Status

Changes

• Added pinned local tooling installs for CI parity.
• Hardened Postgres transaction retries with backoff and retryable error scoping.
• Updated load testing to provision its own low-privilege principal and avoid seeded admins.
• Clarified AI verifier policy as advisory-only with audit note guardrails.

Golden Path

• make tools
• make db-migration-lint
• make ci
• Requires Docker running (local Postgres + image build/scan).

Verification (Local)

Commands run:

• go fmt ./...
• go vet ./...
• go test ./...
• make test-integration
• docker compose up -d --build
• make smoke
• make perf-smoke
• curl -s http://localhost:8080/healthz | jq .
• curl -s http://localhost:8080/readyz | jq .
• curl -s http://localhost:8080/metrics | grep -E '^(build_info|qazna_ready)'

Results:

• make smoke: smoke ok
• make perf-smoke: loadtest finished: success=10 failed=0 duration=45.938ms
• /healthz:

  {
    "service": "qazna-api",
    "status": "ok",
    "version": "dev"
  }

• /readyz:

  {
    "status": "ready"
  }

• /metrics:

  build_info{commit="local",version="dev"} 1
  qazna_ready 1

CI Parity Commands

• make tools
• make db-migration-lint
• make ci
• make test-integration (uses local Docker Postgres when QAZNA_PG_DSN is unset)
• docker compose up -d --build
• curl -s http://localhost:8080/healthz | jq .
• curl -s http://localhost:8080/readyz | jq .
• curl -s http://localhost:8080/metrics | grep -E '^(build_info|qazna_ready)'

Optional tracing example:

• QAZNA_OTEL_ENABLED=1 QAZNA_OTEL_ENDPOINT=otel-collector:4317 QAZNA_OTEL_INSECURE=1 docker compose up -d --build

Known Gaps / TODO

• Run make tools before make ci on clean machines to install pinned tooling.