DAMM / Reference Build

VPN architecture with evidence, not posturing.

This project site publishes the repo's architecture, roadmap, runbooks, and validation artifacts from a single working tree. It is meant to make the current state inspectable: what exists, what was exercised, and what still needs proof.

f32362e git revision
postgres-backend-hardening branch
8 published docs
5 published evidence files

Operator Docs

The repo remains the source of truth. This site republishes the core design and operating documents directly from that working tree.

iPhone Apps

Generated portfolio page for iPhone-targeted builds, backed by structured source data.

Open iphone-apps.html

Roadmap

Milestones ordered by architectural dependency and validation readiness.

Open roadmap.md

Runbook

Operational procedures for tracer bullets, smoke runs, and evidence capture.

Open runbook.md

Validation Ledger

Evidence-backed record of what has actually been exercised and where limits remain.

Open validation-ledger.md

Achievements

Completed milestones and notable system capabilities already in place.

Open achievements.md

Deployment Model

Ingress and egress separation, provider automation contract, and rotation model.

Open deployment.md

Validation Evidence

Evidence is copied from local artifacts produced by tracer bullets, smoke checks, and benchmarks. Each published file is hashed into manifest.json.

Tracer Apply Results

Latest traced orchestration apply artifact when present.

tracer-apply-results.json

sha256 2cd4de76c8295e86... · 16305 bytes

Tracer Catalog

Signed public catalog artifact from the latest tracer run when present.

tracer-catalog.json

sha256 6ba7a9524073657a... · 1306 bytes

Hetzner Ingress Validate

Ingress smoke-plan validation artifact for Hetzner.

hetzner-ingress-validate.json

sha256 61b0425218f1cc5f... · 1674 bytes

Hetzner Egress Validate

Egress smoke-plan validation artifact for Hetzner.

hetzner-egress-validate.json

sha256 8b7946b77acb6a5a... · 1913 bytes

Build Contract

This site is generated with node scripts/build-site.js and deployed with bash scripts/deploy-site.sh. The deployed hostname is intended to be damm.raindesk.dev.