Document canonical Lighthouse operations

[truegoodcraft]

Summary

• Adds OPERATIONS.md as the canonical Lighthouse access and diagnostics runbook.
• Routes agents through SOT, side-effect classification, ownership boundaries, and ACCESS_BLOCKED instead of endpoint discovery by trial and error.
• Reclassifies Phase 2, Phase 3, and policy-alignment documents as scoped historical references.
• Reconciles released BUS Core 1.4.2, merged buscore-site 1.4.2 source projection, and shipped Agent Smith 0.25.2 while preserving the unresolved BUS Core restore/import signal authority drift.

Release boundary

• Repository documentation version: 1.29.3.
• Last production deployment recorded in repository history: Lighthouse 1.29.2, Worker version f07d4af2-a8d6-4df6-adfa-aad7eb9f578d, CEO contract 1.1.
• Current active-production state was not independently Cloudflare-control-plane verified.
• Owner-approved documentation-only governance bundle; no Worker source, endpoint, contract, auth, binding, storage, migration, secret, workflow, or runtime behavior changes.
• No active-production Worker promotion is authorized or required by this PR.

Validation

• npm ci
• npm run typecheck
• npm test: 163 passed, 0 failed
• diff whitespace check: clean
• final governance, cross-repository, and deployment-safety audits: no content blockers

npm ci reported 1 low and 5 high advisories in the existing dev-tool dependency graph. Dependency versions and the dependency graph are unchanged by this PR.

Cloudflare integration finding

Pushing this branch triggered the separately connected Cloudflare Workers Builds integration. Its check classified uploaded Worker version 33f4db25-9faf-435d-a83e-83d7d1c17eac as a preview and reported version and branch preview URLs. The check did not report an active-production promotion, but it is not independent proof of current active-production state.

This means the gated repository deploy workflow is not the only CI/CD path. The Cloudflare production-branch and deploy-command settings are not stored in this repository and were not read from the control plane. Do not merge this PR until the owner explicitly accepts the potential production-deployment consequence or those settings are separately verified.

No Lighthouse production endpoint, D1 database, secret, migration, scheduled handler, or direct deployment command was used.

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	buscore-lighthouse	16bd417	Commit Preview URL Branch Preview URL	Aug 26 2026, 10:55 PM

[truegoodcraft]

Corrective push receipt for commit 16bd417:

• Cloudflare Workers Builds check: passed
• Build ID: b04d57c2-b7fd-4174-a6f5-66be8b9b293c
• Preview version: b3585909-31de-4524-8610-e0f931906116
• The check classified the upload as a preview and reported version/branch preview URLs; neither URL was called.
• The check did not report an active-production promotion. Active-production state was not independently control-plane verified.
• Local canonical validation passed: npm ci, typecheck, and 163/163 tests.
• This receipt does not authorize merging or production promotion.

[truegoodcraft]

Merge receipt:

• PR merged by Jamie W. at 2026-08-26T22:57:05Z.
• Merge commit: 59231d0.
• GitHub Governance Validation: passed.
• The checked-in Deploy Lighthouse workflow: gate skipped; deploy skipped.
• The separate Cloudflare Workers Builds integration: passed on merged main.
• Cloudflare Build ID: 793715ef-6123-4d98-a4a7-797634d07812.
• Cloudflare Worker Version ID: ba611ac1-653d-47a2-a465-a85f4124b6b6.
• Unlike the branch checks, the main-branch check reported no preview URLs. This is strong evidence of an automatic production-branch deployment, but active route/traffic state was not independently verified through the Cloudflare control plane or production endpoint.
• No migration, secret operation, D1 access, preview request, or production endpoint request was performed by Codex.