Install the controller as managed VM101 source, validate BusyBox syntax on target, prove cached bootstrap with fake dispatcher/status/recovery-state helper, start the service, verify production runtime hashes unchanged, then close VM101 Machine Git.