[{"data":1,"prerenderedAt":683},["ShallowReactive",2],{"navigation_docs":3,"-docs-deployment-production-readiness":356,"-docs-deployment-production-readiness-surround":678},[4,8,34,64,90,139,157,171,193,227,241,266,312,334],{"title":5,"path":6,"stem":7},"Documentation","\u002Fdocs","docs\u002Findex",{"title":9,"path":10,"stem":11,"children":12},"Getting started","\u002Fdocs\u002Fgetting-started","docs\u002F01.getting-started\u002Findex",[13,14,18,22,26,30],{"title":9,"path":10,"stem":11},{"title":15,"path":16,"stem":17},"Introduction","\u002Fdocs\u002Fgetting-started\u002Fintroduction","docs\u002F01.getting-started\u002F01.introduction",{"title":19,"path":20,"stem":21},"Concepts","\u002Fdocs\u002Fgetting-started\u002Fconcepts","docs\u002F01.getting-started\u002F02.concepts",{"title":23,"path":24,"stem":25},"Quickstart (5 minutes)","\u002Fdocs\u002Fgetting-started\u002Fquickstart","docs\u002F01.getting-started\u002F03.quickstart",{"title":27,"path":28,"stem":29},"Local development","\u002Fdocs\u002Fgetting-started\u002Flocal-development","docs\u002F01.getting-started\u002F04.local-development",{"title":31,"path":32,"stem":33},"FAQ","\u002Fdocs\u002Fgetting-started\u002Ffaq","docs\u002F01.getting-started\u002F05.faq",{"title":35,"path":36,"stem":37,"children":38},"Architecture","\u002Fdocs\u002Farchitecture","docs\u002F02.architecture\u002Findex",[39,40,44,48,52,56,60],{"title":35,"path":36,"stem":37},{"title":41,"path":42,"stem":43},"Architecture overview","\u002Fdocs\u002Farchitecture\u002Foverview","docs\u002F02.architecture\u002F01.overview",{"title":45,"path":46,"stem":47},"Services","\u002Fdocs\u002Farchitecture\u002Fservices","docs\u002F02.architecture\u002F02.services",{"title":49,"path":50,"stem":51},"Request lifecycle","\u002Fdocs\u002Farchitecture\u002Frequest-lifecycle","docs\u002F02.architecture\u002F03.request-lifecycle",{"title":53,"path":54,"stem":55},"Data model","\u002Fdocs\u002Farchitecture\u002Fdata-model","docs\u002F02.architecture\u002F04.data-model",{"title":57,"path":58,"stem":59},"Status and evidence","\u002Fdocs\u002Farchitecture\u002Fstatus-and-evidence","docs\u002F02.architecture\u002F05.status-and-evidence",{"title":61,"path":62,"stem":63},"Target architecture and authority","\u002Fdocs\u002Farchitecture\u002Ftarget-architecture","docs\u002F02.architecture\u002F06.target-architecture",{"title":65,"path":66,"stem":67,"children":68},"Auth","\u002Fdocs\u002Fauth","docs\u002F03.auth\u002Findex",[69,70,74,78,82,86],{"title":65,"path":66,"stem":67},{"title":71,"path":72,"stem":73},"Overview","\u002Fdocs\u002Fauth\u002Foverview","docs\u002F03.auth\u002F01.overview",{"title":75,"path":76,"stem":77},"Organization and agent model","\u002Fdocs\u002Fauth\u002Forg-project-model","docs\u002F03.auth\u002F02.org-project-model",{"title":79,"path":80,"stem":81},"Issuing API keys","\u002Fdocs\u002Fauth\u002Fissuing-api-keys","docs\u002F03.auth\u002F03.issuing-api-keys",{"title":83,"path":84,"stem":85},"Multi-tenant RLS","\u002Fdocs\u002Fauth\u002Fmulti-tenant-rls","docs\u002F03.auth\u002F04.multi-tenant-rls",{"title":87,"path":88,"stem":89},"Operator sessions and step-up","\u002Fdocs\u002Fauth\u002Foperator-sessions","docs\u002F03.auth\u002F05.operator-sessions",{"title":91,"path":92,"stem":93,"children":94},"Proxy","\u002Fdocs\u002Fproxy","docs\u002F04.proxy\u002Findex",[95,96,99,103,107,111,115,119,123,127,131,135],{"title":91,"path":92,"stem":93},{"title":71,"path":97,"stem":98},"\u002Fdocs\u002Fproxy\u002Foverview","docs\u002F04.proxy\u002F01.overview",{"title":100,"path":101,"stem":102},"Authentication","\u002Fdocs\u002Fproxy\u002Fauthentication","docs\u002F04.proxy\u002F02.authentication",{"title":104,"path":105,"stem":106},"Request routing","\u002Fdocs\u002Fproxy\u002Frequest-routing","docs\u002F04.proxy\u002F03.request-routing",{"title":108,"path":109,"stem":110},"Sessions","\u002Fdocs\u002Fproxy\u002Fsessions","docs\u002F04.proxy\u002F04.sessions",{"title":112,"path":113,"stem":114},"Directives","\u002Fdocs\u002Fproxy\u002Fdirectives","docs\u002F04.proxy\u002F05.directives",{"title":116,"path":117,"stem":118},"Idempotency and budgets","\u002Fdocs\u002Fproxy\u002Fidempotency-and-budgets","docs\u002F04.proxy\u002F06.idempotency-and-budgets",{"title":120,"path":121,"stem":122},"Rate limiting","\u002Fdocs\u002Fproxy\u002Frate-limiting","docs\u002F04.proxy\u002F07.rate-limiting",{"title":124,"path":125,"stem":126},"Provider adapters","\u002Fdocs\u002Fproxy\u002Fprovider-adapters","docs\u002F04.proxy\u002F08.provider-adapters",{"title":128,"path":129,"stem":130},"Auth caching","\u002Fdocs\u002Fproxy\u002Fauth-caching","docs\u002F04.proxy\u002F09.auth-caching",{"title":132,"path":133,"stem":134},"Configuration","\u002Fdocs\u002Fproxy\u002Fconfiguration","docs\u002F04.proxy\u002F10.configuration",{"title":136,"path":137,"stem":138},"Provider routing and resilience","\u002Fdocs\u002Fproxy\u002Fprovider-routing-and-resilience","docs\u002F04.proxy\u002F11.provider-routing-and-resilience",{"title":140,"path":141,"stem":142,"children":143},"Memory","\u002Fdocs\u002Fmemory","docs\u002F05.memory\u002Findex",[144,145,149,153],{"title":140,"path":141,"stem":142},{"title":146,"path":147,"stem":148},"Memory overview","\u002Fdocs\u002Fmemory\u002Foverview","docs\u002F05.memory\u002F01.overview",{"title":150,"path":151,"stem":152},"Write path","\u002Fdocs\u002Fmemory\u002Fwrite-path","docs\u002F05.memory\u002F02.write-path",{"title":154,"path":155,"stem":156},"Search and lifecycle","\u002Fdocs\u002Fmemory\u002Fsearch-and-lifecycle","docs\u002F05.memory\u002F03.search-and-lifecycle",{"title":158,"path":159,"stem":160,"children":161},"Context","\u002Fdocs\u002Fcontext","docs\u002F06.context\u002Findex",[162,163,167],{"title":158,"path":159,"stem":160},{"title":164,"path":165,"stem":166},"Assembly pipeline","\u002Fdocs\u002Fcontext\u002Foverview","docs\u002F06.context\u002F01.overview",{"title":168,"path":169,"stem":170},"Ranking and packing","\u002Fdocs\u002Fcontext\u002Franking-and-packing","docs\u002F06.context\u002F02.ranking-and-packing",{"title":172,"path":173,"stem":174,"children":175},"Intelligence","\u002Fdocs\u002Fintelligence","docs\u002F07.intelligence\u002Findex",[176,177,181,185,189],{"title":172,"path":173,"stem":174},{"title":178,"path":179,"stem":180},"Workers","\u002Fdocs\u002Fintelligence\u002Fworkers","docs\u002F07.intelligence\u002F01.workers",{"title":182,"path":183,"stem":184},"Extraction","\u002Fdocs\u002Fintelligence\u002Fextraction","docs\u002F07.intelligence\u002F02.extraction",{"title":186,"path":187,"stem":188},"Embedder","\u002Fdocs\u002Fintelligence\u002Fembedder","docs\u002F07.intelligence\u002F03.embedder",{"title":190,"path":191,"stem":192},"Extraction evaluation","\u002Fdocs\u002Fintelligence\u002Fevaluation","docs\u002F07.intelligence\u002F04.evaluation",{"title":194,"path":195,"stem":196,"children":197},"API reference","\u002Fdocs\u002Fapi-reference","docs\u002F08.api-reference\u002Findex",[198,199,203,207,211,215,219,223],{"title":194,"path":195,"stem":196},{"title":200,"path":201,"stem":202},"Chat completions","\u002Fdocs\u002Fapi-reference\u002Fchat-completions","docs\u002F08.api-reference\u002F01.chat-completions",{"title":204,"path":205,"stem":206},"Responses","\u002Fdocs\u002Fapi-reference\u002Fresponses","docs\u002F08.api-reference\u002F02.responses",{"title":208,"path":209,"stem":210},"Errors","\u002Fdocs\u002Fapi-reference\u002Ferrors","docs\u002F08.api-reference\u002F03.errors",{"title":212,"path":213,"stem":214},"Health and metrics","\u002Fdocs\u002Fapi-reference\u002Fproxy-health","docs\u002F08.api-reference\u002F04.proxy-health",{"title":216,"path":217,"stem":218},"HTTP route inventory","\u002Fdocs\u002Fapi-reference\u002Fhttp-routes","docs\u002F08.api-reference\u002F05.http-routes",{"title":220,"path":221,"stem":222},"Management API","\u002Fdocs\u002Fapi-reference\u002Fmanagement-api","docs\u002F08.api-reference\u002F06.management-api",{"title":224,"path":225,"stem":226},"Auth gRPC (ValidateToken, ValidateAgent)","\u002Fdocs\u002Fapi-reference\u002Fauth-grpc","docs\u002F08.api-reference\u002F07.auth-grpc",{"title":228,"path":229,"stem":230,"children":231},"MCP","\u002Fdocs\u002Fmcp","docs\u002F09.mcp\u002Findex",[232,233,237],{"title":228,"path":229,"stem":230},{"title":234,"path":235,"stem":236},"Memory server","\u002Fdocs\u002Fmcp\u002Fmemory-server","docs\u002F09.mcp\u002F01.memory-server",{"title":238,"path":239,"stem":240},"Operator gateway","\u002Fdocs\u002Fmcp\u002Foperator-gateway","docs\u002F09.mcp\u002F02.operator-gateway",{"title":242,"path":243,"stem":244,"children":245},"Security","\u002Fdocs\u002Fsecurity","docs\u002F10.security\u002Findex",[246,247,251,254,258,262],{"title":242,"path":243,"stem":244},{"title":248,"path":249,"stem":250},"Security overview","\u002Fdocs\u002Fsecurity\u002Foverview","docs\u002F10.security\u002F01.overview",{"title":100,"path":252,"stem":253},"\u002Fdocs\u002Fsecurity\u002Fauthentication","docs\u002F10.security\u002F02.authentication",{"title":255,"path":256,"stem":257},"Tenant isolation","\u002Fdocs\u002Fsecurity\u002Ftenant-isolation","docs\u002F10.security\u002F03.tenant-isolation",{"title":259,"path":260,"stem":261},"Secrets and keys","\u002Fdocs\u002Fsecurity\u002Fsecrets-and-keys","docs\u002F10.security\u002F04.secrets-and-keys",{"title":263,"path":264,"stem":265},"Prompt injection","\u002Fdocs\u002Fsecurity\u002Fprompt-injection","docs\u002F10.security\u002F05.prompt-injection",{"title":267,"path":268,"stem":269,"children":270},"Operations","\u002Fdocs\u002Foperations","docs\u002F11.operations\u002Findex",[271,272,276,280,284,288,292,296,300,304,308],{"title":267,"path":268,"stem":269},{"title":273,"path":274,"stem":275},"Observability","\u002Fdocs\u002Foperations\u002Fobservability","docs\u002F11.operations\u002F01.observability",{"title":277,"path":278,"stem":279},"Traces and ClickHouse","\u002Fdocs\u002Foperations\u002Ftraces-and-clickhouse","docs\u002F11.operations\u002F02.traces-and-clickhouse",{"title":281,"path":282,"stem":283},"Health checks","\u002Fdocs\u002Foperations\u002Fhealth-checks","docs\u002F11.operations\u002F03.health-checks",{"title":285,"path":286,"stem":287},"Incident response","\u002Fdocs\u002Foperations\u002Fincident-response","docs\u002F11.operations\u002F04.incident-response",{"title":289,"path":290,"stem":291},"Troubleshooting","\u002Fdocs\u002Foperations\u002Ftroubleshooting","docs\u002F11.operations\u002F05.troubleshooting",{"title":293,"path":294,"stem":295},"Billing and budgets","\u002Fdocs\u002Foperations\u002Fbilling-and-budgets","docs\u002F11.operations\u002F06.billing-and-budgets",{"title":297,"path":298,"stem":299},"Evidence and relay","\u002Fdocs\u002Foperations\u002Fevidence-and-relay","docs\u002F11.operations\u002F07.evidence-and-relay",{"title":301,"path":302,"stem":303},"Console","\u002Fdocs\u002Foperations\u002Fconsole","docs\u002F11.operations\u002F08.console",{"title":305,"path":306,"stem":307},"Failure modes and recovery","\u002Fdocs\u002Foperations\u002Ffailure-and-recovery","docs\u002F11.operations\u002F09.failure-and-recovery",{"title":309,"path":310,"stem":311},"Data lifecycle and deletion","\u002Fdocs\u002Foperations\u002Fdata-lifecycle-and-deletion","docs\u002F11.operations\u002F10.data-lifecycle-and-deletion",{"title":313,"path":314,"stem":315,"children":316},"Deployment","\u002Fdocs\u002Fdeployment","docs\u002F12.deployment\u002Findex",[317,318,322,326,330],{"title":313,"path":314,"stem":315},{"title":319,"path":320,"stem":321},"Docker Compose (dev)","\u002Fdocs\u002Fdeployment\u002Fdocker-compose","docs\u002F12.deployment\u002F01.docker-compose",{"title":323,"path":324,"stem":325},"Environment variables","\u002Fdocs\u002Fdeployment\u002Fenvironment-variables","docs\u002F12.deployment\u002F02.environment-variables",{"title":327,"path":328,"stem":329},"Kubernetes","\u002Fdocs\u002Fdeployment\u002Fkubernetes","docs\u002F12.deployment\u002F03.kubernetes",{"title":331,"path":332,"stem":333},"Production readiness","\u002Fdocs\u002Fdeployment\u002Fproduction-readiness","docs\u002F12.deployment\u002F04.production-readiness",{"title":335,"path":336,"stem":337,"children":338},"Reference","\u002Fdocs\u002Freference","docs\u002F13.reference\u002Findex",[339,340,344,348,352],{"title":335,"path":336,"stem":337},{"title":341,"path":342,"stem":343},"Glossary","\u002Fdocs\u002Freference\u002Fglossary","docs\u002F13.reference\u002F01.glossary",{"title":345,"path":346,"stem":347},"Roadmap and gates","\u002Fdocs\u002Freference\u002Froadmap","docs\u002F13.reference\u002F02.roadmap",{"title":349,"path":350,"stem":351},"Architecture decisions","\u002Fdocs\u002Freference\u002Fadr","docs\u002F13.reference\u002F03.adr",{"title":353,"path":354,"stem":355},"Compatibility and versioning","\u002Fdocs\u002Freference\u002Fcompatibility","docs\u002F13.reference\u002F04.compatibility",{"id":357,"title":331,"audience":358,"author":359,"authorUrl":359,"body":360,"coverIndex":359,"coverLabel":359,"coverTone":359,"date":359,"decisionStatus":359,"description":669,"excerpt":359,"extension":670,"featured":671,"historical":671,"meta":672,"navigation":673,"path":332,"readingTime":359,"scope":674,"seo":675,"sourceOfTruth":676,"status":371,"stem":333,"tags":359,"verifiedDate":372,"__hash__":677},"docs\u002Fdocs\u002F12.deployment\u002F04.production-readiness.md","operator",null,{"type":361,"value":362,"toc":655},"minimark",[363,367,373,378,523,527,532,548,552,566,570,584,588,605,608,628,632,652],[364,365,366],"p",{},"IBEX Harness is not production-ready. This page is the promotion checklist, not a marketing summary. Each item needs an artifact, an owner, a date, and a scoped claim.",[368,369],"page-status",{"note":370,"status":371,"verified":372},"Promotion gates remain open","PROVISIONAL","2026-10-21",[374,375,377],"h2",{"id":376},"status-summary","Status summary",[379,380,381,397],"table",{},[382,383,384],"thead",{},[385,386,387,391,394],"tr",{},[388,389,390],"th",{},"Gate",[388,392,393],{},"Status",[388,395,396],{},"Why it is open",[398,399,400,411,421,431,441,451,461,471,481,491,502,512],"tbody",{},[385,401,402,406,408],{},[403,404,405],"td",{},"G0 documentation and contract freeze",[403,407,371],{},[403,409,410],{},"Contract shapes accepted; runtime seams provisional; no independent reviewer",[385,412,413,416,418],{},[403,414,415],{},"G1 principal and tenant invariants",[403,417,371],{},[403,419,420],{},"Runtime propagation and cross-tenant matrix incomplete",[385,422,423,426,428],{},[403,424,425],{},"G2 errors and idempotency",[403,427,371],{},[403,429,430],{},"Reconciliation and broader coverage open",[385,432,433,436,438],{},[403,434,435],{},"G3 provider and admission",[403,437,371],{},[403,439,440],{},"Hosted and reconciliation evidence open",[385,442,443,446,448],{},[403,444,445],{},"G4 evidence MVP",[403,447,371],{},[403,449,450],{},"Production sink and hosted recovery open",[385,452,453,456,458],{},[403,454,455],{},"G5 request and streaming slice",[403,457,371],{},[403,459,460],{},"No published hosted\u002Freference p99 run",[385,462,463,466,468],{},[403,464,465],{},"G6 typed memory and context",[403,467,371],{},[403,469,470],{},"Typed lifecycle, revision ledger, deletion certification open",[385,472,473,476,478],{},[403,474,475],{},"G7 read-only operator and MCP",[403,477,371],{},[403,479,480],{},"Policy-store enforcement and durable audit open",[385,482,483,486,488],{},[403,484,485],{},"G8 operations and recovery",[403,487,371],{},[403,489,490],{},"Hosted\u002FHA recovery and restore drills open",[385,492,493,496,499],{},[403,494,495],{},"G9 governed side effects",[403,497,498],{},"PROPOSED",[403,500,501],{},"No runtime or acceptance evidence",[385,503,504,507,509],{},[403,505,506],{},"G10 advisory intelligence",[403,508,498],{},[403,510,511],{},"DecisionService and model registry do not exist",[385,513,514,517,520],{},[403,515,516],{},"G11 deferred extensions",[403,518,519],{},"DEFERRED",[403,521,522],{},"Requires separate evidence and ADR",[374,524,526],{"id":525},"must-be-true-before-promotion","Must be true before promotion",[528,529,531],"h3",{"id":530},"identity-and-tenancy","Identity and tenancy",[533,534,535,539,542,545],"ul",{},[536,537,538],"li",{},"Hosted AuthService session, MFA, secure cookies, CSRF, and exact credentialed CORS are accepted.",[536,540,541],{},"Two-tenant negative tests cover proxy, memory, context, management API, MCP, Operator Console, ClickHouse, Redis, and backups.",[536,543,544],{},"Cross-tenant resource behavior is consistent and does not leak existence.",[536,546,547],{},"Provider credentials are sealed and never returned in plaintext.",[528,549,551],{"id":550},"data-and-deletion","Data and deletion",[533,553,554,557,560,563],{},[536,555,556],{},"Typed memory lifecycle and revision ledger are accepted.",[536,558,559],{},"Deletion covers caches, projections, backups, and archives with measured timing.",[536,561,562],{},"Restore drills prove the documented RPO\u002FRTO.",[536,564,565],{},"ClickHouse projection delivery and retention are verified, not inferred.",[528,567,569],{"id":568},"request-path","Request path",[533,571,572,575,578,581],{},[536,573,574],{},"A hosted or reference-profile p99 run proves the latency budget with workload, hardware, and profile attached.",[536,576,577],{},"The Go benchmark gate is not mistaken for a p99 SLO.",[536,579,580],{},"Streaming failures, cancellation, and upstream timeouts are covered.",[536,582,583],{},"Budget holds are reconciled and overshoot is measured.",[528,585,587],{"id":586},"evidence-and-operations","Evidence and operations",[533,589,590,593,596,599,602],{},[536,591,592],{},"The relay delivers to a production sink with dedupe\u002Freplay and redaction evidence.",[536,594,595],{},"Dead letters, reaper behavior, and crash recovery are exercised.",[536,597,598],{},"Key rotation and revocation propagation are tested.",[536,600,601],{},"Alerts have runbooks and owners.",[536,603,604],{},"Rollback by image digest is rehearsed.",[528,606,313],{"id":607},"deployment",[533,609,610,613,616,619,622,625],{},[536,611,612],{},"Real image digests replace sentinels.",[536,614,615],{},"External Secrets are provisioned.",[536,617,618],{},"Data-plane templates or managed services exist.",[536,620,621],{},"Migrations run with a preflight and rollback plan.",[536,623,624],{},"A deployment workflow and release approval path exist.",[536,626,627],{},"NetworkPolicy and service-to-service authentication are configured.",[374,629,631],{"id":630},"explicit-non-claims","Explicit non-claims",[533,633,634,637,640,643,646,649],{},[536,635,636],{},"No hosted HA guarantee.",[536,638,639],{},"No measured hosted p99.",[536,641,642],{},"No exactly-once side effects.",[536,644,645],{},"No complete tenant-isolation proof.",[536,647,648],{},"No certified restore or RPO\u002FRTO.",[536,650,651],{},"No production Support\u002FSLO contract.",[364,653,654],{},"When a gate closes, update the ledger first, then the page. A page cannot promote a capability by itself.",{"title":656,"searchDepth":657,"depth":657,"links":658},"",2,[659,660,668],{"id":376,"depth":657,"text":377},{"id":525,"depth":657,"text":526,"children":661},[662,664,665,666,667],{"id":530,"depth":663,"text":531},3,{"id":550,"depth":663,"text":551},{"id":568,"depth":663,"text":569},{"id":586,"depth":663,"text":587},{"id":607,"depth":663,"text":313},{"id":630,"depth":657,"text":631},"The evidence required before IBEX Harness can claim production readiness.","md",false,{},true,"provisional",{"title":331,"description":669},"engineering\u002Farchitecture-v2\u002F00-status-and-evidence.md; engineering\u002Farchitecture-v2\u002F18-gap-register.md","oBDCBiA5f2qZDXZcP_1HbJj6QnC2nf1EkgPC-1fDG0w",[679,681],{"title":327,"path":328,"stem":329,"description":680,"children":-1},"The Helm chart is render\u002Flint scaffolding — not a deployable production release.",{"title":335,"path":336,"stem":337,"description":682,"children":-1},"Glossary, roadmap, compatibility policy, and decision-record index.",1792875073107]