# Evidence Register: 2026-07-15 Kafka file-download consumer-group replay and Nearmap throttling

Incident: `INC-2026-07150002`

| ID | Class | Description | Source | SHA-256 | Confidentiality | Integrity |
| --- | --- | --- | --- | --- | --- | --- |
| EV-0001 | screenshot | Original customer-support-channel screenshot captured at 4:00:39 PM EDT. It shows a 3:58 PM report that multiple designs were failing and includes customer names; retained only in restricted evidence and not published to the web app. | Shared Mac screenshot capture | 566796aaf90ea9553d471bb166e67e940d0aa9f149667e0190ab109d6175bd33 | restricted | verified |
| EV-0002 | screenshot | Original iframe workflow screenshot showing the visible 'Aerialytic error (code undefined)' symptom. The image includes a customer project address and is retained only in restricted evidence, not published to the web app. | Shared Mac clipboard capture | edd35bf88c3426ae1f0bd10c945be3886e7bd2e2078b691ca505945131674843 | restricted | verified |
| EV-0003 | forensic_analysis | Read-only Git, Kubernetes, Kafka-header, DLQ, and log analysis establishing rollout timing, consumer-group replay mechanics, outcome counts, and rollback behavior. Kafka payloads and signed URLs were not displayed or persisted. | Aerialytic production incident investigation task | non-file evidence | confidential | verified |
| EV-0004 | source_change | Partial candidate mitigation PR #4241 at head dbd2126e92f70044696312e43200b3082b7eafd1. It preserves the established production group and improves retry selection/backoff, environment validation, URL redaction, locality tests, and offset documentation. It is not live and does not yet provide distributed provider pacing, header-aware reset behavior, a circuit breaker, offset safety when commits are absent, request idempotency, consumer heartbeat safety, or the adjacent security and runtime hardening tracked by this incident. | https://github.com/Aerialytic/Monorepo/pull/4241 | non-file evidence | internal | verified |
| EV-0005 | ci_run | GitHub Actions run 29450818576 for PR #4241 head dbd2126e92f70044696312e43200b3082b7eafd1 was queued on the self-hosted runner at publication time; no green conclusion is claimed. | https://github.com/Aerialytic/Monorepo/actions/runs/29450818576 | non-file evidence | internal | verified |
| EV-0006 | runtime_health | Latest read-only production health observation: main/kafka-file-download-rmuqop-deployment 3/3 Ready with zero restarts; 15-minute sample had 3 completed downloads, 0 fresh 429, 0 DLQ sends, and 0 processing errors. | Aerialytic production read-only checks | non-file evidence | internal | verified |
| EV-0007 | vendor_guidance | Nearmap guidance recommends exponential backoff for HTTP 429 and 5xx, not other 4xx, and documents X-RateLimit-Limit, X-RateLimit-Remaining, and X-RateLimit-Reset response headers. | Nearmap Help Center and API Standard | non-file evidence | public | verified |
| EV-0008 | publication_receipt | Immutable publication receipt recording source paths, two rollback backups and hashes, restricted-evidence boundaries, Slack message/file evidence, package hashes, public and forced-VIP checks, browser proof, and the unchanged infrastructure boundary. | Canonical incident publication workflow | 3da1ca800f561356f84fbb9e9739241c724c34931be04abe6e9768f251a106d3 | confidential | verified |

## Handling Rules

- EV-0001 and EV-0002 are original restricted PNG evidence stored only in the local canonical package. They are excluded from the public web and Slack packages.
- Public artifacts contain their SHA-256, size, capture time, and redacted description.
- Kafka analysis was read-only and did not display or persist payloads or signed URLs.
- No secret values, Kafka credentials, private keys, or signed URL query strings may enter generated outputs.