Raxx · Internal Docs
Runbooks, architecture decisions, agent specs, security reports, business, finance, and legal. Auto-generated from docs/ on every push to main. Search with / or use the sidebar.
Start here
- Agent onboarding guide
- Local development setup
- Ops runbook index
- Feature flag index — per-flag pages with rollout history
Agent Guides
Specs and handoff protocols for every AI agent in the pipeline.
Dev Setup
Local dev setup, toolchain, and onboarding for contributors.
On call?
Ops Runbooks
Operator runbooks — deploy, rotate, recover, audit.
- 2026 05 03 Groomer Velvet Pass
- Agent bot-token setup runbook
- Auth Unification — PM Card Rework
- Auto-Ticketing Pipeline — Incident Response Runbook
- Auto-Ticketing Pipeline — Overview
- …and 102 more
Runbooks
Surface-specific runbooks (WAF, rollback, new surface convention).
- New-surface deploy/preview convention — runbook
- Production rollback runbook
- Runbook: Remove dormant FLAG_CONSOLE_* Heroku config vars (post-GA)
- WAF synthetic probes runbook
Incidents
Post-incident reports and RCAs.
- CI Failure Triage — 2026-05-18
- Email pipeline — post-#1666 operator actions + E2E smoke test
- Incident RCA — getraxx.com unserved (2026-05-08 UTC)
- Operator Action Queue — 2026-05-12
- Queue prod deploy — pre-deploy checklist
- …and 11 more
Security
Security reviews, threat models, scan reports, and triage.
- CSRF approach decision — console.raxx.app
- Data Protection Impact Assessment — Shadow Analytics Pipeline
- IAM policy — claude-infisical-bootstrap
- Nightly security scan — 2026-04-25 (FIRST-RUN BASELINE)
- Nightly security scan — 2026-05-06
- …and 13 more
Secrets Management
Secret taxonomy, token rotation strategy, and vault architecture.
Architecture & system design
Architecture
ADRs, design docs, and system-level decision records.
- ADR 0001 — WebAuthn / Passkeys as the Only Authentication Factor
- ADR 0002 — No Stored Credentials (Enforcement)
- ADR 0003 — GDPR by Default
- ADR 0004 — raxx-console Stack: Flask + Jinja2 + HTMX + Tailwind CDN
- ADR 0004 — iOS App Stack: Native Swift/SwiftUI
- ADR 0005 — iOS WebAuthn: Reuse raxx.app as the RP ID (scope: web + iOS only)
- …and 194 more
Console
Feature docs, design decisions, and runbooks for the operator console.
Product & launch
Product
Product roadmap, ship plans, and feature specs.
Launch
Pre-launch punch lists and go-live plans.
Sprints
Sprint plans and t-minus countdowns.
QA Reports
QA reports, test plans, and launch checklists.
- Antlers flag RBAC audit — 2026-05-15 UTC
- MBT v1 — Launch Readiness Checklist
- Queue C++ Scaffold — QA Validation Plan
Testing
Test strategy, founders-gate tests, and integration test docs.
Release
Release engineering process and multi-package release docs.
Business context
Legal
Privacy policy, NDA templates, ToS drafts, and compliance checklists.
- AI Strategy Execution + Hybrid Broker — Legal Risk Scoping
- APM Vendor Research: Sentry vs Honeybadger
- Article 30 Records of Processing Activities (RoPA) — Raxx
- Billing — Customer Scoring Ethics + Tier Downgrade Data Handling
- CPRA Applicability Threshold — Self-Determination Form
- …and 21 more
Business
Entity structure, compensation, and operational business docs.
- Bookkeeper reconciliation — 2026-04-22
- Business email — Google Workspace multi-domain (moosequest.net primary + aliases)
- CI Cost Analysis — GitHub Actions Billing Situation
- Draft — email to Matthew Crosby asking for securities-attorney referral
- EIN and state tax IDs
- …and 12 more
Business & Legal
Attorney correspondence, securities engagement, legal artifacts.
- CI Migration Candidates — Financial and Licensing Research
- Cover Letter Template — Securities Attorney Outreach
- Decision Matrix — Securities Attorney Candidates
- Domain Research: moosequest.com Registrar + Acquisition Options
- Infisical Pricing and Auth-Tier Research
- …and 10 more
Finance
Billing telemetry, pricing models, and financial feasibility notes.
- Chart of accounts — MooseQuest / Raxx
- Finance records — MooseQuest / Raxx
- Vendor categorization conventions
Marketing
Positioning, competitive landscape, and copy.
- Competitor — Composer (composer.trade)
- Competitor — Interactive Brokers (IBKR)
- Competitor — Public.com
- Competitor — QuantConnect
- Competitor — Robinhood
- …and 18 more
Reference
Research
Engineering research spikes and risk analyses.
- Handoff Packet — Issue #84
- Iron Condor Builder — Q1 / Q2 / Q5 Research Recommendations
- Issue #84 — Risk Metrics Expansion: Sortino, Calmar, VaR, CVaR, Ulcer Index, Beta
- Risk Analysis — Issue #84 Metrics Implementation
Data Science
Analytics design, shadow analytics, and data-pipeline specs.
- "What Could've Been" — Retrospective Decision Quality
- Build Roadmap
- Core Strategy
- Data Science — Strategy Inventory
- …and 15 more
Decisions
One-off decision records that didn't warrant a full ADR.
Operations
Operational SOPs and downtime procedures.
Demo
Demo flow scripts and snapshot refresh procedures.
SDLC
Software development lifecycle policy and service onboarding guides.
Templates
Reusable document templates (ADR, runbooks, etc.).
Backlog Grooming
Card-groomer pass reports and backlog triage logs.
General
Uncategorized root-level docs.