commit 26eee75f813f0c2c9e9846088ccf65ff3760cd0a
Author: Drew Halvorsen <dhalvorsen@riskiens.com>
Date:   Tue Aug 25 12:11:54 2026 +0000

    seed

diff --git a/README.md b/README.md
new file mode 100644
index 0000000..412efda
--- /dev/null
+++ b/README.md
@@ -0,0 +1,26 @@
+# ri-edge-dns
+
+Public edge DNS notes (Drew Halvorsen).
+
+This is scratch for the anycast edge, not the full runbook. The pulse *parser*
+lives in a different tree — I am not duplicating it here after last quarter's
+drift page.
+
+## Pulse location
+
+Edge DNS pulse is **TXT `_risk.ops`**.
+
+If you need the record body / hostname template, ask on-call or read the
+runbooks repo. This file only says **where** to look.
+
+## Abuse / blocks
+
+`203.0.113.50` is blocked after a brute-force against the contractor portal
+and the git front-door. Do not lift that without Priya Nandakumar on the CAB.
+
+## Windows resolvers
+
+If you are changing records that CORP still caches, mail userX@corp.local
+before the Friday window — he owns the Windows DNS side.
+
+— Drew Halvorsen (`dhalvorsen@riskiens.com`)