# Operations architecture — HOLD

The current repository contains historical and prototype operational source,
but no production operation is authorized. Canonical launchers enter the fixed
isolated protection bootstrap and receive a terminal `HOLD`; legacy routes that
cannot enter it are non-mutating refusal shims.

Do not copy credentials, enable live configuration, start services, expose
ports, or register unattended restart from this checkout. Production operation
requires native containment, complete source-boundary coverage, an externally
attested HNC ledger head, signed packaging, and provider-side read-back.