Deploy durable tenant authority runtime

workplans/TEN-WP-0004-production-runtime.md

@@ -0,0 +1,56 @@
+---
+id: TEN-WP-0004
+type: workplan
+title: "Production tenant authority runtime"
+domain: infotech
+repo: tenant-engine
+status: finished
+owner: codex
+topic_slug: netkingdom
+created: "2026-08-08"
+updated: "2026-08-08"
+---
+
+# Production tenant authority runtime
+
+Deploy the already-defined tenant authority and flex-auth policy behind the
+user-engine platform portal with restart-safe persistence.
+
+## Durable store and package
+
+```task
+id: TEN-WP-0004-T01
+status: done
+priority: high
+```
+
+Provide a durable runtime store, container image, and persistence tests.
+
+Done 2026-08-09: SQLite-backed persistence on a 1 Gi RWO PVC, immutable image,
+and restart-survival verification are complete.
+
+## Production deployment
+
+```task
+id: TEN-WP-0004-T02
+status: done
+priority: high
+```
+
+Deploy flex-auth and tenant-engine with least-privilege networking and storage.
+
+Done 2026-08-09: both services are Ready with namespace-scoped ingress/egress;
+the live flex-auth-authorized create returned 201.
+
+## Portal integration and live verification
+
+```task
+id: TEN-WP-0004-T03
+status: done
+priority: high
+```
+
+Align user-engine's adapter with the authority contract and prove tenant creation.
+
+Done 2026-08-09: the deployed portal adapter created
+`tenant:trial:portalcheck`; tenant-engine resolved it after a pod restart.