{ "$schema": "https://schemas.zen-mesh.io/ai-delivery-guarantees.schema.json", "schema_version": "1.0", "generated_at": "2026-07-14T12:11:00Z", "source_commit": "0ecef1240ffd6a66e6743529a84eafeaf7dff7d2", "source_repository": "git@github.com:zenmesh/docs.git", "paths": [ { "path_id": "provider-to-endpoint", "description": "Event delivery from external provider (e.g. Stripe, GitHub) to the Zen Mesh ingester endpoint", "acceptance_point": "ingester HTTP listener", "persistence_point": "in-memory event buffer before delivery processing", "acknowledgement_point": "ingester returns 2xx to provider upon receipt", "delivery_guarantee": "BEST_EFFORT", "retry_owner": "provider (source-side retry policy)", "retry_limit_or_unresolved": "provider-managed; not controlled by Zen Mesh", "duplicate_possible": true, "ordering_scope": "none", "replay_support": false, "retention": "source-managed", "terminal_failure_behavior": "provider retries or drops based on its own policy", "evidence_generated": "ingester receipt event_id assigned", "customer_responsibility": "Configure provider to send to correct Zen Mesh endpoint URL", "limitations": "Zen Mesh cannot influence provider retry behavior. Provider signature verification supported for Stripe, GitHub, Shopify, Twilio.", "verification_status": "WIRED_SANDBOX" }, { "path_id": "endpoint-acceptance", "description": "Zen Mesh ingester accepts incoming webhook event from provider", "acceptance_point": "ingester receives HTTP request", "persistence_point": "in-memory event store; persistent store planned", "acknowledgement_point": "2xx HTTP response to provider", "delivery_guarantee": "AT_LEAST_ONCE", "retry_owner": "system (data plane automatic retry)", "retry_limit_or_unresolved": "5 attempts", "duplicate_possible": true, "ordering_scope": "none", "replay_support": true, "retention": "7 days DLQ (configurable); 30 days attempt history", "terminal_failure_behavior": "DLQ after retry exhaustion; operator can inspect, replay, archive, or discard", "evidence_generated": "delivery receipt with event_id, source, destination, mode, timestamp, outcome", "customer_responsibility": "Configure endpoint provider pack and signature verification", "limitations": "Deduplication state is in-memory; persistent store planned. Signature verification supported for select providers only.", "verification_status": "WIRED_SANDBOX" }, { "path_id": "endpoint-to-normalized-event", "description": "Ingester normalizes incoming webhook into internal event format for routing", "acceptance_point": "normalization step after receipt", "persistence_point": "in-memory; persistent planned", "acknowledgement_point": "event moves to routing pipeline", "delivery_guarantee": "BEST_EFFORT", "retry_owner": "system (data plane)", "retry_limit_or_unresolved": "N/A (non-delivery step)", "duplicate_possible": false, "ordering_scope": "none", "replay_support": false, "retention": "in-memory only", "terminal_failure_behavior": "event rejected; provider may retry", "evidence_generated": "event_id assignment, normalization receipt", "customer_responsibility": "Provide valid webhook payload matching expected format", "limitations": "Normalization failures treated as ingestion errors", "verification_status": "WIRED_SANDBOX" }, { "path_id": "pipeline-processing", "description": "Event passes through delivery pipeline including filtering, fan-out, and routing", "acceptance_point": "event enters pipeline from ingester", "persistence_point": "in-memory pipeline buffer", "acknowledgement_point": "event exits pipeline to delivery queue", "delivery_guarantee": "BEST_EFFORT", "retry_owner": "system (pipeline retry on transient failure)", "retry_limit_or_unresolved": "N/A (internal pipeline retry)", "duplicate_possible": false, "ordering_scope": "none", "replay_support": false, "retention": "in-memory pipeline buffer", "terminal_failure_behavior": "pipeline failure treated as delivery failure; enters retry/DLQ path", "evidence_generated": "filtering/routing evidence log", "customer_responsibility": "Configure filters, transforms, and fan-out routing correctly", "limitations": "JSONPath-based filtering and transforms; no ordering guarantees", "verification_status": "WIRED_SANDBOX" }, { "path_id": "runtime-execution", "description": "Event delivery from data plane runtime to destination target (HTTP endpoint)", "acceptance_point": "delivery attempt initiated by egress/relay", "persistence_point": "attempt history in delivery store", "acknowledgement_point": "2xx response from target destination", "delivery_guarantee": "AT_LEAST_ONCE", "retry_owner": "system (data plane automatic retry)", "retry_limit_or_unresolved": "5 attempts with exponential backoff: immediate, ~10s, ~1min, ~10min, ~1hr", "duplicate_possible": true, "ordering_scope": "none", "replay_support": true, "retention": "DLQ 7 days (configurable); attempt history 30 days", "terminal_failure_behavior": "exhausted \u2192 DLQ; operator inspects, replays, archives, or discards", "evidence_generated": "delivery attempt record including HTTP status, response body, timestamp, duration, error details", "customer_responsibility": "Ensure target endpoint is reachable and returns correct responses", "limitations": "At-least-once only; duplicates possible during recovery scenarios. Delivery guarantees are scenario-specific (local/mock/cloud-demo), not production-level.", "verification_status": "WIRED_SANDBOX" }, { "path_id": "plane-to-target", "description": "Delivery from edge plane (zen-egress) to private target within customer network", "acceptance_point": "egress delivery attempt", "persistence_point": "delivery attempt history in data plane", "acknowledgement_point": "2xx response from private target", "delivery_guarantee": "AT_LEAST_ONCE", "retry_owner": "system (data plane automatic retry)", "retry_limit_or_unresolved": "5 attempts with exponential backoff", "duplicate_possible": true, "ordering_scope": "none", "replay_support": true, "retention": "DLQ 7 days; attempt history 30 days", "terminal_failure_behavior": "exhausted \u2192 DLQ", "evidence_generated": "delivery attempt record with outcome, timestamps, integrity proofs", "customer_responsibility": "Ensure private network allows outbound egress connectivity; deploy and maintain edge plane (Kubernetes or Edge Lite)", "limitations": "Edge Lite runtime not yet published. Kubernetes Edge Plane at WIRED_SANDBOX. mTLS delivery supported (outbound-only). Customer-managed egress \u2192 target mTLS is configurable, not Zen-mandatory.", "verification_status": "WIRED_SANDBOX" }, { "path_id": "edge-private-delivery", "description": "End-to-end private delivery from provider event through edge plane to private target", "acceptance_point": "event received by edge plane ingester (optional) or data plane", "persistence_point": "in-memory event store with delivery history", "acknowledgement_point": "2xx from target via egress", "delivery_guarantee": "AT_LEAST_ONCE", "retry_owner": "system (data plane + edge egress)", "retry_limit_or_unresolved": "5 attempts with exponential backoff", "duplicate_possible": true, "ordering_scope": "none", "replay_support": true, "retention": "DLQ 7 days; attempt history 30 days", "terminal_failure_behavior": "exhausted \u2192 DLQ; operator replays after issue resolution", "evidence_generated": "delivery receipt, delivery attempt records, evidence manifests", "customer_responsibility": "Deploy and maintain edge plane infrastructure; monitor edge plane health", "limitations": "Private-edge path convergence proven in local mock only. Not private data plane general availability; not customer-owned guarantee. Edge Plane never requires inbound ports.", "verification_status": "WIRED_SANDBOX" }, { "path_id": "retry", "description": "Automatic or manual retry of a failed delivery attempt", "acceptance_point": "retry initiated by system (automatic) or operator (manual via API/CLI)", "persistence_point": "retry queued in delivery system", "acknowledgement_point": "retry accepted (queued status returned)", "delivery_guarantee": "AT_LEAST_ONCE", "retry_owner": "system (automatic) or operator (manual retry API)", "retry_limit_or_unresolved": "5 attempts total (automatic); manual retry has no documented limit", "duplicate_possible": true, "ordering_scope": "none", "replay_support": false, "retention": "N/A (retry re-uses original delivery)", "terminal_failure_behavior": "exhausted \u2192 DLQ after 5 automatic retry attempts", "evidence_generated": "retry receipt with delivery_id, status, message", "customer_responsibility": "For manual retry: verify failure is resolved before retrying", "limitations": "Retry re-uses original delivery \u2014 does not re-ingest from source. Retry is idempotent \u2014 calling retry on already-retried delivery does not create duplicates. Permanent failures (4xx except 429) should not be retried.", "verification_status": "WIRED_SANDBOX" }, { "path_id": "replay", "description": "Operator-initiated replay of events from DLQ or delivery history", "acceptance_point": "replay initiated via API/CLI/UI", "persistence_point": "events re-queued from retained payload store or DLQ", "acknowledgement_point": "replay accepted (queued status returned)", "delivery_guarantee": "AT_LEAST_ONCE", "retry_owner": "operator (manual initiation); then system (delivery retry)", "retry_limit_or_unresolved": "N/A (operator-controlled; after replay, standard retry policy applies)", "duplicate_possible": true, "ordering_scope": "none", "replay_support": true, "retention": "Free: 7 days basic DLQ/replay; Pro: 30 days advanced; Business: 30+ days; Enterprise: custom", "terminal_failure_behavior": "replayed event follows standard delivery/retry/DLQ path", "evidence_generated": "replay receipt, replayed event IDs, audit reference correlating with original delivery", "customer_responsibility": "Verify issue is resolved before initiating replay; select appropriate event range", "limitations": "Requires retained payload/context \u2014 not all deliveries replayable. Batch and dry-run replay are PLANNED_V1_1. Replay respects retention and plan limits. Replaying same event range may produce duplicates.", "verification_status": "WIRED_SANDBOX" }, { "path_id": "resource-retirement-pending-work", "description": "Retiring (deleting) a resource that may have in-flight or pending deliveries", "acceptance_point": "delete/retire request submitted via UI, API, or CLI", "persistence_point": "N/A (deletion is permanent)", "acknowledgement_point": "deletion receipt returned", "delivery_guarantee": "BEST_EFFORT", "retry_owner": "N/A", "retry_limit_or_unresolved": "N/A", "duplicate_possible": false, "ordering_scope": "none", "replay_support": false, "retention": "N/A (deleted resources cannot be recovered)", "terminal_failure_behavior": "resource deleted; in-flight deliveries may be lost. No draining of in-flight deliveries on disable. Formal retirement with evidence is PLANNED_V1_1.", "evidence_generated": "deletion receipt with resource_id, timestamp", "customer_responsibility": "Ensure no critical in-flight deliveries before deleting. If retire is needed with evidence, use delete or wait for PLANNED_V1_1 retire operation.", "limitations": "Disabling does not drain in-flight deliveries. Deletion is permanent \u2014 recovery requires recreating the resource. Resource retirement with evidence is not yet available (PLANNED_V1_1).", "verification_status": "IMPLEMENTED_VERIFIED" } ], "canonical_source_commit": "a399d87452317d91843521c9bd4a0fde61e9075e", "artifact_commit": "0ecef1240ffd6a66e6743529a84eafeaf7dff7d2", "generation_method": "hand-maintained JSON aligned with delivery API contract and evidence documentation", "implementation_status_semantics": "IMPLEMENTED_VERIFIED: delivery path confirmed working. WIRED_SANDBOX: verified in sandbox, not production-live.", "verification_status_semantics": "WIRED_SANDBOX: verified through sandbox test suite." }