- Create a focused branch and describe the operational outcome.
- Update architecture, threat model, and parameter examples when behavior changes.
- Run
./scripts/validate.ps1. If local execution policy blocks scripts, usepowershell.exe -NoProfile -ExecutionPolicy Bypass -File .\scripts\validate.ps1. - Run
./scripts/what-if.ps1against a non-production subscription when the change affects Azure resources. - Include the reviewed what-if summary in the pull request.
Never introduce deployment commands into validation scripts. Production promotion requires human approval and a separately governed delivery workflow.