Skip to content

feat(calibration): nightly config-drift sentinel — stale config becomes a push alert#8261

Merged
JSONbored merged 1 commit into
mainfrom
feat/config-drift-sentinel
Jul 23, 2026
Merged

feat(calibration): nightly config-drift sentinel — stale config becomes a push alert#8261
JSONbored merged 1 commit into
mainfrom
feat/config-drift-sentinel

Conversation

@JSONbored

Copy link
Copy Markdown
Owner

What

Epic #8211 track A capstone (#8213), wired over the contributor-delivered evaluator (#8212): stale configuration — measured by the #8170 retro analysis as the operator's largest wrongness source — becomes a push notification instead of a discovery-through-frustration.

How

  • On the calibration tick, behind its own default-off CONFIG_DRIFT_SENTINEL_ENABLED var: replay each live knob's CURRENT value against the trailing corpus (evaluateKnobDrift — same splits, same Pareto floor, same never-on-noise minimums) and alert when a tighter alternative or a revert to shipped dominates it. Looser-dominating findings are suppressed — the loosening loop owns that direction.
  • One alert per drift episode via a system_flags fingerprint: a standing unchanged drift never re-alerts, a changed one does, recovery clears the episode. Same Workers-Logs + Sentry notify path and per-knob ev discipline as the loosening alerts.
  • Alert-only authority: the sentinel never writes a knob value.
  • The knobs status endpoint now computes each knob's current drift report on read — deliberately NOT flag-gated, so a standing drift is visible even while the sentinel is off.
  • Docs section; cf-typegen + test-helper plumbing for the new var.

Validation

Full npm run test:ci green (TEST_CI_EXIT=0, zero failed files); 100% line+branch on the module — episode lifecycle (alert → standing → recovery → re-alert), looser suppression with stale-fingerprint cleanup, empty-corpus clean, per-knob fail-safe incl. the non-Error formatter arm, report-only-knob skip, and dispatch wiring both flag states.

Closes #8213

@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Jul 23, 2026

Copy link
Copy Markdown

Deploying with  Cloudflare Workers  Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status Name Latest Commit Preview URL Updated (UTC)
✅ Deployment successful!
View logs
loopover-ui b976a54 Commit Preview URL

Branch Preview URL
Jul 23 2026, 04:09 PM

@superagent-security

Copy link
Copy Markdown
Contributor

Superagent didn't find any vulnerabilities or security issues in this PR.

…es a push alert (#8213)

Epic #8211 track A capstone wiring over the contributor-delivered
evaluator (#8212): on the calibration tick, behind its own default-off
CONFIG_DRIFT_SENTINEL_ENABLED var, replay each live knob's CURRENT value
against the trailing corpus and alert when a TIGHTER alternative (or a
revert to shipped) Pareto-dominates it — the stale-config wrongness the
Looser-dominating findings are suppressed (the loosening loop owns that
direction). One alert per episode via a system_flags fingerprint:
standing drifts never re-alert, changed drifts do, recovery clears.
ALERT-ONLY — the sentinel never writes a knob value.

The knobs status endpoint now computes each knob's current drift report
on read, deliberately not flag-gated: a standing drift is visible even
while the sentinel is off. Docs section added; 100% line+branch on the
module including the non-Error alert-formatter arm and the
report-only-knob skip.

Closes #8213
@JSONbored
JSONbored force-pushed the feat/config-drift-sentinel branch from 3b29d2f to b976a54 Compare July 23, 2026 16:05
@JSONbored JSONbored self-assigned this Jul 23, 2026
@JSONbored
JSONbored merged commit 78aeb1c into main Jul 23, 2026
11 of 12 checks passed
@JSONbored
JSONbored deleted the feat/config-drift-sentinel branch July 23, 2026 16:06
@codecov

codecov Bot commented Jul 23, 2026

Copy link
Copy Markdown

Bundle Report

Changes will increase total bundle size by 2.44kB (0.03%) ⬆️. This is within the configured threshold ✅

Detailed changes
Bundle name Size Change
loopover-ui 7.44MB 2.44kB (0.03%) ⬆️

Affected Assets, Files, and Routes:

view changes for bundle: loopover-ui

Assets Changed:

Asset Name Size Change Total Size Change (%)
assets/add-scalar-classes-4ymG6BDE.js (New) 2.17MB 2.17MB 100.0% 🚀
assets/tanstack-vendor-GtZgKvjI.js (New) 740.2kB 740.2kB 100.0% 🚀
assets/docs.fumadocs-spike-api-reference-C4_maW4o.js (New) 442.92kB 442.92kB 100.0% 🚀
assets/AgentScalarChatInterface.vue-DEerQi2g.js (New) 201.71kB 201.71kB 100.0% 🚀
assets/modal-D7QME39l.js (New) 184.38kB 184.38kB 100.0% 🚀
assets/client-DYkUmHxK.js (New) 146.06kB 146.06kB 100.0% 🚀
assets/maintainer-panel-Mk0HWnKO.js (New) 78.99kB 78.99kB 100.0% 🚀
assets/ui-vendor-CSNLiNMp.js (New) 57.04kB 57.04kB 100.0% 🚀
assets/routes-CRISVaHL.js (New) 34.98kB 34.98kB 100.0% 🚀
assets/backtest-calibration-DaIHkZXX.js (New) 30.91kB 30.91kB 100.0% 🚀
assets/owner-panel-nI80-7mR.js (New) 27.36kB 27.36kB 100.0% 🚀
assets/app-OncBuV7d.js (New) 25.7kB 25.7kB 100.0% 🚀
assets/app.runs-CTWxi4bv.js (New) 23.56kB 23.56kB 100.0% 🚀
assets/miner-panel-CJvsyX7G.js (New) 20.28kB 20.28kB 100.0% 🚀
assets/api._op-D7iE3IU_.js (New) 17.57kB 17.57kB 100.0% 🚀
assets/self-hosting-docs-audit-BpAQ6XRM.js (New) 16.61kB 16.61kB 100.0% 🚀
assets/app.index-CTopceP0.js (New) 15.62kB 15.62kB 100.0% 🚀
assets/docs._slug-CN7bZBok.js (New) 15.37kB 15.37kB 100.0% 🚀
assets/playground-panel-BkeukwKd.js (New) 14.49kB 14.49kB 100.0% 🚀
assets/fairness-BcSIfVGW.js (New) 10.6kB 10.6kB 100.0% 🚀
assets/app.audit-DA7UQ4hb.js (New) 10.11kB 10.11kB 100.0% 🚀
assets/app.config-generator-CNaJ457E.js (New) 10.09kB 10.09kB 100.0% 🚀
assets/extension-BWEF17rC.js (New) 10.04kB 10.04kB 100.0% 🚀
assets/maintainers-CWyvFCfW.js (New) 8.09kB 8.09kB 100.0% 🚀
assets/miners-MqMPXfMZ.js (New) 7.91kB 7.91kB 100.0% 🚀
assets/agents-BvbtBXjZ.js (New) 7.8kB 7.8kB 100.0% 🚀
assets/commands-panel-BpJPRVk8.js (New) 6.65kB 6.65kB 100.0% 🚀
assets/maintainer-workflow-CgjnVYys.js (New) 6.52kB 6.52kB 100.0% 🚀
assets/roadmap-_FM3745Q.js (New) 6.33kB 6.33kB 100.0% 🚀
assets/digest-panel-DVYAlWAB.js (New) 6.18kB 6.18kB 100.0% 🚀
assets/repos._owner._repo.quality-DFQQrBqt.js (New) 6.14kB 6.14kB 100.0% 🚀
assets/docs.index-X0hnGfLu.js (New) 5.79kB 5.79kB 100.0% 🚀
assets/docs-nav-Ck63pC2r.js (New) 5.59kB 5.59kB 100.0% 🚀
assets/api.index-CoKrpny6.js (New) 4.7kB 4.7kB 100.0% 🚀
assets/docs-DprFlgTg.js (New) 2.7kB 2.7kB 100.0% 🚀
assets/api-CUPxBpbn.js (New) 2.69kB 2.69kB 100.0% 🚀
assets/docs-page-CBFTAIAl.js (New) 2.1kB 2.1kB 100.0% 🚀
assets/table-DrTa20v9.js (New) 1.75kB 1.75kB 100.0% 🚀
assets/app.workbench-7-fPMUN9.js (New) 1.58kB 1.58kB 100.0% 🚀
assets/session-DsU0XYu1.js (New) 1.45kB 1.45kB 100.0% 🚀
assets/tooltip-rhDhlR-I.js (New) 1.45kB 1.45kB 100.0% 🚀
assets/tabs-B67UNyWU.js (New) 1.39kB 1.39kB 100.0% 🚀
assets/app.repos-BlsNDIIZ.js (New) 1.07kB 1.07kB 100.0% 🚀
assets/input-D_vM-CmM.js (New) 796 bytes 796 bytes 100.0% 🚀
assets/file-cog-na8hKLHy.js (New) 758 bytes 758 bytes 100.0% 🚀
assets/app.maintainer-C8Af8-g3.js (New) 502 bytes 502 bytes 100.0% 🚀
assets/sparkles-BMhfPp7C.js (New) 494 bytes 494 bytes 100.0% 🚀
assets/app.owner-ChWB_dUj.js (New) 474 bytes 474 bytes 100.0% 🚀
assets/app.commands-DA0B5PQV.js (New) 455 bytes 455 bytes 100.0% 🚀
assets/app.playground-Bjm9QHuC.js (New) 442 bytes 442 bytes 100.0% 🚀
assets/reveal-BV2G0_o3.js (New) 442 bytes 442 bytes 100.0% 🚀
assets/index-BWuheaSb.js (New) 438 bytes 438 bytes 100.0% 🚀
assets/app.digest-aJUA67tX.js (New) 430 bytes 430 bytes 100.0% 🚀
assets/eye-off-CQoM-gVM.js (New) 430 bytes 430 bytes 100.0% 🚀
assets/app.miner-CTsOPXd0.js (New) 422 bytes 422 bytes 100.0% 🚀
assets/key-round-AIvsUxNN.js (New) 355 bytes 355 bytes 100.0% 🚀
assets/bot-DFdGQphz.js (New) 328 bytes 328 bytes 100.0% 🚀
assets/trash-2-MFMn4IT2.js (New) 328 bytes 328 bytes 100.0% 🚀
assets/save-CcfQer0d.js (New) 327 bytes 327 bytes 100.0% 🚀
assets/git-pull-request-arrow-C-V7rp5t.js (New) 321 bytes 321 bytes 100.0% 🚀
assets/wrench-DVad5n8Z.js (New) 303 bytes 303 bytes 100.0% 🚀
assets/list-checks-Px4hpo6j.js (New) 279 bytes 279 bytes 100.0% 🚀
assets/shield-7hsY1VM1.js (New) 272 bytes 272 bytes 100.0% 🚀
assets/workflow-UXFgyKA0.js (New) 265 bytes 265 bytes 100.0% 🚀
assets/compass-xjWxNTP1.js (New) 251 bytes 251 bytes 100.0% 🚀
assets/history-DoW0BtA5.js (New) 237 bytes 237 bytes 100.0% 🚀
assets/activity-BC3yL7bw.js (New) 234 bytes 234 bytes 100.0% 🚀
assets/message-square-CwY9ah_O.js (New) 233 bytes 233 bytes 100.0% 🚀
assets/lock-B_qfPn5V.js (New) 206 bytes 206 bytes 100.0% 🚀
assets/rotate-cw-CKo-B-DP.js (New) 201 bytes 201 bytes 100.0% 🚀
assets/play-DaBj1yjD.js (New) 190 bytes 190 bytes 100.0% 🚀
assets/circle-check-CBMZf-Ui.js (New) 178 bytes 178 bytes 100.0% 🚀
assets/search-c00VEaW4.js (New) 174 bytes 174 bytes 100.0% 🚀
assets/circle-Bl6atBWc.js (New) 130 bytes 130 bytes 100.0% 🚀
assets/add-scalar-classes-D6JRte0y.js (Deleted) -2.17MB 0 bytes -100.0% 🗑️
assets/tanstack-vendor-rmwHyRxL.js (Deleted) -740.2kB 0 bytes -100.0% 🗑️
assets/docs.fumadocs-spike-api-reference-CilzkSkJ.js (Deleted) -442.92kB 0 bytes -100.0% 🗑️
assets/AgentScalarChatInterface.vue-CrPc3yH8.js (Deleted) -201.71kB 0 bytes -100.0% 🗑️
assets/modal-T3XdvK2d.js (Deleted) -184.38kB 0 bytes -100.0% 🗑️
assets/client-BcrwwClT.js (Deleted) -146.06kB 0 bytes -100.0% 🗑️
assets/maintainer-panel-BpV67s52.js (Deleted) -78.99kB 0 bytes -100.0% 🗑️
assets/ui-vendor-UCUuXtav.js (Deleted) -57.04kB 0 bytes -100.0% 🗑️
assets/routes-CSJmTgd_.js (Deleted) -34.98kB 0 bytes -100.0% 🗑️
assets/backtest-calibration-55auBfWB.js (Deleted) -28.47kB 0 bytes -100.0% 🗑️
assets/owner-panel-CmGMLxsv.js (Deleted) -27.36kB 0 bytes -100.0% 🗑️
assets/app-D-HsH-Oa.js (Deleted) -25.7kB 0 bytes -100.0% 🗑️
assets/app.runs-w7v3Ev-m.js (Deleted) -23.56kB 0 bytes -100.0% 🗑️
assets/miner-panel-hRQvT1az.js (Deleted) -20.28kB 0 bytes -100.0% 🗑️
assets/api._op-VlGKWY58.js (Deleted) -17.57kB 0 bytes -100.0% 🗑️
assets/self-hosting-docs-audit-Bpu6EVQC.js (Deleted) -16.61kB 0 bytes -100.0% 🗑️
assets/app.index-WRQXMH9y.js (Deleted) -15.62kB 0 bytes -100.0% 🗑️
assets/docs._slug-BjrBLAj5.js (Deleted) -15.37kB 0 bytes -100.0% 🗑️
assets/playground-panel-5spcLF85.js (Deleted) -14.49kB 0 bytes -100.0% 🗑️
assets/fairness-wwG8mdjc.js (Deleted) -10.6kB 0 bytes -100.0% 🗑️
assets/app.audit-C8JHmJUo.js (Deleted) -10.11kB 0 bytes -100.0% 🗑️
assets/app.config-generator-DywikU9g.js (Deleted) -10.09kB 0 bytes -100.0% 🗑️
assets/extension-DxhsldYp.js (Deleted) -10.04kB 0 bytes -100.0% 🗑️
assets/maintainers-DPuv6LYK.js (Deleted) -8.09kB 0 bytes -100.0% 🗑️
assets/miners-B5A4yYLC.js (Deleted) -7.91kB 0 bytes -100.0% 🗑️
assets/agents-DtFeA4dL.js (Deleted) -7.8kB 0 bytes -100.0% 🗑️
assets/commands-panel-CWeQlAi1.js (Deleted) -6.65kB 0 bytes -100.0% 🗑️
assets/maintainer-workflow-CP3qmHTq.js (Deleted) -6.52kB 0 bytes -100.0% 🗑️
assets/roadmap-CsDCb4ZX.js (Deleted) -6.33kB 0 bytes -100.0% 🗑️
assets/digest-panel-BykrP3lO.js (Deleted) -6.18kB 0 bytes -100.0% 🗑️
assets/repos._owner._repo.quality-DXmSigxD.js (Deleted) -6.14kB 0 bytes -100.0% 🗑️
assets/docs.index-BINgfvMV.js (Deleted) -5.79kB 0 bytes -100.0% 🗑️
assets/docs-nav-D4ayP-42.js (Deleted) -5.59kB 0 bytes -100.0% 🗑️
assets/api.index-CMsMW2yP.js (Deleted) -4.7kB 0 bytes -100.0% 🗑️
assets/docs-PvOtZJTk.js (Deleted) -2.7kB 0 bytes -100.0% 🗑️
assets/api-COtlRSQa.js (Deleted) -2.69kB 0 bytes -100.0% 🗑️
assets/docs-page-TVAw6mPb.js (Deleted) -2.1kB 0 bytes -100.0% 🗑️
assets/table-BosHzanL.js (Deleted) -1.75kB 0 bytes -100.0% 🗑️
assets/app.workbench-DlAVjuAE.js (Deleted) -1.58kB 0 bytes -100.0% 🗑️
assets/session-CROFXbY6.js (Deleted) -1.45kB 0 bytes -100.0% 🗑️
assets/tooltip-CcOl-_WP.js (Deleted) -1.45kB 0 bytes -100.0% 🗑️
assets/tabs-ynLqO_8M.js (Deleted) -1.39kB 0 bytes -100.0% 🗑️
assets/app.repos-CPoSHZYb.js (Deleted) -1.07kB 0 bytes -100.0% 🗑️
assets/input-CRXrLx2R.js (Deleted) -796 bytes 0 bytes -100.0% 🗑️
assets/file-cog-BtKcxoYS.js (Deleted) -758 bytes 0 bytes -100.0% 🗑️
assets/app.maintainer-CQU-717r.js (Deleted) -502 bytes 0 bytes -100.0% 🗑️
assets/sparkles-Cpqxlwht.js (Deleted) -494 bytes 0 bytes -100.0% 🗑️
assets/app.owner-C8nzQNMu.js (Deleted) -474 bytes 0 bytes -100.0% 🗑️
assets/app.commands-BYbruw2Y.js (Deleted) -455 bytes 0 bytes -100.0% 🗑️
assets/app.playground-DKb5IcL_.js (Deleted) -442 bytes 0 bytes -100.0% 🗑️
assets/reveal-6NPQnOk0.js (Deleted) -442 bytes 0 bytes -100.0% 🗑️
assets/index-UnjWs-d0.js (Deleted) -438 bytes 0 bytes -100.0% 🗑️
assets/app.digest-ByjcRXon.js (Deleted) -430 bytes 0 bytes -100.0% 🗑️
assets/eye-off-6Svm9UB6.js (Deleted) -430 bytes 0 bytes -100.0% 🗑️
assets/app.miner-BtK6P7V9.js (Deleted) -422 bytes 0 bytes -100.0% 🗑️
assets/key-round-Cfm3bHVN.js (Deleted) -355 bytes 0 bytes -100.0% 🗑️
assets/bot-COcpFhP_.js (Deleted) -328 bytes 0 bytes -100.0% 🗑️
assets/trash-2-B75dbYsZ.js (Deleted) -328 bytes 0 bytes -100.0% 🗑️
assets/save-82y3I3gs.js (Deleted) -327 bytes 0 bytes -100.0% 🗑️
assets/git-pull-request-arrow-BSx9-1wA.js (Deleted) -321 bytes 0 bytes -100.0% 🗑️
assets/wrench-BV00nwFQ.js (Deleted) -303 bytes 0 bytes -100.0% 🗑️
assets/list-checks-CAztyQK2.js (Deleted) -279 bytes 0 bytes -100.0% 🗑️
assets/shield-Cbekv1ww.js (Deleted) -272 bytes 0 bytes -100.0% 🗑️
assets/workflow-DR1oqpK4.js (Deleted) -265 bytes 0 bytes -100.0% 🗑️
assets/compass-Dq0K5KLz.js (Deleted) -251 bytes 0 bytes -100.0% 🗑️
assets/history-CcweAnqR.js (Deleted) -237 bytes 0 bytes -100.0% 🗑️
assets/activity-DwjbitZn.js (Deleted) -234 bytes 0 bytes -100.0% 🗑️
assets/message-square-lvgr5_5m.js (Deleted) -233 bytes 0 bytes -100.0% 🗑️
assets/lock-BhHYwz_C.js (Deleted) -206 bytes 0 bytes -100.0% 🗑️
assets/rotate-cw-C8evH-La.js (Deleted) -201 bytes 0 bytes -100.0% 🗑️
assets/play-C4zBebD1.js (Deleted) -190 bytes 0 bytes -100.0% 🗑️
assets/circle-check-CUQMkNej.js (Deleted) -178 bytes 0 bytes -100.0% 🗑️
assets/search-CZeF9fLY.js (Deleted) -174 bytes 0 bytes -100.0% 🗑️
assets/circle-CoiM1DY8.js (Deleted) -130 bytes 0 bytes -100.0% 🗑️

@codecov

codecov Bot commented Jul 23, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 92.14%. Comparing base (6908be7) to head (b976a54).
⚠️ Report is 1 commits behind head on main.
✅ All tests successful. No failed tests found.

Additional details and impacted files
@@            Coverage Diff             @@
##             main    #8261      +/-   ##
==========================================
- Coverage   92.14%   92.14%   -0.01%     
==========================================
  Files         785      785              
  Lines       78728    78764      +36     
  Branches    23760    23771      +11     
==========================================
+ Hits        72544    72576      +32     
  Misses       5062     5062              
- Partials     1122     1126       +4     
Flag Coverage Δ
shard-1 51.49% <100.00%> (+0.01%) ⬆️
shard-2 55.78% <2.77%> (-0.04%) ⬇️
shard-3 54.81% <5.55%> (-0.04%) ⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

Files with missing lines Coverage Δ
src/queue/job-dispatch.ts 99.31% <100.00%> (+<0.01%) ⬆️
src/services/knob-loosening-run.ts 100.00% <100.00%> (ø)

... and 1 file with indirect coverage changes

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

calibration: nightly config-drift sentinel — cron wire + one-shot stale-config alert

1 participant