Observability and operational evidence

Operational signals should correlate organization, estate, object, wave, invocation, workflow, adapter run, and evidence reference. Redact secret-shaped fields before durable logging.

What to alert on

• repeated assessment/conversion adapter failure;
• projection cursor lag or reconciliation divergence;
• evidence registry or signing-key unavailability;
• validation runs rejected for provenance or digest mismatch;
• readiness blockers that exceed the wave plan;
• waivers approaching expiry;
• stale certificates in a planned wave;
• transfer lag outside the accepted RPO;
• workflows waiting beyond their approval window;
• uncertain cutover effects awaiting reconciliation.

Radar can own cross-estate operational observations. Airlift may require a Radar-green observation and record its immutable reference/digest; it does not copy the Radar monitor model or infer health from task completion.