Add DetMir operational maturity harness

[igor04091968]

$## Summary\n- add an offline operational maturity harness covering all six requested maturity areas\n- add contract manifest and fixtures for integration, API compatibility, fault injection, bounded load, config/migration validation and observability checks\n- add CI workflow with safe offline PR checks and opt-in live contract checks\n- document operator workflow and add the harness to the validation runbook\n\n## Covered areas\n- Integration test harness: local fixture HTTP contour for portal/worktime/security endpoints\n- Fault injection: 503, timeout and connection reset classification within bounded time\n- API compatibility: required OpenAPI paths, schemas and runtime endpoints\n- Config/migration validation: JSON/YAML examples, systemd units/timers and ClickHouse init SQL idempotency/destructive DDL guard\n- Load/resource profile: bounded local concurrency/p95/heap growth smoke, no sizing claims\n- Observability: required health/version/readiness fields, diagnostic headers and Prometheus metrics anchored in fixtures and source\n\n## Verification\n- ruby YAML parse for workflows\n- git diff --check\n- node --check scripts/operational-maturity-check.mjs\n- node scripts/operational-maturity-check.mjs --json\n- node scripts/pilot-validation-smoke.mjs\n- node scripts/deployment-readiness-smoke.mjs\n- python3 scripts/public_secret_pattern_check.py\n\n## Production guardrails\n- public PR CI is offline only\n- live contract is workflow_dispatch-only and reads AWATCH_OPS_LIVE_URL if configured\n- does not enable heavy DLP, Loki or always-on Velociraptor

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 2216690b-3529-4852-bf9c-8cd81c3c8ab0

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch detmir-operational-maturity-20260701

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}