| app-check |
Firebase's bot-defence layer that gates every Firestore call to verified clients. |
| auth-domain |
auth.oriz.in, the custom domain that lets one Firebase project serve every *.oriz.in site. |
| cache-rebuild |
The GitHub Actions job that reads JSONL canonical and re-populates the Turso warm cache. |
| card-on-file |
A payment instrument linked to a service account; the family avoids this for every paid-tier-capable provider. |
| concept-file |
One OKF unit — a single markdown file with YAML frontmatter representing one fact, decision, or rule. |