kubernetes resource coherence audit derived

{
  "input": {
    "body": {
      "manifests": "apiVersion: apps/v1\nkind: Deployment\nmetadata:\n  name: web\n  labels:\n    app: web\nspec:\n  replicas: 3\n  selector:\n    matchLabels:\n      app: web\n  template:\n    metadata:\n      labels:\n        app: web\n    spec:\n      containers:\n        - name: web\n          image: ghcr.io/example/web:latest\n          ports:\n            - containerPort: 8080\n          resources:\n            requests:\n              cpu: 500m\n              memory: 256M\n            limits:\n              cpu: 200m\n              memory: 512Mi\n          env:\n            - name: DATABASE_PASSWORD\n              value: hunter2\n            - name: FEATURE_FLAG\n              value: no\n",
      "namespace_quota": {
        "cpu": "1",
        "pods": 10,
        "memory": "1Gi"
      }
    },
    "type": "http",
    "method": "POST",
    "bodyType": "json"
  },
  "output": {
    "type": "json",
    "example": {
      "limits": {
        "maxFindings": 500,
        "maxDocuments": 100,
        "maxYamlBytes": 262144,
        "maxDockerfileBytes": 131072
      },
      "passed": false,
      "coherent": false,
      "complete": true,
      "findings": [
        {
          "code": "SCALAR_IS_A_YAML_BOOLEAN",
          "line": 33,
          "detail": "manifests: \"no\" is an unquoted YAML 1.1 boolean and reads as false, not as the text no. Quoting it keeps it a string.",
          "location": "spec.template.spec.containers[0].env[1].value"
        },
        {
          "code": "REQUEST_EXCEEDS_LIMIT",
          "detail": "Deployment web container web requests 500m of cpu and limits it to 200m. A request above its limit is invalid and the pod will not schedule.",
          "location": "Deployment web container web"
        },
        {
          "code": "DECIMAL_MEMORY_SUFFIX",
          "detail": "Deployment web container web declares requests.memory as 256M, a decimal SI suffix. Mi is the binary one, and the two differ by up to five percent per order of magnitude.",
          "location": "Deployment web container web"
        }
      ],
      "workloads": [
        {
          "kind": "Deployment",
          "name": "web",
          "replicas": 3,
          "cpu_request_milli": 500,
          "memory_request_bytes": 256000000
        }
      ],
      "request_id": "example-request",
      "service_id": "kubernetes_resource_coherence_audit",
      "assumptions": [
        "Quantities are parsed exactly, with the suffix rules as Kubernetes defines them: m is milli, M is a million and Mi is 2^20. A decimal suffix on a memory value is reported because it is almost always a...",
        "A request above its own limit is reported because the API server accepts each field on its own and rejects the pair, so a schema check passes and the pod never schedules.",
        "Totals multiply each pod by its declared replica count, and a workload with no replicas field counts as one. Autoscaling is not modelled."
      ],
      "limitations": [
        "Arithmetic over the documents supplied. Actual node capacity, limit ranges, overcommit and autoscaling behaviour are outside this.",
        "coherent is true only when every quantity parsed, no pair contradicted itself, and every comparison the caller asked for was performed."
      ],
      "observed_at": "2026-10-02T00:00:00.000Z",
      "not_examined": [],
      "finding_count": 4,
      "total_replicas": 3,
      "workload_count": 1,
      "service_version": "1.0.0",
      "findings_by_code": {
        "QUOTA_EXCEEDED": 1,
        "DECIMAL_MEMORY_SUFFIX": 1,
        "REQUEST_EXCEEDS_LIMIT": 1,
        "SCALAR_IS_A_YAML_BOOLEAN": 1
      },
      "total_cpu_request_milli": 1500,
      "total_memory_request_bytes": 768000000
    }
  }
}