Z Platform is a clean, security-first platform foundation extracted incrementally from cvsz/zeaz-platform.
It separates user applications, deployable services, shared packages, infrastructure, and operational documentation. The legacy repository remains unchanged and is the migration source of record.
- AI workspace: chat, coding, agent orchestration, research jobs
- Platform core: identity, tenant boundaries, usage and audit events
- Financial boundary: billing and ledger integration only
- Operations: Cloudflare Zero Trust, GitOps, observability
apps/ User-facing applications
services/ Deployable APIs and workers
packages/ Shared libraries and API contracts
workers/ Cloudflare Workers
infra/ Infrastructure definitions and deployment manifests
configs/ Non-secret schemas and examples
docs/ Architecture, ADRs, runbooks and migration records
tools/ Developer tooling and generators
This repository does not bulk-copy legacy applications. Each migration must have an owner, dependency inventory, tests, security review, and rollback path.
Provider and model allowlists are tracked explicitly. Secrets, payment credentials, wallet keys, and provider API keys stay outside the repository.
No secrets, payment credentials, wallet keys, MPC shares, Cloudflare tokens, or provider API keys may be committed. See SECURITY.md.