Daily operations · 5 min
Routine operations
Control services, update schedules, certificates, and backup jobs through reviewed plans.
Available managed actions
When the connected agent advertises the exact versioned capability, the portal can inspect safe service resources, plan service start, stop, or restart, schedule automatic updates, renew a due certificate, start a backup, and verify the latest backup canary.
Every mutation is reviewed first
The server creates an expiring plan with the expected impact and verification method. Confirmation binds to that exact plan and resource generation. Results are checked after the action and stored with durable idempotency and audit evidence.
Why an action can be read-only
An action remains read-only when the agent is offline, the required module is absent, the exact capability version is unavailable, the resource changed after review, or the action is not appropriate—for example, certificate renewal is not due. Update the server and wait for the next signed check-in before retrying a missing capability.