reef-railiance/evidence/admission/rail-knative-baseline.json

{
  "contract_version": "1.0.0",
  "reef_id": "reef-railiance",
  "subject": "rail-knative",
  "readiness_state": "verified",
  "checked_at": "2026-07-26T18:00:00Z",
  "checks": {
    "compatibility": {
      "status": "pass",
      "evidence": [
        "../rail-knative/declarations/rail.yaml",
        "../rail-kubernetes/declarations/rail.yaml"
      ],
      "notes": "Knative 1.22 minimum Kubernetes 1.34; observed Kubernetes 1.35.1."
    },
    "capacity": {
      "status": "pass",
      "evidence": ["../preflight/knative-2026-07-26-success.json"],
      "notes": "Installation verification passed; 4 CPU remains below the generic 6 CPU recommendation."
    },
    "ingress": {"status": "pass", "evidence": ["../verification/rail-knative-v1.22.0-2026-07-26.json"], "notes": "Kourier is verified ClusterIP-only; public exposure is disabled."},
    "network": {"status": "pass", "evidence": ["../verification/rail-knative-v1.22.0-2026-07-26.json"]},
    "identity_and_secrets": {"status": "unknown", "evidence": []},
    "observability": {"status": "pass", "evidence": ["../verification/rail-knative-v1.22.0-2026-07-26.json"], "notes": "Control-plane availability and lifecycle observations are recorded."},
    "recovery": {"status": "unknown", "evidence": []},
    "failure_domain": {
      "status": "fail",
      "evidence": ["../preflight/knative-2026-07-26-success.json"],
      "notes": "Production approval is rejected while Knative shares the single-member control plane."
    }
  },
  "residual_risks": [
    {
      "risk": "Single server and shared control plane for a critical bank-connected workload",
      "status": "open",
      "owner": "railiance-infra"
      ,"decision": "Not accepted for production; verified non-production rail operation may continue."
    }
  ]
}