Runbooks for the Raxx platform. Each file targets a specific system or failure domain.
When a new runbook is added, add a row to this index.
| Runbook | System |
|---|---|
| ci-hygiene.md | GitHub Actions — YAML errors, duplicate names, deploy modal stalls |
| ci-runner-posture.md | GitHub Actions runner configuration |
| synthetic-check-diagnosis.md | Synthetic health gate alerts — per-check diagnosis tree (Raptor + WAF probes) |
| migration-gate.md | Database migration gate |
| Runbook | System |
|---|---|
| heroku.md | Heroku platform operations |
| heroku-api-key-drift-recovery.md | Heroku API key rotation and drift recovery |
| deploy-console-manual.md | Console manual deploy |
| deploy-freeze.md | Deploy freeze procedures |
| prod-deploy-approval.md | Production deploy approval gate |
| launch-day-cutover.md | Launch day cutover checklist |
| raptor-postgres-prod-cutover.md | Raptor → Postgres production cutover |
| raptor-postgres-staging-cutover.md | Raptor → Postgres staging cutover |
| raptor-postgres-roles.md | Postgres role management for Raptor |
| Runbook | System |
|---|---|
| waf.md | Cloudflare WAF — rules, phase advancement, failure modes |
| cloudflare-tokens.md | CF API token management |
| cloudflare-rate-limiting.md | CF rate limiting |
| cf-access-service-token-provisioning.md | CF Access service token provisioning |
| terraform-cf-access-state-imports.md | Terraform CF Access state imports |
| Runbook | System |
|---|---|
| freescout.md | FreeScout support portal |
| freescout-backup-restore.md | FreeScout backup and restore |
| freescout-cert-renewal.md | FreeScout TLS cert renewal |
| freescout-e2e-test.md | FreeScout end-to-end test |
| freescout-google-oauth.md | FreeScout Google OAuth |
| freescout-lightsail-rebuild.md | FreeScout Lightsail server rebuild |
| freescout-operations-mailbox-provisioning.md | FreeScout mailbox provisioning |
| freescout-paid-module-install.md | FreeScout paid module installation |
| freescout-postmark-relay.md | FreeScout + Postmark relay |
| freescout-status-fields.md | FreeScout status fields |
| freescout-templates.md | FreeScout templates |
| postmark.md | Postmark email delivery |
| email-dlq-redrive.md | Email DLQ redrive (SNS/SQS/Lambda) |
| support-portal.md | Support portal operations |
| Runbook | System |
|---|---|
| velvet-operator.md | Velvet token rotation operator guide |
| vault-coverage-audit.md | Vault coverage audit |
| billing-readonly-tokens.md | Billing read-only token provisioning |
| rotation/ | Credential rotation procedures |
| Runbook | System |
|---|---|
| console-prod-h12-alerts.md | Console H12 + WORKER TIMEOUT Slack alerts |
| console-review-apps.md | Console review apps |
| console-status-poller.md | Console status poller |
| console-cockpit-pattern.md | Console cockpit pattern |
| Runbook | System |
|---|---|
| gitleaks.md | Gitleaks secret scanning |
| zap-finding-triage.md | ZAP security finding triage |
| infisical-cloud-config.md | Infisical cloud configuration |
| infisical-sso.md | Infisical SSO |
| github-app-provisioning.md | GitHub App provisioning |
| agent-bot-tokens-setup.md | Agent bot token setup |
| manual-dsr-handling.md | Manual data subject request handling |
| Runbook | System |
|---|---|
| auto-ticketing-runbook.md | Auto-ticketing pipeline |
| auto-ticketing-pipeline-overview.md | Auto-ticketing overview |
| auto-ticketing-rollout.md | Auto-ticketing rollout |
| support-attachments-s3.md | Support attachments S3 |
| drive-ledger-consolidation.md | Drive ledger consolidation |
| Runbook | System |
|---|---|
| session-bootstrap.md | Session bootstrap |
| status-d1.md | Status D1 |
| demo-snapshot-refresh.md | Demo snapshot refresh |
| docs-customer-deploy.md | Customer docs deploy |
| getraxx-launch-day-cf-access-removal.md | getraxx.com CF Access removal on launch day |