Catches cross-section bugs and smells in Kamal's config/deploy.yml that Kamal itself silently allows: undeclared secrets, accessory/role mismatches, registry inconsistencies, and more. Supports auto-fix for safe rewrites and outputs human, JSON, or GitHub Actions formats.