test steps
15
FORWAID Status Hub
Status / Test Entry
Single read-only entry for Founder remote testing and OneCloud route discovery. It does not create accounts, launch workers, write storage, approve billing, publish Lovable, or send customer content.
capabilities
11
handoff contracts
2
action intent
false
Gate Matrix
What can be tested now / what remains held
pass
Release item
Remote Codex Drops status mirror
PLT-CODEX-001 · same_machine_rehearsal_pass_remote_transport_pending
Next: Run a remote PC readonly Drop roundtrip: remote writes Drop, current runner executes readonly audit, remote reads callback.
pass
Release item
Account / Entitlement / Credits read model
platform-entitlement-read-model-v0.1 · read_only_preview · 3/5 app slots
Next: Connect Store install requests, account admin, and OneCloud status to this read-only snapshot before enabling backend mutations.
pass
Release item
Store install / request / approval draft queue
App Detail uses Store request draft queue with review status and handoff target.
Next: Route approved preview drafts to real account admin only after backend entitlement design.
pass
Release item
Drive / Sync / Content Maker / Drops loop
platform-source-to-output-read-model-v0.1 · localDriveDocuments=1
Next: Approve real source storage and Drive persistence design, then run readonly remote Drops roundtrip before any patch or production write.
pass
Release item
Web / Pad / Pod / OneCloud same capability map
platform-multisurface-capability-v0.1 · 能力在云端，形态在龙虾，状态通过 OneCloud 同步
Next: Wire this read model into Pod/Harness and OneCloud node status before enabling any local-node trigger or runtime launch.
pass
Release item
OneCloud capability handoff manifest
forwaid-onecloud-capability-manifest-v0.1 · handoffContracts=2
Next: OneCloud consumes handoffContract as read-only route/output metadata before any action intent or local-node writeback.
hold
Release item
Oneclaw local file bridge
Browser-to-local-node file bridge is a gated integration because it can pass file payloads to a host surface.
Next: Founder and Release Gate must approve exact host origin, payload redaction, file-size limits, callback contract, and local-node ownership before any bridge code is shipped.
hold
Release item
Production integration
All real production switches remain false by design.
Next: Founder and Release Gate must separately approve real AI, storage, remote runtime, payment/billing, and customer-send gates.
Next smallest action
If build remains PASS, push preview changes to ai-site-creator.git for Founder remote testing; Lovable publish remains manual.
OneCloud Handoff
Founder test route to callable capability
T-001
shell
Open status hub
/status
Open the single status hub that links Founder test, Release Gate, OneCloud, instances, account, Drive, Studio, and Store orders.
capability
PLT-STATUS-001
Status hub
read only preview
trigger: no_trigger
T-002
shell
Open main Pad shell
/home
Embed or open the main Pad shell and inspect cloud-owned surfaces.
capability
PLT-SHELL-001
Pad shell
ready to open
trigger: no_trigger
T-003
store
Open official Store
/store
Open official App catalog, App Detail, install request, and entitlement preview.
capability
PLT-STORE-001
Official Store
ready to open
trigger: no_trigger
T-004
store
Open cart and order draft
/store/orders
Inspect cart, billing draft, entitlement gate, and output handoff preview.
capability
PLT-CART-001
Cart / Orders
read only preview
trigger: no_trigger
T-005
account
Open account and entitlement status
/account/status
Inspect account tree, customer ownership, distribution upstream, enablement queue, and mutation gates.
capability
PLT-ACCOUNT-001
Account / Entitlement status
read only preview
trigger: no_trigger
T-006
instances
Open customer instance validation
/instances/status
Inspect customer instance route readiness, owner-thread mapping, Mart/Pod links, and Founder test queue.
capability
PLT-INSTANCE-001
Customer instance validation
read only preview
trigger: no_trigger
T-007
drive
Open Drive source-to-output status
/drive/status
Show source-to-output status, upload analysis preview, and save queue state.
capability
PLT-DRIVE-001
Drive / Sync preview
read only preview
trigger: no_trigger
T-007A
drive
Verify Drive output handoff consumers
/drive/status
Show source-to-output status, upload analysis preview, and save queue state.
capability
PLT-DRIVE-001
Drive / Sync preview
read only preview
trigger: no_trigger
T-008
studio
Open Studio / Dock workflow status
/studio/status
Show Dock intake, Sync routing, Studio workflow, Drive output, Pod preview, and Remote Drops gates.
capability
PLT-DOCK-001
Dock / Studio workflow
read only preview
trigger: no_trigger
T-009
studio
Verify Studio output ownership
/studio/status
Show Dock intake, Sync routing, Studio workflow, Drive output, Pod preview, and Remote Drops gates.
capability
PLT-DOCK-001
Dock / Studio workflow
read only preview
trigger: no_trigger
T-010
onecloud
Open OneCloud manifest
/onecloud/manifest
No manifest capability currently maps to this route.
capability
unmapped
Add manifest mapping before OneCloud depends on it.
unmapped
trigger: blocked_until_mapping
Integration rule
OneCloud should open or embed these cloud-owned routes first. It must not redefine the App registry, entitlement model, Remote Drops protocol, or production write rules.
Primary Routes
Open in this order
Remote Test Checklist
/test/statusRun this first after GitHub push and Founder manual Lovable publish.
Release Gate
/release/statusCheck production flags, held items, and Founder test surfaces.
OneCloud Bridge
/onecloud/statusVerify OneCloud can read cloud-owned capability routes without action intent.
Customer Instances
/instances/statusCheck Brenda, 潜心教育, FF Academy, Mitch, 朗新伦 route readiness.
Account / Entitlement
/account/statusInspect account tree, owner-thread gaps, and entitlement mutation gates.
Drive / Source Output
/drive/statusInspect upload, analysis, save-to-Drive, and persistence gates.
Studio / Dock
/studio/statusInspect Dock intake, Sync routing, Studio workflow, Drive output, Pod preview.
Store Orders
/store/ordersInspect cart, order draft, billing draft, and entitlement gate.
Combined JSON preview
Manifest{
"checklist": {
"snapshotId": "forwaid-founder-remote-test-checklist-v0.1",
"status": "read_only_preview",
"targetRepo": "site-creator/main",
"cloudTestAssumption": "after_github_push_and_founder_lovable_publish",
"generatedFrom": {
"entitlement": "platform-entitlement-read-model-v0.1",
"drive": "platform-source-to-output-read-model-v0.1",
"studio": "platform-studio-dock-workflow-v0.1",
"instances": "forwaid-customer-instance-validation-v0.1",
"onecloud": "forwaid-onecloud-unified-status-v0.1",
"release": "platform-a-side-release-readiness-v0.1"
},
"totals": {
"steps": 15,
"readyForSmoke": 3,
"readOnlyStatus": 10,
"manualPublishRequired": 1,
"backendBlocked": 1
},
"steps": [
{
"id": "T-001",
"group": "shell",
"label": "Open status hub",
"route": "/status",
"state": "ready_for_founder_smoke",
"expectedEvidence": "Status hub opens and links all current A-side testing surfaces.",
"failSignal": "Founder still needs to remember separate status URLs manually.",
"noTouch": "No mutation, no action intent."
},
{
"id": "T-002",
"group": "shell",
"label": "Open main Pad shell",
"route": "/home",
"state": "ready_for_founder_smoke",
"expectedEvidence": "Pad shell opens, Dock/Pad/Pod visual frame remains consistent.",
"failSignal": "Route opens outside the platform frame or shows stale Market-first surface.",
"noTouch": "No login mutation, no account write."
},
{
"id": "T-003",
"group": "store",
"label": "Open official Store",
"route": "/store",
"state": "ready_for_founder_smoke",
"expectedEvidence": "Store shows FORWAID official capabilities, not institution Market listings.",
"failSignal": "Market/Mart/commerce listings replace official Store catalog.",
"noTouch": "No install mutation, no payment execution."
},
{
"id": "T-004",
"group": "store",
"label": "Open cart and order draft",
"route": "/store/orders",
"state": "read_only_status",
"expectedEvidence": "Cart draft, billing draft, entitlement gate, and customer output handoff render as preview.",
"failSignal": "Payment, billing, or entitlement unlock appears live.",
"noTouch": "No payment, billing, or entitlement mutation."
},
{
"id": "T-005",
"group": "account",
"label": "Open account and entitlement status",
"route": "/account/status",
"state": "read_only_status",
"expectedEvidence": "Account tree renders 20 tracked accounts and mutation gates are false.",
"failSignal": "Account create, role update, or entitlement unlock is available.",
"noTouch": "No account, role, seat, or distribution mutation."
},
{
"id": "T-006",
"group": "instances",
"label": "Open customer instance validation",
"route": "/instances/status",
"state": "read_only_status",
"expectedEvidence": "1 route-ready surfaces, 1 output handoff, and 14 missing-owner accounts are visible.",
"failSignal": "Brenda, 潜心教育, FF Academy, or 朗新伦 routes are mixed or missing.",
"noTouch": "No customer data write, no customer send."
},
{
"id": "T-007",
"group": "drive",
"label": "Open Drive source-to-output status",
"route": "/drive/status",
"state": "read_only_status",
"expectedEvidence": "5 source-to-output steps render with storage gates disabled.",
"failSignal": "Upload/storage persistence appears live without backend gate.",
"noTouch": "No upload, bucket, storage, or persistence write."
},
{
"id": "T-007A",
"group": "drive",
"label": "Verify Drive output handoff consumers",
"route": "/drive/status",
"state": "read_only_status",
"expectedEvidence": "1 Drive output handoff consumer renders with CM-DRIVE-DOC-PREVIEW-001, CM-DRIVE-SAVE-QUEUE-mock-account-001, and customer/Pod route links.",
"failSignal": "Generated Drive output has no visible customer consumer, handoff id, or persistence gate.",
"noTouch": "No Drive persistence, no customer send, no storage write."
},
{
"id": "T-008",
"group": "studio",
"label": "Open Studio / Dock workflow status",
"route": "/studio/status",
"state": "read_only_status",
"expectedEvidence": "6 Dock-to-Studio workflow steps render with worker gates disabled.",
"failSignal": "Worker execution, canvas persistence, or Drop creation appears live.",
"noTouch": "No worker launch, no Drop create, no live sync."
},
{
"id": "T-009",
"group": "studio",
"label": "Verify Studio output ownership",
"route": "/studio/status",
"state": "read_only_status",
"expectedEvidence": "Output ownership maps CM-DRIVE-DOC-PREVIEW-001 to 6-1-1 潜心教育 and shows drive_persistence_disabled.",
"failSignal": "Generated output has no account owner, no Drive queue, or implies live persistence/customer share.",
"noTouch": "No Drive persistence, no customer share, no account mutation."
},
{
"id": "T-010",
"group": "onecloud",
"label": "Open OneCloud manifest",
"route": "/onecloud/manifest",
"state": "read_only_status",
"expectedEvidence": "Capability manifest lists cloud-owned surfaces OneCloud can open or embed.",
"failSignal": "Manifest implies OneCloud owns cloud capability definitions.",
"noTouch": "No local node protocol change, no runner write."
},
{
"id": "T-011",
"group": "onecloud",
"label": "Open OneCloud unified status",
"route": "/onecloud/status",
"state": "read_only_status",
"expectedEvidence": "11 capabilities render and actionIntentAllowed=false.",
"failSignal": "create_drop, action intent, or production mutation is allowed.",
"noTouch": "No Remote Drops runner/protocol change."
},
{
"id": "T-012",
"group": "release",
"label": "Open Release Gate status",
"route": "/release/status",
"state": "read_only_status",
"expectedEvidence": "8 release items render and production flags remain disabled.",
"failSignal": "Production ready, payment, customer-send, or Lovable auto-deploy appears enabled.",
"noTouch": "No release approval, no Lovable deploy."
},
{
"id": "T-013",
"group": "release",
"label": "Founder Lovable publish check",
"route": "/test/status",
"state": "manual_lovable_publish_required",
"expectedEvidence": "After GitHub push, Founder manually publishes Lovable before remote browser smoke.",
"failSignal": "Cloud URL does not reflect latest GitHub commit after manual publish.",
"noTouch": "Assistant does not perform Lovable publish."
},
{
"id": "T-014",
"group": "release",
"label": "Backend integration gate",
"route": "/release/status",
"state": "blocked_until_backend_gate",
"expectedEvidence": "Real AI/storage/payment/customer-send remain explicitly held.",
"failSignal": "Any production integration becomes available without Founder gate.",
"noTouch": "No Auth/RLS/Supabase/schema/payment/billing/secrets/customer-send."
}
],
"productionBlockedUntilFounderGate": [
"real AI adapter",
"real upload/storage",
"Supabase schema/RLS/Auth mutation",
"payment/billing",
"customer-send/live publishing",
"Remote Drops runner protocol or OneCloud local node",
"Lovable auto publish"
],
"nextGate": "Founder manually publishes Lovable, runs this route checklist remotely, then reports first failing route or approval to move one backend gate into design."
},
"onecloud": {
"snapshotId": "forwaid-onecloud-unified-status-v0.1",
"status": "page_rendered_read_only_preview",
"mode": "not_api_not_action_intent",
"routes": {
"manifest": "/onecloud/manifest",
"status": "/onecloud/status",
"statusHub": "/status",
"testStatus": "/test/status",
"releaseStatus": "/release/status",
"store": "/store",
"account": "/account/status",
"instances": "/instances/status",
"drive": "/home?view=drive",
"driveStatus": "/drive/status",
"dock": "/home?view=dock",
"studioStatus": "/studio/status",
"pod": "/pod"
},
"summary": {
"capabilityCount": 11,
"availableDeepLinks": 3,
"disabledStatusContracts": 3,
"installedAppsPreview": 1,
"requestedAppsPreview": 1,
"sourceToOutputSteps": 5,
"handoffContracts": 2,
"remoteDropsStatus": "same_machine_rehearsal_pass_remote_transport_pending"
},
"gateState": {
"deepLinksReady": true,
"manifestReady": true,
"pageRenderedStatusReady": true,
"machineReadableStatusEndpointLive": false,
"actionIntentAllowed": false,
"remoteDropsCreateAllowed": false,
"productionMutationAllowed": false
},
"nextAllowedStep": "Let OneCloud consume /onecloud/manifest and /onecloud/status as read-only pages before any machine-readable endpoint or action intent."
},
"manifest": {
"manifestId": "forwaid-onecloud-capability-manifest-v0.1",
"status": "read_only_preview",
"owner": "1-2-2 FORWAID A-side",
"consumer": "1-2-3 OneCloud / 1claws",
"principle": "Cloud owns capability definition; OneCloud owns local shape and sync.",
"generatedFrom": {
"multiSurfaceSnapshotId": "platform-multisurface-capability-v0.1",
"entitlementSnapshotId": "platform-entitlement-read-model-v0.1",
"sourceToOutputModelId": "platform-source-to-output-read-model-v0.1",
"remoteDropsCapabilityId": "PLT-CODEX-001"
},
"capabilities": [
{
"capabilityId": "PLT-SHELL-001",
"label": "Pad shell",
"accessMode": "open_deep_link",
"deepLink": "/home",
"readModelRef": "platform-multisurface-capability-v0.1",
"oneCloudUse": "Embed or open the main Pad shell and inspect cloud-owned surfaces.",
"currentStatus": "ready_to_open",
"triggerPolicy": "no_trigger",
"writePolicy": "no_write"
},
{
"capabilityId": "PLT-DRIVE-001",
"label": "Drive / Sync preview",
"accessMode": "read_status",
"deepLink": "/drive/status",
"readModelRef": "platform-source-to-output-read-model-v0.1",
"oneCloudUse": "Show source-to-output status, upload analysis preview, and save queue state.",
"currentStatus": "read_only_preview",
"triggerPolicy": "no_trigger",
"writePolicy": "no_write"
},
{
"capabilityId": "PLT-DOCK-001",
"label": "Dock / Studio workflow",
"accessMode": "read_status",
"deepLink": "/studio/status",
"readModelRef": "platform-studio-dock-workflow-v0.1",
"oneCloudUse": "Show Dock intake, Sync routing, Studio workflow, Drive output, Pod preview, and Remote Drops gates.",
"handoffContract": {
"targetAccountId": "acct-6-1-1-qianxin",
"targetAccountLabel": "6-1-1 潜心教育",
"driveDocumentId": "CM-DRIVE-DOC-PREVIEW-001",
"driveQueueId": "CM-DRIVE-SAVE-QUEUE-mock-account-001",
"driveHandoffId": "CM-DRIVE-HANDOFF-CM-DRIVE-SAVE-QUEUE-mock-account-001",
"customerInstanceRoute": "/client/fuzhou",
"podRoute": "/client/fuzhou/pad",
"persistenceGate": "drive_persistence_disabled"
},
"currentStatus": "read_only_preview",
"triggerPolicy": "no_trigger",
"writePolicy": "no_write"
},
{
"capabilityId": "PLT-STORE-001",
"label": "Official Store",
"accessMode": "open_deep_link",
"deepLink": "/store",
"readModelRef": "platform-entitlement-read-model-v0.1",
"oneCloudUse": "Open official App catalog, App Detail, install request, and entitlement preview.",
"currentStatus": "ready_to_open",
"triggerPolicy": "no_trigger",
"writePolicy": "no_write"
},
{
"capabilityId": "PLT-CART-001",
"label": "Cart / Orders",
"accessMode": "read_status",
"deepLink": "/store/orders",
"readModelRef": "platform-entitlement-read-model-v0.1",
"oneCloudUse": "Inspect cart, billing draft, entitlement gate, and output handoff preview.",
"handoffContract": {
"targetAccountId": "acct-6-1-1-qianxin",
"targetAccountLabel": "潜心教育",
"driveDocumentId": "CM-DRIVE-DOC-PREVIEW-001",
"driveQueueId": "CM-DRIVE-SAVE-QUEUE-mock-account-001",
"driveHandoffId": "CM-DRIVE-HANDOFF-CM-DRIVE-SAVE-QUEUE-mock-account-001",
"customerInstanceRoute": "/client/fuzhou",
"podRoute": "/client/fuzhou/pad",
"persistenceGate": "drive_persistence_disabled"
},
"currentStatus": "read_only_preview",
"triggerPolicy": "no_trigger",
"writePolicy": "no_write"
},
{
"capabilityId": "PLT-ACCOUNT-001",
"label": "Account / Entitlement status",
"accessMode": "read_status",
"deepLink": "/account/status",
"readModelRef": "platform-entitlement-read-model-v0.1",
"oneCloudUse": "Inspect account tree, customer ownership, distribution upstream, enablement queue, and mutation gates.",
"currentStatus": "read_only_preview",
"triggerPolicy": "no_trigger",
"writePolicy": "no_write"
},
{
"capabilityId": "PLT-INSTANCE-001",
"label": "Customer instance validation",
"accessMode": "read_status",
"deepLink": "/instances/status",
"readModelRef": "forwaid-customer-instance-validation-v0.1",
"oneCloudUse": "Inspect customer instance route readiness, owner-thread mapping, Mart/Pod links, and Founder test queue.",
"currentStatus": "read_only_preview",
"triggerPolicy": "no_trigger",
"writePolicy": "no_write"
},
{
"capabilityId": "PLT-TEST-001",
"label": "Founder remote test checklist",
"accessMode": "read_status",
"deepLink": "/test/status",
"readModelRef": "forwaid-founder-remote-test-checklist-v0.1",
"oneCloudUse": "Open the ordered Founder remote smoke checklist after GitHub push and manual Lovable publish.",
"currentStatus": "read_only_preview",
"triggerPolicy": "no_trigger",
"writePolicy": "no_write"
},
{
"capabilityId": "PLT-STATUS-001",
"label": "Status hub",
"accessMode": "read_status",
"deepLink": "/status",
"readModelRef": "forwaid-status-hub-page",
"oneCloudUse": "Open the single status hub that links Founder test, Release Gate, OneCloud, instances, account, Drive, Studio, and Store orders.",
"currentStatus": "read_only_preview",
"triggerPolicy": "no_trigger",
"writePolicy": "no_write"
},
{
"capabilityId": "PLT-POD-001",
"label": "Pod cockpit",
"accessMode": "open_deep_link",
"deepLink": "/pod",
"readModelRef": "platform-multisurface-capability-v0.1",
"oneCloudUse": "Open the phone-safe cockpit for status, blockers, and Founder decisions.",
"currentStatus": "ready_to_open",
"triggerPolicy": "no_trigger",
"writePolicy": "no_write"
},
{
"capabilityId": "PLT-CODEX-001",
"label": "Remote Codex Drops Gateway",
"accessMode": "prepare_local_node",
"deepLink": "/home?view=dock",
"readModelRef": "same_machine_rehearsal_pass_remote_transport_pending",
"oneCloudUse": "Prepare readonly Drop roundtrip, runner heartbeat, callback readback, and allowlist display.",
"currentStatus": "gate_pending",
"triggerPolicy": "local_node_after_gate",
"writePolicy": "callback_file_only_after_gate"
}
],
"statusEndpoints": [
{
"endpoint": "/onecloud/manifest",
"label": "Capability manifest page",
"reads": [
"platform-multisurface-capability-v0.1",
"platform-entitlement-read-model-v0.1",
"platform-source-to-output-read-model-v0.1",
"same_machine_rehearsal_pass_remote_transport_pending"
],
"currentState": "available_as_page_json_preview",
"enablementGate": "Already safe: page-rendered JSON preview only, no server write."
},
{
"endpoint": "/onecloud/status",
"label": "Unified status endpoint",
"reads": [
"capability manifest",
"Store entitlement",
"Drive queue",
"Remote Drops gate"
],
"currentState": "available_as_page_json_preview",
"enablementGate": "Safe as page-rendered JSON preview; machine-readable API remains disabled."
},
{
"endpoint": "/release/status",
"label": "Release Gate status page",
"reads": [
"A-side readiness",
"Store entitlement",
"Drive queue",
"Remote Drops gate"
],
"currentState": "available_as_page_json_preview",
"enablementGate": "Safe as page-rendered JSON preview; no production approval, deploy, billing, or customer send."
},
{
"endpoint": "/onecloud/status/store",
"label": "Store / entitlement status",
"reads": [
"platform-entitlement-read-model-v0.1"
],
"currentState": "contract_only_disabled",
"enablementGate": "Enable as read-only response only; no install, billing, or role mutation."
},
{
"endpoint": "/account/status",
"label": "Account / entitlement status page",
"reads": [
"platform-entitlement-read-model-v0.1"
],
"currentState": "available_as_page_json_preview",
"enablementGate": "Safe as page-rendered JSON preview; no account create, role mutation, or entitlement unlock."
},
{
"endpoint": "/instances/status",
"label": "Customer instance validation status page",
"reads": [
"forwaid-customer-instance-validation-v0.1"
],
"currentState": "available_as_page_json_preview",
"enablementGate": "Safe as page-rendered JSON preview; no customer data write, account mutation, or customer send."
},
{
"endpoint": "/test/status",
"label": "Founder remote test checklist page",
"reads": [
"forwaid-founder-remote-test-checklist-v0.1"
],
"currentState": "available_as_page_json_preview",
"enablementGate": "Safe as page-rendered checklist; requires Founder manual Lovable publish before cloud smoke."
},
{
"endpoint": "/status",
"label": "Status hub page",
"reads": [
"forwaid-founder-remote-test-checklist-v0.1",
"forwaid-onecloud-unified-status-v0.1",
"forwaid-onecloud-capability-manifest-v0.1"
],
"currentState": "available_as_page_json_preview",
"enablementGate": "Safe as page-rendered navigation hub; no mutation, action intent, or production approval."
},
{
"endpoint": "/onecloud/status/source-output",
"label": "Drive / source-to-output status",
"reads": [
"platform-source-to-output-read-model-v0.1"
],
"currentState": "contract_only_disabled",
"enablementGate": "Enable only after storage and source-ref privacy review stays read-only."
},
{
"endpoint": "/studio/status",
"label": "Studio / Dock workflow status page",
"reads": [
"platform-studio-dock-workflow-v0.1"
],
"currentState": "available_as_page_json_preview",
"enablementGate": "Safe as page-rendered JSON preview; no worker execution, canvas persistence, Drop create, or customer share."
},
{
"endpoint": "/drive/status",
"label": "Drive / source-to-output status page",
"reads": [
"platform-source-to-output-read-model-v0.1"
],
"currentState": "available_as_page_json_preview",
"enablementGate": "Safe as page-rendered JSON preview; no upload, storage, bucket, or Drive persistence write."
},
{
"endpoint": "/onecloud/status/remote-drops",
"label": "Remote Drops release gate status",
"reads": [
"same_machine_rehearsal_pass_remote_transport_pending"
],
"currentState": "contract_only_disabled",
"enablementGate": "Enable read-only status before any create_drop or callback writeback action."
}
],
"phasePlan": [
{
"phase": "Deep links",
"allowedNow": true,
"note": "OneCloud can open or embed cloud-owned surfaces immediately."
},
{
"phase": "Read-only manifest",
"allowedNow": true,
"note": "OneCloud can read this manifest and map routes/status refs without triggering work."
},
{
"phase": "Status endpoint",
"allowedNow": false,
"note": "Add only after the embedded page flow is stable and route consumption is confirmed."
},
{
"phase": "Action intent API",
"allowedNow": false,
"note": "Requires Release Gate approval and readonly remote roundtrip evidence first."
}
],
"noTouchZones": [
"Auth/RLS/Supabase production",
"schema migrations",
"payment/billing",
"secrets/env",
"customer-send/live publishing",
"production data",
"Remote Drops runner protocol changes",
"OneCloud local node runtime activation"
],
"nextGate": "OneCloud should consume deep links and this read-only manifest first; action intent waits for Release Gate."
}
}