vibecorp/platform · PR #5614 · Retry storm guard on outbox dispatcher Demo PR (public-style)

Trust Certificate

Block. Human-only workflow.

Blast radius unknown or destructive without rollback. Staff-only.

82Trust score

Block

Intent

Implements retry storm guard on outbox dispatcher.

Change class

Core infra · retry behavior · external client touched

Ownership boundary

Files contained within core infra module. Ownership unambiguous.

Critical·Workflow: Core infrastructure changes·Reviewer cycles in history: 2

Required proof

Defined by Core Infra Pack (v3). Maintained by VibeOps — improves with every customer's replay misses.

Blast-radius map

Partial

Partial: covered for happy path, not for upstream 5xx storm.

Idempotency proof

Missing

Not present. Required by Integration Trust Pack v3.

Rollback drill

Missing

Not present. Required by Integration Trust Pack v3.

Staff sign-off

Missing

Not present. Required by Integration Trust Pack v3.

Model route

Per-decision routing. Cheaper models do the classification; frontier model handles the reasoning; humans only on remaining ambiguity.

1

SLM (Kimi-style)

Naming, ownership classification, surface-level policy checks. Passed in 0.6s @ $0.003.

2

Claude Opus 4.7

Contract reasoning: would this retry storm an upstream that has no idempotency contract? Returned ambiguous.

3

Human (escalate)

Required only because contract proof remains missing. Routed to @connectors-team owner.

Human-ask · what reviewer actually needs to answer

Reviewer must validate the missing evidence items listed above.

Loading…