SCAN
Create, simulate, confirm, observe.
Scanning begins only after the exact request passes simulation and confirmation.
Define
Choose canonical target, perspective, transport, profile, compatible plugins, outputs, project, and tags.
Simulate
Execute
Confirmation enqueues work. A worker leases it, rebuilds the plan, revalidates transport, and passes only simulated plugins/grants.