Index And Kukulkan Production Runtime

Index and Kukulkan use direct Linux ELF application packages generated from 0x0 source as the normal production path. Python is not a release runtime or a required app host tool.

The 0x0-only normal path is:

• Index: apps/index/release/bin/index;
• Kukulkan API: apps/kukulkan/packages/kukulkan_api_runtime/release/bin/kukulkan-api;
• Kukulkan UI: apps/kukulkan/packages/kukulkan_web_ui/release/bin/kukulkan-web;
• Kukulkan deploy: apps/kukulkan/deploy/remote-deploy.sh plus the generated

image, Helm, rollback, and guarded systemd artifacts under apps/kukulkan/deploy/. The live 0x0 app deploy path uses the unified 0x0 Live framework units by default.

Reference manifests are retained only for acceptance evidence. They are not part of the normal production command path.

Runtime Artifacts

• apps/production-runtime-matrix.tsv: current production commands, rollback

command, and acceptance artifact per surface.

• apps/production-host-tools.tsv: host tools still required for local execution,

release checks, and deployment.

• apps/acceptance-reference-archive.tsv: archived reference hashes used for

acceptance evidence only.

• apps/release-candidate/manifest.tsv and

apps/release-candidate/SHA256SUMS: release-candidate inventory and hashes.

• apps/release-candidate/smoke-tests.tsv: install, upgrade, and rollback smoke

matrix.

• apps/release-candidate/resource-reports.tsv: resource posture for heavy

gates that remain opt-in.

• apps/production-acceptance.tsv: production acceptance gate inventory.
• apps/production-acceptance-report.tsv: strict production acceptance report

for the final production gates.

• apps/kukulkan/integrations/: integration adapters, schema updates, seeds,

backup/restore manifests, and resource budgets.

• apps/security/ and docs/security/: hardening baselines, threat model, and

incident drill checklist.

Gates

make apps-production-runtime-matrix-check
make apps-normal-path-check
make apps-release-candidate-check
make apps-production-acceptance-check

The parent runtime gate is:

make apps-production-runtime-check

The strict final gate is:

make apps-production-release-check