71 lines
2.4 KiB
JSON
71 lines
2.4 KiB
JSON
{
|
|
"contract_version": "1.0.0",
|
|
"reef_id": "reef-railiance",
|
|
"subject": "rail-knative",
|
|
"readiness_state": "verified",
|
|
"checked_at": "2026-08-20T23:55:06Z",
|
|
"checks": {
|
|
"compatibility": {
|
|
"status": "pass",
|
|
"evidence": [
|
|
"../rail-knative/declarations/rail.yaml",
|
|
"../rail-kubernetes/declarations/rail.yaml",
|
|
"../verification/rail-runtime-2026-08-21.json"
|
|
],
|
|
"notes": "Knative 1.22 minimum Kubernetes 1.34; observed Kubernetes 1.35.1."
|
|
},
|
|
"capacity": {
|
|
"status": "pass",
|
|
"evidence": ["../verification/rail-runtime-2026-08-21.json"],
|
|
"notes": "All Knative control-plane deployments are available; 4 CPU remains below the generic 6 CPU recommendation."
|
|
},
|
|
"ingress": {
|
|
"status": "pass",
|
|
"evidence": [
|
|
"../verification/rail-knative-v1.22.0-2026-07-26.json",
|
|
"../verification/rail-runtime-2026-08-21.json"
|
|
],
|
|
"notes": "Kourier remains ClusterIP-only; public exposure is disabled."
|
|
},
|
|
"network": {
|
|
"status": "pass",
|
|
"evidence": [
|
|
"../verification/rail-knative-v1.22.0-2026-07-26.json",
|
|
"../verification/rail-runtime-2026-08-21.json",
|
|
"../../../rapp-qonto/evidence/live/2026-07-29-railiance01.json"
|
|
]
|
|
},
|
|
"identity_and_secrets": {
|
|
"status": "pass",
|
|
"evidence": ["../../../rapp-qonto/evidence/live/2026-07-29-railiance01.json"]
|
|
},
|
|
"observability": {
|
|
"status": "pass",
|
|
"evidence": [
|
|
"../verification/rail-knative-v1.22.0-2026-07-26.json",
|
|
"../verification/rail-runtime-2026-08-21.json"
|
|
],
|
|
"notes": "Control-plane availability and lifecycle observations are recorded."
|
|
},
|
|
"recovery": {
|
|
"status": "pass",
|
|
"evidence": [
|
|
"../verification/rail-knative-v1.22.0-2026-07-26.json",
|
|
"../../../rapp-qonto/evidence/live/2026-07-29-railiance01.json"
|
|
]
|
|
},
|
|
"failure_domain": {
|
|
"status": "fail",
|
|
"evidence": ["../verification/rail-runtime-2026-08-21.json"],
|
|
"notes": "Production approval is rejected while Knative shares the single-member control plane."
|
|
}
|
|
},
|
|
"residual_risks": [
|
|
{
|
|
"risk": "Single server and shared control plane for a critical bank-connected workload",
|
|
"status": "open",
|
|
"owner": "railiance-infra",
|
|
"decision": "Not accepted for production; verified non-production rail operation may continue."
|
|
}
|
|
]
|
|
}
|