- changeset: drop "deferred" wording — phase-1 actively dual-writes + runs
the drainer ack loop.
- worker.server.ts: wrap mollifier drainer init in try/catch + register
SIGTERM/SIGINT handlers so the polling loop stops cleanly on shutdown.
- bufferedTriggerPayload: only serialise idempotencyKeyExpiresAt when an
idempotencyKey is present (avoid impossible orphan-expiry payloads).
- mollifierTelemetry: narrow recordDecision reason to DecisionReason union
to keep OTEL attribute cardinality bounded.
- mollifierGate: rename resolveOrgFlag → resolveFlag. The underlying
FeatureFlag table is global by key, so the "org" prefix was misleading;
per-org gating is out of scope for phase-1.
- tests: drop vi.fn mocks. mollifierGate now uses plain closure spies;
mollifierTripEvaluator runs against a real MollifierBuffer backed by a
redisTest container (closed client exercises the fail-open path).
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Dan Sutton
31aefa1bf2