System Reconstruction Coverage Matrix — Deployment, Environment, Observability And Recovery¶
- Status:
CURRENT DEPLOYMENT/RECOVERY COVERAGE COMPANION - Parent register:
SYSTEM_RECONSTRUCTION_COVERAGE_MATRIX.md - Source authority:
PLATFORM_DEPLOYMENT_ENVIRONMENT_OBSERVABILITY_RECOVERY_SOURCE_AUTHORITY.md - Rebuild packet:
PLATFORM_DEPLOYMENT_ENVIRONMENT_OBSERVABILITY_RECOVERY_REBUILD_PACKET.md - Source baseline:
qa/master@8e6614514b6e330f7efca60da68a162bb1de50db - Important: labels below describe documentation and evidence gaps, not Phase status, deployment authorization or Production readiness.
Coverage vocabulary¶
COMPLETE INPUT
PARTIAL
MAPPED
MISSING
TARGET DESIGN
RUNTIME EVIDENCE REQUIRED
EXTERNAL EVIDENCE REQUIRED
NOT APPLICABLE
Dimensions:
PDT Product/operational outcome
ROL Roles/authority
PRC Process/procedure
STA State/lifecycle
DAT Data/identity/configuration
INT Query/command/error interfaces
EFF External/service/infrastructure effects
UIX Operator/support UI
OPS Runbook/recovery
WIK Wiki projection/publication
MIG Migration/rollback/caller-zero
VER Verification/environment evidence
1. Family Coverage Summary¶
| Capability | PDT | ROL | PRC | STA | DAT | INT | EFF | UIX | OPS | WIK | MIG | VER | Primary remaining work | |---|---|---|---|---|---|---|---|---|---|---|---|---|---|---| | Source release and deployment identity | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | COMPLETE INPUT | COMPLETE INPUT | COMPLETE INPUT | PARTIAL | TARGET DESIGN | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | RUNTIME EVIDENCE REQUIRED | installed auto-pull, observed service identities, config/schema manifest owner | | PHP Web/API environment | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | PARTIAL | PARTIAL | MAPPED | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | RUNTIME EVIDENCE REQUIRED | current service generation, effective env/config, app readiness and current DB/file state | | AI Voice Gateway deployment | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | COMPLETE INPUT | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | MAPPED | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | RUNTIME EVIDENCE REQUIRED | installed/enabled service, build/release parity, dependency readiness and outbox state | | Scheduler/timer/cron inventory | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | TARGET DESIGN | COMPLETE INPUT | COMPLETE INPUT | COMPLETE INPUT | TARGET DESIGN | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | RUNTIME EVIDENCE REQUIRED | installed definitions, exact schedules, last-success/child results, disable/resume owner | | Logs and request telemetry | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | COMPLETE INPUT | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | RUNTIME EVIDENCE REQUIRED | actual storage, rotation/capacity/collector, retention and support access | | Metrics/traces/alerts | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | TARGET DESIGN | COMPLETE INPUT | TARGET DESIGN | TARGET DESIGN | TARGET DESIGN | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | MISSING | platform choice, SLI/SLO baseline, thresholds, alert owner/escalation | | Application liveness/readiness | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | COMPLETE INPUT | COMPLETE INPUT | COMPLETE INPUT | PARTIAL | TARGET DESIGN | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | MISSING | PHP/app endpoints, safe dependency checks, instance/release/config/schema identity | | DB backup/PITR | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | TARGET DESIGN | COMPLETE INPUT | COMPLETE INPUT | EXTERNAL EVIDENCE REQUIRED | TARGET DESIGN | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | EXTERNAL EVIDENCE REQUIRED | current RDS/snapshot/PITR/encryption/retention/restore evidence | | Archive family restore | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | COMPLETE INPUT | COMPLETE INPUT | COMPLETE INPUT | COMPLETE INPUT | MAPPED | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | PARTIAL | keep separate from DR; production scope/rehearsal evidence per family | | File/object backup and restore | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | TARGET DESIGN | COMPLETE INPUT | COMPLETE INPUT | EXTERNAL EVIDENCE REQUIRED | TARGET DESIGN | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | EXTERNAL EVIDENCE REQUIRED | actual EFS/S3 backend/versioning/backup/inventory/restore and DB-object consistency | | Config and credential recovery | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | TARGET DESIGN | COMPLETE INPUT | COMPLETE INPUT | EXTERNAL EVIDENCE REQUIRED | TARGET DESIGN | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | EXTERNAL EVIDENCE REQUIRED | config release owner, secret recovery/rotation, OAuth reauthorization and readback | | Complete backup set | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | COMPLETE INPUT | COMPLETE INPUT | COMPLETE INPUT | TARGET DESIGN | TARGET DESIGN | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | MISSING | component manifest, checksum, mandatory coverage, retention and verification owner | | Isolated restore rehearsal | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | COMPLETE INPUT | COMPLETE INPUT | COMPLETE INPUT | TARGET DESIGN | TARGET DESIGN | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | MISSING | approved isolated target, complete component restore, reconciliation, canary and cleanup | | Disaster recovery/failback | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | COMPLETE INPUT | COMPLETE INPUT | COMPLETE INPUT | TARGET DESIGN | TARGET DESIGN | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | MISSING | incident authority, recovery infrastructure, provider/callback routing, measured rehearsal | | Shared/Dedicated parity | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | TARGET DESIGN | COMPLETE INPUT | COMPLETE INPUT | TARGET DESIGN | TARGET DESIGN | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | RUNTIME EVIDENCE REQUIRED | dedicated inventory/rehearsal, portable identity, backup/restore/provider ownership | | React/Next.js/worker deployment migration | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | COMPLETE INPUT | COMPLETE INPUT | COMPLETE INPUT | TARGET DESIGN | TARGET DESIGN | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | MISSING | activated service wave, artifact identity, readiness, one-writer/callback cutover and caller-zero |
2. Current Topology Detail¶
| Dimension | Result | Current input | Gap to close |
|---|---|---|---|
| PDT | COMPLETE INPUT | PHP web/API, MySQL, files, providers, optional Control Tower, separate voice gateway | environment owner acceptance |
| ROL | PARTIAL | release/deployment/DB/provider owners implied by runbooks | explicit RACI for release, service, DB, file, credential, DR and canary |
| PRC | COMPLETE INPUT | release, environment, archive and provider recovery procedures | current installed deployment procedure evidence |
| STA | PARTIAL | Git/source/service/effect states separated in packet | runtime/service/scheduler state query implementation |
| DAT | COMPLETE INPUT | source SHA, deployment/config/schema/service identities | accepted release manifest owner/schema |
| INT | COMPLETE INPUT | target identity/health/dependency queries | current adapters and safe public response policy |
| EFF | PARTIAL | master-triggered pull, systemd gateway/timer definitions | installed/enabled/runtime state and exact auto-pull mechanism |
| UIX | TARGET DESIGN | support/deployment diagnostics proposed | current/target operator surface owner |
| OPS | COMPLETE INPUT | health/rollback/restore Runbook | environment rehearsal and owner review |
| WIK | PARTIAL | proposed platform operations topics | current Wiki read/publication/role review |
| MIG | COMPLETE INPUT | PHP→Next.js/worker and Shared/Dedicated constraints | activated cohort and one-writer evidence |
| VER | RUNTIME EVIDENCE REQUIRED | source/runbook only | current server/service/DB/file/scheduler/provider evidence |
3. Release Identity Gaps¶
| Item | Current source state | Required target/evidence |
|---|---|---|
| remote release | qa/master Git refs |
exact approved range and remote readback |
| deployed worktree | auto-pull contract, implementation absent from repo | observed deployed SHA and pull attempt/result |
| PHP process generation | systemd/PHP runbook | process start/reload identity |
| Next.js/worker artifact | not current | artifact digest and independent runtime identity |
| Voice Gateway artifact | source and unit present | observed build SHA/service generation |
| config release | external env/tenant config, no universal release ID | immutable release/ref and effective readback |
| schema release | migration/task-specific | explicit compatibility version and applied evidence |
| tenant/deployment mapping | optional Control Tower metadata | published/applied mapping readback |
| drift | manual comparison | safe current intended-vs-observed query/alert |
4. Health And Readiness Gaps¶
| Component | Current evidence | Required next evidence/design |
|---|---|---|
| Apache/PHP | process/page/login/manual API checks | public liveness, bounded readiness, release/config/schema identity |
| Database | application connection and explicit identity query | readiness contract, failover/backup state and alerting |
| File storage | per-object operations | restricted dependency state, capacity/readability/backup evidence |
| Voice Gateway | /healthz process/enabled |
provider/tool/event/outbox/config readiness without live side effect |
| Scheduler | source definition or invocation output | installed/enabled/last-success/child-result inventory |
| Providers | provider-specific current tools | safe availability/reference state and callback lag, not live create probes |
| Control Tower | optional registry/status | applied deployment/config drift evidence; no request-time dependency |
5. Observability Gaps¶
| Concern | Current source | Coverage | Required next work |
|---|---|---|---|
| request IDs/page views | API/PHP JSONL | MAPPED | cross-service propagation and deployment identity |
| page/API latency | page report and page-api JSONL | MAPPED | actual storage/volume, metrics aggregation and sampled interpretation |
| mutation/error evidence | KJDatabase/API JSONL | MAPPED | centralized retention/access and source/audit separation |
| PHP/service logs | filesystem/error log/journald | PARTIAL | collector, rotation, capacity alerts and instance/release labels |
| provider metrics | provider-specific local states/logs | PARTIAL | shared presentation without generic authority |
| scheduler metrics | not centralized | MISSING | last run/success/failure/lag/owner |
| backup metrics | not centralized | MISSING | backup age/coverage/failure/restore age |
| traces | not established | MISSING | platform decision and safe attributes |
| SLOs/alerts | not accepted | MISSING | measured baseline, threshold/window/owner/runbook |
6. Backup And Restore Gaps¶
| Component | Current known state | Recovery status | Blocking unknown |
|---|---|---|---|
MySQL prod |
runtime DB | UNKNOWN | snapshot/PITR/retention/encryption/restore owner |
prod_archive |
archive/restore family implementation | PARTIAL | full current scope and DR relationship |
T_FILE metadata |
DB state | follows DB restore | consistency with object generation |
| EFS/S3 objects | runtime supports both | UNKNOWN | actual backend, versioning/backup/cross-region/inventory |
/etc/ctc/prod.env |
external production env | UNKNOWN | secure version/recovery path |
| Gmail credentials/token store | external files/tokens | UNKNOWN | restore versus rotate/reauthorize policy |
| voice gateway env/outbox | external env + host-local state | UNKNOWN | backup/host replacement/failover policy |
| JSONL logs | preferred /var/log/ctc |
UNKNOWN | retention/backup/collector |
| transition/domain audit | DB/domain specific | PARTIAL | current DB activation, retention and restore integration |
| Control Tower metadata | optional separate DB | UNKNOWN | backup/restore/registry reconstruction |
| provider objects | external providers | reconciliation only | object search/reference/callback recovery |
7. RPO/RTO Coverage¶
Approved complete-system RPO: MISSING
Approved complete-system RTO: MISSING
Measured restore RPO: MISSING
Measured restore RTO: MISSING
Restore rehearsal cadence: MISSING
Business-capability recovery priority: PARTIAL
Required owner inputs:
- Product/Operations data-loss tolerance;
- outage tolerance;
- critical process ordering;
- provider/physical recovery constraints;
- backup infrastructure capability;
- isolated rehearsal measurements;
- Shared/Dedicated support model.
8. Reconstruction Artifacts¶
docs/reconstruction/PLATFORM_DEPLOYMENT_ENVIRONMENT_OBSERVABILITY_RECOVERY_SOURCE_AUTHORITY.md
docs/reconstruction/PLATFORM_DEPLOYMENT_ENVIRONMENT_OBSERVABILITY_RECOVERY_REBUILD_PACKET.md
docs/reconstruction/SYSTEM_RECONSTRUCTION_COVERAGE_MATRIX_DEPLOYMENT_RECOVERY_WAVE.md
docs/processes/PLATFORM_DEPLOYMENT_ENVIRONMENT_OBSERVABILITY_RECOVERY_POLICY_AND_SEQUENCE.md
docs/runbooks/PLATFORM_DEPLOYMENT_HEALTH_ROLLBACK_AND_RESTORE_RUNBOOK.md
docs/wiki/internal/PLATFORM_DEPLOYMENT_OPERATIONS_WIKI_PROJECTION_PACKET.md
docs/operations/changes/2026-08-08-platform-deployment-environment-observability-recovery-documentation-handover.md
9. Current Readiness Disposition¶
Current topology/source reconstruction:
DETAILED INPUT
Current production/server/service evidence:
REQUIRED
Release/runtime identity contract:
DETAILED TARGET INPUT
Health/readiness contract:
DETAILED TARGET INPUT / NOT IMPLEMENTED
Current observability:
PARTIAL DIAGNOSTIC EVIDENCE
Central metrics/traces/alerts:
NOT ESTABLISHED
Complete backup set:
NOT ESTABLISHED
Complete restore rehearsal:
NOT ESTABLISHED
RPO/RTO:
NOT ESTABLISHED
Shared/Dedicated parity:
TARGET INPUT ONLY
Phase implementation:
USER HOLD
Migration authorization:
NOT ESTABLISHED
10. Next Documentation Work¶
After this family, the next Cloud documentation priority is a cross-family reconstruction consistency review, not another broad implementation plan.
Required output:
- refresh all packet source baselines against current
qa/master; - identify conflicting current/future labels;
- reconcile shared identity, audit, provider, deployment and recovery contracts;
- produce one system rebuild dependency graph;
- identify capability packets still missing field/interface/operational evidence;
- distinguish documentation-complete from M3/M4 evidence;
- define the first bounded future local/field evidence package without activating it.
---¶
Source:
docs/reconstruction/SYSTEM_RECONSTRUCTION_COVERAGE_MATRIX_DEPLOYMENT_RECOVERY_WAVE.md— ctc repository · This page is an English translation of the source document. Identifiers, file paths and code symbols are unchanged.