Cloudflare · crons · bindings · the restore checklist
TheWorkers
The machinery the ship runs on
Six Workers ran for months in exactly one place. Cloudflare keeps the last hundred versions — their retention policy, not ours, and gone with the account. Every other authority in this system is plain text under version control. The Workers were the exception, and they are the ones holding the money and the court.
They are mirrored now. This pane reads the wiring: what is scheduled, what is bound, and which secrets each Worker needs to come back up — the half a repo of source cannot give you.
WORKERS.json. Nothing below
is shown, because a pane that renders yesterday's wiring when it cannot see
today's is worse than a blank one. The file is written by
mirror.yml and carried here by the Glass Gate — if it is
missing, the mirror has not run or the gate is not publishing it.The reading
Pulled from Cloudflare's API by a token with read permission and nothing else. It cannot deploy. Source is mirrored separately into the private Workers repo and deliberately does not cross into this one.
The fleet
How a page is made
A reader opens a surface and gets HTML. Nothing about that is obvious, because the page they receive did not exist as a file anywhere. It was assembled at the edge, in a few hundred milliseconds, out of three things that live in three different places and refuse three different failures.
Plate — the three keys, and the path from a flat file to a page.
What actually happens on one request
Take a reader opening a figure's terminal. Nothing is fetched from a database of pages, because there is no such database.
| # | What happens | Where |
|---|---|---|
| 1 | GitHub Pages serves Page1.html — markup and script, no content | Amenti · static |
| 2 | The page calls /feed on the proxy | Hades |
| 3 | The proxy reads names.csv from raw.githubusercontent, cached an hour | Amenti → Hades |
| 4 | It reads the week's articles from the ARTICLES KV binding | Hades · KV |
| 5 | Plates resolve by convention — img/{key}-terminal.jpg, probed, never looked up in a map | Amenti · static |
| 6 | For the court, it calls the mint over the MINT_SVC service binding — worker to worker, never over the public internet | Hades → Hades |
| 7 | The mint reads Supabase with its service key and returns /hall | Hades · Supabase |
| 8 | The page composes HTML in the browser and the reader sees it | the surface |
| · | The proxy keeps none of it. It wakes, runs, and is gone | Hades |
FROM FLAT FILES THAT CANNOT RUN AND COMPUTE THAT CANNOT REMEMBER.
What each Worker can reach
Derived from the bindings, not stated — a binding is the only way a Worker can touch anything outside itself. If a store is not bound here, that Worker cannot see it, whatever any document claims.
The restore checklist
The source is not the whole Worker. Standing these back up in a fresh account means recreating every secret by hand — the API returns their names and never their values, which is why this is a checklist and not a backup.
| Secret | Needed by |
|---|
Findings
AND LEAVE IT UNWIRED. THIS IS THE OTHER HALF.
What this is not
It is not a failover. Workers execute on Cloudflare's runtime; a
worker.js in a repo is inert. If Cloudflare is down, the site is
down and none of this helps. What the mirror turns is reconstruct six
Workers from memory into paste known-good code and rewire from this
page — a bad week instead of a catastrophe.
The case it earns its keep on most often is smaller and likelier than losing an account: someone edits a Worker and breaks it. Then the mirror is simply the last good copy, and the drift alarm is what tells you the edit happened.
Amenti Fleet
Ingram Manor LLC
Workers · reads WORKERS.json · nothing on this pane was typed