Pioneer is a production acceptance canary for the Pioneer compiler. It compiles HTTP, Artisan, queue-consumer, and scheduled entrypoints from one capsule into one Cloudflare Worker.
| Property | Value |
|---|---|
| Source | org/apps/pioneer/ |
| Worker | stormtrust-pioneer |
| Custom Domain | pioneer.stormtrust.net |
| Durable resources | D1 database, R2 bucket, queue, and dead-letter queue |
| Verification | make app-verify APP=pioneer |
| Release | Trusted main workflow through the central Pioneer adapter |
| Live proof | Post-deployment smoke and pioneer-canary.yml |
Cloudflare Access protects the application. The automation exceptions are
/openapi.json and /__pioneer/proof/*; state-changing proof routes require
the PIONEER_CANARY_TOKEN bearer secret.
Terraform owns the Worker identity, D1, R2, queues, and Access applications. Pioneer owns compilation and generated configuration. Wrangler owns code, bindings, assets, cron triggers, observability, the domain, and deployment.
The live proof exercises generated OpenAPI, D1 models, R2 storage, successful and dead-lettered queue jobs, cron execution, assets, rendered exceptions, and structured invocation logs. It changes test data and acknowledges its matching dead-letter message. An Access redirect alone does not prove these features.
Use Check application health to interpret this evidence and Recover a release for retry and source-correction procedures. Code recovery does not restore D1 or R2 data or undo queued work.
Use the shared validation and deployment guides and health evidence by app. For a failed release, follow recovery procedures with this application's state and access boundaries.