dash0-opentelemetry 0.1.0

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: 31959435154e92aa8fd18f56086f3a5d043698bcee19ec2fd1f1503f9e239f85
+  data.tar.gz: 007201e91375e5bcb6691377585a9d2217584e2676f7c6cb0cee1d864ed60cc6
+SHA512:
+  metadata.gz: 509d4df2c0ec60723e09de63706358c3cd0a2313b127b40a343aaa9389b228b3a5a108a305d950cb070e2eb85c4199e18fab46b63af1448a1a595ec694734780
+  data.tar.gz: d38e93933f843c7066f29aad15e402eaff175d2e804df8c315af487e154e074a22b5b96fefd85dcc296945c2486a99ce57cf70884b571cbcd66900fe9acdd1ea

data/CHANGELOG.md

@@ -0,0 +1,70 @@
+# Changelog
+
+All notable changes to the Dash0 OpenTelemetry distribution for Ruby will be
+documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [Unreleased]
+
+## [0.1.0] - 2026-07-31
+
+### Added
+
+- Initial project scaffolding: gem layout, tooling (RuboCop, Minitest, Rake),
+  and CI.
+- Boot sequence and gating: stands down on unsupported Ruby (parse-safe guard in
+  the entry point), when `DASH0_DISABLE=true`, when
+  `DASH0_OTEL_COLLECTOR_BASE_URL` is unset, and when OpenTelemetry is already
+  loaded (double-instrumentation guard). Fails open — if the bundled
+  OpenTelemetry gems cannot be loaded, the distribution stands down rather than
+  crashing the host application.
+- Trace export: configures the OpenTelemetry SDK with an OTLP/HTTP-protobuf
+  exporter derived from `DASH0_OTEL_COLLECTOR_BASE_URL`, plus the
+  `telemetry.distro.{name,version}` resource attributes (`dash0-ruby`).
+- Zero-code instrumentation install via a `TracePoint(:end)` sweep, so libraries
+  loaded after startup are instrumented — including libraries that load in
+  stages, such as `ActiveSupport` and `ActionView` in a Rails application. Honors
+  `OTEL_RUBY_ENABLED_INSTRUMENTATIONS`.
+- Metrics and logs export over OTLP/HTTP-protobuf to `/v1/metrics` and
+  `/v1/logs` on the same collector base URL, activated by requiring the metrics
+  and logs SDK gems. Metric export interval/timeout honor
+  `OTEL_METRIC_EXPORT_INTERVAL` / `OTEL_METRIC_EXPORT_TIMEOUT` (via the upstream
+  periodic reader).
+- `DASH0_DEBUG_PRINT_SPANS=true` prints spans to stdout via a console exporter,
+  added alongside (not in place of) the OTLP exporter.
+- Custom resource detectors: `kubernetes-pod` (derives `k8s.pod.uid` from cgroup
+  v1/v2, gated on the `/etc/hosts` Kubernetes marker) and `service-name-fallback`,
+  which derives `service.name` from the application's own identity — the app
+  module in `config/application.rb` / `config/app.rb` (Rails, Hanami), or the
+  `run` target / app class in `config.ru` (modular Sinatra, Roda, Rack,
+  single-file Rails). Launcher wrappers (`bundle`, `puma`, `rackup`, …) are not
+  used as a name, and when none can be derived the SDK's `unknown_service`
+  default stands. Skipped when a name is already set via `OTEL_SERVICE_NAME` /
+  `OTEL_RESOURCE_ATTRIBUTES`, or opted out with `DASH0_AUTOMATIC_SERVICE_NAME=false`.
+  The upstream container detector (`container.id`) runs by default too.
+- Lifecycle handling: `DASH0_BOOTSTRAP_SPAN` emits a named internal span at
+  startup; `DASH0_FLUSH_ON_SIGTERM_SIGINT=true` installs SIGTERM/SIGINT handlers
+  that flush telemetry (timeboxed) and re-raise the signal; an at-exit flush runs
+  by default unless disabled with `DASH0_FLUSH_ON_EXIT=false`. Provider shutdown
+  is idempotent and runs off the trap context to stay mutex-safe.
+- Integration test harness: an in-process mock OTLP/HTTP collector (decoding the
+  exporter's protobuf payloads) and sample apps run in a separate process with
+  the distribution preloaded via `ruby -r dash0-opentelemetry`. Covers
+  end-to-end export of all three signals with the distro resource attributes,
+  zero-code `net/http` auto-instrumentation, a minimal Rails app (proving the
+  Rack/Rails stack is instrumented when loaded after preload), and the
+  unsupported-Ruby stand-down.
+- Documentation and release tooling: a full environment-variable reference in the
+  README, `RELEASING.md`, and a RubyGems trusted-publishing (`release.yml`)
+  workflow triggered on version tags.
+- Injection support: when preloaded by the operator/injector (no Bundler, gems
+  mounted on `OTEL_RUBY_ADDITIONAL_GEM_PATH`), the entry point puts its own `lib`
+  and the bundled OpenTelemetry gems on the load path — plus the few required
+  non-`opentelemetry-*` gems (`google-protobuf` and its protobuf deps, `logger`)
+  — so the distribution loads without relying on Bundler or gem activation.
+- `DISALLOWED_LIB_PATH` (comma-separated) keeps named bundled gems off the load
+  path when injected. Its main use is a `google-protobuf` version clash:
+  `DISALLOWED_LIB_PATH=google-protobuf` makes the distribution defer to the
+  application's own protobuf.

data/CONTRIBUTING.md

@@ -0,0 +1,57 @@
+# Contributing
+
+Thanks for your interest in the Dash0 OpenTelemetry distribution for Ruby.
+
+## Development setup
+
+Use the Ruby version declared in the gemspec (`>= 3.3`). Then:
+
+```sh
+bundle install
+```
+
+## Common tasks
+
+- `bundle exec rake` — run the full verification (unit tests + RuboCop). This is
+  what CI runs.
+- `bundle exec rake test` — run the unit tests only.
+- `bundle exec rake rubocop` — run the linter only.
+- `bundle exec rubocop -a` — auto-correct lint offenses where safe.
+
+## Conventions
+
+- Every Ruby source file starts with the SPDX header:
+
+  ```ruby
+  # frozen_string_literal: true
+
+  # SPDX-FileCopyrightText: Copyright 2026 Dash0 Inc.
+  # SPDX-License-Identifier: Apache-2.0
+  ```
+
+- Tests use Minitest and live under `test/`, named `*_test.rb`.
+- This distribution is a **wrapper** around upstream OpenTelemetry Ruby. Prefer
+  configuring or extending upstream behavior over reimplementing it.
+
+## Changelog
+
+User-facing changes need a changelog fragment instead of a direct edit to
+`CHANGELOG.md`:
+
+```sh
+bundle exec rake chloggen:new[short-slug]
+```
+
+Fill in the generated `.chloggen/<short-slug>.yaml` and commit it alongside
+your change. See [`.chloggen/README.md`](.chloggen/README.md) for the fragment
+format; CI validates fragments and requires one for changes under `lib/`
+(skippable with the `Skip changelog` label). CI also rejects PRs that edit
+`CHANGELOG.md` directly — it is only ever updated by `rake chloggen:update` at
+release time.
+
+## How it is used
+
+The distribution is designed to be injected into Ruby workloads by the Dash0
+Kubernetes operator via `RUBYOPT="-r dash0-opentelemetry"`, the Ruby analog of
+Node's `NODE_OPTIONS=--require`. Everything runs as a side effect of requiring
+the gem; there is no API to call.

data/LICENSE

@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

data/README.md

@@ -0,0 +1,128 @@
+# Dash0 OpenTelemetry Distribution for Ruby
+
+An opinionated, zero-code [OpenTelemetry](https://opentelemetry.io) distribution
+for Ruby, published as the `dash0-opentelemetry` gem. It is a thin wrapper around
+upstream OpenTelemetry Ruby that ships a batteries-included auto-instrumentation
+setup for [Dash0](https://www.dash0.com).
+
+## Intended use
+
+This distribution is primarily intended to be injected into Ruby workloads by the
+[Dash0 Kubernetes operator](https://github.com/dash0hq/dash0-operator), which
+instruments them without code changes. It is required at process startup via
+`RUBYOPT`, the Ruby analog of Node.js's `NODE_OPTIONS=--require`:
+
+```sh
+RUBYOPT="-r dash0-opentelemetry" ruby your_app.rb
+RUBYOPT="-r dash0-opentelemetry" rails server
+```
+
+Everything runs as a side effect of requiring the gem — there is no API to call.
+Because it is loaded before the application's own libraries, instrumentation is
+installed lazily (via a `TracePoint`) as each supported library is loaded, so no
+particular load order is required.
+
+## Requirements
+
+- Ruby **>= 3.3**. On an unsupported Ruby the distribution stands down cleanly
+  (it logs a message and does nothing) rather than interfering with the app.
+
+## Installation
+
+```sh
+gem install dash0-opentelemetry
+```
+
+Install it **outside** the application's bundle (it loads OpenTelemetry from its
+own gem path, not from the app's `Gemfile`).
+
+## What it does
+
+On startup the distribution:
+
+- exports **traces, metrics, and logs** over OTLP (HTTP/protobuf) to the Dash0
+  collector at `${DASH0_OTEL_COLLECTOR_BASE_URL}/v1/{traces,metrics,logs}`;
+- enables all instrumentations from
+  [`opentelemetry-instrumentation-all`](https://github.com/open-telemetry/opentelemetry-ruby-contrib),
+  installed lazily as their target libraries load;
+- adds resource attributes: the upstream defaults (process, SDK, and any
+  `OTEL_SERVICE_NAME` / `OTEL_RESOURCE_ATTRIBUTES`), the container detector
+  (`container.id`), a Kubernetes pod-uid detector (`k8s.pod.uid`), a service-name
+  fallback (`service.name`), and the distribution identity
+  (`telemetry.distro.name = dash0-ruby`, `telemetry.distro.version`).
+
+## Configuration
+
+Behavior is driven entirely by environment variables: `DASH0_*` for
+distribution-specific switches and standard `OTEL_*` for the rest.
+
+### `DASH0_*` variables
+
+| Variable | Description |
+| --- | --- |
+| `DASH0_OTEL_COLLECTOR_BASE_URL` | **Required.** Base URL of the OpenTelemetry collector to export to; each signal is sent to `<base>/v1/{traces,metrics,logs}`. If unset, the distribution stands down and exports nothing. (The Dash0 operator sets this for you.) |
+| `DASH0_DISABLE` | Set to `true` to disable the distribution entirely. |
+| `DASH0_AUTOMATIC_SERVICE_NAME` | Set to `false` to opt out of the automatic `service.name` fallback (see below). |
+| `DASH0_BOOTSTRAP_SPAN` | If set to a non-empty string, a single internal span with that name is emitted immediately at startup. Useful for confirming the distribution is active. |
+| `DASH0_FLUSH_ON_SIGTERM_SIGINT` | Set to `true` to install SIGTERM/SIGINT handlers that flush pending telemetry (timeboxed) before re-raising the signal. Do not use if the application installs its own handlers for these signals. |
+| `DASH0_FLUSH_ON_EXIT` | Telemetry is flushed on normal process exit by default (via an `at_exit` hook). Set to `false` to disable this. |
+| `DASH0_DEBUG` | Set to `true` for additional debug logging on stderr. |
+| `DASH0_DEBUG_PRINT_SPANS` | Set to `true` to also print every span to stdout via a console exporter (in addition to exporting over OTLP). |
+
+### Automatic service name
+
+If no service name has been configured, the distribution derives one from the
+application's own identity, in order of preference:
+
+1. the app module in `config/application.rb` or `config/app.rb` (Rails, Hanami) —
+   e.g. `module DemoApp` → `demo_app`;
+2. `config.ru` — the `run <AppClass>` target or an inline application class
+   (modular Sinatra, Roda, plain Rack, single-file Rails);
+3. the entry script name, when it is not a known launcher/wrapper (e.g.
+   `ruby my_worker.rb` → `my_worker`).
+
+Because the distribution loads at interpreter startup, the entry point is usually
+a wrapper (`bundle`, `puma`, `rackup`, …); these are deliberately ignored rather
+than reported as the service name. When none of the above yields a name, the
+distribution reports nothing and the SDK's `unknown_service` default stands.
+
+This fallback is skipped entirely when a service name is already set via
+`OTEL_SERVICE_NAME`, via a `service.name` in `OTEL_RESOURCE_ATTRIBUTES`, or when
+`DASH0_AUTOMATIC_SERVICE_NAME=false`.
+
+### `OTEL_*` variables
+
+Standard OpenTelemetry variables are honored because the distribution uses the
+stock OpenTelemetry SDK, exporters, and processors. Commonly useful ones:
+
+| Variable | Description |
+| --- | --- |
+| `OTEL_SERVICE_NAME` | Sets `service.name` explicitly (and disables the automatic fallback). |
+| `OTEL_RESOURCE_ATTRIBUTES` | Additional resource attributes as `key=value` pairs. A `service.name` here also disables the automatic fallback. |
+| `OTEL_RUBY_ENABLED_INSTRUMENTATIONS` | Comma-separated allowlist of instrumentations to enable (by snake_case name, e.g. `net_http,rack`). When unset, all supported instrumentations are enabled. |
+| `OTEL_EXPORTER_OTLP_ENDPOINT` | Overrides the OTLP endpoint. Defaulted from `DASH0_OTEL_COLLECTOR_BASE_URL`; set explicitly only to override. |
+| `OTEL_EXPORTER_OTLP_PROTOCOL` | OTLP protocol; defaults to `http/protobuf` (the only protocol supported by the Ruby SDK's default path). |
+| `OTEL_EXPORTER_OTLP_HEADERS` | Extra headers for the OTLP exporter (e.g. an authorization token when exporting directly to Dash0 rather than through the operator's collector). |
+| `OTEL_METRIC_EXPORT_INTERVAL` / `OTEL_METRIC_EXPORT_TIMEOUT` | Periodic metric reader interval / timeout, in milliseconds. |
+
+Standard batch-processor variables (`OTEL_BSP_*`, `OTEL_BLRP_*`) and
+`OTEL_SDK_DISABLED` are honored by the underlying SDK as well.
+
+### `DISALLOWED_LIB_PATH` (advanced)
+
+A comma-separated list of bundled non-`opentelemetry-*` gems the distribution
+should **not** put on the load path when injected. Its main use is the escape
+hatch for a `google-protobuf` version clash: when instrumenting an app that uses
+its own `google-protobuf` at runtime and breaks because the bundled version wins
+set `DISALLOWED_LIB_PATH=google-protobuf` so the distribution defers to the app's
+copy. Works while the app's protobuf is within the exporter's supported range;
+otherwise the distribution stands down rather than crash.
+
+## Development
+
+See [CONTRIBUTING.md](CONTRIBUTING.md). Releasing is documented in
+[RELEASING.md](RELEASING.md).
+
+## License
+
+[Apache-2.0](LICENSE)

data/RELEASING.md

@@ -0,0 +1,53 @@
+# Releasing
+
+Releases follow [Semantic Versioning](https://semver.org). Publishing happens in
+CI via [RubyGems Trusted Publishing](https://guides.rubygems.org/trusted-publishing/)
+(OIDC) when a version tag is pushed — no API keys are stored.
+
+## One-time setup
+
+On [rubygems.org](https://rubygems.org), configure a trusted publisher for the
+`dash0-opentelemetry` gem pointing at this GitHub repository and the
+`.github/workflows/release.yml` workflow.
+
+On GitHub, configure the `rubygems` [deployment environment][gh-envs] with
+required reviewers (a maintainer must approve each publish). The release
+workflow uses this environment to gate RubyGems Trusted Publishing; without
+required reviewers the environment is a no-op and any triggered run publishes
+automatically. The workflow also refuses to publish a tag that is not reachable
+from `origin/main`, so the two gates together mean a release requires (a) a
+tag on a merged commit and (b) an explicit human approval on the environment.
+
+[gh-envs]: https://docs.github.com/en/actions/deployment/targeting-different-environments/using-environments-for-deployment#required-reviewers
+
+## Cutting a release
+
+1. Make sure `main` is green (`bundle exec rake`).
+2. Bump the version in
+   [`lib/dash0/opentelemetry/version.rb`](lib/dash0/opentelemetry/version.rb).
+3. Merge the pending changelog fragments:
+
+   ```sh
+   bundle exec rake chloggen:update
+   ```
+
+   This folds every fragment under [`.chloggen/`](.chloggen) into
+   [`CHANGELOG.md`](CHANGELOG.md)'s `Unreleased` section (grouped by change
+   type) and deletes the fragments. Then rename `Unreleased` to the new
+   version with today's date, and start a fresh `Unreleased` section.
+4. Commit the change (e.g. `chore: release vX.Y.Z`).
+5. Tag and push:
+
+   ```sh
+   git tag vX.Y.Z
+   git push origin main --tags
+   ```
+
+6. The `Release` workflow runs the full verification (`bundle exec rake`) and, if
+   it passes, builds and publishes the gem to RubyGems via trusted publishing.
+
+## After a release
+
+Consuming the new version in the Dash0 operator is a one-line change in the
+operator's Ruby build stage (install `dash0-opentelemetry` and point the injector
+entry symlink at it) — tracked in the operator repository, not here.

data/lib/dash0/opentelemetry/boot.rb

@@ -0,0 +1,99 @@
+# frozen_string_literal: true
+
+# SPDX-FileCopyrightText: Copyright 2026 Dash0 Inc.
+# SPDX-License-Identifier: Apache-2.0
+
+module Dash0
+  module OpenTelemetry
+    # Orchestrates startup: gating (disable switch, mandatory collector URL,
+    # double-instrumentation guard), SDK configuration, and instrumentation
+    # install.
+    #
+    # The Ruby-version stand-down lives in the requirable entry point
+    # (`lib/dash0-opentelemetry.rb`) so it can run before any modern-syntax file
+    # is required.
+    module Boot
+      COLLECTOR_BASE_URL_ENV = 'DASH0_OTEL_COLLECTOR_BASE_URL'
+      DISABLE_ENV = 'DASH0_DISABLE'
+
+      class << self
+        # Boots the distribution. Safe to call more than once; only the first call
+        # that passes the gates takes effect.
+        def run
+          return if @booted
+          return if disabled?
+
+          base_url = collector_base_url
+          return unless base_url
+
+          if already_instrumented?
+            Dash0::OpenTelemetry.log_error(
+              'The application already has OpenTelemetry loaded; standing down to avoid double instrumentation.'
+            )
+            return
+          end
+
+          @booted = true
+          configure(base_url)
+        end
+
+        # Resets the one-time boot guard. Intended for tests only.
+        def reset_for_testing!
+          @booted = false
+        end
+
+        def booted?
+          @booted == true
+        end
+
+        private
+
+        def configure(base_url)
+          SdkConfiguration.apply(base_url: base_url)
+          InstrumentationInstaller.start
+          Lifecycle.install
+          Dash0::OpenTelemetry.log_debug("Distribution initialized (collector base URL: #{base_url}).")
+        rescue StandardError, ScriptError => e
+          @booted = false
+          Dash0::OpenTelemetry.log_error(
+            "Initialization failed: #{e.message}. OpenTelemetry data will not be sent to Dash0."
+          )
+        end
+
+        def disabled?
+          return false unless Environment.opted_in?(DISABLE_ENV)
+
+          Dash0::OpenTelemetry.log_error(
+            "#{DISABLE_ENV} is set to true; the distribution is disabled. OpenTelemetry data will not be sent to Dash0."
+          )
+          true
+        end
+
+        # The mandatory collector base URL, or nil (with an explanatory log) when
+        # unset. There is no default in code - the operator supplies it.
+        def collector_base_url
+          value = ENV.fetch(COLLECTOR_BASE_URL_ENV, nil)
+          if value.nil? || value.strip.empty?
+            Dash0::OpenTelemetry.log_error(
+              "#{COLLECTOR_BASE_URL_ENV} is not set; there is nowhere to export to. " \
+              'OpenTelemetry data will not be sent to Dash0.'
+            )
+            return nil
+          end
+          value.strip
+        end
+
+        # Detects whether OpenTelemetry's SDK was already loaded by the application
+        # (e.g. the app bundles and initializes OpenTelemetry itself). Checked
+        # before we require the SDK ourselves.
+        def already_instrumented?
+          sdk_loaded?
+        end
+
+        def sdk_loaded?(loaded_features = $LOADED_FEATURES)
+          loaded_features.any? { |path| path.end_with?('lib/opentelemetry/sdk.rb') }
+        end
+      end
+    end
+  end
+end

data/lib/dash0/opentelemetry/environment.rb

@@ -0,0 +1,53 @@
+# frozen_string_literal: true
+
+# SPDX-FileCopyrightText: Copyright 2026 Dash0 Inc.
+# SPDX-License-Identifier: Apache-2.0
+
+module Dash0
+  module OpenTelemetry
+    # Helpers for reading and defaulting environment variables. The distribution
+    # is configured entirely through the environment (`DASH0_*` switches and
+    # standard `OTEL_*` variables).
+    module Environment
+      module_function
+
+      # True when the variable is set to "true" (case-insensitive, trimmed).
+      def opted_in?(name)
+        ENV.fetch(name, '').strip.casecmp('true').zero?
+      end
+
+      # True when the variable is set to "false" (case-insensitive, trimmed).
+      def opted_out?(name)
+        ENV.fetch(name, '').strip.casecmp('false').zero?
+      end
+
+      # True when the variable is set to a non-empty (trimmed) value.
+      def present?(name)
+        value = ENV.fetch(name, nil)
+        !value.nil? && !value.strip.empty?
+      end
+
+      # Sets +name+ to +value+ unless it already has a non-empty value. This lets
+      # the distribution provide defaults without ever overriding a value the
+      # application or operator set explicitly.
+      def set_default(name, value)
+        ENV[name] = value unless present?(name)
+      end
+
+      # Parses an integer environment variable, falling back to +default+ when
+      # unset or not a valid integer.
+      def integer(name, default)
+        value = ENV.fetch(name, nil)
+        return default if value.nil? || value.strip.empty?
+
+        Integer(value.strip)
+      rescue ArgumentError
+        default
+      end
+
+      def debug?
+        opted_in?('DASH0_DEBUG')
+      end
+    end
+  end
+end