diff --git a/notes/bf-22vc5-infra-blocker-2026-06-04.md b/notes/bf-22vc5-infra-blocker-2026-06-04.md
new file mode 100644
index 0000000..ab995f0
--- /dev/null
+++ b/notes/bf-22vc5-infra-blocker-2026-06-04.md
@@ -0,0 +1,130 @@
+# BF-22VC5: Infrastructure Blocker (2026-06-04) - UPDATE 2
+
+## Task
+Deploy P0: build acb-enrichment Docker image and re-enable deployment (apexalgo-iad)
+
+## Status
+**BLOCKED** - Infrastructure blocker: No write access to iad-ci cluster
+
+## What's Verified ✅
+
+### 1. Enrichment Source Code ✅
+- Location: `/home/coding/ai-code-battle/cmd/acb-enrichment/`
+- Dockerfile: Valid multi-stage Go build (golang:1.25-alpine → alpine:3.19)
+- Source files: main.go, config.go, service.go - all valid
+
+### 2. CI/CD Configuration ✅
+- WorkflowTemplate: `acb-build` includes enrichment build
+- Location: `declarative-config/k8s/iad-ci/argo-workflows/acb-build-workflowtemplate.yml`
+- Builds image to: `ronaldraygun/acb-enrichment:<sha>` and `latest`
+- Auto-updates deployment manifests with digest via `update-declarative-config` step
+
+### 3. Deployment Manifest ✅
+- Location: `declarative-config/k8s/apexalgo-iad/ai-code-battle/acb-enrichment-deployment.yml`
+- Current state: Has placeholder SHA (`ronaldraygun/acb-enrichment@sha256:placeholder`)
+- Replicas: 0 (disabled)
+
+## The Infrastructure Blocker ❌
+
+### Access Constraints
+- ❌ `/home/coding/.kube/iad-ci.kubeconfig` - Does NOT exist
+- ❌ `/home/coding/.kube/rs-manager.kubeconfig` - Does NOT exist
+- ❌ Read-only proxy: `http://traefik-iad-ci:8001` - User `system:serviceaccount:devpod-observer:devpod-observer` cannot list/create workflows
+- ❌ Container runtime (docker/podman) - Not available on this Hetzner server
+- ❌ acb-enrichment image - Does NOT exist on Docker Hub (404)
+- ❌ Argo CI UI: `https://argo-ci.ardenone.com` - Returns 502 Bad Gateway
+
+### What I Tried (This Attempt)
+1. Query workflows via proxy: `403 Forbidden - cannot list workflows`
+2. Check kubeconfig files: None found
+3. Check Docker Hub: Image does not exist (`{"message":"object not found","errinfo":{}}`)
+4. Check Argo CI UI: `502 Bad Gateway`
+5. Verify proxy reachable: `traefik-iad-ci.tail1b1987.ts.net` resolves to `100.91.176.112`
+
+### Previous Attempts
+1. **Commit 982802a** (2026-06-04 01:06): Attempted to trigger build via webhook push
+2. **Commit df2cda4** (2026-06-04): Earlier webhook trigger attempt
+3. **Commit 8d02ec0** (2026-06-04): CI build trigger attempt
+
+All webhook attempts appear to have failed - no image was built.
+
+### Why Webhook Didn't Trigger (Root Cause Analysis)
+The webhook trigger requires:
+1. Forgejo webhook registered to Argo Events sensor
+2. Sensor configured to trigger `acb-build` workflow
+3. ServiceAccount `argo-workflow` with permissions to create workflows
+
+Potential issues:
+- Webhook not registered in Forgejo
+- Sensor not running or misconfigured
+- WorkflowTemplate not synced to iad-ci cluster
+
+## Resolution Required (External Action)
+
+### Option 1: Obtain iad-ci Kubeconfig (RECOMMENDED)
+1. Access Rackspace Spot Console (us-east-iad-1 region)
+2. Navigate to iad-ci cluster
+3. Generate kubeconfig for ServiceAccount with cluster-admin
+4. Save to `/home/coding/.kube/iad-ci.kubeconfig`
+5. Trigger workflow:
+   ```bash
+   kubectl --kubeconfig=/home/coding/.kube/iad-ci.kubeconfig create -f - <<EOF
+   apiVersion: argoproj.io/v1alpha1
+   kind: Workflow
+   metadata:
+     generateName: acb-build-manual-
+     namespace: argo-workflows
+   spec:
+     workflowTemplateRef:
+       name: acb-build
+   EOF
+   ```
+
+### Option 2: Fix Argo CI UI (502 Error)
+The Argo UI at `https://argo-ci.ardenone.com` is returning 502. This may indicate:
+- Ingress/routing misconfiguration
+- Argo server pod not running
+- Certificate/SSL issue
+
+Once fixed, can trigger manually via UI.
+
+### Option 3: Verify/Fix Webhook Configuration
+1. Access https://forgejo.ardenone.com/ai-code-battle/ai-code-battle/settings/hooks
+2. Check if webhook exists: `https://webhooks-ci.ardenone.com/ai-code-battle`
+3. If not, create webhook with:
+   - URL: `https://webhooks-ci.ardenone.com/ai-code-battle`
+   - Content type: `application/json`
+   - Trigger: Push events → `master` branch
+   - Active: ✅
+4. Check Argo Events sensor status on iad-ci cluster
+
+## Expected Workflow Once Unblocked
+
+1. **Submit workflow** (via kubeconfig or webhook trigger)
+2. **Resolve SHA**: Git clone and get commit SHA
+3. **Tests run**: Go tests, TypeScript type-check
+4. **Build**: Kaniko builds all ACB images including enrichment
+5. **Push**: Images pushed to Docker Hub (`ronaldraygun/*:<sha>`)
+6. **Update manifest**: Workflow automatically updates deployments with digest
+7. **Push to declarative-config**: Updated manifest committed
+8. **ArgoCD sync**: Deployment synced to apexalgo-iad
+9. **Enable deployment**: Set replicas to 1 (currently 0)
+
+## Current State Summary
+
+| Component | Status | Notes |
+|-----------|--------|-------|
+| acb-enrichment source | ✅ Valid | Dockerfile and source verified |
+| acb-build WorkflowTemplate | ✅ Exists | Includes enrichment build |
+| Deployment manifest | ⚠️ Placeholder | Has `sha256:placeholder` |
+| iad-ci kubeconfig | ❌ Missing | Cannot submit workflow |
+| Docker Hub image | ❌ Not found | Image was never built |
+| Read-only proxy | ⚠️ Limited | Cannot create workflows |
+| Argo CI UI | ❌ 502 Error | Not accessible |
+
+## Commit Required
+This attempt produced no file changes (infrastructure blocker persists). Updated documentation:
+- `notes/bf-22vc5-infra-blocker-2026-06-04.md`
+
+## Date
+2026-06-04 05:10 UTC