Harden your deployment

This is a v0.5 information-architecture stub. It marks where this topic belongs in the proposed Diátaxis structure and tracks what already exists versus what still needs to be written. The complete current docs remain in the frozen v0.4 archive.

The current material covers fragments (auth/RBAC, transport boundaries, and vulnerability reporting), not a hardening guide.

What exists today

Related v0.4 pages (archived, frozen):

• concepts/about
• concepts/architecture
• tutorials/full-stack/dashboard
• backend/core/app-node/README.md
• backend/core/ork/README.md
• SECURITY.md

What's needed for 0.5

• Trust boundaries; TLS and network exposure.
• Secrets and credential handling.
• Authentication and RBAC setup; allowlisting.
• Least privilege; service identity; audit logging.
• Secure defaults and validation/checklist evidence.