| # CRA Docker Production Validation Report |
|
|
| This report documents the verification and deployment sanity check of the Contract Risk Analyzer (CRA) Docker container stack. |
|
|
| --- |
|
|
| ## 1. Stack Status Summary |
| * **Deployment Status**: `🟢 ACTIVE & HEALTHY` |
| * **Host Ports Bound**: |
| * `8080` (HTTP redirects to HTTPS) |
| * `8443` (HTTPS secure ingress) |
| * `8000` (LightML translator service) |
| * **Active Services**: |
| * `cra-nginx-1`: Ingress routing & SSL termination |
| * `cra-app-1`: Main Flask/Gunicorn worker (Healthy) |
| * `cra-redis-1`: Key-value cache for rate-limiting |
| * `cra-lightml-translator-1`: Offline neural machine translation service |
|
|
| --- |
|
|
| ## 2. Container Configuration and Health Status |
|
|
| ```bash |
| $ docker compose ps |
| NAME IMAGE COMMAND SERVICE CREATED STATUS PORTS |
| cra-app-1 cra-app "gunicorn -w 1 --thr…" app 37 seconds ago Up 36 seconds (healthy) 5000/tcp |
| cra-lightml-translator-1 cra-lightml-translator "uvicorn app.main:ap…" lightml-translator 38 seconds ago Up 37 seconds 0.0.0.0:8000->8000/tcp, [::]:8000->8000/tcp |
| cra-nginx-1 nginx:alpine "/docker-entrypoint.…" nginx 6 seconds ago Up 4 seconds 0.0.0.0:8080->80/tcp, 0.0.0.0:8443->443/tcp |
| cra-redis-1 redis:7-alpine "docker-entrypoint.s…" redis 38 seconds ago Up 37 seconds 6379/tcp |
| ``` |
|
|
| --- |
|
|
| ## 3. Endpoint Availability & Logs |
|
|
| ### Health Check Output (via HTTPS Proxy) |
| `$ curl -k -f https://127.0.0.1:8443/health` |
| ```json |
| { |
| "checks": { |
| "database": "ready", |
| "datasets": "ready", |
| "model_cache": { |
| "distilbert": "available", |
| "qwen3": "missing" |
| } |
| }, |
| "encryption": { |
| "enabled": false |
| }, |
| "layer1": "ready", |
| "layer2_distilbert": true, |
| "layer3_scorer": "ready", |
| "layer4_qwen": false, |
| "retention_days": 30, |
| "status": "healthy", |
| "sydeco_mlp": true |
| } |
| ``` |
|
|
| --- |
|
|
| ## 4. Operational Assertions |
| * **Networking Verification**: Nginx successfully routes traffic via reverse proxy to the Flask backend Gunicorn worker process on port 5000. |
| * **Storage & Persistence**: Database files under `ldv-backend/data/` remain persistent across stack restarts. |
| * **Restart Behavior**: All containers are configured with `restart: unless-stopped` to ensure automatic self-recovery. |
|
|
