diff --git a/.claude/launch.json b/.claude/launch.json
index 581efe8..8e2ff83 100644
--- a/.claude/launch.json
+++ b/.claude/launch.json
@@ -25,6 +25,12 @@
       "runtimeArgs": ["-m", "http.server", "8899", "--directory", "viz"],
       "port": 8899
     },
+    {
+      "name": "godstrument-verify",
+      "runtimeExecutable": "sh",
+      "runtimeArgs": ["-c", "python3 -c \"import json; c=json.load(open('config.json')); c['ws_port']=8791; c['http_port']=8891; c['osc_in_port']=9010; json.dump(c, open('/tmp/gs_verify_config.json','w'))\" && .venv/bin/python run.py --no-browser --profile minimal --config /tmp/gs_verify_config.json"],
+      "port": 8891
+    },
     {
       "name": "godstrument-test",
       "runtimeExecutable": "sh",
diff --git a/CLAUDE.md b/CLAUDE.md
new file mode 100644
index 0000000..88e2faa
--- /dev/null
+++ b/CLAUDE.md
@@ -0,0 +1,7 @@
+# Godstrument — Claude context
+
+Music-instrument web app; hosted at godstrument.pro on the **botchat** VPS (`humanjing@100.71.119.27`, exposed via Cloudflare Tunnel — NOT dealgod, despite earlier notes). App dir `/home/humanjing/godstrument` (not a git checkout). Deploy = rsync git-tracked files only (`--files-from=<(git ls-files)`, never `--delete`, never push `godstrument_users.db`/`auth_secret`/`patches/`) then `sudo -n systemctl restart godstrument`. Origin is Gitea `ssh://git@100.71.119.27:222/monster/Godstrument.git`. See [[godstrument-pro-deploy]].
+
+- **Canon gotcha:** the real spec prose lives in `viz/index.html` (grimoire text around line ~950); `GODSTRUMENT_MANUAL_SOURCE.md` claims to be exhaustive but has drifted before (Earth Echo / Schumann layer was missing). When they disagree, **viz/index.html is truth** — update the manual to match, not the other way.
+- Secrets (Cloudflare token etc.): read from `.env`/local files, never from chat. A CF token was pasted in chat once and rolled — don't repeat that.
+- First page load after a deploy is slow (cold start) — wait before declaring it broken.