Preserve tested behavior
The roles, capabilities and configuration you exercised locally move with the agent, with the deployment posture made explicit: memory is enabled per container, and guarded commands are refused unless the operator allow-lists them.