Thank you for sharing this carlos. This is super interesting and insightful.

A couple of follow up questions:

How does hermetic ephemeral env get updates from a new deployment from a dependency? Say 5 dependencies publish a new image. Do we always pull head?

What open source techs are used to power the infra? Combination of docker, K8 w/ a distributed build tool like bazel or something else?

What advice would you give a scale up trying to solve the same problem?