... works under the hood, how execution contracts are structured, onboarding pain, or where we re taking governed repo execution for AI workflows, I m here. Comment from Gal Dayan(@galdayan): the drift-detection answers above cover contract vs reality diverging over time, but what about day one - who or what checks that the contract was written correctly in the first place? if a maintainer marks a risky migration step as "safe" by mistake, or defines "success" too loosely, ota doctor ... ... agent would run it with full confidence. is there any validation on the contract's own claims, or is a wrong-but-internally-consistent ota.yaml indistinguishable from a correct one until something actually breaks in production Comment from Bobai Kato