Mission contract
Objective, budget, authority boundary, deliverables, and outcomes remain the top-level frame.
mission.primary=true actors.serve(mission)
The app is dense by design. The public surface is simple by default.
qActor keeps operational state behind auth while making the product premise legible to anyone who lands at the root.
Residual ledger
Work is represented as residuals with explicit states, dependencies, evidence, and closure requirements.
residual.no_silent_loss qflow.converges()
Artifact truth
Memory is projection. Truth comes from committed artifacts and qCert-backed transitions.
artifact.required certificate.validates(artifact)
Trust movement
Trust updates only after certified outcomes, keeping actor and genome changes auditable.
trust.update.requires(cert) genome.patch.requires(admission)
Authentication boundary
The app route is protected now with Cloudflare Access. Public signup should move to EmDash when multi-user onboarding starts.
/ is public. /app is private.
Open app The origin also fails closed without the Cloudflare Access JWT assertion header.