2 Commits

Author	SHA1	Message	Date
Cyclone	35c561de20	docs(spec): mark SP23 approved and reconcile with auth on main ... Auth landed in main on 2026-06-23 (migrations 0013/0014, cyclone.auth package, bcrypt + matrix_gate, Login.tsx + AuthProvider + RoleGate, CYCLONE_AUTH_DISABLED escape hatch). The original draft was written 2026-06-22 and proposed argon2id, admin/operator/viewer roles, a fresh migration 0012, and an inline require_role dependency. All of that is already in main. Add a 1.1 Delta vs. main section and switch role names from operator to user to match cyclone.auth.permissions.Role.	2026-06-23 17:20:04 -06:00
cyclone	35298907bc	docs(spec): add Ubuntu Docker deployment design ... Production deployment of Cyclone on a single Ubuntu Linux server: - Two-container Docker Compose (backend + nginx frontend) - App-layer auth: username/password, argon2id, session cookies - 3 fixed roles: admin / operator / viewer with documented action matrix - SQLCipher encryption at rest, key as Docker secret - Existing BackupService autostarts (24h interval, 14-day retention) - LAN-only bind, single operator, VPN for outside access - Manual update via 'docker compose pull', env-var rollback - SFTP stays stub (download ZIP + MFT UI); listed as v2 Builds on the parent 2026-06-19 production-readiness spec which shipped local-only in-memory store + react-query wiring.	2026-06-22 10:43:26 -06:00