The host you rent has three commands and no shell

The security questionnaire asks what your operators can run on the physical host. You answer with a GET.

GET /api/v1/servers/{id}/available-commands returns the catalog: check-uptime, check-memory, kexec-reboot. Each command carries a risk level, a cooldown, an hourly rate limit. Commands that would expose file paths, processes, service state, or network reachability are deliberately not offered. The reboot requires a confirmation token. There is no SSH to the host, for you or for anyone holding a stolen laptop from your desk.

On the night the box wedges, the on-call engineer POSTs execute-command with command_slug kexec-reboot and the token. The box comes back. The containers come back. The questionnaire answer is still true.