new changes

architecture/2026/05-hosting-mvp.md

@@ -0,0 +1,26 @@
+# Hosting MVP Implementation Notes
+
+## Scope
+- Website create/update/delete workflows.
+- Domain binding/unbinding.
+- SSL issue/apply/renew automation.
+- Webserver adapter support: Nginx, Apache, OpenLiteSpeed.
+
+## Control Plane APIs
+- `GET /api/v1/sites`
+- `POST /api/v1/sites`
+- `POST /api/v1/sites/{site}/domains`
+- `POST /api/v1/ssl/issue`
+- `POST /api/v1/ssl/apply`
+- `POST /api/v1/ssl/renew`
+
+## Execution Contracts
+- `SITE_CREATE`, `SITE_UPDATE`, `SITE_DELETE`
+- `DOMAIN_ADD`, `DOMAIN_REMOVE`
+- `SSL_ISSUE`, `SSL_APPLY`, `SSL_RENEW`
+- `WEBSERVER_RELOAD`
+
+## Runtime Guarantees
+- Every operation is a tracked job with progress updates.
+- SSL operations require DNS precheck and challenge validation before apply.
+- Webserver reload only occurs after adapter-specific config validation.