Admin operations runbooks

These runbooks describe review actions around the frozen customer surface. They do not add administrative commands.

Prepare an account

1. Provide the approved Aegis distribution.
2. Ask the operator to complete local account setup.
3. Record the repository origin and intended app source.
4. Review the manifest and local HTTP contract.

Authorize repository access

1. Wait until deployment requires repository access.
2. Complete the Forge App authorization flow.
3. Keep ordinary source control under the operator's GitHub authority.
4. Record the authorization outcome without credentials.

Review a deployment

1. Inspect the origin and selected commit.
2. Inspect the manifest and source diff.
3. Read the deployment result.
4. Classify failures as source, configuration, build, runtime, or route failures.
5. Preserve the non-secret proof packet.

Boundary

Environment, tenant, account, installation, and app identity come from authorization and repository context. Automation may select only repository, ref, or commit. Forge injects no repository workflow.

Read Deployment results and proof, Production checklist, and Support.