaning stays in S3; deployable monitoring packaging stays with a selected
|
|
package owner. No public listener, credential custody or incident workflow.
|
|
|
|
## Define metadata-only receiving and retention contract
|
|
|
|
```task
|
|
id: RTEL-WP-0002-T01
|
|
status: done
|
|
priority: high
|
|
state_hub_task_id: "ac73553d-5bd4-5dff-8307-95a29bffe474"
|
|
```
|
|
|
|
Implemented `docs/signal-contract.md` and a pinned platform stream contract.
|
|
Exact identities/signals, finite states, payload limit, freshness, replay,
|
|
proposed retention and local recipient semantics are explicit. Live acceptance
|
|
of the proposed budgets and recipient remains T04, not implied by this schema.
|
|
|
|
## Implement durable receipt and operator inbox reference
|
|
|
|
```task
|
|
id: RTEL-WP-0002-T02
|
|
status: done
|
|
priority: high
|
|
state_hub_task_id: "dacc9e2d-9321-5d39-afc4-88326f5c6930"
|
|
```
|
|
|
|
SQLite acceptance and notices commit together; strict rejection, duplicate
|
|
idempotence, explicit acknowledgments and bounded retention are tested. This
|
|
is a local private CLI implementation; acceptance says local-inbox-only.
|
|
|
|
## Prove platform adaptation and absent-emission semantics locally
|
|
|
|
```task
|
|
id: RTEL-WP-0002-T03
|
|
status: done
|
|
priority: high
|
|
state_hub_task_id: "a8ed3588-4240-5278-b03f-04c3237a52f9"
|
|
```
|
|
|
|
Adapter preserves producer evaluation time and classifications. Tests prove
|
|
failure survives receiver restart, inbox addressing/acknowledgment, never-seen
|
|
and stopped-producer detection, replay refusal, wrong-scope rejection and
|
|
retention of unacknowledged evidence. Local simulated-time tests establish
|
|
implementation behavior, not actual scheduled notification delivery.
|
|
|
|
## Accept private runtime and controlled end-to-end delivery
|
|
|
|
```task
|
|
id: RTEL-WP-0002-T04
|
|
status: wait
|
|
priority: high
|
|
state_hub_task_id: "ceb14fdc-b3fd-5a22-870d-d835a9d52055"
|
|
```
|
|
|
|
Choose package/runtime execution owner with cluster/activity-core; confirm the
|
|
operator recipient, producer/watchdog cadence, retention/storage/backup and
|
|
private authenticated access. Install only through accepted authority. Prove a
|
|
controlled failure and stopped producer reach and are acknowledged by the named
|
|
operator, and receiver/scheduler failure is independently detectable. Preserve
|
|
receipts across restart; demonstrate capacity/retention handling. Only these
|
|
receipts can satisfy RPF-WP-0036-T04. No package repo name or deployment grant is
|
|
invented here. This live task holds the residual explicitly.
|
|
|
|
T04 implementation follow-up, September 6: added deterministic runtime jobs,
|
|
restart-stable report ingestion, an independently invocable watchdog-age probe,
|
|
and verified SQLite snapshots preserving pending notices. Added disabled domain
|
|
activity definitions and executor task contracts following activity-core's
|
|
recurring-automations playbook. Native parser accepts both; 14 tests pass.
|
|
Recipient/channel clarification is pending. Runtime/profile and failure-domain
|
|
binding, off-host custody and actual notification acknowledgment remain unproven;
|
|
T04 remains wait, with no live schedule enabled.
|