Typed registry of operator-controlled config: scheduler weights, billing COGS/rates, harness budgets, lifecycle, liveness, and tenant-visible defaults.
Resolution: per-tenant override → global default → registry default, clamped per contract.
Founder-gated (GOVERNANCE_READ / GOVERNANCE_WRITE); every write is audit-written.
REST: /api/v1/founder/operator-policy/policy · CLI: ww admin operator-policy get|set|clear · MCP: admin_operator_policy_*.