# agentctl coordinator unit templates

Templates only. **Not loaded** on this machine.

- `agentctl-coordinator.service` — systemd `Type=simple` foreground unit
- `com.agentctl.coordinator.plist` — launchd `KeepAlive` foreground job

Loading requires **explicit authorization** plus a fail-closed verification record
(owner, host, command evidence, rollback). Do not `launchctl load` / `systemctl enable`
from a task worktree without that gate.

Daemon runs as the caller; it only drives already-validated integrate candidates via
`queue schedule` under exclusive `manager.lock`. It does not touch `env:*` and does
not grant new capabilities.