Cover the right column. Say the fact before you reveal it.
One line per term, spanning the whole deck.
TermThe one fact
Dry-run policyLogs violations, blocks nothing
Billing budgetNotifies only, never caps spend
HyperdiskCurrent default, replacing Persistent Disk
Spot VM30-second reclaim notice, 60-91% off
GKE AutopilotBills per Pod request, requests mandatory
Agent RuntimeManaged session state + tool-calling for agents
CMEK disabledData permanently unreadable, by design
Cloud NGFWSecure Tags only, no plain network tags
Data Access logsOff by default, not retroactive once enabled