Read active runtime first
Open /api/release and /release-proof and copy Active commit, Deployment, Branch, Posture, and contract markers before making any production claim.
Genesis Command Center
This page reports the active Command Center runtime, the deployment source markers available to the app, and the homepage and Leadership Deck contracts. Browser, proxy, surrogate, and CDN caching are disabled so this surface reports the origin currently serving the request.
Active runtime evidence
Deployment Lag Runbook
Use the dual-origin attestation when /release-proof shows runtime lag or an old contract marker. The exit condition is matching runtime proof, not GitHub merge status.
Open /api/release and /release-proof and copy Active commit, Deployment, Branch, Posture, and contract markers before making any production claim.
Compare the Railway service origin and best-leadership.org. If Railway is current while the custom domain is stale, treat the problem as edge cache or domain binding lag.
Use EXPECTED_COMMAND_CENTER_COMMIT_SHA or the intended merge commit. If the values do not match, production is behind.
Trigger or inspect the Railway deployment path outside the app. GitHub green gates alone are not runtime proof.
After the active commit matches, verify /admin redirects to Command Center Entry and authenticated /admin/leadership-deck returns a signed Brain grounding receipt.
Record active commit, expected commit, deployment id, origin comparison, observed posture, and operator who verified the runtime.
Runtime verification contract
Expected: Protected. Anonymous visitors must land on Command Center Entry.
Proof: Email plus four-digit entry code required.
Expected: Public proof page for active runtime commit and homepage contract.
Proof: Edge and browser caching are disabled; the page does not assert latest GitHub main unless expected commit is configured and matched.
Expected: JSON contract command-center-runtime-attestation-v3.
Proof: Dual-origin automation compares Railway and the custom domain with a cache-busting request.
Expected: Protected Brain-connected contract genesis-leadership-deck-brain-grounded-v1.
Proof: Must be verified after login with one signed synthesis and grounding receipt.
Homepage proof