Operations
The day-2 surface: leader-elected scheduler, MongoDB-backed job queue with retries and dead-letter, the cluster instances view that joins heartbeats with locks, domain tracking for registrar-side expiry, and an incident runbook for the common failures.
Observability
Three signal pipes: Prometheus metrics for fleet health and SLOs, OpenTelemetry traces for end-to-end latency and external-API correlation, and syslog forwarding for SIEM archival of every audit-relevant event. The audit log covers the chain-integrity and verification path.
Troubleshooting
Symptom-driven catalog. Find the failure mode, jump to the fix. Index of the things that go wrong in production CertAutoPilot installs.
Operations runbook
Symptom → diagnosis → resolution → prevention for the ten incidents you are most likely to page on: dead-letter jobs, renewal failures, leader election, KEK rotation, queue depth, LDAP outage, audit-chain verification, MongoDB recovery, worker shutdown, and distribution failures.