adaptive_export: restore dark-vector tracepoint table export onto main (8 dx_* tables) - #89

Merged

entlein merged 47 commits into

mainfrom

feat/ae-dark-tables-on-main

Aug 7, 2026

Commits on Aug 7, 2026

feat(ae #126): 8 dark-vector tracepoint tables (schema + 4-file allowlist)

entlein
and
claude
committed
834808e
feat(ae): pgsql firehose timeout (#7) + pid->pod enrichment for dark tables (#126)

entlein
and
claude
committed
08ad4b5
adaptive_export: dc_snoop replaces execve in the dark-table export set

Entlein
authored and
entlein
committed
4034863
adaptive_export: dark-vector pod filter must use the namespaced pod key

Entlein
authored and
entlein
committed
89c97d4
adaptive_export: register dc_snoop + stack_trace + creds_change retention scripts at boot

Entlein
authored and
entlein
committed
b2ff115
adaptive_export: TrimSpace API key / host / DSN / cluster-id (fixes RST_STREAM PROTOCOL_ERROR)

Entlein
authored and
entlein
committed
d2cd449
fix(ae): ASCII-only comments in stack_trace.pxl preset

entlein
and
claude
committed
bf3165d
fix(lint): disable mypy on-disk cache to stop concurrent-run crashes

entlein
and
claude
committed
fe33499
fix(lint): add license headers to AE presets + fix dc_snoop E127

entlein
and
claude
committed
b7f082c
adaptive_export: native ClickHouse DSN for retention plugin (fixes vizier crash)

Entlein
authored and
entlein
committed
3894de8
adaptive_export: dark-table schema must match the native export sink

Entlein
authored and
entlein
committed
f112755
adaptive_export: presets emit event_time (nanos) so sink keeps DateTime64(9)

Entlein
authored and
entlein
committed
8c8e0e6
adaptive_export: AE deploys dark-vector bpftraces at boot (owns tables + traces)

Entlein
authored and
entlein
committed
c6eeac8
adaptive_export: confirm tracepoint deploy by table, not the mutation stream

Entlein
authored and
entlein
committed
8bade2a
adaptive_export/e2e: creds_change trace calibration (fire + verify in CH)

Entlein
authored and
entlein
committed
064530c
fix(lint): gofmt config.go (align one-line clickhouse accessors)

entlein
and
claude
committed
52db645
adaptive_export: pid->pod/namespace enrichment for dc_snoop + creds_change

Entlein
authored and
entlein
committed
3d9ffee
adaptive_export: full k8s metadata enrichment (namespace/pod/container/node)

Entlein
authored and
entlein
committed
642f920
adaptive_export: AE auto-creates dc_snoop/creds_change/stack_trace (canonical dark tables)

Entlein
authored and
entlein
committed
434718f
adaptive_export: enforce nanosecond-timestamp + single-auth invariants via tests

Entlein
authored and
entlein
committed
4eb88d6
adaptive_export: dark tables carry consistent full k8s metadata (+ tests)

Entlein
authored and
entlein
committed
d56106f
adaptive_export: ASCII-only .pxl comments (lint — matches build-agent's stack_trace fix)

Entlein
authored and
entlein
committed
aafb05a
adaptive_export: elect one pod for cluster-scoped setup (fix duplicate exports)

Entlein
authored and
entlein
committed
f333ece
fix(build): add k8s client deps to cmd/BUILD.bazel

entlein
and
claude
committed
362d9ea
adaptive_export: bazel BUILD deps for the leader guard + invariant test targets

Entlein
authored and
entlein
committed
e3677b7
adaptive_export: exclude our own monitoring/infra pods from dc_snoop + stack_trace

Entlein
authored and
entlein
committed
ca8eb0d
adaptive_export: protocol presets export via px.export, not px.display

Entlein
authored and
entlein
committed
7e775ad
dc_snoop.pxl: exclude host runtime + node-agent(honey) from export

Entlein
authored and
entlein
committed
25ab1aa
adaptive_export: decouple tracepoint deploy from retention firehose

Entlein
authored and
entlein
committed
7e01120
adaptive_export: trail fan-out watermark by QueryLag to stop losing sparse evidence

Entlein
authored and
entlein
committed
7b3bc52
adaptive_export: /export/start drives full steer-all export (dx steers, AE grabs all)

Entlein
authored and
entlein
committed
b84fd99
adaptive_export: floor OrderExportAll per target (stop dx StartExport flood)

Entlein
authored and
entlein
committed
84ef053
adaptive_export: wire EXPORT_MODE=never to actually disable trigger self-steer

Entlein
authored and
entlein
committed
d8235ca
chore: remove stray 91MB cmd binary accidentally committed at repo root

entlein
and
claude
committed
c470502
fix(lint): gofumpt presets.go (blank line between var blocks)

entlein
and
claude
committed
ec3a6f6
fix(lint): gci/gofumpt main.go + rename min var to avoid shadowing builtin

entlein
and
claude
committed
78f51ba
fix(lint): add pl_go_test target + E265-clean dc_snoop sentinel

entlein
and
claude
committed
40d7819
adaptive_export: node-scope dark-vector tables so the malignant evidence lands

Entlein
authored and
entlein
committed
0941ec8
adaptive_export: default to pem-direct (node-local PEM :50305)

Entlein
authored and
entlein
committed
99cb89d
chore: remove re-added 91MB cmd binary + gitignore /cmd

entlein
and
claude
committed
b842165
chore: gitignore /cmd (durable fix for recurring root binary)

entlein
and
claude
committed
af39423
adaptive_export: tracepoints via broker-direct on pem-direct + async_insert=0 writes

Entlein
authored and
entlein
committed
8ddb528
adaptive_export: stabilize dark-vector query (comm-filter before process_stats merge)

entlein
authored and
entlein
committed
ea4ebe7
adaptive_export/control: read steer timestamps as nanoseconds (pipeline unit)

entlein
authored and
entlein
committed
8d8193f
adaptive_export/pxl: bound dark-table process_stats scan to 2m (was 5m)

entlein
authored and
entlein
committed
e7bac2c
adaptive_export: dedup evidence tables via ReplacingMergeTree on natural event keys

entlein
authored and
entlein
committed
6ff01bb
adaptive_export/pxl: source stack_trace from canonical stack_traces.beta
entlein
committed
517e159