The CI/CD boundary problem is real and most teams solve it with duct tape inside their existing pipeline config. Lightweight, self-hosted, Go — the architecture choices make sense for something that sits in the critical path of every release. Will follow the progress.