Complete procedures with a way back.

Combine input and output moderation, privacy-preserving safety identifiers, per-user and shared rate limits, bounded generation, refusal UX, incident evidence, review queues, and an appeal process.

Build a production incident assistant that accepts signed alerts and bounded log excerpts, removes credentials and personal identifiers before durable storage, links every conclusion to immutable evidence, suggests only reviewed runbooks, drafts rather than performs external actions, requires an incident commander to approve dispatch, and exports a portable incident record.

Compare protected refresh-only and normal plans, classify authority and impact, contain incidents, accept reality in HCL or restore intent through a saved plan, and verify full convergence without automatic apply.

Create tested Prometheus 3.13.1 rules and an Alertmanager 0.32.1 HA route tree with stable labels, grouping, deduplication, inhibition, protected secrets and a safe nonpaging test lane.

Design a question-led RHEL 9 audit policy, validate architecture-aware rules and capacity, reconstruct multi-record events, protect remote evidence, and introduce immutable mode safely.