The delegation reconciler's Run loop makes a pass at startup without waiting, then every 15 minutes, matching the community reconciler. A failed pass is logged and the loop continues. Passes are serialized with a context-aware slot: a Reconcile call made during a pass waits for it, then runs its own, and a caller cancelled while waiting returns its context error without starting a pass. This is the only guard on the hourly budget, which each pass derives from the created_on timestamps in the NS listing. POST /admin/dns/reconcile sits behind the existing admin bearer and runs one pass synchronously: 200 with the result as JSON, 500 with {error, result} when the pass fails (so a ceiling stop still shows the pending, deferred and ceiling figures), 501 when no reconciler is set. The route has a 10-minute write deadline. Scheduled and forced passes log the same LogPass summary. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>