CLAUDE.md template

Every property repo carries a CLAUDE.md with exactly these six sections, in this order. Keep each section short — it is an index into the runbook, not a copy of it. The inventory twin is meta/ops/properties.json; agent loops parameterise from that file, never from free text.

# CLAUDE.md

## Identity
What this is, one sentence. Shape/profile (droplet-python | workers-astro |
workers-app | pages | static). Where it runs (droplet IP / worker name / Pages
project) and the live URL.

## Deploy
The exact command(s), in a fenced block, and who runs them (CI via GitHub
Actions / by hand). Note anything the command does NOT do (e.g. "never touches
the database or server secrets").

## Verify
The post-deploy smoke: the health endpoint, the expectText string, the one
command that proves last night worked.

## Danger list
The never-do items for this repo, each with its one-line reason. Standing
entries that apply portfolio-wide:
- meta-monitor's deployed CF_API_TOKEN is read-only on purpose — never use it
  for writes, never widen it.
- Never scp a local database over a droplet's — the droplet owns the graph.
- Never hand-edit schema on a box — numbered migration or nothing.
- Secrets live in their stated locations; never copy one into a repo, an
  issue, or a log.

## Secrets
NAMES and locations only, never values. Where each lives (droplet env file /
wrangler secret / GH Actions secret) and the rotation note.

## Links
Runbook, PROPERTIES.md row, dashboard(s), the live site, the org repo.