hunt-new-programlisted

<context> **Flags:** - `--auto` - Use the provided brief as the primary source of truth and ask only for missing critical facts. </context> <objective> Initialize a threat hunting program. These hunt-native artifacts are the source of truth for the program. **Creates:** - `.planning/config.json` - `.planning/MISSION.md` - `.planning/HYPOTHESES.md` - `.planning/SUCCESS_CRITERIA.md` - `.planning/HUNTMAP.md` - `.planning/STATE.md` - `.planning/environment/ENVIRONMENT.md` - `.planning/QUERIES/` - `.planning/RECEIPTS/` Bootstrap should only scaffold the program. Do not seed sample queries, sample receipts, or completed phases. Unknown environment facts, tools, retention windows, and owners must remain `TBD` unless the operator confirms them. Confirmed bootstrap facts such as the program name, mode, opened date, and initial phase/status must be filled immediately. **After this command:** Run `/hunt-map-environment` to capture confirmed facts, or edit `.planning/environment/ENVIRONMENT.md` manually and continue later. </objective> <execution_context> @.github/thrunt-god/workflows/hunt-bootstrap.md @.github/thrunt-god/templates/config.json @.github/thrunt-god/templates/mission.md @.github/thrunt-god/templates/hypotheses.md @.github/thrunt-god/templates/success-criteria.md @.github/thrunt-god/templates/hunt-program-huntmap.md @.github/thrunt-god/templates/hunt-state.md @.github/thrunt-god/templates/environment-map.md </execution_context> <process> Execute the bootstrap workflow