Single dense authoritative plan superseding v0_3_plan.md and v0_3_plan_recovered.md: status table, sequencing, ADR map, and the four open decisions that gate work (agent runtime model, secret scoping axis, operator topology, binary distribution). Reflects shipped state (role gate, exec+logs+selector, stale health, auto-start reboot fix) and the in-scope agent+system upgrade auto-rollback per ADR-022 / ADR-0042.