1# Depth Probe — Meet the User Where They Are
2 
3The VM Creator adapts its questioning to the user's expertise and intent. A beginner asking for a "dev VM" should not get peppered with networking and egress questions. An advanced networking engineer specifying "VMSS behind App Gateway with private endpoints" should not be asked whether they want a public IP.
4 
5## Philosophy
6 
71. **Never ask a question whose answer can be inferred or safely defaulted.**
82. **Batch silent inferences into a Plan Card.** Defaulted decisions should be visible and editable.
93. **Defaults ladder.** When you must ask, prefer `[recommended default] / [show alternatives] / [I have specifics]`.
104. **Branching is signal-driven, not flag-driven.** Reclassify any time the user volunteers a deep signal.
11 
12## Classification — read the initial request
13 
14Score each signal that appears in the user's first 1-2 messages. The highest-scoring branch wins; a user can be in multiple branches.
15 
16| Signal phrase / keyword | Branch |
17|---|---|
18| "VNet", "subnet", "NSG", "egress", "private endpoint", "App Gateway", "accelerated networking", "service tag", "UDR", "IPv6", "DNS", "Bastion" | [networking-deep](networking-deep.md) |
19| "vCPUs", "GPU", "memory", "family", "D-series", "N-series", "ephemeral OS disk", "proximity placement", "AMD", "Intel", "generation", "SR-IOV", "trusted launch" | [spec-deep](spec-deep.md) |
20| "spot", "reserved", "savings plan", "hybrid benefit", "autoscale floor/ceiling", "$", "budget", "cheapest", "cost-optimize" | [cost-deep](cost-deep.md) |
21| "managed identity", "Entra", "RBAC", "Key Vault", "JIT", "encryption at host", "CMK", "confidential", "compliance", "FedRAMP", "HIPAA" | [security-deep](security-deep.md) |
22| "dev", "sandbox", "quick", "test out", "play with", "just need", "simple", or nothing specific | [beginner](beginner.md) |
23 
24> **Tiebreak:** prefer the branch that affects the most expensive defaults: Networking > Security > Spec > Cost > Beginner. Networking mistakes are the hardest to undo post-deployment.
25 
26## Cross-branch follow-ups (ask once, after primary branch)
27 
28| Question | When to ask |
29|---|---|
30| "Tags? (env, owner, cost-center)" | Always — but accept "none" without follow-up |
31| "Resource group: existing or new?" | Always — propose `<vm-name>-rg` if new |
32| "Number of instances?" | Only for VMSS |
33| "Orchestration mode (Flexible/Uniform)?" | Only for VMSS — default Flexible |
34 
35## Reclassification mid-flow
36 
37If the user volunteers a deep signal at any step ("oh wait, I also need a NAT Gateway"), jump into that branch's questions for that topic. Never restart the whole flow — append the new questions and update the Plan Card.
38 
39## Anti-patterns
40 
41- ❌ Asking "what OS?" when the user said "Ubuntu sandbox"
42- ❌ Asking about spot pricing for a Windows production VM
43- ❌ Asking 8 networking questions before showing a Plan Card
44- ❌ Defaulting to public IP open to `*` without flagging it in the Plan Card
45- ❌ Burying the cost estimate at the bottom — put it on the Plan Card top row
46