Cloud-eval guardrails
The bounds on a metered cloud eval lane (a non-loopback model endpoint) — the fix for an OpenRouter eval that once hung ~2.5 h holding the lane and accruing uncapped spend. A local Spark lane runs unguarded and is unaffected. Edits write a private config file the guardrail reads at dispatch time, so the next cloud eval picks them up live.