Problem

The init wizard step ordering puts exposure mode (step 3) before Slack, channels, skills, and identity. Exposure mode is the outermost network layer concern and should come last, after the user has configured what the agent is and does.

Current order

1. Provider
2. Security posture
3. Exposure mode ← too early
4. Slack
5. Channels
6. Web search
7. Browser automation
8. Identity (includes workspaces dir)
9. External skills
10. Health check

Proposed order

1. Provider
2. Security posture
3. Slack → Channels (communications)
4. Web search
5. Browser automation
6. Identity (includes workspaces dir)
7. External skills
8. Exposure mode ← moved to end, before health check
9. Health check

Rationale

• Exposure mode is the outermost concern — how the agent is reachable from outside
• By the time you reach it, you already know what the agent does, who it talks to, and what it can access
• The webhook toggle in the exposure step makes more sense after channels and skills are configured
• Natural "inside-out" progression: who trusts it → where it talks → what it can do → how to reach it

Related

• Init wizard: security posture step mixes audience with exposure/channel concerns #537 — security posture step copy mixes audience with exposure concerns