Reference# Dry, factual lookup: configuration keys, paths, and integrity checks. Configuration Deliberately exposed and out of scope Locked-down defences Verification checks What’s installed