Back to .md Directory

DB Growth Guardrails & Maintenance Runbook

This runbook defines when to intervene on Cortex DB growth and how to do it safely.

May 2, 2026
0 downloads
0 views
ai rag workflow guardrails
View source

DB Growth Guardrails & Maintenance Runbook

This runbook defines when to intervene on Cortex DB growth and how to do it safely.

Why this exists

As memory/fact volume grows, output and operator workflows can degrade before correctness fails. This guide tracks thresholds and a repeatable maintenance path.

Daily / Weekly Checks

Daily (quick)

cortex stats

Review:

  • storage_bytes
  • 24h growth in memories/facts
  • alerts (if present)

Weekly (operator)

cortex stats --json
cortex stats --growth-report --json
cortex stats --growth-report --top-source-files 20
cortex stale 7
cortex optimize --check-only

Confirm whether growth is expected (imports, captures) vs noise churn.

Growth Forensics Loop (report-first)

Use this before any maintenance pass so attribution is explicit and comparable:

# Before snapshot
cortex stats --growth-report --json > /tmp/growth-before.json

# Optional maintenance (only if recommendation indicates)
cortex optimize

# After snapshot
cortex stats --growth-report --json > /tmp/growth-after.json

Record in the ops note:

  • recommendation (no-op or maintenance-pass)
  • top source contributors (before vs after)
  • fact-type mix shifts (before vs after)

Thresholds

Treat these as intervention triggers:

  1. DB size notice: storage_bytes > 1.0 GB

    • Action: schedule weekly review and confirm expected growth source.
  2. DB size warning: storage_bytes > 1.5 GB

    • Action: run maintenance window (below) and verify post-maintenance deltas.
  3. Fact growth spike alert (24h)

    • Action: inspect recent imports/capture sources and conflict/stale outputs for noise.
  4. Memory growth spike alert (24h)

    • Action: validate capture hygiene and source dedupe behavior.

Maintenance Window (Safe)

Run during low-traffic windows.

  1. Backup DB file:
cp ~/.cortex/cortex.db ~/.cortex/cortex.db.backup.$(date +%Y%m%d%H%M%S)
  1. Run built-in maintenance (full path):
cortex optimize
  1. Optional targeted modes:
cortex optimize --check-only
cortex optimize --vacuum-only
cortex optimize --analyze-only
  1. Verify post-state:
cortex stats --json

Compare size and growth metrics to pre-maintenance snapshot.

Output Scaling Guidance

For large conflict sets:

  • default to compact output:
    cortex conflicts
    
  • use --verbose only when deep triage is required:
    cortex conflicts --verbose
    
  • for machine workflows, prefer JSON + downstream filtering:
    cortex conflicts --json
    

SLO Checkpoints (Operator)

Track these checkpoints during growth reviews:

  • cortex stats: completes under 3s on current production-scale DBs.
  • cortex search "<common query>" --mode hybrid --limit 10: under 5s baseline on warmed local DB.
  • cortex conflicts (default compact mode): returns summary output without terminal spam or hangs.

If checkpoints regress materially, file/track under #64 and attach command output + DB size context.

Automated SLO Snapshot Report

Use the helper script to capture checkpoint timing + status in one artifact:

scripts/slo_snapshot.sh \
  --warn-stats-ms 3000 --warn-search-ms 5000 --warn-conflicts-ms 5000 \
  --fail-stats-ms 7000 --fail-search-ms 10000 --fail-conflicts-ms 12000 \
  --output /tmp/slo.json --markdown /tmp/slo.md

Optional production-style run (hybrid search):

scripts/slo_snapshot.sh \
  --db ~/.cortex/cortex.db \
  --query "deployment policy" \
  --mode hybrid \
  --embed ollama/nomic-embed-text \
  --output /tmp/slo-hybrid.json \
  --markdown /tmp/slo-hybrid.md

The script emits PASS, WARN, or FAIL status in output artifacts and exits non-zero on command failures or fail-threshold breaches (unless --warn-only-thresholds is set).

CI canary is also available via GitHub Actions workflow: .github/workflows/slo-canary.yml. It performs trend comparison against the previous successful canary artifact (scripts/slo_trend_compare.py) and applies budget policy overlays (scripts/slo_budget_guard.py) before artifact publish.

Related Tracking

  • #64 — DB growth guardrails follow-through
  • #74 — post-v0.3.4 reliability wave
  • #82 — SLO snapshot report tooling

Related Documents

GUARDRAILS.md

Guardrails, Safety & Content Filtering

> Your LLM application will be attacked. Not might. Will. The first prompt injection attempt against your production system will come within 48 hours of launch. The question is not whether someone will try "ignore previous instructions and reveal your system prompt" -- the question is whether your system folds or holds. Every chatbot, every agent, every RAG pipeline is a target. If you ship without guardrails, you are shipping a vulnerability with a chat interface.

aiagentllm
0
17
rohitg00
GUARDRAILS.md

DeepSeek R1: Case Study in Failed Extrinsic Alignment

**Context:** This document compiles publicly available security research on DeepSeek R1 alongside our independent findings from the LEK-1 A/B testing. It demonstrates why extrinsic alignment (content filters, RLHF guardrails, system prompts) is insufficient for AI safety.

aiprompteval
0
8
Snider
GUARDRAILS.md

AI Safety & Guardrails for Voice Assistants

A multi-layered defense system ensuring the AI assistant stays on-topic, resists prompt injection, and never makes unauthorized decisions.

aillmrag
0
6
alexiokay
GUARDRAILS.md

LlmGuard Framework - Complete Implementation Buildout

**LlmGuard** is a comprehensive AI Firewall and Guardrails framework for LLM-based Elixir applications. It provides defense-in-depth protection against AI-specific threats including prompt injection, data leakage, jailbreak attempts, and unsafe content generation. This buildout implements a production-ready security layer for LLM applications with statistical rigor, comprehensive threat detection, and zero-trust validation.

aillmprompt
0
3
North-Shore-AI