A Gitea Actions pipeline that gates code on its way into the URC repository — the same safety, security and supply-chain checks whether the publisher is 3 Halves Labs, another agency, or URC itself. URC hosts none of it; 3HL runs the gate. AI assists the judgement calls, deterministic tooling is always the floor, and only a signed, attested build lands in the URC repo and deploys to its runtime — which can be hosted by URC or by 3HL.