Where it runs: dev gets the write path and the runs, upper gets none
This follows the cluster registry's dev and upper types. Bootstrap-tier mutations are already dev-only, and agent runs are the same shape, so a production cluster holds no agent credential and runs no agent.
Principle honored
Cluster-agnostic and generator-driven (ADR-0006). A cluster gets the feature by a toggle in cluster.yaml, and customize-cluster.sh refuses the invalid combination.
What changes
apron/cluster.yaml: components.autopilot, refused on type: upper like providerGithub and platformCicd. New types hub and inference for the model fleet.
New group apron/55-autopilot/, and provider-kubernetes grants for the kinds a run renders.
Registry ConfigMap gains autopilotReady, set only after the network-policy canary passes.
Verify live
kiac-dev's CNI does not enforce NetworkPolicy; kind-prod's Calico does. Do not set autopilotReady on a claim. Run a canary pod that must fail to reach a blocked service, and gate the flag on that result.