Fully managed¶

Learn what fully managed includes, what Caution manages, and what you still control.

Overview¶

Fully managed deployments run on Caution's infrastructure. You push code, and Caution builds, deploys, and hosts your application in a secure enclave. It is best for teams that want:

• Fastest path to production
• Caution-hosted infrastructure
• Minimal infrastructure setup before your first deployment

For a side-by-side comparison with other deployment options, see deployment models.

Responsibility split¶

Fully managed means Caution manages the enclave lifecycle and underlying infrastructure, while you retain control over your application and its configuration.

In this model, you keep control of your application code and configuration while Caution operates the deployment environment on your behalf.

How it works¶

To deploy with fully managed, you'll need a containerized application, Docker with the containerd image store enabled, and a Caution account.

You will also need a Procfile that tells Caution how to run your application. The examples below show a minimal configuration, plus an optional app_sources entry for source verification.

# Minimal `Procfile`
run: /app/server

# Example with source verification enabled
run: /app/server
app_sources: https://codeberg.org/myorg/myapp

Once you have everything in place, the setup flow looks like this:

1. Create an account, install the CLI (Linux (x86_64) or macOS (arm64)), and register an SSH key.
2. Initialize your application with a Procfile, then push your code to Caution.
3. Caution builds the enclave image, provisions the deployment, and runs your application in a managed enclave environment.

See also¶