## Stack

- **Language:** Helm values + Kubernetes manifests, Bash Make targets
- **Key deps:** Gitea (current forge runtime), Actions runner substrate, SOPS/age; runs against the S2 cluster on railiance01

## Dev Commands

```bash
make help              # list all targets
make check-tools && make check-sops   # preflight (read-only)
make gitea-status      # forge runtime + database state (read-only)
make runner-status     # Actions runner / registry probes (read-only)
make registry-docs | evidence-docs | runner-docs   # print canonical docs
make gitea-deploy | gitea-ingress-deploy           # production-touching
```

`gitea-deploy` / `gitea-ingress-deploy` change the production forge —
operator approval required. Status and docs targets are read-only.