Is CodexDominion safe for demo, pilot, or production? This gate states it plainly.
Mode: PRODUCTION_BLOCKED. Demo-ready: yes; Pilot-ready: no; Production: blocked. 5 blocking issue(s).
Demo
readyPilot
not readyProduction
blockedEnvironment
production
Blocking checks must pass for production; warnings are advisory.
| Check | Severity | Status | Detail |
|---|---|---|---|
| Verified session identity | blocking | fail | A real, verified session (not the unsigned mock/pilot actor) is required for production. |
| Pilot actor fallback disabled | blocking | pass | ALLOW_PILOT_ACTOR_FALLBACK must be 'false' in production. |
| RBAC enforced at action boundary | warning | pass | Export/approval are permission-gated via @merritt/workspace. |
| Persistent database configured | blocking | fail | A persistent (non-SQLite-file) DATABASE_URL is required to store decisions/approvals. |
| Audit logging enabled | warning | pass | Decision/audit events are recorded on the decision record. |
| Proof-packet export gated | blocking | pass | Export requires EXPORT_PROOF_PACKET. |
| Approval action gated | blocking | pass | Approval requires APPROVE_DECISION. |
| No-real-data acknowledged | blocking | fail | Operator must acknowledge no real customer data is used (READINESS_REAL_DATA_ACK). |
| External providers disabled or configured | warning | pass | No live providers/crawling, or they are explicitly configured. |
| Environment secrets configured | warning | fail | Required secrets are present (none needed for demo). |
| Tenant isolation ready | blocking | fail | Per-tenant data isolation must be verified (READINESS_TENANT_ISOLATION_ACK). |
| Backup & recovery ready | blocking | fail | Backups and recovery must be verified (READINESS_BACKUP_ACK). |
Names and effects only β no values or secrets are shown.
SESSION_SIGNING_SECRET β Set to enable verified HMAC-signed sessions (satisfies the identity check).ALLOW_PILOT_ACTOR_FALLBACK β Set 'false' to disable pilot actor fallback (required for production).DATABASE_URL β Set a persistent (non-SQLite) connection to store decisions/approvals.READINESS_REAL_DATA_ACK β Set 'true' once you confirm no real customer data is used.READINESS_TENANT_ISOLATION_ACK β Set 'true' once per-tenant isolation is verified.READINESS_BACKUP_ACK β Set 'true' once backups and recovery are verified.READINESS_EXTERNAL_PROVIDERS_ACK β Set 'true' once external providers are disabled or configured.