Read-only. Source of truth: Worker → D1. No execution controls. NOK. PAPER only.