Runbooks (internal, unlisted)

Unlisted internal dev docs — audit before treating as public

These runbooks are published unlisted for review only. They are internal engineering notes, not yet audited for public release. They are not linked from public navigation and must not be cited, indexed, or treated as public-facing product docs until a human review signs off. Concrete site/customer data is deliberately kept out of these files and lives only in a local-only decoder (the internal decoder — not published, gitignored — never deployed).

Reusable, abstracted runbooks distilled from real operational work. No customer, pricing, or vendor specifics — concrete targets are referenced only via the local-only decoder.

Index

Runbook	What it covers
Watermark system	Edge-cache variant delivery, the referrer-blind page-rule “lottery”, probe methodology
Referrer cohort & delivery policy	How a referrer cohort drives the variant decision; no-referrer/dev defaults; reverse-leak policy
Safe deploys	Pre-flight gates, atomic-vs-non-atomic deploys, post-deploy verification
Staged rollouts	Blast-radius ordering, canary → batches, soak windows, advance gates
Reverting deploys	Dual-lane rollback, kill switches, residual-risk cleanup
Cost-safe cache purging	Trickle-purge, pre-wave cost gate, the cache-busting permanent-cost trap, circuit-breakers
HOT-set management	Redirect-set freshness, decay cadence, size budgets
No-referrer traffic	Classifying missing-referrer traffic (servers vs eyeballs); dev/local detection
Monetization leverage method	Ranking which embedding hosts to watermark for conversion vs cost control
Internal docs publishing	Keeping internal trees out of public builds

🔒 The local-only decoder (the internal decoder — not published) maps code names to real sites/customers and is never committed or deployed. Keep it that way.