Nightly post-deploy smoke is LIVE in CI on main. End-to-end verified: secrets set, workflow + spec + config landed, contract drift fixed, GHA run 25962685301 green 5/5. From this point forward, R-Dash

Decision

Nightly post-deploy smoke is LIVE in CI on main. End-to-end verified: secrets set, workflow + spec + config landed, contract drift fixed, GHA run 25962685301 green 5/5. From this point forward, R-Dash staging is smoke-tested every 03:00 IST automatically — drift between deploys (TLS rotation, container crash-loop, auth regression, RFC 7807 envelope break, agents endpoint outage) catches in next-day CI before AJ discovers it manually.

Rationale

(1) Verification — live GHA run 25962685301 completed status=success, all 5 journeys green; two prior failures (25962555037, 25962617127) traced via gh run view —log-failed and root-caused before patching (no workarounds): first = workflow on main without spec, second = spec test 4 assumed RFC 7807 error envelope while live API returns 200/requires_mfa (curl-probed). (2) /tmp clean. (3) Documentation cascade — 3 commits on main (bf15e6c, 296a67a, e9fa0bc) all carrying full Constraint/Rejected/Directive/Confidence/Scope-risk/Not-tested trailers; test 4 comment block updated in-place to document live contract; secrets list visible via gh secret list. (4) Explicit Gate via this ST session. Pre-mortem identified 5 candidate failure modes — all mitigated (rate-limit doesn’t compound on fresh GHA IPs; password rotation manual op; LLM/Snowflake outages don’t affect smoke; trace retention 14d sufficient; cron timing safe). 0.94

Alternatives Rejected

Outcome

Pending