[{"data":1,"prerenderedAt":427},["ShallowReactive",2],{"navigation":3,"index":250},[4,28,56,91,117,135,169,224],{"title":5,"path":6,"stem":7,"children":8,"icon":27},"Start here","\u002Fgetting-started","1.getting-started\u002F1.index",[9,11,15,19,23],{"title":10,"path":6,"stem":7},"Introduction",{"title":12,"path":13,"stem":14},"Decisions and open gates","\u002Fgetting-started\u002Fdecisions","1.getting-started\u002F2.decisions",{"title":16,"path":17,"stem":18},"Scope and non-goals","\u002Fgetting-started\u002Fscope","1.getting-started\u002F3.scope",{"title":20,"path":21,"stem":22},"Organization pilot","\u002Fgetting-started\u002Fpilot","1.getting-started\u002F4.pilot",{"title":24,"path":25,"stem":26},"Economics and quotas","\u002Fgetting-started\u002Feconomics","1.getting-started\u002F5.economics","i-lucide-compass",{"title":29,"path":30,"stem":31,"children":32,"icon":55},"Architecture","\u002Farchitecture","2.architecture\u002F1.index",[33,35,39,43,47,51],{"title":34,"path":30,"stem":31},"System architecture",{"title":36,"path":37,"stem":38},"Trust zones","\u002Farchitecture\u002Ftrust-zones","2.architecture\u002F2.trust-zones",{"title":40,"path":41,"stem":42},"Control plane","\u002Farchitecture\u002Fcontrol-plane","2.architecture\u002F3.control-plane",{"title":44,"path":45,"stem":46},"Organization tenancy","\u002Farchitecture\u002Ftenancy","2.architecture\u002F4.tenancy",{"title":48,"path":49,"stem":50},"Core data model","\u002Farchitecture\u002Fdata-model","2.architecture\u002F5.data-model",{"title":52,"path":53,"stem":54},"Codebase organization","\u002Farchitecture\u002Fcodebase","2.architecture\u002F6.codebase","i-lucide-layers",{"title":57,"icon":58,"path":59,"stem":60,"children":61,"page":90},"Identity and security","i-lucide-shield-check","\u002Fsecurity","3.security",[62,66,70,74,78,82,86],{"title":63,"path":64,"stem":65},"Identity and sessions","\u002Fsecurity\u002Fidentity","3.security\u002F1.identity",{"title":67,"path":68,"stem":69},"Domains and TLS","\u002Fsecurity\u002Fdomains","3.security\u002F2.domains",{"title":71,"path":72,"stem":73},"Ingress and egress","\u002Fsecurity\u002Fnetworking","3.security\u002F3.networking",{"title":75,"path":76,"stem":77},"Access policies and WAF-lite","\u002Fsecurity\u002Faccess-policies","3.security\u002F4.access-policies",{"title":79,"path":80,"stem":81},"Secrets and integrations","\u002Fsecurity\u002Fsecrets-integrations","3.security\u002F5.secrets-integrations",{"title":83,"path":84,"stem":85},"Governance and ownership","\u002Fsecurity\u002Fgovernance","3.security\u002F6.governance",{"title":87,"path":88,"stem":89},"Threat model","\u002Fsecurity\u002Fthreat-model","3.security\u002F7.threat-model",false,{"title":92,"icon":93,"path":94,"stem":95,"children":96,"page":90},"Building applications","i-lucide-code","\u002Fdevelopment","4.development",[97,101,105,109,113],{"title":98,"path":99,"stem":100},"AI and MCP","\u002Fdevelopment\u002Fai-mcp","4.development\u002F1.ai-mcp",{"title":102,"path":103,"stem":104},"Source control","\u002Fdevelopment\u002Fsource-control","4.development\u002F2.source-control",{"title":106,"path":107,"stem":108},"Sandboxed builds","\u002Fdevelopment\u002Fbuilds","4.development\u002F3.builds",{"title":110,"path":111,"stem":112},"Runtime contract and SDK","\u002Fdevelopment\u002Fruntime-contract","4.development\u002F4.runtime-contract",{"title":114,"path":115,"stem":116},"APIs and protocols","\u002Fdevelopment\u002Fapi","4.development\u002F5.api",{"title":118,"icon":119,"path":120,"stem":121,"children":122,"page":90},"Runtime and delivery","i-lucide-rocket","\u002Fdelivery","5.delivery",[123,127,131],{"title":124,"path":125,"stem":126},"Runtime clusters and previews","\u002Fdelivery\u002Fruntime-clusters","5.delivery\u002F1.runtime-clusters",{"title":128,"path":129,"stem":130},"Deployments and approvals","\u002Fdelivery\u002Fdeployments","5.delivery\u002F2.deployments",{"title":132,"path":133,"stem":134},"Databases and recovery","\u002Fdelivery\u002Fdata-recovery","5.delivery\u002F3.data-recovery",{"title":136,"icon":137,"path":138,"stem":139,"children":140,"page":90},"Operations","i-lucide-activity","\u002Foperations","6.operations",[141,145,149,153,157,161,165],{"title":142,"path":143,"stem":144},"Observability and audit","\u002Foperations\u002Fobservability","6.operations\u002F1.observability",{"title":146,"path":147,"stem":148},"Operating model","\u002Foperations\u002Foperating-model","6.operations\u002F2.operating-model",{"title":150,"path":151,"stem":152},"Deploy and roll back","\u002Foperations\u002Fdeploy-rollback","6.operations\u002F3.deploy-rollback",{"title":154,"path":155,"stem":156},"Back up and restore","\u002Foperations\u002Fbackup-restore","6.operations\u002F4.backup-restore",{"title":158,"path":159,"stem":160},"Upgrade and patch","\u002Foperations\u002Fupgrades","6.operations\u002F5.upgrades",{"title":162,"path":163,"stem":164},"Rotate keys and credentials","\u002Foperations\u002Fkey-rotation","6.operations\u002F6.key-rotation",{"title":166,"path":167,"stem":168},"Incidents and access revocation","\u002Foperations\u002Fincidents","6.operations\u002F7.incidents",{"title":170,"path":171,"stem":172,"children":173,"icon":223},"Implementation plan","\u002Froadmap","7.roadmap\u002F01.index",[174,175,179,183,187,191,195,199,203,207,211,215,219],{"title":170,"path":171,"stem":172},{"title":176,"path":177,"stem":178},"Phase 0: architecture spikes and ADRs","\u002Froadmap\u002Fphase-0","7.roadmap\u002F02.phase-0",{"title":180,"path":181,"stem":182},"Phase 1: control-plane foundation","\u002Froadmap\u002Fphase-1","7.roadmap\u002F03.phase-1",{"title":184,"path":185,"stem":186},"Phase 2: managed source and change sets","\u002Froadmap\u002Fphase-2","7.roadmap\u002F04.phase-2",{"title":188,"path":189,"stem":190},"Phase 3: sandboxed build system","\u002Froadmap\u002Fphase-3","7.roadmap\u002F05.phase-3",{"title":192,"path":193,"stem":194},"Phase 4: runtime and data plane","\u002Froadmap\u002Fphase-4","7.roadmap\u002F06.phase-4",{"title":196,"path":197,"stem":198},"Phase 5: deployment, preview, migration, and recovery","\u002Froadmap\u002Fphase-5","7.roadmap\u002F07.phase-5",{"title":200,"path":201,"stem":202},"Phase 6: Entra identity and security policy","\u002Froadmap\u002Fphase-6","7.roadmap\u002F08.phase-6",{"title":204,"path":205,"stem":206},"Phase 7: MCP and AI-native workflow","\u002Froadmap\u002Fphase-7","7.roadmap\u002F09.phase-7",{"title":208,"path":209,"stem":210},"Phase 8: Pilot hardening","\u002Froadmap\u002Fphase-8","7.roadmap\u002F10.phase-8",{"title":212,"path":213,"stem":214},"Phase 9: developer hybrid and v1 GA","\u002Froadmap\u002Fphase-9","7.roadmap\u002F11.phase-9",{"title":216,"path":217,"stem":218},"Test strategy","\u002Froadmap\u002Ftesting","7.roadmap\u002F12.testing",{"title":220,"path":221,"stem":222},"Definition of done","\u002Froadmap\u002Fdefinition-of-done","7.roadmap\u002F13.definition-of-done","i-lucide-list-checks",{"title":225,"icon":226,"path":227,"stem":228,"children":229,"page":90},"Reference","i-lucide-book-open","\u002Freference","8.reference",[230,234,238,242,246],{"title":231,"path":232,"stem":233},"Plan coverage","\u002Freference\u002Fplan-coverage","8.reference\u002F1.plan-coverage",{"title":235,"path":236,"stem":237},"Decision register","\u002Freference\u002Fdecisions","8.reference\u002F2.decisions",{"title":239,"path":240,"stem":241},"Glossary","\u002Freference\u002Fglossary","8.reference\u002F3.glossary",{"title":243,"path":244,"stem":245},"Sources","\u002Freference\u002Fsources","8.reference\u002F4.sources",{"title":247,"path":248,"stem":249},"Contributing and docs access","\u002Freference\u002Fcontributing","8.reference\u002F5.contributing",{"id":251,"title":252,"body":253,"description":252,"extension":418,"meta":419,"navigation":420,"path":421,"seo":422,"stem":425,"__hash__":426},"landing\u002Findex.md","",{"type":254,"value":255,"toc":414},"minimark",[256,299,388],[257,258,259,266,277,282],"u-page-hero",{},[260,261,262],"template",{"v-slot:headline":252},[263,264,265],"p",{},"v1 architecture baseline",[260,267,268],{"v-slot:title":252},[263,269,270,271],{},"Internal software. ",[272,273,276],"span",{"className":274},[275],"text-primary","Organizational control.",[260,278,279],{"v-slot:description":252},[263,280,281],{},"The intrnl.cloud plan brings AI-created applications into a governed platform: organization-owned source, Entra identity, isolated runtimes, and human approval from preview to production.",[260,283,284,292],{"v-slot:links":252},[285,286,289],"u-button",{"to":6,"size":287,"trailing-icon":288},"xl","i-lucide-arrow-right",[263,290,291],{},"Read the overview",[285,293,296],{"to":171,"color":294,"variant":295,"size":287,"icon":223},"neutral","outline",[263,297,298],{},"Explore the implementation plan",[300,301,302,307,312],"u-page-section",{},[260,303,304],{"v-slot:title":252},[263,305,306],{},"From architecture to acceptance",[260,308,309],{"v-slot:description":252},[263,310,311],{},"These docs describe the target v1 system. Locked design decisions, open validation gates, pilot defaults, and future scope are called out throughout. They do not claim the platform is already built.",[260,313,314,327,339,351,364,376],{"v-slot:features":252},[315,316,317,322],"u-page-feature",{"icon":55,"to":30},[260,318,319],{"v-slot:title":252},[263,320,321],{},"Architecture and trust",[260,323,324],{"v-slot:description":252},[263,325,326],{},"Central Laravel control plane, dedicated runtime clusters, tenant isolation, and one authoritative source for every app.",[315,328,329,334],{"icon":58,"to":64},[260,330,331],{"v-slot:title":252},[263,332,333],{},"Identity and governance",[260,335,336],{"v-slot:description":252},[263,337,338],{},"Entra-brokered sessions, scoped AI grants, mandatory organization policies, and explicit ownership.",[315,340,341,346],{"icon":93,"to":99},[260,342,343],{"v-slot:title":252},[263,344,345],{},"Build with AI",[260,347,348],{"v-slot:description":252},[263,349,350],{},"Approved AI clients work through MCP, producing reviewable source changes and protected previews.",[315,352,354,359],{"icon":353,"to":111},"i-lucide-box",[260,355,356],{"v-slot:title":252},[263,357,358],{},"Runtime and data",[260,360,361],{"v-slot:description":252},[263,362,363],{},"Nuxt on sandboxed workerd with explicit DB, KV, identity, configuration, and integration capabilities.",[315,365,366,371],{"icon":137,"to":147},[260,367,368],{"v-slot:title":252},[263,369,370],{},"Delivery and operations",[260,372,373],{"v-slot:description":252},[263,374,375],{},"Signed artifacts, controlled migrations, recovery drills, audit trails, and operational runbooks.",[315,377,378,383],{"icon":223,"to":171},[260,379,380],{"v-slot:title":252},[263,381,382],{},"Ten implementation phases",[260,384,385],{"v-slot:description":252},[263,386,387],{},"Deliverables and exit criteria from Phase 0 validation to the organization pilot and developer-ready GA.",[300,389,390,395,400],{},[260,391,392],{"v-slot:title":252},[263,393,394],{},"The organization pilot",[260,396,397],{"v-slot:description":252},[263,398,399],{},"An employee should be able to create an Equipment Requests app without Git or local tools. The pilot requires Entra sign-in, synthetic preview data, a dedicated runtime cluster, and human production approval. Regulated data, enterprise system integrations, public apps, and private-network access are outside the pilot.",[260,401,402,408],{"v-slot:links":252},[285,403,405],{"to":21,"color":294,"variant":404,"trailing-icon":288},"subtle",[263,406,407],{},"Read the pilot acceptance scenario",[285,409,411],{"to":232,"color":294,"variant":410},"ghost",[263,412,413],{},"See all 31 plan sections",{"title":252,"searchDepth":415,"depth":416,"links":417},1,2,[],"md",{},true,"\u002F",{"title":423,"description":424},"intrnl.cloud documentation","Architecture, security, runtime contracts, and the implementation plan for governed internal applications.","index","bpTbwz8hBQbopPdc6Sf7RTU1lnkvAvfs29gjmDzoGKU",1790012321234]