Resource isolation
Inference is the production workload. A metrics portal must not compete aggressively for memory or CPU. The portal service has bounded memory and CPU, query concurrency limits, and caching. Telemetry collection avoids expensive repeated process scans or inference probes in the normal page-refresh path.
Reconciliation semantics
A configuration-management run should converge on a declared state without causing work on an already-correct host. Adoption and restoration are different operations: restoration may create missing files, while adoption must not overwrite unknown live state simply because a template exists.
Recovery boundary
Configuration-as-code can reproduce services above a functioning OS. It cannot reach a host with a dead disk, broken network, or missing connector. Documentation must distinguish those prerequisites from a successful application rollout.