Plan-stage document for Oracle Cloud VM deployment with family-scale
hardening. Covers architecture overview, TLS termination, iptables /
OCI Security List policy, OAuth credential transfer, auth model
(allow_anonymous off, per-key tier mapping), audit visibility, and
the Phase 7 sandbox-runtime prerequisite.
Status: Draft, pending Phase 7 (sandbox-runtime integration) completion.
This commit makes the plan referenceable from ADR 0009 Amendment 1
§ Caveats #3, the 2026-05-27 incident memory (cc-rules), and the
forthcoming Phase 7 charter.
NOT a code change — no ALIGNMENT.md authority citation required.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
