unit

hz-01

plant

acct/prod-eu · cluster/edge-1 · idp/workforce

Acting inside the envelope with a human on a dead-man switch. This console is a demonstration — no real system is connected.

plant · named resources

cluster/edge-1 · node-7saturation0.93
cluster/edge-1 · apip99 latency2.41s
cluster/edge-1 · workershung jobs3
acct/prod-eu · sg-publicegress rules0.0.0.0/0
idp/workforce · svc-deployprivilegewidened 4h ago
acct/prod-eu · releaseversion4.11.3
acct/prod-eu · rds-mainhealthnominal

setpoint vs actual · smallest reversible move

release 4.11.3

release 4.11.2

release rollback

sg-public egress 0.0.0.0/0

egress deny-all

security-group isolate

svc-deploy: admin

svc-deploy: least-privilege

freeze identity

node-7 saturation 0.93

saturation < 0.70

drain

envelope · grants and kills

Named resources onlygranted

every target is on the plant list

Unwind requiredgranted

each proposed move has a reverse

Rate cap 6 moves / hourgranted

2 used

Cannot delete data storeskilled

proposal: drop rds-main replica — refused

Cannot widen own IAMkilled

proposal: grant self iam:PutPolicy — refused

actuator library · closed and reversible

No open-ended shell. Pick a move to play the cycle onto the tape.

black box · signed, append-only

5 entries

  1. 02:41:07Zverifydrain node-7 · p99 0.48s · 14/14 replicas · no other resource touched
  2. 02:40:52Zactdrain node-7 · 14 pods rescheduled · unwind: uncordon (24h)
  3. 02:40:50ZenvelopeGRANTED · named resource · unwind present · 2/6 moves this hour
  4. 02:40:49ZenvelopeKILLED · proposal drop rds-main replica hit: cannot delete data stores
  5. 02:40:44Zsensep99 2.41s (setpoint <= 0.60s) · saturation 0.93 on node-7

ed25519 signed · the tape survives the horse