Collects the verified environment facts and traps from 2026-09-21:
workstation vs railiance01 kube context, tunnels, harness permissions,
change gate and rollout headroom, attended OpenBao login, secret-read
hazards, ArgoCD layout, and vocabulary. Linked from AGENTS.md and the
session protocol.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Allow version-controlled agent rule files under .claude/rules/ while keeping
machine-local Claude Code state ignored. Aligns with state-hub gitignore pattern.