Exact VM100/VM101 baselines were verified. The cached bootstrap controller was proven with isolated fake dispatcher, status and recovery-state helper, including malformed-health hard-stop and durable refresh-handoff retry. Production remained at five healthy slots; recovery, fallback, topology-delivery, network and Direct runtime state were unchanged.