System map

From you

nothing

Where the numbers come from

ADR-007

Every Terminal number reads Neon ops.*; BigQuery is transport for Google and TikTok spend only (critical-invariants.md 26-33)
Meta spend has come straight from the Graph API since July 7, 2026: hourly :07 plus a nightly 28-day restatement at 02:37 UTC (daily-meta-mirror-sync.ts 1-13 is the unscheduled rollback lane)
ops.campaign_daily_spend is a materialized view refreshed hourly at :25 from ad_spend.* through ops.campaign_ads; freshness stamped in ops.matview_refreshes
Signed case = ops.cases status active, not archived, operator_excluded_at IS NULL; CPSC = all-in cost / signed over one aligned window (cpsc.ts 18-22)

Hostnames found in source

tortterminal.com is the apex and capital pillar; app., ops., my., intel. are pillar hosts (constants/pillars.ts 84-97); beta is tortterminal-dev.com from develop (release.yml 6)
api.tortterminal.com: lk-pull-api Cloud Run service behind an LB (lk_pull_api.tf 3-7)
verify.tortterminal.com: default link base (verify-link.ts 13-15); DNS still fronts the static Cloudflare Pages site in another repo, the Cloud Run verify-page is on its run.app URL (verify_page.tf 10-11)
intake.levylaw.com: lk-intake repo on Cloudflare Pages; the form runtime posts to a first-party API host that is not fixed in this repo (form-runtime api.ts 9-11)
intelligence.tortterminal.com: not in source. The intelligence pillar host is intel.tortterminal.com, marked future; public_intel is the de-identified schema (mig 666) with vader_ro read (mig 850)

Deploy boundary and migrations

pr-validate.yml gates every PR (lint on changed files, tsc, tests, 14 audits incl. audit:acl); terraform.yml plans on PR and applies on Release (terraform.yml 51-63)
Publishing a GitHub Release is the only path to production: release.yml creates the Vercel deployment, jobs-deploy.yml pushes cron-jobs:<sha> and rolls lk-pull-api, terraform.yml applies infra/
Migrations: 758 SQL files numbered to 852, applied by run-migrations.js in order, tracked in system.schema_migrations; prod-migrate.yml applies main only with two non-author NEON-APPROVE signatures and the owner URL in the production environment secret
Vercel also runs 31 crons from app/vercel.json (outbox-drain every minute, signed-case-sweep, kyc, QC reconcile); each resolves an ADR-022 service account

Outside this repo, and what is not drawn

tt-agent-mcp (the agent MCP gateway), zenith-events (Pub/Sub front door incl. GHL signing events), lk-intake (Cloudflare Pages), the static verify.tortterminal site, Hevo and Looker all live elsewhere; this map shows only what tort-terminal exposes to them
Not drawn as edges: migrations -> Neon DDL, lk-pull-api and verify-page -> Neon reads (both services take DATABASE_URL from Secret Manager), Release -> Vercel deploy; each is stated on its node or boundary
Google Ads and TikTok Ads integration clients are stubs (BQ-only); the meta-ads integration dir is a shell, @/lib/meta is canonical; Deel is pulled nightly by agent-deel-sync into deel.*; Twilio sends the verify link SMS through the outbox
GHL inbound is polling (ghl-sync every 15 min); no GHL webhook lands on tort-terminal directly. Signings arrive via zenith-events -> document-events webhook -> ops.document_event_inbox -> ops.cases