Access boundary: Restricted operator authority required.
Implemented operational tooling; changes require explicit authority and exact-source proof.
Surfaces: Authorised operator/CI tooling and private services; anonymous monitoring has no workshop authority.
Read the engineering guide · All features
Capabilities
- Interactive/bulk queues, transactional outbox and idempotence
- Authenticated provider callbacks and logs without sensitive content
- Private read-only Telnyx operator inspection reports bounded callback status/canonical-match booleans without raw URLs or credential extraction; fresh provider state requires separate proof
- Reconciliation, bounded recovery and dead-letter queues
- Ordered D1 migrations, integrity and restore bookmark
- Private scanner, renderer and validator releases from clean main; loopback qualification bridge with temporary secret, Origin refusal and no secret transfer; validator operators check Horizon closed on canonical guteneo.com only
- Backend/security/browser suites and exhaustive CI; basic validator max 1, 5-second idle, qualified JVM corpus to 100 pages/9.887 MiB; measured local CPU savings do not prove hosted cost
- Release from clean, synchronized, verified main
- Release manifests contain canonical public assets with exact byte hashes; shared application/preview redirects preserve old page/download links without duplicate alias files; unexpected redirects fail served verification; retired workers.dev/preview closure has separate evidence
- Local production monitor uses bounded anonymous canonical reads and retired-host refusal checks, page hashes, private-access refusal and 120-second staleness; partial feature proof, no sends or permanent task
- Idempotent cursor-wrap purge with tenant-bound tombstones/success audit and R2/audit failure recovery without recounting completed purges
- Targeted CI checkout preserves suites and published media; excludes immutable work archives and prefers official Ubuntu mirrors without dropping tests
- Explicitly authorised daily antivirus maintenance and six-hour exact hosted-health/signature/token watchdog; visible failure without customer scans/sends; GitHub outage requires independent monitoring
- One source version with release comparison; dependency updates qualified by audit/tests/exact build without paid configuration
- Dated high/critical registry advisory gate via audit:dependencies does not guarantee unknown-defect absence
- Repository standards and automated checks require English authored sources, valid English routes and synchronized feature/developer documentation
- Separate secure render/deposit queue work, bounded lease reconciliation and shared/personal retention cleanup; revocation, erasure, acquisition and immutable evidence remain distinct
- Documented provider/tariff maintenance separates official price, private account observation, immutable quote and actual outcome; expiry blocks new work without rewriting approved commitments
REST operations
GET /api/health
Read the REST integration guide for authentication, errors and contract discovery.