Operational health

Owner-registered services & scheduled tasks that deviated — observe-only (T0). These never trigger containment; they tell you something stopped or failed.