Freeze DBIS RTGS first production slice

2026-03-28 23:49:59 -07:00
parent dfe81767e3
commit 3f8d1a1e2c
6 changed files with 375 additions and 1 deletions
--- a/dbis_chain_138_technical_master_plan.md
+++ b/dbis_chain_138_technical_master_plan.md
@@ -264,6 +264,11 @@ Use FireFly as the workflow layer only after:
 2. connector/plugin model is explicit
 3. upstream blockchain and shared-storage dependencies are validated

+## Current execution artifacts
+
+- [docs/03-deployment/DBIS_RTGS_FIRST_SLICE_ARCHITECTURE.md](docs/03-deployment/DBIS_RTGS_FIRST_SLICE_ARCHITECTURE.md)
+- [docs/03-deployment/DBIS_RTGS_FIRST_SLICE_DEPLOYMENT_CHECKLIST.md](docs/03-deployment/DBIS_RTGS_FIRST_SLICE_DEPLOYMENT_CHECKLIST.md)
+
 ---

 # SECTION 12 — CROSS-CHAIN INTEROPERABILITY DESIGN
@@ -391,6 +396,9 @@ This is the target business flow. Current automation verifies only selected infr
 - Besu liveness
 - optional FireFly HTTP
 - operator-guided manual follow-ups for Indy / Fabric / CCIP
+- the currently recommended narrow RTGS first slice documented in:
+  - [docs/03-deployment/DBIS_RTGS_FIRST_SLICE_ARCHITECTURE.md](docs/03-deployment/DBIS_RTGS_FIRST_SLICE_ARCHITECTURE.md)
+  - [docs/03-deployment/DBIS_RTGS_FIRST_SLICE_DEPLOYMENT_CHECKLIST.md](docs/03-deployment/DBIS_RTGS_FIRST_SLICE_DEPLOYMENT_CHECKLIST.md)

 It must not be represented as fully automated end-to-end execution today.

@@ -440,6 +448,7 @@ Separate security compliance and benchmark reports remain future deliverables un
 - Ceph-backed distributed storage is still roadmap work.
 - Full VLAN / sovereign network segmentation is still roadmap work.
 - Final entity ownership assignments remain incomplete.
+- The selected first-slice HYBX sidecars are build-verified locally, but not yet deployed to production runtime on Proxmox VE.

 ## Planning gaps

@@ -459,5 +468,7 @@ Executable counterparts in this repository:
 | Phase 3 liveness wrapper | `scripts/verify/run-dbis-phase3-e2e-simulation.sh`, `docs/03-deployment/DBIS_PHASE3_E2E_PRODUCTION_SIMULATION_RUNBOOK.md` |
 | Production gate | `docs/03-deployment/DBIS_PHASES_1_TO_3_PRODUCTION_GATE.md` |
 | RTGS E2E requirements matrix | `docs/03-deployment/DBIS_RTGS_E2E_REQUIREMENTS_MATRIX.md` |
+| RTGS first-slice architecture | `docs/03-deployment/DBIS_RTGS_FIRST_SLICE_ARCHITECTURE.md` |
+| RTGS first-slice deployment checklist | `docs/03-deployment/DBIS_RTGS_FIRST_SLICE_DEPLOYMENT_CHECKLIST.md` |
 | Caliper hook | `docs/03-deployment/CALIPER_CHAIN138_PERF_HOOK.md`, `scripts/verify/print-caliper-chain138-stub.sh` |
 | Operator readiness checklist | `docs/00-meta/OPERATOR_READY_CHECKLIST.md` section 10 |
--- a/docs/00-meta/TODO_TASK_LIST_MASTER.md
+++ b/docs/00-meta/TODO_TASK_LIST_MASTER.md
@@ -199,6 +199,9 @@

 ### 12.2 Mifos / Fineract / OMNL banking rail

+- [ ] Freeze and execute the first-slice deployment checklist:
+  - `docs/03-deployment/DBIS_RTGS_FIRST_SLICE_ARCHITECTURE.md`
+  - `docs/03-deployment/DBIS_RTGS_FIRST_SLICE_DEPLOYMENT_CHECKLIST.md`
 - [ ] Confirm production-grade Mifos/Fineract tenancy, credentials, API reachability, and operator runbook completeness for the current OMNL environment.
 - [ ] Complete the full operator rail using:
  - `scripts/omnl/omnl-operator-rail.sh`
@@ -218,6 +221,15 @@
  - transfer
  - callback / status
  - settlement window / liquidity behavior
+
+### 12.4 First-slice HYBX sidecar promotion
+
+- [ ] Promote the selected first-slice sidecars from local build verification to real production runtime on Proxmox VE:
+  - `mifos-fineract-sidecar`
+  - `server-funds-sidecar`
+  - `off-ledger-2-on-ledger-sidecar`
+- [ ] Freeze Proxmox runtime targets, Java baseline, secrets/env injection, and restart/logging policy.
+- [ ] Validate each selected sidecar with a stable health/readiness path and one canonical RTGS flow before calling the first slice production-ready.
 - [ ] Define the canonical mapping between Mojaloop events and:
  - Fineract postings
  - sidecar events
--- a/docs/03-deployment/DBIS_RTGS_E2E_REQUIREMENTS_MATRIX.md
+++ b/docs/03-deployment/DBIS_RTGS_E2E_REQUIREMENTS_MATRIX.md
@@ -47,6 +47,21 @@
 | Institutional 4.995 package path | Partial | Regulatory / compliance lead | same standard + OMNL scripts | Requires real institution attestation and submission-grade evidence | `--strict` readiness passes with real institution materials |
 | RTGS production gate | Planned | DBIS program owner | this matrix + [DBIS_PHASES_1_TO_3_PRODUCTION_GATE.md](DBIS_PHASES_1_TO_3_PRODUCTION_GATE.md) | Not all subsystems are green | All mandatory rows for the chosen RTGS architecture are `Complete` |

+## First-slice implementation note
+
+The current recommended first production slice is frozen in:
+
+- [DBIS_RTGS_FIRST_SLICE_ARCHITECTURE.md](DBIS_RTGS_FIRST_SLICE_ARCHITECTURE.md)
+- [DBIS_RTGS_FIRST_SLICE_DEPLOYMENT_CHECKLIST.md](DBIS_RTGS_FIRST_SLICE_DEPLOYMENT_CHECKLIST.md)
+
+As of 2026-03-28, the following first-slice sidecars are at least build-verified locally:
+
+- `mifos-fineract-sidecar`
+- `server-funds-sidecar`
+- `off-ledger-2-on-ledger-sidecar`
+
+That is not yet equivalent to production deployment. The deployment checklist remains the gate for Proxmox promotion and live RTGS flow validation.
+
 ## Immediate execution priorities

 ### Priority 1 — Freeze the canonical banking rail
@@ -94,3 +109,5 @@ The RTGS stack can be called fully end-to-end only when all of the following are
 - [DBIS_HYBX_SIDECAR_BOUNDARY_MATRIX.md](DBIS_HYBX_SIDECAR_BOUNDARY_MATRIX.md)
 - [DBIS_MOJALOOP_INTEGRATION_STATUS.md](DBIS_MOJALOOP_INTEGRATION_STATUS.md)
 - [DBIS_HYPERLEDGER_IDENTITY_STACK_DECISION.md](DBIS_HYPERLEDGER_IDENTITY_STACK_DECISION.md)
+- [DBIS_RTGS_FIRST_SLICE_ARCHITECTURE.md](DBIS_RTGS_FIRST_SLICE_ARCHITECTURE.md)
+- [DBIS_RTGS_FIRST_SLICE_DEPLOYMENT_CHECKLIST.md](DBIS_RTGS_FIRST_SLICE_DEPLOYMENT_CHECKLIST.md)
--- a/docs/03-deployment/DBIS_RTGS_FIRST_SLICE_ARCHITECTURE.md
+++ b/docs/03-deployment/DBIS_RTGS_FIRST_SLICE_ARCHITECTURE.md
@@ -0,0 +1,110 @@
+# DBIS RTGS First Slice Architecture
+
+**Last updated:** 2026-03-28  
+**Purpose:** Freeze the narrowest credible first production slice for the DBIS RTGS program using the assets currently available in the repository and local environment.
+
+## Design principle
+
+The first production slice should avoid expanding the critical path with systems that are not yet deployed or not yet evidenced in the workspace. The goal is to get to a real end-to-end settlement slice with the minimum number of moving parts.
+
+## Included in first slice
+
+### Core runtime
+
+- Chain 138 / Hyperledger Besu
+- Explorer / Blockscout
+- FireFly primary (`6200`)
+- Mifos / Fineract / OMNL rail
+
+### Selected HYBX sidecars
+
+- `mifos-fineract-sidecar`
+- `server-funds-sidecar`
+- `off-ledger-2-on-ledger-sidecar`
+
+## Deferred from first slice
+
+- FireFly secondary (`6201`)
+- Fabric runtime
+- Indy runtime
+- Mojaloop integration
+- Aries / AnonCreds / Ursa runtime
+- Cacti runtime
+- card-network, securities, and flash-loan specialized sidecars
+
+## Why these sidecars
+
+### `mifos-fineract-sidecar`
+
+This is the strongest general-purpose banking sidecar for the first slice because it already models:
+
+- compliance
+- posting
+- settlement
+- reconciliation
+- audit
+- Fineract integration
+- events
+- observability
+
+### `server-funds-sidecar`
+
+This is the best fit for treasury/funds movement orchestration because it already exposes:
+
+- transfer initiation
+- approvals
+- settlement events
+- reconciliation
+- Fineract integration
+
+### `off-ledger-2-on-ledger-sidecar`
+
+This is the best fit for the off-ledger to on-ledger bridge because it already frames:
+
+- collateral or source-of-value lock
+- conversion initiation
+- settlement
+- extinguish/release flow
+
+## First-slice interaction flow
+
+1. Participant/office exists in OMNL / Fineract.
+2. A transfer or settlement intent enters through the canonical banking rail.
+3. `mifos-fineract-sidecar` validates, screens, posts, and settles the banking-side event.
+4. `server-funds-sidecar` coordinates treasury/server-funds transfer semantics where needed.
+5. `off-ledger-2-on-ledger-sidecar` maps qualifying off-ledger value into the Chain 138 settlement path.
+6. Chain 138 settlement contracts record or confirm the on-ledger leg.
+7. Reconciliation and audit artifacts are produced.
+8. The regulatory package path is generated from the resulting evidence set.
+
+## Immediate implementation sequence
+
+### Sequence A — Banking rail
+
+1. Freeze the OMNL / Fineract tenant and operator path.
+2. Freeze the participant / treasury / GL model.
+3. Validate the `HYBX-BATCH-001` operator flow end to end.
+
+### Sequence B — Sidecar baseline
+
+1. Build and validate `mifos-fineract-sidecar`.
+2. Build and validate `server-funds-sidecar`.
+3. Build and validate `off-ledger-2-on-ledger-sidecar`.
+4. Record runtime dependencies, health endpoints, and deployment units.
+
+### Sequence C — Settlement mapping
+
+1. Freeze the canonical Chain 138 settlement contracts used by RTGS.
+2. Define the exact event handoff from sidecars to on-chain settlement.
+3. Define reconciliation outputs and operator evidence.
+
+## Exclusion rule
+
+Anything not listed in “Included in first slice” must not be treated as a blocker for initial RTGS activation unless governance explicitly changes scope.
+
+## Related artifacts
+
+- [DBIS_RTGS_E2E_REQUIREMENTS_MATRIX.md](DBIS_RTGS_E2E_REQUIREMENTS_MATRIX.md)
+- [DBIS_HYBX_SIDECAR_BOUNDARY_MATRIX.md](DBIS_HYBX_SIDECAR_BOUNDARY_MATRIX.md)
+- [DBIS_MOJALOOP_INTEGRATION_STATUS.md](DBIS_MOJALOOP_INTEGRATION_STATUS.md)
+- [DBIS_HYPERLEDGER_IDENTITY_STACK_DECISION.md](DBIS_HYPERLEDGER_IDENTITY_STACK_DECISION.md)
--- a/docs/03-deployment/DBIS_RTGS_FIRST_SLICE_DEPLOYMENT_CHECKLIST.md
+++ b/docs/03-deployment/DBIS_RTGS_FIRST_SLICE_DEPLOYMENT_CHECKLIST.md
@@ -0,0 +1,224 @@
+# DBIS RTGS First Slice Deployment Checklist
+
+**Last updated:** 2026-03-28  
+**Purpose:** Convert the first-slice RTGS architecture into a deployable checklist for Proxmox VE and live operator validation. This document is intentionally narrower than the full RTGS program. It only covers the components chosen for the initial production slice.
+
+## Scope
+
+This checklist applies to the following first-slice components:
+
+- Chain 138 / Hyperledger Besu
+- Explorer / Blockscout
+- FireFly primary (`6200`)
+- OMNL / Fineract banking rail
+- `mifos-fineract-sidecar`
+- `server-funds-sidecar`
+- `off-ledger-2-on-ledger-sidecar`
+
+This checklist does **not** assume that the following are part of the first production slice:
+
+- FireFly secondary (`6201`)
+- Fabric runtime
+- Indy runtime
+- Mojaloop integration
+- Aries / AnonCreds / Ursa runtime
+- Cacti runtime
+- specialized HYBX sidecars outside the chosen first slice
+
+## Build verification completed
+
+The following sidecars were built successfully on 2026-03-28 with Maven and `-DskipTests`:
+
+### `mifos-fineract-sidecar`
+
+- Build command:
+  - `cd /home/intlc/projects/HYBX_Sidecars/mifos-fineract-sidecar && mvn -q -DskipTests package`
+- Verified runnable artifact:
+  - `/home/intlc/projects/HYBX_Sidecars/mifos-fineract-sidecar/scsm-app/target/scsm-app-1.0.0-SNAPSHOT.jar`
+
+### `server-funds-sidecar`
+
+- Build command:
+  - `cd /home/intlc/projects/HYBX_Sidecars/server-funds-sidecar && mvn -q -DskipTests package`
+- Verified runnable artifact:
+  - `/home/intlc/projects/HYBX_Sidecars/server-funds-sidecar/funds-app/target/funds-app-1.0.0-SNAPSHOT.jar`
+
+### `off-ledger-2-on-ledger-sidecar`
+
+- Build command:
+  - `cd /home/intlc/projects/HYBX_Sidecars/off-ledger-2-on-ledger-sidecar && mvn -q -DskipTests package`
+- Verified runnable artifact:
+  - `/home/intlc/projects/HYBX_Sidecars/off-ledger-2-on-ledger-sidecar/target/off-ledger-2-on-ledger-sidecar-0.1.0-SNAPSHOT.jar`
+
+## Runtime deployment baseline
+
+### Besu / explorer / FireFly
+
+- [x] Chain 138 Besu production baseline is healthy
+- [x] Explorer / Blockscout is live
+- [x] FireFly primary `6200` is healthy enough to serve as the first-slice workflow/event anchor
+- [ ] Freeze the exact role FireFly will play in the first slice:
+  - event broker only
+  - process/workflow orchestrator
+  - audit/event persistence layer
+
+### OMNL / Fineract
+
+- [ ] Confirm the exact production tenant, auth path, and base URL
+- [ ] Freeze the operator runbook and canonical batch flow
+- [ ] Confirm the participant / office / treasury / GL model used by the sidecars
+
+## Sidecar runtime requirements
+
+### `mifos-fineract-sidecar`
+
+**Reference repo:**
+- `/home/intlc/projects/HYBX_Sidecars/mifos-fineract-sidecar`
+
+**Run command:**
+- `java -jar scsm-app/target/scsm-app-1.0.0-SNAPSHOT.jar`
+
+**Health endpoints:**
+- `GET /actuator/health`
+- `GET /actuator/health/liveness`
+- `GET /actuator/health/readiness`
+
+**Key dependencies from repo-backed docs/config:**
+- database:
+  - default H2 in-memory
+  - production path should use `DB_URL` for PostgreSQL
+- Redis:
+  - required for idempotency
+  - `REDIS_HOST`, `REDIS_PORT`
+- Kafka:
+  - optional
+  - `KAFKA_BOOTSTRAP_SERVERS`
+- Fineract:
+  - `FINERACT_BASE_URL`
+
+**Deployment gate before Proxmox promotion:**
+- [ ] Confirm production DB target
+- [ ] Confirm Redis target
+- [ ] Confirm Fineract base URL and tenant/auth
+- [ ] Prove `/actuator/health/readiness` healthy with production-like dependencies
+- [ ] Validate one canonical transfer request path against the intended Fineract rail
+
+### `server-funds-sidecar`
+
+**Reference repo:**
+- `/home/intlc/projects/HYBX_Sidecars/server-funds-sidecar`
+
+**Run command:**
+- `java -jar funds-app/target/funds-app-1.0.0-SNAPSHOT.jar`
+
+**Health endpoints:**
+- `GET /actuator/health/liveness`
+- `GET /actuator/health/readiness`
+
+**Key dependencies from repo-backed docs/config:**
+- database:
+  - default H2 in-memory
+  - production path should use `DB_URL` for PostgreSQL
+- Redis:
+  - required for idempotency
+  - `REDIS_HOST`
+- Kafka:
+  - optional
+  - `KAFKA_BOOTSTRAP_SERVERS`
+- Fineract adapter:
+  - present in repo structure and must be wired to the selected banking rail
+
+**Deployment gate before Proxmox promotion:**
+- [ ] Decide whether this sidecar is required in the initial funds/treasury path
+- [ ] Freeze its system-of-record boundary versus `mifos-fineract-sidecar`
+- [ ] Validate initiate/approve/status flow against the chosen RTGS participant model
+- [ ] Validate settlement event and reconciliation behavior
+
+### `off-ledger-2-on-ledger-sidecar`
+
+**Reference repo:**
+- `/home/intlc/projects/HYBX_Sidecars/off-ledger-2-on-ledger-sidecar`
+
+**Run command:**
+- `mvn spring-boot:run`
+  - or use the built jar:
+  - `java -jar target/off-ledger-2-on-ledger-sidecar-0.1.0-SNAPSHOT.jar`
+
+**Current config evidence:**
+- `config/application.yaml`
+- default `server.port: 8080`
+- `FINERACT_BASE_URL`
+- `XAU_FEED_URL`
+- GL and risk configuration under `config/`
+
+**Health/readiness note:**
+- repo runbook calls out adding Spring Boot Actuator as optional
+- production deployment should not proceed until there is a stable health/readiness path
+
+**Deployment gate before Proxmox promotion:**
+- [ ] Confirm this sidecar’s role in the first production slice
+- [ ] Freeze the exact off-ledger source event and on-ledger settlement target
+- [ ] Confirm Fineract connectivity and XAU pricing/oracle strategy
+- [ ] Add or verify production-grade health endpoint support
+- [ ] Validate one canonical conversion/session flow end to end
+
+## Proxmox deployment checklist
+
+### Pre-deploy
+
+- [ ] Choose the actual Proxmox target(s) for the three sidecars
+- [ ] Decide container vs VM packaging for each sidecar
+- [ ] Freeze Java runtime baseline
+- [ ] Freeze secrets/env injection method
+- [ ] Freeze logging and restart policy
+
+### Dependency wiring
+
+- [ ] Postgres target(s) available if not using H2
+- [ ] Redis target(s) available
+- [ ] Kafka decision made:
+  - optional and deferred, or
+  - required for the chosen event model
+- [ ] Fineract API reachability proven from the chosen Proxmox runtime
+- [ ] FireFly integration point frozen if FireFly is part of the event path
+
+### Runtime verification
+
+- [ ] Process starts under systemd / container supervisor
+- [ ] Health endpoints return healthy
+- [ ] API base paths respond
+- [ ] Logs show no dependency boot failures
+- [ ] Sidecar can reach Fineract
+- [ ] Sidecar can reach any required Redis / DB / Kafka dependency
+
+### Functional verification
+
+- [ ] `mifos-fineract-sidecar` processes one canonical transfer
+- [ ] `server-funds-sidecar` processes one canonical funds/approval flow if in scope
+- [ ] `off-ledger-2-on-ledger-sidecar` processes one canonical conversion/settlement flow
+- [ ] Chain 138 receives and records the intended settlement leg where applicable
+- [ ] Reconciliation and audit outputs are captured
+
+## First-slice production gate
+
+The first RTGS production slice should be treated as deployable only when all of the following are true:
+
+1. Besu, explorer, and FireFly primary remain healthy.
+2. OMNL / Fineract tenant, auth, and operator path are frozen.
+3. The participant / treasury / GL model is frozen.
+4. The selected sidecars are deployed to Proxmox VE or an equivalent production runtime.
+5. Each selected sidecar has a stable health/readiness path.
+6. One canonical RTGS flow executes successfully across:
+   - Fineract / OMNL
+   - selected sidecar(s)
+   - Chain 138 settlement path
+   - reconciliation / evidence output
+7. Any deferred components remain explicitly deferred in architecture and runbooks.
+
+## Related artifacts
+
+- [DBIS_RTGS_FIRST_SLICE_ARCHITECTURE.md](DBIS_RTGS_FIRST_SLICE_ARCHITECTURE.md)
+- [DBIS_RTGS_E2E_REQUIREMENTS_MATRIX.md](DBIS_RTGS_E2E_REQUIREMENTS_MATRIX.md)
+- [DBIS_HYBX_SIDECAR_BOUNDARY_MATRIX.md](DBIS_HYBX_SIDECAR_BOUNDARY_MATRIX.md)
+- [DBIS_MOJALOOP_INTEGRATION_STATUS.md](DBIS_MOJALOOP_INTEGRATION_STATUS.md)
+- [DBIS_HYPERLEDGER_IDENTITY_STACK_DECISION.md](DBIS_HYPERLEDGER_IDENTITY_STACK_DECISION.md)
--- a/docs/MASTER_INDEX.md
+++ b/docs/MASTER_INDEX.md
@@ -58,7 +58,7 @@
 |------|-----------------|
 | **00-meta** (tasks, next steps, phases) | [00-meta/NEXT_STEPS_INDEX.md](00-meta/NEXT_STEPS_INDEX.md), [00-meta/PHASES_AND_TASKS_MASTER.md](00-meta/PHASES_AND_TASKS_MASTER.md) |
 | **02-architecture** | [02-architecture/](02-architecture/) — **Public sector + Phoenix catalog baseline:** [02-architecture/PUBLIC_SECTOR_TENANCY_MARKETPLACE_AND_DEPLOYMENT_BASELINE.md](02-architecture/PUBLIC_SECTOR_TENANCY_MARKETPLACE_AND_DEPLOYMENT_BASELINE.md); **non-goals (incl. catalog vs marketing §9):** [02-architecture/NON_GOALS.md](02-architecture/NON_GOALS.md); **DBIS Chain 138:** [dbis_chain_138_technical_master_plan.md](../dbis_chain_138_technical_master_plan.md), [02-architecture/DBIS_NODE_ROLE_MATRIX.md](02-architecture/DBIS_NODE_ROLE_MATRIX.md), [02-architecture/DBIS_PHASE2_PROXMOX_SOVEREIGNIZATION_ROADMAP.md](02-architecture/DBIS_PHASE2_PROXMOX_SOVEREIGNIZATION_ROADMAP.md) |
-| **03-deployment** | [03-deployment/OPERATIONAL_RUNBOOKS.md](03-deployment/OPERATIONAL_RUNBOOKS.md), [03-deployment/DEPLOYMENT_ORDER_OF_OPERATIONS.md](03-deployment/DEPLOYMENT_ORDER_OF_OPERATIONS.md), **Public sector live checklist:** [03-deployment/PUBLIC_SECTOR_LIVE_DEPLOYMENT_CHECKLIST.md](03-deployment/PUBLIC_SECTOR_LIVE_DEPLOYMENT_CHECKLIST.md), **Proxmox VE ops template:** [03-deployment/PROXMOX_VE_OPERATIONAL_DEPLOYMENT_TEMPLATE.md](03-deployment/PROXMOX_VE_OPERATIONAL_DEPLOYMENT_TEMPLATE.md) · [`config/proxmox-operational-template.json`](config/proxmox-operational-template.json); **DBIS Phase 1–3:** [03-deployment/PHASE1_DISCOVERY_RUNBOOK.md](03-deployment/PHASE1_DISCOVERY_RUNBOOK.md), [03-deployment/DBIS_PHASE3_E2E_PRODUCTION_SIMULATION_RUNBOOK.md](03-deployment/DBIS_PHASE3_E2E_PRODUCTION_SIMULATION_RUNBOOK.md), [03-deployment/CALIPER_CHAIN138_PERF_HOOK.md](03-deployment/CALIPER_CHAIN138_PERF_HOOK.md), [03-deployment/DBIS_HYPERLEDGER_RUNTIME_STATUS.md](03-deployment/DBIS_HYPERLEDGER_RUNTIME_STATUS.md), [03-deployment/DBIS_PHASES_1_TO_3_PRODUCTION_GATE.md](03-deployment/DBIS_PHASES_1_TO_3_PRODUCTION_GATE.md), [03-deployment/DBIS_RTGS_E2E_REQUIREMENTS_MATRIX.md](03-deployment/DBIS_RTGS_E2E_REQUIREMENTS_MATRIX.md), [03-deployment/DBIS_HYBX_SIDECAR_BOUNDARY_MATRIX.md](03-deployment/DBIS_HYBX_SIDECAR_BOUNDARY_MATRIX.md), [03-deployment/DBIS_MOJALOOP_INTEGRATION_STATUS.md](03-deployment/DBIS_MOJALOOP_INTEGRATION_STATUS.md), [03-deployment/DBIS_HYPERLEDGER_IDENTITY_STACK_DECISION.md](03-deployment/DBIS_HYPERLEDGER_IDENTITY_STACK_DECISION.md) |
+| **03-deployment** | [03-deployment/OPERATIONAL_RUNBOOKS.md](03-deployment/OPERATIONAL_RUNBOOKS.md), [03-deployment/DEPLOYMENT_ORDER_OF_OPERATIONS.md](03-deployment/DEPLOYMENT_ORDER_OF_OPERATIONS.md), **Public sector live checklist:** [03-deployment/PUBLIC_SECTOR_LIVE_DEPLOYMENT_CHECKLIST.md](03-deployment/PUBLIC_SECTOR_LIVE_DEPLOYMENT_CHECKLIST.md), **Proxmox VE ops template:** [03-deployment/PROXMOX_VE_OPERATIONAL_DEPLOYMENT_TEMPLATE.md](03-deployment/PROXMOX_VE_OPERATIONAL_DEPLOYMENT_TEMPLATE.md) · [`config/proxmox-operational-template.json`](config/proxmox-operational-template.json); **DBIS Phase 1–3:** [03-deployment/PHASE1_DISCOVERY_RUNBOOK.md](03-deployment/PHASE1_DISCOVERY_RUNBOOK.md), [03-deployment/DBIS_PHASE3_E2E_PRODUCTION_SIMULATION_RUNBOOK.md](03-deployment/DBIS_PHASE3_E2E_PRODUCTION_SIMULATION_RUNBOOK.md), [03-deployment/CALIPER_CHAIN138_PERF_HOOK.md](03-deployment/CALIPER_CHAIN138_PERF_HOOK.md), [03-deployment/DBIS_HYPERLEDGER_RUNTIME_STATUS.md](03-deployment/DBIS_HYPERLEDGER_RUNTIME_STATUS.md), [03-deployment/DBIS_PHASES_1_TO_3_PRODUCTION_GATE.md](03-deployment/DBIS_PHASES_1_TO_3_PRODUCTION_GATE.md), [03-deployment/DBIS_RTGS_E2E_REQUIREMENTS_MATRIX.md](03-deployment/DBIS_RTGS_E2E_REQUIREMENTS_MATRIX.md), [03-deployment/DBIS_RTGS_FIRST_SLICE_ARCHITECTURE.md](03-deployment/DBIS_RTGS_FIRST_SLICE_ARCHITECTURE.md), [03-deployment/DBIS_RTGS_FIRST_SLICE_DEPLOYMENT_CHECKLIST.md](03-deployment/DBIS_RTGS_FIRST_SLICE_DEPLOYMENT_CHECKLIST.md), [03-deployment/DBIS_HYBX_SIDECAR_BOUNDARY_MATRIX.md](03-deployment/DBIS_HYBX_SIDECAR_BOUNDARY_MATRIX.md), [03-deployment/DBIS_MOJALOOP_INTEGRATION_STATUS.md](03-deployment/DBIS_MOJALOOP_INTEGRATION_STATUS.md), [03-deployment/DBIS_HYPERLEDGER_IDENTITY_STACK_DECISION.md](03-deployment/DBIS_HYPERLEDGER_IDENTITY_STACK_DECISION.md) |
 | **04-configuration** | [04-configuration/README.md](04-configuration/README.md), [04-configuration/ADDITIONAL_PATHS_AND_EXTENSIONS.md](04-configuration/ADDITIONAL_PATHS_AND_EXTENSIONS.md) (paths, registry, token-mapping, LiFi/Jumper); **Chain 138 wallets:** [04-configuration/CHAIN138_WALLET_CONFIG_VALIDATION.md](04-configuration/CHAIN138_WALLET_CONFIG_VALIDATION.md); **Chain 2138 testnet wallets:** [04-configuration/CHAIN2138_WALLET_CONFIG_VALIDATION.md](04-configuration/CHAIN2138_WALLET_CONFIG_VALIDATION.md); **OMNL Indonesia / HYBX-BATCH-001:** [04-configuration/mifos-omnl-central-bank/HYBX_BATCH_001_OPERATOR_CHECKLIST.md](04-configuration/mifos-omnl-central-bank/HYBX_BATCH_001_OPERATOR_CHECKLIST.md), [04-configuration/mifos-omnl-central-bank/INDONESIA_PACKAGE_4_995_EVIDENCE_STANDARD.md](04-configuration/mifos-omnl-central-bank/INDONESIA_PACKAGE_4_995_EVIDENCE_STANDARD.md) |
 | **06-besu** | [06-besu/MASTER_INDEX.md](06-besu/MASTER_INDEX.md) |
 | **Testnet (2138)** | [testnet/DEFI_ORACLE_META_TESTNET_2138_RUNBOOK.md](testnet/DEFI_ORACLE_META_TESTNET_2138_RUNBOOK.md), [testnet/TESTNET_DEPLOYMENT.md](testnet/TESTNET_DEPLOYMENT.md) |