Hongming Wang c93388441d docs(arch): rewrite staging DNS section (per-tenant CNAME, not wildcard) ... The "Architecture" diagram and section 5 ("Cloudflare: staging subdomain") both implied that `*.staging.moleculesai.app` is a wildcard DNS record. It is not. The control plane writes a per-tenant CNAME at provision time (see `internal/provisioner/ec2.go` -> `Tunnel.CreateTunnelDNS`), and unknown slugs correctly return NXDOMAIN. This rewrite: - Replaces `*.staging.moleculesai.app` / `*.moleculesai.app` in the ASCII diagram with `<slug>.<env-domain>` plus a "no wildcard" note. - Renames section 5 to "Cloudflare: per-tenant CNAMEs (no wildcard)" and explains that NXDOMAIN on unknown slugs is correct, that `getaddrinfo ENOTFOUND` in tests means the slug is unprovisioned (not an infra bug), and that the same model applies to both staging and production.		2026-05-01 19:17:57 -07:00
..
blog	post(blog): "Why You Need a Team of AI Agents, Not One Genius Model"	2026-04-24 18:19:28 -07:00
docs	docs(arch): rewrite staging DNS section (per-tenant CNAME, not wildcard)	2026-05-01 19:17:57 -07:00