- delete internal infra docs: system-of-record.md, sitemap.html status board
(exposed live attack surface: subdomains, up/down status, client names)
- parameterize OS desktop: derive DOMAIN from location.hostname, u() helper
builds service URLs so a friend deploying at their domain just works
- scrub all live service links to service.{DOMAIN} placeholders
- remove client domains (bicos, hkintercare, etc.) everywhere
- collapse brand/client site tiles to one generic Website tile
- single public CTA -> atlascorporation.nl (Get a workspace)
- relative SSO sign-out; sanitized server scripts to example.com
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
- header.svg rebuilt blue-dominant (gold demoted to accent)
- new assets: desktop-preview.svg, architecture.svg, os-screenshot.png (real render)
- README: blue badges, embedded hero + diagram, wiki link
- fix dead Tabler icon-font CDN (cdnjs 404 -> jsdelivr) in live + repo OS desktop
- fix broken ./docs/ai-stack.md badge link (file now exists)
- add docs/academy.md, docs/islamic-layer.md, docs/ai-stack.md
- SERVICES.md: Academy + Islamic layer sections
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
- Full Linux XFCE desktop in the browser at desktop.atlascorporation.nl
(Selkies/WebRTC, Ubuntu 26.04), gated by Caddy basic_auth + TLS
- Claude Code CLI + Chromium pre-installed; one-click desktop launchers
- runs on loopback only; auth enforced at the Caddy edge
- web/os.html: OS v5 adds Remote Desktop app (39 apps total)
- docs/remote-desktop.md + deploy/webtop-docker-compose.yml
- web/os.html: all verified-live services as desktop apps, grouped into
Cockpit / Identity / AI / Work / Files & Comms / Ops / Sites launcher
- excludes dead endpoints (ai 404, mail 502, twenty 502) — no dead tiles
- docs/system-of-record.md: audit-verified inventory of every service +
websites, with live/dead/SSO status, AI-history map, security posture