Operator console — governed recommend → approve → execute
Where remediation may act. A playbook step reaches a workload only through an enabled connection whose namespaces include it — with no connection, nothing runs.