---
name: ndo-repro
description: Reproduce or validate an NDO issue through approved local build, dev-environment deployment, BOM API calls, and live logs. Use only when the user names the service and target environment.
---

# ndo-repro

## Safety boundary
Read-only diagnosis is allowed after environment selection. Build, push, deploy, rollback, and credential changes require explicit approval for the named environment and action.

## Workflow
1. Run `scripts/doctor.sh` and resolve the environment using the bundled registry.
2. Build and test locally; confirm the exact image reference.
3. Before a shared-environment mutation, restate service, environment, image, and rollback plan; wait for approval.
4. Drive the smallest API flow that tests the acceptance criterion, then collect image, response, and log evidence.

## Rules
- Read credentials from approved environment variables or a secret manager; never embed or echo them.
- Use paths relative to this package.
- Do not infer a pass from a nearby signal.

## Output
Report approval, deployed image, criterion-by-criterion evidence, and untested criteria.