Ingress Observer
An Ingress Observer is a passive observer at a canary's release point that records, by effect token, that each canary was actually delivered. A canary with no ingress record is Undelivered and is never scored.
What it means
A canary that never arrived proves nothing. Without this record, an attack that was never delivered could be counted as an attack that was stopped.
The rules
- Records delivery per canary by effect token, timestamped and anchored.
- Passive only. It never alters or delays traffic.
- A canary with no ingress record is Undelivered and excluded. It is never scored Stopped.
- It is Integration Point IP-4. The Release Driver (IP-3) does the delivering, in committed order and unmodified, without ever seeing labels.