Notable changes
The OpenSpec archive is valuable context, but the docs site only surfaces the changes that still help operators understand the current stack.
Timeline
| Date | Change | Why it matters now |
|---|---|---|
| 2026-03-10 | VPC and ClickPipes connectivity exploration | explains why networking docs mention public IAM + TLS, multi-VPC connectivity, and historical ClickHouse integration work |
| 2026-03-11 | Kafka export and ClickHouse POC iterations | captures the experiments that led to the current optional MSK Connect S3 sink path |
| 2026-03-12 | Kafka UI added behind the shared ALB | explains the third public hostname and extra ECS service in the roots |
| 2026-03-15 | Public ALB replaced API Gateway + VPC Link | explains why the current ingress model is simpler than older design documents |
| 2026-03-15 | S3 gateway endpoint added for private subnets | explains why the VPC module now includes an S3 gateway endpoint |
| 2026-03-16 | Terraform roots split into staging and prod | establishes the current environment model |
| 2026-03-16 | Events service clarified and dashboard backend added | explains the dual-service ECS model, dashboard ECR, dashboard secret, and RDS |
| 2026-03-27 | Staging operating hours automation and manual Kafka cleanup | explains why staging now schedules only start/stop while keeping Kafka topic cleanup as a manually invoked Lambda |
| 2026-03-31 | Scoring service and Camunda added | explains the extra ECS services, scoring ECR/secret, Camunda secret/RDS, and internal Service Connect path |
| 2026-04-02 | Scoring moved off the public ALB | explains why scoring no longer has a public hostname and is now reachable only over internal Service Connect |
| 2026-04-04 | DevOps Agent investigation test and broader alarm coverage | records the DevOps Agent proof of concept while explaining the per-service ECS alarms and the new RDS CPU and DB load alarms that remain operational |
| 2026-04-24 | ClickHouse Cloud Prometheus agent added for New Relic | explains the ClickHouse Cloud metrics ingestion path, dedicated collector secret, and New Relic dashboard-first rollout now available through both environment roots |
| 2026-05-08 | Second staging workload root added on the shared staging foundation | explains why terraform/staging2 exists, why it reuses the staging VPC/subnets/security groups/MSK/ECRs, and why its ECS task definitions are treated as bootstrap-only artifacts |
How to use the archive
- Use the archive when you need rationale, migration context, or earlier tradeoff discussions.
- Do not treat every archived proposal as still implemented.
- Cross-check the Terraform roots before promoting archive notes into operator runbooks.
note
The Decisions section is intentionally curated. It is not a generated mirror of openspec/changes/archive.