Notes

Deployment boundary reviewed

The remote apply path is explicit and the generated service configuration remains reproducible.

• Plan output reviewed
• Secrets remain outside version control

Follow-up

Revisit trigger granularity after the first production deployment.

filesha256 currently tracks the complete deployment input.

This note remains public through its advertised notes ref; its target does not.