Ensure the MCO controller triggers OCL builds only when MC changes require a new image (kernel args, extensions, OSImageURL) and defaults to live-apply for other scenarios. One way of doing this is by comparing old and new MCs for changes in osimageurl, kernalType, and extensions. Ensure that non-ocl changes bypass image builds and rely on live-apply.