reef-railiance/evidence/admission/rail-kubernetes-baseline.json
2026-08-21 02:01:49 +02:00

51 lines
1.7 KiB
JSON

{
"contract_version": "1.0.0",
"reef_id": "reef-railiance",
"subject": "rail-kubernetes",
"readiness_state": "verified",
"checked_at": "2026-08-20T23:55:06Z",
"checks": {
"compatibility": {
"status": "pass",
"evidence": [
"declarations/reef.yaml",
"bindings/rails.yaml",
"../rail-kubernetes/declarations/rail.yaml",
"../verification/rail-runtime-2026-08-21.json"
]
},
"capacity": {
"status": "pass",
"evidence": ["../verification/rail-runtime-2026-08-21.json"],
"notes": "The only node is Ready with 4 CPU and 16377028Ki allocatable memory; production failure-domain risk remains open."
},
"ingress": {
"status": "pass",
"evidence": ["../verification/rail-runtime-2026-08-21.json"],
"notes": "Traefik is the observed ingress class."
},
"network": {
"status": "pass",
"evidence": [
"../verification/rail-runtime-2026-08-21.json",
"../../../rapp-qonto/evidence/live/2026-07-29-railiance01.json"
],
"notes": "NetworkPolicy objects are present and the Qonto binding has workload-level restricted-egress evidence."
},
"identity_and_secrets": {"status": "unknown", "evidence": []},
"observability": {"status": "unknown", "evidence": []},
"recovery": {"status": "unknown", "evidence": []},
"failure_domain": {
"status": "fail",
"evidence": ["../verification/rail-runtime-2026-08-21.json"],
"notes": "Current grouped reef has one Ready member carrying control-plane and etcd roles."
}
},
"residual_risks": [
{
"risk": "Single declared server and shared Kubernetes control plane",
"status": "open",
"owner": "railiance-infra"
}
]
}