Retry queue without dead-letter queue

errorretry-queue-without-dlq

A retry queue is where poison messages end up. With no dead-letter queue they are retried forever or dropped in silence, and nobody ever looks at the failed payment.

Severity: error
Selects: every node of kind queue
Components in scope: 24

What it checks

It looks at every node of kind queue, and fires when:

— all of these hold:
— the node's `role` is "retry"
— the node's `deadLetterQueue` is false

Message

Retry queue '{{node.id}}' has no dead-letter queue. Messages that keep failing must be parked for manual investigation.

{{node.id}} style paths are filled in from the node, the edge or the design the finding is about.

Applies to · 24 components

Queue queue

Tripped by · 5

Reference designs whose broken twin names this rule in its header. The gate reads the same header, and fails when a rule no design trips.

distributed-emailreference gojek-platformreference meta-threadsreference payment-systemreference robinhood-tradingreference

Source

1# yaml-language-server: $schema=../schema/rule.schema.json
2# A retry queue is where poison messages end up. Without a dead-letter queue they are
3# retried forever or silently dropped, and nobody investigates the failed payment.
4# Tripped by: designs/payment-system.broken.yaml
5schemaVersion: "1"
6type: "rule"
7id: "retry-queue-without-dlq"
8severity: "error"
9select:
10  node:
11    kind: "queue"
12when:
13  all:
14    - prop: "role"
15      equals: "retry"
16    - prop: "deadLetterQueue"
17      equals: false
18message: "Retry queue '{{node.id}}' has no dead-letter queue. Messages that keep failing must be parked for manual investigation."

The same page as markdown, for an agent: /catalogue/rules/retry-queue-without-dlq.md