Workflow responsibilities
The observability repository builds and tests the application. The wiki repository validates and publishes all reading modes. The infrastructure repository coordinates the host deployment and verifies documentation fingerprints.
Release manifest
A release records infrastructure, portal, and wiki revisions. Deployment uses the validated revisions rather than resolving a moving branch halfway through the run. The coordinator serializes host changes and exposes manual status and rollback operations.
Gates
Required checks include application tests, production build, documentation-source matching, SSH host identity, AI health and inference, portal health, and post-deployment AI compatibility.
Credentials
GitHub secret values are materialized only inside the trusted deployment job. Untrusted pull-request code is never run with production credentials.