Provision a fresh server from the current box's classified state. Email security code + dual-OTP required. Uses the chosen type/facility as the target shape.
Spin up an ephemeral test server (role=ephemeral-test) or tear one down. Teardown carries its own confirm step.
Register an already-provisioned server as a capacity node. Set descriptor, account caps, and accepts-new. No provisioning; this just brings a box into the fleet.
Per-node capacity bars (raw / reserved / actual / headroom) to decide where a new deployment should land before you provision.