Delegation Quotas & Alerts — AU8
| Metric | Threshold | Action | Alert |
|---|---|---|---|
| delegations_per_tenant_1h | 500 | throttle new delegation grants | pager @delegation-oncall |
| delegation_failures_5m | 25 | investigate upstream scopes/JWKS | alert + ticket |
| delegated_token_duration_seconds_p99 | 900 | enforce max TTL 900s; clamp to policy | alert if >900 |
Notes:
- All metrics tagged with
tenant,environment,client_id. - Offline mode: emit to local file sink with rotation; include in offline bundle logs.