Log policy: rotate at 10 MB/file; retain 10 files.
Cache cleanup trigger: 2 GB.
Durable state: metadata records.
Rebuildable state: cache.
Inspect: health/status and logs.
Restart boundary: do not restart during active indexing unless runbook confirms the queue is idle.
Recovery: inspect dependencies and preserve durable records before rebuilding cache.