Vouch governed agent deployment, with proof

idtaskimagestatus container
dep_c4540817a546711cdeploy-stagingvouch/agent-e2e:lateststopped6fc8b71fe03a75ffb9231cd0950632792ca1cea38dba82658c133fbe1712e7a6
dep_6a19a28a9f8936c3deploy-stagingvouch/agent-e2e:lateststoppeddfad37253b9ebc2f937cccb3a60273dadb0ea796df2ebaccae2e8904774634fc
dep_480cd1e951e17feedeploy-stagingvouch/agent-e2e:latestfailed
dep_57af628298b4d704deploy-stagingvouch/agent-e2e:lateststopped00a2c4e6645194719169fb19462ba39b589bca20d3c57073c61fc73550f8d74e
dep_6daa046c314386efdeploy-stagingvouch/agent-e2e:lateststopped7830256766f20634203d528d95f72f72130ac32e3e5f41bab243b3185609db2b

New deployment

task_id agent_image

The runner polls desired state and launches one sandboxed container per deployment (§2.5). Agent logs are not exposed here yet (G2).