Operational controls for long-lived agent workloads with observability, security, and lifecycle management.

• ›Covers four operational domains: runtime lifecycle (start, pause, stop, restart), observability (logs, metrics, traces), safety controls (scopes, permissions, kill switches), and change management (rollout, rollback, audit)
• ›Enforces baseline controls including immutable deployment artifacts, least-privilege credentials, environment-level secret injection, and hard timeouts with re