One lightweight agent per host, installed by the same line as the CLI. It holds no policy of its own — it asks the fleet plane on every check, so rules change everywhere at once.

It enforces on reconnect before anything else runs, and the gap is logged as a gap — the audit never pretends an offline hour was a compliant one.

Every policy runs in rehearsal first: same hosts, same checks, effects logged but not applied. Promotion to enforcing is a one-line change with the rehearsal report attached.

Only signers on the policy's owning team, and every change lands with author, review, and the diff. There is no console toggle that skips the record.