Publishing & operational boundaries
A public reference surface with separate execution authority.
The domains gptwiki.vesperan.xyz, gptstatus.vesperan.xyz and gpttesting.vesperan.xyz have individual CloudFront distributions and a shared private S3 storage bucket. DNS is managed in Route 53. TLS certificates cover these exact hosts. Existing non-GPT Vesperan domains remain separate.
Only generated public HTML, CSS, JavaScript, JSON, SVG, sitemap and robots files are uploaded. The wiki exporter uses explicit public fields; raw story files, hidden quest answers, private author archives, player records, credentials and model transcripts are not publication inputs.
The status publisher reads the job queue and health observations and writes only sanitized public JSON. Agent subprocesses do not receive AWS or Discord credentials and do not have deployment authority. Worker services restart on failure; failed or interrupted jobs keep an auditable state.
A service observation is time-bounded. An HTTP health response verifies that endpoint; a process observation alone does not prove a live Discord gateway connection. Current status presents those signals separately.