Standing up a site or API on edge infrastructure without the reputation and credential mistakes.
Assumes:An edge platform with custom-domain support, and a domain you already control. Cloudflare-flavoured; the reputation problem is not platform-specific.
Download 3 documents + MANIFEST
Free platform subdomains are blocked as a category by security filters, so a subset of real users silently fails.
Getting a credential from its store into its destination without it ever appearing as text the assistant emits.
What an agent should check before installing a dependency, and which files it must never modify without a shown diff.
Shipped inside the archive. Reproduced here so you can read it before downloading.
# New edge project
Standing up a site or API on edge infrastructure without the reputation and credential mistakes.
Source: https://the-handover.org/packs/new-edge-project
Built: 2026-08-29
Documents: 3
Licence: Handover-1.0 (© Captivated Ltd) — https://the-handover.org/licence
## What this pack assumes
An edge platform with custom-domain support, and a domain you already control. Cloudflare-flavoured; the reputation problem is not platform-specific.
## Contents
### docs/custom-domains-for-edge-deployments.md
Title: Ship edge deployments on a custom domain, never the platform subdomain
Summary: Free platform subdomains are blocked as a category by security filters, so a subset of real users silently fails.
Authors: Leon Mallett, Founder of Captivated Ltd (captivated.online)
Source: https://the-handover.org/docs/custom-domains-for-edge-deployments
Last confirmed working: 2026-08-08
Marks: Hard-Won
SHA-256: 2aa506dbd67283c4b71239eaf90048eb6ef75339944a29a7e26ed503ae60acbd
### docs/live-secrets-in-ai-sessions.md
Title: Handling live secrets in AI coding sessions
Summary: Getting a credential from its store into its destination without it ever appearing as text the assistant emits.
Authors: Leon Mallett, Founder of Captivated Ltd (captivated.online)
Source: https://the-handover.org/docs/live-secrets-in-ai-sessions
Last confirmed working: 2026-08-07
Marks: Hard-Won
SHA-256: 7a47848943a345cbeadf47f9c7c29dc4832115dee9261f0ef851c1bb7f6d9a8a
### docs/supply-chain-baseline-ai-development.md
Title: Supply-chain security baseline for AI-assisted development
Summary: What an agent should check before installing a dependency, and which files it must never modify without a shown diff.
Authors: Leon Mallett, Founder of Captivated Ltd (captivated.online)
Source: https://the-handover.org/docs/supply-chain-baseline-ai-development
Last confirmed working: 2026-08-07
SHA-256: 6c30cf40c85876977a7893c5b20713456adf4e009c6c8f1a43858b14856af247
## Licence and attribution
Copyright is retained by the authors and Captivated Ltd. You may use these
documents in your own projects — private, public, commercial, client work —
and adapt them to fit. What is reserved is republishing the collection as a
collection: mirrors, or catalogues assembled out of these documents.
Each file carries an attribution header naming its authors, its source and the
date it was last confirmed. Keep it: once a file has been separated from this
pack, that header is the only thing that still credits the person who wrote it.
## Verifying this pack
Each SHA-256 above is of that file exactly as it appears in this archive. Verify one
with `shasum -a 256 <file>`; a file whose hash does not match was modified after
packaging.
Document files are byte-reproducible: the same source document, at the same
confirmation state, always produces the same bytes. The archive as a whole is not,
because this manifest records the build date above — two builds on different days
differ in that line and therefore in the archive, while every document file inside
stays identical. The per-file hashes are the thing to check.