Skip to content

Weekly service review · Week 40 · 29 September to 5 October 2026

Breakwater, week 40

The API platform's week on one page: what every service did, what went wrong and when, what shipped, and what next week has to decide.

This week

One incident, resolved. Auth failed logins for 38 minutes on Tuesday. Every service is healthy now, and Auth's error budget is the number to watch.

Requests
1.84 B
+6%
Availability
99.95%
-0.03 pts
Error budget left
74%
-9 pts
Deploys
47
+9

Services

Edge

Healthy

99.99% available · 37 ms p95

TLS termination and the firewall rules. A quiet week, and the lowest latency it has run at since July.

Auth

Degraded Tuesday

99.91% available · 61 ms p95

INC-2291: a certificate rotated in one region before its replacement was trusted. 4% of logins failed for 38 minutes.

Rate limiter

Healthy

100% available · 3 ms p95

Shed 0.2% of traffic, all of it from two keys already on the abuse list.

Router

Healthy

99.99% available · 12 ms p95

The new routing table shipped on Wednesday behind a flag, and is on for a tenth of traffic.

Ledger API

Healthy

99.98% available · 88 ms p95

Write latency is flat for the first week since the March migration.

Search API

Watch

99.97% available · 146 ms p95

An index rebuild on Thursday doubled p95 for twenty hours. No incident; the rebuild is now scheduled for Sundays.

Latency and incidents

p95 latency by day, in milliseconds. Auth's spike is INC-2291 on Tuesday; Search's is Thursday's index rebuild.
Day Edge Auth Search API
Mon 38 64 140
Tue 39 182 142
Wed 41 71 139
Thu 38 66 236
Fri 37 63 188
Sat 35 60 150
Sun 36 61 146

Log

  • Tue 09:14 INC-2291 opened: login failures in eu-west.
  • Tue 09:52 Resolved by restoring the old certificate. Rotation paused.
  • Wed 11:20 New routing table on for 10% of traffic.
  • Thu 13:30 Search index rebuild begins; p95 climbs.
  • Fri 10:05 Rebuild complete; p95 back by the afternoon.
  • Fri 16:05 Rotation resumed, with a trust check first.

Change

Deploys and rollbacks by day. Both rollbacks were caught by the canary before a customer saw them.
Day Deploys Rollbacks
Mon 9 0
Tue 6 1
Wed 11 0
Thu 10 1
Fri 8 0
Sat 2 0
Sun 1 0

Shipped

  • Router The new routing table, behind a flag, on for 10% of traffic.
  • Rate limiter Per-key limits read from the tenant record instead of a file.
  • Ledger API The March migration's last compatibility shim, removed.
  • Rolled back Two Auth releases, Tuesday and Thursday, both at the canary.

Error budget

Policy

  • Below 50% A service's own team reviews every deploy before it ships.
  • Below 25% Non-urgent deploys stop until the budget recovers.
  • Auth, now 31% left with eight weeks of the quarter to go.
Error budget left this quarter, as a percentage. Auth has spent more than two thirds of its budget in five weeks.
Service Budget left
Edge 94
Auth 31
Rate limiter 88
Router 91
Ledger API 83
Search API 58

Next week

Decide

  • Whether Auth freezes non-urgent deploys until its budget recovers past 50%.
  • Whether the routing table goes to half of traffic on Wednesday.

Carried over

  • The trust check for certificate rotation, in every region and not only eu-west.
  • A search rebuild that runs without doubling p95.

On call

  • Primary Platform, rotation B
  • Secondary Identity
  • Change freeze none planned

Breakwater, INC-2291 and every service, number and team on this page are invented. It exists to show a Markset document whose page is a grid of panels rather than a column of prose: a masthead in columns, the week's numbers in metrics, a grid of services whose status is a badge, and three charts drawn from tables. Source: examples/service-review.md, rendered with examples/console.css.

Examples: all · Vocabulary tour · Analysis document · Strategy memo · On-call runbook · Architecture overview · Capacity review · Slide deck · source