Skip to content

docs(runtime): restore canonical cAPI port 3003 truth#35

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
reprewindai-dev merged 2 commits into from
Aug 9, 2026
Merged

docs(runtime): restore canonical cAPI port 3003 truth #35

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
1900759
docs(runtime): restore canonical cAPI port 3003 contract
reprewindai-dev Aug 9, 2026
e81ba8d
docs(runtime): qualify cAPI mirror against port drift
reprewindai-dev Aug 9, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 3 additions & 3 deletions 00_VEKLOM_BIBLE.md
View file
Open in desktop
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
# 00 — VEKLOM BIBLE — READ FIRST

**Mandatory context for every human or AI working in this repo.** Canonical operational source: `reprewindai-dev/veklom-ops-command/00_VEKLOM_BIBLE.md`.
**Mandatory context for every human or AI working in this repo.** Cross-repo canonical operational source: `reprewindai-dev/veklom-ops-command/00_VEKLOM_BIBLE.md`.

Veklom is the sovereign AI **capability control plane / runtime authority layer**. It governs capability, not a permanent fleet of privileged agents.

Expand All@@ -12,6 +12,6 @@ Boundaries: VCCP/UCH/UCR = capability lifecycle; cAPI/Covenant = governed connec

Standalone Veklom products may keep independent UIs. Capability OS consumes their underlying capabilities and rebuilds the OS surface natively.

GitHub is source truth; Coolify is deployment truth. Use Coolify UI/API for management; SSH only for direct host/container verification/ops. Internal ports `3000`/`8000` are valid behind Traefik; the old blanket prohibition is retired. Never commit secrets or hard-code ephemeral runtime IDs.
GitHub is source truth; Coolify is deployment truth. Use Coolify UI/API for management; SSH only for direct host/container verification/ops. For this cAPI repository, the reported production/root service port is `3003`; `3000` and `8000` are forbidden fallbacks. `3003` remains `UNVERIFIED` until deployed SHA, HTTP/protocol identity, container listener, and Traefik routing agree. Never commit secrets or hard-code ephemeral runtime IDs or private infrastructure addresses.

Use evidence labels `VERIFIED_LIVE`, `VERIFIED_REPO`, `CONFIGURED`, `LAST_KNOWN`, `TARGET`, `UNVERIFIED`, `DEMO`, `ARCHIVED`. This Bible supersedes older Golden Bible, agent-alignment, topology, deployment-authority, and port-doctrine docs wherever they conflict.
Use evidence labels `VERIFIED_LIVE`, `VERIFIED_REPO`, `CONFIGURED`, `LAST_KNOWN`, `TARGET`, `UNVERIFIED`, `DEMO`, `ARCHIVED`. Where the cross-repo Bible currently conflicts with this explicit cAPI port contract, record the conflict as deployment/source drift and do not silently adopt a noncanonical fallback.
6 changes: 4 additions & 2 deletions AGENTS.md
View file
Open in desktop
Original file line numberDiff line numberDiff line change
Expand Up@@ -2,6 +2,8 @@

Before any work, read [`00_VEKLOM_BIBLE.md`](./00_VEKLOM_BIBLE.md).

That file is the canonical Veklom cross-repo architecture/runtime contract. Repo-local source and tests govern Covenant/cAPI implementation details only when they do not conflict with current runtime evidence or the Bible.
That file is the Veklom cross-repo architecture/runtime context. Repo-local source and tests govern Covenant/cAPI implementation details only when they do not conflict with current verified runtime evidence.

Do not infer service placement, ports, health, compliance, or production status from old docs. Use Coolify UI/API/MCP for Coolify management; SSH is for direct host/container verification or operations. Host port `8000` is currently Coolify-owned even though internal Docker port `8000` can be used behind Traefik.
For cAPI, the current reported runtime contract is port `3003`. Ports `3000` and `8000` are forbidden cAPI production/root fallbacks and must not appear as Docker, listener, health-check, Compose, or Traefik defaults. Treat `3003` as `UNVERIFIED` until deployed SHA, HTTP/protocol identity, container listener, and Traefik routing agree.

Do not infer service placement, health, compliance, or production status from old docs. Use Coolify UI/API/MCP for Coolify management; SSH is for direct host/container verification or operations. Never commit secrets or concrete private infrastructure addresses.
Loading
, 'i'); if (__m === '*' || __re.test(location.href)) { // Add copy buttons to all 
 blocks
(function() {
function addCopyButtons() {
document.querySelectorAll('pre code').forEach(function(codeBlock) {
if (codeBlock.parentElement.hasAttribute('data-copy-added')) return;
codeBlock.parentElement.setAttribute('data-copy-added', 'true');
var btn = document.createElement('button');
btn.textContent = 'Copy';
btn.style.cssText = 'position:absolute;top:4px;right:4px;padding:2px 8px;font-size:11px;background:#4ecdc4;border:none;border-radius:4px;color:#1a1a2e;cursor:pointer;opacity:0.7;transition:opacity 0.2s;';
btn.onmouseover = function() { this.style.opacity = '1'; };
btn.onmouseout = function() { this.style.opacity = '0.7'; };
btn.onclick = function() {
navigator.clipboard.writeText(codeBlock.textContent).then(function() {
btn.textContent = 'Copied!';
setTimeout(function() { btn.textContent = 'Copy'; }, 1500);
});
};
codeBlock.parentElement.style.position = 'relative';
codeBlock.parentElement.appendChild(btn);
});
}
addCopyButtons();
// Re-run on dynamic content
var observer = new MutationObserver(addCopyButtons);
observer.observe(document.body, { childList: true, subtree: true });
})();
}
} catch(__e) { console.warn('[Userscript:Add Copy Buttons to Code Blocks]', __e); }
})();
(function(){
try {
var __m = "github.com";
var __re = new RegExp('^' + "github\\.com" + '
docs(runtime): restore canonical cAPI port 3003 truth by reprewindai-dev · Pull Request #35 · reprewindai-dev/cAPI · GitHub
Skip to content
docs(runtime): restore canonical cAPI port 3003 truth#35

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

 Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and
privacy statement. We’ll occasionally send you account related emails.

Already on GitHub?
Sign in
to your account

 Merged

reprewindai-dev
merged 2 commits into

from

Aug 9, 2026
 Merged


docs(runtime): restore canonical cAPI port 3003 truth
#35
Show file tree
Hide file tree
 Changes from all commits
Commits

Show all changes


2 commits


Select commit
Hold shift + click to select a range
1900759

docs(runtime): restore canonical cAPI port 3003 contract


reprewindai-dev Aug 9, 2026
e81ba8d

docs(runtime): qualify cAPI mirror against port drift


reprewindai-dev Aug 9, 2026

File filter

Filter by extension
Filter by extension
Conversations

Failed to load comments. 
Loading
Jump to

Jump to file


Failed to load files. 
Loading
 Diff view

 Diff view


6 changes: 3 additions & 3 deletions
00_VEKLOM_BIBLE.md

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
# 00 — VEKLOM BIBLE — READ FIRST

**Mandatory context for every human or AI working in this repo.** Canonical operational source: `reprewindai-dev/veklom-ops-command/00_VEKLOM_BIBLE.md`.
**Mandatory context for every human or AI working in this repo.** Cross-repo canonical operational source: `reprewindai-dev/veklom-ops-command/00_VEKLOM_BIBLE.md`.

Veklom is the sovereign AI **capability control plane / runtime authority layer**. It governs capability, not a permanent fleet of privileged agents.

Expand All@@ -12,6 +12,6 @@ Boundaries: VCCP/UCH/UCR = capability lifecycle; cAPI/Covenant = governed connec

Standalone Veklom products may keep independent UIs. Capability OS consumes their underlying capabilities and rebuilds the OS surface natively.

GitHub is source truth; Coolify is deployment truth. Use Coolify UI/API for management; SSH only for direct host/container verification/ops. Internal ports `3000`/`8000` are valid behind Traefik; the old blanket prohibition is retired. Never commit secrets or hard-code ephemeral runtime IDs.
GitHub is source truth; Coolify is deployment truth. Use Coolify UI/API for management; SSH only for direct host/container verification/ops. For this cAPI repository, the reported production/root service port is `3003`; `3000` and `8000` are forbidden fallbacks. `3003` remains `UNVERIFIED` until deployed SHA, HTTP/protocol identity, container listener, and Traefik routing agree. Never commit secrets or hard-code ephemeral runtime IDs or private infrastructure addresses.

Use evidence labels `VERIFIED_LIVE`, `VERIFIED_REPO`, `CONFIGURED`, `LAST_KNOWN`, `TARGET`, `UNVERIFIED`, `DEMO`, `ARCHIVED`. This Bible supersedes older Golden Bible, agent-alignment, topology, deployment-authority, and port-doctrine docs wherever they conflict.
Use evidence labels `VERIFIED_LIVE`, `VERIFIED_REPO`, `CONFIGURED`, `LAST_KNOWN`, `TARGET`, `UNVERIFIED`, `DEMO`, `ARCHIVED`. Where the cross-repo Bible currently conflicts with this explicit cAPI port contract, record the conflict as deployment/source drift and do not silently adopt a noncanonical fallback.

6 changes: 4 additions & 2 deletions
AGENTS.md

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -2,6 +2,8 @@

Before any work, read [`00_VEKLOM_BIBLE.md`](./00_VEKLOM_BIBLE.md).

That file is the canonical Veklom cross-repo architecture/runtime contract. Repo-local source and tests govern Covenant/cAPI implementation details only when they do not conflict with current runtime evidence or the Bible.
That file is the Veklom cross-repo architecture/runtime context. Repo-local source and tests govern Covenant/cAPI implementation details only when they do not conflict with current verified runtime evidence.

Do not infer service placement, ports, health, compliance, or production status from old docs. Use Coolify UI/API/MCP for Coolify management; SSH is for direct host/container verification or operations. Host port `8000` is currently Coolify-owned even though internal Docker port `8000` can be used behind Traefik.
For cAPI, the current reported runtime contract is port `3003`. Ports `3000` and `8000` are forbidden cAPI production/root fallbacks and must not appear as Docker, listener, health-check, Compose, or Traefik defaults. Treat `3003` as `UNVERIFIED` until deployed SHA, HTTP/protocol identity, container listener, and Traefik routing agree.

Do not infer service placement, health, compliance, or production status from old docs. Use Coolify UI/API/MCP for Coolify management; SSH is for direct host/container verification or operations. Never commit secrets or concrete private infrastructure addresses.
Loading

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Force GitHub README to respect dark mode
(function() {
var style = document.createElement('style');
style.textContent = '
.markdown-body {
color-scheme: dark light;
}
.markdown-body pre { background: #161b22 !important; }
.markdown-body code { background: rgba(110, 118, 129, 0.4) !important; }
.markdown-body table th, .markdown-body table td { border-color: #30363d !important; }
.markdown-body img { background: #0d1117; }
.markdown-body blockquote { border-left-color: #8b949e; }
.markdown-body hr { border-color: #30363d; }
';
document.head.appendChild(style);
})();
}
} catch(__e) { console.warn('[Userscript:GitHub Dark Mode README Fix]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '
docs(runtime): restore canonical cAPI port 3003 truth by reprewindai-dev · Pull Request #35 · reprewindai-dev/cAPI · GitHub
Skip to content
docs(runtime): restore canonical cAPI port 3003 truth#35

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

 Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and
privacy statement. We’ll occasionally send you account related emails.

Already on GitHub?
Sign in
to your account

 Merged

reprewindai-dev
merged 2 commits into

from

Aug 9, 2026
 Merged


docs(runtime): restore canonical cAPI port 3003 truth
#35
Show file tree
Hide file tree
 Changes from all commits
Commits

Show all changes


2 commits


Select commit
Hold shift + click to select a range
1900759

docs(runtime): restore canonical cAPI port 3003 contract


reprewindai-dev Aug 9, 2026
e81ba8d

docs(runtime): qualify cAPI mirror against port drift


reprewindai-dev Aug 9, 2026

File filter

Filter by extension
Filter by extension
Conversations

Failed to load comments. 
Loading
Jump to

Jump to file


Failed to load files. 
Loading
 Diff view

 Diff view


6 changes: 3 additions & 3 deletions
00_VEKLOM_BIBLE.md

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
# 00 — VEKLOM BIBLE — READ FIRST

**Mandatory context for every human or AI working in this repo.** Canonical operational source: `reprewindai-dev/veklom-ops-command/00_VEKLOM_BIBLE.md`.
**Mandatory context for every human or AI working in this repo.** Cross-repo canonical operational source: `reprewindai-dev/veklom-ops-command/00_VEKLOM_BIBLE.md`.

Veklom is the sovereign AI **capability control plane / runtime authority layer**. It governs capability, not a permanent fleet of privileged agents.

Expand All@@ -12,6 +12,6 @@ Boundaries: VCCP/UCH/UCR = capability lifecycle; cAPI/Covenant = governed connec

Standalone Veklom products may keep independent UIs. Capability OS consumes their underlying capabilities and rebuilds the OS surface natively.

GitHub is source truth; Coolify is deployment truth. Use Coolify UI/API for management; SSH only for direct host/container verification/ops. Internal ports `3000`/`8000` are valid behind Traefik; the old blanket prohibition is retired. Never commit secrets or hard-code ephemeral runtime IDs.
GitHub is source truth; Coolify is deployment truth. Use Coolify UI/API for management; SSH only for direct host/container verification/ops. For this cAPI repository, the reported production/root service port is `3003`; `3000` and `8000` are forbidden fallbacks. `3003` remains `UNVERIFIED` until deployed SHA, HTTP/protocol identity, container listener, and Traefik routing agree. Never commit secrets or hard-code ephemeral runtime IDs or private infrastructure addresses.

Use evidence labels `VERIFIED_LIVE`, `VERIFIED_REPO`, `CONFIGURED`, `LAST_KNOWN`, `TARGET`, `UNVERIFIED`, `DEMO`, `ARCHIVED`. This Bible supersedes older Golden Bible, agent-alignment, topology, deployment-authority, and port-doctrine docs wherever they conflict.
Use evidence labels `VERIFIED_LIVE`, `VERIFIED_REPO`, `CONFIGURED`, `LAST_KNOWN`, `TARGET`, `UNVERIFIED`, `DEMO`, `ARCHIVED`. Where the cross-repo Bible currently conflicts with this explicit cAPI port contract, record the conflict as deployment/source drift and do not silently adopt a noncanonical fallback.

6 changes: 4 additions & 2 deletions
AGENTS.md

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -2,6 +2,8 @@

Before any work, read [`00_VEKLOM_BIBLE.md`](./00_VEKLOM_BIBLE.md).

That file is the canonical Veklom cross-repo architecture/runtime contract. Repo-local source and tests govern Covenant/cAPI implementation details only when they do not conflict with current runtime evidence or the Bible.
That file is the Veklom cross-repo architecture/runtime context. Repo-local source and tests govern Covenant/cAPI implementation details only when they do not conflict with current verified runtime evidence.

Do not infer service placement, ports, health, compliance, or production status from old docs. Use Coolify UI/API/MCP for Coolify management; SSH is for direct host/container verification or operations. Host port `8000` is currently Coolify-owned even though internal Docker port `8000` can be used behind Traefik.
For cAPI, the current reported runtime contract is port `3003`. Ports `3000` and `8000` are forbidden cAPI production/root fallbacks and must not appear as Docker, listener, health-check, Compose, or Traefik defaults. Treat `3003` as `UNVERIFIED` until deployed SHA, HTTP/protocol identity, container listener, and Traefik routing agree.

Do not infer service placement, health, compliance, or production status from old docs. Use Coolify UI/API/MCP for Coolify management; SSH is for direct host/container verification or operations. Never commit secrets or concrete private infrastructure addresses.
Loading

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Highlight search terms from Google/DuckDuckGo/Bing referrer
(function() {
var ref = document.referrer;
var terms = [];
if (ref.includes('google.com') || ref.includes('duckduckgo.com') || ref.includes('bing.com')) {
var url = new URL(ref);
var q = url.searchParams.get('q') || url.searchParams.get('p');
if (q) {
terms = q.split(/\s+/).filter(function(t) { return t.length > 2; });
}
}
if (terms.length === 0) return;
var style = document.createElement('style');
style.textContent = '.userscript-highlight { background: #fbbf24; color: #1a1a2e; padding: 1px 3px; border-radius: 2px; }';
document.head.appendChild(style);
function highlight(node) {
if (node.nodeType === 3) { // text node
var text = node.textContent;
var found = false;
terms.forEach(function(term) {
var regex = new RegExp('(' + term.replace(/[.*+?^${}()|[\]\\]/g, '\\') + ')', 'gi');
if (regex.test(text)) {
found = true;
var frag = document.createDocumentFragment();
var parts = text.split(regex);
parts.forEach(function(part, i) {
if (i % 2 === 0) {
frag.appendChild(document.createTextNode(part));
} else {
var span = document.createElement('span');
span.className = 'userscript-highlight';
span.textContent = part;
frag.appendChild(span);
}
});
node.parentNode.replaceChild(frag, node);
}
});
} else if (node.nodeType === 1 && node.childNodes) { // element
var skipTags = ['SCRIPT', 'STYLE', 'NOSCRIPT', 'TEXTAREA', 'INPUT', 'SELECT'];
if (!skipTags.includes(node.tagName)) {
Array.from(node.childNodes).forEach(highlight);
}
}
}
highlight(document.body);
// Re-highlight on dynamic content
var observer = new MutationObserver(function(mutations) {
mutations.forEach(function(m) {
m.addedNodes.forEach(function(node) {
if (node.nodeType === 1 || node.nodeType === 3) highlight(node);
});
});
});
observer.observe(document.body, { childList: true, subtree: true });
})();
}
} catch(__e) { console.warn('[Userscript:Highlight Search Terms]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '
docs(runtime): restore canonical cAPI port 3003 truth by reprewindai-dev · Pull Request #35 · reprewindai-dev/cAPI · GitHub
Skip to content
docs(runtime): restore canonical cAPI port 3003 truth#35

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

 Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and
privacy statement. We’ll occasionally send you account related emails.

Already on GitHub?
Sign in
to your account

 Merged

reprewindai-dev
merged 2 commits into

from

Aug 9, 2026
 Merged


docs(runtime): restore canonical cAPI port 3003 truth
#35
Show file tree
Hide file tree
 Changes from all commits
Commits

Show all changes


2 commits


Select commit
Hold shift + click to select a range
1900759

docs(runtime): restore canonical cAPI port 3003 contract


reprewindai-dev Aug 9, 2026
e81ba8d

docs(runtime): qualify cAPI mirror against port drift


reprewindai-dev Aug 9, 2026

File filter

Filter by extension
Filter by extension
Conversations

Failed to load comments. 
Loading
Jump to

Jump to file


Failed to load files. 
Loading
 Diff view

 Diff view


6 changes: 3 additions & 3 deletions
00_VEKLOM_BIBLE.md

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
# 00 — VEKLOM BIBLE — READ FIRST

**Mandatory context for every human or AI working in this repo.** Canonical operational source: `reprewindai-dev/veklom-ops-command/00_VEKLOM_BIBLE.md`.
**Mandatory context for every human or AI working in this repo.** Cross-repo canonical operational source: `reprewindai-dev/veklom-ops-command/00_VEKLOM_BIBLE.md`.

Veklom is the sovereign AI **capability control plane / runtime authority layer**. It governs capability, not a permanent fleet of privileged agents.

Expand All@@ -12,6 +12,6 @@ Boundaries: VCCP/UCH/UCR = capability lifecycle; cAPI/Covenant = governed connec

Standalone Veklom products may keep independent UIs. Capability OS consumes their underlying capabilities and rebuilds the OS surface natively.

GitHub is source truth; Coolify is deployment truth. Use Coolify UI/API for management; SSH only for direct host/container verification/ops. Internal ports `3000`/`8000` are valid behind Traefik; the old blanket prohibition is retired. Never commit secrets or hard-code ephemeral runtime IDs.
GitHub is source truth; Coolify is deployment truth. Use Coolify UI/API for management; SSH only for direct host/container verification/ops. For this cAPI repository, the reported production/root service port is `3003`; `3000` and `8000` are forbidden fallbacks. `3003` remains `UNVERIFIED` until deployed SHA, HTTP/protocol identity, container listener, and Traefik routing agree. Never commit secrets or hard-code ephemeral runtime IDs or private infrastructure addresses.

Use evidence labels `VERIFIED_LIVE`, `VERIFIED_REPO`, `CONFIGURED`, `LAST_KNOWN`, `TARGET`, `UNVERIFIED`, `DEMO`, `ARCHIVED`. This Bible supersedes older Golden Bible, agent-alignment, topology, deployment-authority, and port-doctrine docs wherever they conflict.
Use evidence labels `VERIFIED_LIVE`, `VERIFIED_REPO`, `CONFIGURED`, `LAST_KNOWN`, `TARGET`, `UNVERIFIED`, `DEMO`, `ARCHIVED`. Where the cross-repo Bible currently conflicts with this explicit cAPI port contract, record the conflict as deployment/source drift and do not silently adopt a noncanonical fallback.

6 changes: 4 additions & 2 deletions
AGENTS.md

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -2,6 +2,8 @@

Before any work, read [`00_VEKLOM_BIBLE.md`](./00_VEKLOM_BIBLE.md).

That file is the canonical Veklom cross-repo architecture/runtime contract. Repo-local source and tests govern Covenant/cAPI implementation details only when they do not conflict with current runtime evidence or the Bible.
That file is the Veklom cross-repo architecture/runtime context. Repo-local source and tests govern Covenant/cAPI implementation details only when they do not conflict with current verified runtime evidence.

Do not infer service placement, ports, health, compliance, or production status from old docs. Use Coolify UI/API/MCP for Coolify management; SSH is for direct host/container verification or operations. Host port `8000` is currently Coolify-owned even though internal Docker port `8000` can be used behind Traefik.
For cAPI, the current reported runtime contract is port `3003`. Ports `3000` and `8000` are forbidden cAPI production/root fallbacks and must not appear as Docker, listener, health-check, Compose, or Traefik defaults. Treat `3003` as `UNVERIFIED` until deployed SHA, HTTP/protocol identity, container listener, and Traefik routing agree.

Do not infer service placement, health, compliance, or production status from old docs. Use Coolify UI/API/MCP for Coolify management; SSH is for direct host/container verification or operations. Never commit secrets or concrete private infrastructure addresses.
Loading

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Strip utm_, fbclid, gclid, etc. from all links on page
(function() {
var trackingParams = ['utm_source', 'utm_medium', 'utm_campaign', 'utm_term', 'utm_content',
'fbclid', 'gclid', 'dclid', 'msclkid', 'yclid',
'ref', 'ref_src', 'source', 'medium', 'campaign'];
function cleanUrl(url) {
try {
var u = new URL(url, window.location.origin);
var changed = false;
trackingParams.forEach(function(p) {
if (u.searchParams.has(p)) {
u.searchParams.delete(p);
changed = true;
}
});
return changed ? u.toString() : url;
} catch (e) {
return url;
}
}
function cleanLinks() {
document.querySelectorAll('a[href]').forEach(function(a) {
var clean = cleanUrl(a.href);
if (clean !== a.href) a.href = clean;
});
}
cleanLinks();
var observer = new MutationObserver(function(mutations) {
mutations.forEach(function(m) {
m.addedNodes.forEach(function(node) {
if (node.nodeType === 1) {
if (node.tagName === 'A') cleanLinks();
node.querySelectorAll('a[href]').forEach(function(a) {
var clean = cleanUrl(a.href);
if (clean !== a.href) a.href = clean;
});
}
});
});
});
observer.observe(document.body, { childList: true, subtree: true });
})();
}
} catch(__e) { console.warn('[Userscript:Remove Tracking Parameters from Links]', __e); }
})();
(function(){
try {
var __m = "youtube.com";
var __re = new RegExp('^' + "youtube\\.com" + '
docs(runtime): restore canonical cAPI port 3003 truth by reprewindai-dev · Pull Request #35 · reprewindai-dev/cAPI · GitHub
Skip to content
docs(runtime): restore canonical cAPI port 3003 truth#35

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

 Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and
privacy statement. We’ll occasionally send you account related emails.

Already on GitHub?
Sign in
to your account

 Merged

reprewindai-dev
merged 2 commits into

from

Aug 9, 2026
 Merged


docs(runtime): restore canonical cAPI port 3003 truth
#35
Show file tree
Hide file tree
 Changes from all commits
Commits

Show all changes


2 commits


Select commit
Hold shift + click to select a range
1900759

docs(runtime): restore canonical cAPI port 3003 contract


reprewindai-dev Aug 9, 2026
e81ba8d

docs(runtime): qualify cAPI mirror against port drift


reprewindai-dev Aug 9, 2026

File filter

Filter by extension
Filter by extension
Conversations

Failed to load comments. 
Loading
Jump to

Jump to file


Failed to load files. 
Loading
 Diff view

 Diff view


6 changes: 3 additions & 3 deletions
00_VEKLOM_BIBLE.md

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
# 00 — VEKLOM BIBLE — READ FIRST

**Mandatory context for every human or AI working in this repo.** Canonical operational source: `reprewindai-dev/veklom-ops-command/00_VEKLOM_BIBLE.md`.
**Mandatory context for every human or AI working in this repo.** Cross-repo canonical operational source: `reprewindai-dev/veklom-ops-command/00_VEKLOM_BIBLE.md`.

Veklom is the sovereign AI **capability control plane / runtime authority layer**. It governs capability, not a permanent fleet of privileged agents.

Expand All@@ -12,6 +12,6 @@ Boundaries: VCCP/UCH/UCR = capability lifecycle; cAPI/Covenant = governed connec

Standalone Veklom products may keep independent UIs. Capability OS consumes their underlying capabilities and rebuilds the OS surface natively.

GitHub is source truth; Coolify is deployment truth. Use Coolify UI/API for management; SSH only for direct host/container verification/ops. Internal ports `3000`/`8000` are valid behind Traefik; the old blanket prohibition is retired. Never commit secrets or hard-code ephemeral runtime IDs.
GitHub is source truth; Coolify is deployment truth. Use Coolify UI/API for management; SSH only for direct host/container verification/ops. For this cAPI repository, the reported production/root service port is `3003`; `3000` and `8000` are forbidden fallbacks. `3003` remains `UNVERIFIED` until deployed SHA, HTTP/protocol identity, container listener, and Traefik routing agree. Never commit secrets or hard-code ephemeral runtime IDs or private infrastructure addresses.

Use evidence labels `VERIFIED_LIVE`, `VERIFIED_REPO`, `CONFIGURED`, `LAST_KNOWN`, `TARGET`, `UNVERIFIED`, `DEMO`, `ARCHIVED`. This Bible supersedes older Golden Bible, agent-alignment, topology, deployment-authority, and port-doctrine docs wherever they conflict.
Use evidence labels `VERIFIED_LIVE`, `VERIFIED_REPO`, `CONFIGURED`, `LAST_KNOWN`, `TARGET`, `UNVERIFIED`, `DEMO`, `ARCHIVED`. Where the cross-repo Bible currently conflicts with this explicit cAPI port contract, record the conflict as deployment/source drift and do not silently adopt a noncanonical fallback.

6 changes: 4 additions & 2 deletions
AGENTS.md

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -2,6 +2,8 @@

Before any work, read [`00_VEKLOM_BIBLE.md`](./00_VEKLOM_BIBLE.md).

That file is the canonical Veklom cross-repo architecture/runtime contract. Repo-local source and tests govern Covenant/cAPI implementation details only when they do not conflict with current runtime evidence or the Bible.
That file is the Veklom cross-repo architecture/runtime context. Repo-local source and tests govern Covenant/cAPI implementation details only when they do not conflict with current verified runtime evidence.

Do not infer service placement, ports, health, compliance, or production status from old docs. Use Coolify UI/API/MCP for Coolify management; SSH is for direct host/container verification or operations. Host port `8000` is currently Coolify-owned even though internal Docker port `8000` can be used behind Traefik.
For cAPI, the current reported runtime contract is port `3003`. Ports `3000` and `8000` are forbidden cAPI production/root fallbacks and must not appear as Docker, listener, health-check, Compose, or Traefik defaults. Treat `3003` as `UNVERIFIED` until deployed SHA, HTTP/protocol identity, container listener, and Traefik routing agree.

Do not infer service placement, health, compliance, or production status from old docs. Use Coolify UI/API/MCP for Coolify management; SSH is for direct host/container verification or operations. Never commit secrets or concrete private infrastructure addresses.
Loading

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Auto-enable theater mode on YouTube
(function() {
function tryTheater() {
var btn = document.querySelector('button[aria-label="Theater mode"], ytd-player #player button[title="Theater mode"]');
if (btn && !btn.classList.contains('activated')) {
btn.click();
}
}
// Try immediately
tryTheater();
// Try after navigation (SPA)
var lastUrl = location.href;
setInterval(function() {
if (location.href !== lastUrl) {
lastUrl = location.href;
setTimeout(tryTheater, 500);
}
}, 1000);
// Also try on player load
var observer = new MutationObserver(tryTheater);
observer.observe(document.body, { childList: true, subtree: true });
})();
}
} catch(__e) { console.warn('[Userscript:YouTube Theater Mode Default]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '
docs(runtime): restore canonical cAPI port 3003 truth by reprewindai-dev · Pull Request #35 · reprewindai-dev/cAPI · GitHub
Skip to content
docs(runtime): restore canonical cAPI port 3003 truth#35

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

 Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and
privacy statement. We’ll occasionally send you account related emails.

Already on GitHub?
Sign in
to your account

 Merged

reprewindai-dev
merged 2 commits into

from

Aug 9, 2026
 Merged


docs(runtime): restore canonical cAPI port 3003 truth
#35
Show file tree
Hide file tree
 Changes from all commits
Commits

Show all changes


2 commits


Select commit
Hold shift + click to select a range
1900759

docs(runtime): restore canonical cAPI port 3003 contract


reprewindai-dev Aug 9, 2026
e81ba8d

docs(runtime): qualify cAPI mirror against port drift


reprewindai-dev Aug 9, 2026

File filter

Filter by extension
Filter by extension
Conversations

Failed to load comments. 
Loading
Jump to

Jump to file


Failed to load files. 
Loading
 Diff view

 Diff view


6 changes: 3 additions & 3 deletions
00_VEKLOM_BIBLE.md

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
# 00 — VEKLOM BIBLE — READ FIRST

**Mandatory context for every human or AI working in this repo.** Canonical operational source: `reprewindai-dev/veklom-ops-command/00_VEKLOM_BIBLE.md`.
**Mandatory context for every human or AI working in this repo.** Cross-repo canonical operational source: `reprewindai-dev/veklom-ops-command/00_VEKLOM_BIBLE.md`.

Veklom is the sovereign AI **capability control plane / runtime authority layer**. It governs capability, not a permanent fleet of privileged agents.

Expand All@@ -12,6 +12,6 @@ Boundaries: VCCP/UCH/UCR = capability lifecycle; cAPI/Covenant = governed connec

Standalone Veklom products may keep independent UIs. Capability OS consumes their underlying capabilities and rebuilds the OS surface natively.

GitHub is source truth; Coolify is deployment truth. Use Coolify UI/API for management; SSH only for direct host/container verification/ops. Internal ports `3000`/`8000` are valid behind Traefik; the old blanket prohibition is retired. Never commit secrets or hard-code ephemeral runtime IDs.
GitHub is source truth; Coolify is deployment truth. Use Coolify UI/API for management; SSH only for direct host/container verification/ops. For this cAPI repository, the reported production/root service port is `3003`; `3000` and `8000` are forbidden fallbacks. `3003` remains `UNVERIFIED` until deployed SHA, HTTP/protocol identity, container listener, and Traefik routing agree. Never commit secrets or hard-code ephemeral runtime IDs or private infrastructure addresses.

Use evidence labels `VERIFIED_LIVE`, `VERIFIED_REPO`, `CONFIGURED`, `LAST_KNOWN`, `TARGET`, `UNVERIFIED`, `DEMO`, `ARCHIVED`. This Bible supersedes older Golden Bible, agent-alignment, topology, deployment-authority, and port-doctrine docs wherever they conflict.
Use evidence labels `VERIFIED_LIVE`, `VERIFIED_REPO`, `CONFIGURED`, `LAST_KNOWN`, `TARGET`, `UNVERIFIED`, `DEMO`, `ARCHIVED`. Where the cross-repo Bible currently conflicts with this explicit cAPI port contract, record the conflict as deployment/source drift and do not silently adopt a noncanonical fallback.

6 changes: 4 additions & 2 deletions
AGENTS.md

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -2,6 +2,8 @@

Before any work, read [`00_VEKLOM_BIBLE.md`](./00_VEKLOM_BIBLE.md).

That file is the canonical Veklom cross-repo architecture/runtime contract. Repo-local source and tests govern Covenant/cAPI implementation details only when they do not conflict with current runtime evidence or the Bible.
That file is the Veklom cross-repo architecture/runtime context. Repo-local source and tests govern Covenant/cAPI implementation details only when they do not conflict with current verified runtime evidence.

Do not infer service placement, ports, health, compliance, or production status from old docs. Use Coolify UI/API/MCP for Coolify management; SSH is for direct host/container verification or operations. Host port `8000` is currently Coolify-owned even though internal Docker port `8000` can be used behind Traefik.
For cAPI, the current reported runtime contract is port `3003`. Ports `3000` and `8000` are forbidden cAPI production/root fallbacks and must not appear as Docker, listener, health-check, Compose, or Traefik defaults. Treat `3003` as `UNVERIFIED` until deployed SHA, HTTP/protocol identity, container listener, and Traefik routing agree.

Do not infer service placement, health, compliance, or production status from old docs. Use Coolify UI/API/MCP for Coolify management; SSH is for direct host/container verification or operations. Never commit secrets or concrete private infrastructure addresses.
Loading

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Remove or un-stick sticky/fixed headers that block content
(function() {
function unstick() {
document.querySelectorAll('header, nav, [role="banner"], .header, .navbar, .sticky, .fixed-top, [style*="position: fixed"], [style*="position:sticky"]').forEach(function(el) {
if (el.style.position === 'fixed' || el.style.position === 'sticky' || getComputedStyle(el).position === 'fixed' || getComputedStyle(el).position === 'sticky') {
el.style.position = 'static';
el.style.top = 'auto';
el.style.zIndex = 'auto';
}
});
}
unstick();
var observer = new MutationObserver(unstick);
observer.observe(document.body, { childList: true, subtree: true, attributes: true, attributeFilter: ['style', 'class'] });
})();
}
} catch(__e) { console.warn('[Userscript:Kill Sticky Headers]', __e); }
})();
})();
docs(runtime): restore canonical cAPI port 3003 truth by reprewindai-dev · Pull Request #35 · reprewindai-dev/cAPI · GitHub
Skip to content
docs(runtime): restore canonical cAPI port 3003 truth#35

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

 Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and
privacy statement. We’ll occasionally send you account related emails.

Already on GitHub?
Sign in
to your account

 Merged

reprewindai-dev
merged 2 commits into

from

Aug 9, 2026
 Merged


docs(runtime): restore canonical cAPI port 3003 truth
#35
Show file tree
Hide file tree
 Changes from all commits
Commits

Show all changes


2 commits


Select commit
Hold shift + click to select a range
1900759

docs(runtime): restore canonical cAPI port 3003 contract


reprewindai-dev Aug 9, 2026
e81ba8d

docs(runtime): qualify cAPI mirror against port drift


reprewindai-dev Aug 9, 2026

File filter

Filter by extension
Filter by extension
Conversations

Failed to load comments. 
Loading
Jump to

Jump to file


Failed to load files. 
Loading
 Diff view

 Diff view


6 changes: 3 additions & 3 deletions
00_VEKLOM_BIBLE.md

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
# 00 — VEKLOM BIBLE — READ FIRST

**Mandatory context for every human or AI working in this repo.** Canonical operational source: `reprewindai-dev/veklom-ops-command/00_VEKLOM_BIBLE.md`.
**Mandatory context for every human or AI working in this repo.** Cross-repo canonical operational source: `reprewindai-dev/veklom-ops-command/00_VEKLOM_BIBLE.md`.

Veklom is the sovereign AI **capability control plane / runtime authority layer**. It governs capability, not a permanent fleet of privileged agents.

Expand All@@ -12,6 +12,6 @@ Boundaries: VCCP/UCH/UCR = capability lifecycle; cAPI/Covenant = governed connec

Standalone Veklom products may keep independent UIs. Capability OS consumes their underlying capabilities and rebuilds the OS surface natively.

GitHub is source truth; Coolify is deployment truth. Use Coolify UI/API for management; SSH only for direct host/container verification/ops. Internal ports `3000`/`8000` are valid behind Traefik; the old blanket prohibition is retired. Never commit secrets or hard-code ephemeral runtime IDs.
GitHub is source truth; Coolify is deployment truth. Use Coolify UI/API for management; SSH only for direct host/container verification/ops. For this cAPI repository, the reported production/root service port is `3003`; `3000` and `8000` are forbidden fallbacks. `3003` remains `UNVERIFIED` until deployed SHA, HTTP/protocol identity, container listener, and Traefik routing agree. Never commit secrets or hard-code ephemeral runtime IDs or private infrastructure addresses.

Use evidence labels `VERIFIED_LIVE`, `VERIFIED_REPO`, `CONFIGURED`, `LAST_KNOWN`, `TARGET`, `UNVERIFIED`, `DEMO`, `ARCHIVED`. This Bible supersedes older Golden Bible, agent-alignment, topology, deployment-authority, and port-doctrine docs wherever they conflict.
Use evidence labels `VERIFIED_LIVE`, `VERIFIED_REPO`, `CONFIGURED`, `LAST_KNOWN`, `TARGET`, `UNVERIFIED`, `DEMO`, `ARCHIVED`. Where the cross-repo Bible currently conflicts with this explicit cAPI port contract, record the conflict as deployment/source drift and do not silently adopt a noncanonical fallback.

6 changes: 4 additions & 2 deletions
AGENTS.md

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -2,6 +2,8 @@

Before any work, read [`00_VEKLOM_BIBLE.md`](./00_VEKLOM_BIBLE.md).

That file is the canonical Veklom cross-repo architecture/runtime contract. Repo-local source and tests govern Covenant/cAPI implementation details only when they do not conflict with current runtime evidence or the Bible.
That file is the Veklom cross-repo architecture/runtime context. Repo-local source and tests govern Covenant/cAPI implementation details only when they do not conflict with current verified runtime evidence.

Do not infer service placement, ports, health, compliance, or production status from old docs. Use Coolify UI/API/MCP for Coolify management; SSH is for direct host/container verification or operations. Host port `8000` is currently Coolify-owned even though internal Docker port `8000` can be used behind Traefik.
For cAPI, the current reported runtime contract is port `3003`. Ports `3000` and `8000` are forbidden cAPI production/root fallbacks and must not appear as Docker, listener, health-check, Compose, or Traefik defaults. Treat `3003` as `UNVERIFIED` until deployed SHA, HTTP/protocol identity, container listener, and Traefik routing agree.

Do not infer service placement, health, compliance, or production status from old docs. Use Coolify UI/API/MCP for Coolify management; SSH is for direct host/container verification or operations. Never commit secrets or concrete private infrastructure addresses.
Loading