CAS Platform Agent Guide

Scope

This repository owns Azure infrastructure and operational evidence for CAS. Do not add application business logic or workstation configuration.

Read .planning/PROJECT.md, .planning/REQUIREMENTS.md, and the nearest architecture or context document.
Research Azure resource behavior before changing module contracts.
Keep infra/main.bicep orchestration-only and modules concern-focused.
Use system-assigned managed identity, least privilege, and no secrets.
Run ./scripts/validate.ps1 and review Azure what-if before deployment.
Never deploy Azure resources without explicit authorization.

Use GSD planning artifacts under .planning/. Plan and verify each roadmap phase before marking requirements complete.