The agent resolves an in-process mock TMF API (also curl-able at /api/tmf/...). Remediation mutates an in-memory working copy and re-verifies — no production writes.