sync: auto-sync from GURU-5070 at 2026-07-07 10:26:45

Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-07-07 10:26:45

.claude/CLAUDE.md

@@ -30,6 +30,12 @@ failures, production risk). Bump one tier for: security, auth, credential, migra
 production, data-loss. Detail: EXTENDED + `.claude/OLLAMA.md`.
 
 ## Key rules (always)
+- **Simplest solution FIRST.** Start with the least complex thing that could answer the
+  problem, confirm it works, and only THEN graduate to more advanced/complicated approaches
+  as the simple one proves insufficient. Don't reach for SSH/plink/multi-hop tooling when a
+  one-shot query (a single DNS lookup, one API call, one command) would answer it. E.g. "what
+  IP does the UDM think X is?" = `nslookup X <udm-ip>`, not shelling into the device. Escalate
+  deliberately, not by default.
 - **NO EMOJIS.** Use ASCII markers: `[OK]` `[ERROR]` `[WARNING]` `[INFO]` `[CRITICAL]`.
 - **Skill-first — if a skill/command covers the task, USE IT; never hand-roll the API.**
   When a request maps to an installed skill or slash-command, INVOKE THAT SKILL instead of