{
  "schema_version": "3.0",
  "title": "Love One Code One Life SuperGateway Deployment Matrix",
  "principle": "One Creation authority, one proof chain, one observable deployment path, many preserved lessons.",
  "governing_source": {
    "repository": "itsausjjmsc/creation",
    "ref": "main",
    "deployment_authority": "creation-supergateway",
    "authority_contract": "integration-index/supergateway/deployment-authority.contract.json",
    "relationship": "Creation SuperGateway is the sole deployment authority. Love Me Too is a bounded Seed and target with its own source repository and Cloudflare project."
  },
  "target_source": {
    "repository": "itsausjjmsc/love-metoo",
    "ref": "main",
    "authority": false,
    "role": "registered implementation source and deployment target",
    "public_root": "public"
  },
  "canonical_remote_deployment": "cloudflare-pages-git-main",
  "restoration_policy": {
    "preserve_every_deployment_lesson": true,
    "reactivate_superseded_workflows": false,
    "proof_must_precede_remote_deployment": true,
    "private_backend_activation_allowed": false,
    "provider_git_integration_active": true,
    "provider_git_integration_authority": false,
    "supergateway_authorization_required": true,
    "direct_human_push_is_authority": false,
    "exact_authorized_commit_promotion_required": true,
    "competing_api_deployment_allowed": false,
    "reason": "The connected Cloudflare Pages Git integration remains the working physical build and deployment transport. Creation SuperGateway audits and authorizes the exact commit, promotes it to the registered provider branch, verifies the deployed-source receipt, and preserves separate human acceptance."
  },
  "anti_drift_gate": {
    "observed_current_path": "Creation SuperGateway authorization promotes one exact target commit to main; Cloudflare Pages Git integration builds it with npm run build and publishes public/.",
    "evidence_source": [
      "Cloudflare Pages bot and provider history",
      "public/deployment-version.json",
      "Creation registry/deployments/love-metoo.production.json",
      "Love Me Too deployment.production.json"
    ],
    "requested_outcome": "Publish the Henley Family Learning Universe and Cookie Adventure recovery tool through the user's private SuperGateway authority.",
    "exact_gap": "The provider-only build shim was replaced by an unconditional blocker and the governing records retired the working Git transport instead of subordinating it to SuperGateway.",
    "proposed_change": "Restore the provider-only build shim, require exact SuperGateway-authorized commit promotion, preserve Cloudflare Git as the physical transport, and keep target proof local and inside the Creation audit mesh without executable GitHub workflows.",
    "authority_grant": "Jeffrey explicitly declared Creation SuperGateway as LAW and the sole authority over private and public deployment layers on 2026-07-30.",
    "competing_path_created": false,
    "rollback": "Use Creation SuperGateway to authorize and promote a previous human-accepted exact commit through the same Cloudflare Git transport.",
    "completion_evidence": "Authorized target commit, provider branch binding, Cloudflare deployed-source receipt, external HTTPS observation, and separate human acceptance."
  },
  "lifecycle": [
    "source",
    "static-build-validation",
    "local-target-proof",
    "private-supergateway-authorization",
    "exact-commit-promotion",
    "cloudflare-git-build",
    "provider-accepted",
    "external-observation",
    "human-acceptance",
    "rollback-to-known-commit"
  ],
  "adapters": [
    {
      "id": "local-static-preview",
      "role": "preview",
      "platform": "Cloudflare Pages local emulator",
      "execution_enabled": true,
      "remote_deployment": false,
      "may_mutate_production": false,
      "authority": false,
      "command": "npm run dev",
      "gate": "Development aid only; trust still requires the declared build and proof commands.",
      "paired_to": "canonical-proof-chain"
    },
    {
      "id": "local-target-proof",
      "role": "validation",
      "platform": "Local Node.js target proof plus Creation audit mesh",
      "execution_enabled": true,
      "remote_deployment": false,
      "may_mutate_production": false,
      "authority": false,
      "command": "npm run verify",
      "gate": "Exact-commit target proof runs before Creation SuperGateway authorization; it never performs provider mutation or acceptance.",
      "paired_to": "canonical-proof-chain"
    },
    {
      "id": "cloudflare-pages-git-preview",
      "role": "preview",
      "platform": "Cloudflare Pages Git integration",
      "execution_enabled": true,
      "remote_deployment": true,
      "may_mutate_production": false,
      "authority": false,
      "trigger": "A non-production branch or provider preview event observed by the existing Cloudflare integration.",
      "build_command": "npm run build",
      "output_directory": "public",
      "observation": "Provider preview evidence only; never production or human acceptance.",
      "paired_to": "cloudflare-pages-git-main"
    },
    {
      "id": "cloudflare-pages-git-main",
      "role": "production-transport",
      "platform": "Cloudflare Pages Git integration",
      "execution_enabled": true,
      "remote_deployment": true,
      "may_mutate_production": true,
      "authority": false,
      "authorized_by": "creation-supergateway",
      "promotion_policy": "exact-authorized-commit-only",
      "project": "love-metoo",
      "source_ref": "main",
      "trigger": "Creation SuperGateway promotes the exact commit bound to a current target audit, full mesh, short-lived authorization, and explicit human intent.",
      "build_command": "npm run build",
      "output_directory": "public",
      "deployed_source_receipt": "https://love-metoo.pages.dev/deployment-version.json",
      "origins": [
        "https://love-metoo.pages.dev",
        "https://lovemetoo.seed-of.life"
      ],
      "approval_boundary": "Creation SuperGateway private control layer; provider branch updates do not grant themselves authority.",
      "observation_entrypoint": "Creation SuperGateway production live checks",
      "rollback": "SuperGateway-authorized promotion of a previous human-accepted exact commit.",
      "evidence_outputs": [
        "target and full-mesh receipts",
        "short-lived deployment authorization",
        "exact provider branch commit",
        "Cloudflare deployment-version source receipt",
        "external route and security observations",
        "separate human acceptance receipt"
      ],
      "paired_to": "canonical-proof-chain"
    },
    {
      "id": "github-actions-api-deploy-disabled",
      "role": "emergency-recovery",
      "platform": "GitHub Actions plus Wrangler API",
      "execution_enabled": false,
      "remote_deployment": true,
      "may_mutate_production": false,
      "authority": false,
      "historical_evidence": [
        "Git history before reconciliation",
        "GitHub Actions run 30478763885"
      ],
      "superseded_by": "cloudflare-pages-git-main",
      "reason_disabled": "It competed with the existing provider transport and lacked the private SuperGateway authorization boundary."
    },
    {
      "id": "cloudflare-workers-legacy",
      "role": "emergency-recovery",
      "platform": "Cloudflare Workers",
      "execution_enabled": false,
      "remote_deployment": true,
      "may_mutate_production": false,
      "authority": false,
      "historical_snapshot": "docs/legacy-workflows/deploy-cloudflare-workers.disabled.yml",
      "superseded_by": "cloudflare-pages-git-main",
      "reason_disabled": "Worker deployment no longer matches the static Pages architecture."
    },
    {
      "id": "generic-verify-legacy",
      "role": "validation",
      "platform": "GitHub Actions",
      "execution_enabled": false,
      "remote_deployment": false,
      "may_mutate_production": false,
      "authority": false,
      "historical_snapshot": "docs/legacy-workflows/verify.disabled.yml",
      "superseded_by": "local-target-proof",
      "reason_disabled": "The generic verifier duplicated the canonical proof chain."
    },
    {
      "id": "private-family-space-backend",
      "role": "production-target",
      "platform": "Unselected",
      "execution_enabled": false,
      "remote_deployment": true,
      "may_mutate_production": false,
      "authority": false,
      "blocked_until": [
        "independent backend threat model",
        "private-data proof matrix",
        "identity and recovery proof",
        "child-choice and guardian review",
        "no-logs infrastructure proof",
        "separate SuperGateway target registration and authorization"
      ],
      "paired_to": "public-blueprint-only"
    }
  ],
  "history": [
    {
      "commit": "bcd88f6a9a92ffdb4c765fbebbb233c52efcaee7",
      "stage": "repository-seed",
      "change": "Initialize the canonical Love Me Too repository expression.",
      "deployment_effect": "No mature deployment contract yet.",
      "restored_as": "origin record",
      "paired_to": "registered target source"
    },
    {
      "commit": "90ba28ec98a589f0000a422486e1755a5e57bb93",
      "stage": "workers-first",
      "change": "Add manual Cloudflare Workers deployment and a generic verifier.",
      "deployment_effect": "Established the first remote path but coupled deployment directly to CI.",
      "restored_as": "disabled workflow snapshots and provider-boundary lesson",
      "paired_to": "cloudflare-workers-legacy"
    },
    {
      "commit": "b8cdcfdfc0a59abe55b5ef1401afbfc82a58e530",
      "stage": "pages-boundary",
      "change": "Remove Workers-only configuration from the Pages project.",
      "deployment_effect": "Separated static Pages hosting from Worker runtime assumptions.",
      "restored_as": "platform boundary rule",
      "paired_to": "cloudflare-pages-git-main"
    },
    {
      "commit": "1d457737e99ab8427ba28d5e13af818738cccf4a",
      "stage": "valid-pages-config",
      "change": "Add valid Cloudflare Pages configuration.",
      "deployment_effect": "Made public the declared build artifact.",
      "restored_as": "Pages output readiness proof",
      "paired_to": "cloudflare-pages-git-main"
    },
    {
      "commit": "debe9d6bfd4ab2808ca1c400068ac354be6618ae",
      "stage": "dev-canopy-deploy",
      "change": "Verify and deploy the Love Me Too development canopy.",
      "deployment_effect": "Connected verification and a Pages preview deployment.",
      "restored_as": "preview adapter ancestry",
      "paired_to": "cloudflare-pages-git-preview"
    },
    {
      "commit": "fb0b621811e913956f83711111677ccaaddad6e3",
      "stage": "explicit-pages-command",
      "change": "Fix explicit Cloudflare Pages commands.",
      "deployment_effect": "Removed ambiguity between Worker and Pages commands.",
      "restored_as": "historical direct-provider lesson",
      "paired_to": "github-actions-api-deploy-disabled"
    },
    {
      "commit": "e1b9be3d3eea446e99390c9528c5129e76f1a57a",
      "stage": "dev-diagnostics",
      "change": "Repair and diagnose Cloudflare development deployment.",
      "deployment_effect": "Added provider and URL diagnostics.",
      "restored_as": "provider and external observation lessons",
      "paired_to": "cloudflare-pages-git-main"
    },
    {
      "commit": "ba0d4cfed28a46e171db581c1aab07013f4eabee",
      "stage": "protected-dev-environment",
      "change": "Attempt to restore a credentialed GitHub deployment environment.",
      "deployment_effect": "Documented API preflight intent but the required secrets were absent.",
      "restored_as": "historical credential-path evidence",
      "paired_to": "github-actions-api-deploy-disabled"
    },
    {
      "commit": "3daf2266a52cca71f3801a61e16c2f0bbda66ab7",
      "stage": "manual-proof-gate",
      "change": "Stop automatic API deployment and require the full proof matrix.",
      "deployment_effect": "Separated proof from the attempted API deploy job.",
      "restored_as": "proof-before-mutation lesson",
      "paired_to": "canonical-proof-chain"
    },
    {
      "commit": "1cfd8deecf9bcb30c97d712777d0a945d5ff41e4",
      "stage": "phased-certification",
      "change": "Add the canonical phased proof matrix and final certification.",
      "deployment_effect": "Made release claims depend on machine-readable phase evidence.",
      "restored_as": "canonical-proof-chain",
      "paired_to": "proof-only-ci"
    },
    {
      "commit": "2adf258e61fecba38d5338b61319100a008db11d",
      "stage": "proof-only-ci",
      "change": "Add proof-only CI with evidence artifacts and no deployment.",
      "deployment_effect": "Made validation observable without granting CI production authority.",
      "restored_as": "proof-only-ci",
      "paired_to": "canonical-proof-chain"
    },
    {
      "commit": "600b3d4cd5b9f480c3aac14b24ff6fcedd002fed",
      "stage": "duplicate-cleanup",
      "change": "Remove duplicate verification and proof-bypassing deployment workflows.",
      "deployment_effect": "Reduced executable remote deployment paths.",
      "restored_as": "disabled snapshots and non-execution invariant",
      "paired_to": "deployment matrix proof"
    },
    {
      "commit": "1f783689c6b169a9938bf6acf7c92e0eac442b7a",
      "stage": "proven-public-blueprint",
      "change": "Release the proven Love Me Too public blueprint.",
      "deployment_effect": "Established the public blueprint while private systems remained inactive.",
      "restored_as": "public baseline",
      "paired_to": "Love One Code One Life lifecycle"
    },
    {
      "commit": "699fc4f20d14545285e079ae84cbb227fe7a9695",
      "stage": "production-authority-reconciliation",
      "change": "Observe the API deployment path fail before provider contact because Cloudflare secrets were absent.",
      "deployment_effect": "Proved that the existing Cloudflare Git integration was the functioning physical transport and that CI must not compete with it.",
      "restored_as": "SuperGateway-subordinate provider transport evidence",
      "paired_to": "cloudflare-pages-git-main"
    }
  ],
  "invariants": [
    "Creation SuperGateway is the sole deployment authority.",
    "Love Me Too remains a separately maintained registered target source, not an authority root.",
    "Exactly one enabled subordinate transport may physically mutate production.",
    "Cloudflare Pages Git integration builds only the exact commit promoted after current SuperGateway authorization.",
    "A direct human push, provider branch update, or GitHub workflow is not Creation authorization by itself.",
    "Executable GitHub workflows remain absent; local target proof and Creation SuperGateway perform validation and observation.",
    "The Cloudflare build runs npm run build and publishes only public.",
    "The deployed artifact emits public/deployment-version.json bound to CF_PAGES_COMMIT_SHA.",
    "Provider acceptance, external observation, and human acceptance remain separate evidence states.",
    "Public blueprint deployment never activates private accounts, messages, files, or safe browsing.",
    "The original Cookie Adventure source remains unrecovered and no substitute story may be represented as the original."
  ]
}