Import Application
Connect a Git repository, upload a zip bundle, or deploy an AI-generated artifact into organization demo.
1. Select Source Kind
Git Repository
GitHub · GitLab
Zip Upload
Source Bundle (.zip)
Starter App
Go / Node / Python
Lovable
Project Export
v0 / Claude
Artifact Export
HTTPS repository URL. Public repos clone directly; private repos require an access token below.
Encrypted into Secret Manager at ingestion. Never persisted in plaintext.
2. Application Identity & Hostname Contract
Lowercase alphanumeric and hyphens. Determines the public subdomain.
Live Hostname Ingress Contract (TAD §3.1)
https://demo--payment-api.apps.minicloud.us
3. Automated Secret Scanning & Sanitization
Gatehouse intake scans repository files for plaintext secrets, rotates keys, and binds them to isolated Secret Manager references.
| Detected Token / Key | Transformed Reference | Intake Action | Location |
|---|---|---|---|
| DATABASE_URL | secret://demo/db-primary-url | will_be_rotated | .env.example:L4 |
| STRIPE_API_KEY | secret://demo/stripe-secret | reference | config/keys.json:L2 |
Ready to Import
Intake will build a container image with SLSA Level 3 provenance and attach to Cell-01.
Workspace Dashboard
Tenant cell metrics, routing contracts, and deployed Cloud Run services for organization demo.
Tenant Isolation
CELL-01
Shared VPC · us-central1
Live Releases
3 Active
SLSA Provenance Attested
Edge Latency (p99)
28 ms
HTTP/3 · Google Edge
Monthly Cost
$0.00
Serverless Free Tier
Tenant Deployed Services (TAD §3.1)
| Service Name | Release ID | Status | Public Hostname | Runtime |
|---|---|---|---|---|
| hello-service | rel-001-f1 | SERVING | demo--hello.apps.minicloud.us | Cloud Run (Go 1.23) |
| console-shell | rel-004-b4 | SERVING | demo.apps.minicloud.us | React 19 / Vite |
| intake-worker | rel-002-b2 | READY | demo--intake.apps.minicloud.us | Distroless Linux |
Ledger Activity Feed (E1-10)
| Timestamp | Action | Actor | Resource | Result |
|---|---|---|---|---|
| Just now | dns.managed_zone.sync |
system | minicloud.us | SUCCESS |
| 15m ago | cert.provisioned |
cert-manager | *.apps.minicloud.us | ACTIVE |
| 35m ago | deploy.release |
crypto.pruthvi | mini-cloud-frontdoor | DEPLOYED |
Deployed Services
Microservices executing within organization demo cell boundary.
Active Applications
| App Name | Ingress URL | Traffic Allocation | CPU / Mem | Health Probe |
|---|---|---|---|---|
| hello-service Sample REST microservice |
https://demo--hello.apps.minicloud.us | 100% (rev-001) | 1 vCPU / 512MB | GET /readyz 200 |
| console-shell Frontend dashboard shell |
https://demo.apps.minicloud.us | 100% (rev-004) | 1 vCPU / 256MB | GET / 200 |
| intake-worker Async queue processor |
Internal (Pub/Sub) | 100% (rev-002) | 2 vCPU / 1GB | PID 1 OK |
Ledger Activity Stream
Cryptographically attested tamper-evident audit ledger entries for organization demo.
| Event ID | Time (UTC) | Principal | Event Type | Digest |
|---|---|---|---|---|
| evt-98214 | 2026-09-14 21:05:16 | user:crypto.pruthvi@gmail.com | tenant.routing.update |
sha256:7c9e...4a12 |
| evt-98213 | 2026-09-14 20:51:25 | service:cert-manager | tls.cert.issued |
sha256:3d81...0b93 |
| evt-98212 | 2026-09-14 20:37:00 | user:crypto.pruthvi@gmail.com | domain.verification.complete |
sha256:bf20...e429 |
Artifact Registry & Releases
Immutable build artifacts and SLSA Level 3 attestations.
Published Artifact Packages
| Image URI | Tag | Provenance | Scan Result |
|---|---|---|---|
| gcr.io/mini-cloud-507717/frontdoor-portal | latest | SLSA Level 3 | 0 Critical / 0 High |
| gcr.io/mini-cloud-507717/console | v1.2.0 | SLSA Level 3 | 0 Vulnerabilities |
IAM & Access Directory
Role assignments and Cedar authorization policy enforcement for organization demo.
Organization Members
| Member Email | Role | Auth Provider | Status |
|---|---|---|---|
| crypto.pruthvi@gmail.com | org-admin | Google Identity | ACTIVE |
| demo-engineer@minicloud.us | developer | Internal IdP | ACTIVE |
Cedar Authorization Policy Preview
permit(
principal in Role::"org-admin",
action in [Action::"deploy", Action::"delete", Action::"view"],
resource in Organization::"demo"
);
permit(
principal in Role::"developer",
action in [Action::"deploy", Action::"view"],
resource in Organization::"demo"
);
Edge Route Simulator (TAD §3.1)
Test hostname pattern resolution and cell dispatch logic directly.
🟢 Match Rule: Hostname Pattern
*.apps.minicloud.us🏢 Parsed Tenant: demo
⚡ Target Cell:
cell-01 (us-central1)🛡️ Cedar Guard:
PASS (Permit)🔒 TLS Edge:
Google Trust Services (TLS 1.3)