| # Optional persistent controller | |
| This directory contains provider-neutral deployment examples for running the | |
| benchmark controller away from a developer laptop. It does not identify or | |
| grant access to any hosted Markov infrastructure. | |
| For AWS: | |
| 1. Copy `role-policy.example.json` and replace the three `REPLACE_*` tokens. | |
| 2. Create an EC2 role with that policy and `trust-policy.json`. | |
| 3. Launch an Amazon Linux controller in your account and run `bootstrap.sh`. | |
| 4. Install this repository at `/opt/autocad-bench`. | |
| 5. Copy `autocad-bench.service.example`, choose your config and output paths, | |
| and install it as a systemd unit. | |
| Provider API keys should be delivered through a root-owned environment file or | |
| your own secret manager. Do not commit credentials or generated per-run units. | |
| The controller and Windows worker roles should use least-privilege policies | |
| scoped to resources in your account. | |
| Recovery is infrastructure-plugin driven. See `docs/cloud-controller.md` and | |
| `docs/infrastructure-plugins.md`. | |