Skip to main content

The worker catalog

This is the complete list of configurable background workers a cell can run, grouped by the service that owns them. There are 302 worker declarations across nine services (a handful of names, the metering flushers, the metrics publisher, the lifecycle listener, the crypto poller, recur in most services; those are factored out into the fleet-common workers table and are not repeated per service below).

Every worker is configured under orchestrator.services.<service>.workers.<name> in the service configuration. The Worker column is the literal config key an operator sets enabled and interval_sec on. The Capability column is the governed capability the worker serves. Enabled by default and Interval are the shipped values; a bold No marks a worker that ships off and must be turned on deliberately (see Declared-but-inert and off-by-default workers).

Names

Worker keys and capability ids are the exact configuration identifiers, shown verbatim so this page is usable as an operator reference. Descriptions use public product names throughout; a few keys retain engineering vocabulary ("substrate" is retained in code by standard, surfaced to customers as Alignment).

System​

The platform's spine: fabric membership and liveness, replication engine and topology, licensing, governance (Alignment) enforcement, session lifecycle, and Fleet Releases roll-out control.

Every cell in this service also runs the fleet-common workers. Listed below: 56 service-specific workers.

WorkerCapabilityEnabled by defaultIntervalWhat it does
substrate_cancer_scancore.governanceYes15mAlignment (substrate) scan for runaway coupling growth ('cancer').
substrate_coupling_driftcore.governanceYes30mAlignment scan for coupling drift between components.
automation_agent_dispatchagents.workflow_dispatchYes5sDispatches Automations-driven agent workflows.
agent_trigger_tickagents.triggerYes30sFires Orchestration agent triggers.
audit_retentiondata.soft_deleteYes6hPurges soft-deleted directory rows past retention (the soft-delete purge worker).
entity_retentiondata.soft_deleteYes6hPurges soft-deleted entities past retention.
archive_retentiondata.soft_deleteYes6hSweeps archived workspaces past retention.
license_status_sweepcore.licenseYes60mSweeps license status.
peer_bundle_forwardobservability.meteringYes5mForwards metering bundles to peers.
cap_counter_rehydrationobservability.meteringYes15mRehydrates capability counters from the durable store.
metering_retentionobservability.meteringYes60mEnforces metering retention.
node_log_retentionobservability.retentionYes6hEnforces node-log retention.
cohort_move_workercore.migrationYes30sMoves cells between named cohorts.
crypto_audit_witnessaudit.tamper_evidentYes60mWitnesses the crypto audit chain.
audit_chain_attestationaudit.tamper_evidentYes60mAttests the audit chain.
audit_chain_attestation_selfcheckaudit.tamper_evidentYes2hSelf-checks audit-chain attestation.
crypto_audit_witness_selfcheckaudit.tamper_evidentYes2hSelf-checks the crypto-audit witness.
setup_runnercore.setupYescontinuousLong-running first-boot setup driver (runs to completion, not periodic).
fabric_metrics_publishermetrics.federationYes15sPublishes fabric-level metrics.
replication_metrics_publishermetrics.federationYes15sPublishes replication metrics.
cell_heartbeatcore.fabricYescontinuousLong-running cell heartbeat to the fabric.
service_group_reconcilereplication.service_groupYes10sReconciles service-group membership continuously.
membership_reconcilereplication.service_groupYes30sReconciles cell membership continuously.
cell_livenesscore.fabricYescontinuousLong-running cell-liveness tracker.
decommission_listenercore.lifecycleYescontinuousListens for and drives cell decommission.
crypto_rotationsecurity.crypto_rotationYes24hDaily crypto rotation driver.
kek_forward_secret_ratchetsecurity.crypto_rotationNo90dForward-secret KEK ratchet. Off by default (90-day cadence when enabled).
substrate_mission_expirycore.governanceYes60sExpires Alignment mission grants.
substrate_backfillcore.governanceYes60mBackfills Alignment (substrate) records.
node_mind_consolidationcore.fabricYes5mConsolidates the node-level fabric view ('node mind').
gateway_health_probecore.fabricYes15sProbes gateway health.
capacity_reconcilecore.fabricYes60sReconciles fabric capacity accounting.
license_db_watchercore.licenseYes30sWatches the license database for changes.
license_file_watchercore.licenseYes30sWatches the license file for changes.
link_quality_recordercore.fabricYes30sRecords inter-cell link quality (Radio).
gateway_synccore.fabricYes60sSyncs gateway configuration.
session_revocationscore.session_revocationNocontinuousSession-revocation producer. Off by default (event-driven revocation path).
session_revocation_consumercore.session_revocationNocontinuousSession-revocation consumer. Off by default.
session_cleanupcore.session_revocationYes5mCleans up expired sessions (the enabled session-hygiene worker).
endpoint_reapercore.fabricYes60sReaps stale service endpoints.
lease_sweepercore.fabricYes30sSweeps expired fabric leases.
volume_healthcore.fabricYes60sChecks volume health.
replication_enginereplication.engineYes2sThe replication engine tick.
replication_topologyreplication.engineYes60sMaintains replication topology.
replication_healthreplication.healthYes30sChecks replication health.
anti_entropyreplication.anti_entropyYes5mSystem-store anti-entropy.
replication_repairreplication.anti_entropyYes60mRepairs replication gaps.
connection_discoverycore.fabricYes60sDiscovers peer connections.
db_size_meterobservability.meteringYes5mMeters per-database size.
fleet_rolloutobservability.fleetYes15sDrives Fleet Releases roll-out across cohorts.
fleet_driftobservability.fleetYes30sDetects fleet version/config drift.
fleet_eligibilityobservability.fleetYes60sMaintains the fleet roll-out eligibility cache.
fleet_auto_remediationobservability.fleetYes60sAuto-remediates unhealthy fleet members.
fleet_healthobservability.fleetYes60sAggregates fleet health.
fleet_version_distributionobservability.fleetYes60sTracks fleet version distribution.
fleet_alert_evaluatorobservability.fleetYes60sEvaluates fleet alerts.

Data​

The Data Platform's background plane: lakehouse and catalog upkeep, CRDT convergence, vector/search/document maintenance, clean rooms, Automations dispatch, Knowledge promotion, and consulting workflows.

Every cell in this service also runs the fleet-common workers. Listed below: 59 service-specific workers.

WorkerCapabilityEnabled by defaultIntervalWhat it does
lakehouse_anti_entropydata.lakehouseYes5mRepairs divergence in lakehouse table state across cells.
liquid_cluster_sweepdata.lakehouseYes10mSweeps and re-clusters lakehouse tables for query locality.
stream_wal_checkpointdata.streamYes5mCheckpoints the streaming write-ahead log so it does not grow without bound.
clone_ttldata.cloneYes60sExpires clones created with a TTL so the clone estate does not grow without bound.
crdt_anti_entropyreplication.anti_entropyYes30sDrives CRDT anti-entropy so replicas converge.
catalog_leaf_anti_entropycatalog.leaf_replicationYes60sReconciles the signed catalog leaf-inventory projection across cells (Discovery & Mapping).
crdt_tombstone_gcdata.crdt_compactionYes2mGarbage-collects settled CRDT tombstones after the safety window.
ttl_scannerdata.ttlYes0.1sHigh-frequency scan that expires TTL'd rows within a small time budget per tick.
snapshotdata.snapshotYes5mTakes periodic data snapshots.
asset_prognosisdata.asset_prognosisYes60mRuns Predictive Maintenance asset-prognostics signal processing over device telemetry.
credential_lifecycledata.governanceYes60mRotates and expires catalog data-source credentials.
catalog_search_reindexdata.governanceYes5mReindexes the catalog search index.
catalog_fts_reindexdata.governanceYes5mRebuilds the catalog full-text search index.
wal_compactiondata.compactionYes60sCompacts the data write-ahead log.
eviction_scannerdata.evictionYes0.1sHigh-frequency cache/eviction scan.
replication_syncreplication.cryptoNo5sLegacy replication sync stub. Off by default and inert: kept disabled so re-enabling without an implementation fails the build. See the inert section.
graph_replicationreplication.graphYes5sReplicates graph-store changes across cells.
structures_lifecycle_listenercore.lifecycleYes5sReacts to lifecycle events for data structures.
transaction_recoverydata.txn_recoveryYes30sRecovers in-doubt transactions after a crash.
catalog_healthdata.catalogYes2mChecks catalog store health.
consulting_retentiondata.retentionYes60mEnforces retention on consulting engagement data.
siem_lake_retentiondata.retentionYes60mEnforces retention on the SIEM data lake.
consulting_assessment_runsdata.consultingYes5sDrains and advances queued consulting assessment runs.
consulting_recurring_schedulesdata.consultingYes5mMaterializes due consulting recurring schedules.
consulting_accepted_risk_expirydata.consultingYes60mExpires accepted-risk findings past their acceptance window.
catalog_syncdata.catalogYes5mSyncs catalog metadata.
lineage_enrichmentdata.lineageYes30sEnriches data-lineage edges as new events arrive.
warehouse_lineage_polldata.lineageYes30mPolls connected warehouses for lineage.
vector_maintenancedata.vectorYes5mMaintains vector indexes (merges, compaction).
vector_rebuild_workerdata.vectorYes30mRebuilds vector indexes for scale-out shards.
structures_maintenancedata.compactionYes5mCompacts and maintains structured stores.
materialized_view_refreshdata.materialized_viewsYes5mRefreshes materialized views.
protection_rebuildreplication.protectionYes5mRebuilds erasure/replication protection for scale-out data.
drift_retraindata.ml_retrainNo60mRetrains models on detected data drift. Off by default (opt-in ML).
search_rebuild_workerdata.searchYes30mRebuilds search indexes for scale-out shards.
document_maintenancedata.documentYes10mMaintains the document store.
search_maintenancedata.searchYes10mMaintains search indexes.
feature_materializationdata.feature_storeYes30mMaterializes feature-store features on schedule.
streaming_evaldata.streamingYes5sEvaluates streaming query state.
capacity_stats_meterobservability.meteringYes60sMeters per-cell data capacity statistics.
engine_stats_syncdata.engine_statsYes2mSyncs query-engine statistics for the planner.
meta_intel_index_syncdata.meta_intelligenceNo2mMetadata-intelligence index sync. Off by default and inert: no live provider. See the inert section.
meta_intel_quality_computedata.meta_intelligenceNo5mMetadata-intelligence quality scoring. Off by default and inert. See the inert section.
meta_intel_enrichmentdata.meta_intelligenceNo10mMetadata-intelligence enrichment scan. Off by default and inert. See the inert section.
meta_intel_usage_rollupdata.meta_intelligenceNo60mMetadata-intelligence usage rollup. Off by default and inert. See the inert section.
meta_intel_meter_flushobservability.meteringYes60sFlushes metadata-intelligence metering (a real flush, unlike the four inert meta-intelligence workers).
cleanroom_kek_rotationdata.cleanroomYes60mRotates clean-room key-encryption keys.
cleanroom_expirationdata.cleanroomYes5mExpires clean rooms past their lifetime.
cleanroom_anomaly_sweepdata.cleanroomYes5mSweeps clean rooms for access anomalies.
cleanroom_substrate_classifydata.cleanroomYes15mRuns Alignment (substrate) classification over clean-room content.
automation_tickdata.streamingYes30sEvaluates reactive Automations rules and enqueues matches.
automation_forge_dispatchdata.streamingYes5sDispatches queued Automations-driven Data Modeling jobs.
workspace_anti_entropyreplication.failoverYes5mReconciles workspace state across cells for failover readiness.
failover_detectorreplication.failoverYes5sDetects a failed home cell and triggers standby election.
rebalance_membershipreplication.rebalanceYes30sRebalances data ownership on membership change.
knowledge_coherencecognition.knowledgeNo5mKnowledge (graph) coherence pass. Off by default. See the inert section note on cognition.knowledge.
knowledge_promotioncognition.knowledgeYes60sPromotes candidate Knowledge entities to canonical under lease.
knowledge_coherence_stitchcognition.knowledgeYes5mStitches the unified Knowledge graph across cohorts.
knowledge_tiercognition.knowledgeNo5mTiers Knowledge entities hot/warm/cold by age. Off by default (requires an explicit cell id).

Security​

Security & Operations background work: crypto health and rotation, threat detection and intelligence, posture and compliance scoring, event ingest and SIEM forwarding, and the offense-capable workers that ship off by default.

Every cell in this service also runs the fleet-common workers. Listed below: 43 service-specific workers.

WorkerCapabilityEnabled by defaultIntervalWhat it does
peer_audit_reconcilesecurity.audit_reconcileYes2mReconciles audit chains with peer cells.
zeroize_trigger_monitorsecurity.tactical_zeroizeYes60sScaffold, not an enforced control. On every profile shipping today it is a safe no-op: most profiles declare no zeroize triggers and no tactical hardware provider is registered, so nothing can arm and nothing fires. Where a profile declares a trigger that no hardware backs, it logs an error rather than acting. Auto-zeroize on disconnect is declared/scaffolded, not a working guarantee.
expiry_monitorsecurity.crypto_healthYes60sWarns on impending certificate/key expiry.
gossip_syncsecurity.crypto_rotationYes30sGossips crypto-rotation state with peers.
vault_integritysecurity.crypto_healthYes5mChecks secret-vault integrity.
rotation_coordinatorsecurity.crypto_rotationYes60mCoordinates scheduled crypto rotation.
federation_healthsecurity.federationYes60mChecks security-federation health.
dlp_scannersecurity.postureNo6hScans object stores for data-loss-prevention hits. Off by default (opt-in, resource-heavy).
security_event_ingestsecurity.event_ingestYes30sIngests security events into the security graph.
siem_forwardsecurity.event_ingestYes30sForwards security events to an external SIEM.
ct_submitsecurity.crypto_healthNo5mSubmits certificates to Certificate Transparency logs. Off by default (needs egress).
acme_public_cert_renewalsecurity.crypto_rotationYes12hRenews public ACME certificates.
ocsp_stapling_prefetchsecurity.crypto_healthYes60mPrefetches OCSP staples for served certificates; the cached response is stapled onto the cell's TLS listeners and served in the handshake (fail-safe to unstapled when a leaf has no current staple).
crypto_drift_scansecurity.crypto_healthYes15mScans for cryptographic configuration drift.
security_graph_buildersecurity.graphYes2mBuilds the security relationship graph.
detection_enginesecurity.detectionYes60sRuns detection rules over ingested events.
baseline_buildersecurity.baselineYes6hBuilds behavioral baselines for detection.
posture_scorersecurity.postureYes15mScores security posture.
sla_monitorsecurity.postureYes5mMonitors security SLAs.
ct_auditorsecurity.crypto_healthYes60mAudits Certificate Transparency observations.
compliance_monitorsecurity.postureYes60mEvaluates compliance controls.
identity_graph_syncsecurity.federationYes10mSyncs the identity graph across federation.
security_agent_runnersecurity.agentYes60sRuns scheduled security agents.
intel_sharingsecurity.threat_intelYes60sShares threat intelligence with peers.
threat_aggregationsecurity.threat_intelYes5mAggregates threat signals.
response_executorsecurity.responseYes10sExecutes automated response actions.
swarm_aggregatorsecurity.swarmYes30sAggregates swarm-defense signals across the fleet.
device_attestationsecurity.device_attestationYes15mIntended to attest IoT device posture. Enabled but its tick is currently inert (see the inert section); the underlying posture surface is served live elsewhere.
botnet_detectionsecurity.detectionYes30sDetects botnet/C2 patterns (Threat Detection).
indicator_propagationsecurity.threat_intelYes5sPropagates threat indicators quickly across cells.
consensus_enginesecurity.consensusYes10sRuns the reputation-consensus protocol.
mtd_rotationcyberops.offensiveNo10sMoving-target-defense rotation. Off by default (offense-capable; enable only where authorized).
active_defense_wallcyberops.offensiveYes5sAdaptive active-defense wall (Data Security). Enabled.
counter_botnetcyberops.offensiveYes60sCounter-botnet operations (Counter-Threat Operations). Enabled.
cyber_firescyberops.offensiveYes10sCyber 'fires' authorization loop (Counter-Threat Operations).
ct_intelligencesecurity.threat_intelNo60sCertificate Transparency intelligence mining. Off by default.
cognitive_defensecyberops.cognitiveYes30sCognitive-defense analysis loop.
supply_chainsecurity.supply_chainYes60mScans software supply-chain posture.
self_healingsecurity.self_healingYes15sApplies self-healing remediations.
rule_evolutionsecurity.self_healingYes24hEvolves detection rules on a daily cadence.
autonomous_red_teamcyberops.offensiveNo7dAutonomous red-team exercises. Off by default (offense-capable; weekly when enabled).
quantum_readinesssecurity.crypto_healthYes24hAssesses post-quantum crypto readiness.
advanced_metricsmetrics.federationYes30sPublishes advanced security metrics.

Storage​

Object and block durability: erasure and bitrot integrity, tiering, deduplication, replication and rebalance, quarantine repair, and lifecycle.

Every cell in this service also runs the fleet-common workers. Listed below: 26 service-specific workers.

WorkerCapabilityEnabled by defaultIntervalWhat it does
volume_compactorstorage.tiering_workYes60sCompacts storage volumes.
orphan_block_gcstorage.dedupYes2mGarbage-collects deduplicated blocks no object references.
multipart_cleanupstorage.dedupYes5mCleans up abandoned multipart uploads.
storage_vacuumstorage.tiering_workYes5mVacuums storage metadata.
replicationreplication.cryptoYes2sReplicates objects to peer cells.
peering_probestorage.topologyYes15sProbes storage-peer topology and reachability.
erasure_healthstorage.integrityYes30sChecks erasure-coded shard health.
durability_auditstorage.integrityYes5mAudits object durability against target.
replica_lease_sweepstorage.tiering_workYes60sSweeps expired replica leases.
bitrot_scanstorage.integrityYes5mRate-limited bitrot scan of stored data.
anti_entropyreplication.anti_entropyYes60sRepairs replica divergence.
tieringstorage.tiering_workYes5mMoves objects between storage tiers by policy.
tier_transition_applierstorage.tiering_workYes5mApplies queued tier transitions.
lifecyclecore.lifecycleYes60mApplies object lifecycle rules.
change_streamstorage.change_eventsYes10sEmits the storage change stream.
integrity_scanstorage.integrityYes5mScans objects for integrity violations.
quarantine_repairstorage.integrityYes10mRepairs quarantined objects with bounded retries.
cross_ns_processorstorage.change_eventsNo30sCross-namespace change processor. Off by default.
key_lifecyclestorage.key_lifecycleYes5mRotates and expires storage encryption keys.
event_dispatchstorage.change_eventsYes5sDispatches storage change events to subscribers.
dedup_scanstorage.dedupYes60mScans for deduplication opportunities.
service_group_migrationreplication.rebalanceYes60sMigrates a service group's storage between cells. Now implemented (previously inert).
protection_auto_scalerstorage.protection_autoscaleYes60sAuto-scales protection level under load.
rebalancereplication.rebalanceYes5mRebalances object placement across cells.
clone_promotionstorage.cloneYes30sPromotes copy-on-write clones to independent objects.
capacity_reconcilereplication.rebalanceYes60sReconciles storage capacity accounting.

Compute​

The agent and job execution plane: kernel pools, warm pools, coding-agent and ML-training dispatch, git and CI triggers, and cloud price sync.

Every cell in this service also runs the fleet-common workers. Listed below: 21 service-specific workers.

WorkerCapabilityEnabled by defaultIntervalWhat it does
cognition_cost_flushcompute.kernel_reaperYes60sDrains the shared Cognition cost collector into metering, using the canonical collector so no rate is lost.
secret_rotationcompute.kernel_reaperYes12hMonitors master-key age and warns when a key has aged past its window; observation only unless auto-rotate is explicitly requested. Self-gates when no key exists.
kernel_reapercompute.kernel_reaperYes30sReaps idle and expired compute kernels so the kernel pool does not leak capacity.
warm_poolcompute.warmpoolYes10sMaintains the warm kernel pool so a job does not pay cold-start latency.
library_synccompute.libraryYes2mKeeps the per-workspace code/library trees in sync for compute jobs.
job_tickcompute.jobsYes5sDrains the cell-local job queue and advances claimed jobs.
ml_training_dispatchcompute.ml_trainingYes5sDrains the ML-training queue: resolves a snapshot, fits, exports ONNX, node-signs, stores, and registers the model version. Default-enabled so training works out of the box.
coding_run_dispatchcompute.jobsYes5sDrives each claimed coding run through provision, environment bootstrap, self-repair, and settle. Fail-closed: an AI-off or git-disabled cell runs an idle no-op tick rather than a fabricated run.
cloud_price_syncobservability.meteringYes8.58358hSeeds and syncs the per-cloud infrastructure price catalog so the cross-cloud cost comparator and placement router have live rates. Seed-and-curate only when no fetcher is wired.
automation_dbt_dispatchcompute.jobsYes5sDispatches queued Data Modeling (dbt) transform-project runs.
quota_synccompute.quotaYes30sReconciles compute quota accounting across the cell.
agent_triggeragents.triggerYes15sFires eligible agent triggers whose conditions have been met.
git_synccompute.gitYes60sSyncs bound workspace git repositories.
ci_triggercompute.ciYes30sEvaluates and fires CI pipeline triggers.
gguf_warmupcompute.warmpoolNo10mPre-warms local GGUF model weights into memory. Off by default; a local-model-serving opt-in.
gguf_idle_evictorcompute.warmpoolNo60sEvicts idle local GGUF models to reclaim memory. Off by default, pairs with the warmup worker.
model_build_pipelinecompute.model_buildNo5sRuns the local Model Provisioning build pipeline (acquire, quantize/compile, sign, stage). Off by default.
intelligence_maintenance_tickagents.intelligence_maintenanceYes60sPeriodic maintenance of the intelligence/agent subsystem.
workspace_dataplane_reconcilecore.lifecycleYes5mReconciles workspace data-plane placement against desired state.
entity_home_reconcilecore.lifecycleYes5mReconciles the home cell of entities after membership change.
workspace_home_reassigncore.lifecycleYes5mReassigns a workspace's home cell when its current home is unfit.

Metrics​

The observability and metering engine: collection, rollups, retention, alerting, anomaly and FinOps scans, usage rollups, budgets, and chargeback.

Every cell in this service also runs the fleet-common workers. Listed below: 18 service-specific workers.

WorkerCapabilityEnabled by defaultIntervalWhat it does
otlp_pushmetrics.federationNo60sPushes metrics to an external OTLP endpoint. Off by default (cloud/connected opt-in).
collection_engineobservability.collectionYes1sHigh-frequency metrics collection loop.
rollup_computeobservability.rollupYes60sComputes metric rollups.
retention_sweepobservability.retentionYes60mEnforces metrics retention.
alert_evaluatorobservability.alertingYes15sEvaluates alert rules against live metrics.
anomaly_scanobservability.anomalyYes5mScans metrics for anomalies.
finops_anomaly_scanobservability.finopsYes60mScans cost/usage for FinOps anomalies.
audit_chain_rotationaudit.tamper_evidentYes60mRotates the tamper-evident audit chain segment.
health_synthesizerobservability.healthYes30sSynthesizes an overall health signal from component metrics.
usage_rollup_5minobservability.meteringYes5mRolls up metered usage on a 5-minute grain.
usage_rollup_hourlyobservability.meteringYes60mRolls up metered usage hourly.
usage_rollup_dailyobservability.meteringYes24hRolls up metered usage daily.
usage_syncobservability.meteringYes5mSyncs usage records across cells.
chargeback_recompute_drainobservability.meteringYes5mDrains and recomputes chargeback allocations.
budget_evaluatorobservability.meteringYes5mEvaluates budgets and raises breach signals.
rate_card_syncobservability.meteringYes60mSyncs the billing rate card.
knowledge_cost_rollupobservability.meteringYes60mRolls up Knowledge subsystem cost.
agent_metrics_rollupobservability.meteringYes60mRolls up per-agent metrics.

Messaging​

The cross-cell delivery fabric (Messaging & Streaming): outbox retransmit, inbox apply, cursor and ack management, gossip membership, change replication, and stream maintenance.

Every cell in this service also runs the fleet-common workers. Listed below: 17 service-specific workers.

WorkerCapabilityEnabled by defaultIntervalWhat it does
asset_replication_drainreplication.cryptoYes10sDrains queued asset-blob replication to peer cells.
retransmit_duemessaging.deliveryYes0.25sRetransmits due outbox messages under a cell-scoped lease, with bounded attempts.
apply_inboxmessaging.xcellYes0.25sApplies received cross-cell inbox messages.
reassemble_fragmentsmessaging.fragmentsYes1sReassembles fragmented large messages.
consumer_group_expirymessaging.deliveryYes10sExpires stale consumer-group memberships.
advance_cursorsmessaging.deliveryYes1sAdvances subscription cursors and auto-commits within lag thresholds.
ack_timeout_watchermessaging.deliveryYes1sDetects ack timeouts and requeues or dead-letters per policy.
partition_migrationmessaging.deliveryYes5sMigrates partitions between cells.
route_refreshmessaging.routingYes2sRefreshes cell-to-cell routing from fabric endpoint/policy tables.
gossip_membershipmessaging.xcellYes2sGossips membership and endpoint liveness with peer cells.
replicate_changesmessaging.xcellYes1sStreams replication-log changes for system, directory, and session stores.
streaming_query_monitormessaging.maintenanceYes60sMonitors streaming query health.
pipeline_monitormessaging.maintenanceYes60sMonitors streaming pipeline health.
retention_sweepermessaging.maintenanceYes60sEnforces subject and inbox/dead-letter/fragment retention.
outbox_backoff_resetmessaging.deliveryYes1sResets outbox backoff after a transport recovers.
vacuummessaging.maintenanceYes5mVacuums/checkpoints the messages store on a maintenance cadence.
capacity_reconcilereplication.rebalanceYes60sReconciles messaging capacity and partition placement.

Node​

Node-level roll-up and reporting: fleet-facing governance attestation polls, license refresh, metering and exchange reports, edge site-artifact pull, and telemetry bridges.

Every cell in this service also runs the fleet-common workers. Listed below: 17 service-specific workers.

WorkerCapabilityEnabled by defaultIntervalWhat it does
gateway_metricsmetrics.federationYes10sPublishes gateway metrics.
npg_attestation_pollcore.governanceYes5mPolls for net-potential-gain governance attestations (Alignment).
worker_policy_attestation_pollcore.governanceYes5mPolls for Worker Policy attestations so worker-governance decisions are verifiable.
site_artifact_polledge.site_artifactYes15sPulls signed edge site artifacts for the node.
security_bridge_syncsecurity.bridge_syncYes5sSyncs the node's security bridge state.
license_refreshcore.licenseYes60mRefreshes the node license.
metering_reportobservability.meteringYes60mReports metered usage upstream (connected deployments).
exchange_settlement_reportobservability.meteringYes60mReports data-exchange settlement.
exchange_access_request_pullobservability.meteringYes60mPulls pending data-exchange access requests.
exchange_offer_publish_reportobservability.meteringYes60mReports data-exchange offer publications.
telemetry_incident_reportobservability.telemetryYes5mForwards incident telemetry (connected deployments).
telemetry_bug_reportobservability.telemetryYes10mForwards bug-report telemetry.
telemetry_a11y_reportobservability.telemetryYes30mForwards accessibility telemetry.
telemetry_perf_reportobservability.telemetryYes10mForwards performance telemetry.
telemetry_perf_detectorobservability.telemetryYes60sDetects performance regressions locally.
telemetry_log_bridgeobservability.telemetryYes30sBridges logs to the telemetry plane.
telemetry_incident_bridgeobservability.telemetryYes30sBridges incidents to the telemetry plane.

Admin​

The control-plane service: fabric-health probing plus the fleet-common publishers.

Every cell in this service also runs the fleet-common workers. Listed below: 1 service-specific workers.

WorkerCapabilityEnabled by defaultIntervalWhat it does
fabric_health_agentobservability.fabric_healthYes15sProbes every peer service's readiness endpoint, keeps an EWMA health signal, and writes fabric-health state (via API or DB). Setup-aware and self-excluding.