beyond10x.github.io

Deployment-only repository for the unified beyond10x website.

The authored source is beyond10x/website. Private Atlas publishes a tested, immutable artifact to the published branch with provenance; this repository's minimal workflow caller delegates that exact artifact to an immutable reusable deployment runtime in Website. No script from this repository executes with Pages authority.

Do not edit generated website files here. Documentation changes belong in website or in the repository that owns the technical documentation.

Deployment contract

Atlas dispatches the Pages workflow from main with the full commit SHA of both the current published branch head and the exact caller commit. The pinned Website runtime accepts only a publication and caller attributed to b10x-bot[bot], requires its declared Website commit to be in beyond10x/website main and attributed to the same bot, and independently verifies every payload file, public route, digest, and deployment count against canonical provenance.

New publications use b10x-publication-layout/v2: site/ is the deployable tree and inputs/ contains the exact b10x-docs-source-set/v1, normalized source bundles, and Atlas bootstrap data needed to audit or roll back it. The verifier revalidates all bundle identities and digests and uploads only site/ to Pages. Legacy flat publications remain readable solely for rollback during migration.

The three generated metadata files have distinct serving purposes but one contract:

• PROVENANCE.json is the complete artifact record.
• .well-known/b10x-docs.json must be byte-for-byte identical to it and is the public discovery endpoint.
• ._b10x/deployment.json is the compact deployment record and must exactly mirror the verified Website/source-set identity, digests, and inventory counts.

Run the deployment-control gate locally with:

bash scripts/gate.sh

The gate has no package dependencies. It checks the local verifier parity fixtures, their failure boundaries, the manual bot-only workflow trigger, and the exact immutable reusable-workflow pin. Publication and workflow dispatch remain Atlas bot operations; running the local gate does not publish anything.