openalice-selfhosted

Valid manifest (100/100) with clear summary, integrator-focused README, and an AGENTS.md, but @feature annotations are weak (features 44/100, only 3 features) — solid orientation docs, thin in-code/feature-level annotation.

docker-compose profiles (core/ai/full) plus a smoke-test.sh give basic deploy structure, but no verified healthchecks, restart policies, timeouts, graceful-shutdown, or idempotency signals; reliability is implicit in compose defaults rather than declared.

TLS terminated by Traefik with Let's Encrypt across all subdomain routes, but no visible rate-limiting, security headers, or verified secret handling at the compose layer; authn/SSRF/injection defense is delegated entirely to the bundled services (auth, social-api), unverified here.

A single smoke-test.sh is the only test artifact; inspector found no analyzable source (expected for an infra repo) and there are no unit/integration tests covering critical deploy paths — coverage of the bring-up flow is minimal.

Only a single init-db.sql bootstrap; manifest owns_tables is empty, with no migration framework, FK/constraint definitions, or RLS/tenant isolation at this layer — schema concerns are pushed down to individual services and absent from this repo.

Atlas health probe is down (builder error on unresolved ${DOMAIN}, uptime_24h 0%); no metrics, tracing, structured-log, or health-probe wiring at the compose layer beyond smoke-test.sh — observability essentially absent at this level.