diff --git a/tenants/piloto/00-namespace-quota-netpol.yaml b/tenants/piloto/00-namespace-quota-netpol.yaml
index 23a0a28..d1611f3 100644
--- a/tenants/piloto/00-namespace-quota-netpol.yaml
+++ b/tenants/piloto/00-namespace-quota-netpol.yaml
@@ -18,7 +18,7 @@ metadata:
 spec:
   hard:
     requests.cpu: "4"
-    requests.memory: 6Gi
+    requests.memory: 7Gi
     limits.cpu: "20"
     limits.memory: 16Gi
     pods: "30"
diff --git a/tenants/piloto/07-sealed-consentimento-selo.yaml b/tenants/piloto/07-sealed-consentimento-selo.yaml
new file mode 100644
index 0000000..4c4d466
--- /dev/null
+++ b/tenants/piloto/07-sealed-consentimento-selo.yaml
@@ -0,0 +1,15 @@
+---
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  creationTimestamp: null
+  name: consentimento-selo
+  namespace: piloto-prod
+spec:
+  encryptedData:
+    segredo: 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
+  template:
+    metadata:
+      creationTimestamp: null
+      name: consentimento-selo
+      namespace: piloto-prod
diff --git a/tenants/piloto/65-runtime-core.yaml b/tenants/piloto/65-runtime-core.yaml
new file mode 100644
index 0000000..825c874
--- /dev/null
+++ b/tenants/piloto/65-runtime-core.yaml
@@ -0,0 +1,86 @@
+# P4.3-P4.9 — runtime-core do piloto. GERADO por scripts/consolidar_demo.py a partir
+# da uniao do ambiente dos servicos que ele absorve. Nao edite a mao sem rodar o
+# --check de novo.
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: runtime-core
+  namespace: piloto-prod
+  labels:
+    app: runtime-core
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: runtime-core
+  template:
+    metadata:
+      labels:
+        app: runtime-core
+        athleticmap.io/contexto: runtime-core
+    spec:
+      containers:
+      - name: runtime-core
+        image: docker.io/library/runtime-core:1.1-demo
+        imagePullPolicy: Never
+        ports:
+        - containerPort: 8083
+        env:
+        - name: SPRING_DATASOURCE_URL
+          value: jdbc:postgresql://pgbouncer.plataforma-prod.svc.cluster.local:6432/athleticmap_piloto
+        - name: SPRING_DATASOURCE_USERNAME
+          value: r_piloto
+        - name: SPRING_DATASOURCE_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: db-compartilhado
+              key: password
+        - name: ATM_JWK_SET_URI
+          value: http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs
+        - name: ATM_ISSUER
+          value: https://auth-piloto.athleticmap.influxdigital.com.br/realms/athleticmap
+        - name: ATM_TENANT
+          value: piloto
+        - name: ATM_KC_ADMIN_ENABLED
+          value: 'true'
+        - name: ATM_KC_CLIENT_SECRET
+          valueFrom:
+            secretKeyRef:
+              name: kc-admin-secret
+              key: client-secret
+        - name: SPRING_DATASOURCE_HIKARI_MAXIMUM_POOL_SIZE
+          value: '10'
+        resources:
+          requests:
+            cpu: 100m
+            memory: 384Mi
+          limits:
+            cpu: '1'
+            memory: 768Mi
+        readinessProbe:
+          httpGet:
+            path: /actuator/health/readiness
+            port: 8083
+          initialDelaySeconds: 25
+          periodSeconds: 10
+          failureThreshold: 30
+        livenessProbe:
+          httpGet:
+            path: /actuator/health/liveness
+            port: 8083
+          initialDelaySeconds: 90
+          periodSeconds: 20
+          failureThreshold: 6
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: runtime-core
+  namespace: piloto-prod
+spec:
+  selector:
+    app: runtime-core
+  ports:
+  - name: http
+    port: 80
+    targetPort: 8083
diff --git a/tenants/piloto/66-runtime-operacao.yaml b/tenants/piloto/66-runtime-operacao.yaml
new file mode 100644
index 0000000..ef1c463
--- /dev/null
+++ b/tenants/piloto/66-runtime-operacao.yaml
@@ -0,0 +1,84 @@
+# P4.3-P4.9 — runtime-operacao do piloto. GERADO por scripts/consolidar_demo.py a partir
+# da uniao do ambiente dos servicos que ele absorve. Nao edite a mao sem rodar o
+# --check de novo.
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: runtime-operacao
+  namespace: piloto-prod
+  labels:
+    app: runtime-operacao
+spec:
+  replicas: 0
+  selector:
+    matchLabels:
+      app: runtime-operacao
+  template:
+    metadata:
+      labels:
+        app: runtime-operacao
+        athleticmap.io/contexto: runtime-operacao
+    spec:
+      containers:
+      - name: runtime-operacao
+        image: docker.io/library/runtime-operacao:1.1-demo
+        imagePullPolicy: Never
+        ports:
+        - containerPort: 8083
+        env:
+        - name: SPRING_DATASOURCE_URL
+          value: jdbc:postgresql://pgbouncer.plataforma-prod.svc.cluster.local:6432/athleticmap_piloto
+        - name: SPRING_DATASOURCE_USERNAME
+          value: r_piloto
+        - name: SPRING_DATASOURCE_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: db-compartilhado
+              key: password
+        - name: ATM_JWK_SET_URI
+          value: http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs
+        - name: ATM_ISSUER
+          value: https://auth-piloto.athleticmap.influxdigital.com.br/realms/athleticmap
+        - name: ATM_TENANT
+          value: piloto
+        - name: ATM_CONSENTIMENTO_SEGREDO
+          valueFrom:
+            secretKeyRef:
+              name: consentimento-selo
+              key: segredo
+        - name: SPRING_DATASOURCE_HIKARI_MAXIMUM_POOL_SIZE
+          value: '10'
+        resources:
+          requests:
+            cpu: 100m
+            memory: 384Mi
+          limits:
+            cpu: '1'
+            memory: 768Mi
+        readinessProbe:
+          httpGet:
+            path: /actuator/health/readiness
+            port: 8083
+          initialDelaySeconds: 25
+          periodSeconds: 10
+          failureThreshold: 30
+        livenessProbe:
+          httpGet:
+            path: /actuator/health/liveness
+            port: 8083
+          initialDelaySeconds: 90
+          periodSeconds: 20
+          failureThreshold: 6
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: runtime-operacao
+  namespace: piloto-prod
+spec:
+  selector:
+    app: runtime-operacao
+  ports:
+  - name: http
+    port: 80
+    targetPort: 8083
diff --git a/tenants/piloto/67-runtime-saude.yaml b/tenants/piloto/67-runtime-saude.yaml
new file mode 100644
index 0000000..a7294e1
--- /dev/null
+++ b/tenants/piloto/67-runtime-saude.yaml
@@ -0,0 +1,95 @@
+# P4.3-P4.9 — runtime-saude do piloto. GERADO por scripts/consolidar_demo.py a partir
+# da uniao do ambiente dos servicos que ele absorve. Nao edite a mao sem rodar o
+# --check de novo.
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: runtime-saude
+  namespace: piloto-prod
+  labels:
+    app: runtime-saude
+spec:
+  replicas: 0
+  selector:
+    matchLabels:
+      app: runtime-saude
+  template:
+    metadata:
+      labels:
+        app: runtime-saude
+        athleticmap.io/contexto: runtime-saude
+    spec:
+      containers:
+      - name: runtime-saude
+        image: docker.io/library/runtime-saude:1.2-demo
+        imagePullPolicy: Never
+        ports:
+        - containerPort: 8083
+        env:
+        - name: SPRING_DATASOURCE_URL
+          value: jdbc:postgresql://pgbouncer.plataforma-prod.svc.cluster.local:6432/athleticmap_piloto
+        - name: SPRING_DATASOURCE_USERNAME
+          value: r_piloto
+        - name: SPRING_DATASOURCE_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: db-compartilhado
+              key: password
+        - name: ATM_JWK_SET_URI
+          value: http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs
+        - name: ATM_ISSUER
+          value: https://auth-piloto.athleticmap.influxdigital.com.br/realms/athleticmap
+        - name: ATM_TENANT
+          value: piloto
+        - name: GARMIN_REDIRECT_URI
+          value: https://piloto.athleticmap.influxdigital.com.br/api/public/integrations/garmin/callback
+        - name: GARMIN_FRONTEND_REDIRECT
+          value: https://piloto.athleticmap.influxdigital.com.br/integracoes/garmin
+        - name: GARMIN_CLIENT_ID
+          valueFrom:
+            secretKeyRef:
+              name: garmin-oauth
+              key: GARMIN_CLIENT_ID
+        - name: GARMIN_CLIENT_SECRET
+          valueFrom:
+            secretKeyRef:
+              name: garmin-oauth
+              key: GARMIN_CLIENT_SECRET
+        - name: ATM_AUDITORIA_RETENCAO_DIAS
+          value: '730'
+        - name: SPRING_DATASOURCE_HIKARI_MAXIMUM_POOL_SIZE
+          value: '10'
+        resources:
+          requests:
+            cpu: 100m
+            memory: 384Mi
+          limits:
+            cpu: '1'
+            memory: 768Mi
+        readinessProbe:
+          httpGet:
+            path: /actuator/health/readiness
+            port: 8083
+          initialDelaySeconds: 25
+          periodSeconds: 10
+          failureThreshold: 30
+        livenessProbe:
+          httpGet:
+            path: /actuator/health/liveness
+            port: 8083
+          initialDelaySeconds: 90
+          periodSeconds: 20
+          failureThreshold: 6
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: runtime-saude
+  namespace: piloto-prod
+spec:
+  selector:
+    app: runtime-saude
+  ports:
+  - name: http
+    port: 80
+    targetPort: 8083