<!-- runbook -->
# {{OWNER}}/{{REPO}} operator runbook

<!-- #8129: repo-owned skeleton; fill in the TODOs and keep it current with the code. -->
Operate from this runbook. Keep instructions current in the same PR as the code they cover.
TODO: add section-level coverage globs once the repo's runtime paths are known.

## Who may do what

Production mutations need the owner's fresh approval. TODO: name the project admins and escalation path.
```bash
mmi-cli whoami
mmi-cli oracle org access capabilities --repo {{OWNER}}/{{REPO}} --json
```

## Stages and where they run

TODO: list stages, URLs, runtime model and hosting locations; mark non-applicable stages explicitly.
```bash
mmi-cli oracle org project get {{OWNER}}/{{REPO}} --json
mmi-cli oracle org project deploy get {{OWNER}}/{{REPO}} --stage dev --json
```

## Logs and status

TODO: name service logs, alert destinations and expected healthy signals. Tenant-only examples:
```bash
mmi-cli devops runtime tenant status {{OWNER}}/{{REPO}} dev
mmi-cli devops runtime tenant control {{OWNER}}/{{REPO}} dev logs --lines 200
```

## Control (start, stop, restart, run-task)

TODO: replace tenant examples if this repo has a different runtime; declare safe tasks in the registry.
```bash
mmi-cli devops runtime tenant control {{OWNER}}/{{REPO}} dev start --watch
mmi-cli devops runtime tenant control {{OWNER}}/{{REPO}} dev stop --watch
mmi-cli devops runtime tenant control {{OWNER}}/{{REPO}} dev restart --watch
mmi-cli devops runtime tenant control {{OWNER}}/{{REPO}} dev run-task --task <registry-task-name> --watch
```

## Data and backups

TODO: list stores, retention, backup owner, recovery objectives and the verified restore procedure.
Do not guess restore commands or run destructive actions without explicit approval.

## Third-party APIs

TODO: list providers, secret key names, scopes and rotation owners; never record secret values.
Keys are used only via `mmi-cli vault secrets use`; never print, paste or commit them.
```bash
mmi-cli vault secrets use --repo {{OWNER}}/{{REPO}} --key <KEY_NAME> -- <consumer-command>
```

## Quality loops

TODO: name this repo's required gate, approved checks and post-deploy smoke checks.
```bash
mmi-cli oracle docs refs --runbooks-only
```

## Known gaps

TODO: list missing operational capabilities, their owners and follow-up issues. Do not invent a workaround.