TLS Requirements
Document the external TLS boundary for AutoCore without claiming a built-in certificate authority or deployment.
TLS termination is an external deployment responsibility. AutoCore source documents application URLs, health checks, and reverse-proxy boundaries; it does not supply a public certificate or claim that an installation is internet-ready merely because the containers start.
Operator responsibility
Provide certificates for every public hostname, protect private keys, configure secure forwarding, and keep certificate renewal observable. Do not place certificate material in the commercial package or the documentation repository.
Verification
Validate the certificate chain, hostname coverage, redirect policy, proxy headers, and each public/admin/API route. Record the result without publishing certificate contents or private paths.