Task · GCV-0056

Close the synthetic monitoring surface and record the private-probe refusal as design

Description

GCV-0050 is Parked with AC1, AC3 and AC4 unmet. AC4 is the same cross-object admission limit that GCV-0049 hits and is settled the same way. AC1 is different: the pinned provider@s Probe CRD carries no token or token-lifetime field, so a vended private probe cannot meet the composition token expiry ceiling, and the XRD therefore refuses private probes outright with that exact reason, proven at the real API server.

The repository owner settled this on 2026-09-09: the refusal is the shipped design, not a gap. It is implemented, tested and already documented in the catalog README with its real cause. Carrying it as an unmet acceptance criterion makes a finished surface look like a failed lane. AC3, the alert-path delivery proof, is a separate question and is judged on its own merits rather than folded into this settlement.

Do not substitute Secret expiry for provider token expiry. That was considered and rejected in wave 6: they are not the same lifetime and the remote token would remain unbounded.

Acceptance Criteria

Definition of Done

Implementation Plan

Apply the frozen private-probe and cross-object admission settlements, record the provider-evidenced decision, prove the existing CheckAlerts-to-alerting linkage at the configuration boundary, reconcile public documentation, and close GCV-0050.

Implementation Notes

Created accepted decision decision-0002 with provider-source evidence, the Secret-expiry rejection, and the exact provider-pin condition that could reopen private probes. Reconciled the catalog README to separate declared-profile admission, observed-stack reconciliation, rendered and provider-admitted CheckAlerts linkage, and unproven rule evaluation or delivery. Focused renderer and provider-admission tests passed; weakening the positive numeric observed Check ID guard made TestSyntheticMonitoringRendersCheckAlertsOnlyFromObservedCheckIDs fail because it rendered CheckAlerts from malformed observation. CodeRabbit was skipped because this lane changed documentation and tracker records only; no branching logic changed.

Final Summary

Closed GCV-0050 with private-probe refusal as shipped design, declared-profile admission versus observed-stack reconciliation stated, and CheckAlerts proven through render and provider admission. decision-0002 carries the provider-bump review condition. Completing SHA b1ceaa36d63dc8b449215b9b362103d7da9b1dbf; hosted Validate public reference run 34337220901 succeeded; local just check passed at 84.3% with zero skips.

View the source file on GitHub