← All activity records

FACTUAL ACTIVITY RECORD · An activity record based on work that took place

Making the screening infrastructure reproducible

Combining a private runtime service, gateway, safety policy, and monitoring in one declaration

Activity period:

Purpose

Sustained operation of the screening infrastructure required a reproducible definition covering not only runtime execution but also its external entry point, access control, policy, and monitoring.

Implementation

A declarative module now combines container storage, a private runtime service, an external gateway, the safety policy, least-privilege access, and monitoring. Its schema fixes inputs and resource connections, while the access boundary prevents direct external calls to the runtime service and requires the gateway path.

The implementation passes fixed inputs to the broker module and requires a configured target as a precondition. Concrete project data and manifest digests are omitted.

Terraform module relationships reproducing broker infrastructure from a fixed target

Rendering diagram…

What was confirmed

Verification results

Module and schema checks confirmed resource connections and the private access boundary.

At the cutoff, applying the declaration to the live environment and production traffic were not verified.

Basis for completion

The work was complete when the required resources and access boundaries were defined as one reproducible configuration and passed static checks.