M1 data spine (DTOs, state_reader 3 families, ORM+registry, repo, gate, ingest, CLI), M2 cockpit app (dashboard service, SVG charts, FastAPI+HTMX, serve), M3 in-cluster deploy (Dockerfile, CronJob, Deployment + Tailscale proxy, rollout+cutover runbook). htmx vendored (no CDN/SRI risk). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>