tl;dr: The author built a homelab AI dev platform by running OpenCode's web UI as a systemd service on an isolated VM, giving it a dedicated Git user that can push branches but not merge to deploy. Changes flow through PR review and GitOps (Arcane for Docker stacks) for deployment, enabling infra updates from any device—including a phone—without granting AI direct access to production services. The main gap is CI feedback, since Forgejo Actions doesn't expose job logs via its public API.