Integrationen

ProductionAdapterMigrationRunbook.v1 SQL Outline

ProductionAdapterMigrationRunbook.v1 zielt auf db-auth-session-adapter mit Checksum bfg-feb1d61b; als reviewer-sicheres Migration Rehearsal bis zur echten Infrastruktur behalten.

-- ProductionAdapterMigrationRunbook.v1
-- source=BFGScenarioSnapshot.v1
-- target=db-auth-session-adapter
-- session=grant-demo-local
-- checksum=bfg-feb1d61b
-- rows=0
-- runbook_decision=BLOCKED_PENDING_PREFLIGHT
create schema if not exists bfg_flowcontrol;

create table if not exists bfg_flowcontrol.tenants (
  tenant_id text primary key,
  name text not null,
  created_at timestamptz not null default now()
);

create table if not exists bfg_flowcontrol.users (
  user_id text primary key,
  tenant_id text not null references bfg_flowcontrol.tenants(tenant_id),
  role_key text not null,
  display_name text not null,
  permissions text[] not null default '{}'
);

create table if not exists bfg_flowcontrol.scenario_snapshots (
  snapshot_id text primary key,
  tenant_id text not null references bfg_flowcontrol.tenants(tenant_id),
  checksum text not null,
  schema_version text not null,
  payload jsonb not null,
  created_at timestamptz not null default now()
);

create table if not exists bfg_flowcontrol.audit_events (
  event_id text primary key,
  tenant_id text not null references bfg_flowcontrol.tenants(tenant_id),
  actor_id text not null references bfg_flowcontrol.users(user_id),
  source text not null,
  payload jsonb not null,
  created_at timestamptz not null default now()
);

alter table bfg_flowcontrol.users enable row level security;
alter table bfg_flowcontrol.scenario_snapshots enable row level security;
alter table bfg_flowcontrol.audit_events enable row level security;

drop policy if exists bfg_tenant_users on bfg_flowcontrol.users;
drop policy if exists bfg_tenant_snapshots on bfg_flowcontrol.scenario_snapshots;
drop policy if exists bfg_tenant_audit on bfg_flowcontrol.audit_events;

create policy bfg_tenant_users on bfg_flowcontrol.users
  using (tenant_id = current_setting('bfg.tenant_id', true));
create policy bfg_tenant_snapshots on bfg_flowcontrol.scenario_snapshots
  using (tenant_id = current_setting('bfg.tenant_id', true));
create policy bfg_tenant_audit on bfg_flowcontrol.audit_events
  using (tenant_id = current_setting('bfg.tenant_id', true));

Runbook Decision BLOCKED_PENDING_PREFLIGHT; 1/6 Migration Checks sind bereit.

ProductionDataCutoverPlan.v1 Paket

db-auth-session-adapter paketiert 5 Batch-Zeilen mit Checksumme bfg-e7a2d068; als reviewer-sicherer Daten-Cutover bis zur Produktionsinfrastruktur nutzen.

ProductionDataCutoverPlan.v1
target=db-auth-session-adapter
session=grant-demo-local
snapshot_schema=BFGScenarioSnapshot.v1
snapshot_checksum=bfg-e7a2d068
snapshot_rows=0
batch_rows=5
batches=1/4
steps=0/5
connection=0/4
dry_run=0/5
runbook_decision=BLOCKED_PENDING_PREFLIGHT
release_decision=BLOCKED_PENDING_DRY_RUN
rollback_decision=BLOCKED_PENDING_DRY_RUN
cutover_decision=BLOCKED_PENDING_DATA_CUTOVER

Entscheidung BLOCKED_PENDING_DATA_CUTOVER; 0/5 Cutover-Checks und 1 Batch-Gruppen sind bereit.

ProductionAdapterConnection.v1 Paket

Connection Paket erfassen, sobald Endpoint Reachability, TLS, RBAC und Write Probe bestaetigt sind.

ProductionAdapterMigrationPreflight.v1 Report

BFGScenarioSnapshot.v1 hat 0 Rows und Checksum bfg-eba94650; nutze diesen Report fur DB/Auth Migration Rehearsal vor Live-Infrastruktur.

ProductionAdapterMigrationPreflight.v1
schema=BFGScenarioSnapshot.v1
target=db-auth-session-adapter
session=grant-demo-local
checksum=bfg-eba94650
rows=0
adapter_contract=ScenarioStore.v1
dry_run=0/5
connection=0/4
rollback_decision=BLOCKED_PENDING_DRY_RUN

Release Env Block

BFG_RELEASE_ENVIRONMENT=local-demo
BFG_RELEASE_TARGET=db-auth-session-adapter
BFG_SCENARIO_ADAPTER=ScenarioStore.v1
BFG_STORAGE_ADAPTER=file-local
BFG_AUTH_MODE=mock-auth-header
BFG_TENANT_MODE=single-tenant-local
BFG_ROLLBACK_OWNER=user_md_anna
BFG_RELEASE_EVIDENCE=ProductionAdapterDryRun.v1
BFG_RELEASE_DECISION=BLOCKED_PENDING_DRY_RUN

Entscheidung BLOCKED_PENDING_DRY_RUN; 3/5 Release Handoff Gates sind bereit.