Identity (Keycloak)
OIDC login, MFA, org groups, and product roles.
Models & providers
BYOK providers, stage matrix, and Langfuse.
Policy (STEWARD.md)
Severity floors, skip globs, and path rules from the base branch.
Job queue
Postgres SoT and optional NATS/Rabbit/Pulsar wake-up.
SCM connectors
GitHub App, multi-SCM, and webhooks.