Add request correlation and per-request database telemetry

.github/workflows/rust.yml

@@ -132,8 +132,8 @@ jobs:
     - name: Run DuckDB-enabled core tests
       run: cargo test -p tinycloud-core --features duckdb
 
-    - name: Run DuckDB policy through node binaries
-      run: cargo test -p tinycloud-node --features duckdb --test duckdb_diagnostics_policy --test duckdb_offline_policy
+    - name: Run DuckDB policy and request telemetry through node binaries
+      run: cargo test -p tinycloud-node --features duckdb --test request_telemetry_authenticated --test duckdb_diagnostics_policy --test duckdb_offline_policy
 
   clippy:
     name: clippy (workspace)

CHANGELOG.md

@@ -2,6 +2,7 @@
 
 ## [Unreleased]
 
+- Request events include validated/echoed UUID correlation, typed replacement flags, node-keyed target account/space pseudonyms and per-request database acquisition/execution timings and attempt counts. Driver/actor instrumentation includes failures and request-awaited audit batches; forwarding requires explicit first-party origin classification. A shared core `Pseudonymizer` preserves existing account/space hashes, adds the service/space-scoped database hash primitive for F6, and is derived once at startup for injection into consumers. See `docs/request-telemetry.md` for the wire contract, key custody, restart joinability and coverage/exclusions (TC-959 N2).
 - CACAO/SIWE delegation ingestion normalizes ECDSA recovery IDs 0/1 to 27/28 before hashing and persisting the canonical DAG-CBOR bytes (TC-1071). Equivalent low-s signatures now share one delegation CID, including the CID used for revocation lookup. High-s signatures are rejected during decoding, matching the existing EIP-191 verifier and EIP-2 low-s convention; UCAN/JWS bytes remain unchanged. Existing stored delegation IDs are not rewritten.
 - Synchronize the standalone M1, W5 and load-signer Cargo locks with CACAO's `k256` dependency so `--locked` dependency resolution succeeds (TC-1071). Keep the load signer compatible with the SDK's default invocation lifetime.
 

Cargo.toml

@@ -19,6 +19,8 @@ default-members = ["tinycloud-node-server"]
 exclude = [
     "test/load/signer",
     "vendor/sqlx-core",
+    "vendor/sqlx-sqlite",
+    "vendor/sqlx-postgres",
     "test/m1-realdata-e2e",
     "test/w5-policy-runtime-node-e2e",
 ]
@@ -62,6 +64,10 @@ slab = { git = "https://github.com/tokio-rs/slab", tag = "v0.4.11" }
 # when upstream supports them, or sea-orm moves to an sqlx that does
 # (TC-1061).
 sqlx-core = { path = "vendor/sqlx-core" }
+# TC-959: carry request metrics across SQLite worker commands (see its PATCH.md).
+sqlx-sqlite = { path = "vendor/sqlx-sqlite" }
+# TC-959: measure raw BEGIN/SAVEPOINT for SQLx and direct SeaORM callers.
+sqlx-postgres = { path = "vendor/sqlx-postgres" }
 
 [profile.release]
 lto = "fat"