Owns scheduled-task definitions, scheduling decisions and delivery state. controller drives the workflow; repository persists tasks; authorization checks the task's authority. A due task still needs normal execution admission. Delivery and recovery records prevent uncertainty from being treated as permission to dispatch again.