Summary

Upgrades the isolated Apps fixture to the reviewed Milo ownership guard before running authoring with its compatible runtime.

The upgrade records every conditional change before writing, resumes only matching progress, and verifies the resulting image and pod ownership without an automatic downgrade.

The automated trial checks guard denials before authoring, keeps cleanup tied to recorded identities, and refuses an existing runner kubeconfig. Depends on #58 and contributes to datum-cloud/enhancements#929.

Validation

• Fourteen upgrade failure and recovery cases pass, including lost responses, conflicts, changed identities, and credential-safe diagnostics.
• Twelve guard-probe cases and forty-nine existing offline cases pass.
• Guarded image contracts and workflow shell syntax pass independent checks.
• Guarded live Colima trial and complete Apps lifecycle gates.