boas.dev Serving Manifest

Every surface — owner · purpose · runtime · auth. Live-proven 2026-07-09 · grounded in fleet_services SSOT + unauth probe · owner: proteus

authenticated deprecated / verify broken / exposed open by design [SSOT] registry [infer] unconfirmed

A Public landing Marketing / landing / public deliverables. Open by design.

Surface	Owner	Runtime	Purpose	Auth
boas.dev / www	proteus	CF Pages	public landing (nexus) [SSOT]	open
boas.dev/api/constellation*	proteus	CF Pages fn	landing chat proxy [SSOT]	open
share.boas.dev	proteus	CF Pages	public share / deliverable pages [SSOT]	open (404 root)

B Client-facing product External clients use it. Public reach, authenticated → Supabase edge-auth.

Surface	Owner	Runtime	Purpose	Auth
meet.boas.dev	metis	CF Pages	client video meetings [SSOT]	lobby + /me
cal.boas.dev	metis	VPS	client scheduling / booking [SSOT]	Supabase
jitsi.boas.dev	proteus	VPS	conference backend (transcription) [SSOT]	open infra
sign.boas.dev	plutus	VPS	DocuSeal — NDA + agency contracts [SSOT]	app
boas.dev/viska/portal	apollo	CF Pages	Viska client portal [SSOT]	app

C Internal ops tool Staff / agents only. No external audience → tailnet-only or Supabase edge.

Surface	Owner	Runtime	Purpose	Auth
pantheon.boas.dev	proteus	CF Pages	Pantheon ops dashboard [SSOT]	Supabase
graphs.boas.dev	proteus	CF Pages	internal graphify KG gallery [SSOT]	CF Access (deprecated)
apollo.boas.dev	apollo	CF Tunnel→N5 retired	artifact / mockup gallery [SSOT]	→ tailnet-only
dash.viska-ai.boas.dev	plutus	CF Pages	Viska AI dashboard [SSOT] · B vs C?	CF Access (deprecated)

D Webhook / ingest Machine-to-machine input, no human UI → HMAC / bearer / provider-sig.

Surface	Owner	Runtime	Purpose	Auth
obs-ingest.boas.dev	proteus	CF Tunnel (N5)	observability ingest [infer]	401
hephaistos-brontes.boas.dev	proteus	CF Tunnel	Brontes GitHub App webhook ingress [SSOT]	404 root
signals.boas.dev	proteus	CF Tunnel	trading signals API [SSOT]	530 DOWN
api.trading.boas.dev	proteus	CF Tunnel	trading signals API [SSOT]	000 unreachable
hooks.boas.dev	?	CF Worker	webhook worker [infer]	200 · verify HMAC
ntfy.boas.dev	?	VPS	ntfy push notify [infer]	200

E Admin / infra access Operator / ops admin surfaces → CF Access (retire) or tailnet.

Surface	Owner	Runtime	Purpose	Auth
nas.boas.dev	proteus	CF Tunnel (N5)	N5 NAS UI [infer]	login
ssh.boas.dev	proteus	CF Tunnel	cloudflared SSH [infer]	200 · verify Access
auth.boas.dev	?	CF Pages	auth surface [infer]	200

! Unclassified / unregistered Live but not in fleet_services — audience unknown, needs owner ruling.

Surface	Owner	Runtime	Live	Note
crm.boas.dev	metis	CF Pages	302 Supabase	NOT in fleet_services · B or C?
trading.boas.dev	plutus	CF Pages	200 shell, no edge gate	unregistered · harden
invoice-generator.boas.dev	plutus	CF Pages	200	unregistered · internal tool?
invoice-demo.boas.dev	plutus	CF Pages	200	unregistered · public demo?

Findings

🔴 fleet_services registry gaps — 10 live surfaces unregistered (crm, trading, invoice-generator, invoice-demo, auth, hooks, ntfy, obs-ingest, nas, ssh). Non-proteus rows need owner sign-off to register.
⚠ apollo-hub row stale — still status=running @ apollo.boas.dev (now 530). Owner=apollo → flag to update exposure→tailnet-only.
⚠ CF Access on graphs + dash.viska-ai — the auth path fleet decree is retiring → migrate.
🔴 Broken tunnels — signals (530) + api.trading (000), tunnel 0d6046bd.
⚠ Verify gating — ssh.boas.dev (200), hooks Worker (200 · HMAC?).

Decisions pending operator

D1 — Internal-tier posture: Hybrid (client-app public+Supabase-edge; internal-tool tailnet-only) / all-tailnet / all-public-Supabase-edge.
D2 — Ambiguous membership: crm (B/C), dash.viska-ai (B/C), trading (B/C), invoice-generator (C) vs invoice-demo (A).
D3 — Registry backfill: register the 10 gap surfaces (owner sign-off for metis/plutus rows).

Persisted → docs/boas-dev-serving-manifest.md (commit 5ac4f26) · investigation 2026-07-09-_cross-repo-boas-dev-serving-reconciliation · table SSOT fleet_services.