| Pipeline green, site not reachable | HOST was not set when the pipeline ran; the pod has no ingress | Set HOST, push a commit |
| Pipeline green, certificate warning | The certificate is still being issued; the ingress answers with a placeholder for a minute or two | Wait, reload |
Build fails on the first line, 403 or unauthorized on the builder image | The deploy token is missing or lacks read_registry | Create gitlab-deploy-token |
| Preview branch deploys to an empty host | The branch is not protected, so protected HOST/K8S_CLUSTER are empty there | Protect pr-* and dev |
| Engine was updated, site unchanged | The pipeline was re-run on the old commit — same tag, no roll | Push a commit, empty if need be (Updating the engine) |
| Contact form says “Something went wrong” | The Turnstile site key does not match the receiver’s, or the widget failed to load | Check turnstileSiteKey and contactFormReceiverURL; reload the page |
| Search does nothing behind the password | The page was opened from a URL with credentials in it | Open the plain URL and log in through the dialog |
| A page from the repository shows the Dockerfile | The knowledge-base Dockerfile lost its second rm -rf | Restore it from the template |
| A picture is missing in a landing page | The file name in image= does not match a file in images/ | Names are case-sensitive and relative to images/ |