The build job runs docker on the runner host's daemon, so every run left four tagged images behind for good. Remove this run's tags once they are pushed and cap BuildKit's cache at 5 GB, always, never failing the job. The demo wipe pulls every two hours; drop the dangling image each pull replaces. The uom-deploy-runner deploy job is deliberately untouched. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01E14m6SuuY6i1vASFeGDBeY