Every script passes ShellCheck with no findings, both compose files validate against the official Compose schema, and the Nginx startup logic was run against real nginx with missing, replaced and corrupt certificates. It has not been run end to end inside the repository itself, and the README lists exactly what to watch on a first deployment.