Installation Permissions
Define the filesystem, container, database, and secret-handling permissions required by an AutoCore operator.
Installation requires an operator who can invoke the container runtime, provide configuration and secret references, create or select persistent storage, and connect to the configured PostgreSQL, Redis, and Meilisearch services. The runtime images are designed to run application services as non-root users where the Dockerfiles specify it.
Keep configuration and backup locations restricted to the installation operator and service accounts. Do not place passwords, private keys, or real environment files in the release package or documentation repository.
Verification
Check read/write access to the installation state and media locations, database permissions for migrations, image-pull authorization, and backup-directory ownership. Preserve the evidence without printing secret values.