Setup
| Note | Type | Scope | Confidence |
|---|---|---|---|
| A long sudo credential cache is unlimited root for every process you run | trap | generic | proven |
| A fresh install has no passwordless sudo, and that silently disables every tool | trap | generic | proven |
| Host keys change on essentially every boot, which constrains both correctness and speed | fact | generic | proven |
