Status. Proposed design only. Nothing in this vault is GGA client approval. The GGA client documents are supplied drafts: see GGA-Source-Digest. No application, service or test has been executed; every scenario is Not executed. Delivery fees and dates are open.

T38 · Environment separation and safe failure visibility

Field	Value
Status	Not executed
Type	Balanced software
Layer / kind	Configuration · API · operations
Priority	P0
Gates	A09, A10
Build step	01 (GGA order; the 1.3 step is history)
Decisions	Q09

Disposition under GGA

Field	Value
Disposition	Retained
GGA basis	Blueprint pp. 11, 17 (GGA-Requirement-Register)
Replaced or carried by	GS30-staged
Still open	GL07-staged
What changes	Separate development, staging and production with secret management.

The 1.3 text below is kept verbatim as history. Where the disposition is Reframed, Superseded or Parked it is not the GGA oracle; use the replacing scenario. A Parked scenario has no GGA feedback and stays a Proposed carry-forward. The status stays Not executed. Register: Scenario-Dispositions.

Given

Separate stage/prod credentials and data stores are planned; synthetic fixtures contain canaries.

When

Inspect deployment configuration without printing secrets; provoke validation errors, worker failures, unsafe text and request-rate bursts.

Then / oracle

Staging cannot write production or send to real members. Logs/errors contain no private bodies, credentials or raw tokens. Limits are measured against agreed policy; authorised support gets safe incident and failed-job evidence.

Evidence required

Environment-access matrix; secret/body scan; error/rate-limit tests; runbook ownership.

Decision dependency (verbatim)

Q09: hosting region, data/processor approval, retention, incident owner and test rate budgets.

Source: TDD rev 1.3 (PDF); machine-readable in 10-Sources/tdd-bundle/. Back to Scenario-Index · Traceability-Matrix · integration dependencies in Dependency-and-Regression-Table.