agents-dev CI deploy lane NOW EXISTS (built 2026-07-18, was previously aspirational). .build.yml at repo root: Arch image, builds all 3 cmds (agenthubd/ahub/ahub-run), tar-overlays bin+prompts+skills to deploy@agent-1.lab.internal:/opt/agent-hub, then sudo systemctl restart agenthubd. Only refs/heads/master auto-deploys (submitter.allow-refs). Proven build #226 SUCCESS. Deploy cred: NEW ed25519 key 'agent1-deploy' registered as builds.sr.ht SSH secret UUID cc6bd011-aa6b-4c8c-b4ef-7234c1e2007d; .pub in deploy@agent-1 authorized_keys AND phoebe-lab/agent-hub/keys/agent1-deploy.pub (old private half was lost). Build VM reaches agent-1.lab.internal:22 by name via SLIRP split-horizon DNS, no hacks (probes #222/#223). hut CANNOT create build secrets (list/share only) — use web UI/GraphQL. /etc/agent-hub/agenthub.yaml is NOT CI-managed (bootstrap never overwrites); hand-edit on box.