{"schemaVersion":"corex.performance-evidence.v1","capability":"PERFORMANCE_AND_SCALE_EVIDENCE","state":"ARCHITECTURE_READY_BENCHMARK_RAIL_ACTIVE","currentRuntime":{"provider":"VERCEL","nodeVersion":"v22.23.2","architecture":"x64","deploymentEnvironment":"production","gitCommitSha":"5ce003d3ea79320efdb744ada951451b3bf5d2ba"},"evidencePolicy":{"levels":["ARCHITECTURE_READY","MEASURED","REPRODUCED","CERTIFIED_BENCHMARK"],"scaleProjectionsAreClaims":false,"modeledScaleClass":"MODELED_NOT_MEASURED","publishExactThroughputOnlyWhenApproved":true,"synchronousAndAsynchronousThroughputSeparated":true,"providerCeilingsSeparatedFromCorexSoftwareCapacity":true},"scalability":{"schemaVersion":"corex.scalability-capabilities.v1","state":"ACTIVE","counts":{"ACTIVE_FUNCTIONAL":8,"ACTIVE_OPTIMIZED":6,"ADAPTER_READY_PROVIDER_NOT_BOUND":1,"LATENT_NOT_ACTIVATED":2,"EVIDENCE_PENDING":1},"principles":{"providerSubscriptionIsArchitectureCeiling":false,"canonicalWriteAuthoritySeparatedFromReadScale":true,"modeledScaleIsMeasuredClaim":false,"performanceClaimsRemainWorkloadSpecific":true},"capabilities":[{"id":"fluid-horizontal-runtime","title":"Elastic runtime concurrency and scale-out","state":"ACTIVE_FUNCTIONAL","layer":"RUNTIME","valueProposition":"Uses warm in-function concurrency first and allows provider-managed horizontal scale without changing CoreX authority or tenant semantics.","evidence":["vercel.json#fluid=true","src/core/adaptiveCapacity.ts"],"currentUse":"Production runtime elasticity.","optimizationPath":"Increase provider compute class only after measured CPU/memory pressure remains binding.","publicSafe":true},{"id":"bounded-postgresql-pooling","title":"Bounded PostgreSQL connection pooling","state":"ACTIVE_OPTIMIZED","layer":"PERSISTENCE","valueProposition":"Prevents application-instance growth from multiplying database connections without control.","evidence":["src/core/prisma.ts","src/core/adaptiveCapacity.ts"],"currentUse":"All Prisma/PostgreSQL access.","optimizationPath":"Tune pool/database compute/IOPS together from measured pool pressure.","publicSafe":true},{"id":"leased-horizontal-event-workers","title":"Leased horizontally scalable delivery workers","state":"ACTIVE_OPTIMIZED","layer":"QUEUE","valueProposition":"PROCESSING leases allow multiple workers to drain durable delivery backlogs without concurrent duplicate selection.","evidence":["src/core/eventDelivery.ts","scripts/benchmark-corex-queue-pressure.mjs"],"currentUse":"Durable event delivery, retry and replay with automatic bounded scheduled backlog draining.","optimizationPath":"Increase workers only when queue depth/age is binding.","publicSafe":true},{"id":"scheduled-event-backlog-drain","title":"Automatic bounded event backlog draining","state":"ACTIVE_OPTIMIZED","layer":"QUEUE","valueProposition":"A portable scheduled reconciler drains multiple leased delivery batches per invocation, exits quickly when idle, and allows overlapping schedulers without duplicate ownership.","evidence":["src/routes/eventDeliveryReconciliation.ts","src/core/scheduledJobs.ts","vercel.json"],"currentUse":"Production scheduler binding at one-minute cadence with bounded batch/time policy.","optimizationPath":"Tune batch count/time budget from observed queue depth and provider limits rather than keeping always-on workers.","publicSafe":true},{"id":"dead-letter-replay","title":"Dead-letter and replay recovery","state":"ACTIVE_FUNCTIONAL","layer":"QUEUE","valueProposition":"Absorbs downstream outages without forcing synchronous request paths to fail permanently.","evidence":["src/core/eventDelivery.ts","src/routes/eventDelivery.ts"],"currentUse":"Durable integration delivery recovery.","publicSafe":true},{"id":"credential-derived-projections","title":"Canonical credential plus derived projections","state":"ACTIVE_FUNCTIONAL","layer":"READ_PATH","valueProposition":"Separates canonical authority from document/card/W3C/proof representations so read/verification surfaces can scale independently.","evidence":["src/core/credentialProjectionRegistry.ts","src/core/credentialProjection.ts"],"currentUse":"Credential documents, cards, VC and independent-proof representations.","optimizationPath":"Introduce dedicated read replicas/materialized projections only when verification traffic becomes persistence-bound.","publicSafe":true},{"id":"hot-proof-verification-cache","title":"Hot cryptographic proof verification cache","state":"ACTIVE_OPTIMIZED","layer":"CRYPTO","valueProposition":"Reuses verification results for immutable credential payload/proof pairs inside warm instances while always re-reading live lifecycle state.","evidence":["src/core/credentialProofCache.ts","src/core/credentialLifecycle.ts"],"currentUse":"Repeated verification of hot credentials.","optimizationPath":"Keep lifecycle uncached; use distributed/materialized read projection only after measured demand.","publicSafe":true},{"id":"single-read-certificate-projection","title":"Single-read certificate projection","state":"ACTIVE_OPTIMIZED","layer":"READ_PATH","valueProposition":"Avoids a duplicate credential database lookup when rendering human-readable certificate/QR projections.","evidence":["src/core/credentialProjection.ts","src/core/credentialLifecycle.ts"],"currentUse":"Certificate and QR projection paths.","publicSafe":true},{"id":"public-verification-rate-limit-provider-boundary","title":"Public verification rate-limit provider boundary","state":"ADAPTER_READY_PROVIDER_NOT_BOUND","layer":"READ_PATH","valueProposition":"Preserves a low-latency local guard today while allowing a future distributed limiter to provide globally consistent abuse control across autoscaled instances.","evidence":["src/core/publicVerificationGuard.ts"],"currentUse":"Local per-instance verification abuse guard with distributed-provider adapter contract.","optimizationPath":"Bind a distributed edge/Redis/WAF-backed provider when traffic or abuse patterns justify global coordination.","publicSafe":true},{"id":"workload-identity-portability","title":"Keyless workload identity portability","state":"ACTIVE_FUNCTIONAL","layer":"IDENTITY","valueProposition":"Supports Vercel OIDC plus generic/AWS/Azure/GCP/Kubernetes/GitHub workload identity without making secrets or one runtime provider architectural dependencies.","evidence":["src/core/workloadIdentity.ts","scripts/verify-runtime-portability.mjs"],"currentUse":"Service-to-service and signer transport composition.","publicSafe":true},{"id":"oci-portability","title":"OCI/container runtime portability","state":"ACTIVE_FUNCTIONAL","layer":"PORTABILITY","valueProposition":"Node 22 standard entrypoint allows CoreX to move from serverless to containers/Kubernetes/private cloud when workload economics or sovereignty require it.","evidence":["Dockerfile","scripts/verify-oci-portability.mjs"],"currentUse":"Portability and future dedicated-node deployment.","publicSafe":true},{"id":"signer-abstraction","title":"Independent signer capacity boundary","state":"ACTIVE_FUNCTIONAL","layer":"CRYPTO","valueProposition":"Separates CoreX software throughput from KMS/provider signer quotas so signing capacity can scale independently.","evidence":["src/core/productionSigner.ts","src/core/awsKmsCredentialSigner.ts"],"currentUse":"Production credential signing.","optimizationPath":"Benchmark local and KMS signing separately; increase signer quota only when it becomes binding.","publicSafe":true},{"id":"integrity-anchor-abstraction","title":"Asynchronous integrity-anchor provider boundary","state":"ACTIVE_FUNCTIONAL","layer":"INTEGRATION","valueProposition":"Keeps ledger/transparency confirmation outside the CoreX synchronous authority path where policy allows.","evidence":["src/core/integrityAnchor.ts","src/core/ledgerAnchor.ts"],"currentUse":"Independent integrity evidence.","optimizationPath":"Trust Epoch batching is active when the checkpoint provider is bound; tune epoch size/age from measured anchor cost and confirmation throughput.","publicSafe":true},{"id":"usage-and-quota-observation","title":"Usage metering and entitlement quota primitives","state":"ACTIVE_FUNCTIONAL","layer":"EVIDENCE","valueProposition":"Provides idempotent tenant/workspace usage observations and quota enforcement foundations for commercial control and capacity economics.","evidence":["src/core/usageMetering.ts","src/core/quotaEnforcement.ts"],"currentUse":"Commercial metrics and entitlement/quota control.","publicSafe":true},{"id":"distributed-verification-read-plane","title":"Distributed read/verification plane","state":"LATENT_NOT_ACTIVATED","layer":"READ_PATH","valueProposition":"The projection architecture can support read replicas, regional verification nodes and safe projection caches without moving canonical write authority.","evidence":["src/core/credentialProjectionRegistry.ts","docs/performance/COREX_ADAPTIVE_CAPACITY_AUTOSCALE_BASELINE_2026-09-23.md"],"currentUse":"Architecture-ready; dedicated replica topology not currently bound.","optimizationPath":"Activate only after read traffic is measured as persistence-bound.","publicSafe":true},{"id":"multi-core-crypto-workers","title":"Multi-core cryptographic worker execution","state":"LATENT_NOT_ACTIVATED","layer":"CRYPTO","valueProposition":"CPU-bound hashing/sign/verify workloads can use dedicated worker processes/threads on multi-vCPU nodes or container clusters.","evidence":["scripts/benchmark-corex-primitive-scale.mjs"],"currentUse":"Benchmark-only multi-process evidence.","optimizationPath":"Activate on dedicated multi-vCPU/container runtime if CPU-bound cryptographic work becomes material.","publicSafe":true},{"id":"batch-merkle-anchor","title":"Batch/Merkle Trust Epoch anchoring","state":"ACTIVE_OPTIMIZED","layer":"INTEGRATION","valueProposition":"Amortizes external integrity checkpoints across many historical-integrity records while preserving per-record Merkle inclusion proofs.","evidence":["src/core/trustEpoch.ts","src/core/trustEpochReconciliation.ts","src/core/polygonPosTrustEpochCheckpoint.ts"],"currentUse":"Trust Epoch sealing and external checkpoint reconciliation through COREX_POLYGON_POS_TRUST_EPOCH_V1 on polygon-pos.","optimizationPath":"Tune minimum leaves, maximum leaves and maximum age from measured anchor cost, latency and provider rate limits.","publicSafe":true},{"id":"independent-multihost-certification","title":"Independent multi-host distributed certification","state":"EVIDENCE_PENDING","layer":"EVIDENCE","valueProposition":"Separates shared-host composition tests from true cross-node scale-efficiency claims.","evidence":["docs/performance/COREX_AUTOMATED_CAPACITY_TRANCHE_BASELINE_2026-09-23.md"],"currentUse":"Current 1/2/4/8 logical runtime scale tests share one benchmark host.","optimizationPath":"Run on independent hosts/provider-grade distributed infrastructure when a public distributed throughput claim is required.","publicSafe":true}]},"historicalClaim":{"claim":"60,000-5,000,000 transactions/credentials per second","state":"HISTORICAL_REVALIDATION","currentPublicApproval":false,"rule":"Do not publish as a current production throughput claim until workload-specific evidence is reproduced and approved."},"workloads":[{"id":"corex.primitive.canonical-hash","name":"Canonical credential hashing","lane":"CRYPTO_PRIMITIVE","state":"ACTIVE","sideEffects":"NONE"},{"id":"corex.primitive.ed25519-sign","name":"Ed25519 credential signing","lane":"CRYPTO_PRIMITIVE","state":"ACTIVE","sideEffects":"NONE"},{"id":"corex.primitive.ed25519-verify","name":"Ed25519 credential verification","lane":"CRYPTO_PRIMITIVE","state":"ACTIVE","sideEffects":"NONE"},{"id":"corex.durable.credential-issuance","name":"Durable credential issuance","lane":"DURABLE_TRUST","state":"ACTIVE_BENCHMARK_NAMESPACE_ONLY","sideEffects":"EPHEMERAL_POSTGRES"},{"id":"corex.durable.public-verification","name":"Persisted credential verification","lane":"DURABLE_TRUST","state":"ACTIVE_BENCHMARK_NAMESPACE_ONLY","sideEffects":"READ_ONLY_AFTER_SYNTHETIC_ISSUANCE"},{"id":"corex.runtime.http-read","name":"CoreX HTTP read path","lane":"RUNTIME","state":"ACTIVE","sideEffects":"GET_ONLY"},{"id":"corex.distributed.scale-out","name":"Distributed horizontal scale","lane":"DISTRIBUTED","state":"DEFINED_REQUIRES_CONTROLLED_MULTI_NODE_RUN","sideEffects":"CONTROLLED_BENCHMARK_ENVIRONMENT"},{"id":"corex.external.kms-sign","name":"External KMS signing","lane":"EXTERNAL_PROVIDER","state":"DEFINED_PROVIDER_BOUND","sideEffects":"EXTERNAL_PROVIDER_CALLS"},{"id":"corex.external.integrity-anchor","name":"External integrity anchoring","lane":"EXTERNAL_PROVIDER","state":"DEFINED_ASYNC_PROVIDER_BOUND","sideEffects":"TESTNET_OR_CONTROLLED_PROVIDER_ONLY"}],"publishedResults":[],"disclosure":"PUBLIC_SAFE_PERFORMANCE_GOVERNANCE_NO_SECRETS_NO_PROVIDER_CREDENTIALS","adaptiveCapacity":{"schemaVersion":"corex.adaptive-capacity.v1","capability":"ADAPTIVE_CAPACITY_AND_AUTOSCALE","state":"ACTIVE","architecture":"PROVIDER_NEUTRAL_HORIZONTAL_SCALE","runtime":{"provider":"VERCEL","autoscalingMode":"PROVIDER_MANAGED_FLUID","fluidComputeSourceConfig":"ENABLED_BY_VERCEL_JSON","strategy":"USE_EXISTING_CONCURRENCY_BEFORE_NEW_INSTANCES_THEN_SCALE_OUT","purchaseAutomation":false},"database":{"engine":"POSTGRESQL","poolPolicy":{"max":10,"min":0,"idleTimeoutMillis":10000,"connectionTimeoutMillis":5000,"maxUses":7500,"allowExitOnIdle":true},"scalingRule":"KEEP_PER_INSTANCE_POOL_BOUNDED_AND_SCALE_DATABASE_CAPACITY_SEPARATELY_FROM_APPLICATION_NODES"},"refinementLoop":["OBSERVE","CLASSIFY_BINDING_CONSTRAINT","ALLOW_RUNTIME_AUTOSCALE","ADJUST_BOUNDED_WORKER_OR_POOL_POLICY_WHEN_EVIDENCED","INCREASE_PROVIDER_CAPACITY_ONLY_WHEN_BINDING","REMEASURE","FREEZE_NEW_EVIDENCE"],"scalableDimensions":["application_instances","in_function_concurrency","cpu_and_memory","database_compute_iops_connections","worker_concurrency","queue_partitions","network_bandwidth","signer_capacity","read_projection_capacity","regional_distribution"],"safety":{"noAutomaticSpend":true,"noTenantAuthorityChanges":true,"noSecurityBypass":true,"noProductionSyntheticWrites":true,"providerQuotaNotArchitectureCeiling":true,"modeledCapacityNotMeasuredClaim":true},"thresholds":{"highCpu":0.75,"highMemory":0.8,"highDbPool":0.8,"highSigner":0.8,"highNetwork":0.8,"maxErrorRate":0.01,"maxRateLimitRate":0.005,"queueDepthHigh":500,"queueAgeHighSeconds":60,"lowUtilization":0.2},"disclosure":"PUBLIC_SAFE_CAPACITY_POLICY_NO_SECRETS_NO_PROVIDER_CREDENTIALS"}}