Expose protected operability metrics
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s

This commit is contained in:
tegwick 2026-07-29 23:52:06 +02:00
parent a336f594e7
commit 2bcda7f26f
3 changed files with 56 additions and 0 deletions

View file

@ -14,6 +14,15 @@ Use `structured_log_context(correlation_id=..., tenant=..., actor=...)` as the
base log envelope. Adapters should add transport details around that envelope
without dropping correlation id or tenant.
## Metrics
`GET /metrics` exposes Prometheus text containing the binary
`user_engine_ready` dependency gauge and bounded aggregate
`user_engine_records{kind=...}` counters. It does not expose identity values,
emails, tenant names, correlation identifiers, credential material, or raw
outbox payloads. Keep this route cluster-internal and authorize ingress only
from the selected monitoring workload.
## Outbox Drain
`outbox_diagnostics()` reports pending event count, event type counts, and the