[nyashahama]

Summary

• Adds a complete Phase 7 verification package with 6 scenario scripts covering load, reload, drain, DB-degradation, upstream-degradation, and dependency audits
• Implements reload-safety unit tests validating route binding enforcement and config preservation on rejection
• Adds upstream failure smoke test verifying bounded failure metrics are recorded
• Adds concurrent audit chain integrity test proving DB-backed audit writes preserve hash chain under concurrent load

Verification Scripts

All scripts write JSON summaries to guard-rail-engine/tmp/verification/<timestamp>/:

• load-allowed-and-blocked.sh - Sustained traffic on allowed and blocked paths with latency percentiles
• reload-under-traffic.sh - Valid and rejected reload drills during live traffic
• drain-under-load.sh - In-flight request drain validation
• db-degradation.sh - DB latency and unavailability drills
• upstream-degradation.sh - Upstream timeout and error response handling
• dependency-audits.sh - Rust and Node dependency security audits
• run-phase7-suite.sh - Orchestrates full suite in order

Tests Added

• reload::tests::test_apply_reload_candidate_rejects_unbound_tenant_route
• reload::tests::test_apply_reload_candidate_keeps_last_good_routes_on_rejection
• smoke_test::test_upstream_failure_path_records_bounded_failure_metrics
• audit_api_test::test_concurrent_audit_inserts_preserve_integrity

Acceptance Criteria Met

• Repeatable verification package under guard-rail-engine/scripts/verification/
• Operator-facing README under guard-rail-engine/deploy/verification/README.md
• Rust tests cover reload safety, bounded upstream failure, audit-chain concurrency
• Phase 7 suite writes machine-readable per-scenario JSON summaries
• cargo test passes (95 tests)
• Full verification suite passes against pilot deployment path

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
guard-rail	Ready	Preview, Comment	Apr 20, 2026 11:24pm