Observability
observability: preview-only.
IdentityFlow is instrumented with OpenTelemetry internally. That is an implementation detail in 0.2.0 — you get no trace destination, no dashboard, and no performance figures you may quote.
If someone asks how fast it is, the answer is that this release does not measure it.
What you do get is better than a trace for most questions: workflow state, the steps that ran, the full ordered event history, and safe error metadata. For “what happened to this request”, that is the primary record, not a fallback.
Don’t substitute a screenshot of a trace for it. And keep credentials and full external payloads out of spans — a span is as leaky as a log.
A real observability story needs a named exporter, a retention policy, a test that proves redaction works, and acceptance criteria somebody measured. Until those exist, this stays here.
For what to record today, see Audit Evidence.