diff --git a/.claude/rules/stack-and-commands.md b/.claude/rules/stack-and-commands.md
index dc53ac6..dc279b4 100644
--- a/.claude/rules/stack-and-commands.md
+++ b/.claude/rules/stack-and-commands.md
@@ -1,19 +1,22 @@
 ## Stack
 
-<!-- TODO: Fill in language, frameworks, and key dependencies -->
-- **Language:**
-- **Key deps:**
+- **Language:** Terraform (HCL), cloud-init, Ansible, Bash
+- **Key deps:** Hetzner/HostEurope provisioning, SOPS + age for secrets, repo-local git hooks (`.githooks`)
 
 ## Dev Commands
 
 ```bash
-# TODO: Fill in the standard commands for this repo
-
-# Install dependencies
-
-# Run tests
-
-# Lint / type check
-
-# Build / package (if applicable)
+make help            # list all targets
+make hooks           # configure repo-local git hooks (secrets guard)
+make check-secrets   # fail if anything in secrets/ is not SOPS-encrypted
+make sops-edit       # edit global secrets with SOPS
+make sops-encrypt FILE=secrets/foo.yaml
+make tf-fmt          # terraform fmt
+make tf-init && make tf-plan   # plan (needs decrypted HCLOUD_TOKEN)
+make tf-apply        # provision — production-touching
+make tf-destroy      # tear down — destructive, operator only
 ```
+
+`tf-apply`/`tf-destroy` change production infrastructure — operator approval
+required. No unit test suite; validation is `tf-plan` + the server test suite
+workplans.
diff --git a/workplans/RAIL-HO-WP-0001-hosteurope-bootstrap.md b/workplans/RAIL-HO-WP-0001-hosteurope-bootstrap.md
index 6463257..c2309f8 100644
--- a/workplans/RAIL-HO-WP-0001-hosteurope-bootstrap.md
+++ b/workplans/RAIL-HO-WP-0001-hosteurope-bootstrap.md
@@ -4,7 +4,7 @@ type: workplan
 title: "Secure Single-Server Bootstrap at HostEurope"
 domain: financials
 repo: railiance-infra
-status: completed
+status: finished
 owner: railiance
 topic_slug: railiance
 repo_goal_id: 9e835b82-acca-493a-943f-2553ffe0bf54
diff --git a/workplans/RAIL-HO-WP-0002-server-spec-and-test-suite.md b/workplans/RAIL-HO-WP-0002-server-spec-and-test-suite.md
index 41a6761..29ef533 100644
--- a/workplans/RAIL-HO-WP-0002-server-spec-and-test-suite.md
+++ b/workplans/RAIL-HO-WP-0002-server-spec-and-test-suite.md
@@ -4,7 +4,7 @@ type: workplan
 title: "Server Specification and Automated Test Suite"
 domain: financials
 repo: railiance-infra
-status: completed
+status: finished
 owner: railiance
 topic_slug: railiance
 state_hub_workstream_id: "8fed53c2-4c39-4471-8bb9-61f58771fe0c"
diff --git a/workplans/RAIL-HO-WP-0003-5repo-stack-restructure.md b/workplans/RAIL-HO-WP-0003-5repo-stack-restructure.md
index 7a9d7bd..748fed5 100644
--- a/workplans/RAIL-HO-WP-0003-5repo-stack-restructure.md
+++ b/workplans/RAIL-HO-WP-0003-5repo-stack-restructure.md
@@ -4,7 +4,7 @@ type: workplan
 title: "Railiance 5-Repo Stack Restructure"
 domain: financials
 repo: railiance-infra
-status: completed
+status: finished
 owner: railiance
 topic_slug: railiance
 state_hub_workstream_id: "3ae0afc5-13f2-4e6c-aea7-1c1fb9f1ab81"