Operator policy

Typed registry of operator-controlled config: scheduler weights, billing COGS/rates, harness budgets, lifecycle, liveness, and tenant-visible defaults.

Registry

Policy contracts

Resolution: per-tenant override → global default → registry default, clamped per contract. Founder-gated (GOVERNANCE_READ / GOVERNANCE_WRITE); every write is audit-written. REST: /api/v1/founder/operator-policy/policy · CLI: ww admin operator-policy get|set|clear · MCP: admin_operator_policy_*.