Master plan Progress tracking now reflects 709d2f5af. Captures the
score-equals-createdAt invariant decision (requeue keeps original
score; createdAt is immutable across retries) so future sessions don't
relitigate the Q1 underspec.
Hardens the master plan against context-loss between sessions:
- Progress table mapping each phase to commits + status.
- Phase A patterns section documenting the discriminated-union
findResource shape that A1 and A2 established (reusable for Phase
B/C/D).
- Explicit note on what SyntheticRun has today vs what Phase C's
replay work will need extended.
- Phase B's exact order spelled out (B1-B6) referencing the locked
Q-docs.
- A "resuming guidance" footer for a fresh session.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Master plan and five locked sub-design docs covering the API parity work:
- mollifier-api-parity.md — endpoint inventory, invariant, phased TDD plan.
- mollifier-listing-design.md (Q1) — ZSET buffer, compound cursor, no banner.
- mollifier-replay-design.md (Q2) — single code path, PG-or-buffer resolution.
- mollifier-mutation-race-design.md (Q3) — wait-and-bounce with safety net.
- mollifier-cancel-design.md (Q4) — mark_cancelled + drainer bifurcation.
- mollifier-idempotency-design.md (Q5) — keys in both stores symmetrically.
Plus the original phase-3 plan it builds on and the bash parity script
that surfaced the gaps and acts as the regression guard during
implementation.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Per-org rollout procedure for turning the trigger-burst mollifier on
across the fleet. Mirrors the plan's structure (pre-rollout → test cloud
→ first customer → expansion → kill switches) but reflects the controls
that actually shipped, not the plan's original design:
- Per-ORG opt-in via `Organization.featureFlags.mollifierEnabled` JSON
(not per-env via the global FeatureFlag table — the shipped impl
deliberately keeps the trigger hot path free of an extra DB query).
- Per-replica drainer via the `TRIGGER_MOLLIFIER_DRAINER_ENABLED` env
(defaults to inherit `TRIGGER_MOLLIFIER_ENABLED`).
- `TRIGGER_MOLLIFIER_*` env-var prefix.
- `MollifierConfigurationError` fail-loud-on-boot for misconfigured
shutdown timeouts (referenced in the alarm list).
- State matrix updated to the three live controls (gate / org flag /
drainer flag) rather than the two-keyed per-env model in the plan.
Companion to `.server-changes/mollifier-phase-3-live.md` (changelog
entry) — this file is the operator runbook.
Dan Sutton