Auth, project/test read surface, failure bundles, idempotent write surface,
run/wait/rerun with auto-heal, batch waves, init onboarding, agent install.