Envoy P0 directive

Successful applies (rolling 24h, status=submitted with applied_at): 0/5BELOW TARGET

Matches countAppliesLast24h / directive monitor semantics. Cron auto_apply.applied counts accepted triggers, not this DB total. For QA, capture this panel from production after deploy.