iac-ctl is an interactive terminal UI that runs each deployer's automation from one session, so you don't cd into every repo and run its playbook by hand.

devops-server-deployer, devops-server-onboarding, and application-deployer read their secrets from one mTLS-secured Vault KV store. vault-deployer deploys that store, so it takes its secrets from the environment instead. Nothing secret is committed to a repo.

The platform deploys in one order: vault-deployer, devops-server-deployer, devops-server-onboarding, application-deployer, then dashboard. Each stage after the first depends on something an earlier stage produced.