The deliberate breaking release: the whole parameter surface is reviewed once from a consumer's perspective. Related settings regroup into per-concern, struct-typed parameter groups with every default in module data; consumer data holds only deviations, and an unknown subkey fails the compile. Around the new surface: a data-check script for validating consumer Hiera data in CI, idempotent apt keyring refreshes, host liveness monitoring on standalone hosts, a wider grow-only subordinate-ID range for nested rootless builds, support for a differently named primary group, and the standalone runbook split into its own document.