# Node Guard local admin runbook template

Download this file and fill it in on a system your organization controls. Do not send the completed file to Network Decode. Do not write passwords, API tokens, private keys, customer data, or raw network captures here.

## 1. Scope and owner

- Application or service:
- Environment (lab, staging, production):
- Responsible operator:
- Planned review date:
- Supported Node.js runtime:
- Node Guard package version:
- Source repository or release tag:
- Artifact SHA-256 (public hash only):

## 2. Local setup

- Framework and entry point:
- Trusted proxy or source-attribution configuration reviewed: [ ]
- Policy file path on the local system:
- Current policy mode (start with OBSERVE):
- Application credential stored in organization secret store: [ ]
- Management credential stored separately: [ ]
- Webhook secret stored separately, if used: [ ]
- Credential owner and rotation date (no secret values):

## 3. Verification

- Synthetic request or event fixtures used:
- Expected ALLOW / THROTTLE / DENY outcomes:
- Policy validation result:
- Security Replay result:
- Webhook signature, timestamp, and replay tests, if used:
- Observed false positives or gaps:
- Evidence location in your own system:

## 4. Change and rollback

- Change proposed:
- Approver or reviewer, if available:
- Activation date and time:
- Rollback command or procedure:
- Previous config or artifact location:
- Post-change checks:
- Incident contact:

## 5. Release decision

- [ ] Exact package version and artifact identified
- [ ] Local credentials held outside source control
- [ ] OBSERVE results reviewed against expected traffic
- [ ] Rollback tested on a noncritical system
- [ ] Production scope and operator authorization recorded

The free Builder guides and this template do not deploy software, manage a host, issue a paid license, or authorize HoneyMesh kernel enforcement.