Track provider state independently, skip SSH work for placeholder IPs, and clean up failed cloud server provisioning.
Persist DigitalOcean, Hetzner, and Vultr servers before public IP assignment, then backfill placeholder addresses from provider state. Treat partial Sentinel snapshots as non-authoritative and document the destinations API with OpenAPI schemas.