Docs: update references to the new files

Author: PaperStrange

README.md

@@ -208,7 +208,7 @@ TourGuideAI follows semantic versioning (MAJOR.MINOR.PATCH) as defined in our [V
 
 The project is currently in Release Candidate stage, preparing for the official 1.0.0 release scheduled for August 2025.
 
-For detailed release plans, see our [1.0.0 Release Candidate Plan](docs/project_lifecycle/version_control/records/project.rc.1.0.0.release-plan.md).
+For detailed release plans, see our [1.0.0 Release Candidate 2 Plan](docs/project_lifecycle/version_control/records/project.rc2.1.0.0.release-plan.md).
 
 ## Testing Strategy
 

deployment/production/README.md

@@ -0,0 +1,229 @@
+# TourGuideAI Production Deployment
+
+This directory contains the production deployment configuration for TourGuideAI, implementing enterprise-grade infrastructure with comprehensive security, monitoring, and scalability features.
+
+## Architecture Overview
+
+The production deployment uses a Docker-based microservices architecture with the following components:
+
+### Core Services
+- **Frontend**: React application served via Nginx with security hardening
+- **Backend**: Node.js/Express API server with authentication and rate limiting
+- **Database**: PostgreSQL with connection pooling and backup strategies
+- **Cache**: Redis for session management and API caching
+
+### Security & Monitoring
+- **Nginx**: Reverse proxy with WAF, DDoS protection, and SSL termination
+- **Prometheus**: Metrics collection and monitoring
+- **Grafana**: Visualization and alerting dashboards
+
+## File Structure
+
+```
+deployment/production/
+├── docker-compose.yml      # Multi-service production stack
+├── Dockerfile.frontend     # Frontend production image
+├── Dockerfile.backend      # Backend production image  
+├── nginx.conf             # Security-hardened web server config
+├── prometheus.yml         # Monitoring configuration
+├── deploy.sh             # Zero-downtime deployment script
+└── README.md             # This documentation
+```
+
+## Deployment Files
+
+### docker-compose.yml
+Complete production stack configuration including:
+- **Services**: Frontend, backend, database, Redis, Nginx, Prometheus, Grafana
+- **Networks**: Isolated internal networks for security
+- **Volumes**: Persistent data storage for database and monitoring
+- **Health Checks**: Container health monitoring
+- **Resource Limits**: CPU and memory constraints
+- **Environment**: Production environment variables
+
+### Dockerfile.frontend
+Multi-stage production build:
+- **Build Stage**: Creates optimized React bundle
+- **Production Stage**: Nginx-based serving with security hardening
+- **Security**: Non-root user, minimal attack surface
+- **Performance**: Gzip compression, caching headers
+
+### Dockerfile.backend
+Node.js production container:
+- **Security**: Non-root user, minimal dependencies
+- **Health Checks**: Application health endpoints
+- **Performance**: Node.js production optimizations
+- **Monitoring**: Prometheus metrics integration
+
+### nginx.conf
+Security-hardened reverse proxy:
+- **WAF**: Web Application Firewall protection
+- **Rate Limiting**: API and authentication endpoint protection
+- **Security Headers**: CSP, XSS protection, HSTS
+- **SSL/TLS**: Modern encryption and certificate management
+- **DDoS Protection**: Request rate limiting and connection limits
+
+### prometheus.yml
+Comprehensive monitoring:
+- **Service Discovery**: Auto-discovery of containerized services
+- **Metrics Collection**: Application, system, and business metrics
+- **Retention**: Configurable data retention policies
+- **Alerting**: Integration with Grafana for notifications
+
+### deploy.sh
+Zero-downtime deployment automation:
+- **Health Checks**: Verify service health before switching traffic
+- **Rollback**: Automatic rollback on deployment failure
+- **Backup**: Database backup before deployment
+- **Logging**: Comprehensive deployment logging
+- **Validation**: Pre-deployment environment validation
+
+## Security Features
+
+### Application Security
+- **Authentication**: JWT-based with role-based access control
+- **Authorization**: Fine-grained permission system
+- **Input Validation**: Comprehensive request validation
+- **Session Management**: Secure session handling with Redis
+
+### Infrastructure Security
+- **Network Isolation**: Services isolated in private networks
+- **Container Security**: Non-root users, minimal base images
+- **Secret Management**: Environment-based secret injection
+- **SSL/TLS**: End-to-end encryption for all communications
+
+### Monitoring Security
+- **Access Control**: Grafana authentication and authorization
+- **Audit Logging**: Security event logging and monitoring
+- **Intrusion Detection**: Anomaly detection and alerting
+
+## Performance Optimizations
+
+### Frontend Performance
+- **Bundle Optimization**: Code splitting and tree shaking
+- **Caching**: Browser and CDN caching strategies
+- **Compression**: Gzip and Brotli compression
+- **Asset Optimization**: Image and static asset optimization
+
+### Backend Performance
+- **Connection Pooling**: Database connection management
+- **Caching**: Redis-based API response caching
+- **Rate Limiting**: Intelligent rate limiting to prevent abuse
+- **Load Balancing**: Nginx upstream load balancing
+
+### Database Performance
+- **Indexing**: Optimized database indexes
+- **Connection Pooling**: Efficient connection management
+- **Backup Strategy**: Automated backup and recovery
+- **Monitoring**: Database performance monitoring
+
+## Monitoring & Alerting
+
+### Metrics Collection
+- **Application Metrics**: API response times, error rates, throughput
+- **System Metrics**: CPU, memory, disk, network utilization
+- **Business Metrics**: User engagement, feature usage
+- **Security Metrics**: Authentication failures, suspicious activity
+
+### Dashboards
+- **System Overview**: High-level system health and performance
+- **Application Performance**: API and frontend performance metrics
+- **Security Dashboard**: Security events and threat monitoring
+- **Business Intelligence**: User analytics and feature metrics
+
+### Alerting Rules
+- **Critical Alerts**: System outages, security breaches
+- **Warning Alerts**: Performance degradation, capacity issues
+- **Information Alerts**: Deployment notifications, maintenance windows
+
+## Deployment Process
+
+### Prerequisites
+1. **Environment Setup**: Production server with Docker and Docker Compose
+2. **Domain Configuration**: DNS records pointing to production server
+3. **SSL Certificates**: Valid SSL certificates for HTTPS
+4. **Environment Variables**: Production configuration and secrets
+
+### Deployment Steps
+1. **Preparation**: Run pre-deployment health checks
+2. **Backup**: Create database and configuration backups
+3. **Build**: Build and tag new Docker images
+4. **Deploy**: Rolling deployment with health checks
+5. **Validation**: Post-deployment testing and validation
+6. **Monitoring**: Continuous monitoring for issues
+
+### Rollback Process
+1. **Detection**: Automated failure detection
+2. **Isolation**: Isolate failed components
+3. **Restoration**: Restore previous working version
+4. **Verification**: Verify system stability
+5. **Investigation**: Post-mortem analysis
+
+## Scaling Considerations
+
+### Horizontal Scaling
+- **Load Balancing**: Multiple backend instances behind load balancer
+- **Database Scaling**: Read replicas and connection pooling
+- **Cache Scaling**: Redis clustering for high availability
+- **Frontend Scaling**: CDN and multi-region deployment
+
+### Vertical Scaling
+- **Resource Monitoring**: CPU and memory utilization tracking
+- **Automatic Scaling**: Container resource limit adjustments
+- **Performance Tuning**: Application-level optimizations
+- **Capacity Planning**: Growth trend analysis and planning
+
+## Maintenance Procedures
+
+### Regular Maintenance
+- **Security Updates**: OS and dependency updates
+- **Database Maintenance**: Index optimization, vacuum operations
+- **Log Rotation**: Log file management and archival
+- **Backup Verification**: Regular backup integrity checks
+
+### Monitoring Maintenance
+- **Dashboard Updates**: Keep monitoring dashboards current
+- **Alert Tuning**: Adjust alert thresholds based on historical data
+- **Capacity Reviews**: Regular capacity planning reviews
+- **Performance Analysis**: Ongoing performance optimization
+
+## Troubleshooting
+
+### Common Issues
+- **Service Startup Failures**: Container health check failures
+- **Performance Issues**: High response times or error rates
+- **Database Issues**: Connection timeouts or query performance
+- **Security Issues**: Authentication or authorization failures
+
+### Diagnostic Tools
+- **Container Logs**: Docker and application log analysis
+- **Metrics Analysis**: Prometheus and Grafana monitoring
+- **Health Checks**: Service health endpoint monitoring
+- **Network Analysis**: Network connectivity and performance
+
+### Emergency Procedures
+- **Incident Response**: Escalation procedures and emergency contacts
+- **Service Recovery**: Service restart and recovery procedures
+- **Data Recovery**: Database backup and recovery procedures
+- **Communication**: Stakeholder notification procedures
+
+## Support and Documentation
+
+### Technical Support
+- **Operations Team**: 24/7 production support contact
+- **Development Team**: Application-specific support
+- **Infrastructure Team**: System and network support
+- **Security Team**: Security incident response
+
+### Additional Documentation
+- [Security Hardening Checklist](../docs/project_lifecycle/deployment/security/project.security-hardening-checklist.md)
+- [Monitoring Configuration Guide](../docs/project_lifecycle/deployment/plans/project.performance-optimization-plan.md)
+- [Deployment Pipeline Documentation](../docs/project_lifecycle/deployment/pipelines/project.deployment-pipeline.md)
+- [Test Stabilization Plan](../docs/project_lifecycle/all_tests/plans/project.test.stabilization-plan.md)
+
+---
+
+**Document Version**: 1.0  
+**Last Updated**: Phase 8 Completion  
+**Maintained By**: DevOps Team  
+**Review Schedule**: Monthly or after major infrastructure changes 

docs/project.document-inventory.md

@@ -324,7 +324,7 @@ If the deployment to CDN fails through the CI/CD pipeline:
 - [CloudFront Cache Invalidation API](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/Invalidation.html)
 
 ## Related Documents
-- [Phase 8 Online Launch Plan](../../../project.phase8-online-launch-plan.md)
+- [Phase 8 Completion Summary](../../process_monitors/plans/project.phase8-completion-summary.md)
 - [TourGuideAI Architecture Design](../../../ARCHITECTURE.md) 
 - [Deployment Pipeline Documentation](../pipelines/project.deployment-pipeline.md)
 - [CI/CD Workflow](/.github/workflows/ci-cd.yml) 

docs/project_lifecycle/deployment/plans/project.cdn-implementation-plan.md

@@ -356,6 +356,6 @@ This document provides a comprehensive security hardening checklist for TourGuid
 **Approval Required From**: CISO, Technical Lead, Compliance Officer
 
 **Related Documents**:
-- [Incident Response Plan](project.incident-response-plan.md)
-- [Privacy Policy](project.privacy-policy.md)
-- [Security Training Materials](project.security-training.md) 
+- Incident Response Plan (planned)
+- Privacy Policy (planned)
+- Security Training Materials (planned) 

docs/project_lifecycle/deployment/security/project.security-hardening-checklist.md

@@ -310,7 +310,7 @@ This RC2 release plan requires approval from:
 **Next Review**: Weekly during implementation
 
 **Related Documents**:
-- [Phase 8 Online Launch Plan](project.phase8-online-launch-plan.md)
-- [CDN Implementation Plan](../deployment/plans/project.cdn-implementation-plan.md)
-- [Security Hardening Checklist](../security/project.security-hardening-checklist.md)
-- [Test Stabilization Plan](../all_tests/plans/project.test-stabilization-plan.md) 
+- [Phase 8 Completion Summary](../../process_monitors/plans/project.phase8-completion-summary.md)
+- [CDN Implementation Plan](../../deployment/plans/project.cdn-implementation-plan.md)
+- [Security Hardening Checklist](../../deployment/security/project.security-hardening-checklist.md)
+- [Test Stabilization Plan](../../all_tests/plans/project.test.stabilization-plan.md)