DAMM / Reference Build

VPN architecture with evidence, not posturing.

This project site publishes the repo's architecture, roadmap, runbooks, and validation artifacts from a single working tree. It is meant to make the current state inspectable: what exists, what was exercised, and what still needs proof.

437f348 git revision
main branch
7 published docs
5 published evidence files

Operator Docs

The repo remains the source of truth. This site republishes the core design and operating documents directly from that working tree.

Roadmap

Milestones ordered by architectural dependency and validation readiness.

Open roadmap.md

Runbook

Operational procedures for tracer bullets, smoke runs, and evidence capture.

Open runbook.md

Validation Ledger

Evidence-backed record of what has actually been exercised and where limits remain.

Open validation-ledger.md

Achievements

Completed milestones and notable system capabilities already in place.

Open achievements.md

Deployment Model

Ingress and egress separation, provider automation contract, and rotation model.

Open deployment.md

Validation Evidence

Evidence is copied from local artifacts produced by tracer bullets, smoke checks, and benchmarks. Each published file is hashed into manifest.json.

Tracer Apply Results

Latest traced orchestration apply artifact when present.

tracer-apply-results.json

sha256 5773702c4602a364... · 15857 bytes

Tracer Catalog

Signed public catalog artifact from the latest tracer run when present.

tracer-catalog.json

sha256 b356141382a5fcd6... · 1306 bytes

Hetzner Ingress Validate

Ingress smoke-plan validation artifact for Hetzner.

hetzner-ingress-validate.json

sha256 13d076aa1452518f... · 1540 bytes

Hetzner Egress Validate

Egress smoke-plan validation artifact for Hetzner.

hetzner-egress-validate.json

sha256 e45814d35bfe147f... · 1779 bytes

Build Contract

This site is generated with node scripts/build-site.js and deployed with bash scripts/deploy-site.sh. The deployed hostname is intended to be damm.raindesk.dev.