Index And Kukulkan Production Runtime

Index and Kukulkan use 0x0 application packages as the normal production path.

The 0x0-only normal path is:

• Index: apps/index/release/bin/index;
• Kukulkan API: apps/kukulkan/packages/kukulkan_api_runtime/release/bin/kukulkan-api;
• Kukulkan UI: apps/kukulkan/packages/kukulkan_web_ui/release/bin/kukulkan-web;
• Kukulkan deploy: apps/kukulkan/deploy/remote-deploy.sh plus the generated

image, Helm, and systemd artifacts under apps/kukulkan/deploy/.

Reference manifests are retained only for acceptance evidence. They are not part

of the normal production command path.

Runtime Artifacts

• apps/production-runtime-matrix.tsv: current production commands, rollback

command, and acceptance artifact per surface.

• apps/production-host-tools.tsv: host tools still required for local execution,

release checks, and deployment.

• apps/legacy-reference-archive.tsv: archived reference hashes used for

acceptance evidence only.

• apps/release-candidate/manifest.tsv and

apps/release-candidate/SHA256SUMS: release-candidate inventory and hashes.

• apps/release-candidate/smoke-tests.tsv: install, upgrade, and rollback smoke

matrix.

• apps/release-candidate/resource-reports.tsv: resource posture for heavy

gates that remain opt-in.

• apps/production-acceptance.tsv: production acceptance gate inventory.
• apps/production-acceptance-report.tsv: strict production acceptance report

for the final rewrite gates.

• apps/kukulkan/integrations/: integration adapters, schema updates, seeds,

backup/restore manifests, and resource budgets.

• apps/security/ and docs/security/: hardening baselines, threat model, and

incident drill checklist.

Gates

make apps-production-runtime-matrix-check
make apps-legacy-runner-check
make apps-release-candidate-check
make apps-production-acceptance-check

The parent runtime gate is:

make apps-production-runtime-check

The strict final gate is:

make apps-real-production-rewrite-check