CareTV local-first storage rules — 2026-08-20 v003

1. D:\_VPS-WEBSITES\8k.art\beta\_daily-builds\ is authoritative.
2. D:\_CareTV-Inbox\ is a local handoff/watch folder.
3. OneDrive is excluded.
4. ChatGPT uploads are for exceptional handoff/review, not authoritative storage.
5. Ingest copies source files and never deletes the inbox source.
6. S3 is the remote publishing/archive layer.
7. CloudFront is delivery/cache only.
8. Browser JavaScript never receives AWS credentials.
9. Laptop should use short-lived AWS authorization only; no long-lived AWS keys.
10. Future server agent should expose the same API contract so Windows can later be replaced.