Rhythm 2.0 Specifications

Appearance

SVC-PFM-DJE-capacityCapacity Sentinel

Markdown

SVC-PFM-DJE-capacity

Capacity Sentinel

Markdown
  • DocumentDraft
  • ImplementationObserved

KindService contractProduct areaPlatformModuleData Job EngineRevision1

Read atservices-platform ad3f6a65macroservice-libraries 54536a44

Capacity Sentinel ​

What This Service Is For ​

The sentinel publishes shared database protection factors and permits bounded staff incident overrides. Consuming services determine how much work those factors admit.

Boundary ​

This contract owns the protection model and staff pin. It exposes public health and staff-only system controls; customer administration grants do not provide access.

Operations in Words ​

Authorized staff inspect, replace and remove a pin. Replacement validates state, reason and expiry, and mutations retain audit evidence. Public health reports readiness. None of these routes publishes a Submissions binding.

Events and Jobs ​

One reserved-concurrency sentinel evaluates each minute. It writes cache and parameter state rather than publishing a business event. Emergency API stage reductions use a separate switch that starts disabled.

Consistency Guarantees ​

Pin writes are transactional, while stage changes and state publications have separate outcomes. An active pin precedes signal fallback; without one, repeated signal failure returns normal. Publication errors can leave stale channels rather than changing the decision to normal.

Owns
DOM-PFM-DJE-006
Repository
services-platform

Controls

37 controls apply, from the corpus control catalogue.

TC-AVL-001 TC-AVL-004 TC-AVL-005 TC-AZ-001 TC-AZ-002 TC-AZ-003 TC-AZ-004 TC-AZ-005 TC-AZ-006 TC-CHG-001 TC-CHG-002 TC-CHG-003 TC-CHG-004 TC-CHG-005 TC-CHG-006 TC-IAM-001 TC-IAM-002 TC-IAM-003 TC-IAM-004 TC-IAM-005 TC-IAM-006 TC-LOG-001 TC-LOG-002 TC-LOG-003 TC-LOG-005 TC-MON-001 TC-PI-001 TC-PI-002 TC-PI-003 TC-PI-004 TC-PI-005 TC-TEN-001 TC-TEN-002 TC-TEN-003 TC-VEN-001 TC-VEN-002 TC-VEN-003

Does Not Own

  • Consuming services apply protection factors through their own admission mechanisms.
  • Gateway rate controls and firewall policies retain their workload-governance owners.
  • Workspace workload profiles belong to operational policy rather than the sentinel record model.

The Markdown files under specs/ in rhythmsoftware/rhythm-v2-docs are the canonical source of truth. This reader is a generated, read-only projection of them.

Rhythm Software