fleet: uprootiny ยท INT-131944351 sources live โŸณ
2026-08-01T23:54:09.535945902Z๐Ÿ””1u โ–พ
RELEASE WORKBENCH ยท SNAPSHOT 2026-07-31

From project tree to a witnessed public surface

Choose a project, shape a hostname, dispatch only to a named server, route through Caddy, and verify from outside. Every stage names what is observed, what is inferred, and what still needs approval.

1 deployable ยท pending approval5 nearly deployable3 candidate
1Choose a projectStart from observed repo state, not aspiration. Read the friction and accept the steward handoff.
2Shape the hostnameSuggest a collision-free name, inspect existing DNS, and pause before mutation.
3Dispatch the serverSelect a named fleet box and prove SSH/service prerequisites before touching it.
4Route and sealInstall an isolated Caddy fragment, reload safely, and let ACME obtain the certificate.
5Verify from outsideCheck DNS, HTTP, TLS SNI, health, provenance, and rollback evidence.
SECRET CUSTODYT0 ยท keychain/provider reference only

The wizard never renders secret values, writes them into HTML, or stores them in project provenance. It reports only readiness: available, unavailable, not tested, or intentionally withheld.

Porkbunreadiness checked at mutation timeDNS record operations
SSH keyoperator connection verifiednamed server dispatch
Anthropic/API keysnever needed for static deployservice-specific only
Rollbackrequired before mutationCaddy backup + prior route