{"ok":true,"service":"jarvis-infra-specialist","role":"infrastructure specialist (audited chokepoint)","ops":["audit.worker_crons","audit.dns","audit.drift","kv.get","kv.set","dns.upsert","dns.delete","gd.dns.upsert","gd.dns.delete","sql.exec","worker.deploy","secret.set","worker.restore","kv.ns.create","kv.cf.put","kv.cf.delete","r2.create","zone.create","cache.purge","pages.add_domain","pages.remove_domain"],"note":"read-only audits + self-owned KV + Cloudflare DNS writes (risk-tiered, verify-before/after); router-adapter for cf_dns_create/cf_dns_delete; no crons"}