Version v0.1 of the documentation is no longer actively maintained. The site that you are currently viewing is an archived snapshot. For up-to-date documentation, see the latest version.

Documentation

Guides and reference material for secure, contract-driven infrastructure templates.

ainfra is the infrastructure provisioning layer for projectious.work. It combines strict contracts with a thin, local wrapper around OpenTofu and Ansible:

The project provisions targets. It does not build workload images, install Kubernetes or processkit, deploy aibox fleets, or hide OpenTofu and Ansible behavior.

Find your path

If you want to…Start here
Validate and provision a disposable targetQuickstart
Follow the complete Hetzner lifecycleHetzner environment how-to
Understand ownership and tool boundariesArchitecture
Review threat assumptions and invariantsSecurity model
Operate plan, apply, output, and destroyLifecycle operations
Find an included infrastructure templateTemplate catalog
Understand how templates are structuredTemplate strategy
Author another infrastructure templateTemplate authoring
Look up commands or schemasReference

Core promises

  • Inputs are validated before infrastructure mutation.
  • Apply identifies the exact reviewed plan.
  • Destruction requires the exact reviewed destroy-plan ID.
  • Credentials enter through references and child-process environments.
  • Ordinary output contracts contain references, never secret values.
  • Provider, image, automation, and scanner versions are pinned.
  • Every automated gate is available locally.
Getting started

Install the toolchain and exercise ainfra safely.

Concepts

Architecture, security, and state boundaries.

How-to guides

Complete procedures for common ainfra operator tasks.

Guides

Operate the lifecycle, tooling, and template-authoring workflow.

Reference

Command, contract, template, and acceptance references.

Contributing

Develop, test, and document changes locally.