# Docs Index

Keep top-level `docs/` focused on operator-facing and externally useful material.

Canonical docs here:

- `ARCHITECTURE.md`
- `CONTROL_MAPPING.md`
- `DEPLOYMENT.md`
- `ENTERPRISE.md`
- `ENTERPRISE_DEPLOYMENT.md`
- `ENTERPRISE_SECURITY_POSTURE.md`
- `MCP_CLIENT_GUIDES.md`
- `MCP_SERVER.md`
- `PERMISSIONS.md`
- `RELEASE_VERIFICATION.md`
- `SECURITY_ARCHITECTURE.md`
- `SUPPLY_CHAIN.md`
- `THREAT_MODEL.md`

Graph docs:

- `graph/CONTRACT.md` — graph coverage, accuracy guarantees, scaling
  boundaries, non-promises, and known gaps
- `graph/SECURITY_GRAPH_UX_RUBRIC.md` — review rubric for
  fix-first security graph usability and actionability

Archived or historical writeups live under [`docs/archive`](archive/README.md).
