Skip to main content

V6-202 · Owner action · Private backend fill

Owner Backend Fill Sheet

owner_backend_copy_ready_fill_sheet_status=PASS_OWNER_BACKEND_COPY_READY_FILL_SHEET_READY_FAIL_CLOSED. This mobile page gives copy-ready guidance for PRIVATE_BACKEND_OWNER_VALUES.tsv so the self-hosted sovereign backend can move toward provisioning with no secret values published.

Fields mapped

14

Public-safe guidance

4

Owner-private values

10

Post-fill gates

18

Fill rules

  • • Fill only PRIVATE_BACKEND_OWNER_VALUES.tsv; do not put private values in public pages.
  • • Use secret-manager references, never raw passwords, tokens, or private keys.
  • • Every row needs evidence_uri_or_record, approved_by, and approved_at.
  • • Run the full post-fill validation chain and stop at the first failed gate.
  • • Do not create credentials, DNS changes, server resources, live learner data, or class enrollment until the safety switch returns authorized.

Owner-private fields still required

  • selected_provider_or_host
  • server_region_or_location
  • monthly_budget_ceiling_usd
  • ops_owner_name
  • ops_owner_contact
  • backup_target
  • restore_drill_deadline
  • incident_contact
  • approved_by
  • approved_at

Post-fill validation chain

  1. npm run owner:backend-private-intake-audit
  2. npm run owner:private-intake:completion
  3. npm run owner:post-fill-runbook
  4. npm run backend:safety-switch
  5. npm run backend:self-hosted-dry-run-verify
  6. npm run backend:guarded-execution-validate
  7. npm run backend:api-regression-gate-validate
  8. npm run runtime:sovereign-contract-validate
  9. npm run security:secret-injection-gate-validate
  10. npm run runtime:production-env-readiness-validate
  11. npm run security:app-headers-validate
  12. npm run domain:cutover-preflight-validate
  13. npm run domain:live-production-probe-validate
  14. npm run mobile:authenticated-full-lms-validate
  15. npm run transfer:private-evidence-leak-guard
  16. npm run launch:preflight-current
  17. npm run status:generate && npm run status:validate
  18. npm run build
This is a fill sheet only. It does not fill the official intake, store secrets, create credentials, provision infrastructure, change DNS, open classes, appoint reviewers, or clear school-opening authority. public_release=false remains enforced.