# Jetstream V2 configuration audit Authority: - upstream `cmd/jetstream/main.go` and `internal/jetstreamd/options.go` at `f29815c391fc2644f8a3dd36b899fb3697dd1ea6` - Stream `eb95c14310ef18c7ab9edbcff991a04a560a7d86` (admitted artifact `sha256:43001041...`, `receipts/eb95c14.json`) — this hash resolves, but note experiment 6 deployed `29705cb` (`receipts/29705cb.json`), so the basis is behind the artifact that ran. Same gap recorded in `semantic-parity.md`. **Flag and environment names are derived.** Since `ac09654`, a field on the options struct in `runtime/cli.zig` generates both spellings at comptime — `backfill_workers` becomes `--backfill-workers` and `JETSTREAM_BACKFILL_WORKERS` via `flagName` / `envName` — so a canonical name cannot drift from its environment variable. Each row therefore audits what derivation does not supply: the default value, the parse and validation rules, precedence, and whether the parsed value reaches the runtime mechanism named in the row. This document audits public configuration and command wiring. A **verified** configuration row proves only that the input is parsed/defaulted and reaches the named runtime mechanism. It does not make a blocked runtime mechanism semantically correct. Status vocabulary is defined in [semantic-parity.md](semantic-parity.md). ## Inventory | Surface | Status | What source/tests establish | Limitation or remaining proof | |---|---|---|---| | Complete upstream flag inventory | **unverified** | The environment contract contains a hand-maintained pinned source map and rejects unknown `JETSTREAM_*` names. | There is no generated comparison proving every current upstream flag is represented here. Before another admission, generate the inventory from the pinned Go command/options definitions and fail on an unclassified addition/removal. | | Relay URL | **verified** | `--relay-url` reaches the WebSocket consumer and relay-fronted HTTP listRepos/getRepo/repair clients; CLI and environment precedence are tested. | The reconnect loop this feeds is…