# Customer environment bring-up checklist

- [ ] Snowflake automation user + key pair created
- [ ] Secrets installed in CI / secret store
- [ ] TF state backend ready (customer-controlled preferred)
- [ ] Customer repo pushed with blueprint pin in `intent.yaml`
- [ ] `.cursor/skills/platform-ops` present (or `platformctl skills install`)
- [ ] First `platformctl validate` + `plan` succeed
- [ ] First apply path agreed (CI vs operator)
- [ ] Drift process documented (`platformctl drift` + inventory source)
- [ ] Runbook: add domain / decision / blueprint upgrade