Complete procedures with a way back.

Threat-model every untrusted source and sensitive sink, minimize capabilities and context, enforce typed tools and egress, sandbox code, bind approvals, red-team end to end, and rehearse containment.

Pin Helm and chart inputs, separate secrets from values and release history, render and server-validate manifests, stage upgrades with bounded waits, verify application behavior, roll back only across compatible data, and operate hooks, CRDs, drift, and secret rotation.