v0.2 covers trial signup, Pilot server creation and access, plain Ubuntu creation, server power actions, resize, snapshots, and the web console. Central routes custom domains through Site Domain, registers each region's Cargo, and asks Pilot to rename the trial site and the admin domain. The regional proxy terminates TLS for a regional name. Pilot holds the certificate for a custom domain.

• Integrations: ownership and the contracts with Atlas, Pilot, and Cargo.
• Staging validation: contract tests, region connection, and staging evidence.

Open work is tracked in GitHub issues.

Each module specification below describes current behavior. Update it in the same change as the behavior.

• Team network identity: allocation, immutability, and migration of tenant IDs.
• Signing keys: separate Atlas, Pilot, and OIDC trust, operator initialization, and token verification.
• Regional configuration: signed connection checks, tenant selection, and regional identity.
• Image offerings: presentation records and on-demand regional System image discovery.
• Resource actions: durable intent, states, authorization, and recovery for server operations.
• Team SSH keys: public login keys, server selection, and rotation.
• Proxy routes: site and custom-domain routes on the regional proxy, with retry and delete.
• Trial sites: the site a Pilot image carries, its predictable address, and the signup handoff.
• VM snapshots: the free-snapshot pricing rule, daily snapshots, terminate with a snapshot, and restore.

• IAM: Central identity and permission model.
• Capabilities: the capability vocabulary and fixtures contract.
• SSO: login flows, token types, and consumer contracts.
• Inbound webhooks: the contract a region signs and sends its reports with. Share it with Atlas and Cargo.
• Frappe Connect: the planned contract for partner teams and partner links. Share it with the Connect developers.

• Billing architecture: the billing code map and domain rules.
• Metered services API: usage reporting for metered services.