Authentication & Breach Response Checklist

In the event of a security breach or compromised team member account, this is the static master list of all infrastructure endpoints and how they are authenticated. All passwords and keys must be immediately rotated upon a suspected breach.

Server Infrastructure

1. Namecheap (Production VPS):
   • Authenticated via: ED25519 SSH Keys (Password auth disabled).
   • Web Console: Namecheap account email & password.
2. DigitalOcean (Sandbox VPS):
   • Authenticated via: ED25519 SSH Keys & UFW IP Whitelist.
   • Web Console: Team Email Account & Password.

Cloud Services & DNS

1. Cloudflare (DNS, SSL, Pages, Zero Trust):
   • Authenticated via: Team Email Account, Password, and 2FA.
2. Cloudflare R2 (Object Storage):
   • Authenticated via: IAM API Tokens (Injected into VPS .env).

Telephony & AI APIs

1. Twilio (Phone Handling Service):
   • Authenticated via: Account SID & Primary Auth Token.
   • WebRTC Client Auth: Ephemeral JWTs generated by backend API Keys.
2. OpenAI (Bot Intelligence):
   • Authenticated via: Project-scoped API Key (Injected into VPS .env).

Application Layer

1. Appliance Repair American (ARA) Staging:
   • Authenticated via: WordPress Admin credentials (pending migration).
2. GuildUSA Backend Application:
   • Authenticated via: Laravel Sanctum / Session Cookies.