Skip to main content
Deployment security boundary
  • API/UI publishes only on host loopback (127.0.0.1:18080).
  • PostgreSQL has no host-published port and stays on an internal Compose network.
  • Administration uses the NetBird path and authenticated SSH; no public application ingress was added.
  • Provider credentials are injected server-side only. The application secret file is mode 0600; the scoped Doppler token is read-only for the production config.
  • Basic Memory has independent containers, paths, configuration, ports, data, and backups. It is not canonical cognitive state.
Bounded text/chunks and Live interactions may be sent to Gemini for accepted provider work. Original application state, database credentials, and secrets do not go to the browser. BitLocker status for the off-host backup destination is unverified; do not describe backups as confidentiality-qualified for confidential material.