docs(hcg-load-profile): Phase D D1 — load profile declaration (standards#99) by hyperpolymath · Pull Request #168 · hyperpolymath/boj-server

hyperpolymath · 2026-05-31T06:14:35Z

Summary

Lands docs/integration/gateway-load-profile.md — the Phase D D1 deliverable the integration plan prescribes by exact path (http-capability-gateway-plan.md § Phase D, D1).

The document names:

Production traffic baseline (§1) — the arrival rate, path mix, and connection profile BoJ's gnosis handler serves today. Operator-fillable !OWNER: markers cover the figures that must come from production telemetry; they gate Phase E §1.1 sign-off, not this PR's merge.
Gateway load profile target (§2) — throughput envelope (median × 1.5 headroom, peak × 1.2), per-request overhead budget (p50 < 1.5 ms, p95 < 3 ms, p99 < 5 ms, tighter than the ADR-0004 reference budget because the live policy has 28 rules vs the ADR's 100-rule reference), stealth-deny budget, and the weighted mTLS handshake formula (1/R) × cold + (1 − 1/R) × warm_per_request.
Measurement environment (§3) — ubuntu-latest GHA + Elixir 1.19 / OTP 28 + the 28-route example policy, pinned to match perf-regression.yml and perf-rebaseline.yml in the gateway repo so the Phase D-4 rebaseline ritual collects against a published reference.

The document is the denominator the gateway-side perf contract references as the absolute SLO — distinct from the perf-regression tolerance ratios in bench/baseline.json, which are regression-detection (catch a 30% p95 worsening), not absolute breach. Two independent guards, both rooted in this profile.

What this closes

Plan § Phase D acceptance criterion 1 ("Load profile document exists"). ✓
Sequences cleanly into the D2 deliverable (docs/integration/gateway-benchmarks.md) which lands once the gateway-side D-4 rebaseline ritual flips bench/baseline.json _status from "scaffold-placeholder" to "active". This PR's §4.1 names that handoff explicitly.
Updates the rollout runbook's Phase E §1.1 prereq matrix by giving D-2 / D-3 / D-4 their downstream consumer.

What this PR deliberately does NOT do

Fabricate production traffic numbers. The !OWNER: markers in §1 are deliberate; the document is the methodology, not the measurement. The plan acceptance criterion is that the document exists; the measurements are an operator action gated to Phase E §1.1.
Trigger the D-4 rebaseline workflow. That is workflow_dispatch on the gateway repo (perf-rebaseline.yml); the operator initiates it and reviews the resulting perf: rebaseline (standards#99) PR.
Touch bench/baseline.json _status. The flip from scaffold-placeholder → active is a maintainer judgement after seeing the spread of the collected numbers (per perf-contract.md § Baseline lifecycle).

Test plan

CI green (markdown-only PR; no test impact, no policy-file change).
Cross-links resolve: ADR-0004, plan, contract, rollout runbook, gateway-side perf-contract.md, gateway-side bench/ paths.
Policy rule count claim (§3.3, "28 routes") matches config/gateway-policy-boj-example.yaml (grep -cE '^ - path:' returns 28).
Runtime-version claims (§3.2, "Elixir 1.19 / OTP 28") match http-capability-gateway/.tool-versions and the setup-beam step in perf-rebaseline.yml.

Refs hyperpolymath/standards#91
Closes hyperpolymath/standards#99

🤖 Generated with Claude Code

Generated by Claude Code

Adds docs/integration/gateway-load-profile.md — the load profile declaration the plan §Phase D-D1 prescribes by exact path. Names the arrival rate, path mix, and connection profile BoJ's gnosis handler serves today (operator-fillable !OWNER: markers, since the production telemetry the rows depend on lives outside this repo); names the throughput envelope, per-request overhead budget, stealth-deny budget, and the weighted mTLS handshake formula the gateway must meet; pins the measurement environment (ubuntu-latest GHA + Elixir 1.19 / OTP 28 + the 28-route example policy) so the Phase D-4 rebaseline ritual collects against a published reference rather than ad-hoc local hardware. The document is the denominator the perf contract (gateway repo) references as the absolute SLO — distinct from the perf-regression tolerance ratios in bench/baseline.json, which are regression-detection, not absolute breach. Two independent guards, both rooted in this profile. Closes plan §Phase D acceptance criterion 1 (load profile document exists). Sequences cleanly into D2 (gateway-benchmarks.md) once the gateway-side D-4 rebaseline PR flips bench/baseline.json _status from "scaffold-placeholder" to "active". Updates the runbook's Phase E §1.1 gate by giving D-2 / D-3 / D-4 their downstream consumer. Refs hyperpolymath/standards#91 Closes hyperpolymath/standards#99 Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

hyperpolymath · 2026-05-31T06:59:33Z

Pre-merge note (not blocking your draft): the body reads Closes hyperpolymath/standards#99, but #99 (Phase D) shouldn't auto-close on this merge — D-1 (this load-profile doc) is one of four D-sub-items, and #99 must stay open until the D-4 baseline flip (bench/baseline.json _status scaffold-placeholder → active) arms the perf-regression gate. Suggest Closes #99 → Refs #99 before this is marked ready, to preserve the joint-close discipline. Channel state consolidated on standards#91. 👍

Generated by Claude Code

github-actions · 2026-05-31T12:42:04Z

🔍 Hypatia Security Scan

Findings: 217 issues detected

Severity	Count
🔴 Critical	16
🟠 High	127
🟡 Medium	74

⚠️ Action Required: Critical security issues found!

View findings

[
  {
    "reason": "Stale AI session file -- delete",
    "type": "stale",
    "file": "GEMINI.md",
    "action": "delete",
    "rule_module": "root_hygiene",
    "severity": "medium"
  },
  {
    "reason": "Action    if: always()\n        uses: actions/upload-artifact@ea165 needs attention",
    "type": "unpinned_action",
    "file": "e2e.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Action perpolymath/standards/.github/workflows/governance-reusable.yml@main\n needs attention",
    "type": "unpinned_action",
    "file": "governance.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in abi-drift.yml",
    "type": "missing_timeout_minutes",
    "file": "abi-drift.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in codeql.yml",
    "type": "missing_timeout_minutes",
    "file": "codeql.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in container-publish.yml",
    "type": "missing_timeout_minutes",
    "file": "container-publish.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "missing_timeout_minutes",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "missing_timeout_minutes",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "missing_timeout_minutes",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "missing_timeout_minutes",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  }
]

Powered by Hypatia Neurosymbolic CI/CD Intelligence

github-actions · 2026-05-31T22:06:43Z

🔍 Hypatia Security Scan

Findings: 217 issues detected

Severity	Count
🔴 Critical	16
🟠 High	127
🟡 Medium	74

⚠️ Action Required: Critical security issues found!

View findings

[
  {
    "reason": "Stale AI session file -- delete",
    "type": "stale",
    "file": "GEMINI.md",
    "action": "delete",
    "rule_module": "root_hygiene",
    "severity": "medium"
  },
  {
    "reason": "Action    if: always()\n        uses: actions/upload-artifact@ea165 needs attention",
    "type": "unpinned_action",
    "file": "e2e.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Action perpolymath/standards/.github/workflows/governance-reusable.yml@main\n needs attention",
    "type": "unpinned_action",
    "file": "governance.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in abi-drift.yml",
    "type": "missing_timeout_minutes",
    "file": "abi-drift.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in codeql.yml",
    "type": "missing_timeout_minutes",
    "file": "codeql.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in container-publish.yml",
    "type": "missing_timeout_minutes",
    "file": "container-publish.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "missing_timeout_minutes",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "missing_timeout_minutes",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "missing_timeout_minutes",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "missing_timeout_minutes",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  }
]

Powered by Hypatia Neurosymbolic CI/CD Intelligence

github-actions · 2026-06-01T01:31:14Z

🔍 Hypatia Security Scan

Findings: 217 issues detected

Severity	Count
🔴 Critical	16
🟠 High	127
🟡 Medium	74

⚠️ Action Required: Critical security issues found!

View findings

[
  {
    "reason": "Stale AI session file -- delete",
    "type": "stale",
    "file": "GEMINI.md",
    "action": "delete",
    "rule_module": "root_hygiene",
    "severity": "medium"
  },
  {
    "reason": "Action    if: always()\n        uses: actions/upload-artifact@ea165 needs attention",
    "type": "unpinned_action",
    "file": "e2e.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Action perpolymath/standards/.github/workflows/governance-reusable.yml@main\n needs attention",
    "type": "unpinned_action",
    "file": "governance.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in abi-drift.yml",
    "type": "missing_timeout_minutes",
    "file": "abi-drift.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in codeql.yml",
    "type": "missing_timeout_minutes",
    "file": "codeql.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in container-publish.yml",
    "type": "missing_timeout_minutes",
    "file": "container-publish.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "missing_timeout_minutes",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "missing_timeout_minutes",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "missing_timeout_minutes",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "missing_timeout_minutes",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  }
]

Powered by Hypatia Neurosymbolic CI/CD Intelligence

…ards#91 / #100) Refreshes docs/integration/hcg-tier2-rollout-runbook.md from v0.1 (draft, 2026-05-20, pre Phase-D) to v0.2 reflecting the current state of the single-lane channel rooted at standards#91: - §1.1 Phase D deliverables: tick D-1..D-3 + D-4 bootstrap with http-capability-gateway PR refs (#12 / #14 / #22 / #26 / #30) and the boj-server D-1 load-profile (#168) that joint-closed standards#99 on 2026-06-01. The one remaining open item is the owner-driven perf-rebaseline workflow dispatch + `_status: scaffold-placeholder -> active` flip; called out explicitly rather than left as a stale unchecked checkbox. - §1.4 BoJ-side prereqs: tick the three loopback-bind layers (#130 / #131 / #132), the Phase C TrustPolicy clause (#106), the NetworkPolicy (#173), and the SSE-route policy coverage (#165). The Trustfile `tier_2_gateway.status: PENDING` line stays intentionally unchecked - it's the §6.4 last-action target. - §1.5 Gateway-side prereqs: tick the new `container/gateway-deploy.k9.ncl` from http-capability-gateway#38 (2026-06-03), record what stays PLACEHOLDER until cerro-torre signing runs, and expand the smoke-test entry with the concrete allow/deny sequence boj-server#165 deferred. - Header banner: replace the stale "Phase D has merged the scaffold only" Phase-D-dependency note with a current-state summary, bump version 0.1 -> 0.2, date 2026-05-20 -> 2026-06-08. - CHANGELOG.md: Documentation entry under [Unreleased] summarising the refresh. No code, infrastructure, or runtime behaviour changes. The runbook is the operator-facing source of truth for what's gating the next Phase E owner action; the drift it had was making "what's still open" harder to read at a glance. Refs hyperpolymath/standards#91 Refs hyperpolymath/standards#100 Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

hyperpolymath marked this pull request as ready for review May 31, 2026 10:06

hyperpolymath enabled auto-merge (squash) May 31, 2026 10:06

Merge branch 'main' into phase-d-load-profile

fd0c9f3

Merge branch 'main' into phase-d-load-profile

109d54d

hyperpolymath disabled auto-merge June 1, 2026 01:39

hyperpolymath merged commit 0102b70 into main Jun 1, 2026
22 of 23 checks passed

hyperpolymath deleted the phase-d-load-profile branch June 1, 2026 01:39

hyperpolymath mentioned this pull request Jun 8, 2026

docs(hcg-runbook): refresh rollout runbook v0.1→v0.2 after Phase D close (standards#100) #207

Merged

4 tasks

hyperpolymath mentioned this pull request Jun 10, 2026

feat(scripts): hcg-policy-smoke.sh — §1.5 operator pre-check (Phase E) #210

Draft

7 tasks

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

docs(hcg-load-profile): Phase D D1 — load profile declaration (standards#99)#168

docs(hcg-load-profile): Phase D D1 — load profile declaration (standards#99)#168
hyperpolymath merged 3 commits into
mainfrom
phase-d-load-profile

hyperpolymath commented May 31, 2026

Uh oh!

hyperpolymath commented May 31, 2026

Uh oh!

github-actions Bot commented May 31, 2026

Uh oh!

github-actions Bot commented May 31, 2026

Uh oh!

github-actions Bot commented Jun 1, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

hyperpolymath commented May 31, 2026

Summary

What this closes

What this PR deliberately does NOT do

Test plan

Uh oh!

hyperpolymath commented May 31, 2026

Uh oh!

github-actions Bot commented May 31, 2026

🔍 Hypatia Security Scan

Uh oh!

github-actions Bot commented May 31, 2026

🔍 Hypatia Security Scan

Uh oh!

github-actions Bot commented Jun 1, 2026

🔍 Hypatia Security Scan

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant