A deploy that pulls images tagged latest upgrades software as a side effect. Pin every image first, and where you cannot see what runs, infer it from dates and say how sure you are.
Building a hybrid cloud platform that pairs a public VPS for ingress with an on-premise NAS for storage — connected via zero-trust mesh networking, deployed entirely through CI/CD.