Appendix A: Every click you'll make, and every key

The whole guide, from nothing to a live site, as a list of what a human has to do. Everything not on this list is the agent.

Your clicks

Your clicks, ticked off

0/ 15

1. 01Step 1Sign up for Cloudflare, turn on 2FA (and pay for Workers Paid, $5/month, only if you need it)Payment, and it's your identity
2. 02Step 1Buy your domain (or later, paste two nameservers at your old registrar)Payment / someone else's account
3. 03Step 2Sign up for GitHub, turn on 2FAYour identity
4. 04Step 2Subscribe to Claude Pro, install the desktop appPayment
5. 05Step 3Bitwarden: organization, project, machine account, access tokenIt's the login the agent uses
6. 06Step 3Paste the access token into your keychain (one command)Same
7. 07Step 4Create the Cloudflare bootstrap token from a template, paste it into BitwardenCloudflare has no sign-in flow that can create tokens
8. 08Step 5Turn on bypass permissions, pick Opus 5.5Your settings
9. 09Step 5Click Authorize when GitHub opens in the browserProving it's you
10. 10FormsClick the verification email from Cloudflare Email RoutingProving the inbox is yours
11. 10bForms (optional)Reply as hello@yourdomain from Gmail: make a Google app password and add it in Gmail's "Send mail as"It's your Google password
12. 11AnalyticsSign in to Google when the browser opensProving it's you
13. 12AnalyticsCreate a GA4 account, accept terms, paste the robot's emailGoogle requires a human to accept terms
14. 13AnalyticsCreate a Tag Manager account, accept terms, paste the robot's email (Administrator + container Publish)Same, and Google treats granting access as a human decision
15. 14Store (Path C)Sign up for Stripe, copy the secret key into Bitwarden, complete Stripe's business verificationStripe verifies a real person and business

Fourteen things. Most take under a minute.

Every key

Not in the vault:

• Bitwarden access token: in your computer's keychain, because it unlocks the vault.
• GitHub login: kept by the GitHub CLI in your computer's keychain after you click Authorize.

When keys expire

The agent's Cloudflare token lasts a year, and GitHub's login lasts until you revoke it. When one expires the agent will say so. Tell it "make a new one", and if it needs a new bootstrap token, repeat click 7.