🚦 Operations

Operations are split between the app service and this Quartz wiki. The app is protected by Authelia because generation can spend local model quota. The wiki is public because it is documentation and audit evidence.

• pages:
  • deploy:
    • systemd service shape
    • nginx app and wiki routing
    • Authelia boundary
    • certificate process
  • wiki-publish:
    • required wiki files
    • content rules
    • publish command order
  • verification:
    • JSX proof
    • build and source residue checks
    • API and omp bridge smokes
    • browser and access-gate checks

Operator rules

• do not publish completion claims before source and live checks agree
• keep machine-specific absolute home paths out of wiki pages
• keep loopback addresses out of published prose and examples
• use placeholders such as ${APP_ROOT}, ${WIKI_ROOT}, ${BACKEND_ORIGIN}, and ${BUN} in public snippets
• treat inherited archive claims as evidence, not truth