Validate Deployment

Match validation depth to risk and available local tools.

Workflow

1. Read references/validation-levels.md.
2. Start with syntax and static checks.
3. Run python3 scripts/validate_compose.py --root <deployment-root> for deterministic repository invariants.
4. Build images before starting local services when Docker is available.
5. Run explicit migrations, dependency readiness, application health, runtime user, published-port, proxy, and shutdown checks.
6. Treat optional missing tools as skipped checks, not passes.
7. Preserve named volumes during ordinary cleanup unless the user explicitly authorizes deletion.
8. Report commands, exit results, observed evidence, skipped checks, assumptions, and remaining manual production actions.

Local validation does not authorize registry push, production connection, migration, deployment, restart, restore, deletion, or rollback.