What is already in place
- Manual-only operation mode
- Backlog visibility from the review queue
- Recent runs and recent drafts surfaced in the dashboard
- Generated admin JSON that the dashboard can render safely
What must come next
- Protect
/admin/*with Cloudflare Access before exposing it publicly. - Add protected manual webhook triggers for run-loop and deploy actions.
- Connect Cloudflare analytics and request-log classification for human versus crawler reporting.
- Add article-state transitions with audit history: draft, review, approved, published, corrected.
Traffic plan
Human traffic should come from Cloudflare Web Analytics. Crawler traffic should come from server-side request classification, not client-side code.
Publishing policy
Keep publishing manual until review actions, logs, and protected controls are fully in place. The right sequence is manual terminal control, then manual n8n, then authenticated UI triggers.