Exact Machine Git baseline and five-slot health are proven first. Pool readiness uses the production adapter selection order and requires a non-active, non-quarantined endpoint with a complete config. When stale or exhausted, the existing transactional full-refresh orchestrator is forced once with active-generation confirmation and live heartbeat. Failure remains durable DEGRADED_POOL with old runtime preserved; Direct is never enabled.