ops/runbook-<service>).
Metadata: last-tested, owner, criticality, linked-incidents (appended by the agent via a Linear/Sentry connector).
Quarterly audit view:
page.updated webhook pings the on-call channel when a runbook changes. The metadata history answers “who last attested this runbook.”