Buy ifrit and build the range (ADR-0017)

[Gerrrt]

ifrit, the offensive range's host, decided by ADR-0017 ("Buy ifrit for
IOPS and keep the range disposable") and specced there. #96 closed on the
decision and the runbook, and the purchase lost its tracker — the roadmap
still ends its entry with "what is left is the purchase itself and the
build", and ADR-0015 still says "ifrit is unpurchased". Same shape as
#102 → #404 and #95 → #413; this is the tracker.

What is decided (ADR-0017)

• Form: a quiet SFF or mini box, not rack-mounted, one NIC, on a Green
  (VLAN 30) access port of neo and an outlet on the PDU.
• Disk: NVMe. Not a spindle, not a mirror — the range is disposable by
  decision and gets no backups and no PBS.
• RAM: two socketed slots, 32 GB fitted; the second slot is the fix if
  four concurrent targets and a BloodHound ingest do not fit — "a memory
  kit rather than a machine".
• Address: VLAN 30, per ADR-0014; the attack VM is its only dual-homed
  guest, the targets sit on a bridge with no physical port.

What it waits on

ADR-0017 and build-the-playground.md §0 put three things ahead of it, and
they are now: #101's estate (the domain, #414, and the SOC stack, #266/#267)
— an attack VM pointed at an uninstrumented estate teaches nothing; #234's
tripwire (armed and verified 2026-09-08); #235 (decided, the iLO stays, and
the BMC hardened 2026-09-09). So the purchase is gated on #414 being built,
and is the last purchase on the estate's list, not the next.

Order of work

1. Buy it, to the spec above, when Build the lab Windows domain on Saruman (ADR-0029) #414's domain is up. The two SM863a SSDs
   bought under Fit the two SSDs in Saruman, and re-derive what the spindles decided #418 are for Saruman, not this box; Fit the two SSDs in Saruman, and re-derive what the spindles decided #418 says the range
   still needs NVMe of its own.
2. build-the-playground.md §1–§9: rack, the two bridges, move Saruman
   to 10.0.30.20, close the management plane, the attack VM, the targets,
   the four properties, prove a leak reports itself.
3. The optional Loki rule from ADR-0014 (a 172.30.30.0/24 source logged
   as a block on igc0.30) lands here, once the subnet is real.

Purchases this needs

The box. Nothing else — and a memory kit only if 32 GB proves short.

[Gerrrt]

2026-09-17 — the gate read, and the documents reconciled. No purchase, no build.

The gate, as it stands today

	State
#414 — the lab domain	Open. Wave 2. This is the gate
#266 / #267 — the SOC stack	Open. Wave 2, behind the domain
#101 — the umbrella	Open, and not a thing anyone builds; the two rows above are what it means here
#234 — the ImaginationLAN tripwire	Closed. Armed and verified 2026-09-08
#235 — does shiva stay on VLAN 30	Closed. Decided 2026-09-08 (ADR-0033); the hardening it owed done 2026-09-09

So the purchase is still gated on #414, and is still the last on the estate's
list rather than the next. Nothing was bought and nothing was built.

What did land — #490

The half of this issue that does not need the hardware: three documents that
still described the purchase through the closed #96.

• docs/roadmap.md — the Infrastructure entry was keyed to Procure ifrit and build the playground — after the main network is finished #96 and ended
  "What is left is the purchase itself and the build", which reads as though
  the money were the next thing to spend. Re-keyed to this issue, with the gate
  written out as above. The file had been contradicting itself since this issue
  was opened: Everything still to buy at the top already said "the last
  purchase on this list, not the next".
• docs/runbooks/build-the-playground.md — §0's prerequisite table read as
  three open to-dos, two of which had been closed for over a week. It gains a
  State column, so a reader arriving on build day does not re-arm the
  tripwire or re-harden the BMC, and the blocking moves into a paragraph beneath
  the table where it cannot be skimmed past.
• docs/runbooks/build-the-lab-guest.md — Saruman .20 is after this
  issue, not after Procure ifrit and build the playground — after the main network is finished #96.

Left alone on purpose

• ADR-0015's "ifrit is unpurchased" — still true. It stops being true on
  the day the box is bought, and that is the right time to touch it.
• The buy list and its One more, later paragraph — already correct, and
  check_buy_list ties both to README's count.
• The #96 references in ADR-0014, -0017, -0029, -0031 and the Decide whether the lab VLAN needs egress filtering #86 Done
  entry — history, and correct as history (ADR-0001).
• ADR-0014's optional Loki rule (a 172.30.30.0/24 source logged as a block
  on igc0.30) — still step 3 of the order of work above, once the subnet is
  real. It was considered for authoring ahead of the hardware, the way
  stacks/sensitive/ was authored ahead of trinity, and deliberately not:
  §9 already proves the property by hand on build day, and a rule that cannot
  fire until a subnet exists is not something this estate keeps.
• A candidate-machine shortlist — ADR-0017 and the roadmap both say the
  model, CPU and disk are chosen at the till and named only afterwards, in
  hardware.md. Pricing them now would be stale by the time Build the lab Windows domain on Saruman (ADR-0029) #414 clears.

make lint and make check-docs both pass, with check_docs' output identical
to the baseline — no counted fact moved.