> ## Documentation Index > Fetch the complete documentation index at: https://docs.latwoodtech.com/llms.txt > Use this file to discover all available pages before exploring further. # BUS FACTOR # Bus-Factor & Recovery โ€” Operator Continuity (G19) > **Why this exists.** Latimer-Woods-Tech is a solo-operator platform. If the operator > (@adrper79-dot) is suddenly unavailable โ€” illness, accident, travel without access โ€” > a trusted person must be able to keep the lights on and recover access. This is the > single entry point for "the operator is gone; what now?". It is a **tour + index**, > not a replacement for the per-system runbooks it links. > > **Closes:** [`GAP_REGISTER.md`](./GAP_REGISTER.md) G19. **Companion:** G20 (per-product > backup/DR โ€” `RECOVERY.md`), G18 ([`LEGAL_OPS.md`](./LEGAL_OPS.md)). > > ๐Ÿ”ฒ = an operator-only fact that must be filled in by hand. Do not commit secrets here โ€” > store *locations/pointers*, never the credential itself. *** ## 0. First 10 minutes โ€” if you just inherited this 1. Read ยง1 (what the platform is) and ยง2 (the critical-systems map). 2. Get into the **password manager** (๐Ÿ”ฒ *which one + where the emergency kit lives*) โ€” this is the master key to everything else. 3. Confirm **GitHub** org access (`Latimer-Woods-Tech`) โ€” that's where all code + automation lives. 4. Confirm **Cloudflare** account access โ€” that's where every production service runs. 5. Check the daily **Pushover** digest / **Sentry** for active incidents (ยง4). 6. If something is actively down, jump to ยง4 (recovery procedures) โ€” don't improvise. *** ## 1. The 60-second tour โ€” what this platform is A portfolio of Cloudflare-Workers-first products under the **Latimer-Woods-Tech** GitHub org, plus a **Factory** control plane (this repo) that automates governance, deploys, and observability across them. **Products (priority order):** | Product | What it is | Primary domain | Repo | | - | - | - | - | | **Selfprime** | Human Design / "Energy Blueprint" practitioner lead-gen network | `selfprime.net` | `Latimer-Woods-Tech/HumanDesign` | | **Factory** | Shared infra packages + control plane + admin studio | `latwoodtech.com`, `*.latwoodtech.work` | `Latimer-Woods-Tech/Factory` (this repo) | | **Capricast** | Automated video product | `capricast.com` | `Latimer-Woods-Tech/capricast` | | **Cypher of Healing** | Barber-led wellness brand, booking + store | `cypherofhealing.com` | `Latimer-Woods-Tech/coh` | | **XicoCity** | DJMEXXICO creative-economy OS | `xicocity.com` | `Latimer-Woods-Tech/xico-city` | > Other surfaces: `apunlimited.com` (admin-studio prod API), `latimerwoods.dev` (admin/QA), > `mysticapi.com` (planned), `wordis-bond` (โš ๏ธ TCPA regulatory hold โ€” see > [`docs/supervisor/FRIDGE.md`](./supervisor/FRIDGE.md) rule 1; do not touch the UI). **How it runs day-to-day:** a **supervisor** automation loop opens/merges PRs on green CI, a **daily-brief** GitHub Action sends AM/PM status, and most products auto-deploy from `main`. Authoritative "what's true right now" is [`docs/STATE.md`](./STATE.md). *** ## 2. Critical-systems map For each system: what it holds, where the account is, and the recovery runbook. **Losing access to the password manager or GitHub is the highest-impact failure** โ€” start there. | System | What dies without it | Account / identifier | Access recovery | | - | - | - | - | | **Password manager** | Everything (master key) | ๐Ÿ”ฒ *provider + emergency-kit location* | ๐Ÿ”ฒ *printed recovery kit location* | | **GitHub** (org) | All code + all automation | `Latimer-Woods-Tech` org; owner @adrper79-dot | ๐Ÿ”ฒ *2FA backup codes location*; GitHub account-recovery | | **Cloudflare** | Every production service (Workers/Pages/R2/D1/Stream/Hyperdrive/DNS) | account subdomain `adrper79` | ๐Ÿ”ฒ *login + 2FA recovery location* ยท [`secret-rotation.md`](./runbooks/secret-rotation.md) | | **Neon Postgres** | All product databases | org `org-withered-wave-19602339` | [`runbooks/database.md`](./runbooks/database.md) ยท \[`reference_neon_access`] ๐Ÿ”ฒ *login* | | **GCP** | Secret Manager (all CI secrets via WIF) + Vertex AI LLM | project `factory-495015`, SA `factory-sa@factory-495015` | [`runbooks/rotate-gcp-sa.md`](./runbooks/rotate-gcp-sa.md) ยท [`runbooks/SECRET_RECOVERY.md`](./runbooks/SECRET_RECOVERY.md) | | **Stripe** (LIVE) | All payments/payouts | ๐Ÿ”ฒ *account id* | ๐Ÿ”ฒ *login + 2FA* ยท rotate per [`secret-rotation.md`](./runbooks/secret-rotation.md) | | **Anthropic / Vertex** | All LLM features (the "Oracle", narration, council) | key `LATIMER_ANTHROPIC_API` in GCP SM | re-key in GCP Secret Manager | | **npm** | Package publishing (`@latimer-woods-tech/*`) | `NPM_TOKEN` (OIDC trusted publisher) | [`runbooks/npm-oidc-publishing.md`](./runbooks/npm-oidc-publishing.md) | | **Email โ€” Resend** | Transactional + brief delivery | ๐Ÿ”ฒ *account* | re-key in GCP SM | | **Voice โ€” ElevenLabs / Telnyx / Deepgram** | Video narration + telephony | keys in GCP SM | re-key in GCP SM | | **Analytics โ€” PostHog** | Engagement signals (drives video pipeline) | ๐Ÿ”ฒ *project* | [`runbooks/posthog-secrets.md`](./runbooks/posthog-secrets.md) | | **Errors โ€” Sentry** | Production error visibility | org ๐Ÿ”ฒ | [`runbooks/github-secrets-and-tokens.md`](./runbooks/github-secrets-and-tokens.md) | | **Alerts โ€” Pushover** | The daily digest + dead-man's-switch | keys `FACTORY_PUSHOVER_*` in GCP SM | re-key in GCP SM | > **Secret topology (important):** CI secrets are **not** GitHub Actions repo secrets โ€” they > live in **GCP Secret Manager** (`factory-495015`) and are pulled at runtime via Workload > Identity Federation (`scripts/fetch_gcp_secrets.sh`). So GCP access โ‰ˆ access to most keys. > See [`runbooks/github-secrets-and-tokens.md`](./runbooks/github-secrets-and-tokens.md). *** ## 3. Where things live (quick directory) * **What's true right now:** [`docs/STATE.md`](./STATE.md) * **Non-negotiable operating rules:** [`docs/supervisor/FRIDGE.md`](./supervisor/FRIDGE.md) * **Every Worker + its URL + consumers:** [`docs/service-registry.yml`](./service-registry.yml) * **Known debt:** [`docs/GAP_REGISTER.md`](./GAP_REGISTER.md) * **All runbooks:** [`docs/runbooks/`](./runbooks/) * **Domains / legal / IP:** [`docs/LEGAL_OPS.md`](./LEGAL_OPS.md) *** ## 4. Recovery procedures (index โ€” don't improvise) | Situation | Runbook | | - | - | | A production service is down | [`runbooks/INCIDENT.md`](./runbooks/INCIDENT.md) ยท [`runbooks/incident-response-playbook.md`](./runbooks/incident-response-playbook.md) | | A bad deploy needs rolling back | [`runbooks/DEPLOY_ROLLBACK.md`](./runbooks/DEPLOY_ROLLBACK.md) ยท [`runbooks/rollback-runbook.md`](./runbooks/rollback-runbook.md) | | A secret/credential is lost or leaked | [`runbooks/SECRET_RECOVERY.md`](./runbooks/SECRET_RECOVERY.md) ยท [`runbooks/secret-rotation.md`](./runbooks/secret-rotation.md) | | GCP service-account key compromised | [`runbooks/rotate-gcp-sa.md`](./runbooks/rotate-gcp-sa.md) | | Database issue / migration recovery | [`runbooks/database.md`](./runbooks/database.md) | | First-time environment setup | [`runbooks/getting-started.md`](./runbooks/getting-started.md) ยท [`runbooks/CREDENTIALS_SETUP.md`](./runbooks/CREDENTIALS_SETUP.md) | | Handing a product to someone else | [`runbooks/transfer.md`](./runbooks/transfer.md) | | Writing up what happened | [`runbooks/POSTMORTEM_TEMPLATE.md`](./runbooks/POSTMORTEM_TEMPLATE.md) | *** ## 5. Designated trusted contact The person authorized to act if the operator is unavailable. * **Name / relationship:** ๐Ÿ”ฒ * **Contact (phone + email):** ๐Ÿ”ฒ * **What they have today:** ๐Ÿ”ฒ *(e.g., emergency password-manager kit, knows where this doc is)* * **What they are authorized to do:** ๐Ÿ”ฒ *(keep services running / rotate secrets / contact customers / nothing financial)* * **Escalation order if unreachable:** ๐Ÿ”ฒ *** ## 6. Account & credential recovery vault Pointers only โ€” **never the secret itself**. * **Password manager emergency kit:** ๐Ÿ”ฒ *location (safe / sealed envelope / with trusted contact)* * **2FA backup codes** (GitHub, Cloudflare, Stripe, GCP, Neon): ๐Ÿ”ฒ *location* * **Domain registrar logins:** see [`LEGAL_OPS.md`](./LEGAL_OPS.md) ยง1 ยท ๐Ÿ”ฒ *recovery location* * **Payment/payout account (Stripe) recovery:** ๐Ÿ”ฒ * **Phone/SIM** (if 2FA is SMS-based โ€” single point of failure): ๐Ÿ”ฒ *carrier account + port-out PIN location* *** ## 7. Annual fire drill Once a year, prove this doc actually works: * [ ] Trusted contact follows ยง0 end-to-end **without the operator's help** and reports what was missing. * [ ] Restore one product database from backup (per G20 `RECOVERY.md`) and verify it boots. * [ ] Rotate one non-critical secret using the runbook, start to finish. * [ ] Confirm every ๐Ÿ”ฒ in this doc is still accurate. **Last drill:** ๐Ÿ”ฒ *date* ยท **Next due:** ๐Ÿ”ฒ *date* *** ## 8. If the operator is unavailable โ€” decision tree ``` Is something actively DOWN? โ”œโ”€ No โ†’ do nothing destructive. Let automation run. Watch the daily Pushover digest. โ”‚ Re-evaluate in 24โ€“48h. Most things self-heal or wait. โ””โ”€ Yes โ†’ ยง4 runbook for that situation. โ”œโ”€ Recoverable from a runbook? โ†’ follow it exactly; write a postmortem (ยง4). โ””โ”€ Not recoverable / financial / legal? โ†’ contact the trusted contact (ยง5) and, if it concerns customers or money, pause rather than guess. ``` > Guiding principle: **a paused service is recoverable; a wrong destructive action may not be.** > When unsure, stop and escalate. This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.