Read the exact command before approving.

Reject chained commands you did not ask for.

Re-state the allowlist after compacting.

Stop if a command touches secrets.

Smoke-test after the one command.

Change one variable at a time and confirm what actually helped.

If a company policy is involved, rule that out before chasing client settings.

Write the working steps into a short checklist for next time.

Export or screenshot a good setup so reinstalls are faster.

If it still flakes, retest on a clean network such as phone hotspot.