Runbooks / controlled actions
Guided operations
Every action explains its authority boundary. Osprey never receives DNA credentials in this browser.
AReconcile & enable
Use only after the process has a coherent public/private snapshot and the current policy matches.
Requires the operator key and two distinct approver names.BEmergency stop
Trip a global cancel-only state. Existing orders are handled by the maker loop; this does not claim cancellation confirmation.
Recorded as an operator kill event when the audit store is connected.CRestart process
Service orchestration is outside the Osprey API surface.
Unavailable hereUse the deployment or service manager. No restart endpoint is exposed.DTake over shard
Lease takeover requires a new process identity and expiry fencing.
Unavailable hereThe current browser cannot assume ownership.ERetire market
Closed-market retirement is not an automatic Osprey capability.
Unavailable hereDNA market lifecycle remains authoritative.