Autoscaling Controller · View 15 of 37 · 3 · Data
Decisions
- Timestamped at source, not at ingest, which is what makes the 90 s freshness check meaningful and clock skew detectable.
- An implausible value is clamped to the declared range and the signal quarantined; capacity holds rather than following it.
- Rejection is recorded. A signal that vanishes silently is indistinguishable from a signal that reads zero, and the two demand opposite responses.
Numbers
- Reject over 90 s old at ingest.
- Serve last-known-good for 3 control intervals, then mark stale.
- Ingest to availability for decision: p99 ≤ 5 s.
Risks
- Persistent clock skew makes a healthy source look stale and can freeze a target. It is alerted separately from staleness for exactly that reason.