Implement one service-owned cached retained-config bootstrap controller. Keep provider acquisition and live zero-healthy outage proof in later focused steps.