Skip to main content

CAP.L0.INSTANCE_SCOPE_UNANSWERABLE — this instance cannot answer what the rule asks

  • Category: safety
  • Level: 0
  • Stability: stable
  • Suites: audit

Some rules ask a question about the instance rather than about the schema — a server setting, a cluster-wide configuration, something whose answer depends on which machine you asked. This run could not establish that the machine it reached is one those questions can be answered on.

Why reading it anyway would be worse​

The dangerous property here is that the read succeeds. A rule scoped to the write path runs happily against a replica and returns a value; the value simply describes the replica. Nothing fails, nothing looks wrong, and the report says something true about a machine nobody was asking about.

So the rule is withheld with a reason instead, one notice per rule rather than one per object.

Why an instance's role can be unknown​

The audit asks the server what it is. A pooled session can make that unanswerable, and so can a platform that does not expose the setting the check reads.

What to do​

Audit the primary directly when you want the instance-scoped band answered, or accept these as withheld and read the schema findings, which are unaffected.