Monitoring

Monitoring built on the health surfaces that actually exist.

Health endpoints

Cloud GET /healthz reports db, storage, and email status — all three verified true live at api.defendablecloud.com.
Router GET /health reports db_status — the router’s boot-smoke CI job asserts it returns ok.

Platform checks

Fly.io runs a built-in HTTP health check against the cloud’s /healthz on a 30s interval (from fly.toml), with auto-start and min_machines_running = 1.

Receipt / ledger integrity

Integrity monitoring is framed around GET /ledger/verify, which recomputes the per-org receipt hash chain (sequential org_seq, parent links, receipt_sha256) and flips ok:false on any tamper. Run it on a schedule to catch drift.

These are operator-grade health and integrity surfaces — not a full metrics/APM platform.

🐝 Operator-grade · books and records · to the shed.