feat(go): persist Python-compatible incidents

This commit is contained in:
Luna 2026-07-22 01:59:49 -07:00
parent f85c2e831a
commit 538d1d954a
No known key found for this signature in database
13 changed files with 555 additions and 46 deletions

View file

@ -72,9 +72,11 @@ hardened systemd unit writes JSONL to journald, retains a bounded copy of the
event stream plus baseline state and an atomic heartbeat under
`/var/lib/enodia-sentinel-go`, and fails open to polling if a probe cannot load.
It also writes bounded `enodia.alert.snapshot.v1` JSON/text pairs with truthful
status counts. It does not replace, install over, or write state for the Python
daemon; Python remains authoritative for richer forensic enrichment, incidents,
assurance, notifications, and the remaining subsystem parity.
status counts and a private Python-compatible `enodia.incident.v1` index using
process-lineage/time-window grouping. It does not replace, install over, or
write state for the Python daemon; Python remains authoritative for richer
forensic enrichment, assurance, notifications, management consumers, and the
remaining subsystem parity.
## Why these detectors