This is brilliant! It requires webhooks though. I've been ruminating on this. A single service should trigger the webhook as if all grasp servers did it, it would be deployed multiple times. A service like this is really simple with minimal compute but may require secrets to be loaded by the maintainer (eg for signing an authorisation like in one scenario in this case). This is the same trade-off you might have with a more elaborate CI/CD runner so why not combine them as one service following the same model. The could be seen as a loosely coupled extension to a grasp service, with a subset of operators offering it. Compute requirements for CI/CD can vary a lot. for things like a webhook is basically 0 so an allowance per pubkey / repo and then payment for more might be appropriate. a freemium model.