\     \    \    |    /    /     /
      \    \   \   |   /   /    /
- - -    \   \  \  |  /  /   /     - - -
 _   _  _____  _      ___   ___   ____
| | | || ____|| |    |_ _| / _ \ / ___|
| |_| ||  _|  | |     | | | | | |\___ \
|  _  || |___ | |___  | | | |_| | ___) |
|_| |_||_____||_____||___| \___/ |____/
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

  helios -- build orchestrator, and the only box here with a front door.

  spawns a machine to build the nightly image and the Saturday ISO, then
  reaps it on a deadline whether it finished or not. watches; does not build.

    beacon.arclight.digital   the build API and its control panel
    pds.proto.cool            a Bluesky PDS

  state lives on an attached volume, so this box is replaceable in an
  afternoon. holds the token that makes and destroys Droplets, never the
  signing key -- halo signs for it, and hands nothing back.