CI & builds

Build artifacts live in the account's build bucket; pipeline logs are kept beside them for support requests.

Registry

Staging images are pushed to the internal registry by the pipeline identity. The deploy agent watches its staging tag and rolls out new digests on its poll interval; promotions come through the agent's trigger.

Artifacts

Release notes and workstation access live in the build bucket for the build team; support can pull any build by number.