feat(profiles): enable exact process context and syscall summaries on the canary #69

Merged

binjovi-bot merged 1 commit from codex/pipeline-syscall-canary-20260909 into trunk

2026-09-09 10:47:59 +00:00

sean commented

2026-09-09 10:47:20 +00:00

Owner

The binary is pinned to verified Binjovi v0.1.527. Collector metrics expose registration failures, archive failures, and kernel losses. Pod metadata permissions stay read-only. Repository checks, pinned Alloy config validation, and Kubernetes server dry-run pass. The BuildKit runtime hook is enabled in its Flux owner as the next step; fleet rollout still requires the overhead gate.

Start the Binjovi process collector before Alloy on the single canary worker. A startup check verifies kernel syscall counts and process cleanup. The collector shares the standard OTel trace context map with Alloy and exports bounded syscall summaries to the private profile store. The binary is pinned to verified Binjovi v0.1.527. Collector metrics expose registration failures, archive failures, and kernel losses. Pod metadata permissions stay read-only. Repository checks, pinned Alloy config validation, and Kubernetes server dry-run pass. The BuildKit runtime hook is enabled in its Flux owner as the next step; fleet rollout still requires the overhead gate.

sean added 1 commit

2026-09-09 10:47:20 +00:00