test: reconcile pg-erd refused-origin recovery on integrated runtime parent

[seonghobae]

Successor to historical #17 after #16 normally integrated as bf38bc571dbb7c75e651bcaccdc66904c8c92dab into fix/pg-erd-listener-wildcard-collision-v1.

This branch was rooted directly at that integrated parent and carried only the still-valid refused-origin evidence slice plus directly affected documentation. Historical #17 merge oracle #118 was closed unmerged after GitHub reported conflicts; no force-push or destructive rebase was used.

The successor repaired stale fixture mechanics while preserving the same authority: gateway/metrics ports remain held by TcpListener reservations through configuration construction and are released only at the child-bind handoff; startup requires real HTTP 200 from /readyz and /metrics; the backend authority is transferred to a bound-but-non-listening Linux TCP socket and direct ECONNREFUSED is proven before gateway traffic; frontend header receipt is bounded by a five-second absolute deadline and 64 KiB ceiling. Acceptance remains HTTP 502 within the conservative one-second envelope around configured 200/400 ms connection budgets, /readyz 200, exactly one cwl_pingora_gateway_request_errors_total sample, and successful independent frontend recovery. No retry/failover/product auth/business logic/Keyverse/Wardnet/EgressWeave authority was added.

Exact cd48f3b107e53aad647629cdd1d5800ba07495d7 completed CI 35437243478 SUCCESS across test/OCI/load and Supply Chain 35437243510 SUCCESS. There were no unresolved review threads; the current-range review was COMMENT-only and did not substitute self-approval. Organization rules requiring approval/required workflows apply to the default branch, not this stacked non-default base.

The PR normally integrated at expected head as merge commit 40e10607601bf9722d642d4a4bb18f02806c20cc without force-push, destructive rebase, self-approval, administrator bypass or gate weakening. Historical #17 was then closed only as verified-successor disposition after complete valid delta/test/fixture/contract/evidence inheritance was confirmed. Repository-wide docs/product-technical-gap-baseline.md and TRACEABILITY remained #61 authority and were untouched.

Downstream #18/#102/#104/#106 have since been reconciled onto this integrated parent with behind 0 and fresh exact-head gates. This merge is stacked-parent integration only; it is not protected-main promotion, immutable release, canary/shadow, rollback, cutover or legacy-removal evidence.

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: 61d6ef47-1e2a-4a19-a19e-756e4dab63ab

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[seonghobae]

Current-exact technical review on cd48f3b107e53aad647629cdd1d5800ba07495d7 (COMMENT only; not approval). The branch is rooted directly at integrated #16 bf38bc571dbb7c75e651bcaccdc66904c8c92dab with behind 0 and an effective three-path delta only: CHANGELOG.md, TEST_STRATEGY.md, and tests/pg_erd_upstream_failure_traffic.rs. The historical #17 refusal behavior is preserved, while stale fixture mechanics were repaired rather than replayed: traffic/metrics socket reservations remain owned through config construction, readiness is HTTP 200 on /readyz and /metrics, backend refusal ownership is established before process start and retained, and frontend header receipt is bounded by 5s/64 KiB. No product auth/business logic, retry/failover, route authority, Keyverse/Wardnet/EgressWeave authority, production Rust, #61-owned baseline, or TRACEABILITY delta is introduced. CI 35437243478 and Supply Chain 35437243510 are fresh on this exact and currently queued; no GREEN, merge, release, canary or cutover credit is claimed until they complete.