Installation

Install

jhf-heddle installs as a repo-owned identity runtime with live verification against an owner-supplied host.

Baseline Bootstrap

1. Copy the runtime env contract and set host-specific values outside git.
2. Review compose.yaml and config/runtime/port-policy.json.
3. Start or refresh the stack from the owner checkout path for this repository.

cp .env.example .env
docker compose up -d
docker compose up -d

The second docker compose up -d is intentional so the bootstrap path stays idempotent.

Live Runtime Ports

Current live verification against the owner-supplied host confirms:

• Keycloak HTTP: 18090
• Keycloak management: 19090
• Plane OIDC bridge: <internal-runtime-redacted>:18091
• Agent reconcile API: 18092
• Agent reconcile worker: 18093
• Loom OIDC bridge: <internal-runtime-redacted>:18094

Verify Path

python scripts/validate-baseline-stack-matrix.py
python scripts/verify-runtime-guardrails-v1.py
python scripts/verify-runtime-guardrails-v1.py --live-host <live-host> --ssh-user <ssh-user> --remote-repo-path <remote-repo-path>
python scripts/verify-runtime-materialization-drift.py --live-host <live-host> --ssh-user <ssh-user> --remote-repo-path <remote-repo-path>

For deeper runtime and recovery flows, continue with:

• Configuration
• Operations
• Stack Contract (docs/STACK_CONTRACT.md)

---

License: AGPLv3 Project: https://helpifyr.com