Phase 9 shipped: Private Hetzner K3s
The first provider-backed template candidate adds private management, tunneled ingress, temporary administration, and pinned K3s bootstrap.
Tagged
Roadmap
10 pages
Phase 8 shipped: Template authoring and conformance
ainfra now publishes a human and AI authoring contract, deterministic local diagnostics, and a provider-free clean-room proof.
Phase 7 shipped: Guarded MCP server mode
ainfra now exposes read-only inspection and explicitly authorized, plan-bound lifecycle operations through MCP over stdio.
Phase 6 shipped: Destruction, recovery, and hardening
Reviewed destruction, interruption recovery, retained run browsing, redaction, and lifecycle security hardening are available.
Phase 5 shipped: Output, inventory, and Ansible
Standardized non-secret output now drives deterministic inventory and controlled Ansible configuration with convergence evidence.
Phase 4 shipped: Reviewed OpenTofu plans
OpenTofu changes can be planned, reviewed, bound to immutable inputs, and applied only from the exact saved plan.
Phase 3 shipped: Immutable template sources
Local and Git-subdirectory template sources can be locked, materialized, verified by digest, and checked for drift.
Phase 2 shipped: Contracts and doctor
Deployment discovery, strict native-file contracts, deterministic doctor diagnostics, and approved local reconciliation are available.