What enters the map

Destination: Hostname conventions, environment, owner and business purpose.
Connection: Protocol, port, emulation, gateway and expected host-key review.
Authentication: Approved methods and custody—never private key material or passwords.
Operator context: Who uses the route, from which platform and under which change process.

Audit itinerary

Collect a redacted session inventory and interview a representative operator group.
Trace direct, gateway, firewall and forwarded paths as separate route segments.
Mark ownership gaps, duplicated defaults and fragile personal conventions.
Return a prioritized route book and a pilot-sized standardization plan.