Safe commands
Use read-only discovery first: ip addr, ip route, resolver status, failed services, and current firewall state.
Operator runbook
Bring up a local gateway, then validate routing, DNS, fallback, and privacy posture before trusting the deployment.
Confirm recovery access, map interfaces, export current network state, and define failure behavior.
Create device group, DNS ownership, route profile, and fallback behavior in dry-run mode.
Apply only after the operator confirms rollback for firewall, DNS, route, and admin access changes.
Check admin UI, DHCP/DNS behavior, route trace, fallback state, leak posture, and known-good backup.
Use read-only discovery first: ip addr, ip route, resolver status, failed services, and current firewall state.
Disable policy apply, restore known-good route/DNS/firewall state, restart affected services, and confirm local admin access.
Report deployment mode, interface map, policy summary, DNS trace, route trace, fallback behavior, remaining risks, and rollback location.