Role Domain map · email · naming · vaults (human SSOT for brand plane).
Tunnels / machine cloudflared → docs/harness/tenants/tunnel-inventory.md (not duplicated here).
Routing (local vs Pages) → docs/platform-routing.md.
Verified live (dig + curl 2026-07-28 — status in parentheses; terminal CNAME removal re-checked 2026-07-29):
factory-wager.com → Pages (project-r-score, apex)
www.factory-wager.com → Pages (same as apex)
score.factory-wager.com → Pages (portal + proofs; /portal behind Access since 2026-07-28 — 302 → login)
registry.factory-wager.com → Pages (/api/registry/* → R2, read-only allowlist)
wiki.factory-wager.com → GitHub Pages (docs hub, proxied via Cloudflare)
ledger.factory-wager.com → cloudflared tunnel → this Mac :3000 · Cloudflare Access APPLIED (302 → login)
Resolves but misleading (do not treat as functional endpoints):
health.factory-wager.com → Pages vanity CNAME — serves app landing, NOT the health endpoint (real: score.factory-wager.com/health)
telegram.factory-wager.com → Pages vanity CNAME — serves app landing, NOT the webhook (real: score…/api/telegram/webhook/{tenant})
Not resolving (no DNS records):
reasonix.factory-wager.com, api, mail, news, backup, status,
terminal.factory-wager.com (CNAME deleted 2026-07-28 — was dangling tunnel),
support.factory-wager.com (CNAME deleted 2026-07-28 — was broken HelpScout)
[email protected] → Proton Mail (org admin)
[email protected] → Proton Mail (developer)
[email protected] → Proton Mail (automation)
[email protected] → Group (admin+dev+bot)
Org: APEX-BIOLABS
Email: [email protected]
Domain: factory-wager.com
GitHub: brendadeeznuts1111
Production: https://registry.factory-wager.com/
Local dev: http://localhost:3000/
Scope: @factorywager, @factory-wager, @factory
| Vault | Purpose | Agent | |——-|———|——-| | factorywager | Monorepo + Telegram secrets | factorywager-agent | | cloudflare | DNS/R2/Pages keys | cloudflare-agent | | bet-ticker | Poller/token secrets | bet-ticker-agent | | cascade-mover | Sports intelligence | cascade-agent | | Personal | Personal SSH key | — |
Telegram secrets live in the
factorywagervault — the retiredtenantsvault is not accessible to thefactorywager-botPAT.
source scripts/agent-env.sh <vault-name>