# Em 0006

- Object ID: `em:task:sha256:afe6e0718cc1f4a3e52d450768e6ac8113c4977b29023a0d67a0d0c2304639df`
- Kind: `task`
- Repository path: [`tasks/contracts/EM-0006.json`](https://github.com/yoheinakajima/epistemedia/blob/f92846570180dfa4511263f8ba98ecd18f7772c9/tasks/contracts/EM-0006.json)
- Content digest: `80119cb729d143451e1483f9d1869e1295b445e7a787e171370425919cc7a579`

**Also filed under:** [Agent Operations](https://epistemedia.org/topics/agent-operations/), [Research Program](https://epistemedia.org/topics/research-program/)

## Source content

{
  "$schema": "https://epistemedia.com/schemas/task-contract-v1.json",
  "id": "EM-0006",
  "title": "Activate the owned episte.media production domain",
  "status": "ready",
  "change_class": "ordinary-implementation",
  "objective": "Replace superseded deployment targets with episte.media, api.episte.media, and mcp.episte.media, then activate public services from one accepted release manifest without rewriting protected identifiers or accepted history.",
  "depends_on": ["EM-0001"],
  "supersedes": "EM-0004",
  "authority": {
    "allowed_paths": [
      ".github/**",
      "README.md",
      "docs/**",
      "ops/**",
      "src/**",
      "tests/**",
      "runs/**",
      "releases/**",
      "pyproject.toml",
      "server.json",
      "llms.txt",
      "Dockerfile",
      "compose.yaml"
    ],
    "forbidden_paths": [
      "constitution/**",
      "schemas/**",
      "policies/**",
      "governance/events/**",
      "tasks/contracts/EM-0001.json",
      "tasks/contracts/EM-0002.json",
      "tasks/contracts/EM-0003.json",
      "tasks/contracts/EM-0004.json",
      "tasks/contracts/EM-0005.json"
    ]
  },
  "acceptance": [
    "all active deployment configuration and current-state documentation use episte.media and its declared subdomains",
    "historical accepted records and protected identifier namespaces are not silently rewritten",
    "the default-hostname Pages bootstrap publishes without a CNAME before custom-domain activation",
    "the human site serves one accepted static manifest over HTTPS",
    "API and MCP serve the same catalog and frontier as the human site when externally activated",
    "root and path-scoped llms.txt and Markdown alternates resolve",
    "custom-domain redirects and canonical URLs are correct after verified DNS activation",
    "MCP protocol, Origin, caching, and error tests pass against production",
    "anonymous reads have declared rate and resource limits",
    "deployment does not receive contribution or integration authority",
    "a production run receipt records DNS, commit, manifests, checksums, endpoints, and observed limitations"
  ],
  "evidence": [
    {
      "type": "owner-statement",
      "context": "The owner controls episte.media and selected it as the production domain."
    }
  ],
  "limitations": [
    "Existing schema and policy identifiers under epistemedia.com are protected protocol identifiers; EM-0007 governs their migration.",
    "Public DNS for episte.media was not delegated or populated when this contract was registered.",
    "DNS management, production runtime credentials, package publisher identity, and irreversible registry publication remain separately gated."
  ]
}