Plan doc now drives everything. Every request becomes a four-bullet plan (inputs, connectors, guards, metric) before any workflow runs so the agent has a concrete target instead of just questions.

Each connector includes a watcher expecting {status:'ok'}, logs the sessionId, and enforces guard thresholds: retries>3/30s, loop depth>4, or cost>2x baseline. When a guard trips we pause the plan, stream the watcher log to the manual gate, and only let the next run continue after a human approves the diff. That keeps automation fast but keeps the ops team in control.