Founder preferences (durable)

Terse replies (<=5 lines unless detail requested); cite file paths, never restate task/report text.
Careful/safe ops on ALL work (founder, 2026-08-28): scripts that mutate anything get preflight checks before mutation, a stated plan, and verify steps after. Idempotent where possible. Confirm gate when interactive.
reachableceo has passwordless sudo for ROOT target only; run-as-other-user must route via sudo runuser -u <user> -- ... (sudo -u prompts password).
Vertical homes are 700; cross-user path tests must run via sudo.
Host is Debian 13 (verified 2026-08-28). Never assume distro/paths/commands - verify.
Founder wants reachableceo PMO/work stack next (for sudo + Bitwarden work), after crossfeed body of work.