Hosted, BYOC, and local runtimes with trust made explicit.

This shell inherits authenticated page-route posture and is not exposed as a public marketing surface.

Runner registration and connector mutation stay blocked; signed Mission approval issuing, sandbox eval summaries, cost visibility, and operator sandbox interrupts are live.

Published /api/v2/os9 fleets, runners, approvals, and mission contracts use route-level auth and explicit OpenAPI registration; broader OS9 APIs remain closed.