| Entity | Domain | Role |
|---|---|---|
| House of Trae | house-of-trae.com | Parent — shared services (SSO, mail, DNS) |
| SecureNexus | securenexus.net | Cyber security, monitoring, infra management |
| Byrne Accounts | byrne-accounts.org | Accounting services |
| Stratus Digital | stratus-digital.com | Web design & dev |
| Discreet Elite | discreet-elite.uk | Private console application |
| Emerald Markets | emerald-markets.net | Second-hand ecommerce & in-person POS |
| PrivateNexus | privatenexus.net | PrivateNexus prod/dev/build — all on hot-pn |
First rule that applies, in order:
securenexus.nethouse-of-trae.com, full stop — a hard technical constraint (the shared oauth2-proxy's callback is fixed to a house-of-trae.com URL; a CSRF cookie scoped to any other domain can never reach it)securenexus.net is fineprivatenexus.net, and only things actually part of PN's own product surface — not a dumping ground for anything deployed through ithouse-of-trae.comWhen a service is torn down, delete its DNS records the same day — the specific name and any wildcard that could backfill it. This exact class of incident (a stale wildcard silently resurrecting a dead subdomain) has happened twice on two different domains.