# D006 — Customer delivery mode A

- **Status:** active
- **Date:** 2026-07-15

## Decision

Default landing: customer hosts **git + CI + secrets + TF state backend + Snowflake automation user**. Operator keeps blueprint; customer repo pins blueprint version. Optional modes: operator-run apply (retainer), or vendored blueprint for air-gap.

## Why

Matches consulting delivery; minimizes IP leakage; uses familiar Terraform PR workflows for customer DevOps.

## Alternatives rejected

- Shipping full blueprint source into every customer by default
- Snowflake Native App as v0 packaging