platform/

Package agentmetrics owns Fenced operational metrics.

Package artifact provides content-addressed Artifact storage adapters.

Package compat provides backward-compatibility shims for the AgentOS → Fenced rename.

Package errorcode is the canonical registry for stable public Fenced error codes.

Package grpcx centralizes the transport options every fenced gRPC boundary uses: message size ceilings above the largest payloads (assignments embed the full workload spec and receipt lists), keepalive so long-lived worker connections detect dead peers promptly instead of hanging on a half-open transport, bounded connect attempts so a down endpoint surfaces quickly instead of wedging the first call, and OpenTelemetry interceptors so every boundary participates in the reference observability stack.

Package migrate applies ordered, checksum-protected SQL migrations.

Package opensearch is the minimal REST client for the OpenSearch projection target (ADR-013).

Package otel wires the reference observability stack (tech baseline §15): OTLP trace/metric/log exporters configured through the standard OTEL_* environment variables, plus a bounded async slog → OTel log bridge.

Package outbox delivers PostgreSQL outbox events to a durable publisher.

Package projector applies canonical store events to the OpenSearch search projection (ADR-013).

Package redact contains cross-cutting trust-boundary sanitizers.

Package slo evaluates immutable v1 GA service objectives from a measured observation window.

Package spiffe implements the X.509-SVID identity boundary of the Secure Runtime (ADR-011): every fenced gRPC peer presents a certificate whose SPIFFE ID names its exact principal, and every boundary verifies the chain against the trust bundle and matches the presented identity against the claims of the request.