Creds folder convention -- per-site ~/<site>-creds/ consolidation; no loose env files; DC folders follow the pattern
Project posture: closed test -- VR1 is a closed in-house test; prioritize deployment tooling/runbooks over real-world security (deferred to post-teardown)
Multi-workstation / Remote Control -- operator hops workstations, drives ONE live jumphost session via Remote Control; attach never --resume; cloud mutations stay gated even during batch
Review after each step -- on multi-step work, operator wants a grounding review (validate + drift sweep + cross-check) after EVERY step, not just checkpoints