{
  "id": "failover_controller",
  "label": "Failover Controller Canonical",
  "phase": "phase-14",
  "category": "fleet_monitoring_mirror_failover",
  "status": "ACTIVE_DH_MIRROR",
  "purpose": "Failover Controller Canonical is the Phase 14 authority that decides whether YEFF AI v1 server continuity may move from a failed or degraded runtime path to a governed alternate path.",
  "function": "Evaluate failover eligibility with incident state, backup/restore readiness, control-plane mirror freshness, health rollup, approval boundary, target readiness and rollback plan before any promotion action is allowed.",
  "technology_requirements": [
    {
      "technology": "Failover Controller",
      "required_for": "Failover Controller Canonical is the Phase 14 authority that decides whether YEFF AI v1 server continuity may move from a failed or degraded runtime path to a governed alternate path.",
      "required_by_phase": "phase-14",
      "required_by_category": "failover_controller",
      "required_by_buckets": [
        "Prerequisites",
        "Installation",
        "Configuration",
        "Validation",
        "Observable Evidence",
        "Failure Modes & Recovery",
        "Completion & Promotion"
      ],
      "expected_version": "MISSING until Failover Controller is implemented and validated in the future Execution & Monitoring Panel",
      "validation_command": "MISSING until failover_controller can prove scope, evidence, execution state and promotion decision",
      "evidence_path": "/home/yeff/public_html/devon/canon/execution/state/dh_sources/failover_controller.json",
      "status_source": "Documentation Hub + future Execution & Monitoring Panel",
      "blocking_if_missing": true,
      "failure_impact": "If this gate fails, Devon may promote an alternate path that is not recoverable, not current, not approved or not actually connected to the affected client runtime."
    }
  ],
  "depends_on": [],
  "used_by": [],
  "overview": {
    "summary": "Failover Controller Canonical is the Phase 14 authority that decides whether YEFF AI v1 server continuity may move from a failed or degraded runtime path to a governed alternate path.",
    "function": "FUNCTION: Evaluate failover eligibility with incident state, backup/restore readiness, control-plane mirror freshness, health rollup, approval boundary, target readiness and rollback plan before any promotion action is allowed.",
    "system_position": "This category owns failover decision control. It is not standby promotion and not attack isolation. The exclusive risk here is premature continuity movement. Failover can protect availability or amplify damage if triggered from stale evidence or wrong target.",
    "failure_impact": "If this gate fails, Devon may promote an alternate path that is not recoverable, not current, not approved or not actually connected to the affected client runtime."
  },
  "failure_impact": "If this gate fails, Devon may promote an alternate path that is not recoverable, not current, not approved or not actually connected to the affected client runtime."
}