From 930fd9ce9ea6b81d5b88ad47a5bb2861fb3eb1bf Mon Sep 17 00:00:00 2001
From: Pulkit Pareek <pulkitpareek18@gmail.com>
Date: Tue, 19 May 2026 16:10:28 +0530
Subject: [PATCH] docs: realign URL references to
 api./console./docs.zeroauth.dev subdomains
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Cross-repo companion to zeroauth-dev/ZeroAuth dev branch:

  zeroauth.dev/dashboard/*  →  console.zeroauth.dev/*
  zeroauth.dev/docs/*       →  docs.zeroauth.dev/*
  zeroauth.dev/v1/*         →  api.zeroauth.dev/v1/*

Touched: threat-model/{canonical,dashboard,iot,sdk}.md,
shared/naming-conventions.md, release-coordination/changelogs/
pre-release-1.md.

The naming-conventions row for the central API also lost its
'planned' qualifier — the subdomain is now active in the Caddy
config, not aspirational.
---
 docs/shared/naming-conventions.md                | 6 +++---
 docs/threat-model/canonical.md                   | 2 +-
 docs/threat-model/dashboard.md                   | 2 +-
 release-coordination/changelogs/pre-release-1.md | 2 +-
 4 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/docs/shared/naming-conventions.md b/docs/shared/naming-conventions.md
index bff6ea4..c4de571 100644
--- a/docs/shared/naming-conventions.md
+++ b/docs/shared/naming-conventions.md
@@ -7,12 +7,12 @@
 
 | Service | Repo name | Internal name | Hostname |
 |---|---|---|---|
-| Central API | `zeroauth-dev/ZeroAuth` | `zeroauth-api` | `api.zeroauth.dev` (planned; today: `zeroauth.dev/v1/*`) |
+| Central API | `zeroauth-dev/ZeroAuth` | `zeroauth-api` | `api.zeroauth.dev` (planned; today: `api.zeroauth.dev/v1/*`) |
 | Verifier | `zeroauth-dev/ZeroAuth-Verifier` (planned) | `zeroauth-verifier` | internal-only, behind API |
 | IoT firmware | `zeroauth-dev/ZeroAuth-IoT` (planned) | `zeroauth-iot` | (runs on Orange Pi devices) |
 | Mobile SDK | `zeroauth-dev/ZeroAuth-Mobile-SDK` (planned) | `zeroauth-sdk` | n/a (library) |
-| Dashboard | currently inside `zeroauth-dev/ZeroAuth: dashboard/` | `zeroauth-dashboard` | `zeroauth.dev/dashboard/` |
-| Docs site | inside `zeroauth-dev/ZeroAuth: website/` | `zeroauth-docs` | `zeroauth.dev/docs/` |
+| Dashboard | currently inside `zeroauth-dev/ZeroAuth: dashboard/` | `zeroauth-dashboard` | `console.zeroauth.dev` |
+| Docs site | inside `zeroauth-dev/ZeroAuth: website/` | `zeroauth-docs` | `docs.zeroauth.dev` |
 | Governance | `zeroauth-dev/ZeroAuth-Governance` *(this repo)* | `zeroauth-governance` | n/a (docs only) |
 
 ## Environment variables
diff --git a/docs/threat-model/canonical.md b/docs/threat-model/canonical.md
index 462227b..404f343 100644
--- a/docs/threat-model/canonical.md
+++ b/docs/threat-model/canonical.md
@@ -9,7 +9,7 @@ This is the **cross-repo source of truth** for ZeroAuth's threat model. Every pr
 
 | Surface | Component | Exposure | Notes |
 |---|---|---|---|
-| `https://zeroauth.dev/v1/*` | API | Public, tenant-API-key authed | Scoped to `(tenant_id, environment)`. Rate-limit + monthly quota per tenant. |
+| `https://api.zeroauth.dev/v1/*` | API | Public, tenant-API-key authed | Scoped to `(tenant_id, environment)`. Rate-limit + monthly quota per tenant. |
 | `https://zeroauth.dev/api/console/*` | API (console) | Public, JWT-authed for everything except signup + login | Per-IP rate limit on signup/login. Password policy enforced. |
 | `https://zeroauth.dev/api/admin/*` | API (admin) | Public, `x-api-key` (single shared admin key) | Read-only today. |
 | `https://zeroauth.dev/api/health` | API | Public, unauth | Health + subsystem status only. |
diff --git a/docs/threat-model/dashboard.md b/docs/threat-model/dashboard.md
index 9a2dd7f..1662a87 100644
--- a/docs/threat-model/dashboard.md
+++ b/docs/threat-model/dashboard.md
@@ -5,7 +5,7 @@
 
 ## Surfaces
 
-- React SPA served at `https://zeroauth.dev/dashboard/*`
+- React SPA served at `https://console.zeroauth.dev/*`
 - Console API consumed at `/api/console/*` (authenticated via JWT in `Authorization: Bearer` header)
 - 10 pages: Login, Signup, Overview, ApiKeys, Users, Devices, Verifications, Attendance, Audit, Settings
 
diff --git a/release-coordination/changelogs/pre-release-1.md b/release-coordination/changelogs/pre-release-1.md
index 94b2896..bd6ba01 100644
--- a/release-coordination/changelogs/pre-release-1.md
+++ b/release-coordination/changelogs/pre-release-1.md
@@ -5,7 +5,7 @@
 
 ## Summary
 
-First production deploy. Central API live at `https://zeroauth.dev/v1/*`. Dashboard live at `https://zeroauth.dev/dashboard/*`. TLS via Caddy + Let's Encrypt. Hosted on VPS at `104.207.143.14`.
+First production deploy. Central API live at `https://api.zeroauth.dev/v1/*`. Dashboard live at `https://console.zeroauth.dev/*`. TLS via Caddy + Let's Encrypt. Hosted on VPS at `104.207.143.14`.
 
 ## API