Skip to content

docs(config): correct alias-pinned Lambda env-flag flip procedure (L4497)#235

Merged
cipher813 merged 1 commit into
mainfrom
docs/L4497-alias-pinned-lambda-flip-procedure
Jun 3, 2026
Merged

docs(config): correct alias-pinned Lambda env-flag flip procedure (L4497)#235
cipher813 merged 1 commit into
mainfrom
docs/L4497-alias-pinned-lambda-flip-procedure

Conversation

@cipher813
Copy link
Copy Markdown
Owner

Closes L4497 (P2, audit finding 2026-06-03) — the only non-gated remnant after this session's API-resilience sweep drained the build queue.

Problem

config.py's _flag_env_or_yaml docstring and the XSEC_DEMEAN_ALPHA_ENABLED comment said the flag flips "live via update-function-configuration, no redeploy." That's the exact trap that bit the 6/3 GATE 1 flip: alpha-engine-predictor-inference is invoked at the live alias pinned to a published version, and a published version's env is frozenupdate-function-configuration only mutates $LATEST, so it's a silent no-op on the alias.

Fix (comment-only)

Both comments now document the real procedure:
update-function-configuration ($LATEST) → publish-version → update-alias live→<N> (revert = update-alias live→<prior>), and clarify "no redeploy" = "no container rebuild," not "env change takes effect on the alias immediately." Mirrors the already-corrected OBSERVATION_REGISTRY.yaml::predictor_xsec_level_neutralization.

No behavior change. tests/test_level_neutralization.py green (6 passed); config.py syntax verified.

ROADMAP L4497 [x] write-back will follow in the session config docs PR.

🤖 Generated with Claude Code

… (L4497)

The `_flag_env_or_yaml` docstring + the XSEC_DEMEAN_ALPHA_ENABLED comment
claimed the flag flips "live via update-function-configuration, no redeploy."
That is the trap L4497 flags: `alpha-engine-predictor-inference` runs at the
`live` alias pinned to a PUBLISHED version, whose env is frozen — a bare
`update-function-configuration` only touches `$LATEST` and is a SILENT no-op
on the alias. Corrected both comments to document the real procedure
(update-function-configuration → publish-version → update-alias live→N; revert
= alias rollback) and clarified "no redeploy" = "no container rebuild," not
"env change takes effect on the alias immediately." Comment-only; mirrors the
already-corrected OBSERVATION_REGISTRY `predictor_xsec_level_neutralization`.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@cipher813 cipher813 merged commit b8390ee into main Jun 3, 2026
1 check passed
@cipher813 cipher813 deleted the docs/L4497-alias-pinned-lambda-flip-procedure branch June 3, 2026 17:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant