CI/CD recovery gate

Block deploys when recovery readiness is below your floor.

Before shipping to production, call the recovery gate API for each critical workflow. The endpoint returns HTTP 200 when recovery is verified and above your score floor, or HTTP 412 with blockers when deploy should wait.

Endpoint

curl -fsS -H "Authorization: Bearer $REVENANT_TOKEN" \
  "https://api.revenant.example/api/v1/databases/{databaseId}/recovery-gate?minScore=70"

• Requires a cloud API token or session bearer with databases:read.
• Optional minScore query param (default 70).
• 200 + { allowed: true } — pipeline may proceed.
• 412 + { allowed: false, blockers: [...] } — fail the job step.

GitHub Actions example

- name: Recovery gate
  run: |
    curl -fsS -H "Authorization: Bearer ${{ secrets.REVENANT_TOKEN }}" \
      "https://api…/api/v1/databases/${{ vars.REVENANT_DATABASE_ID }}/recovery-gate?minScore=75"