Skip to content

docs(runtime): restore canonical cAPI port 3003 truth #35

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
reprewindai-dev merged 2 commits into from
Aug 9, 2026
Merged

docs(runtime): restore canonical cAPI port 3003 truth #35

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
1900759
docs(runtime): restore canonical cAPI port 3003 contract
reprewindai-dev Aug 9, 2026
e81ba8d
docs(runtime): qualify cAPI mirror against port drift
reprewindai-dev Aug 9, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 3 additions & 3 deletions 00_VEKLOM_BIBLE.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
# 00 — VEKLOM BIBLE — READ FIRST

**Mandatory context for every human or AI working in this repo.** Canonical operational source: `reprewindai-dev/veklom-ops-command/00_VEKLOM_BIBLE.md`.
**Mandatory context for every human or AI working in this repo.** Cross-repo canonical operational source: `reprewindai-dev/veklom-ops-command/00_VEKLOM_BIBLE.md`.

Veklom is the sovereign AI **capability control plane / runtime authority layer**. It governs capability, not a permanent fleet of privileged agents.

Expand All @@ -12,6 +12,6 @@ Boundaries: VCCP/UCH/UCR = capability lifecycle; cAPI/Covenant = governed connec

Standalone Veklom products may keep independent UIs. Capability OS consumes their underlying capabilities and rebuilds the OS surface natively.

GitHub is source truth; Coolify is deployment truth. Use Coolify UI/API for management; SSH only for direct host/container verification/ops. Internal ports `3000`/`8000` are valid behind Traefik; the old blanket prohibition is retired. Never commit secrets or hard-code ephemeral runtime IDs.
GitHub is source truth; Coolify is deployment truth. Use Coolify UI/API for management; SSH only for direct host/container verification/ops. For this cAPI repository, the reported production/root service port is `3003`; `3000` and `8000` are forbidden fallbacks. `3003` remains `UNVERIFIED` until deployed SHA, HTTP/protocol identity, container listener, and Traefik routing agree. Never commit secrets or hard-code ephemeral runtime IDs or private infrastructure addresses.

Use evidence labels `VERIFIED_LIVE`, `VERIFIED_REPO`, `CONFIGURED`, `LAST_KNOWN`, `TARGET`, `UNVERIFIED`, `DEMO`, `ARCHIVED`. This Bible supersedes older Golden Bible, agent-alignment, topology, deployment-authority, and port-doctrine docs wherever they conflict.
Use evidence labels `VERIFIED_LIVE`, `VERIFIED_REPO`, `CONFIGURED`, `LAST_KNOWN`, `TARGET`, `UNVERIFIED`, `DEMO`, `ARCHIVED`. Where the cross-repo Bible currently conflicts with this explicit cAPI port contract, record the conflict as deployment/source drift and do not silently adopt a noncanonical fallback.
6 changes: 4 additions & 2 deletions AGENTS.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,8 @@

Before any work, read [`00_VEKLOM_BIBLE.md`](./00_VEKLOM_BIBLE.md).

That file is the canonical Veklom cross-repo architecture/runtime contract. Repo-local source and tests govern Covenant/cAPI implementation details only when they do not conflict with current runtime evidence or the Bible.
That file is the Veklom cross-repo architecture/runtime context. Repo-local source and tests govern Covenant/cAPI implementation details only when they do not conflict with current verified runtime evidence.

Do not infer service placement, ports, health, compliance, or production status from old docs. Use Coolify UI/API/MCP for Coolify management; SSH is for direct host/container verification or operations. Host port `8000` is currently Coolify-owned even though internal Docker port `8000` can be used behind Traefik.
For cAPI, the current reported runtime contract is port `3003`. Ports `3000` and `8000` are forbidden cAPI production/root fallbacks and must not appear as Docker, listener, health-check, Compose, or Traefik defaults. Treat `3003` as `UNVERIFIED` until deployed SHA, HTTP/protocol identity, container listener, and Traefik routing agree.

Do not infer service placement, health, compliance, or production status from old docs. Use Coolify UI/API/MCP for Coolify management; SSH is for direct host/container verification or operations. Never commit secrets or concrete private infrastructure addresses.
Loading