Domain Retirement Guard: Log Intent Before a Destructive Automation Operation

Описание и применение

Защита автоматического удаления DNS‑зон: проверка владения, точный список, явное одобрение и запись намерения перед удалением, чтобы избежать случайных удалений и дублирования попыток.

Задача

Automated DNS zone deletions risk removing platform‑owned zones or retrying destructive actions without operator intent, leading to missed cron jobs and duplicate queue deliveries.

Результат

The guard prevents accidental deletion of platform‑owned zones, ensures explicit operator approval, logs intent for auditability, and deduplicates retries, reducing operational incidents during migrations.

Рабочий процесс

• 1. Create a RemovalRequest with Zone, Ownership, OperationID, and Approved flag.
• 2. Guard checks that OperationID is present.
• 3. Guard normalizes the zone name and verifies it is in the exact allowlist of customer‑owned zones.
• 4. Guard verifies the Ownership matches the allowed zone’s ownership (customer‑owned).
• 5. Guard checks that the request is explicitly approved.
• 6. Guard records the intent (OperationID, Zone, Action, Ownership) in an IntentStore.
• 7. Guard calls the ZoneRemover.Remove adapter to delete the zone.
• 8. Guard marks the operation as completed to prevent duplicate execution.

Доказательства

Treat deletion as a small state machine, not as a thin wrapper around a registrar or DNS provider call.

Источник

The approval flag is deliberately redundant with the allowlist.

Источник