docs/architecture/Operations.md

Operations architecture — HOLD

The current repository contains historical and prototype operational source, but no production operation is authorized. Canonical launchers enter the fixed isolated protection bootstrap and receive a terminal HOLD; legacy routes that cannot enter it are non-mutating refusal shims.

Do not copy credentials, enable live configuration, start services, expose ports, or register unattended restart from this checkout. Production operation requires native containment, complete source-boundary coverage, an externally attested HNC ledger head, signed packaging, and provider-side read-back.