04 — Supertrack D: Continuous Watch / Production Safety Monitor

Goal

Persistent read-only watch so RP stays production-safe while waiting for authority/operator.

v_rp_production_wait_watch_dashboard (12 OOM-safe lanes, live 2026-06-05)

lane	value	status
OOM	OOM_SAFE__NO_LIVE_SMOKE_COMBO_LANDMINE	SAFE
TRIGGER_GUARD	129	WATCH_BASELINE
BIRTH_DRIFT	1,210,686	SAFE_LIVE_SYSTEM
SCANNER_PROVENANCE	2026-06-05 09:01 UTC	FRESH
ACTION_QUEUE	32	SAFE_PREVIEW_ONLY
AUTHORITY_ARRIVAL	pres_procown=0 owners=0	WAIT
UI_DEPLOY	BLOCKED_NO_CREDS	WAIT
REALRUN_FLAG	real_run=false execute=false	SAFE
EVENT_ACTIVATION	emit=false active_events=30	SAFE
AXIS_OFFICIAL	ax_process_official=0 ax_trigger=0	WAIT_CANDIDATE
BUILDER_FN	false	OWNER_BLOCKED
FINAL_ACCEPTANCE	AWAITING_PRINCIPAL	WAIT

Every lane = one isolated scalar over a base table or a function-backed guard view. No deep composite stack → OOM-safe by construction.

Critical provenance note (carried gotcha)

SCANNER freshness reads wf_adapter_run_log.started_at, NEVER wf_scanner_run_log/workflow_scanner_registry (those freshness columns are frozen at 2026-06-04). Latest adapter run 2026-06-05 09:01:56 UTC → FRESH (<26h).

OOM evidence

postgres logs 09:11–10:01 UTC: only normal WAL checkpoints; zero signal 9: Killed. Guard verdict OOM_SAFE, live_crash_landmines=0. No new signal-9 since 06:04 UTC.

See WATCH_RUNBOOK.md for the exact isolated queries to poll each lane.