### Added

- `drills/README.md` documents the standing runner-probe venue,
  `heavy-duty/ceremony-runner-probe` — the place runner-only facts are measured
  on demand, ruled as option A by the operator (#202).

- The runbook states that the drill disposal rule does **not** apply to it.
  Archiving it defeats its purpose, and that is exactly how the three existing
  drill repos each became unavailable (#202).

- It records that a probe must run as an Actions job under the workflow token:
  the same call answers 500 there and 204 under a PAT, so a probe run any other
  way produces a confident wrong answer (#202).

- Creating the repo is recorded as the operator's step, measured rather than
  assumed: a fleet identity gets 403 on org repo creation and 201 in its own
  namespace (#202).