Public compass holds tools/server-manifests/ and tools/runner-manifests/ while the operator holds values, Secrets, certificates, node config and apply; the head commit of every main push tags both the Server and Runner images :main--, where n is its first-parent count and each tag names that lane’s newest publish at or before the commit, so a numerical image-automation policy on n bumps both images together with no operator bump job, and the automation writes only the digest, never the tag, into a pod spec.
Status: Active (Matt, 2026-10-17)
Record: ../../server-on-kubernetes.md#design