Your pods aren't crashing - they're being interrupted mid-sentence

Thanks for the comment - that's a fair distinction between observability and verifiable proof.

To clarify scope: this article is about the mechanics of pod termination itself (SIGTERM, the grace period, preStop hooks, and the readiness/signal ordering), not about settling a billing dispute between two parties. For what it does cover, the "proof" isn't a dashboard or a vendor badge - it's the cluster's own record: kubectl describe pod for the termination reason and exit code, kubelet logs for signal timing, and terminationGracePeriodSeconds in the pod spec, all of which any operator can query directly.

What you're describing - a signed, tamper-evident record of "what ran" that a buyer can independently verify in an invoice dispute - is a genuinely different and valid problem, closer to metering/attestation than to shutdown mechanics. It's just outside what this piece set out to do. Happy to discuss that separately if you'd like to go deeper on it.

Thanks for following up - same fair point, this time framed around outage disputes rather than billing.

To keep scope clear: this article is about Kubernetes' own pod-termination mechanics (SIGTERM, the grace period, preStop hooks, and getting readiness to flip before the signal lands), not about producing evidence for a dispute between a buyer and an operator. For what it does cover, nothing is gated behind a "vendor badge" - kubectl describe pod, kubelet logs, and the pod's own terminationGracePeriodSeconds are the actual source of truth, and any operator can pull them directly rather than taking anyone's word for it.

The scenario you're describing - a buyer who doesn't control the cluster needing independently verifiable, signed proof of runtime behavior after an outage - is a real problem, but it's an attestation/provenance question, not a shutdown-mechanics one. It's outside what this post is trying to do. If that gap is what you're getting at, I'd be glad to dig into it as its own topic.