chronos-ruby 0.9.0.pre.1 → 0.9.0.pre.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 34b5d9d1193017931d129dc366922b276d9b85ced0321e78d3f4a5b1a8c13e40
-  data.tar.gz: 72277b74f51825118ce6cb2dda83652f035bbfef3cb56c18b7ee98cc3e6d1d54
+  metadata.gz: ba6053cbe8155fba7fa99c0adf09db9e0aa38d33314b2355c49f1760233183fe
+  data.tar.gz: 138ee6958622e5e03d24863c553066c6368459fe423731950bcfcc63bfb12e02
 SHA512:
-  metadata.gz: 2c6b44a856bbb8975c6a4dc9aba5d9bcd2cf9a9d44456c19fe373860872491ff310f11a2a1b4c7588306ae2795caf4af8cf008e38c10bcdbe0322fca9a803ece
-  data.tar.gz: c4ff3f4da09810013c0e4d352bb18cd04c0a652c160816465d4b088490d5eea5f722c326ab8a6dcc9806f7b74c050ee0c77e8c6a4c604ddf650cb08fc66a3fd4
+  metadata.gz: 58b5255dacdb15e3df4147cceb563e247989fa8cc2e72c23e79166e51c772ffc9ba0e87120c025de5d20cff04be21a7625cafb39d9f47793f82d156bdcb5cf09
+  data.tar.gz: 981f49d6f3d12314278456338e975797c27df3f7d93217eb2a8c9df630faa6081a683159b7694e0963cd7f9fa4ed6fae5f095b697a1ea9ce1c3159f388a5b36d

data/CHANGELOG.md

@@ -12,6 +12,39 @@ All notable changes are documented here. The project follows Semantic Versioning
 - legacy CI now resolves Bundler 1.17.3 through `Gem.bin_path` on RubyGems versions that do not support the `_version_` executable selector.
 - documentation verification now reads source and Markdown files explicitly as UTF-8 on legacy container locales.
 
+## [0.9.0.pre.2] - 2026-07-21
+
+### Added
+
+- bounded startup and runtime exception ignore rules through `config.ignore_rules` and `Chronos.ignore_if`;
+- Active Job trace/request propagation without modifying public arguments, plus adapter, job/provider IDs, attempts, status, and failure telemetry;
+- real-gem Sidekiq 4.2/5.2 Docker compatibility jobs;
+- repeatable Rack comparison and fake-endpoint load gates;
+- corrected `script/test_all` so `pipefail` no longer turns installed Rubies into false skips and an empty matrix fails;
+- Airbrake migration, SemVer, deprecation, protocol stability, security review, and 1.0 readiness documentation.
+
+### Changed
+
+- version advanced to `0.9.0.pre.2` instead of `1.0.0` because the full external legacy matrix has not yet supplied zero-failure evidence;
+- Active Job identifiers are now documented collected fields and propagated context is bounded to trace/request IDs.
+
+### Fixed
+
+- the Sidekiq 5 compatibility smoke now resolves the shared Sidekiq 4/5 fixture inside `examples/` instead of the nonexistent `/app/sidekiq-4` path.
+
+### Security
+
+- local ignore rules are bounded to 100, contain callback failures, and cannot be installed remotely;
+- fake-endpoint load validation rejects payloads containing the secret authentication key;
+- package signing remains deferred until a trusted key lifecycle exists; protected publishing credentials remain required.
+
+### Known limitations
+
+- compatibility stays `Best effort` until all new and existing GitHub Actions matrix jobs pass without skips;
+- end-of-life runtimes and framework dependencies retain their upstream security risk;
+- Active Job adapters that bypass standard serialization/execution hooks need dedicated evidence;
+- comparative results are not a performance claim and must be published with controlled environment metadata.
+
 ## [0.9.0.pre.1] - 2026-07-21
 
 ### Added

data/README.md

@@ -33,7 +33,7 @@ See [Compatibility](docs/compatibility.md).
 The current public build is a pre-release. Add its exact version to the application's `Gemfile`:
 
 ```ruby
-gem "chronos-ruby", "0.9.0.pre.1"
+gem "chronos-ruby", "0.9.0.pre.2"
 ```
 
 Install with a Bundler version compatible with the application. For the oldest supported runtime:
@@ -54,7 +54,7 @@ gem install chronos-ruby --pre
 Version 0.5 exposes Rails support explicitly, keeping Rails and ActiveSupport out of plain Ruby applications:
 
 ```ruby
-gem "chronos-ruby", "0.9.0.pre.1", :require => "chronos/rails"
+gem "chronos-ruby", "0.9.0.pre.2", :require => "chronos/rails"
 ```
 
 Generate the initializer with:
@@ -166,7 +166,15 @@ Chronos.configure do |config|
 end
 ```
 
-Local exception-specific ignore callbacks are not available in version 0.4. The server may provide a bounded list of exact fingerprints to ignore; it cannot provide regular expressions or executable rules.
+Version `0.9.0.pre.2` adds bounded local rules after configuration:
+
+```ruby
+Chronos.ignore_if do |notice|
+  notice.exception_class == "SomeExpectedError"
+end
+```
+
+Rules receive an immutable normalized notice, run before serialization/queueing, and must return exactly `true` to discard. The default limit is 20 and the hard configurable maximum is 100. A failing rule is contained. See [Bounded local ignore rules](docs/modules/ignore-rules.md).
 
 ## Performance monitoring
 
@@ -193,12 +201,12 @@ Version `0.6.0.pre.1` adds optional Sidekiq 4/5 middleware:
 
 ```ruby
 gem "sidekiq", "~> 5.0"
-gem "chronos-ruby", "0.9.0.pre.1", :require => "chronos/sidekiq"
+gem "chronos-ruby", "0.9.0.pre.2", :require => "chronos/sidekiq"
 ```
 
 The client middleware propagates only trace/request identifiers in a versioned Sidekiq-envelope field and never changes worker arguments. The server records class, queue, JID, retry count, duration, calculable queue latency, bounded arguments/tags, status, and error class. Values pass through the shared sanitizer before delivery. Failed jobs are notified once and the original exception is re-raised. See [Sidekiq 4/5 legacy integration](docs/modules/sidekiq-legacy.md).
 
-The Rails subscriber continues to record basic Active Job class, queue, and duration. Full Active Job context propagation plus optional Resque and Delayed Job adapters are subsequent version 0.6 increments.
+When Active Job is available, the Rails integration propagates only bounded trace/request identifiers in a namespaced serialized field without changing job arguments. It records adapter, job/provider IDs, class, queue, attempts, duration, status, and error class, and captures a supplied failure once. See [Active Job legacy integration](docs/modules/active-job.md).
 
 ## External HTTP, cache, and dependencies
 

data/SECURITY.md

@@ -7,3 +7,5 @@ Never include live project keys, customer payloads, personal data, or production
 The Chronos 0.x line provides technical compatibility with end-of-life Ruby versions. It cannot provide security maintenance for the Ruby runtime, OpenSSL, operating system, Rails, or other dependencies used by the host application.
 
 Security fixes in the agent will be assessed for backporting to maintained Chronos version lines. No response-time commitment is made before a formal security process is published.
+
+The current prerelease review and residual risks are recorded in [docs/security-review.md](docs/security-review.md). Release publishing uses a protected GitHub environment and a scoped RubyGems key. Package signing is deferred until the project has a trusted certificate issuance, rotation, revocation, and offline-key process; do not add a private signing key to the repository or workflow secrets without that process.

data/docs/adr/ADR-018-pre-1.0-hardening.md

@@ -0,0 +1,9 @@
+# ADR-018: Pre-1.0 hardening gates
+
+## Decision
+
+Keep the release at `0.9.0.pre.2` while any mandatory 1.0 evidence remains external or incomplete. Add bounded local ignore rules, Active Job envelope propagation, real Sidekiq compatibility jobs, repeatable comparative/load benchmarks, and explicit release/security policies.
+
+## Consequences
+
+The stable API is not promised before the full legacy matrix passes. Active Job gains one namespaced serialized field without changing arguments. Application callbacks remain bounded in count but their execution cost belongs to the application. Package checksums are used until a trusted signing lifecycle is available.

data/docs/compatibility.md

@@ -13,11 +13,14 @@ Chronos Ruby 0.x is the legacy line. Technical compatibility does not make an en
 
 | Ruby | Sidekiq integration | Status | Evidence |
 |---|---|---|---|
-| 2.2.10–2.6 | Sidekiq 4 / 5 | Best effort | Middleware unit/integration contracts; dedicated real-gem matrix pending |
+| 2.2.10 | Sidekiq 4.2.10 | Best effort | Unit/integration contracts and dedicated real-gem Docker job |
+| 2.5.9 | Sidekiq 5.2.10 | Best effort | Unit/integration contracts and dedicated real-gem Docker job |
 
 Version 0.5 includes Rails 4.2 and 5.2 applications plus a dedicated matrix, but this document conservatively keeps the combinations at `Best effort` until all release-gate evidence, including fake-server payload validation, is green. Rails 5.0 uses the same feature-detected public APIs but does not yet have its own example application.
 
-Version `0.6.0.pre.1` uses the public Sidekiq 4/5 middleware signatures and remains `Best effort` until dedicated jobs exercise both real gem versions across their valid Ruby combinations.
+Version `0.9.0.pre.2` adds dedicated Sidekiq 4.2.10 and 5.2.10 real-gem jobs. Status remains `Best effort` until both external jobs pass on the release candidate.
+
+Active Job propagation uses the standard `serialize`, `deserialize`, and `perform_now` extension points with a namespaced bounded field. Rails 4.2/5.2 example jobs and unit contracts provide evidence; the complete external matrix must still pass before stable support is declared.
 
 Version `0.7.0.pre.1` keeps the same Ruby/Rails matrix and implements APM aggregation without modern concurrency or SQL-parser dependencies. Its compatibility remains `Best effort` until request/SQL/job aggregate payloads pass the dedicated fake-server gates for every listed runtime.
 

data/docs/configuration.md

@@ -32,6 +32,8 @@
 | `allowlist_keys` | Optional | `[]` | Explicit key-name exceptions; content detection still runs |
 | `hash_keys` | Optional | `[]` | Scalar identifier keys replaced by scoped SHA-256 values |
 | `filters` | Optional | `[]` | Callable application-specific privacy filters |
+| `ignore_rules` | Optional | `[]` | Callable local exception rules evaluated before serialization |
+| `max_ignore_rules` | Optional | `20` | Maximum retained local rules; range 1–100 |
 | `anonymize_ip` | Recommended | `true` | Replaces the final octet of supplied IPv4 addresses |
 | `max_retries` | Optional | `3` | Maximum retry attempts after the first delivery failure |
 | `retry_base_interval` | Optional | `0.5` | Initial exponential-backoff delay in seconds |
@@ -83,6 +85,8 @@ Chronos.configure do |config|
   config.workers = 1
   config.blocklist_keys += [:medical_record, /bank_account/i]
   config.hash_keys += [:customer_id]
+  config.ignore_rules << proc { |notice| notice.exception_class == "SomeExpectedError" }
+  config.max_ignore_rules = 20
   config.max_retries = 3
   config.backlog_size = 100
   config.circuit_failure_threshold = 5
@@ -106,7 +110,7 @@ Chronos.configure do |config|
 end
 ```
 
-Privacy matcher collections and filters are copied into the immutable runtime snapshot. Matchers must be String, Symbol, or Regexp values, and every custom filter must respond to `call`.
+Privacy matcher collections, filters, and startup ignore rules are copied into the immutable runtime snapshot. Matchers must be String, Symbol, or Regexp values, and every filter/rule must respond to `call`. Runtime rules added through `Chronos.ignore_if` cannot exceed `max_ignore_rules`.
 
 The gem never reads all environment variables automatically. The host application decides which values to pass. See [Privacy and LGPD](privacy-lgpd.md) before adding application context.
 

data/docs/data-collected.md

@@ -26,7 +26,8 @@ Version 0.9 emits exceptions, cache telemetry, dependency/deploy events, and agg
 | View template basename and duration | Collected with Rails integration | `render_template.action_view` |
 | SQL operation name, cached flag, duration | Collected; SQL text omitted | `sql.active_record` |
 | Mailer/action and duration | Collected; message content omitted | `deliver.action_mailer` |
-| Active Job class, queue, duration | Collected when available; arguments omitted | `perform.active_job` |
+| Active Job adapter, job/provider IDs, class, queue, attempts, duration, status, error class | Collected when available; arguments omitted | serialization and `perform.active_job` |
+| Active Job trace/request IDs | Propagated in a bounded namespaced field | Current Chronos context |
 | Sidekiq class, queue, JID, retry count, duration, status, error class | Collected with optional middleware | Sidekiq job envelope and local clock |
 | Sidekiq queue latency | Collected when enqueue time is available | Sidekiq or Chronos envelope timestamp |
 | Sidekiq arguments | Collected, sanitized, and bounded | First 20 job arguments; collections/depth/strings limited |
@@ -48,7 +49,7 @@ Version 0.9 emits exceptions, cache telemetry, dependency/deploy events, and agg
 | Event release, revision, deploy ID, environment, service, region, instance | Present as bounded correlation; values optional | Explicit immutable configuration or normalized deploy payload |
 | Deploy environment, revision, version, repository, actor, deploy ID, service, region, instance | Explicit synchronous deploy API | Application/deployment integration arguments |
 
-The gem never collects request bodies, response bodies, raw query strings, cookies, HTTP authorization headers, environment variables in bulk, Git state, source code, raw SQL, SQL bind values, database rows, raw cache keys/values, mail bodies/recipients, gem paths, or lockfile contents. Sidekiq JIDs/arguments, loaded gem names/versions, and deploy fields are documented integration data.
+The gem never collects request bodies, response bodies, raw query strings, cookies, HTTP authorization headers, environment variables in bulk, Git state, source code, raw SQL, SQL bind values, database rows, raw cache keys/values, mail bodies/recipients, Active Job arguments, gem paths, or lockfile contents. Active Job IDs, Sidekiq JIDs/arguments, loaded gem names/versions, and deploy fields are documented integration data.
 
 APM dimensions never include user ID, job ID, raw URL, exception message, bind value, or cache key. Normalized routes replace common numeric/UUID segments. Normalized SQL can retain schema, table, and column identifiers; review those identifiers as part of the privacy audit.
 

data/docs/deprecation-policy.md

@@ -0,0 +1,7 @@
+# Deprecation policy
+
+After `1.0.0`, a public API scheduled for removal remains available for at least one minor release and normally six months. The warning, replacement, first deprecated version, and earliest removal version must be documented in the changelog and migration material.
+
+Warnings are emitted at most once per process through the configured safe logger and must not include application payloads. Security fixes, behavior that can expose secrets, and upstream runtime incompatibilities may require faster action; the security advisory and changelog must explain the exception. Ruby/Rails support changes are recorded in `docs/compatibility.md` before removal.
+
+Prereleases may revise APIs without the full stable window, but every incompatible revision must remain explicit. Version `0.9.0.pre.2` introduces no removal.

data/docs/migration-from-airbrake.md

@@ -0,0 +1,18 @@
+# Migration from Airbrake
+
+Version `0.9.0.pre.2` provides a staged migration path. Run both agents only long enough to compare delivery, then remove Airbrake to avoid duplicate reports and overhead.
+
+| Airbrake concept | Chronos equivalent |
+|---|---|
+| `Airbrake.configure` credentials/host | `Chronos.configure` with `project_id`, `project_key`, and `host` |
+| `Airbrake.notify(error, params)` | `Chronos.notify(error, :parameters => params)` |
+| `Airbrake.notify_sync` | `Chronos.notify_sync` |
+| ignore/filter callbacks | `Chronos.ignore_if` and `config.filters` |
+| deploy notification | `Chronos.notify_deploy` |
+| Rack/Rails integration | `require "chronos/rails"` or Chronos Rack middleware |
+
+Start with `error_notifications`, Rails capture, and APM enabled in one non-production environment. Configure the same application version and environment used by the old notifier. Compare exception count, class, sanitized context, deploy correlation, request/job metrics, and retry diagnostics. Never copy an Airbrake project key into Chronos.
+
+Chronos callbacks receive a normalized immutable `Chronos::Core::Notice`, not an Airbrake notice. Filters operate on each sanitized key/value pair. Translate callback logic explicitly and add tests; do not assume callback argument compatibility. Chronos intentionally omits request/response bodies, raw SQL, binds, cookies, authorization headers, mail content, and raw cache keys.
+
+Before removing Airbrake, exercise a synchronous notification, an asynchronous notification followed by `Chronos.flush`, a Rails/Rack failure, a background job failure, and an unavailable endpoint. Confirm that the bounded queue/backlog behavior is acceptable. Roll back by disabling Chronos or restoring the previous dependency; no application exception semantics are changed by the agent.

data/docs/modules/active-job.md

@@ -0,0 +1,7 @@
+# Active Job legacy integration
+
+When `ActiveJob::Base` is available, the Rails installer prepends public serialization/execution hooks. Enqueue serialization adds a namespaced `chronos_context` field with schema version plus at most the trace and request identifiers; each identifier is limited to 128 bytes. Public job arguments are unchanged. Deserialization restores this context only around `perform_now`.
+
+The `perform.active_job` subscriber records adapter, job ID, provider job ID, class, queue, execution count, duration, status, and error class. Arguments are omitted. A supplied exception is reported once with bounded job context. The integration never changes retry, acknowledgement, adapter, or original exception behavior.
+
+This metadata can identify a workflow or tenant in some applications. Review retention and identifier generation under the project's privacy policy.

data/docs/modules/ignore-rules.md

@@ -0,0 +1,11 @@
+# Bounded local ignore rules
+
+Configure startup rules with `config.ignore_rules` or add a rule to the active agent with `Chronos.ignore_if`. A rule receives an immutable normalized notice and must return exactly `true` to discard it before serialization, queueing, retry, or network work.
+
+```ruby
+Chronos.ignore_if do |notice|
+  notice.exception_class == "SomeExpectedError"
+end
+```
+
+At most `max_ignore_rules` rules are retained (default 20, hard maximum 100). Registration returns `false` when Chronos is not configured, the object is not callable, or the limit is full. A rule failure is contained and treated as no match. Rules run in the capture caller and therefore must be fast, thread-safe, and free of I/O. Remote configuration cannot add executable rules.

data/docs/modules/rails-legacy.md

@@ -28,10 +28,10 @@ The public `ActiveSupport::Notifications.subscribe` API is used for:
 | `render_template.action_view` | `request` with `kind=view` | template basename and duration |
 | `sql.active_record` | `query` | operation name, cached flag, and duration |
 | `deliver.action_mailer` | `job` with `kind=mailer` | mailer, action, and duration |
-| `perform.active_job` | `job` | job class, queue, and duration, when Active Job is available |
+| `perform.active_job` | `job` | adapter, job/provider IDs, class, queue, attempts, duration, status, and error class |
 | cache read/write/hit notifications | `cache` | operation, backend, namespace, hit/miss, duration, and optional scoped key hash |
 
-Raw SQL, binds, cache keys, mail recipients and bodies, job IDs and arguments, request/response bodies, cookies, and authorization headers are not copied. Template identifiers are reduced to their basename. Every event passes through `Sanitizer`, `SafeSerializer`, the bounded queue, retry policy, circuit breaker, and memory backlog.
+Raw SQL, binds, cache keys, mail recipients and bodies, job arguments, request/response bodies, cookies, and authorization headers are not copied. Documented Active Job IDs are collected, while public job arguments remain unchanged and omitted. Template identifiers are reduced to their basename. Every event passes through `Sanitizer`, `SafeSerializer`, the bounded queue, retry policy, circuit breaker, and memory backlog.
 
 ## Controller exceptions and deduplication
 
@@ -57,4 +57,4 @@ The repository contains independent applications under `examples/rails-4.2` and
 
 ## Limits
 
-Version 0.7 aggregates controller, SQL, and job timings into bounded APM batches. SQL literals and binds remain excluded while a bounded normalized query and fingerprint are produced. Sidekiq support remains a separate optional integration; full Active Job propagation remains a later legacy increment.
+Version 0.7 aggregates controller, SQL, and job timings into bounded APM batches. SQL literals and binds remain excluded while a bounded normalized query and fingerprint are produced. Sidekiq support remains a separate optional integration. Version `0.9.0.pre.2` provides bounded Active Job trace/request propagation through a namespaced serialized field; adapters that replace the standard Active Job serialization/execution hooks require separate compatibility evidence.

data/docs/modules/sidekiq-legacy.md

@@ -4,7 +4,7 @@ Version `0.6.0.pre.1` starts the legacy jobs line with optional Sidekiq 4 and 5
 
 ```ruby
 gem "sidekiq", "~> 5.0"
-gem "chronos-ruby", "0.9.0.pre.1", :require => "chronos/sidekiq"
+gem "chronos-ruby", "0.9.0.pre.2", :require => "chronos/sidekiq"
 ```
 
 `chronos/sidekiq` installs middleware through the public `configure_client` and `configure_server` APIs. It does nothing when Sidekiq is unavailable, and the core gem never requires Sidekiq. Installation adds no Chronos thread or Redis/database connection per job; delivery continues through the agent's existing fixed worker pool.

data/docs/performance.md

@@ -29,6 +29,17 @@ Current controls:
 
 Run the scripts under `benchmarks/` and record Ruby version, operating system, CPU, warmup, iteration count, median, and dispersion before publishing results. `benchmarks/filtering.rb` measures privacy filtering, `benchmarks/retry_backlog.rb` measures fixed-memory outage behavior, `benchmarks/request_overhead.rb` compares Rack-protocol calls, and `benchmarks/rails_notifications.rb` isolates subscriber normalization overhead.
 
+## Version 0.9.0.pre.2 release gates
+
+`benchmarks/comparative.rb` compares the same successful Rack fixture without and with Chronos instrumentation. It performs configurable warmup, at least three samples, and reports median plus median absolute deviation. `benchmarks/fake_endpoint_load.rb` sends asynchronous exception events to a local TCP endpoint, verifies the v1 schema marker, ensures the secret key is absent from every payload, and fails on loss, rejection, invalid payload, or timeout.
+
+```bash
+ITERATIONS=50000 WARMUP=5000 SAMPLES=7 bundle exec ruby benchmarks/comparative.rb
+ITERATIONS=500 bundle exec ruby benchmarks/fake_endpoint_load.rb
+```
+
+Results are environment-specific evidence, not a general speed claim. Record CPU, OS, Ruby, gem commit, and environment variables with any published result. Airbrake comparison remains optional and must use a legally compatible, equivalent sanitized payload on the same supported runtime.
+
 ## Version 0.5 Rails subscriber benchmark
 
 Run:

data/docs/protocol-v1.md

@@ -0,0 +1,5 @@
+# Protocol v1 stability
+
+The schemas under `contracts/` are the source of truth for protocol v1. Version `0.9.0.pre.2` keeps `schema_version: "1.0"` and treats every required field, enum value, privacy exclusion, and maximum as a compatibility contract.
+
+Compatible changes may add optional bounded fields or new event types accepted by the server. Removing or renaming a field, changing its type/meaning, weakening a bound, or making an optional field required needs a new protocol major schema. Authentication remains outside the JSON payload. Contract tests and `script/verify_docs` must pass before a release.

data/docs/release-1.0-readiness.md

@@ -0,0 +1,18 @@
+# Version 1.0 readiness
+
+Version `0.9.0.pre.2` is a hardening release, not the stable release. The local suite, lint, documentation verifier, build, load test, and comparative benchmark are required evidence. The release can advance to `1.0.0` only after the GitHub Actions matrix is green for every declared legacy Ruby/framework/job combination.
+
+| Gate | State in pre.2 |
+|---|---|
+| Ruby pure, Rack, Rails 4.2/5.2 | Implemented; external legacy matrix must pass |
+| Sidekiq 4/5 real gems | Dedicated Docker matrix added; must pass |
+| Active Job metadata/error/context | Implemented and contract-tested |
+| filters, bounded ignore rules, context, breadcrumbs | Implemented and documented |
+| request/SQL/job APM, deploy, retry/backlog, remote configuration | Implemented and contract-tested |
+| payload fixture privacy | Contract-tested |
+| public API/options/protocol review | Documented; final review required |
+| Airbrake migration, SemVer, deprecation, security review | Added in pre.2 |
+| fake endpoint load and repeatable comparison | Executable gates added |
+| package signing | Not currently feasible; protected secret plus checksum is the interim control |
+
+Do not change compatibility status from `Best effort` or create a `v1.0.0` tag until all external jobs and the dependency audit pass without skips.

data/docs/security-review.md

@@ -0,0 +1,16 @@
+# Security review for 0.9.0.pre.2
+
+Review date: 2026-07-21. Scope: capture, serialization, transport, remote configuration, framework/job integrations, release workflow, examples, and fixtures.
+
+Verified by contracts and implementation review:
+
+- the secret project key is sent only in an authentication header and never in the event body;
+- sanitization and payload limits run before queueing, retry, backlog, or transport;
+- queue, workers, retries, delays, circuit state, backlog, breadcrumbs, APM groups, dependencies, ignore rules, and propagated identifiers are bounded;
+- TLS verification is default and plain HTTP requires explicit `ssl_verify = false`;
+- remote configuration is size-limited, allowlisted, and cannot replace credentials/host or install executable rules;
+- integrations contain agent failures and do not collect bodies, authorization, raw SQL/binds, mail content, or raw cache keys;
+- Active Job propagation uses a namespaced v1 field containing only bounded trace/request identifiers and does not alter job arguments;
+- fixture privacy is enforced by contract tests and dependency advisories are checked by the security workflow.
+
+Residual risks: supported Ruby/Rails versions are end-of-life; in-memory backlog is lost at exit; application filters/ignore rules execute application code; project identifiers and documented job IDs may be personal data in some deployments; package signing is not enabled because no trusted certificate/key lifecycle exists. Release artifacts should use protected environments and published SHA-256 checksums until signing can be operated safely.

data/docs/semver.md

@@ -0,0 +1,11 @@
+# Semantic Versioning policy
+
+Chronos follows Semantic Versioning for the gem API and the independently versioned event protocol.
+
+- Before `1.0.0`, incompatible changes may occur only in a documented prerelease and must appear in the changelog and migration notes.
+- From `1.0.0`, patch releases contain compatible fixes, minor releases add compatible capability, and major releases may remove or change public behavior.
+- Public API includes documented `Chronos` methods, configuration options, supported require paths, integration entry points, and documented return/error behavior.
+- Internal constants and files explicitly described as internal are not public API.
+- The JSON `schema_version` is independent of the gem version. Additive optional v1 fields are compatible; removing, renaming, or changing required v1 fields requires a new protocol major version.
+
+A release is not promoted to stable while its supported matrix or mandatory release gates are incomplete.

data/lib/chronos/agent.rb

@@ -50,6 +50,10 @@ module Chronos
       @capture.call_sync(exception, context_for_capture(context))
     end
 
+    def ignore_if(&block)
+      @ignore_policy.add(&block)
+    end
+
     def with_context(context = {}, &block)
       @context_store.with_context(context, &block)
     end
@@ -186,7 +190,12 @@ module Chronos
     private
 
     def initialize_capture(options)
-      @capture = options[:capture] || Application::CaptureException.new(@config, @delivery_pipeline, @logger)
+      @ignore_policy = options[:ignore_policy] || Application::IgnorePolicy.new(
+        @config.ignore_rules, @config.max_ignore_rules, @logger
+      )
+      @capture = options[:capture] || Application::CaptureException.new(
+        @config, @delivery_pipeline, @logger, :ignore_policy => @ignore_policy
+      )
       @telemetry = options[:telemetry] || Application::CaptureTelemetry.new(@config, @delivery_pipeline, @logger)
     end
 

data/lib/chronos/application/capture_exception.rb

@@ -18,6 +18,7 @@ module Chronos
         @delivery_pipeline = delivery_pipeline
         @logger = logger || Internal::SafeLogger.new(config.logger)
         @notice_builder = options[:notice_builder] || Core::NoticeBuilder.new(config)
+        @ignore_policy = options[:ignore_policy]
         @serializer = options[:serializer] || Core::PayloadSerializer.new(
           config,
           nil,
@@ -29,6 +30,7 @@ module Chronos
         return false unless capture_enabled?
 
         notice = build_notice(exception, context)
+        return false if ignored?(notice)
         return false unless @delivery_pipeline.capture_allowed?("exception", notice.fingerprint)
 
         @delivery_pipeline.enqueue(@serializer.call(notice))
@@ -41,6 +43,7 @@ module Chronos
         return false unless capture_enabled?
 
         notice = build_notice(exception, context)
+        return false if ignored?(notice)
         return false unless @delivery_pipeline.capture_allowed?("exception", notice.fingerprint)
 
         @delivery_pipeline.deliver_sync(@serializer.call(notice))
@@ -59,6 +62,10 @@ module Chronos
         @notice_builder.call(exception, context)
       end
 
+      def ignored?(notice)
+        @ignore_policy && @ignore_policy.ignored?(notice)
+      end
+
       def diagnose(error)
         @logger.warn("Chronos capture failed: #{error.class}")
       end

data/lib/chronos/application/ignore_policy.rb

@@ -0,0 +1,54 @@
+module Chronos
+  module Application
+    # Stores and evaluates bounded application-owned exception ignore rules.
+    #
+    # @responsibility Decide whether a normalized Notice should be discarded locally.
+    # @motivation Expected application failures should not consume queue or network capacity.
+    # @limits Rules inspect only the bounded Notice API and cannot be installed remotely.
+    # @collaborators CaptureException and application-provided callables.
+    # @thread_safety Rule registration and snapshots are protected by a mutex.
+    # @compatibility Ruby 2.2.10 through Ruby 2.6.
+    # @example
+    #   policy.add { |notice| notice.exception_class == "ExpectedError" }
+    # @errors A failing rule is contained, logged, and treated as not matching.
+    # @performance The number of evaluated rules is capped by configuration.
+    class IgnorePolicy
+      def initialize(rules, limit, logger)
+        @rules = Array(rules).dup
+        @limit = limit
+        @logger = logger
+        @mutex = Mutex.new
+      end
+
+      def add(rule = nil, &block)
+        candidate = rule || block
+        return false unless candidate.respond_to?(:call)
+
+        @mutex.synchronize do
+          return false if @rules.length >= @limit
+
+          @rules << candidate
+        end
+        true
+      rescue StandardError
+        false
+      end
+
+      def ignored?(notice)
+        rules = @mutex.synchronize { @rules.dup }
+        rules.any? { |rule| safely_matches?(rule, notice) }
+      rescue StandardError
+        false
+      end
+
+      private
+
+      def safely_matches?(rule, notice)
+        rule.call(notice) == true
+      rescue StandardError => error
+        @logger.warn("Chronos ignore rule failed: #{error.class}")
+        false
+      end
+    end
+  end
+end

data/lib/chronos/configuration/validation.rb

@@ -9,7 +9,7 @@ module Chronos
     # @thread_safety Validation reads one configuration instance without shared state.
     # @compatibility Ruby 2.2.10 through Ruby 2.6.
     # @errors Invalid values become messages; malformed URLs are contained.
-    module ConfigurationValidation
+    module ConfigurationValidation # rubocop:disable Metrics/ModuleLength
       private
 
       def resilience_errors
@@ -60,6 +60,7 @@ module Chronos
         errors.concat(matcher_errors("allowlist_keys", allowlist_keys))
         errors.concat(matcher_errors("hash_keys", hash_keys))
         errors.concat(filter_errors)
+        errors.concat(ignore_rule_errors)
         errors.concat(anonymization_errors)
         errors
       end
@@ -99,6 +100,20 @@ module Chronos
         [true, false].include?(anonymize_ip) ? [] : ["anonymize_ip must be true or false"]
       end
 
+      def ignore_rule_errors
+        errors = []
+        unless ignore_rules.is_a?(Array) && ignore_rules.all? { |rule| rule.respond_to?(:call) }
+          errors << "ignore_rules must contain only callable objects"
+        end
+        unless positive_integer?(max_ignore_rules) && max_ignore_rules <= 100
+          errors << "max_ignore_rules must be an integer between 1 and 100"
+        end
+        if ignore_rules.is_a?(Array) && max_ignore_rules.is_a?(Integer) && ignore_rules.length > max_ignore_rules
+          errors << "ignore_rules cannot exceed max_ignore_rules"
+        end
+        errors
+      end
+
       def matcher_errors(name, values)
         return [] unless values.is_a?(Array)
         return [] if values.all? { |value| value.is_a?(String) || value.is_a?(Symbol) || value.is_a?(Regexp) }

data/lib/chronos/configuration.rb

@@ -37,7 +37,7 @@ module Chronos
       :queue_size, :workers, :enabled, :error_notifications,
       :ignored_environments, :proxy, :ssl_verify, :user_agent,
       :max_payload_size, :gzip, :blocklist_keys, :allowlist_keys,
-      :filters, :hash_keys, :anonymize_ip, :max_retries,
+      :filters, :hash_keys, :anonymize_ip, :ignore_rules, :max_ignore_rules, :max_retries,
       :retry_base_interval, :retry_max_interval, :retry_jitter,
       :backlog_size, :circuit_failure_threshold, :circuit_reset_timeout,
       :remote_configuration, :remote_config_max_bytes, :sampling_rate,
@@ -162,6 +162,8 @@ module Chronos
       @filters = []
       @hash_keys = []
       @anonymize_ip = true
+      @ignore_rules = []
+      @max_ignore_rules = 20
     end
 
     def initialize_resilience_defaults

data/lib/chronos/integrations/active_job.rb

@@ -0,0 +1,119 @@
+require "securerandom"
+
+module Chronos
+  module Integrations
+    # Propagates bounded Chronos context through Active Job serialization.
+    #
+    # @responsibility Add trace/request identifiers to the job envelope and restore them while performing.
+    # @motivation Active Job adapters commonly cross process boundaries where thread-local context is lost.
+    # @limits It changes only a namespaced serialization field, never public job arguments or adapter behavior.
+    # @collaborators ActiveJob::Base serialization hooks and the Chronos facade.
+    # @thread_safety Installation is mutex-protected and each job owns its restored context.
+    # @compatibility Active Job shipped with Rails 4.2 through Rails 5.2.
+    # @example
+    #   Chronos::Integrations::ActiveJob.install(ActiveJob::Base)
+    # @errors Context failures are contained so enqueue and perform semantics remain unchanged.
+    # @performance Adds at most two strings of 128 bytes to a serialized job.
+    module ActiveJob
+      CONTEXT_KEY = "chronos_context".freeze
+      SCHEMA_VERSION = "1.0".freeze
+      MAX_IDENTIFIER_BYTES = 128
+
+      @mutex = Mutex.new
+
+      class << self
+        def install(base = nil, notifier = Chronos)
+          target = base || (::ActiveJob::Base if defined?(::ActiveJob::Base))
+          return false unless target && target.respond_to?(:prepend)
+
+          @mutex.synchronize do
+            return false if target.ancestors.include?(JobExtensions)
+
+            JobExtensions.notifier = notifier
+            target.send(:prepend, JobExtensions)
+          end
+          true
+        rescue StandardError
+          false
+        end
+
+        def envelope(notifier)
+          source = notifier.respond_to?(:propagation_context) ? notifier.propagation_context : {}
+          source = {} unless source.is_a?(Hash)
+          context = %w(trace_id request_id).each_with_object({}) do |key, result|
+            value = source[key] || source[key.to_sym]
+            result[key] = bounded(value) unless value.to_s.empty?
+          end
+          context["trace_id"] = SecureRandom.uuid if context["trace_id"].to_s.empty?
+          {"schema_version" => SCHEMA_VERSION, "context" => context}
+        rescue StandardError
+          nil
+        end
+
+        def context(value)
+          return {} unless value.is_a?(Hash)
+          return {} unless (value["schema_version"] || value[:schema_version]).to_s == SCHEMA_VERSION
+
+          source = value["context"] || value[:context]
+          return {} unless source.is_a?(Hash)
+
+          %w(trace_id request_id).each_with_object({}) do |key, result|
+            candidate = source[key] || source[key.to_sym]
+            result[key] = bounded(candidate) unless candidate.to_s.empty?
+          end
+        rescue StandardError
+          {}
+        end
+
+        private
+
+        def bounded(value)
+          string = value.to_s
+          return string if string.bytesize <= MAX_IDENTIFIER_BYTES
+
+          string.byteslice(0, MAX_IDENTIFIER_BYTES)
+        rescue StandardError
+          ""
+        end
+      end
+
+      # Active Job instance hooks installed through Module#prepend.
+      module JobExtensions
+        class << self
+          attr_accessor :notifier
+        end
+
+        def serialize(*arguments)
+          data = super
+          begin
+            envelope = Chronos::Integrations::ActiveJob.envelope(JobExtensions.notifier || Chronos)
+            data[CONTEXT_KEY] = envelope if data.is_a?(Hash) && envelope
+          rescue StandardError
+            nil
+          end
+          data
+        end
+
+        def deserialize(job_data)
+          result = super
+          begin
+            @chronos_context = Chronos::Integrations::ActiveJob.context(
+              job_data.is_a?(Hash) ? (job_data[CONTEXT_KEY] || job_data[CONTEXT_KEY.to_sym]) : nil
+            )
+          rescue StandardError
+            @chronos_context = {}
+          end
+          result
+        end
+
+        def perform_now(*arguments, &block)
+          context = @chronos_context || {}
+          notifier = JobExtensions.notifier || Chronos
+          return super if context.empty? || !notifier.respond_to?(:with_context)
+
+          notifier.with_context(:context => context) { super }
+        end
+      end
+    end
+  end
+end

data/lib/chronos/rails/installer.rb

@@ -33,6 +33,7 @@ module Chronos
           return false if self.class.applications[application.object_id]
 
           install_middleware(application, options)
+          install_active_job
           @subscriber.install
           self.class.applications[application.object_id] = true
         end
@@ -58,6 +59,12 @@ module Chronos
         true
       end
 
+      def install_active_job
+        return false unless defined?(::ActiveJob::Base)
+
+        Chronos::Integrations::ActiveJob.install(::ActiveJob::Base, @notifier)
+      end
+
       def environment
         defined?(::Rails) && ::Rails.respond_to?(:env) ? ::Rails.env.to_s : nil
       end

data/lib/chronos/rails/notifications_subscriber.rb

@@ -144,11 +144,39 @@ module Chronos
 
       def active_job(payload, duration)
         job = value(payload, :job)
+        exception = job_exception(payload)
         data = {
           "kind" => "active_job", "class" => safe_class_name(job),
-          "queue" => safe_job_value(job, :queue_name), "duration_ms" => duration
+          "adapter" => active_job_adapter(job), "job_id" => safe_job_value(job, :job_id),
+          "provider_job_id" => safe_job_value(job, :provider_job_id),
+          "queue" => safe_job_value(job, :queue_name), "attempts" => job_attempts(job),
+          "duration_ms" => duration, "status" => exception ? "failed" : "completed"
         }
+        data["error_class"] = exception.class.name.to_s if exception
         @notifier.record_event("job", data)
+        @notifier.notify_once(exception, :context => {"job" => data}) if exception
+      end
+
+      def job_exception(payload)
+        exception = value(payload, :exception_object)
+        details = value(payload, :exception)
+        exception ||= RuntimeError.new(Array(details).last.to_s) if details
+        exception
+      end
+
+      def active_job_adapter(job)
+        adapter = job.respond_to?(:queue_adapter) ? job.queue_adapter : nil
+        adapter = adapter.class if adapter && !adapter.is_a?(Class)
+        adapter ? adapter.name.to_s.split("::").last.to_s.sub(/Adapter$/, "") : ""
+      rescue StandardError
+        ""
+      end
+
+      def job_attempts(job)
+        value = job.respond_to?(:executions) ? job.executions : 0
+        value.is_a?(Numeric) ? value.to_i : 0
+      rescue StandardError
+        0
       end
 
       def cache(name, payload, duration)

data/lib/chronos/rails.rb

@@ -1,5 +1,6 @@
 require "chronos"
 require "chronos/rails/notifications_subscriber"
+require "chronos/integrations/active_job"
 require "chronos/rails/installer"
 
 require "chronos/rails/railtie" if defined?(::Rails::Railtie)

data/lib/chronos/version.rb

@@ -1,4 +1,4 @@
 module Chronos
   # Current version of the legacy Chronos Ruby agent.
-  VERSION = "0.9.0.pre.1".freeze
+  VERSION = "0.9.0.pre.2".freeze
 end

data/lib/chronos.rb

@@ -33,6 +33,7 @@ require "chronos/core/breadcrumb"
 require "chronos/application/retry_policy"
 require "chronos/application/circuit_breaker"
 require "chronos/application/remote_configuration"
+require "chronos/application/ignore_policy"
 require "chronos/application/delivery_pipeline"
 require "chronos/application/capture_exception"
 require "chronos/application/apm_error_classifier"
@@ -60,7 +61,7 @@ require "chronos/integrations/rack/middleware"
 #     config.host = "https://chronos.example.com"
 #   end
 #   Chronos.notify(RuntimeError.new("failed"))
-module Chronos
+module Chronos # rubocop:disable Metrics/ModuleLength
   extend ObservabilityFacade
 
   @mutex = Mutex.new
@@ -144,6 +145,13 @@ module Chronos
       false
     end
 
+    def ignore_if(&block)
+      agent = current_agent
+      agent ? agent.ignore_if(&block) : false
+    rescue StandardError
+      false
+    end
+
     def rails_integration_options(environment = nil, console = false)
       agent = current_agent
       agent ? agent.rails_integration_options(environment, console) : {:enabled => false}

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: chronos-ruby
 version: !ruby/object:Gem::Version
-  version: 0.9.0.pre.1
+  version: 0.9.0.pre.2
 platform: ruby
 authors:
 - Antonio Jefferson
@@ -105,11 +105,15 @@ files:
 - docs/adr/ADR-015-bounded-apm-aggregation.md
 - docs/adr/ADR-016-explicit-observability-integrations.md
 - docs/adr/ADR-017-deploy-events-and-correlation.md
+- docs/adr/ADR-018-pre-1.0-hardening.md
 - docs/architecture.md
 - docs/compatibility.md
 - docs/configuration.md
 - docs/data-collected.md
+- docs/deprecation-policy.md
 - docs/examples/plain-ruby.md
+- docs/migration-from-airbrake.md
+- docs/modules/active-job.md
 - docs/modules/apm-aggregation.md
 - docs/modules/async-queue.md
 - docs/modules/cache-observability.md
@@ -117,6 +121,7 @@ files:
 - docs/modules/dependencies.md
 - docs/modules/deploy-tracking.md
 - docs/modules/external-http.md
+- docs/modules/ignore-rules.md
 - docs/modules/notice-pipeline.md
 - docs/modules/rack-context.md
 - docs/modules/rails-legacy.md
@@ -129,6 +134,10 @@ files:
 - docs/modules/transport.md
 - docs/performance.md
 - docs/privacy-lgpd.md
+- docs/protocol-v1.md
+- docs/release-1.0-readiness.md
+- docs/security-review.md
+- docs/semver.md
 - docs/troubleshooting.md
 - lib/chronos.rb
 - lib/chronos/adapters.rb
@@ -143,6 +152,7 @@ files:
 - lib/chronos/application/circuit_breaker.rb
 - lib/chronos/application/delivery_pipeline.rb
 - lib/chronos/application/dependency_reporter.rb
+- lib/chronos/application/ignore_policy.rb
 - lib/chronos/application/remote_configuration.rb
 - lib/chronos/application/retry_policy.rb
 - lib/chronos/capistrano.rb
@@ -169,6 +179,7 @@ files:
 - lib/chronos/core/telemetry_event.rb
 - lib/chronos/errors.rb
 - lib/chronos/integrations.rb
+- lib/chronos/integrations/active_job.rb
 - lib/chronos/integrations/capistrano.rb
 - lib/chronos/integrations/job_payload.rb
 - lib/chronos/integrations/net_http.rb