JSON log handler

LevelInfo in production

Context log variants

No PII in logs

Error log-or-return

Histogram for latency

PromQL comments on metrics

Bounded metric labels

Counter _total suffix

TracerProvider setup

Spans on service methods

DB calls use QueryContext/ExecContext

otelhttp transport for HTTP client

Span error recording

Metric base units

rate() not irate()

for: on all non-binary alerts

Two severity levels only

Critical for: duration

Warning for: duration

Latency alert (golden signal)

Traffic alert (golden signal)

Error rate alert (golden signal)

Saturation alert (golden signal)

Multi-window SLO alerting

Go runtime goroutine alert

Go runtime GC alert

Go runtime memory alert

Infrastructure rules sourced externally

Predictive saturation alert

user_id as identity key (PostHog)

user_id as identity key (Segment)

Consent check before PostHog

Consent check before Segment

Data deletion endpoint

Deletion propagates to analytics

Deletion propagates to CDP

Data export endpoint

No PII in analytics events

No PII in log calls

Both clients initialized

GDPR compliance documented