Search Indexing Service · View 07 of 21 · Structure
The seam
- Above the change log: what changed, captured, deduplicated, version-guarded, and quarantined if it cannot be understood.
- Below it: projections — assembled documents, indices, aliases, caches — every one of which can be thrown away and rebuilt.
- The acceptance gate sits between the index layer and the alias layer, which is the only reason a bad index can be refused rather than discovered.
Decisions
- Three writers share the cluster under a declared capacity split: fast lane, slow lane, and reindex, the last throttled against a reserved query share.
- The previous index version is a layer member, not a backup: idx_v40 stays mounted for 72 hours so rollback is an alias move.
Assumptions
- Quarantine is a normal operating state with a 30-day payload retention, not an error path that is expected to stay empty.
