@mriekki/project-forge 4.8.1 → 4.10.0

package/assets/components.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 2,
   "package": "@mriekki/project-forge",
-  "version": "4.8.1",
+  "version": "4.10.0",
   "defaultProfile": "greenfield-project",
   "profiles": {
     "greenfield-project": {
@@ -13,7 +13,7 @@
   },
   "components": {
     "core": {
-      "revision": "a78c2482f4f559ead8efbab6c25b4b05496db735",
+      "revision": "8796fd8dc22df8b64078e5b460e1008a8c7a5f7d",
       "version": "4.0.0",
       "distribution": "greenfield-workspace",
       "descriptor": "assets/core/distribution.json",
@@ -21,7 +21,7 @@
       "canonicalDescriptor": "distributions/greenfield-workspace.json"
     },
     "deployment": {
-      "revision": "aaf5d24c897b3d89b3d1791c79bed4979414ca40",
+      "revision": "23799aec3e7c9a99873aaf912b040d43658fa4fb",
       "distribution": "greenfield-project",
       "descriptor": "assets/deployment/distribution.json",
       "sourceRoot": "assets/generated/deployment",

package/assets/deployment/distribution.json

@@ -16,6 +16,9 @@
     {"source": "src/project_forge_deployment/box_platform.py", "destination": "tools/project-forge-deployment/project_forge_deployment/box_platform.py"},
     {"source": "src/project_forge_deployment/box_platform_assets.py", "destination": "tools/project-forge-deployment/project_forge_deployment/box_platform_assets.py"},
     {"source": "src/project_forge_deployment/box_platform_remote.py", "destination": "tools/project-forge-deployment/project_forge_deployment/box_platform_remote.py"},
+    {"source": "src/project_forge_deployment/cloudflare_api.py", "destination": "tools/project-forge-deployment/project_forge_deployment/cloudflare_api.py"},
+    {"source": "src/project_forge_deployment/cloudflare_ingress.py", "destination": "tools/project-forge-deployment/project_forge_deployment/cloudflare_ingress.py"},
+    {"source": "src/project_forge_deployment/cloudflare_ingress_remote.py", "destination": "tools/project-forge-deployment/project_forge_deployment/cloudflare_ingress_remote.py"},
     {"source": "src/project_forge_deployment/cli.py", "destination": "tools/project-forge-deployment/project_forge_deployment/cli.py"},
     {"source": "src/project_forge_deployment/doctor.py", "destination": "tools/project-forge-deployment/project_forge_deployment/doctor.py"},
     {"source": "src/project_forge_deployment/entrypoint.py", "destination": "tools/project-forge-deployment/project_forge_deployment/entrypoint.py"},
@@ -26,6 +29,7 @@
     {"source": "src/project_forge_deployment/errors.py", "destination": "tools/project-forge-deployment/project_forge_deployment/errors.py"},
     {"source": "src/project_forge_deployment/home_lab.py", "destination": "tools/project-forge-deployment/project_forge_deployment/home_lab.py"},
     {"source": "src/project_forge_deployment/image_transfer.py", "destination": "tools/project-forge-deployment/project_forge_deployment/image_transfer.py"},
+    {"source": "src/project_forge_deployment/ingress_cli.py", "destination": "tools/project-forge-deployment/project_forge_deployment/ingress_cli.py"},
     {"source": "src/project_forge_deployment/keys.py", "destination": "tools/project-forge-deployment/project_forge_deployment/keys.py"},
     {"source": "src/project_forge_deployment/local_cli.py", "destination": "tools/project-forge-deployment/project_forge_deployment/local_cli.py"},
     {"source": "src/project_forge_deployment/local_runtime.py", "destination": "tools/project-forge-deployment/project_forge_deployment/local_runtime.py"},
@@ -52,6 +56,7 @@
     {"source": "src/project_forge_deployment/teardown_remote.py", "destination": "tools/project-forge-deployment/project_forge_deployment/teardown_remote.py"},
     {"source": "src/project_forge_deployment/topology_cli.py", "destination": "tools/project-forge-deployment/project_forge_deployment/topology_cli.py"},
     {"source": "src/project_forge_deployment/trust.py", "destination": "tools/project-forge-deployment/project_forge_deployment/trust.py"},
+    {"source": "docs/CLOUDFLARE_INGRESS.md", "destination": "docs/project-forge/CLOUDFLARE_INGRESS.md"},
     {"source": "docs/DEVELOPER_ENVIRONMENTS.md", "destination": "docs/project-forge/DEVELOPER_ENVIRONMENTS.md"},
     {"source": "docs/WORKSPACE_INSTANCES.md", "destination": "docs/project-forge/WORKSPACE_INSTANCES.md"},
     {"source": "docs/ENVIRONMENT_PROOF.md", "destination": "docs/project-forge/ENVIRONMENT_PROOF.md"},

package/assets/generated/ASSEMBLY.json

@@ -1,10 +1,10 @@
 {
   "schemaVersion": 2,
   "package": "@mriekki/project-forge",
-  "version": "4.8.1",
+  "version": "4.10.0",
   "components": {
     "core": {
-      "revision": "a78c2482f4f559ead8efbab6c25b4b05496db735",
+      "revision": "8796fd8dc22df8b64078e5b460e1008a8c7a5f7d",
       "version": "4.0.0",
       "distribution": "greenfield-workspace",
       "files": [
@@ -126,7 +126,7 @@
         {
           "source": "core/skills/tear-down/SKILL.md",
           "destination": ".github/skills/tear-down/SKILL.md",
-          "sha256": "7565b5600af2883abfc47bac29abfd056cfa81536c52408b07da82f696b335b8"
+          "sha256": "468314030c6033885c46aba50f54410928cbe44c74d73b998b88338fe495f3d9"
         },
         {
           "source": "core/skills/coach/SKILL.md",
@@ -326,7 +326,7 @@
       ]
     },
     "deployment": {
-      "revision": "aaf5d24c897b3d89b3d1791c79bed4979414ca40",
+      "revision": "23799aec3e7c9a99873aaf912b040d43658fa4fb",
       "distribution": "greenfield-project",
       "files": [
         {
@@ -394,6 +394,21 @@
           "destination": "tools/project-forge-deployment/project_forge_deployment/box_platform_remote.py",
           "sha256": "65de94ac4b6e980d83ce99ea55b9555aa96959c11808cce8c6ed537b27c15533"
         },
+        {
+          "source": "src/project_forge_deployment/cloudflare_api.py",
+          "destination": "tools/project-forge-deployment/project_forge_deployment/cloudflare_api.py",
+          "sha256": "de383926e04f6ebb3b8fd95948b475a9dc40d8da01ff2499afbe0f3a7305d4df"
+        },
+        {
+          "source": "src/project_forge_deployment/cloudflare_ingress.py",
+          "destination": "tools/project-forge-deployment/project_forge_deployment/cloudflare_ingress.py",
+          "sha256": "98c77950df1d0bba36da1244001bdd157251238778e7068be0c6c20d2683d2d4"
+        },
+        {
+          "source": "src/project_forge_deployment/cloudflare_ingress_remote.py",
+          "destination": "tools/project-forge-deployment/project_forge_deployment/cloudflare_ingress_remote.py",
+          "sha256": "35ac39b4f4538d4ff23f68982cc4b176782378cf03539fa51a228becbdfcf4d0"
+        },
         {
           "source": "src/project_forge_deployment/cli.py",
           "destination": "tools/project-forge-deployment/project_forge_deployment/cli.py",
@@ -407,7 +422,7 @@
         {
           "source": "src/project_forge_deployment/entrypoint.py",
           "destination": "tools/project-forge-deployment/project_forge_deployment/entrypoint.py",
-          "sha256": "6b767380f502acf0763b71f46aff6efd62674e63a526ed270097efa68c320a1e"
+          "sha256": "021434f8f601ebbff0aae354e6c6b25b36d598a521a7948d02d5f1cc797c22fd"
         },
         {
           "source": "src/project_forge_deployment/environment_cli.py",
@@ -444,6 +459,11 @@
           "destination": "tools/project-forge-deployment/project_forge_deployment/image_transfer.py",
           "sha256": "dadd1fe7724372a4ca0e04ab2280769b6c2381f0f9ae75a096f6c5a5f5add755"
         },
+        {
+          "source": "src/project_forge_deployment/ingress_cli.py",
+          "destination": "tools/project-forge-deployment/project_forge_deployment/ingress_cli.py",
+          "sha256": "0e4088a17734f560c750528942fbd34d2464bcdd06d60467a9dc684a73fc18e1"
+        },
         {
           "source": "src/project_forge_deployment/keys.py",
           "destination": "tools/project-forge-deployment/project_forge_deployment/keys.py",
@@ -552,17 +572,17 @@
         {
           "source": "src/project_forge_deployment/teardown.py",
           "destination": "tools/project-forge-deployment/project_forge_deployment/teardown.py",
-          "sha256": "08215b8b5fa87ca8abf96f10f38aca0207840bd1b1faf4c2c53cb691caf20a72"
+          "sha256": "0c75bb1ec77218d1b6ee3f54a626556ee46f2de8e91d1e9afa87200bce39254e"
         },
         {
           "source": "src/project_forge_deployment/teardown_cli.py",
           "destination": "tools/project-forge-deployment/project_forge_deployment/teardown_cli.py",
-          "sha256": "214987895cde77648b5274042f1c21557046c3bf76224bfdd415ea34fec3d873"
+          "sha256": "5dbe92b1d5683824bbf3b4892f9099db2d68ad95c0a514bf73f7b596a62775be"
         },
         {
           "source": "src/project_forge_deployment/teardown_remote.py",
           "destination": "tools/project-forge-deployment/project_forge_deployment/teardown_remote.py",
-          "sha256": "ad764f5a67c43f81b4973dd5639b2c28b23ae883a85e5ae29efc14dad506e88e"
+          "sha256": "5a898ee8ce981c60839d12c63a776bf742e2c32bc409fbb29cdfd798cf9baa19"
         },
         {
           "source": "src/project_forge_deployment/topology_cli.py",
@@ -574,6 +594,11 @@
           "destination": "tools/project-forge-deployment/project_forge_deployment/trust.py",
           "sha256": "b143fa828c3a23df3909dacfd78ae56b9ec1159628eb45261d69c0aa6ddd1a7b"
         },
+        {
+          "source": "docs/CLOUDFLARE_INGRESS.md",
+          "destination": "docs/project-forge/CLOUDFLARE_INGRESS.md",
+          "sha256": "e0d95aa8e1c204390a51a7900ef60542537c1a9d2eeb017f34920e8dcb5e8329"
+        },
         {
           "source": "docs/DEVELOPER_ENVIRONMENTS.md",
           "destination": "docs/project-forge/DEVELOPER_ENVIRONMENTS.md",

package/assets/generated/core/core/skills/tear-down/SKILL.md

@@ -1,27 +1,52 @@
 ---
 name: tear-down
-description: "Guided destructive cleanup for local state, one exact repository-defined named environment, or all explicitly configured Project environments. Preserves ownership boundaries and resolved Production-data authorization."
-argument-hint: "[local|<environment>|all]"
+description: "List target-owned Project environments and guide destructive cleanup for local state, one exact named environment, or all explicitly configured Project environments. Preserves ownership boundaries, shared Project Forge infrastructure, and separate Production/public-ingress authorization."
+argument-hint: "[list [<target>]|local|<environment>|all]"
 user-invocable: true
 disable-model-invocation: true
 ---
 
 # Tear Down
 
-`/tear-down` is the human-facing destructive cleanup workflow for repository-owned Project state.
+`/tear-down` is the human-facing inventory and destructive-cleanup workflow for Project-owned deployment state.
 
 Logical environment names are data-driven and are not limited to Staging/Production:
 
 ```text
+/tear-down list production
 /tear-down demo
 /tear-down qa
 /tear-down staging
 /tear-down prod-east
 ```
 
-The skill owns exact scope selection, read-only preflight, destructive preview, and Human-in-the-Loop authorization. Repository-provided deterministic tooling owns deletion mechanics.
+The skill owns target selection, exact scope selection, read-only inventory/preflight, destructive preview, and Human-in-the-Loop authorization. Deployment Kit deterministic tooling owns inventory and deletion mechanics.
 
-## 1. Resolve exact project topology
+## 0. List what is installed before destructive selection
+
+When the Builder asks what is deployed, what can be removed, or invokes `list`, use the Deployment Kit read-only target inventory:
+
+```text
+project-forge-deploy target inventory <target> --json
+```
+
+This is the canonical application-cleanup inventory. It correlates the target's managed runtime, trusted-LAN route, and managed public-ingress ownership into application/environment tear-down candidates while reporting the shared host platform separately.
+
+The command is intentionally independent of the consumer repository. If a consumer checkout or even its GitHub repository has already been deleted, the same installed/standalone Deployment Kit command may still inventory the target from host-owned metadata and user-scoped target access configuration.
+
+Inside a consumer repository, use the repository-provided Deployment Kit launcher when that is the installed contract. Detect the current platform/runtime and invoke the portable Python entrypoint or installed `project-forge-deploy`; do not assume PowerShell syntax or Windows-only paths. macOS/Linux shells and Windows/PowerShell must reach the same deterministic CLI semantics.
+
+Do not reconstruct inventory by ad-hoc `ssh`, `docker ps`, filesystem listing, or Cloudflare commands when Deployment Kit target inventory is available.
+
+If a public-ingress scope cannot be inferred from the application/environment name, pass only the exact additional scope established by repository topology or trusted operator evidence:
+
+```text
+--ingress-scope <scope>
+```
+
+Listing is read-only. It does not authorize later deletion.
+
+## 1. Resolve exact project topology when the repository exists
 
 Prefer:
 
@@ -37,8 +62,12 @@ If `demo` is configured, `/tear-down demo` means exactly `demo`. If `prod-east`
 
 Never guess a similar environment and never widen scope after failure.
 
+When the repository no longer exists, use target inventory only for target-owned application identity and resource ownership. Do not invent repository-only topology facts. In particular, if a non-literal custom environment's Production classification cannot be established from trusted evidence, stop before destructive authorization rather than weakening the Production-data gate.
+
 ## 2. Select exact destructive scope
 
+The destructive scope contract remains exactly `[local|<environment>|all]`; `list` is a separate read-only discovery mode and never becomes a destructive scope.
+
 ```text
 local
 <one exact repository-defined named environment>
@@ -47,13 +76,15 @@ all
 
 If no scope is named, present only scopes the repository actually supports; never silently default to a Production environment or `all`.
 
+For orphaned deployments where the consumer repository is unavailable, present only exact application/environment candidates returned by target inventory.
+
 `all` means only all explicitly configured scopes for this Project; it never means machine-wide cleanup.
 
 Selecting scope does not authorize deletion. Physical colocation never merges ownership: deleting `demo` must not remove `staging` or `prod-east` merely because they share hardware.
 
-If the requested name is absent from project topology, stop. Do not substitute another environment.
+If the requested name is absent from project topology or target inventory, stop. Do not substitute another environment.
 
-## 3. Resolve Production classification from the deletion set
+## 3. Resolve Production and public-ingress classification from the deletion set
 
 For each selected environment identify:
 
@@ -62,6 +93,8 @@ environment name
 purpose / Production classification
 placement / target
 repository/application identity
+trusted-LAN route
+managed public-ingress scope/hostname, when present
 ownership markers required by installed tooling
 ```
 
@@ -71,7 +104,13 @@ For current Deployment Kit consumers, custom Production names may be passed expl
 --production-environment prod-east
 ```
 
-Use actual installed help/version evidence. If the installed tool cannot preserve a custom Production classification, stop rather than downgrading the destructive gate.
+When target inventory reports an owned public route, preserve its exact environment-to-ingress-scope binding for cleanup, conceptually:
+
+```text
+--public-ingress-scope production=production
+```
+
+Use actual installed help/version evidence. If the installed tool cannot preserve a custom Production classification or exact public-ingress ownership, stop rather than downgrading the destructive gate.
 
 ## 4. Present an exact destructive preview
 
@@ -86,10 +125,17 @@ Selected environments:
   <name> → <placement/target> — <purpose/classification>
 
 Will remove:
-  <only tool-owned resources for exact selected scopes>
+  owned public hostname/DNS + tunnel rule, when selected
+  owned trusted-LAN route
+  owned application container/runtime
+  owned releases, evidence, persistent data, and backups
+  remote immutable image only when no other managed release/container still references it
 
 Will preserve:
-  <shared/unrelated environment and platform resources>
+  shared Project Forge Caddy/network/platform
+  shared Cloudflare tunnel/runtime
+  unrelated Projects/environments
+  remote images still referenced by another managed release/container
 ```
 
 Do not promise deletion of named/shared Docker volumes unless the installed deterministic contract proves exact ownership and explicitly includes them. Do not promise deletion of any shared/unrelated resource whose ownership cannot be proven.
@@ -108,33 +154,45 @@ whenever **any selected environment is Production-class**, require the stronger
 [PRODUCTION DATA DELETE]
 ```
 
+Whenever the reviewed deletion set includes an owned public-ingress route, also require the separate public-ingress removal authorization, conceptually:
+
+```text
+[PUBLIC INGRESS ROUTE REMOVE]
+```
+
 Resolve exact phrases from the installed tool/version. Do not tie the Production-data gate only to literal scope strings such as `production` or `all`; it depends on the actual resolved deletion set.
 
-A prior `/setup`, environment proof, `/deploy`, merge, CI, or other approval never authorizes destructive cleanup.
+A prior `/setup`, environment proof, `/deploy`, merge, CI, public-route registration, or other approval never authorizes destructive cleanup.
 
-If identity, selected environment set, classification, binding, ownership evidence, or deletion set changes after preview, require renewed review/authorization.
+If identity, selected environment set, classification, binding, ownership evidence, public-ingress scope, or deletion set changes after preview, require renewed review/authorization.
 
-## 6. Execute only repository-provided deterministic cleanup
+## 6. Execute only Deployment Kit deterministic cleanup
 
 After authorization, invoke only the approved tear-down command with exact named scopes/bindings. Do not improvise shell commands.
 
 For a generalized current Deployment Kit invocation, exact bindings may look conceptually like:
 
 ```text
---environment-target demo=<target>
 --environment-target staging=<target>
---environment-target prod-east=<target>
+--environment-target production=<target>
+--public-ingress-scope production=production
 --production-environment prod-east
 ```
 
-Use the installed contract rather than inventing flags for older versions.
+Use target inventory output and the installed contract rather than inventing flags for older versions.
 
-Never add machine-wide Docker prune, shared platform/network removal, unrelated environment cleanup, host reprovisioning, target rebinding, credential/trust deletion, or registry-package deletion unless a separate lifecycle operation explicitly owns and authorizes it.
+Public ingress must be removed before the trusted-LAN route/runtime so a public hostname is never deliberately left pointing at a removed origin. The shared Cloudflare tunnel/runtime is host infrastructure and must remain.
+
+Remote image cleanup is bounded: remove only the selected environment's immutable image when no other managed release metadata or container still references it. Never use Docker system/image/volume prune.
+
+Never add machine-wide Docker prune, shared platform/network removal, unrelated environment cleanup, host reprovisioning, target rebinding, credential/trust deletion, registry-package deletion, or shared Cloudflare tunnel deletion unless a separate lifecycle operation explicitly owns and authorizes it.
 
 If aggregate `all` cleanup stops partway, report completed and remaining scopes. Do not manually compensate by deleting the rest.
 
 ## 7. Verify and report outcome
 
-Use repository-provided status/evidence commands when available. Report only observed evidence: requested scope, exact environment names/targets processed, Production-class environments included, local state processed, removed versus already-absent resources, and any remaining scopes after a partial stop.
+Re-run target inventory after cleanup when available. Report only observed evidence: requested scope, exact environment names/targets processed, Production-class environments included, public routes removed/already absent, trusted-LAN routes removed/already absent, runtime/data removal, remote image removed/retained, local state processed, and any remaining scopes after a partial stop.
+
+Shared Project Forge platform state and unrelated application candidates should remain present and unchanged.
 
 When the installed deterministic contract is idempotent, already-absent owned resources should remain safe to re-check/re-run without broadening scope.

package/assets/generated/deployment/docs/CLOUDFLARE_INGRESS.md

@@ -0,0 +1,226 @@
+# Cloudflare Tunnel public ingress
+
+Status: **PARTIAL — IMPLEMENTED MECHANICS; LIVE DOMAIN/GENERATED-CONSUMER PROOF PENDING**
+
+Project Forge models Cloudflare Tunnel as optional **public ingress**, not as a deployment target or remote-management transport.
+
+The supported shape is:
+
+```text
+placement: remote-target
+adapter: remote-ssh
+exposure: public
+ingress provider: cloudflare-tunnel
+```
+
+`remote-ssh` continues to own verified workstation-to-target management. Cloudflare Tunnel owns only internet-facing application ingress.
+
+## Architecture
+
+```text
+Internet
+  -> Cloudflare edge / public DNS / HTTPS
+  -> remotely managed Cloudflare Tunnel
+  -> cloudflared container on the selected Ubuntu target
+  -> shared Project Forge caddy-net
+  -> project-forge-caddy:80
+  -> existing Project Forge application container
+```
+
+The cloudflared runtime publishes no host ports. It initiates outbound connections to Cloudflare and joins the existing shared Docker network.
+
+Public routes do **not** replace the trusted-LAN Route Registry. Each public Cloudflare hostname forwards to the shared Caddy container while setting `originRequest.httpHostHeader` to an already-owned `.local` Project Forge hostname. Caddy therefore reuses the existing Project/environment route and upstream ownership contract.
+
+Example:
+
+```text
+inventory.example.com
+  -> Cloudflare Tunnel
+  -> http://project-forge-caddy:80
+     Host: inventory-production.local
+  -> existing Caddy route
+  -> inventory Production container
+```
+
+## Shared versus Project-owned state
+
+The shared ingress scope owns:
+
+- one remotely managed Cloudflare Tunnel identity;
+- one cloudflared container;
+- the host-side tunnel token;
+- the Cloudflare account/zone/tunnel non-secret identifiers;
+- the connector Compose definition;
+- a host-side public-route ownership registry.
+
+A Project/environment public route owns:
+
+- exact `ownerRepo`, environment, app slug and route ID;
+- one exact public hostname;
+- one exact existing `.local` origin hostname;
+- one exact Cloudflare tunnel ingress rule;
+- one exact proxied Cloudflare CNAME record.
+
+Removing a Project route must preserve the shared tunnel, cloudflared runtime, Caddy platform, unrelated DNS records and unrelated Projects.
+
+## Secrets boundary
+
+The Cloudflare API token is workstation-only. It is read from:
+
+```text
+PROJECT_FORGE_CLOUDFLARE_API_TOKEN
+```
+
+The token is never accepted as a CLI argument and is not written to:
+
+- Git;
+- `PROJECT_BOOTSTRAP.json`;
+- `DEPLOYMENT_TOPOLOGY.json`;
+- the portable Project Forge developer profile;
+- the Production host;
+- command-line process arguments.
+
+The remotely managed Tunnel token is retrieved only when applying shared ingress. It is streamed through the existing verified SSH operation and written beneath the selected root-owned ingress scope. It is not printed or returned in plans/status.
+
+Re-applying shared ingress force-recreates the cloudflared container after securely replacing the token file, so refreshed Tunnel credentials are actually consumed by the running connector.
+
+## Shared runtime commands
+
+Read-only:
+
+```text
+project-forge-deploy ingress cloudflare status <target> --scope production
+project-forge-deploy ingress cloudflare doctor <target> --scope production
+```
+
+Configure/create/adopt the shared scope after the domain exists:
+
+```text
+project-forge-deploy ingress cloudflare configure <target> \
+  --scope production \
+  --zone example.com
+```
+
+The write requires:
+
+```text
+[HOST PUBLIC INGRESS WRITE]
+```
+
+The default tunnel name is:
+
+```text
+project-forge-<scope>
+```
+
+An existing tunnel is adopted only when it is remotely managed and has no application ingress rules beyond the final fail-closed `http_status:404` rule. Project Forge never silently takes over a tunnel with existing application configuration.
+
+## Project public routes
+
+Inventory:
+
+```text
+project-forge-deploy ingress cloudflare route inventory <target> --scope production
+```
+
+Register:
+
+```text
+project-forge-deploy ingress cloudflare route register <target> \
+  --scope production \
+  --owner-repo owner/repository \
+  --environment production \
+  --app-slug inventory \
+  --public-hostname inventory.example.com \
+  --origin-hostname inventory-production.local
+```
+
+Registration requires:
+
+```text
+[PUBLIC INGRESS ROUTE WRITE]
+```
+
+Remove:
+
+```text
+project-forge-deploy ingress cloudflare route remove <target> \
+  --scope production \
+  --owner-repo owner/repository \
+  --environment production \
+  --app-slug inventory
+```
+
+Removal requires:
+
+```text
+[PUBLIC INGRESS ROUTE REMOVE]
+```
+
+## Route safety
+
+Before publishing a hostname, Deployment Kit verifies:
+
+1. the selected shared Cloudflare ingress scope is ready;
+2. the exact Project/environment `.local` route already exists and owns the requested origin hostname;
+3. the public hostname is not owned by another managed Project route;
+4. the Cloudflare tunnel configuration has the expected final fail-closed 404 rule;
+5. no conflicting tunnel ingress rule exists;
+6. no conflicting DNS record exists;
+7. any existing DNS record exactly matches Project Forge's tunnel target and ownership marker.
+
+The current partial adapter intentionally supports one first-level subdomain beneath the selected zone, such as `inventory.example.com`. Deeper names such as `api.inventory.example.com` require an explicit certificate/support review rather than being silently accepted.
+
+## Domain is deliberately late-bound
+
+A Builder does not need a domain to generate or develop a Project.
+
+Bootstrap may record:
+
+```text
+exposure: public
+ingress.provider: cloudflare-tunnel
+ingress.bindingState: deferred
+```
+
+without a zone or public hostname. Once a domain is registered and active in Cloudflare, environment setup/readiness can bind the shared ingress scope and each Project can register its exact public hostname. Regeneration is not required merely to choose the domain later.
+
+The shared Cloudflare zone is environment infrastructure and should not be copied into every Project as a credential-like default. The exact application hostname remains Project/environment state.
+
+## Current cloudflared runtime
+
+The first partial implementation selects Cloudflare release `2026.10.4` and pins the actual Docker pull to the verified multi-platform image index digest:
+
+```text
+cloudflare/cloudflared:2026.10.4@sha256:c6c7ae1d5dfdcb094ad344ed68ccffc26635c9c6be80965664c33baf064b0515
+```
+
+`latest` is never used, and a mutable tag is not the final runtime identity. Promotion from `partial` to `supported` remains blocked until the package/release process and unrelated generated consumers prove this pinned artifact together with the live Cloudflare integration path.
+
+## Required live proof before support promotion
+
+At minimum:
+
+1. create/adopt a real remotely managed Tunnel without manually logging into the Ubuntu host;
+2. install cloudflared through verified Project Forge SSH and prove no inbound host/router port is required;
+3. publish a real first-level hostname and verify external HTTPS reaches the expected Project container;
+4. publish a second unrelated Project through the same shared scope and prove isolation/collision checks;
+5. remove one Project route while preserving the other Project and the shared tunnel;
+6. exercise DNS/provider failure rollback;
+7. exercise changed host/provider state and prove stale plans fail closed;
+8. prove separate logical Production/Staging scopes when both are configured;
+9. prove generated/default-branch CI and human workspace acceptance.
+
+Tunnel connector health alone is not sufficient application evidence. Final Production readiness must include an external HTTPS application probe.
+
+## Deliberate V1 exclusions
+
+- Cloudflare Access / Zero Trust identity policy;
+- wildcard DNS publication for arbitrary applications;
+- direct public router/firewall fallback;
+- automatic domain purchase or registrar mutation;
+- deeper-than-first-level public hostnames;
+- implicit adoption of existing unmanaged Tunnel/DNS rules;
+- deleting a shared Tunnel as part of normal Project tear-down.
+
+These remain separate capabilities or future decisions.