The receipt is this workflow's artifact, so print it unconditionally; publish and receipt push-back become best-effort. Neither the registry (which denies writes while over quota) nor a repo-write credential can now fail a run whose suites passed — the reason this never ran in CI. powerloss: disconnect the nbd device before unmounting. Killing nbdkit leaves the device serverless, so umount parks in uninterruptible sleep where its timeout cannot reach it and docker exec hangs, taking a whole gate run with it (2026-08-09). publish-image: drop the kaniko cache-repo. It filled the 5GB registry quota with cache manifests nothing deploys. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>