What works today

What works today (verified live against the Oracle VM)

• Register existing VMs and drive them over SSH (agentless, no daemon to install).
• Install Docker on a VM (idempotent).
• Deploy single containers, and manage docker compose stacks (the day-to-day path).
• doctor checks the local tools a release actually runs, and installs what it can with --fix.
• Every command supports -o json for machine consumers (MAUI/MCP/agents).

What is built but untested

• Provisioning a new Lightsail VM (vm provision, up). It is billable, so it ships behind --dry-run until you actually need a new box. OCI is stubbed.