PRODUCTION SRE NODE: ACCRA-CLUSTER-01
UTC --:--:-- 99.98% SLA
Quickstart & Personas Architecture & Stack REST API Reference (v1) Mobile Companion & Emulator Two-Way Handover Protocol Governance & SLA Frequently Asked Questions
SRE COMPREHENSIVE ARCHITECTURE • MULTI-TENANT OPERATIONS

Engineered for zero broken handovers. Documented for everyone.

Authoritative platform reference for Site Reliability Engineers, technical leads, and evaluators. Explore technical architecture, operational personas, interactive REST APIs, and mobile companion setup.

139 Tests

655 Assertions Passing

< 42ms

Telemetry Response Target

99.98%

Guaranteed SLA Uptime

100%

Immutable Audit Custody

CHAPTER 01 • ACCESS GOVERNANCE

Pre-Seeded Operational Test Personas

L5 Principal Lead admin@your-org.com

John Okyere

Cloud Infrastructure & Principal SRE

Full administrative command, checklists definition, forensic audit log inspection, and system settings.

Super Administrator Role: admin
L3 Shift Lead lead@your-org.com

Abena Owusu

Shift Supervisor & Incident Commander

Task delegation, activity creation, incident flagging, and two-way shift handover sign-offs.

Shift Lead Role: lead
L1 Support Operator agent@your-org.com

Kofi Asante

Operations Engineer (NOC)

Executes daily recurrence checks, provides resolution remarks, and participates in shift channels.

Support Engineer Role: engineer
CHAPTER 02 • TECHNICAL SPECIFICATION

SRE COMPREHENSIVE ARCHITECTURE

Modular Monolith + Multi-Tenant
Framework

Laravel 11 LTS

Strict types, PSR-12, Form Requests

Real-Time

Livewire 3 Real-Time Reactive Engine

Zero JS build overhead, reactive polling

Database

MySQL 8.0+ InnoDB

Foreign keys, compound tenant indexes

Testing

Pest 3 Test Suite

173 Feature & isolation tests (825 assertions)

Two Unified Applications, One Operational Core

Web Mission Control • Mobile Pocket Operations
APP 01 • WEB COCKPIT Laravel 11/12 + Livewire 3

Opsora SRE Web & Platform Control Plane

Desktop operations hub featuring multi-tenant SaaS governance, 24/7 daily shift checklists, war rooms, standalone status dashboard (/health), automated email digests, and SIEM immutable audit logs.

Stack: PHP 8.2+, Blade, Tailwind php artisan serve
APP 02 • MOBILE COMPANION Flutter 3.24+ • Dart 3.5+

Opsora SRE Mobile Companion App

Pocket operations client for on-call SREs with hardware-backed KeyStore encryption, multi-tenant workspace switcher (X-Workspace-Id), two-way handover sign-offs, offline caching, and 3-second live telemetry HUD.

Targets: Android, iOS, Windows flutter run -d windows
Automated Verification Commands

Run tests and trigger automated SRE compliance reports directly from the CLI:

php artisan test php artisan reports:send-automated
CHAPTER 03 • REST API SPECIFICATION OpenAPI 3.0 Compatible

Opsora Developer REST API Reference

Base URL: https://opsora-sre.onrender.com/api/v1
POST /api/v1/auth/login
Public • Authenticates operator and issues Sanctum token
Request Body (JSON)
{
  "email": "operator@your-org.com",
  "password": "your-secure-password",
  "device_name": "Mobile SRE Terminal"
}
Response (200 OK)
{
  "token": "1|qP9xLz...sanctum_token...",
  "user": {
    "id": 1,
    "name": "John Okyere",
    "role": "admin"
  }
}
GET /api/v1/workspaces
Requires Bearer Token • Lists accessible workspaces & roles
Response (200 OK)
{
  "data": [
    {
      "id": 1,
      "uuid": "8f2b1c4e-5a6b-4c3d-9e8f-1a2b3c4d5e6f",
      "name": "Primary SRE Operations",
      "slug": "primary-sre",
      "role": "admin",
      "is_personal": false,
      "organization": {
        "name": "Opsora SRE",
        "company_code": "OPS-DEFAULT"
      }
    }
  ]
}
POST /api/v1/workspaces/join
Requires Bearer Token • Fast Onboarding via Company Code
Request Body (JSON)
{
  "company_code": "OPS-STARK9"
}
Response (200 OK)
{
  "message": "Joined Stark Cloud Operations successfully.",
  "workspace": {
    "id": 4,
    "name": "Stark Primary Ops"
  }
}
GET /api/v1/activities
Header: X-Workspace-Id: 1 • Tenant-scoped operational feed
Response (200 OK)
{
  "data": [
    {
      "id": 14,
      "title": "USSD Gateway Latency Probe",
      "recurrence": "daily",
      "priority": "critical",
      "status": "pending",
      "assigned_to": "Kofi Asante"
    }
  ]
}
POST /api/v1/handovers
Shift custody sign-off • Triggers notification & forensic seal
Request Body (JSON)
{
  "shift_date": "2026-09-18",
  "shift_type": "evening",
  "summary": "Core database replication lag verified normal. Gateway queues green.",
  "open_issues": "None. Standby engineer notified."
}
Response (201 Created)
{
  "status": "success",
  "message": "Shift handover briefing recorded. Awaiting oncoming lead signature.",
  "handover_id": 92
}
GET /api/health
Public Probe • JSON performance & DB connectivity telemetry
Response (200 OK)
{
  "status": "ok",
  "database": "connected",
  "database_latency_ms": 1.2,
  "telemetry_stream": "nominal",
  "uptime": "99.98%"
}
CHAPTER 04 • CLIENT RUNTIME

Mobile Companion & Local Emulator Setup Guide

Flutter 3.24+ • Dart 3.5+
Target 1: Windows Desktop

Native PC Desktop Execution

Fastest local testing without an emulator. Launches directly in Windows.

cd npontu_sre_mobile
flutter run -d windows
Target 2: Android Emulator (10.0.2.2)

Pixel 8 / API 34 Virtual Device

Uses 10.0.2.2:8000 to reach host PC backend from Android sandbox.

emulator -avd Pixel_8_API_34
flutter run -d emulator-5554
Target 3: Verification Suite

Automated Quality Gate

Executes 25 mobile tests covering models, offline sync, and widgets.

flutter test
flutter analyze
CHAPTER 05 • OPERATIONAL DISCIPLINE

The 4-Phase Two-Way Handover Protocol

Zero Unacknowledged Handovers
PHASE 01

Live Verification

Review active checklist status and log blocker remarks.

PHASE 02

Outgoing Sign-Off

Lead generates briefing and signs off with cryptographic timestamp.

PHASE 03

Incoming Sign-On

Oncoming lead accepts operational custody and acknowledges open tickets.

PHASE 04

Forensic Seal

Immutable SIEM audit log seal generated. Dispatches @Mention Email Receipts.

CHAPTER 06 • COMPLIANCE & SLA

Governance, SLA & Automated Reports

99.98% SLA Guaranteed

Security & SIEM Audit Standard

Every state mutation produces an immutable audit record containing actor snapshots, IP address, before/after JSON diffs, and timestamp.

Inactivity Guard: Sessions automatically terminate after 120 minutes of inactivity to prevent cockpit terminal exposure.

Automated Scheduled Reporting

Daily EOD summaries (23:59 UTC), weekly digests, and monthly executive compliance reports are scheduled automatically via Laravel console crons.

CLI Trigger: php artisan reports:send-automated

KNOWLEDGE BASE

Frequently Asked Questions

Authoritative answers on custody transfers, session timeouts, and audit immutability.

The handover is a 2-state operational contract: (1) Outgoing Sign-Off timestamps outgoing lead custody and sets status to awaiting incoming review. (2) Incoming Sign-On requires oncoming lead verification remarks before shifting operational custody and creating an immutable SIEM audit log.
To protect unattended terminals, sessions expire after 120 minutes of inactivity. Livewire intercepts the expired token and smoothly routes to /login?expired=1 with security notifications.
No. The audit_logs table is architecturally append-only. Database permissions restrict application users to INSERT and SELECT only.
Automated reports are powered by php artisan reports:send-automated scheduled in routes/console.php for Daily (23:59 UTC), Weekly (Sundays), and Monthly (28th).