---
id: w7/m7/t004
title: Simplify — /simplify over the code/manifests this milestone changed
worker: worker7
status: todo
estimate: 20m
depends_on: [w7/m7/t003]
---

## Objective

Run `/simplify` over what this milestone changed — the `+kubebuilder:rbac` markers + regenerated role, any bex-api RBAC manifest edits, and the CI-guard assertion — keeping it clean and behavior-preserving (no permission broadening).

## Context

- Scope is the files touched by t001–t003.
- `/simplify` is quality-only; do not relax any RBAC scoping in the name of simplification.

## Steps

1. Run `/simplify` over the milestone's changed files.
2. Apply behavior-preserving cleanups; re-run the CI guard + operator/backend builds.

## Files

- The files changed by t001–t003 (RBAC markers/manifests, `gitops-validate.sh`).

## Acceptance criteria

- [ ] `/simplify` run over the diff; cleanups applied without broadening any grant.
- [ ] CI guard still passes; operator + bex-api still build.

## Out of scope

- New scoping/behavior; new tests (t005).
