{
  "kind": "section",
  "shell": {
    "inset": "contained",
    "density": "section"
  },
  "block": {
    "type": "feature-grid",
    "head": {
      "eyebrow": "Four commands",
      "title": "Render, diff, mask, gate."
    },
    "cellHead": "icon-label",
    "items": [
      {
        "icon": "layers",
        "label": "Render",
        "title": "The config each env gets",
        "text": "Overlays, defaults and env files resolved into the final values."
      },
      {
        "icon": "git-commit-horizontal",
        "label": "Diff",
        "title": "Against what runs now",
        "text": "Compared with the live config, key by key, not file by file."
      },
      {
        "icon": "shield-check",
        "label": "Mask",
        "title": "Secrets stay masked",
        "text": "A changed secret shows as changed, with a short hash. Its value never prints."
      },
      {
        "icon": "check",
        "label": "Gate",
        "title": "Unreviewed changes fail",
        "text": "A prod change without a review exits 1, in any CI that runs a container."
      }
    ]
  }
}