# terraform/

Classify before running anything. Skill-based admin roots have SKILL.md only.

| Purpose | When | SKILL.md |
|---|---|---|
| account-init | before the first `cp9 up` on a runtime AWS account or GCP Dedicated project | [`cp9-developer/SKILL.md`](cp9-developer/SKILL.md) |
| cleanup-lock | once in 804, before cleanup workflows acquire the global lease | [`aws/cp9-cleanup-lock/SKILL.md`](aws/cp9-cleanup-lock/SKILL.md) |
| Dedicated registration | connecting a Dedicated shoot account to existing seed EKS | [`aws/init-dedicated-dataplane/SKILL.md`](aws/init-dedicated-dataplane/SKILL.md) |
| cloud-cost identity | enabling a scope in `.github/cloud-cost-scopes.json` | [`cloud-cost-report-identity/SKILL.md`](cloud-cost-report-identity/SKILL.md) |
| session-runtime | every session | `cp9 up` (`aws/cp9-substrate`, `aws/cp9-gcp-runtime-identity`, `gcp/cp9-dedicated-regional`) |

Process: [`live-floor.md`](live-floor.md).