Golden path

The golden path is one governed operation on a real app by a real agent, visible to an operator, with evidence and rollback.

For reads, the first canonical flow is app_diagnose: bounded tools, sanitized findings and a clear decision.

For mutations, the first canonical flow is catalog_app_deploy: plan, approval, GitOps or adapter execution, validation, evidence and rollback.

The same shape applies to Weppa Sites:

site.create
-> site.preview
-> approval when risk requires it
-> site.deploy
-> health and Lighthouse evidence
-> site.rollback drill

GitHub stores backlog and GitOps state. GitHub Actions is not the operator.