PROVIDER INDEPENDENCE PLANNING
Provider lock-in is quiet until it becomes a cage.
This registry records policy and replacement candidates for source control, deploys, runtime, secrets, databases, cache, and APIs. The candidates have no accepted migration trials here. All cutovers remain held until installation, restore, health, traffic transition and rollback evidence is reviewed and the migration is approved.
Hold · GitHub
GitHub AccessPolicy checklist complete: 5/5 policy items documentedReplacement candidates · unverified
GitLab, Codeberg, self-hosted Gitea, or internal TheoB source control.
✓ Provider DefinedGitHub
✓ Purpose DefinedSource control, repo access, pushes, actions, deployment triggers.
✓ Owner DefinedFounder / Internal Technician
✓ Replacement Candidates ListedCandidates are listed; none has an accepted migration trial here.
✓ Alert RuleWarn before expiration, failed auth, or unusual repo access.
Migration held · 0/5 required gates supported by accepted evidence
• Target Runtime and ConfigurationExact release, target identity, compatibility and protected configuration need an accepted trial.
• Backup and RestoreAn independently recoverable backup and a successful restore need retained evidence.
• Health and Traffic TransitionTarget health, domain routing and measured interruption need an accepted transition trial.
• RollbackRecovery to the previous release with retained user work needs an observed rollback.
• Human ApprovalApproval must name the reviewed migration and exact release before production cutover.
Hold · Vercel
Vercel DeploymentPolicy checklist complete: 5/5 policy items documentedReplacement candidates · unverified
Netlify, Cloudflare Pages, Railway, Render, Fly.io, or TheoB deployment runner.
✓ Provider DefinedVercel
✓ Purpose DefinedProduction deploys, preview builds, rollback, domain deployment state.
✓ Owner DefinedFounder / Internal Technician
✓ Replacement Candidates ListedCandidates are listed; none has an accepted migration trial here.
✓ Alert RuleWarn on failed build, expired token, domain issue, or deployment slowdown.
Migration held · 0/5 required gates supported by accepted evidence
• Target Runtime and ConfigurationExact release, target identity, compatibility and protected configuration need an accepted trial.
• Backup and RestoreAn independently recoverable backup and a successful restore need retained evidence.
• Health and Traffic TransitionTarget health, domain routing and measured interruption need an accepted transition trial.
• RollbackRecovery to the previous release with retained user work needs an observed rollback.
• Human ApprovalApproval must name the reviewed migration and exact release before production cutover.
Hold · Hostinger / VPS
Hostinger / VPS RootPolicy checklist complete: 5/5 policy items documentedReplacement candidates · unverified
Hetzner, AWS, DigitalOcean, Render, Fly.io, or TheoB managed runtime.
✓ Provider DefinedHostinger / VPS
✓ Purpose DefinedBackend runtime, server fixes, logs, agents, heavy services.
✓ Owner DefinedFounder only with delegated technician access
✓ Replacement Candidates ListedCandidates are listed; none has an accepted migration trial here.
✓ Alert RuleWarn on SSH failure, server overload, login anomaly, or uptime drop.
Migration held · 0/5 required gates supported by accepted evidence
• Target Runtime and ConfigurationExact release, target identity, compatibility and protected configuration need an accepted trial.
• Backup and RestoreAn independently recoverable backup and a successful restore need retained evidence.
• Health and Traffic TransitionTarget health, domain routing and measured interruption need an accepted transition trial.
• RollbackRecovery to the previous release with retained user work needs an observed rollback.
• Human ApprovalApproval must name the reviewed migration and exact release before production cutover.
Hold · Runtime / Vercel / VPS
Environment VariablesPolicy checklist complete: 5/5 policy items documentedReplacement candidates · unverified
Centralized secret manager, Doppler, Infisical, Vault, or internal Key Master.
✓ Provider DefinedRuntime / Vercel / VPS
✓ Purpose DefinedAPI keys, service URLs, secrets, database strings, agent configs.
✓ Owner DefinedInternal Technician
✓ Replacement Candidates ListedCandidates are listed; none has an accepted migration trial here.
✓ Alert RuleWarn on missing env var, invalid secret, exposed value, or stale config.
Migration held · 0/5 required gates supported by accepted evidence
• Target Runtime and ConfigurationExact release, target identity, compatibility and protected configuration need an accepted trial.
• Backup and RestoreAn independently recoverable backup and a successful restore need retained evidence.
• Health and Traffic TransitionTarget health, domain routing and measured interruption need an accepted transition trial.
• RollbackRecovery to the previous release with retained user work needs an observed rollback.
• Human ApprovalApproval must name the reviewed migration and exact release before production cutover.
Hold · Redis
Redis / CachePolicy checklist complete: 5/5 policy items documentedReplacement candidates · unverified
Upstash, Redis Cloud, Dragonfly, Valkey, or self-hosted cache layer.
✓ Provider DefinedRedis
✓ Purpose DefinedLive queues, sessions, agent state, rate limits, fast coordination.
✓ Owner DefinedInfrastructure Technician
✓ Replacement Candidates ListedCandidates are listed; none has an accepted migration trial here.
✓ Alert RuleWarn on quota pressure, latency spikes, missing connection, or auth failure.
Migration held · 0/5 required gates supported by accepted evidence
• Target Runtime and ConfigurationExact release, target identity, compatibility and protected configuration need an accepted trial.
• Backup and RestoreAn independently recoverable backup and a successful restore need retained evidence.
• Health and Traffic TransitionTarget health, domain routing and measured interruption need an accepted transition trial.
• RollbackRecovery to the previous release with retained user work needs an observed rollback.
• Human ApprovalApproval must name the reviewed migration and exact release before production cutover.
Hold · Postgres
Postgres / DatabasePolicy checklist complete: 5/5 policy items documentedReplacement candidates · unverified
Supabase, Neon, Railway, Crunchy Bridge, RDS, or self-hosted Postgres.
✓ Provider DefinedPostgres
✓ Purpose DefinedPersistent memory, users, audit logs, event anchors, operational records.
✓ Owner DefinedFounder / Database Technician
✓ Replacement Candidates ListedCandidates are listed; none has an accepted migration trial here.
✓ Alert RuleWarn on connection failure, slow queries, storage pressure, or suspicious writes.
Migration held · 0/5 required gates supported by accepted evidence
• Target Runtime and ConfigurationExact release, target identity, compatibility and protected configuration need an accepted trial.
• Backup and RestoreAn independently recoverable backup and a successful restore need retained evidence.
• Health and Traffic TransitionTarget health, domain routing and measured interruption need an accepted transition trial.
• RollbackRecovery to the previous release with retained user work needs an observed rollback.
• Human ApprovalApproval must name the reviewed migration and exact release before production cutover.
Hold · Weather / News / Maps / AI / Payments
External APIsPolicy checklist complete: 5/5 policy items documentedReplacement candidates · unverified
Provider-specific fallback vendors and mock-safe degradation.
✓ Provider DefinedWeather / News / Maps / AI / Payments
✓ Purpose DefinedLive signals, intelligence feeds, maps, models, payment workflows.
✓ Owner DefinedProvider-specific operator
✓ Replacement Candidates ListedCandidates are listed; none has an accepted migration trial here.
✓ Alert RuleWarn on quota burn, expiry, billing spikes, degraded source, or failed calls.
Migration held · 0/5 required gates supported by accepted evidence
• Target Runtime and ConfigurationExact release, target identity, compatibility and protected configuration need an accepted trial.
• Backup and RestoreAn independently recoverable backup and a successful restore need retained evidence.
• Health and Traffic TransitionTarget health, domain routing and measured interruption need an accepted transition trial.
• RollbackRecovery to the previous release with retained user work needs an observed rollback.
• Human ApprovalApproval must name the reviewed migration and exact release before production cutover.