مستندات دارامرجع فنیاستقرار
این صفحه فقط به انگلیسی موجود است.
UAT package
Stage 32. UAT runs the production architecture on Testnet: no demo shortcuts.
Environment
| Requirement (brief §145) | UAT |
|---|---|
| 2 application instances | Two API instances per listener behind the load balancer (TRUST_PROXY_HEADERS=true only behind it), one or more workers (loops are leader-elected) |
| 2 self-hosted RPC paths | Two RPC nodes on separate hosts (STELLAR_RPC_NODES, config requires ≥ 2 in UAT) |
| Production-like PostgreSQL | PostgreSQL 17 with a synchronous replica and pgBackRest (../operations/BACKUP_RESTORE.md) |
| Production images | The release images (make images web-images), the same digests that will go to production |
| Production secret injection | Secrets from the secret store into the environment; no demo.env |
| Monitoring | deploy/observability with alert receivers configured |
| Backups | Scheduled, plus one restore drill during UAT |
| Signer abstraction | SIGNER_BACKEND=vault against a UAT Vault/OpenBao (keys with PREFIX=dara-uat-), exactly as production |
| No demo shortcuts | APP_ENV=uat, COOKIE_SECURE=true, no seed or demo commands (they refuse non-local networks) |
Acceptance tests
The Testnet end-to-end list (TESTNET.md) plus:
| Area | Test | Pass when |
|---|---|---|
| Roles | Each role logs in with TOTP and can do only its actions | Matches ../security/AUTHORITY_MATRIX.md §3 |
| Four-eyes | Self-approval of backing, supply, price move, cash, unfreeze, clawback, staff | Refused every time |
| Gate | Stop both RPC nodes; then start one | Trading pauses within a minute; resumes after the hold-down |
| Limits | Daily buy/sell and transfer limits, per-trade bounds | Refused at the limit with a clear message (fa/en) |
| Recovery | Kill the worker mid-settlement; restart | Every order settles exactly once |
| Backup | Restore drill on the UAT database | All checks pass |
| Monitoring | Each critical alert fired once (test stimulus) | Reaches the receiver |
| Customer UX | Persian RTL wallet on mobile; transfer with TOTP | Usable without guidance |
Sign-off
| Role | Name | Date | Result |
|---|---|---|---|
| Product owner | |||
| Compliance | |||
| Treasury / reserve | |||
| Security | |||
| Operations |