The wrong-destination probe asserts the platform's one zero-tolerance guarantee continuously, by resolving known codes and comparing against expected targets.
The revocation probe kills a synthetic link every 60 seconds and measures when it actually stops resolving globally — testing the published promise rather than the mechanism's health.
Both would pass unnoticed in a conventional golden-signals dashboard while the platform silently broke what it sells.
Thresholds
Cache hit rate ≥ 97% (alarm below 94%), resolve p99 ≤ 40 ms, deny-set age ≤ 5 s, projection lag ≤ 5 min.
Click freshness ≤ 60 s p95, click loss ≤ 0.05%, count reconciliation within ±0.5%.
Cost per million redirects ≤ $0.05, alarm above $0.08 — a cost signal, alarmed like a reliability one.
Saturation to watch
Redis evictions are the leading indicator of a hit-rate collapse, which is also a cost event.
Change feed backlog is the leading indicator of a missed edit propagation bound; Cosmos RU headroom in the write region is the leading indicator of a creation outage.