Control-plane separation

The control plane manages modules, configuration, agents, and deployment jobs. Event ingestion operates independently, allowing collection to continue without coupling high-volume telemetry to deployment administration.

Workload execution is disabled by default and must be enabled only on an authorized sensor host.

Current maturity

Watchtower is under active development. Module availability, deployment targets, retention behavior, and integration contracts must be confirmed in a release record before production use.