# Protected files — do not modify

These files and directories must never be modified by Claude Code without an
explicit request. They belong to the deployment pipeline and the authoritative
visual reference, and are otherwise frozen.

## Deployment & CI/CD
.github/workflows/
Dockerfile
docker-compose.yml
Caddyfile
Caddyfile.test

## Infrastructure & provisioning
infra/                  (Ansible playbooks: development / production)

## Stylesheet
stylesheet.css          (repo root — authoritative visual reference, use as-is)

## Abandoned scaffolding (do not edit or rely on)
app/                    (original Next.js + Qdrant design, never shipped — the real app is /src)

---

Notes:
- The active application lives entirely in `/src`. Editing the app means editing `/src`.
- PocketBase schema changes go through `pb_migrations/` (and should be mirrored in
  `scripts/setup-pb-collections.mjs`) — those are NOT frozen.
- If a task genuinely requires touching a frozen file (e.g. a deliberate deployment
  change), confirm with the human first.