Server hardening playbook where every item is failure/fix/verify

Write your take first — we'll ask for email only when you're ready to publish.