Index And Kukulkan Production Replacement

Milestone 17 makes the 0x0 applications the normal production path.

The 0x0-only normal path is:

• Index: apps/index/release/bin/index;
• Kukulkan API: apps/kukulkan/packages/kukulkan_api_runtime/release/bin/kukulkan-api;
• Kukulkan UI: apps/kukulkan/packages/kukulkan_web_ui/release/bin/kukulkan-web;
• Kukulkan deploy: apps/kukulkan/deploy/remote-deploy.sh plus the generated

image, Helm, and systemd artifacts under apps/kukulkan/deploy/.

Legacy source references remain only as archived parity and porting manifests.

They are not part of the normal production command path.

Cutover Artifacts

• apps/cutover-matrix.tsv: commands and routes switched to 0x0, rollback

command, and acceptance artifact per surface.

• apps/cutover-host-tools.tsv: host tools still required for local execution,

release checks, and deployment.

• apps/legacy-reference-archive.tsv: allowed archived references used for

parity evidence only.

• apps/release-candidate/manifest.tsv and

apps/release-candidate/SHA256SUMS: release-candidate inventory and hashes.

• apps/release-candidate/smoke-tests.tsv: install, upgrade, and rollback smoke

matrix.

• apps/release-candidate/resource-reports.tsv: resource posture for heavy

gates that remain opt-in.

• apps/production-acceptance.tsv: production acceptance gate inventory.
• apps/production-acceptance-report.tsv: strict production acceptance report

for the final rewrite gates.

• apps/kukulkan/integrations/: integration adapters, migrations, seeds,

backup/restore manifests, and resource budgets.

• apps/security/ and docs/security/: hardening baselines, threat model, and

incident drill checklist.

Gates

make apps-cutover-matrix-check
make apps-legacy-runner-check
make apps-release-candidate-check
make apps-production-acceptance-check

The parent gate is:

make apps-production-replacement-check

The strict final gate is:

make apps-real-production-rewrite-check