{
  "contract_version": "1.0.0",
  "reef_id": "reef-railiance",
  "subject": "rail-kubernetes",
  "readiness_state": "verified",
  "checked_at": "2026-08-20T23:55:06Z",
  "checks": {
    "compatibility": {
      "status": "pass",
      "evidence": [
        "declarations/reef.yaml",
        "bindings/rails.yaml",
        "../rail-kubernetes/declarations/rail.yaml",
        "../verification/rail-runtime-2026-08-21.json"
      ]
    },
    "capacity": {
      "status": "pass",
      "evidence": ["../verification/rail-runtime-2026-08-21.json"],
      "notes": "The only node is Ready with 4 CPU and 16377028Ki allocatable memory; production failure-domain risk remains open."
    },
    "ingress": {
      "status": "pass",
      "evidence": ["../verification/rail-runtime-2026-08-21.json"],
      "notes": "Traefik is the observed ingress class."
    },
    "network": {
      "status": "pass",
      "evidence": [
        "../verification/rail-runtime-2026-08-21.json",
        "../../../rapp-qonto/evidence/live/2026-07-29-railiance01.json"
      ],
      "notes": "NetworkPolicy objects are present and the Qonto binding has workload-level restricted-egress evidence."
    },
    "identity_and_secrets": {"status": "unknown", "evidence": []},
    "observability": {"status": "unknown", "evidence": []},
    "recovery": {"status": "unknown", "evidence": []},
    "failure_domain": {
      "status": "fail",
      "evidence": ["../verification/rail-runtime-2026-08-21.json"],
      "notes": "Current grouped reef has one Ready member carrying control-plane and etcd roles."
    }
  },
  "residual_risks": [
    {
      "risk": "Single declared server and shared Kubernetes control plane",
      "status": "open",
      "owner": "railiance-infra"
    }
  ]
}