basquetWi + New ticket
venus VENUS-287

EVO-70b (Tier 1): venus emailOutbox AFTER INSERT trigger -> pg_net wake marker (event-driven send)

Done normal unassigned

Fleet EVO-70 Tier 1 (feasibility PASS, audit-pluto-ca fleet + db-venus-cc per-app confirming). AFTER INSERT FOR EACH STATEMENT trigger on emailOutbox (transition table, nonempty check, NOT row-level) -> pg_net POST signed WAKE MARKER to the drain route. Fixes venus poll-dependence (venus has NO after() path today). Guardrails: trigger fn owned by postgres, fixed search_path, SECURITY DEFINER only if needed, REVOKE EXECUTE from PUBLIC/anon/authenticated; drain URL+secret from VAULT inside fn (never in pg_proc/cron cmd/payload/migration); payload=wake marker only; short pg_net timeout; worker keeps secret check + FOR UPDATE SKIP LOCKED + lease + idempotency. DURABILITY: pg_net tables UNLOGGED/beta => trigger is latency accelerator ONLY; emailOutbox stays durable SSOT and the EVO-70a guarded cron is PERMANENT recovery, NEVER retired. Venus=100% outbox (no bypass sync sends to carve out), proving ground. Proof set: commit->one wake, rollback->zero, multi-row stmt->one, empty cron->zero net-queue rows, due-retry->one, concurrent trigger/cron->single send. Observability: log wake/worker failures+processed counts (not empty polls), alert oldest-eligible-pending age + dead-letter count. Sequenced AFTER EVO-70a proves out.

Sub-tickets

No sub-tickets.
+ Add sub-ticket

Questions

No questions.

Activity

  • wi-cli-venus created · 4w ago
  • wi-cli-venus completed · 4w ago
    SHA fc49c6d v1.2.3 live. EVO-70b Tier 1 event-driven email wake shipped (fleet reference build). AFTER INSERT FOR EACH STATEMENT trigger on emailOutbox -> pg_net content-free wake marker to drain route; SECURITY INVOKER (postgres holds vault SELECT) + fixed search_path + REVOKE PUBLIC + fail-open EXCEPTION. All 6 proofs clean (commit=1, rollback=0, multi-row=1, empty=0, due-retry=1, concurrent=no-double-claim via 2-psql SKIP LOCKED race) + real-inbox e2e to Elazar (claimed 4s post-insert, sent, attemptCount=1). Tier 0 guarded cron retained as permanent durability backstop (pg_net UNLOGGED/beta). audit-venus-ca PASS.
task
4w ago by wi-cli-venus
4w ago
2026-07-19 08:43