---
id: w4/m3/t004
title: "Manifests + docs cutover"
worker: worker4
status: done
estimate: 25m
depends_on: [w4/m3/t002, w4/m3/t003]
---

## Objective

deployment.yaml drops BEX_API_TOKEN secretRef + BEX_AUTH_MODE (Hydra/Kratos URLs stay); docs/ADR006-bex-api.md Auth section rewritten around API keys + token exchange; docs/ADR012-auth.md status updated (static gone, fail-closed trade-off recorded); CLAUDE.md env table + internal/api/CLAUDE.md; curl examples now use TOKEN.

## Files

- operator/config/api/deployment.yaml
- docs/ADR006-bex-api.md
- docs/ADR012-auth.md
- docs/ADR010-observability.md
- docs/ADR007-restart-suspend-and-resume.md
- CLAUDE.md
- operator/internal/api/CLAUDE.md
