Native Observability 1.0.8 New features: - Forensic Route Analysis: dashboard tool to investigate a route/path by correlating traces, spans, and outbound HTTP/SQL signals, with a candidate picker, bulk subject management, and HTML export. - Deferred hot-path persistence: traces, spans, cache and database events are buffered in memory and flushed in a single batch at kernel.terminate. - Narrative observability report: long-form conclusion and action schema with scoring and privacy-aware export controls. Telemetry & Prometheus: - Prometheus scrape gated by a bearer token, stored in Drupal State (never in exported config; write-only field with a __clear__ sentinel). - Prometheus cardinality controls: configurable label strategy and a max-series cap with a truncation guard. - Exporter plugins migrated from annotations to PHP attributes. Cache & database observability: - Cache observability split into route-bound and orphan event surfaces; dashboard cache invalidated on trace insert with full header capture. - Database observer storage injection fixed and query records enriched. Dashboard: - Hardened trace sampling, eliminated the Technical Insights N+1 (single batch query per dataset), reworked the shared table/modal JavaScript. Security & robustness: - Closed a local file inclusion vector on the report narrative path. - Closed an open redirect on the request-log exclusion form + admin-route guard. - Fixed a latent fatal in the async HttpClientSpanDecorator path. - Hardened the install/update lifecycle and extracted a central PrivacyPolicy service that locks the no-raw-IP contract. Quality & CI: - Added kernel test infrastructure, extended drupal.org CI to gate PHPStan and a yamllint job, brought the module to clean PHPCS/PHPStan, consolidated docblocks, and refreshed the READMEs. Service integrity & safe install: - Service-integrity sanity check (ServiceIntegrityInspector, a /sanity-check report page and `drush no:sanity-check`) that verifies the family's service decorators, wrappers, stack middleware and event subscribers are intact and detects conflicting third-party overrides. - Install guard: a non-green base blocks installing the base and every sub-module, and a retro-fit update disables unsafe modules together with their dependents, so the family only installs on a conflict-free base. Cache observability tooling: - Internal Page Cache HIT/MISS captured via a stack middleware and reconciled with the dashboard KPIs (route-less HITs are listed under orphan records). - Route-bound and orphan cache-event tables made paginated and sortable, with row selection + "Delete selected" and per-table scoped "Delete all". - The cacheable-responses KPI now excludes the dashboard's own self-observation. - Alert when multiple dedicated cache systems (e.g. Redis + Memcache) cover the same bins (a chained-fast APCu + consistent layering is exempt). Settings: - All sub-module settings consolidated as tabs under /admin/config/development/native-observability/settings, present only when the owning module is enabled. Native Observability 1.0.8 adds the Forensic Route Analysis tool, deferred hot-path persistence and a narrative report, while hardening security, telemetry cardinality, and overall code quality on top of 1.0.7. It also adds a service-integrity sanity check with a conflict-aware safe-install guard, richer cache observability tooling (sortable/actionable cache tables, page-cache HIT/MISS reconciliation and a multi-cache alert), and a unified settings area.