diff --git a/.tangled/workflows/ci.yml b/.tangled/workflows/ci.yml
new file mode 100644
index 0000000..0ff1512
--- /dev/null
+++ b/.tangled/workflows/ci.yml
@@ -0,0 +1,25 @@
+when:
+  - event: ["push", "pull_request"]
+    branch: ["main"]
+
+engine: microvm
+image: nixos
+
+dependencies:
+  - rustup
+  - gcc
+  - pkg-config
+  - openssl
+  - protobuf
+  - just
+  - cargo-nextest
+
+steps:
+  - name: fmt
+    command: cargo fmt -- --check
+  - name: check
+    command: cargo check --all-targets
+  - name: clippy
+    command: just clippy
+  - name: test
+    command: just test
diff --git a/.tangled/workflows/publish-cachix-aarch64.yml b/.tangled/workflows/publish-cachix-aarch64.yml
deleted file mode 100644
index fc4b47a..0000000
--- a/.tangled/workflows/publish-cachix-aarch64.yml
+++ /dev/null
@@ -1,21 +0,0 @@
-when:
-  - event: ["push", "manual"]
-    branch: ["main"]
-
-engine: nixery
-
-dependencies:
-  nixpkgs:
-    - nix
-    - cachix
-    - gnugrep
-
-steps:
-  - name: Authenticate
-    command: |
-      cachix authtoken "$CACHIX_AUTH_TOKEN"
-
-  - name: Build and push aarch64
-    command: |
-      SUBS="--option extra-substituters https://tranquil.cachix.org --option extra-trusted-public-keys tranquil.cachix.org-1:PoO+mGL6a6LcJiPakMDHN4E218/ei/7v2sxeDtNkSRg="
-      nix-store -qR --include-outputs $(nix-store -qd $(nix build .#packages.x86_64-linux.tranquil-pds-aarch64 $SUBS --print-out-paths --no-link)) | grep -v '\.drv$' | cachix push tranquil
diff --git a/.tangled/workflows/publish-cachix-x86_64.yml b/.tangled/workflows/publish-cachix-x86_64.yml
deleted file mode 100644
index 1c8b48f..0000000
--- a/.tangled/workflows/publish-cachix-x86_64.yml
+++ /dev/null
@@ -1,28 +0,0 @@
-when:
-  - event: ["push", "manual"]
-    branch: ["main"]
-
-engine: nixery
-
-dependencies:
-  nixpkgs:
-    - nix
-    - cachix
-    - gnugrep
-
-steps:
-  - name: Authenticate
-    command: |
-      cachix authtoken "$CACHIX_AUTH_TOKEN"
-
-  - name: Build and push x86_64
-    command: |
-      SUBS="--option extra-substituters https://tranquil.cachix.org --option extra-trusted-public-keys tranquil.cachix.org-1:PoO+mGL6a6LcJiPakMDHN4E218/ei/7v2sxeDtNkSRg="
-      nix-store -qR --include-outputs $(nix-store -qd $(nix build .#packages.x86_64-linux.tranquil-pds $SUBS --print-out-paths --no-link)) | grep -v '\.drv$' | cachix push tranquil
-      nix-store -qR --include-outputs $(nix-store -qd $(nix build .#packages.x86_64-linux.tranquil-frontend $SUBS --print-out-paths --no-link)) | grep -v '\.drv$' | cachix push tranquil
-
-  - name: Build and push devShell
-    command: |
-      SUBS="--option extra-substituters https://tranquil.cachix.org --option extra-trusted-public-keys tranquil.cachix.org-1:PoO+mGL6a6LcJiPakMDHN4E218/ei/7v2sxeDtNkSRg="
-      nix develop $SUBS --profile dev-profile -c true
-      cachix push tranquil dev-profile
diff --git a/.tangled/workflows/publish-image.yml b/.tangled/workflows/publish-image.yml
deleted file mode 100644
index a9cb280..0000000
--- a/.tangled/workflows/publish-image.yml
+++ /dev/null
@@ -1,36 +0,0 @@
-when:
-  - event: [ "manual" ]
-  - event: [ "push" ]
-    branch: [ "main" ]
-
-engine: nixery
-
-dependencies:
-  nixpkgs:
-    - kaniko
-
-environment:
-  DOCKER_CONFIG: "/kaniko/.docker"
-
-steps:
-  - name: Configure Kaniko
-    command: |
-      mkdir -p /kaniko/.docker/
-      echo "{
-        \"auths\": {
-          \"https://atcr.io/v1\":{
-            \"auth\": \"$ATCR_CREDENTIALS\"
-          }
-        }
-      }" > /kaniko/.docker/config.json
-
-  - name: Build image
-    command: |
-      executor \
-        --context=$(pwd) \
-        --ignore-path=$(pwd) \
-        --dockerfile=$(pwd)/Dockerfile \
-        --destination="atcr.io/tranquil.farm/tranquil-pds:latest" \
-        --destination="atcr.io/tranquil.farm/tranquil-pds:$TANGLED_COMMIT_SHA" \
-        --push-retry=3 \
-        --skip-push-permission-check