PUBLIC INFRASTRUCTURE / READ-ONLY

CC //OPERATIONS

This portfolio runs as a real Linux service. Operations is the public control room: a larger view of the same verification machine shown on the homepage, bound only to sanitized evidence that can be published safely. If the source is unavailable, the machine says so.

CC // PRODUCTION VERIFICATION MACHINE / FULL CONTROL ROOMTELEMETRY / AWAITINGREAL LINUX / PUBLIC READ-ONLYLOCAL PREVIEW

SOURCE CONTRACT /ops-status.jsonDISPLAY SANITIZEDWRITE AUTHORITY NONE

CCVERIFY COREAWAITING

HOSTAWAITING

KERNEL —

LOAD / 1M: —
RAM: —
DISK: —
UPTIME: —

EDGEAWAITING

HTTPS / TLS / REDIRECT

HTTPS: —
TLS: —
REDIRECT: —
LATENCY: —

SECURITYAWAITING

SANITIZED AGGREGATES ONLY

—REQUESTS

—PROBES

—BLOCKED

—5XX

RELEASEAWAITING

DEPLOY / ROLLBACK

CURRENT: —
PREVIOUS: —
ROLLBACK: —
FREE DISK: —

CONTROL PLANEREAD-ONLY SURFACE / HUMAN-GATED CHANGE

AUTHORITY

Observe. Verify. Never mutate.

The public control room can observe and verify. Anything that changes production stops at an explicit owner boundary.

AUTOMATIC ZONEREAD ONLY

TELEMETRYOBSERVE

Read health, integrity and sanitized system state.

ALLOWED

EVIDENCEVERIFY

Compare state, validate release evidence and classify health.

ALLOWED

OWNER GATECHRISTIAN

Explicit approval boundary

CHANGE ZONELOCKED

PRODUCTIONCHANGE

Deploy, rollback or modify bounded configuration.

APPROVAL

SENSITIVEPRIVILEGED

Firewall, SSH, credentials, packages and destructive operations.

OWNER ONLY

PUBLIC WRITE AUTHORITYNONE

PRODUCTION MUTATIONHUMAN GATED

PRIVILEGED ACTIONSOWNER ONLY

RAW CREDENTIALSNEVER PUBLISHED

SECURITY POSTURE

Claims stay attached to deployed controls.

What is active is shown as active. Future controls remain visibly separated and are never presented as protection that already exists.

CURRENT / VERIFIEDDEPLOYED CONTROLS

ACTIVE

SSHACTIVE

Public-key authentication; remote root login disabled; password and keyboard-interactive authentication disabled; MaxAuthTries restricted.

FIREWALLACTIVE

UFW default-deny incoming with only SSH, HTTP and HTTPS exposed on IPv4 and IPv6.

HTTPSACTIVE

Let's Encrypt, HTTP→HTTPS redirect, HSTS, CSP, nosniff, frame denial, referrer and permissions policies.

SANITIZED TELEMETRYACTIVE

Published aggregates only. Raw IPs, user agents, referrers and query strings stay private.

RELEASESACTIVE

Atomic release directories with current/previous state and rollback capability.

VERIFIED ACTIVITY

Published evidence, not raw logs.

The ledger shows only sanitized events made available by the existing telemetry feed. If nothing is publishable, it stays empty.

SOURCE/ops-status.json

REFRESH60S / VISIBILITY-AWARE

RAW LOGSPRIVATE

CACHENO-STORE

TIMEDOMAINVERIFIED EVENT

NO PUBLISHABLE EVENTSThe source is quiet, unavailable, or has no sanitized event to expose.

PUBLIC READ-ONLYFAIL CLOSED / SANITIZED ONLY

CC // OPERATIONSREAL INFRASTRUCTURE. PUBLIC EVIDENCE. NO WRITE AUTHORITY.