Cloud state is source of truth. Use the packaged `cloud`, profile, résumé, ledger, outcome, round, and attention commands; do not use legacy whole-file push/pull. Acquire and renew the v2 application-run lease, create an intent before sending, and confirm only after visible success. Tokens stay in owner-only host configuration and never in git.