> ## Documentation Index
> Fetch the complete documentation index at: https://docs.tayho.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Documentation release gate

> Mandatory access-control acceptance before the Mintlify site is exposed.

<Warning>
  Publication is blocked until an authorized Mintlify administrator completes
  this checklist and records redacted evidence. Repository checks cannot prove
  deployed authentication behavior.
</Warning>

## Preconditions

* Use one partially authenticated Mintlify project with content path `/docs`.
* Use a Mintlify subdomain or custom domain. Do not use an authenticated custom
  basepath.
* Enable Partial Authentication before connecting the release branch to an
  externally reachable documentation URL.
* Configure OAuth or JWT user data so authorized engineers receive the exact
  group value `engineering`.
* Prepare three sessions: anonymous, authenticated without the engineering
  claim, and authenticated with the engineering claim.
* Use non-production test identities and redact personal data, cookies, access
  tokens, API keys, and complete JWTs from evidence.

## Configuration evidence

| Field                                  | Redacted value or evidence link |
| -------------------------------------- | ------------------------------- |
| Staging domain                         | Pending                         |
| Mintlify project and content path      | Pending                         |
| Authentication mode                    | Pending                         |
| Partial Authentication enabled         | Pending                         |
| Group claim source and redacted sample | Pending                         |
| Administrator and execution time       | Pending                         |

## TS-006 access acceptance

Record an HTTP status, screenshot or trace link, and executor for every row.

| Session                             | Check                                                   | Expected                                               | Evidence |
| ----------------------------------- | ------------------------------------------------------- | ------------------------------------------------------ | -------- |
| Anonymous                           | Landing, Quickstart, and one generated REST operation   | `200`; no engineering navigation or results            | Pending  |
| Anonymous                           | Architecture, operations, and a protected direct URL    | `404`, including redirect or generated-reference paths | Pending  |
| Anonymous                           | Search, assistant, MCP, `llms.txt`, and Markdown export | Public corpus only                                     | Pending  |
| Authenticated, no engineering claim | Protected navigation and direct URLs                    | Hidden and `404`                                       | Pending  |
| Authenticated, no engineering claim | Search, assistant, MCP, and Markdown export             | No engineering content                                 | Pending  |
| Authenticated, engineering claim    | Engineering and Operations navigation and direct URLs   | Available                                              | Pending  |
| Authenticated, engineering claim    | Search, assistant, MCP, and Markdown export             | Intended engineering corpus available                  | Pending  |
| Either authorized session           | Historical plan title and direct plan URL               | No result and no served page                           | Pending  |

## Content and release acceptance

* [ ] Anonymous and engineering `mint validate` checks passed for the release
  commit.
* [ ] OpenAPI drift, typed examples, content boundaries, Secretlint, links,
  anchors, redirects, snippets, accessibility, and operations-assets checks
  passed.
* [ ] Generated OpenAPI and AsyncAPI operation/channel pages are reachable by
  the intended audience.
* [ ] The API playground does not prefill or store Tayho credentials.
* [ ] No documentation page contains a resolved secret or credential-bearing
  URL.
* [ ] The exact release commit and CI run are linked below.
* [ ] The TS-006 table has no `Pending` entry.
* [ ] The authorized administrator has signed off.

| Release evidence           | Link or value |
| -------------------------- | ------------- |
| Git commit                 | Pending       |
| Documentation CI           | Pending       |
| Mintlify deployment        | Pending       |
| Acceptance evidence bundle | Pending       |
| Administrator sign-off     | Pending       |

## Release decision

Keep the site private and do not announce its URL while any item is pending or
failed. A failed protected-page, search, assistant, MCP, or export check is an
access-control failure: remove public exposure first, correct the dashboard or
content classification, redeploy, and repeat every TS-006 row.