diff --git a/.github/workflows/build-kencove.yml b/.github/workflows/build-kencove.yml
new file mode 100644
index 00000000000000..dc2281672430c5
--- /dev/null
+++ b/.github/workflows/build-kencove.yml
@@ -0,0 +1,107 @@
+name: Build Kencove Sentry Image
+
+on:
+  push:
+    branches:
+      - master
+  workflow_dispatch:
+    inputs:
+      tag:
+        description: 'Image tag (e.g., v26.1.0-gitlab)'
+        required: false
+        default: ''
+
+env:
+  REGION: us-central1
+  PROJECT_ID: kencove-prod
+  REPOSITORY: kencove-docker-repo
+  IMAGE_NAME: sentry
+
+jobs:
+  build:
+    runs-on: ubuntu-24.04
+    permissions:
+      contents: read
+      id-token: write  # For Workload Identity Federation
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version-file: '.node-version'
+
+      - uses: pnpm/action-setup@v4
+
+      - uses: astral-sh/setup-uv@v4
+        with:
+          version: '0.8.2'
+
+      - name: Setup Python venv
+        run: |
+          uv venv
+          source .venv/bin/activate
+          echo "PATH=$PWD/.venv/bin:$PATH" >> $GITHUB_ENV
+
+      - name: Cache webpack
+        uses: actions/cache@v4
+        with:
+          path: .webpack_cache
+          key: webpack-${{ hashFiles('rspack.config.ts') }}
+
+      - name: Cache node_modules
+        uses: actions/cache@v4
+        id: node-cache
+        with:
+          path: node_modules
+          key: node-modules-${{ hashFiles('pnpm-lock.yaml') }}
+
+      - name: Install Node dependencies
+        if: steps.node-cache.outputs.cache-hit != 'true'
+        run: pnpm install --frozen-lockfile
+
+      - name: Build frontend
+        run: |
+          python3 -m tools.fast_editable --path .
+          python3 -m sentry.build.main
+        env:
+          WEBPACK_CACHE_PATH: .webpack_cache
+          NODE_OPTIONS: '--max-old-space-size=4096'
+
+      - name: Authenticate to Google Cloud
+        uses: google-github-actions/auth@v2
+        with:
+          workload_identity_provider: 'projects/103143301688/locations/global/workloadIdentityPools/github-pool/providers/github-provider'
+          service_account: 'github-actions@kencove-prod.iam.gserviceaccount.com'
+
+      - name: Set up Cloud SDK
+        uses: google-github-actions/setup-gcloud@v2
+
+      - name: Configure Docker for Artifact Registry
+        run: gcloud auth configure-docker ${{ env.REGION }}-docker.pkg.dev --quiet
+
+      - name: Determine image tag
+        id: tag
+        run: |
+          if [ -n "${{ github.event.inputs.tag }}" ]; then
+            echo "tag=${{ github.event.inputs.tag }}" >> $GITHUB_OUTPUT
+          else
+            echo "tag=${{ github.sha }}" >> $GITHUB_OUTPUT
+          fi
+
+      - name: Build and push Docker image
+        run: |
+          docker build \
+            -t ${{ env.REGION }}-docker.pkg.dev/${{ env.PROJECT_ID }}/${{ env.REPOSITORY }}/${{ env.IMAGE_NAME }}:${{ steps.tag.outputs.tag }} \
+            -t ${{ env.REGION }}-docker.pkg.dev/${{ env.PROJECT_ID }}/${{ env.REPOSITORY }}/${{ env.IMAGE_NAME }}:latest \
+            -f self-hosted/Dockerfile \
+            --build-arg SOURCE_COMMIT=${{ github.sha }} \
+            .
+
+          docker push ${{ env.REGION }}-docker.pkg.dev/${{ env.PROJECT_ID }}/${{ env.REPOSITORY }}/${{ env.IMAGE_NAME }}:${{ steps.tag.outputs.tag }}
+          docker push ${{ env.REGION }}-docker.pkg.dev/${{ env.PROJECT_ID }}/${{ env.REPOSITORY }}/${{ env.IMAGE_NAME }}:latest
+
+      - name: Output image info
+        run: |
+          echo "## Build Complete" >> $GITHUB_STEP_SUMMARY
+          echo "Image: \`${{ env.REGION }}-docker.pkg.dev/${{ env.PROJECT_ID }}/${{ env.REPOSITORY }}/${{ env.IMAGE_NAME }}:${{ steps.tag.outputs.tag }}\`" >> $GITHUB_STEP_SUMMARY
diff --git a/AGENTS.md b/AGENTS.md
index e92a3027e352e1..1b0ce1d6bcb67a 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -53,3 +53,51 @@ For backend testing patterns and best practices, see `tests/AGENTS.md`.
 ## Frontend
 
 For frontend development patterns, commands, design system guidelines, and React testing best practices, see `static/AGENTS.md`.
+
+## Kencove Fork
+
+This is **kencove/sentry** - a fork of getsentry/sentry with custom modifications for our self-hosted deployment.
+
+### Key Modifications
+
+1. **GitLab Autofix Support** (`static/app/components/events/autofix/utils.tsx`)
+   - Added `'gitlab'` and `'integrations:gitlab'` to `supportedProviders` array
+   - Enables GitLab repositories for Seer Autofix feature
+
+### Building Custom Image
+
+Build and push to Google Artifact Registry:
+
+```bash
+# Using Cloud Build (recommended)
+./build-and-push.sh v26.1.0-gitlab
+
+# Local build only (no push)
+./build-and-push.sh --local
+
+# Using gcloud directly
+gcloud builds submit --config=cloudbuild.yaml .
+```
+
+Image location: `us-central1-docker.pkg.dev/kencove-prod/kencove-docker-repo/sentry`
+
+### Syncing with Upstream
+
+```bash
+# Add upstream remote
+git remote add upstream https://github.com/getsentry/sentry.git
+
+# Fetch and merge specific release
+git fetch upstream
+git checkout master
+git merge upstream/releases/26.1.0
+
+# Re-apply Kencove changes if needed
+# (GitLab support in static/app/components/events/autofix/utils.tsx)
+```
+
+### Related Repositories
+
+- **Seer AI Service**: [kencove/seer](https://github.com/kencove/seer) - GitLab repository client
+- **Helm Charts**: [kencove/charts](https://github.com/kencove/charts) - Deployment configuration
+- **Infra Clusters**: `~/projects/infra/clusters/helm/sentry/` - Deployment values
diff --git a/build-and-push.sh b/build-and-push.sh
new file mode 100755
index 00000000000000..ea1341903e1340
--- /dev/null
+++ b/build-and-push.sh
@@ -0,0 +1,75 @@
+#!/bin/bash
+# Build and push Kencove Sentry image to Google Artifact Registry
+#
+# Usage:
+#   ./build-and-push.sh                    # Build with commit SHA tag
+#   ./build-and-push.sh v26.1.0-gitlab     # Build with custom tag
+#   ./build-and-push.sh --local            # Build locally without pushing
+
+set -euo pipefail
+
+# Configuration
+PROJECT_ID="${PROJECT_ID:-kencove-prod}"
+REGION="${REGION:-us-central1}"
+REPOSITORY="${REPOSITORY:-kencove-docker-repo}"
+IMAGE_NAME="${IMAGE_NAME:-sentry}"
+TAG="${1:-$(git rev-parse --short HEAD)}"
+
+FULL_IMAGE="${REGION}-docker.pkg.dev/${PROJECT_ID}/${REPOSITORY}/${IMAGE_NAME}"
+
+echo "=== Kencove Sentry Build ==="
+echo "Image: ${FULL_IMAGE}:${TAG}"
+echo "Commit: $(git rev-parse HEAD)"
+echo ""
+
+if [[ "${1:-}" == "--local" ]]; then
+    echo "Building locally (not pushing)..."
+    docker build \
+        -t "${IMAGE_NAME}:${TAG}" \
+        -t "${IMAGE_NAME}:latest" \
+        -f self-hosted/Dockerfile.kencove \
+        --build-arg SOURCE_COMMIT="$(git rev-parse HEAD)" \
+        --progress=plain \
+        .
+    echo ""
+    echo "Local build complete: ${IMAGE_NAME}:${TAG}"
+    exit 0
+fi
+
+# Check if using Cloud Build or local Docker
+if command -v gcloud &> /dev/null && [[ "${USE_CLOUD_BUILD:-true}" == "true" ]]; then
+    echo "Using Cloud Build..."
+    gcloud builds submit \
+        --config=cloudbuild.yaml \
+        --substitutions="_TAG=${TAG}" \
+        --project="${PROJECT_ID}" \
+        .
+else
+    echo "Using local Docker build + push..."
+
+    # Configure Docker for GAR
+    gcloud auth configure-docker "${REGION}-docker.pkg.dev" --quiet
+
+    # Build
+    docker build \
+        -t "${FULL_IMAGE}:${TAG}" \
+        -t "${FULL_IMAGE}:latest" \
+        -f self-hosted/Dockerfile.kencove \
+        --build-arg SOURCE_COMMIT="$(git rev-parse HEAD)" \
+        --progress=plain \
+        .
+
+    # Push
+    docker push "${FULL_IMAGE}:${TAG}"
+    docker push "${FULL_IMAGE}:latest"
+fi
+
+echo ""
+echo "=== Build Complete ==="
+echo "Image: ${FULL_IMAGE}:${TAG}"
+echo ""
+echo "To use in Helm values:"
+echo "  images:"
+echo "    sentry:"
+echo "      repository: ${FULL_IMAGE}"
+echo "      tag: \"${TAG}\""
diff --git a/cloudbuild.yaml b/cloudbuild.yaml
new file mode 100644
index 00000000000000..2b177ead905df2
--- /dev/null
+++ b/cloudbuild.yaml
@@ -0,0 +1,57 @@
+# Cloud Build configuration for kencove/sentry
+# Builds custom Sentry image with GitLab Autofix support
+#
+# Usage:
+#   gcloud builds submit --config=cloudbuild.yaml .
+#
+# Or with custom tag:
+#   gcloud builds submit --config=cloudbuild.yaml --substitutions=_TAG=v26.1.0-gitlab .
+#
+# Trigger on push:
+#   gcloud builds triggers create github \
+#     --repo-name=sentry --repo-owner=kencove \
+#     --branch-pattern="^master$" \
+#     --build-config=cloudbuild.yaml
+
+substitutions:
+  _REGION: us-central1
+  _REPOSITORY: kencove-docker-repo
+  _IMAGE_NAME: sentry
+  _TAG: ${COMMIT_SHA}
+
+options:
+  machineType: E2_HIGHCPU_32
+  diskSizeGb: 200
+  logging: CLOUD_LOGGING_ONLY
+
+steps:
+  # Build using multi-stage Dockerfile that handles both frontend and runtime
+  - name: 'gcr.io/cloud-builders/docker'
+    id: 'build-image'
+    args:
+      - 'build'
+      - '-t'
+      - '${_REGION}-docker.pkg.dev/$PROJECT_ID/${_REPOSITORY}/${_IMAGE_NAME}:${_TAG}'
+      - '-t'
+      - '${_REGION}-docker.pkg.dev/$PROJECT_ID/${_REPOSITORY}/${_IMAGE_NAME}:latest'
+      - '-f'
+      - 'self-hosted/Dockerfile.kencove'
+      - '--build-arg'
+      - 'SOURCE_COMMIT=${COMMIT_SHA}'
+      - '--progress=plain'
+      - '.'
+
+  # Push to Artifact Registry
+  - name: 'gcr.io/cloud-builders/docker'
+    id: 'push-image'
+    args:
+      - 'push'
+      - '--all-tags'
+      - '${_REGION}-docker.pkg.dev/$PROJECT_ID/${_REPOSITORY}/${_IMAGE_NAME}'
+    waitFor: ['build-image']
+
+images:
+  - '${_REGION}-docker.pkg.dev/$PROJECT_ID/${_REPOSITORY}/${_IMAGE_NAME}:${_TAG}'
+  - '${_REGION}-docker.pkg.dev/$PROJECT_ID/${_REPOSITORY}/${_IMAGE_NAME}:latest'
+
+timeout: 3600s  # 1 hour - Sentry build is slow
diff --git a/self-hosted/Dockerfile.kencove b/self-hosted/Dockerfile.kencove
new file mode 100644
index 00000000000000..df4d67849d5c6f
--- /dev/null
+++ b/self-hosted/Dockerfile.kencove
@@ -0,0 +1,169 @@
+# Multi-stage Dockerfile for Kencove Sentry build
+# This builds the frontend and creates the runtime image in one Dockerfile
+#
+# Build: docker build -f self-hosted/Dockerfile.kencove -t sentry:kencove .
+
+# =============================================================================
+# Stage 1: Build frontend assets using the same Python base as runtime
+# =============================================================================
+FROM python:3.13.1-slim-bookworm AS frontend-builder
+
+WORKDIR /build
+
+# Install Node.js 22 and build tools
+RUN apt-get update && apt-get install -y \
+    curl \
+    gnupg \
+    build-essential \
+    git \
+    && curl -fsSL https://deb.nodesource.com/setup_22.x | bash - \
+    && apt-get install -y nodejs \
+    && npm install -g pnpm@9 \
+    && rm -rf /var/lib/apt/lists/*
+
+# Install uv for Python dependency management
+RUN pip install uv==0.8.2
+
+# Copy dependency files first for layer caching
+COPY package.json pnpm-lock.yaml .node-version ./
+COPY pyproject.toml uv.lock ./
+
+# Install Node dependencies with shamefully-hoist to fix module resolution
+RUN pnpm install --frozen-lockfile --shamefully-hoist
+
+# Create Python venv and install dependencies (needed for sentry.build)
+ENV PATH="/build/.venv/bin:$PATH"
+RUN python -m venv .venv && \
+    uv sync --frozen --quiet --no-install-project
+
+# Copy source code
+COPY . .
+
+# Initialize minimal git repo for build scripts that need it
+ARG SOURCE_COMMIT=unknown
+RUN git init && \
+    git config user.email "build@kencove.com" && \
+    git config user.name "Build" && \
+    git add -A && \
+    git commit -m "Build commit" --allow-empty && \
+    echo "${SOURCE_COMMIT}" > .git/COMMIT_EDITMSG
+
+# Build frontend assets
+ENV WEBPACK_CACHE_PATH=/build/.webpack_cache
+ENV NODE_OPTIONS="--max-old-space-size=4096"
+ENV SENTRY_BUILD=${SOURCE_COMMIT}
+RUN python -m tools.fast_editable --path . && \
+    python -m sentry.build.main
+
+# Verify build outputs
+RUN test -f src/sentry/static/sentry/dist/entrypoints/app.js && \
+    test -f src/sentry/loader/_registry.json && \
+    echo "Frontend build verified successfully"
+
+# =============================================================================
+# Stage 2: Runtime image (same as official self-hosted/Dockerfile)
+# =============================================================================
+FROM python:3.13.1-slim-bookworm AS runtime
+
+LABEL maintainer="kencove"
+LABEL org.opencontainers.image.title="Sentry (Kencove)"
+LABEL org.opencontainers.image.description="Kencove fork with GitLab Autofix support"
+LABEL org.opencontainers.image.url="https://github.com/kencove/sentry"
+LABEL org.opencontainers.image.vendor="Kencove"
+
+# Add user and group
+RUN groupadd -r sentry --gid 999 && useradd -r -m -g sentry --uid 999 sentry
+
+# Install runtime dependencies
+RUN apt-get update && \
+    DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \
+        gosu \
+        libexpat1 \
+        tini \
+    && apt-get clean \
+    && rm -rf /var/lib/apt/lists/*
+
+WORKDIR /usr/src/sentry
+
+ENV PATH="/.venv/bin:$PATH" UV_PROJECT_ENVIRONMENT=/.venv \
+    PIP_NO_CACHE_DIR=1 PIP_DISABLE_PIP_VERSION_CHECK=1 \
+    UV_COMPILE_BYTECODE=1 UV_NO_CACHE=1
+
+# Install uv
+RUN python3 -m pip install --index-url 'https://pypi.devinfra.sentry.io/simple' 'uv==0.8.2'
+
+# Create venv
+RUN python3 -m venv /.venv
+
+ENV \
+  SENTRY_CONF=/etc/sentry \
+  UWSGI_NEED_PLUGIN=/var/lib/uwsgi/dogstatsd \
+  GRPC_POLL_STRATEGY=epoll1
+
+# Copy dependency files
+COPY --from=frontend-builder /build/uv.lock /build/pyproject.toml ./
+
+# Install Python dependencies and uwsgi-dogstatsd plugin
+RUN set -x \
+  && buildDeps=" \
+  gcc \
+  libpcre2-dev \
+  wget \
+  zlib1g-dev \
+  " \
+  && apt-get update \
+  && apt-get install -y --no-install-recommends $buildDeps \
+  && uv sync --frozen --quiet --no-install-project \
+  && mkdir /tmp/uwsgi-dogstatsd \
+  && wget -O - https://github.com/DataDog/uwsgi-dogstatsd/archive/1a04f784491ab0270b4e94feb94686b65d8d2db1.tar.gz | \
+  tar -xzf - -C /tmp/uwsgi-dogstatsd --strip-components=1 \
+  && UWSGI_NEED_PLUGIN="" uwsgi --build-plugin /tmp/uwsgi-dogstatsd \
+  && mkdir -p /var/lib/uwsgi \
+  && mv dogstatsd_plugin.so /var/lib/uwsgi/ \
+  && rm -rf /tmp/uwsgi-dogstatsd .uwsgi_plugins_builder \
+  && apt-get purge -y --auto-remove $buildDeps \
+  && apt-get clean \
+  && rm -rf /var/lib/apt/lists/* \
+  && python -c 'import maxminddb.extension; maxminddb.extension.Reader' \
+  && mkdir -p $SENTRY_CONF
+
+# Copy entire build from frontend-builder (includes src, bin, tools, etc.)
+COPY --from=frontend-builder /build/src /usr/src/sentry/src
+COPY --from=frontend-builder /build/bin /usr/src/sentry/bin
+COPY --from=frontend-builder /build/tools /usr/src/sentry/tools
+COPY --from=frontend-builder /build/scripts /usr/src/sentry/scripts
+COPY --from=frontend-builder /build/pyproject.toml /usr/src/sentry/
+COPY --from=frontend-builder /build/setup.cfg /usr/src/sentry/
+COPY --from=frontend-builder /build/README.md /usr/src/sentry/
+
+# Install sentry package
+RUN python3 -m tools.fast_editable --path . && \
+    sentry help | sed '1,/Commands:/d' | awk '{print $1}' > /sentry-commands.txt
+
+# Patch Seer URLs to use env vars (default to http://seer:9091 for K8s)
+# This must be done in the Python source so imports see the correct values
+RUN sed -i 's#SEER_DEFAULT_URL = "http://127.0.0.1:9091"#SEER_DEFAULT_URL = os.environ.get("SEER_URL", "http://seer:9091")#' \
+    /usr/src/sentry/src/sentry/conf/server.py && \
+    grep -q 'SEER_DEFAULT_URL = os.environ.get' /usr/src/sentry/src/sentry/conf/server.py && \
+    echo "Seer URLs patched successfully"
+
+# Copy config files
+COPY ./self-hosted/sentry.conf.py ./self-hosted/config.yml $SENTRY_CONF/
+COPY ./self-hosted/docker-entrypoint.sh /
+
+# Verify built files
+RUN test -f /usr/src/sentry/src/sentry/loader/_registry.json && \
+    test -f /usr/src/sentry/src/sentry/integration-docs/python.json && \
+    test -f /usr/src/sentry/src/sentry/static/sentry/dist/entrypoints/app.js && \
+    sentry help
+
+EXPOSE 9000
+VOLUME /data
+
+ENTRYPOINT ["/docker-entrypoint.sh"]
+CMD ["run", "web"]
+
+ARG SOURCE_COMMIT
+ENV SENTRY_BUILD=${SOURCE_COMMIT:-unknown}
+LABEL org.opencontainers.image.revision=$SOURCE_COMMIT
+LABEL org.opencontainers.image.source="https://github.com/kencove/sentry/tree/${SOURCE_COMMIT:-master}/"
diff --git a/self-hosted/Dockerfile.patch b/self-hosted/Dockerfile.patch
new file mode 100644
index 00000000000000..f316ffea43da9b
--- /dev/null
+++ b/self-hosted/Dockerfile.patch
@@ -0,0 +1,23 @@
+# Dockerfile that patches the official Sentry image with GitLab Autofix support
+# Much faster than rebuilding from source (~2 minutes vs ~45 minutes)
+#
+# Build: docker build -f self-hosted/Dockerfile.patch -t sentry:kencove .
+
+ARG SENTRY_VERSION=26.1.0
+FROM ghcr.io/getsentry/sentry:${SENTRY_VERSION}
+
+LABEL maintainer="kencove"
+LABEL org.opencontainers.image.title="Sentry (Kencove)"
+LABEL org.opencontainers.image.description="Kencove fork with GitLab Autofix support"
+
+# Copy patched autofix utils with GitLab support
+# The change adds 'gitlab' and 'integrations:gitlab' to supportedProviders
+COPY static/app/components/events/autofix/utils.tsx \
+     /usr/src/sentry/src/sentry/static/sentry/dist/app/components/events/autofix/utils.tsx
+
+# Note: The above path may need adjustment - the built JS is in dist/
+# Let's find the actual location and patch the compiled JS instead
+
+ARG SOURCE_COMMIT
+ENV SENTRY_BUILD=${SOURCE_COMMIT:-patched}
+LABEL org.opencontainers.image.revision=$SOURCE_COMMIT
diff --git a/self-hosted/sentry.conf.py b/self-hosted/sentry.conf.py
index 71a4c2598b2153..06fa91bb809746 100644
--- a/self-hosted/sentry.conf.py
+++ b/self-hosted/sentry.conf.py
@@ -6,6 +6,23 @@
 import os
 import os.path
 
+##############################################
+# CRITICAL: Patch Seer URLs before any imports
+# This must happen BEFORE `from sentry.conf.server import *`
+# to ensure all code sees the correct Seer service URLs
+##############################################
+import sentry.conf.server as _sentry_server
+_sentry_server.SEER_DEFAULT_URL = os.environ.get("SEER_URL", "http://seer:9091")
+_sentry_server.SEER_AUTOFIX_URL = _sentry_server.SEER_DEFAULT_URL
+_sentry_server.SEER_SIMILARITY_URL = _sentry_server.SEER_DEFAULT_URL
+_sentry_server.SEER_ANOMALY_DETECTION_URL = _sentry_server.SEER_DEFAULT_URL
+_sentry_server.SEER_SEVERITY_URL = _sentry_server.SEER_DEFAULT_URL
+_sentry_server.SEER_BREAKPOINT_DETECTION_URL = _sentry_server.SEER_DEFAULT_URL
+_sentry_server.SEER_GROUPING_URL = _sentry_server.SEER_DEFAULT_URL
+_sentry_server.SEER_SUMMARIZATION_URL = _sentry_server.SEER_DEFAULT_URL
+_sentry_server.SEER_RPC_SHARED_SECRET = os.environ.get("SEER_RPC_SHARED_SECRET", "").split(",") if os.environ.get("SEER_RPC_SHARED_SECRET") else None
+##############################################
+
 # For Docker, the following environment variables are supported:
 #  SENTRY_POSTGRES_HOST
 #  SENTRY_POSTGRES_PORT
@@ -234,3 +251,10 @@
 
 SENTRY_OPTIONS["system.secret-key"] = secret_key
 SENTRY_USE_RELAY = True
+
+##############################################
+# Feature Flags for Self-Hosted
+##############################################
+# Disable Explorer-based autofix (not available in self-hosted Seer)
+# This forces Sentry to use the legacy /v1/automation/autofix/start endpoint
+SENTRY_FEATURES["organizations:seer-explorer"] = False
diff --git a/static/app/components/events/autofix/utils.tsx b/static/app/components/events/autofix/utils.tsx
index 4a5a67f079f952..5cc63cf6c1e946 100644
--- a/static/app/components/events/autofix/utils.tsx
+++ b/static/app/components/events/autofix/utils.tsx
@@ -188,6 +188,8 @@ const supportedProviders = [
   'github',
   'integrations:github',
   'integrations:github_enterprise',
+  'gitlab',
+  'integrations:gitlab',
 ];
 export const isSupportedAutofixProvider = (provider: {id: string; name: string}) => {
   return supportedProviders.includes(provider.id);