Skip to harness content
Open technical reference map

Production domain 02

Backend, API & Business Logic

3 capabilities and 3 controls define the canonical obligation set for this domain.

Domain 02Dependencies: Observability
Canonical pathcontrols/production-layers.v2.jsonRevision69bab1cInspect source

Applicability and claim boundary

This domain defines obligations. It does not prove that a specific repository or run satisfies them.

Applicability
Assess this domain when the authorized workload can affect its capabilities. Resolve every control as required, potentially affected, or not applicable before completion.
Proof level
The accepted formats below identify possible evidence inputs. A format alone does not establish semantic or authoritative assurance; provenance and the commissioned proof contract set the supported level.
Claim boundary
Static controls are requirements, not execution evidence, provider attestation, or proof of production readiness.

Capabilities

service-contracts

Service Contracts

Keep APIs and events explicit, versioned, and compatible.

failure-resilience

Failure Resilience

Make dependency, timeout, retry, and idempotency behavior safe and testable.

request-observability

Request Observability

Preserve correlation and diagnostic context across request boundaries.

Controls

API-CONTRACT-001Service Contracts

API and event contracts are versioned and compatibility-tested.

Accepted evidence format: Command output
API-FAILURE-001Failure Resilience

Timeout, retry, idempotency, and dependency-failure paths are proven.

Accepted evidence format: Command output
API-TRACE-001Request Observability

Requests carry end-to-end correlation and observable failure context.

Accepted evidence format: Artifact, Provider report

Conditional dependencies

Identity, Authorization & Tenant Isolation