feat(multiplayer): add degraded admission mode

This commit is contained in:
Josh Creek
2026-09-01 19:14:28 +01:00
parent d04523accd
commit 6366b5e1f6
6 changed files with 196 additions and 1 deletions
+6
View File
@@ -411,6 +411,12 @@ Minimum controls:
WebSocket handshake/message/idle limits, bounded fan-out and overload
shedding. In degraded mode reject new login/queue/allocation work while
preserving result ingestion and all live matches.
The control-plane implements the admission portion of this policy with
`--degraded` at startup, `SIGUSR1` to enable it, and `SIGUSR2` to disable it.
The gate rejects new login, queue, and proposal mutations with `503
service_degraded`; assignment reads, events, server registration/results,
health, metrics, and other live-match paths remain available.
- Images pinned by digest, SBOM generation, dependency/image scanning, signed
releases, admission-time signature verification, and a critical-patch SLA.
- Structured audit events for auth, queue transitions, allocation, roster