Skip to main content
Batoi RAD Docs

Security and Operations

Apply deployment, backup, logging, incident response, and release controls for Batoi RAD.

Version 1.x Active framework documentation Reviewed Jul 20, 2026 Next review Oct 21, 2026
Start Reading Open Batoi RAD GitHub Report documentation issue

Owner: Batoi Engineering Reviewed by: Batoi RAD Maintainers Source revision: bb9902c

Browse Batoi RAD Documentation Security and Operations
On this page

Security and Operations

Deployment controls

  • Serve only public_html/ and deny direct access to rad/.
  • Use HTTPS, secure and HTTP-only cookies, trusted proxy configuration, and a restrictive firewall.
  • Give the web process write access only to required runtime directories.
  • Keep developer and AI code-assistance controls disabled unless explicitly required by a trusted administrator.
  • Run dependency, test, static-analysis, and framework health checks before promotion.

Backup and restore

Back up the database, local configuration, runtime data, application modules, and application-owned uploads as one recoverable set. Encrypt backups, restrict access, and test restoration. Retain the previous release archive before applying an upgrade.

Logging and incident response

Application and security logs belong outside public routing. Rotate and retain them according to organizational policy. Do not log credentials, session values, full prompts, sensitive source, or personal data that is not required for the event.

After a suspected compromise, revoke active sessions, rotate affected credentials, preserve relevant evidence, and restore only from a verified clean state.