docs: plan for deploying main over the live release #15
2026-11-09
deploy plan: NetworkTagSecret step is re-run safe (never overwrites or duplicates)
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
deploy plan: how to generate ConceptVotes__NetworkTagSecret, defaults satisfy Stripe/Heimdall checks, checkout page check
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Deploy plan: list the remaining unstated-as-unverified host facts, fix line markers, Persona picture cite
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Deploy plan: rehearsal env turns off the flags whose keys are stripped; mark unverified host facts
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Deploy plan: the live key ring, a rehearsal env outside /root, readyz with the live Host, stripped secrets
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
docs: revise the main-to-live deploy plan against main
55b74275
Targets 55b74275 (#11 and #17 in main; #15 docs only). #11 signs everyone out
once. Lists the validator's required keys by name, NetworkTagSecret (32+
chars) as a hard startup failure, put into step 3. Rehearsal through
sudo -u postgres and one start on a separate env file, scratch connection
string, throwaway KeysPath and a port other than 5080; no dotnet ef. Backs up
the data-protection key ring. Uses the real log files with a baseline count.
Notes bifrost-watchdog-notice.timer.
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
docs: drop an unsupported claim from the deploy plan
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
docs: plan for deploying main over the live release
Preconditions, ordered steps, live check and rollback for moving live
67072b2 to main (141 commits, two additive EF migrations, new
Heimdall:AppSecret). Plan only; nothing deployed.
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>