Complete procedures with a way back.

Install and authenticate Codex CLI, establish project trust, write layered AGENTS.md instructions, create read-only and workspace-write profiles, constrain network access and approvals, and verify the effective configuration before real changes.

Enroll a production Linux host into FreeIPA 4.12.4 through verified DNS, time, and TLS trust; replace permissive access with tested HBAC and exact sudo rules; bound SSSD offline credentials; and operate break-glass, deprovisioning, failover, LDAP exceptions, and rollback safely.

Deploy an authenticated loopback service that uses Ollama through its OpenAI-compatible API, exposes only three compiled read-only host probes, records content-free audit evidence, runs under a hardened systemd account, and supports controlled backup, upgrade, rollback, and removal.

Trace the SSH user, host, selected key, agent, server policy, authorized_keys path, permissions, and authentication log before changing access controls.

Diagnose MySQL ERROR 1045 by proving the selected server, transport, client origin, matching user@host account, authentication plugin, lock state, password state, and TLS policy before changing credentials or grants.

Install Dovecot, set mailbox location, require TLS, protect certificates, choose authentication mechanisms, constrain listeners, and test IMAPS and STARTTLS.