Platform

One section per domain: what runs, why it was chosen over the alternatives, and how it is wired together. Foundations and GitOps first, then networking and security, then the developer platform, observability, and the optional self-hosted AI stack.