Failures (platform admin)

What keeps going wrong, across every tenant, grouped by what actually failed — the page to read to decide what to fix, rather than the one for rescuing a single revision. It lives under Admin → Failures and requires the platform-admin role.

One revision failing is a support thread; the same thing failing forty times is a work item. That's the whole argument the page is built to make, read top to bottom:

• How many, and whose fault. Split three ways — Ours (a platform fix, not a tenant's), Tenants' (their compose, Dockerfile or ports), and Unclassified (no rule matched yet, worth reading the samples for). The zeroes stay on screen: "0 unclassified" is the statement that the rules are keeping up, not nothing worth showing.
• The kinds themselves, largest share first, each with the remedy for the class of failure rather than for one revision — what would actually stop this recurring.
• Three real samples under each kind, so a count can be checked against something rather than taken on faith. The reference is quoted as text, not linked — a failure's own page is scoped to its owning organization's members, and an operator reading the rollup usually isn't one, so a link here would just 404 on them.

The window is 7, 30 or 90 days, and capped at the newest 2000 failures in it — the page says so out loud when a window hits that cap, because a capped count that stays quiet under-reports exactly the failure happening most.

Nothing failed in the window is the state this page hopes to render, and it says exactly that rather than standing an empty state in for it.