Requirement 11.6.1 asks for a mechanism that alerts personnel. This service performs the detection and preserves the evidence; it does not send notifications. Poll the status endpoint from your own monitoring and alert when it reports healthy=false, and record who receives that alert — an assessor will ask, and a report nobody reads is not an alert.
Tessera does not notify personnel. Connect the private status endpoint to the customer-owned system that pages designated recipients, and test that routing before relying on it.
Copy-safe Python polling example
PERSONNEL_NOTIFY_COMMAND is an absolute path to your existing notification wrapper; it receives a title argument and compact JSON on standard input.
#!/usr/bin/env python3
# Inject both variables from your scheduler's secret/configuration store:
# TESSERA_LEDGER_TOKEN
# PERSONNEL_NOTIFY_COMMAND (absolute path; title arg, JSON on standard input)
import json
import os
import subprocess
import urllib.request
STATUS_URL = 'https://qi.toledotechnologies.com/api/v1/scan/pci-ledger/status'
token = os.environ["TESSERA_LEDGER_TOKEN"]
notifier = os.environ["PERSONNEL_NOTIFY_COMMAND"]
if not os.path.isabs(notifier):
raise SystemExit("PERSONNEL_NOTIFY_COMMAND must be an absolute path")
def notify(title, payload):
# Tessera does not notify personnel; this customer-owned wrapper must.
notifier_environment = os.environ.copy()
notifier_environment.pop("TESSERA_LEDGER_TOKEN", None)
subprocess.run(
[notifier, title],
check=True,
env=notifier_environment,
input=(
json.dumps(payload, separators=(",", ":"), sort_keys=True) + "\n"
).encode(),
)
try:
request = urllib.request.Request(
STATUS_URL,
headers={
"Accept": "application/json",
"Authorization": f"Bearer {token}",
},
)
with urllib.request.urlopen(request, timeout=20) as response:
status = json.load(response)
if not isinstance(status, dict):
raise ValueError("unexpected status response")
except Exception:
notify(
"Tessera ledger status unavailable",
{"reason": "status_endpoint_unavailable"},
)
raise
needs_review = (
status.get("operational_healthy") is not True
or status.get("period_compliant") is not True
or status.get("changes_detected") != 0
)
if needs_review:
fields = (
"operational_healthy",
"period_compliant",
"changes_detected",
"monitor_status",
"last_evaluation",
"next_evaluation",
"consecutive_failures",
)
notify(
"Tessera ledger needs qualified review",
{field: status.get(field) for field in fields},
)