Win11 Storage Governance

Workflow

1. Clarify scope: template-only, audit-only, or execute-on-this-device. Default to template-only unless the user explicitly asks to inspect or change the local machine.
2. Load references/safety-model.md before recommending deletion, junctions, package-manager changes, or environment-variable changes.
3. Load references/runbook.md when producing a full plan, checklist, migration guide, or remediation sequence.
4. Load references/device-profile-template.md when the user wants a reusable template for another Windows 11 device.
5. Produce a staged plan: observe, classify, clean, migrate, automate, verify, rollback.

Privacy Rules

• Do not read %USERPROFILE%, AppData, registry hives, package-manager state, shell history, environment variables, or local project folders unless the user explicitly requests a local audit/execution.
• Do not copy personal paths, usernames, machine names, package lists, logs, or environment values into reusable templates.
• When examples need paths, use neutral placeholders such as <User>, <DownloadDrive>, <DevCacheRoot>, and <ModelDrive>.
• Treat this repository's example device layout as a model pattern, not as a user's private configuration.

Safety Gates