A stop acknowledgement is not instance convergence
Treat a cloud stop mutation's Boolean acknowledgement as acceptance of an operation, not proof that every workload instance has stopped. For an active/passive cutover, write an operation-owned journal before mutation: target deployment, intended terminal condition, and each verif…