How-to · operate a deployment

Operate Inhouse

Keep the publishing plane small and the trust boundary intact.

Update a site

Publish the same site name. Inhouse activates the replacement only after every asset passes verification.

Use a coding agent

Build a static site into ./dist.
Keep secrets out of browser code.
Publish the folder through Inhouse.

Respond to exposure

Disable the wildcard route or deny the Access application first. Never enable a public Worker hostname as a workaround.