Problem
The graceful-shutdown helper exists, but the HTTP handler still accepts new work while shutdown is in progress.
Why it matters
Requests can race with connection teardown and fail unpredictably during deploys or restarts.
Acceptance criteria
- Return a clear 503 while shutdown is active
- Stop accepting new ingest requests before closing the store
- Add a shutdown integration test
Problem
The graceful-shutdown helper exists, but the HTTP handler still accepts new work while shutdown is in progress.
Why it matters
Requests can race with connection teardown and fail unpredictably during deploys or restarts.
Acceptance criteria