API capability pack for bounded Render REST API operations against https://api.render.com/v1 only. Enroll a Render API key bearer connection named render; no credential is embedded in this manifest. The pack reads workspaces, workspace audit logs, projects, environments, services, deploys, service events, custom domains, jobs, logs, log label values, Postgres instances, and Key Value instances for deployment operations, incident review, release readiness, and infrastructure inventory. It bundles a scheduled service operations digest, an AI-assisted deploy investigation brief, and approval-gated workflows for triggering one service deploy or rolling back one service to a selected deploy. Writes are limited to one deploy trigger, deploy cancel, rollback, restart, or cache purge at a time. The pack intentionally excludes service/project/environment/domain/datastore create-update-delete, env vars and secret files, connection-info and credential endpoints, arbitrary job commands, cron run starts, suspend/resume, disks, private links, dedicated IPs, notification settings, deploy hooks, blueprint mutation, owner membership and auth administration, billing, OAuth token exchange, webhooks, and arbitrary Render API passthrough.