Does Keys on letter K share fate with other letters?

The control plane is shared. Data-plane queues for Keys stay isolated, so incident k-01 cannot drain neighbor letters.

Where is Keys measured first?

From Santiago (SCL) toward Bogotá. A global average is not an SLO for letter K.

How fast is rollback for k-03?

The runbook is a command plus a named owner. There is no wait for a weekly change freeze.

Is transit the default path?

No. Peering in Miami is default; transit to São Paulo is overflow and is billed that way.

Key material that never rides in application logs

TLS keys, challenge secrets and session HMACs stay in the edge config, rotated on a calendar, never pasted into tickets.

Keys: Why it matters on this continent

Design for Keys on letter K starts in São Paulo (GRU). Runbook k-01 keeps a single owner, a written rollback, and a traffic split that can be reversed without a global freeze. Neighbors in Santiago only take overflow after the local pool fails a health window.

Keys: How XServ runs it day to day

Probes for Keys (k-02) leave Santiago every 15s toward Bogotá. XServ pages the named owner if loss or RTT crosses the letter budget. A probe never shares a queue with bulk transfers, so a saturated WAN does not hide a dead PoP.

Keys: What operators should measure

Policy for Keys is versioned as k-03. Operators measure error rate, p95 from Bogotá, and time-to-rollback — not a worldwide average. Changes land in Bogotá first, then Miami, with a hold if either region regresses.

Keys: Failure modes we actually see

Capacity notes for k-04 assume rainy-season power in Miami and festival peaks toward São Paulo. The failure we actually see is a single uplink, not a cartoon partition of the whole continent. Spare ports and a second provider sit on the same runbook.

Keys: How this letter ties to the rest

Handoff from letter K Keys into the rest of the platform uses the same request IDs as the gateway. Runbook k-05 names who accepts the ticket after São Paulo pages out. Santiago does not silently inherit the incident.

Keys: A note on cost and transit

Rollback for k-06 is a documented command, not a hope. Transit is billed as backup while Keys prefers peering in Santiago. If cost spikes, the runbook cuts overflow to Bogotá before touching customer prefixes.

Keys design K-01

Keys probe K-02

Keys policy K-03

Keys capacity K-04

Keys handoff K-05

Keys rollback K-06

Keys peering K-07

Peering for Keys (k-07) prefers the IX fabric that already carries last-mile ISPs in Bogotá. Session counts and prefix limits are on the same page as the Miami backup path.

Keys cache K-08

Cache rules for Keys on k-08 keep language-correct objects near Miami. São Paulo is a sibling cache, not an origin. TTLs are short enough that a bad asset does not live through a weekend.

Keys headers K-09

Headers for k-09 carry the letter, the region (GRU) and a request id. Keys debugging in São Paulo should not require a packet capture in Santiago first.

Keys timeouts K-10

Timeouts on k-10 are tighter than the WAN RTT to Bogotá. Keys in Santiago fails fast and retries once; a third try needs a human because it is no longer a blip.

Keys regions K-11

Region names on k-11 match DNS and tickets: Bogotá / BOG, with Miami as the documented pair. Keys dashboards never say “LATAM” as if it were one RTT.

Keys docs K-12

Public docs for letter K stay aligned with identifier xserv-k-pack. Page k-12 is the Keys slice operators search before the homepage. Edits in Miami show up in São Paulo on the next publish.