GovOPlaN/govoplan-core
2
0
Fork 0
Code Issues 4 Pull Requests Actions Packages Projects Releases Wiki Activity
Page: Repo docs SEARCH EVENT INDEXING CONTRACT
Pages
Codex Project Index Product govoplan govoplan concept dev Product govoplan split concept action plan Repo-README Repo README Repo docs ACCESS RBAC MODEL Repo docs ACTION EFFECT AUTOMATION LAYER Repo docs AUTOMATION CONTRACTS Repo docs CODEX WORKFLOW Repo docs COMPATIBILITY INVENTORY Repo docs COMPATIBILITY POLICY Repo docs CONFIGURATION PACKAGES Repo docs CONTEXTUAL HELP CONTRACT Repo docs DATAGRID SIZING CONTRACT Repo docs DEPENDENCY AUDITS Repo docs DEPLOYMENT OPERATOR GUIDE Repo docs DOCUMENTATION MAP Repo docs DURABLE RECOVERY OPERATIONS Repo docs EVENTS AND AUDIT Repo docs EXTERNAL REFERENCES AND INTEGRATION MATURITY Repo docs GITEA ISSUES Repo docs GOVERNANCE MODEL Repo docs GOVOPLAN MASTER ROADMAP Repo docs INFORMATION GOVERNANCE ADOPTION Repo docs INSTITUTIONAL CONTEXT CONTRACT Repo docs INTERFACE ETHICS AND DESIGN DOCTRINE Repo docs INTERFACE PATTERN MIGRATION Repo docs LOCALIZATION AND HELP QUALITY Repo-docs-MODULE-ARCHITECTURE Repo docs MODULE ARCHITECTURE Repo docs MODULE LIFECYCLE RECOVERY Repo docs POLICY CONTRACTS Repo docs POSTBOX E2EE ARCHITECTURE Repo docs PUBLIC SECTOR INTEGRATION STRATEGY Repo docs RECORDS FILING CONTRACT Repo-docs-RELEASE-DEPENDENCIES Repo docs RELEASE DEPENDENCIES Repo docs REMOTE WEBUI BUNDLES Repo docs SEARCH EVENT INDEXING CONTRACT Repo docs SECURITY AUDIT Repo docs SELF HOSTED INSTALLABILITY Repo docs STATE AND RECOVERY CONTRACT Repo docs TABULAR SOURCE CONTRACT Repo docs TEMPLATE CAPABILITY CONTRACT Repo docs TEMPORAL DATA CONTEXT Repo docs THEMING Repo docs THROTTLING Repo docs UI UX DECISION LEDGER Repo docs WEBUI BUNDLE BUDGETS Repo docs WEBUI MODULE PACKAGE LAYOUT Repo docs audits 2026 07 09 dependency audit
Clone
1
Repo docs SEARCH EVENT INDEXING CONTRACT
Albrecht Degering edited this page 2026-08-05 16:49:06 +02:00
Table of Contents

Mirrored from /mnt/DATA/git/govoplan-core/docs/SEARCH_EVENT_INDEXING_CONTRACT.md. Origin: repository. Active tasks and changing state belong in Gitea issues; this wiki page is durable project context.

Search event indexing contract

Core defines, but does not implement, the optional Search indexing boundary. Feature modules register SearchSourceProvider implementations for bounded backfills and live authorization checks. A provider may additionally implement SearchEventSourceProvider to translate a committed PlatformEvent into one or more authoritative SearchIndexChange values.

When the Search index-writer capability is active, the platform event worker uses the durable consumer identity search.indexing.v1. It accepts only public and internal events, passes the outbox delivery key to each event-capable source, and then advances a bounded batch of queued index changes in the same worker transaction. Stable change IDs make delivery replay idempotent.

The boundary has three non-negotiable rules:

  • a source may emit changes only for its registered module, provider, resource type, and event tenant;
  • Search validates every upsert document before queueing it and rejects secret metadata keys;
  • an index ACL is only a candidate filter. Resources marked for authorization recheck are returned only after the owning source explicitly allows the current principal at query time.

Search and its worker remain optional. Core-only startup and feature-module operation do not require the Search package.