The split between managed and self hosted leaves the orchestration layer itself out of scope. Once the agent loop runs locally most teams still push logs secrets and failure notifications through outside services. Those external hops decide uptime and audit exposure more than the initial hosting label