Orchestrata Ultimate / RTM / 060-enhanced-pam-governance
RTM: 060-enhanced-pam-governance
Requirement to symbol to test rows for 060-enhanced-pam-governance: Enhanced PAM++ Governance - Runtime Integration.
At a glance
| Item | Value |
|---|---|
| Requirement IDs | 75 |
Traced from src/ |
0 (0.0%) |
| Untraced | 75 |
Cited from tests/ |
0 (0.0%) |
Traced in src/ but not cited from tests/ |
0 |
Reading this matrix
This matrix lists each of the 75 requirement IDs of spec 060-enhanced-pam-governance with the src/ symbols that cite it and the tests that cite it. 0 of them (0.0%) have at least one citing symbol and 75 have none.
0 requirements are also cited from tests/, and 0 are traced in code but never named by a test. A test citation is a @traces on a test function; it shows intent to cover, not that the test runs or reaches the symbol.
Rows showing none in the symbols column are the gaps to close first. The densest untraced groups are REQ-060-* (75).
Requirement to symbols to tests
| Requirement | Symbols in src/ |
Tests citing it |
|---|---|---|
REQ-060-001 The system SHALL complete a hot policy reload without dropping in-flight requests. |
none | none |
REQ-060-002 The system SHALL default to deny when PAM++ is unavailable. |
none | none |
REQ-060-003 A governance decision record SHALL carry decision_id (matching... |
none | none |
REQ-060-004 The governance configuration SHALL carry enabled, default_policy (allow or... |
none | none |
REQ-060-005 The system SHALL enforce governance at the API middleware level. |
none | none |
REQ-060-006 The system SHALL block requests that fail governance checks. |
none | none |
REQ-060-007 The system SHALL return 451 status for governance blocks. |
none | none |
REQ-060-008 The system SHALL cache governance decisions in Redis. |
none | none |
REQ-060-009 The system SHALL respect cache TTL. |
none | none |
REQ-060-010 The system SHALL invalidate the cache on policy changes. |
none | none |
REQ-060-011 The system SHALL reload policies without restart. |
none | none |
REQ-060-012 The system SHALL push policy updates via WebSocket. |
none | none |
REQ-060-013 The system SHALL support policy rollback. |
none | none |
REQ-060-014 The system SHALL expose governance metrics via Prometheus. |
none | none |
REQ-060-015 The system SHALL track decision counts by outcome. |
none | none |
REQ-060-016 The system SHALL track latency percentiles. |
none | none |
REQ-060-017 The system SHALL continue operating if PAM++ is unavailable. |
none | none |
REQ-060-018 The system SHALL use the cache during outages. |
none | none |
REQ-060-019 The system SHALL alert on governance failures. |
none | none |
REQ-060-101 Decision latency SHALL be under 5 ms for cached decisions and under 50 ms for uncached... |
none | none |
REQ-060-102 The decision cache hit rate SHALL exceed 95%. |
none | none |
REQ-060-103 A policy reload SHALL complete in under 10 seconds. |
none | none |
REQ-060-104 The system SHALL sustain a throughput of 1000 decisions/second. |
none | none |
REQ-060-105 The system SHALL maintain operation during PAM++ outages via degradation modes. |
none | none |
REQ-060-106 The system SHALL preserve policy versions for rollback capability. |
none | none |
REQ-060-107 The system SHALL log all governance decisions for audit. |
none | none |
REQ-060-108 The system SHALL support horizontal scaling of governance middleware. |
none | none |
REQ-060-109 The system SHALL distribute the cache across a Redis cluster. |
none | none |
REQ-060-110 The system SHALL handle 10,000+ concurrent governance requests. |
none | none |
REQ-060-111 The system SHALL achieve 99.9% uptime for governance services. |
none | none |
REQ-060-112 The system SHALL provide sub-second failover to degradation mode. |
none | none |
REQ-060-113 The system SHALL support geographic distribution of governance nodes. |
none | none |
REQ-060-020 On a PAM++ timeout (ERR-001) the system SHALL serve the cached decision, log a warning... |
none | none |
REQ-060-021 When PAM++ is unavailable (ERR-002) the system SHALL activate degradation mode and... |
none | none |
REQ-060-022 On a decision cache miss (ERR-003) the system SHALL query PAM++, cache the result and... |
none | none |
REQ-060-023 On a policy syntax error (ERR-004) the system SHALL reject the new policy and keep the... |
none | none |
REQ-060-024 The system SHALL detect a circular dependency in a policy (ERR-005) at load time,... |
none | none |
REQ-060-025 On a Redis connection failure (ERR-006) the system SHALL fall back to an in-memory... |
none | none |
REQ-060-026 When the decision cache is full (ERR-007) the system SHALL evict the oldest entries... |
none | none |
REQ-060-027 On a WebSocket disconnect (ERR-008) the system SHALL auto-reconnect with exponential... |
none | none |
REQ-060-028 On a policy reload failure (ERR-009) the system SHALL roll back to the previous... |
none | none |
REQ-060-029 On a metric export failure (ERR-010) the system SHALL log locally, continue operation... |
none | none |
REQ-060-030 The system SHALL reject an invalid policy scope (ERR-011) at validation and provide... |
none | none |
REQ-060-031 On unauthorized policy access (ERR-012) the system SHALL deny access and log a... |
none | none |
REQ-060-032 The governance middleware SHALL evaluate every request against subject, action and... |
none | none |
REQ-060-033 The system SHALL expose the policy management API: GET/POST... |
none | none |
REQ-060-034 The governance middleware SHALL implement the FastAPI middleware interface and SHALL... |
none | none |
REQ-060-035 The governance middleware SHALL catch and handle GovernanceError exceptions and... |
none | none |
REQ-060-036 The PAM++ interface SHALL convert policy queries into Prolog predicates. |
none | none |
REQ-060-037 The PAM++ interface SHALL handle timeout and error conditions and SHALL support both... |
none | none |
REQ-060-038 The decision cache SHALL be Redis-backed with a configurable TTL, SHALL key entries as... |
none | none |
REQ-060-039 The policy manager SHALL manage the policy lifecycle (create, update, delete) and... |
none | none |
REQ-060-040 The policy manager SHALL maintain policy version history and SHALL trigger cache... |
none | none |
REQ-060-041 A policy-update notification pushed over WebSocket SHALL carry type of... |
none | none |
REQ-060-042 Governance policies SHALL be expressed as Prolog facts and rules. |
none | none |
REQ-060-114 All governance APIs SHALL require the admin role. |
none | none |
REQ-060-115 Policy changes SHALL require an approval workflow. |
none | none |
REQ-060-116 All policy modifications SHALL be written to the audit log. |
none | none |
REQ-060-117 Sensitive policy data SHALL be encrypted. |
none | none |
REQ-060-118 Integration tests SHALL cover PAM++ connectivity, Redis cache operations, WebSocket... |
none | none |
REQ-060-119 Unit test coverage SHALL exceed 90%, integration coverage SHALL be 100%, and every... |
none | none |
REQ-060-043 The governance system SHALL integrate with the orchestrata kernel by direct import,... |
none | none |
REQ-060-044 The governance system SHALL obtain user roles, permissions and context from the auth... |
none | none |
REQ-060-045 The policy store SHALL be a PostgreSQL database with JSONB policy storage supporting... |
none | none |
REQ-060-046 The governance system SHALL publish Prometheus metrics at /metrics, SHALL define... |
none | none |
REQ-060-047 The governance system SHALL emit policy-update, degradation-mode and violation events... |
none | none |
REQ-060-048 The cache layer SHALL run as a Redis Cluster of 3 masters and 3 replicas with AOF... |
none | none |
REQ-060-049 The policy engine SHALL run on the native SWI-Prolog runtime at 1000 decisions/second... |
none | none |
REQ-060-050 The governance system SHALL enforce all 11 constitutional articles. |
none | none |
REQ-060-051 The governance system SHALL provide violation detection, escalation paths and... |
none | none |
REQ-060-120 Governance components SHALL log all major operations at appropriate log levels, SHALL... |
none | none |
REQ-060-121 The governance system SHALL emit operation duration histograms, request and error rate... |
none | none |
REQ-060-122 The governance system SHALL propagate traces across component boundaries, SHALL attach... |
none | none |
REQ-060-123 The governance system SHALL raise critical alerts on error rate spikes, performance... |
none | none |
REQ-060-124 The governance system SHALL provide an operational dashboard showing real-time system... |
none | none |