celilo now manages itself; the control plane is just another celilo module.

A self-describing, encrypted backup envelope and a one-command `celilo restore`.

A signed Debian package and apt repo; the canonical production install path.

celilo stopped guessing your network; it discovers zones as a firewall reveals them.

Modules react to fleet events by running their own hooks, fault-isolated.

Per-zone fleet configuration by module composition (e.g. every box in a zone gets the internal resolver).

celilo's source code now lives on celilo's own Forgejo. We host our own code.

A celilo-deployed runner + builder VM; every PR tests itself.

Untangled split-horizon and the firewall `natIp` so LAN devices reach celilo sites without a VPN.

Test assertions from multiple network perspectives; shipped in cele2e suite.

The e2e-confidence push; a suite that can't lie.

Making self-hosted CI reliable on real hardware.

Modules stop hand-writing SSH; remote work goes through typed primitives.

A typed API the CLI, MCP, and e2e all speak.

Automated CI workflow to publish packages on merge.

CI automatically builds and publishes Debian packages.

lunacycle CD demo showing the full build-bus in action.

The npm cache becomes a publishing endpoint.

Automated vulnerability scanning for cached packages.

Modules can declare npm registry dependencies.

Safe resize, node cordon, LXC migration.

Make `manifest.yml#version` the sourced payload version.

Modules own their e2e variants; cele2e fetches from celilo.computer.

Catch ordering/config mistakes before Docker boots.

Automated backup scheduling via event system.

Automated service account for CI/CD operations.

Detect when deployed state drifts from desired state.