Feat/v2 production authority cutover

.github/workflows/ci.yml

@@ -78,6 +78,24 @@ jobs:
           tar --no-same-owner -xzf "${archive}"
           "./${directory}/cargo-deny" check
 
+  sdk-python310:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
+
+      - name: Set up declared minimum Python
+        uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
+        with:
+          python-version: "3.10"
+
+      - name: Build and import standalone SDK wheel
+        run: |
+          python scripts/build_qdl_sdk_release.py --output-dir /tmp/qdl-sdk
+          python -m pip install --disable-pip-version-check /tmp/qdl-sdk/qdl_sdk-2.0.0-py3-none-any.whl
+          cd "$(mktemp -d)"
+          PYTHONPATH= python -c 'import qdl_sdk; assert qdl_sdk.__version__ == "2.0.0"'
+
   unit-tests:
     runs-on: ubuntu-latest
     steps:

Dockerfile

@@ -1,4 +1,4 @@
-FROM python:3.12-slim AS builder
+FROM python:3.12-slim@sha256:2c941e860699f878900b0edc2403613c234d4b32eda3cc9fa7036991a2a63c4a AS builder
 
 ENV PYTHONUNBUFFERED=1
 ENV PYTHONDONTWRITEBYTECODE=1
@@ -17,7 +17,7 @@ RUN python -m venv /opt/venv && \
       poetry install --no-root --only main --no-ansi && \
     /opt/venv/bin/python -m pip install --no-cache-dir --upgrade "setuptools>=78.1.1"
 
-FROM python:3.12-slim AS runtime
+FROM python:3.12-slim@sha256:2c941e860699f878900b0edc2403613c234d4b32eda3cc9fa7036991a2a63c4a AS runtime
 
 ARG QDL_UID=10001
 ARG QDL_GID=10001

Dockerfile.phase8-rust

@@ -14,6 +14,7 @@ COPY generated/rust ./generated/rust
 # Rust unit/parity tests compile against immutable provider and contract oracles.
 COPY contracts/golden ./contracts/golden
 COPY tests/fixtures/phase2 ./tests/fixtures/phase2
+COPY tests/fixtures/phase9 ./tests/fixtures/phase9
 RUN cargo build --release --locked \
     --bin qdl-kafka-smoke \
     --bin qdl-authority-rehearsal \
@@ -22,6 +23,7 @@ RUN cargo build --release --locked \
     --bin qdl-binance-shadow \
     --bin qdl-native-raw-ingestor \
     --bin qdl-realtime-core \
+    --bin qdl-production-core \
     --bin qdl-parity-replay \
     --bin qdl-venue-core-certify
 
@@ -44,6 +46,7 @@ COPY --from=builder /src/target/release/qdl-phase92-primary-rehearsal /usr/local
 COPY --from=builder /src/target/release/qdl-binance-shadow /usr/local/bin/qdl-binance-shadow
 COPY --from=builder /src/target/release/qdl-native-raw-ingestor /usr/local/bin/qdl-native-raw-ingestor
 COPY --from=builder /src/target/release/qdl-realtime-core /usr/local/bin/qdl-realtime-core
+COPY --from=builder /src/target/release/qdl-production-core /usr/local/bin/qdl-production-core
 COPY --from=builder /src/target/release/qdl-parity-replay /usr/local/bin/qdl-parity-replay
 COPY --from=builder /src/target/release/qdl-venue-core-certify /usr/local/bin/qdl-venue-core-certify
 USER 10001:10001

app/entrypoints/query_v2_stable.py

@@ -1,6 +1,9 @@
-"""Isolated Data Layer 2.0.0 stable query edge; V1 remains authoritative."""
+"""Stable Data Layer 2.0.0 query edge with mandatory workload mTLS."""
 
-from qdl.runtime.stable import create_stable_query_app
+import asyncio
 
+from qdl.runtime.stable import serve_stable_query
 
-app = create_stable_query_app()
+
+if __name__ == "__main__":
+    asyncio.run(serve_stable_query())

config/v2/stable-authority-promotion-scope.yaml

@@ -0,0 +1,15 @@
+schema: qdl.v2.authority-promotion-scope.v1
+revision: 1
+binding_ids:
+  - binance-spot-btcusdt-bar-1m
+  - binance-spot-btcusdt-quote
+  - binance-spot-btcusdt-trade
+  - binance-usdm-btcusdt-bar-1m
+  - binance-usdm-btcusdt-quote
+  - binance-usdm-btcusdt-trade
+  - okx-spot-btcusdt-bar-1m
+  - okx-spot-btcusdt-quote
+  - okx-spot-btcusdt-trade
+  - okx-swap-btcusdt-bar-1m
+  - okx-swap-btcusdt-quote
+  - okx-swap-btcusdt-trade

consumers/stable/trading-system-paper.yaml

@@ -50,6 +50,19 @@ spec:
     gap_policy: BLOCK
     recovery: SNAPSHOT_AND_REPLAY
     bar_revision_policy: LATEST
+  - instrument_uid: a953e16e-7138-5562-b5e8-c337a44d0b65
+    feed: BAR
+    consumer_grade: EXECUTION
+    source_policy_id: crypto_primary_v2
+    interval: 1m
+    warmup_limit: 1000
+    max_freshness_ms: 180000
+    require_full_coverage: true
+    require_final_bars: true
+    stale_policy: BLOCK
+    gap_policy: BLOCK
+    recovery: SNAPSHOT_AND_REPLAY
+    bar_revision_policy: LATEST
   - instrument_uid: fb26214c-7b9b-5961-95b2-55154755af0f
     feed: TRADE
     consumer_grade: EXECUTION
@@ -74,6 +87,19 @@ spec:
     gap_policy: BLOCK
     recovery: SNAPSHOT_AND_REPLAY
     bar_revision_policy: LATEST
+  - instrument_uid: fb26214c-7b9b-5961-95b2-55154755af0f
+    feed: BAR
+    consumer_grade: EXECUTION
+    source_policy_id: crypto_primary_v2
+    interval: 1m
+    warmup_limit: 1000
+    max_freshness_ms: 180000
+    require_full_coverage: true
+    require_final_bars: true
+    stale_policy: BLOCK
+    gap_policy: BLOCK
+    recovery: SNAPSHOT_AND_REPLAY
+    bar_revision_policy: LATEST
   - instrument_uid: d0ac3d4c-2374-5690-8af5-b970448f91d3
     feed: TRADE
     consumer_grade: EXECUTION