## Lesson — Set LLM temperature to zero during build

**Tags:** security, llm, devops

Set LLM temperature to zero during build or rule-compilation steps to prevent non-deterministic output that would invalidate manifest hashes and break CI attestation.
