Revise the main-to-live deploy plan against 55b74275 (Libby's 11 points) #18
2026-11-09
Deploy plan: list the remaining unstated-as-unverified host facts, fix line markers, Persona picture cite
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Deploy plan: rehearsal env turns off the flags whose keys are stripped; mark unverified host facts
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Deploy plan: the live key ring, a rehearsal env outside /root, readyz with the live Host, stripped secrets
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
docs: revise the main-to-live deploy plan against main
55b74275
Targets 55b74275 (#11 and #17 in main; #15 docs only). #11 signs everyone out
once. Lists the validator's required keys by name, NetworkTagSecret (32+
chars) as a hard startup failure, put into step 3. Rehearsal through
sudo -u postgres and one start on a separate env file, scratch connection
string, throwaway KeysPath and a port other than 5080; no dotnet ef. Backs up
the data-protection key ring. Uses the real log files with a baseline count.
Notes bifrost-watchdog-notice.timer.
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>