## Summary

- What changed?
- Why is this needed?
- Which failure mode(s) does this address?

## Failure-Mode Coverage

Select all that apply:

- [ ] `insecure-workload-defaults`
- [ ] `resource-starvation`
- [ ] `network-exposure`
- [ ] `privilege-sprawl`
- [ ] `fragile-rollouts`
- [ ] `api-drift`
- [ ] Not applicable

## Quality Impact

- Hallucination or error pattern reduced:
- Expected quality gain:
- Token-cost impact (higher/lower/neutral):

## Validation Performed

- [ ] Ran markdown/link checks
- [ ] Checked SKILL frontmatter and file structure
- [ ] Verified all referenced files exist
- [ ] (If content change) sanity-checked YAML examples for correctness

## Safety Checklist

- [ ] No secrets or credentials added
- [ ] No contradictory guidance across files
- [ ] Cluster version and API version statements are internally consistent
- [ ] Examples are newly written and not copied from external repos
