feat(orchestrator): harden zero-impact shadow rollout

Gate and bound Portal shadow observations while preserving Native execution. Add fail-closed service boundaries, terminal retention controls, Canary readiness telemetry, ops visibility, and isolated regression coverage.
2026-07-25 07:28:37 +08:00
parent 08a48e4849
commit 6df82818c5
33 changed files with 1569 additions and 108 deletions
@@ -9,6 +9,10 @@ MEMIND_ORCHESTRATOR_EXECUTION_ENABLED=0
 MEMIND_ORCHESTRATOR_ENABLED_EXECUTORS=
 MEMIND_ORCHESTRATOR_USER_ALLOWLIST=
 MEMIND_ORCHESTRATOR_TENANT_ALLOWLIST=
+# Terminal checkpoint/job retention is disabled until explicitly approved.
+MEMIND_ORCHESTRATOR_RETENTION_DAYS=0
+MEMIND_ORCHESTRATOR_RETENTION_SWEEP_INTERVAL_MS=86400000
+MEMIND_ORCHESTRATOR_RETENTION_SWEEP_LIMIT=100
 MEMIND_EXECUTOR_GOOSED_URL=https://host.docker.internal:18006
 MEMIND_EXECUTOR_GOOSED_TOKEN=
 MEMIND_EXECUTOR_GOOSED_TLS_INSECURE=1