env-audit

# zuvo:env-audit Audit environment variable management for completeness, safety, and consistency across development, staging, and production environments. Single-pass execution. **When to use:** After adding new env vars, before production deploy, when debugging config-related incidents, onboarding new environments, periodic check. **When NOT to use:** Secret scanning in source code (`/security-audit`), CI pipeline config (`zuvo:ci-audit`), infrastructure (`/security-audit`). ## Mandatory File Loading Read every file below before starting. Print the checklist. ``` CORE FILES LOADED: 1. ../../shared/includes/codesift-setup.md -- [READ | MISSING -> STOP] 2. ../../shared/includes/env-compat.md -- [READ | MISSING -> STOP] 3. ../../shared/includes/run-logger.md -- [READ | MISSING -> STOP] 4. ../../shared/includes/retrospective.md -- [READ | MISSING -> STOP] ``` If any file is MISSING, STOP. Do not proceed from memory. --- ## Argument Parsing | Token | Behavior | |-------|----------| | _(empty)_ or `full` | All 8 dimensions, scope = project root | | `[path]` | Scope to a directory (monorepo package, module) | | `--secrets-only` | ENV4 only -- focus on secret exposure | | `--parity` | ENV5 only -- compare environment configurations | --- ## Safety Gates ### GATE 1 -- Read-Only This audit is **read-only**. The only write target is `zuvo/audits/`. FORBIDDEN: - Modifying any `.env`, config, or source file - Creating or deleting environment v...