A

Every operations pipeline refuses any actor except the estate's own GitHub App — a person cannot start one.

B

The cluster is changed only by those pipelines, signing in with OIDC for one job. No standing cluster credential exists anywhere.

C

Every mutating operation carries an approval — recorded in the mesh, and verified by the pipeline before the first mutating step.

D

Steady state: people are read-only on production. Elevation is time-boxed, deliberate and recorded.