A second supplier can deploy it from a clean machine
How to run it. Give the repository and its documentation to an engineer who has never seen the project, on a laptop with nothing installed, and ask them to get it running.
They reach a running local environment by following written steps, and any credential they need is named and requestable.
It only builds on a machine someone configured by hand, steps live in a person's memory, or a required key exists in one engineer's environment and nowhere else.
Why it matters. This is the single check most likely to fail quietly, because everything works fine as long as the original team is still there. It is also the check that decides whether you are choosing to stay with a supplier or unable to leave.