Operations

FORGE is its own service, with its own image (forge-backend), gRPC-web backend, Flutter bundle and Deployment in the forge-system namespace. Access to it is CORE’s. It is never deployed or reached on its own.

FORGE has never been deployed. CORE’s proxy, the image recipe and the on-host manifest are merged in core. Whether they are applied on any box has not been verified.

Inside CORE

The /forge/ path, the reverse proxy, X-Core-Identity, and the allowlist.

Storage and audit

The encrypted appfs root: the actor audit and the project chats.