johannes
451c475b91
CD - Develop (guide → bcos.dev) / build-and-deploy (push) Successful in 2m18s
The environment cap decided what a Guide instance serves, but defaulted to ALL four tiers. That makes the safe configuration the one you have to remember: a missing or misspelled GUIDE_SERVED_AUDIENCES in production would serve the Architect and Claude tiers to any MSP_ADMIN — and MSP_ADMIN is a customer-facing role (QDS log in as MSP_ADMIN). One forgotten env line was all it took. Default is now `customer`. Environments opt UP explicitly: production -> unset (customer only: modules + Customer tab) bcos.dev/DLX -> customer,internal,dev,bcos (set in that instance's compose) bcos.dev's compose was pinned to all four tiers first (hiveiq-openmetal-dev b2d4e00, already live on .251) so this change cannot narrow it. Also updates platform.guide-access, which documented the old default and told readers the opposite of what the code now does. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>