| Mounted Git writer | NAVIGATOR_GIT_REPO_ROOT |
| Deployment's own organization | NAVIGATOR_GITHUB_ORG — required once a deployment is named, no default |
| Governance write boundary | NAVIGATOR_GIT_HOST — read only by ops github setup, no default |
| GitHub App identity | NAVIGATOR_GITHUB_APP_ID |
| GitHub App proof | NAVIGATOR_GITHUB_APP_PRIVATE_KEY, NAVIGATOR_GITHUB_INSTALLATION_ID |
| GitHub endpoint | NAVIGATOR_GITHUB_API_BASE |
| GitHub webhook receiver | NAVIGATOR_GITHUB_WEBHOOK_SECRET, NAVIGATOR_GITHUB_CANONICAL_REPOSITORY |
| Receiver identity and Restate submit | NAVIGATOR_GITHUB_APP_LOGIN, RESTATE_INGRESS_URL, RESTATE_AUTH_TOKEN |
| GitHub concurrency cap | NAVIGATOR_GITHUB_MAX_CONCURRENT |
| GitHub revision cap | NAVIGATOR_GITHUB_MAX_REVISE_ROUNDS |
| GitHub daily token cap | NAVIGATOR_GITHUB_MAX_DAILY_TOKENS |
DevX Slack worker (in workflows-service) | SLACK_WEBHOOK_URL |
| Main content roots | NAVIGATOR_PUBLIC_DIR, NAVIGATOR_BLOG_DIR, NAVIGATOR_WORKSHOPS_DIR |
| Other content roots | NAVIGATOR_MARKETING_DIR, NAVIGATOR_EVENTS_DIR, NAVIGATOR_FOUNDATION_DIR |
| CLI login file | NAVIGATOR_CREDENTIALS_FILE, NAVIGATOR_CONFIG_DIR |
| CLI live inquiry | NAVIGATOR_NOTATION_TEMPLATE, NAVIGATOR_SPEECH_BACKEND |
| Harness worktree/cache | NAVIGATOR_WORKTREE_PATH, NAVIGATOR_CHROME_CACHE_DIR |
| Vertex coordinates | NAVIGATOR_GCP_PROJECT_ID, NAVIGATOR_GCP_LOCATION, GOOGLE_METADATA_URL |
| AIDA router | NAVIGATOR_ROUTER_MODEL |
| Contract reviewer | NAVIGATOR_CONTRACT_REVIEW_MODEL plus the same GCP project, location, and metadata variables |
| On-chain attestation | NAVIGATOR_ONCHAIN_BACKEND, SOLANA_RPC_URL, SOLANA_PROGRAM_ID, SOLANA_SIGNER_SECRET |
| Billing export | BILLING_EXPORT_TABLE, BIGQUERY_PROJECT |
| Billing notices | BILLING_CANARY_NOTIFY_EMAIL |
| Billing digest | BILLING_DIGEST_NOTIFY_EMAIL, BILLING_DIGEST_WINDOW_DAYS |