From b6f916584fc09b192ee8474c9e295e04868b6bed Mon Sep 17 00:00:00 2001
From: TheFlow <theflow@sydigital.com>
Date: Thu, 9 Oct 2025 09:46:46 +1300
Subject: [PATCH] docs: update systemd documentation and bump cache version to
 v1.0.3

- Added comprehensive systemd process management section to CLAUDE.md
- Migrated from pm2 to systemd for production service management
- Updated cache-busting version to v1.0.3 on index.html
- Tooltips already configured for hover-only display (opacity-0 group-hover:opacity-100)
- Leader card action button verified and present
---
 CLAUDE.md         | 23 ++++++++++++++++++++++-
 public/index.html |  4 ++--
 2 files changed, 24 insertions(+), 3 deletions(-)

diff --git a/CLAUDE.md b/CLAUDE.md
index e1675617..2d45654d 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -121,7 +121,28 @@ Action types: `file-edit`, `database`, `architecture`, `config`, `security`, `va
 **Human approval required**: Architectural changes, DB schema, security, values content
 **Quality standard**: World-class, no shortcuts, no fake data
 
+### Process Management: systemd (NOT pm2)
+
+**Production**: `tractatus.service` (systemd service on vps-93a693da.vps.ovh.net)
+**Development**: Run via `npm start` (local development) or `tractatus-dev.service` (systemd)
+
+**Key Commands**:
+```bash
+# Production status/control
+ssh -i ~/.ssh/tractatus_deploy ubuntu@vps-93a693da.vps.ovh.net "sudo systemctl status tractatus"
+ssh -i ~/.ssh/tractatus_deploy ubuntu@vps-93a693da.vps.ovh.net "sudo systemctl restart tractatus"
+ssh -i ~/.ssh/tractatus_deploy ubuntu@vps-93a693da.vps.ovh.net "sudo journalctl -u tractatus -f"
+
+# Install/update systemd services
+./scripts/install-systemd.sh prod  # Production
+./scripts/install-systemd.sh dev   # Development (requires sudo password)
+```
+
+**Service Files**: `systemd/tractatus-prod.service`, `systemd/tractatus-dev.service`
+**Security**: NoNewPrivileges, PrivateTmp, ProtectSystem=strict, 2G memory limit
+**Auto-start**: Enabled on boot via `systemctl enable`
+
 ---
 
-**Last Updated**: 2025-10-09 (Added automated CSP validation to pre-action-check.js)
+**Last Updated**: 2025-10-09 (Migrated from pm2 to systemd, added automated CSP validation)
 **For full details**: See CLAUDE_Tractatus_Maintenance_Guide.md
diff --git a/public/index.html b/public/index.html
index 71a933d4..a8b065b0 100644
--- a/public/index.html
+++ b/public/index.html
@@ -5,7 +5,7 @@
   <meta name="viewport" content="width=device-width, initial-scale=1.0">
   <title>Tractatus AI Safety Framework | Architectural Constraints for Human Agency</title>
   <meta name="description" content="World's first production implementation of architectural AI safety constraints. Preserving human agency through structural, not aspirational, guarantees.">
-  <link rel="stylesheet" href="/css/tailwind.css?v=1.0.2">
+  <link rel="stylesheet" href="/css/tailwind.css?v=1.0.3">
   <style>
     .gradient-text { background: linear-gradient(120deg, #3b82f6 0%, #8b5cf6 100%); -webkit-background-clip: text; -webkit-text-fill-color: transparent; }
     .hover-lift { transition: transform 0.2s; }
@@ -28,7 +28,7 @@
   <a href="#main-content" class="skip-link">Skip to main content</a>
 
   <!-- Navigation (injected by navbar.js) -->
-  <script src="/js/components/navbar.js?v=1.0.2"></script>
+  <script src="/js/components/navbar.js?v=1.0.3"></script>
 
   <!-- Hero Section -->
   <header role="banner">