ADR-014 domain & TLS PoC — node A

two-VPS staging verification · ordercode/control-panel-L12#2466

EDGE LIVE — served over on-demand staging TLS

Assumptions under test

A3 · on-demand-TLS edge, ask-gated per-host issuance	PASS
A4 · DNS-01 wildcard via KAS dns_kas	PASS
A5 · cert in shared Redis store · PG/Redis replicas	node-A staged

Live edge analytics

parsed from Caddy's access + gate logs every 10s · stats.json

hosts served…

This page is itself the proof: you reached it over HTTPS on a cert that Caddy minted on-demand from Let's Encrypt staging, only because the ask allow-list returned 200 for this host. The cert lives in Redis, ready for node B to serve.