Non-interactive shells skipped the .bashrc KUBECONFIG export and fell back
to ~/.kube/config (retired coulombcore tunnel :16443). ~/.kube/config now
links to config-railiance01; the old default is config-coulombcore-legacy.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Collects the verified environment facts and traps from 2026-09-21:
workstation vs railiance01 kube context, tunnels, harness permissions,
change gate and rollout headroom, attended OpenBao login, secret-read
hazards, ArgoCD layout, and vocabulary. Linked from AGENTS.md and the
session protocol.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>